From 51ee72c2b0f2652f44719ccd5991cdfa8fc51584 Mon Sep 17 00:00:00 2001
From: Prashanth Sundararaman <psundara@redhat.com>
Date: Wed, 9 Dec 2020 10:30:59 -0500
Subject: [PATCH 0001/2157] tests: Enable TPM test for all arches except s390x

With TPM support landing in Fedora-33, enable TPM test for all arches except s390x. A TPM
backend device is not available on s390x to suport TPM
---
 tests/kola/root-reprovision/luks/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index c27672deb4..ae357437bb 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096, "architectures": "x86_64"}
+# kola: {"platforms": "qemu", "minMemory": 4096, "architectures": "!s390x"}
 set -xeuo pipefail
 
 srcdev=$(findmnt -nvr / -o SOURCE)

From 9aa049b4b21b93f828ddd5c255a5c7a5bf17a667 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Dec 2020 04:14:48 +0000
Subject: [PATCH 0002/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 44 +++++++++++++++++++--------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b39dd19614..c6766bb1cd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -31,7 +31,7 @@
       "evra": "2.4.48-10.fc33.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0-0.21.20191104git1c2f876.fc33.x86_64"
+      "evra": "3.0-1.fc33.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-7.fc33.x86_64"
@@ -130,10 +130,10 @@
       "evra": "1.4.3-1.fc33.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "0.8.7-1.fc33.x86_64"
+      "evra": "0.9.0-1.fc33.x86_64"
     },
     "containers-common": {
-      "evra": "1:1.2.0-10.fc33.x86_64"
+      "evra": "1:1.2.0-13.fc33.x86_64"
     },
     "coreos-installer": {
       "evra": "0.7.2-1.fc33.x86_64"
@@ -265,13 +265,13 @@
       "evra": "33-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-repos": {
       "evra": "33-1.noarch"
@@ -328,7 +328,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.3-1.fc33.x86_64"
+      "evra": "1.5.4-1.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -646,7 +646,7 @@
       "evra": "1.0.1-18.fc33.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.2-1.rc1.fc33.x86_64"
+      "evra": "1:2.5.2-1.rc3.fc33.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.7-3.fc33.x86_64"
@@ -712,7 +712,7 @@
       "evra": "2.36-3.fc33.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.2-2.fc33.x86_64"
+      "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.2-10.fc33.x86_64"
@@ -787,7 +787,7 @@
       "evra": "0.3.0-10.fc33.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.2-2.fc33.x86_64"
+      "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.17-1.fc33.x86_64"
@@ -853,7 +853,7 @@
       "evra": "2:0.4.0-2.fc33.x86_64"
     },
     "mozjs78": {
-      "evra": "78.5.0-1.fc33.x86_64"
+      "evra": "78.6.0-1.fc33.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-2.fc33.x86_64"
@@ -877,7 +877,7 @@
       "evra": "0.52.21-8.fc33.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.2-1.rc1.fc33.x86_64"
+      "evra": "1:2.5.2-1.rc3.fc33.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.3-6.fc33.x86_64"
@@ -949,10 +949,10 @@
       "evra": "8.44-2.fc33.x86_64"
     },
     "pcre2": {
-      "evra": "10.35-8.fc33.x86_64"
+      "evra": "10.36-1.fc33.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.35-8.fc33.noarch"
+      "evra": "10.36-1.fc33.noarch"
     },
     "pigz": {
       "evra": "2.4-7.fc33.x86_64"
@@ -1033,16 +1033,16 @@
       "evra": "2:1.0.0-279.dev.gitdedadbf.fc33.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.2-2.fc33.x86_64"
+      "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.2-2.fc33.noarch"
+      "evra": "2:4.13.3-0.fc33.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.2-2.fc33.x86_64"
+      "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "samba-libs": {
-      "evra": "2:4.13.2-2.fc33.x86_64"
+      "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "sed": {
       "evra": "4.8-5.fc33.x86_64"
@@ -1072,7 +1072,7 @@
       "evra": "15-8.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.2.0-10.fc33.x86_64"
+      "evra": "1:1.2.0-13.fc33.x86_64"
     },
     "slang": {
       "evra": "2.3.2-8.fc33.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-17T21:07:34Z",
+    "generated": "2020-12-20T03:43:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-16T21:54:56Z"
+        "generated": "2020-12-19T22:00:30Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-17T00:56:01Z"
+        "generated": "2020-12-20T00:52:56Z"
       }
     }
   }

From 9347c404432e257aa0892ae929b0ea7bb5526eb0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Dec 2020 21:38:16 +0000
Subject: [PATCH 0003/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c6766bb1cd..72f6fbdf8d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1202,13 +1202,13 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-20T03:43:12Z",
+    "generated": "2020-12-20T21:07:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-19T22:00:30Z"
+        "generated": "2020-12-20T04:23:56Z"
       },
       "fedora-updates": {
         "generated": "2020-12-20T00:52:56Z"

From 39ef5c496c47d61fe06cf4f33c933d6174735797 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 21 Dec 2020 21:53:28 +0000
Subject: [PATCH 0004/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 72f6fbdf8d..fef289f222 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -808,10 +808,10 @@
       "evra": "2.5.1-27.fc33.x86_64"
     },
     "linux-firmware": {
-      "evra": "20201118-115.fc33.noarch"
+      "evra": "20201218-116.fc33.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20201118-115.fc33.noarch"
+      "evra": "20201218-116.fc33.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.27-1.fc33.x86_64"
@@ -1202,7 +1202,7 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-20T21:07:41Z",
+    "generated": "2020-12-21T21:08:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1211,7 +1211,7 @@
         "generated": "2020-12-20T04:23:56Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-20T00:52:56Z"
+        "generated": "2020-12-21T01:20:13Z"
       }
     }
   }

From 9f6896a8e0f5057c43f47d1ec697a1bf77492169 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 19 Dec 2020 01:59:58 -0500
Subject: [PATCH 0005/2157] 40ignition-ostree: silence mkfs.xfs

Avoid a bunch of incidental mkfs output in the journal for
ignition-ostree-transposefs-detect.service.
---
 .../modules.d/40ignition-ostree/ignition-ostree-transposefs.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 54ebcc134a..f74c1bd03d 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -102,7 +102,7 @@ case "${1:-}" in
         # boot breaks anyway, but we still want to leave room for everything
         # else so it hits ENOSPC and doesn't invoke the OOM killer
         echo $(( $(grep MemAvailable /proc/meminfo | awk '{print $2}') * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
-        mkfs.xfs /dev/zram"${dev}"
+        mkfs.xfs -q /dev/zram"${dev}"
         mkdir "${saved_data}"
         mount /dev/zram"${dev}" "${saved_data}"
         # save the zram device number created for when called to cleanup

From 33a7393a515c6be8cc89aa1fa3e358033363faac Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 19 Dec 2020 02:01:44 -0500
Subject: [PATCH 0006/2157] coreos-boot-mount-generator: stop mounting
 /boot/efi

On RAID systems we're now going to have multiple ESPs, no one of which is
the "canonical ESP", so there's nothing we can mount here.  Drop the
mount unit.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/694
---
 .../system-generators/coreos-boot-mount-generator  | 14 --------------
 tests/kola/misc-ro                                 |  3 ---
 2 files changed, 17 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index f790b74671..d20186de0d 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -72,18 +72,4 @@ EOF
 # the dependency on the underlying device unit.
 if [ ! -f /run/ostree-live ]; then
     mk_mount /boot boot
-
-    # Only mount the EFI System Partition on machines where it exists,
-    # which are 1) machines actually booted through EFI, and 2) x86_64
-    # when booted through BIOS.
-    if [ "$(uname -m)" = "x86_64" -o -d /sys/firmware/efi ]; then
-        mk_mount /boot/efi EFI-SYSTEM
-        # In the general case the ESP might have per-machine or private
-        # data on it.  Let's not make it world readable on general
-        # principle.
-        # https://github.com/coreos/fedora-coreos-tracker/issues/640
-        cat >>${UNIT_DIR}/boot-efi.mount << EOF
-Options=umask=0077
-EOF
-    fi
 fi
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 7fcfab8a28..4f2dfdd7f0 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -93,9 +93,6 @@ ok LICENSE
 
 case "$(arch)" in
     x86_64|aarch64)
-        if runuser -u core -- ls /boot/efi &>/dev/null; then
-            fatal "Was able to access /boot/efi as non-root"
-        fi
         # This is just a basic sanity check; at some point we
         # will implement "project-owned tests run in the pipeline"
         # and be able to run the existing bootupd tests:

From 2b371eb1cebfb802bdf36ef36ac891de3ef27e40 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 19 Dec 2020 13:51:25 -0500
Subject: [PATCH 0007/2157] 40ignition-ostree: rename
 mount_and_restore_filesystem

Make it clear that mount_and_restore_filesystem locates the filesystem
by FS label.
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index f74c1bd03d..71e193678a 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -63,7 +63,7 @@ get_partition_offset() {
     cat "/sys${devpath}/start"
 }
 
-mount_and_restore_filesystem() {
+mount_and_restore_filesystem_by_label() {
     local label=$1; shift
     local mountpoint=$1; shift
     local saved_fs=$1; shift
@@ -167,23 +167,23 @@ case "${1:-}" in
         # Mounts happen in a private mount namespace since we're not "offically" mounting
         if [ -d "${saved_root}" ]; then
             echo "Restoring rootfs from RAM..."
-            mount_and_restore_filesystem root /sysroot "${saved_root}"
+            mount_and_restore_filesystem_by_label root /sysroot "${saved_root}"
             chcon -v --reference "${saved_root}" /sysroot  # the root of the fs itself
             chattr +i $(ls -d /sysroot/ostree/deploy/*/deploy/*/)
         fi
         if [ -d "${saved_boot}" ]; then
             echo "Restoring bootfs from RAM..."
-            mount_and_restore_filesystem boot /sysroot/boot "${saved_boot}"
+            mount_and_restore_filesystem_by_label boot /sysroot/boot "${saved_boot}"
             chcon -v --reference "${saved_boot}" /sysroot/boot  # the root of the fs itself
         fi
         if [ -d "${saved_esp}" ]; then
             echo "Restoring EFI System Partition from RAM..."
-            mount_and_restore_filesystem EFI-SYSTEM /sysroot/boot/efi "${saved_esp}"
+            mount_and_restore_filesystem_by_label EFI-SYSTEM /sysroot/boot/efi "${saved_esp}"
         fi
         if [ -d "${saved_bios}" ]; then
             echo "Restoring BIOS Boot partition and boot sector from RAM..."
             expected_start=$(cat "${saved_bios}/start")
-            # iterate over each new BIOS Boot partition, by label
+            # iterate over each new BIOS Boot partition, by partlabel
             jq -r "$(query_parttype ${bios_typeguid}) | .[].label" "${ignition_cfg}" | while read label; do
                 cur_part="/dev/disk/by-partlabel/${label}"
                 # boot sector hardcodes the partition start; ensure it matches
@@ -201,7 +201,7 @@ case "${1:-}" in
         fi
         if [ -d "${saved_prep}" ]; then
             echo "Restoring PReP partition from RAM..."
-            # iterate over each new PReP partition, by label
+            # iterate over each new PReP partition, by partlabel
             jq -r "$(query_parttype ${prep_typeguid}) | .[].label" "${ignition_cfg}" | while read label; do
                 cat "${saved_prep}/partition" > "/dev/disk/by-partlabel/${label}"
             done

From b7b7eefa8032148913e4b2c61aef9e9c59924cf0 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 19 Dec 2020 14:06:05 -0500
Subject: [PATCH 0008/2157] 40ignition-ostree: create mountpoint in
 mount_verbose

---
 .../40ignition-ostree/ignition-ostree-transposefs.sh          | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 71e193678a..24d22a9931 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -39,6 +39,7 @@ mount_verbose() {
     local srcdev=$1; shift
     local destdir=$1; shift
     echo "Mounting ${srcdev} ($(realpath "$srcdev")) to $destdir"
+    mkdir -p "${destdir}"
     mount "${srcdev}" "${destdir}"
 }
 
@@ -70,7 +71,6 @@ mount_and_restore_filesystem_by_label() {
     local new_dev
     new_dev=$(jq -r "$(query_fslabel "${label}") | .[0].device" "${ignition_cfg}")
     udev_trigger_on_label_mismatch "${label}" "${new_dev}"
-    mkdir -p "${mountpoint}"
     mount_verbose "/dev/disk/by-label/${label}" "${mountpoint}"
     find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} \;
 }
@@ -135,13 +135,11 @@ case "${1:-}" in
         fi
         if [ -d "${saved_boot}" ]; then
             echo "Moving bootfs to RAM..."
-            mkdir -p /sysroot/boot
             mount_verbose "${boot_part}" /sysroot/boot
             cp -aT /sysroot/boot "${saved_boot}"
         fi
         if [ -d "${saved_esp}" ]; then
             echo "Moving EFI System Partition to RAM..."
-            mkdir -p /sysroot/boot/efi
             mount_verbose "${esp_part}" /sysroot/boot/efi
             cp -aT /sysroot/boot/efi "${saved_esp}"
         fi

From dd848b89434458499433902f9efe0a0910fa27cb Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 22 Dec 2020 15:45:22 -0500
Subject: [PATCH 0009/2157] 40ignition-ostree: add get_partlabels_for_parttype
 helper

---
 .../40ignition-ostree/ignition-ostree-transposefs.sh   | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 24d22a9931..659d18ceca 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -33,6 +33,10 @@ query_parttype() {
     echo ".storage?.disks? // [] | map(.partitions?) | flatten | map(select(try .typeGuid catch \"\" | ascii_downcase == \"$1\"))"
 }
 
+# Print partition labels for partitions with type GUID $1
+get_partlabels_for_parttype() {
+    jq -r "$(query_parttype $1) | .[].label" "${ignition_cfg}"
+}
 
 # Mounts device to directory, with extra logging of the src device
 mount_verbose() {
@@ -181,8 +185,7 @@ case "${1:-}" in
         if [ -d "${saved_bios}" ]; then
             echo "Restoring BIOS Boot partition and boot sector from RAM..."
             expected_start=$(cat "${saved_bios}/start")
-            # iterate over each new BIOS Boot partition, by partlabel
-            jq -r "$(query_parttype ${bios_typeguid}) | .[].label" "${ignition_cfg}" | while read label; do
+            get_partlabels_for_parttype "${bios_typeguid}" | while read label; do
                 cur_part="/dev/disk/by-partlabel/${label}"
                 # boot sector hardcodes the partition start; ensure it matches
                 cur_start=$(get_partition_offset "${cur_part}")
@@ -199,8 +202,7 @@ case "${1:-}" in
         fi
         if [ -d "${saved_prep}" ]; then
             echo "Restoring PReP partition from RAM..."
-            # iterate over each new PReP partition, by partlabel
-            jq -r "$(query_parttype ${prep_typeguid}) | .[].label" "${ignition_cfg}" | while read label; do
+            get_partlabels_for_parttype "${prep_typeguid}" | while read label; do
                 cat "${saved_prep}/partition" > "/dev/disk/by-partlabel/${label}"
             done
         fi

From 16591e9fb71adcefdde87fb3d80bbf2fb698f626 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 19 Dec 2020 22:36:58 -0500
Subject: [PATCH 0010/2157] 40ignition-ostree: copy ESP contents as independent
 filesystems

If the firmware writes to an individual replica, the RAID will
desynchronize.  Linux md will return reads from either replica, and then
any dependent writes could corrupt the filesystem.  To prevent this,
fcct will no longer put the ESP on a RAID; instead we create multiple
independent filesystems and copy the contents to each.  This is okay
because bootupd and fwupd should be the only things that care about the
contents of the ESP.

Don't worry too much about backward compatibility because we're making
this change soon after the functionality landed, and before it was
documented.  For the record, old configs will fail on new systems
(because the partitions will be RAID members) but new configs will
skip copying /boot on old systems (because there's no filesystem labeled
"EFI-SYSTEM").
---
 .../ignition-ostree-transposefs.sh            | 26 ++++++++++++++-----
 1 file changed, 19 insertions(+), 7 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 659d18ceca..fcfddfceda 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -2,6 +2,7 @@
 set -euo pipefail
 
 boot_sector_size=440
+esp_typeguid=c12a7328-f81f-11d2-ba4b-00a0c93ec93b
 bios_typeguid=21686148-6449-6e6f-744e-656564454649
 prep_typeguid=9e1a2d38-c612-4316-aa26-8b49521e5a8b
 
@@ -84,18 +85,19 @@ case "${1:-}" in
         # Mounts are not in a private namespace so we can mount ${saved_data}
         wipes_root=$(jq "$(query_fslabel root) | length" "${ignition_cfg}")
         wipes_boot=$(jq "$(query_fslabel boot) | length" "${ignition_cfg}")
-        wipes_esp=$(jq "$(query_fslabel EFI-SYSTEM) | length" "${ignition_cfg}")
+        creates_esp=$(jq "$(query_parttype ${esp_typeguid}) | length" "${ignition_cfg}")
         creates_bios=$(jq "$(query_parttype ${bios_typeguid}) | length" "${ignition_cfg}")
         creates_prep=$(jq "$(query_parttype ${prep_typeguid}) | length" "${ignition_cfg}")
-        if [ "${wipes_root}${wipes_boot}${wipes_esp}${creates_bios}${creates_prep}" = "00000" ]; then
+        if [ "${wipes_root}${wipes_boot}${creates_esp}${creates_bios}${creates_prep}" = "00000" ]; then
             exit 0
         fi
         echo "Detected partition replacement in fetched Ignition config: /run/ignition.json"
-        # verify all BIOS and PReP partitions have non-null unique labels
+        # verify all ESP, BIOS, and PReP partitions have non-null unique labels
+        unique_esp=$(jq -r "$(query_parttype ${esp_typeguid}) | [.[].label | values] | unique | length" "${ignition_cfg}")
         unique_bios=$(jq -r "$(query_parttype ${bios_typeguid}) | [.[].label | values] | unique | length" "${ignition_cfg}")
         unique_prep=$(jq -r "$(query_parttype ${prep_typeguid}) | [.[].label | values] | unique | length" "${ignition_cfg}")
-        if [ "${creates_bios}" != "${unique_bios}" -o "${creates_prep}" != "${unique_prep}" ]; then
-            echo "Found duplicate or missing BIOS-BOOT or PReP labels in config" >&2
+        if [ "${creates_esp}" != "${unique_esp}" -o "${creates_bios}" != "${unique_bios}" -o "${creates_prep}" != "${unique_prep}" ]; then
+            echo "Found duplicate or missing ESP, BIOS-BOOT, or PReP labels in config" >&2
             exit 1
         fi
         modprobe zram num_devices=0
@@ -118,7 +120,7 @@ case "${1:-}" in
         if [ "${wipes_boot}" != "0" ]; then
             mkdir "${saved_boot}"
         fi
-        if [ "${wipes_esp}" != "0" ]; then
+        if [ "${creates_esp}" != "0" ]; then
             mkdir "${saved_esp}"
         fi
         if [ "${creates_bios}" != "0" ]; then
@@ -180,7 +182,17 @@ case "${1:-}" in
         fi
         if [ -d "${saved_esp}" ]; then
             echo "Restoring EFI System Partition from RAM..."
-            mount_and_restore_filesystem_by_label EFI-SYSTEM /sysroot/boot/efi "${saved_esp}"
+            get_partlabels_for_parttype "${esp_typeguid}" | while read label; do
+                # Don't use mount_and_restore_filesystem_by_label because:
+                # 1. We're mounting by partlabel, not FS label
+                # 2. We need to copy the contents to each partition, not move
+                #    them once
+                # 3. We don't need the by-label symlink to be correct and
+                #    nothing later in boot will be mounting the filesystem
+                mountpoint="/mnt/esp-${label}"
+                mount_verbose "/dev/disk/by-partlabel/${label}" "${mountpoint}"
+                find "${saved_esp}" -mindepth 1 -maxdepth 1 -exec cp -a {} "${mountpoint}" \;
+            done
         fi
         if [ -d "${saved_bios}" ]; then
             echo "Restoring BIOS Boot partition and boot sector from RAM..."

From 7b769f24924ad6945acf38a81736a2138d375756 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 24 Dec 2020 21:37:52 +0000
Subject: [PATCH 0011/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fef289f222..e70ef357a5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -58,7 +58,7 @@
       "evra": "32:9.11.25-2.fc33.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.3-2.fc33.x86_64"
+      "evra": "0.2.4-2.fc33.x86_64"
     },
     "bsdtar": {
       "evra": "3.5.0-1.fc33.x86_64"
@@ -253,7 +253,7 @@
       "evra": "0.182-1.fc33.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.9-1.fc33.x86_64"
+      "evra": "2:5.10-1.fc33.x86_64"
     },
     "expat": {
       "evra": "2.2.8-3.fc33.x86_64"
@@ -346,7 +346,7 @@
       "evra": "2.29.2-3.fc33.x86_64"
     },
     "glib2": {
-      "evra": "2.66.3-1.fc33.x86_64"
+      "evra": "2.66.4-1.fc33.x86_64"
     },
     "glibc": {
       "evra": "2.32-2.fc33.x86_64"
@@ -460,13 +460,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.9.14-200.fc33.x86_64"
+      "evra": "5.9.15-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.9.14-200.fc33.x86_64"
+      "evra": "5.9.15-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.9.14-200.fc33.x86_64"
+      "evra": "5.9.15-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-17.fc33.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "2.36-3.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2143-1.fc33.x86_64"
+      "evra": "2:8.2.2146-2.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-21T21:08:17Z",
+    "generated": "2020-12-24T21:07:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-20T04:23:56Z"
+        "generated": "2020-12-21T22:02:11Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-21T01:20:13Z"
+        "generated": "2020-12-24T01:04:03Z"
       }
     }
   }

From 62bb3b5dd6d5cce6935403db09f19a48deb275b6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 25 Dec 2020 21:35:39 +0000
Subject: [PATCH 0012/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e70ef357a5..89d09e2734 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -88,7 +88,7 @@
       "evra": "4.0-1.fc33.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.9-4.fc33.x86_64"
+      "evra": "6.11-2.fc33.x86_64"
     },
     "clevis": {
       "evra": "15-2.fc33.x86_64"
@@ -301,7 +301,7 @@
       "evra": "0.8.4-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.8.3-1.fc33.x86_64"
+      "evra": "1.8.4-1.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -403,10 +403,10 @@
       "evra": "2.8.1-1.gitc733d23.fc33.x86_64"
     },
     "iproute": {
-      "evra": "5.8.0-1.fc33.x86_64"
+      "evra": "5.9.0-1.fc33.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.8.0-1.fc33.x86_64"
+      "evra": "5.9.0-1.fc33.x86_64"
     },
     "iptables": {
       "evra": "1.8.5-4.fc33.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.2.5-3.fc33.x86_64"
     },
     "libzstd": {
-      "evra": "1.4.5-5.fc33.x86_64"
+      "evra": "1.4.7-1.fc33.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-27.fc33.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-24T21:07:31Z",
+    "generated": "2020-12-25T21:07:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-21T22:02:11Z"
+        "generated": "2020-12-24T21:42:30Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-24T01:04:03Z"
+        "generated": "2020-12-25T01:13:04Z"
       }
     }
   }

From 36806050b9e871ba4c4be554909f5dc0fbb274a8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 26 Dec 2020 21:38:25 +0000
Subject: [PATCH 0013/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 26 +++++++++++++++++++-------
 1 file changed, 19 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 89d09e2734..3642fd0f42 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -153,8 +153,14 @@
     "cracklib": {
       "evra": "2.9.6-24.fc33.x86_64"
     },
+    "criu": {
+      "evra": "3.15-1.fc33.x86_64"
+    },
+    "criu-libs": {
+      "evra": "3.15-1.fc33.x86_64"
+    },
     "crun": {
-      "evra": "0.16-1.fc33.x86_64"
+      "evra": "0.16-3.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -469,7 +475,7 @@
       "evra": "5.9.15-200.fc33.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.20-17.fc33.x86_64"
+      "evra": "2.0.20-21.fc33.x86_64"
     },
     "keyutils": {
       "evra": "1.6-5.fc33.x86_64"
@@ -519,6 +525,9 @@
     "libbrotli": {
       "evra": "1.0.9-3.fc33.x86_64"
     },
+    "libbsd": {
+      "evra": "0.10.0-4.fc33.x86_64"
+    },
     "libcap": {
       "evra": "2.26-8.fc33.x86_64"
     },
@@ -622,7 +631,7 @@
       "evra": "9-8.fc33.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.4.2-3.fc33.x86_64"
+      "evra": "1.4.3-1.fc33.x86_64"
     },
     "libmetalink": {
       "evra": "0.1.3-13.fc33.x86_64"
@@ -639,6 +648,9 @@
     "libndp": {
       "evra": "1.7-6.fc33.x86_64"
     },
+    "libnet": {
+      "evra": "1.1.6-20.fc33.x86_64"
+    },
     "libnetfilter_conntrack": {
       "evra": "1.0.7-5.fc33.x86_64"
     },
@@ -988,7 +1000,7 @@
       "evra": "1.18-2.fc33.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.16-1.fc33.x86_64"
+      "evra": "3.3.16-2.fc33.x86_64"
     },
     "protobuf-c": {
       "evra": "1.3.3-3.fc33.x86_64"
@@ -1202,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-25T21:07:08Z",
+    "generated": "2020-12-26T21:07:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-24T21:42:30Z"
+        "generated": "2020-12-25T21:43:18Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-25T01:13:04Z"
+        "generated": "2020-12-26T00:57:48Z"
       }
     }
   }

From 4b010e4fc00bf6c766e3092169cdf7fe24af2838 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 27 Dec 2020 21:35:41 +0000
Subject: [PATCH 0014/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3642fd0f42..1deecdb2a0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.9.15-200.fc33.x86_64"
+      "evra": "5.9.16-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.9.15-200.fc33.x86_64"
+      "evra": "5.9.16-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.9.15-200.fc33.x86_64"
+      "evra": "5.9.16-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-21.fc33.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-26T21:07:04Z",
+    "generated": "2020-12-27T21:07:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-25T21:43:18Z"
+        "generated": "2020-12-26T21:49:47Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-26T00:57:48Z"
+        "generated": "2020-12-27T00:55:57Z"
       }
     }
   }

From 3f518b7ee2db124a87545d791dcf95a2e4669bf5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 28 Dec 2020 21:36:56 +0000
Subject: [PATCH 0015/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1deecdb2a0..7e53c99005 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-27T21:07:01Z",
+    "generated": "2020-12-28T21:07:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-26T21:49:47Z"
+        "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-27T00:55:57Z"
+        "generated": "2020-12-28T00:56:52Z"
       }
     }
   }

From a3abe135dd1774323ab05a3b977ac373bb7c7d27 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 29 Dec 2020 21:38:31 +0000
Subject: [PATCH 0016/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7e53c99005..1e4df3da08 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-28T21:07:13Z",
+    "generated": "2020-12-29T21:07:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-28T00:56:52Z"
+        "generated": "2020-12-29T00:54:57Z"
       }
     }
   }

From 4bf0103990f3bcbde23fbb6ba12c67f572ca0754 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 30 Dec 2020 21:36:06 +0000
Subject: [PATCH 0017/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1e4df3da08..6183723ff3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-29T21:07:11Z",
+    "generated": "2020-12-30T21:07:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-29T00:54:57Z"
+        "generated": "2020-12-30T01:28:11Z"
       }
     }
   }

From 6fbdc22e636b953d30252cd686a7e90f65ecb3e8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 31 Dec 2020 21:39:57 +0000
Subject: [PATCH 0018/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6183723ff3..cb205b2149 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-30T21:07:01Z",
+    "generated": "2020-12-31T21:07:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-30T01:28:11Z"
+        "generated": "2020-12-31T01:47:19Z"
       }
     }
   }

From de5688dbe76b706f009f6a27734c7be4fae5ee2b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 1 Jan 2021 21:39:03 +0000
Subject: [PATCH 0019/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cb205b2149..f7286c06c6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2020-12-31T21:07:09Z",
+    "generated": "2021-01-01T21:07:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2020-12-31T01:47:19Z"
+        "generated": "2021-01-01T02:01:30Z"
       }
     }
   }

From ace4634a05feb23d093b7a967573ea21479fd047 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Jan 2021 21:38:20 +0000
Subject: [PATCH 0020/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f7286c06c6..85c20a48a5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-01T21:07:11Z",
+    "generated": "2021-01-02T21:07:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-01T02:01:30Z"
+        "generated": "2021-01-02T00:56:56Z"
       }
     }
   }

From 085e57099ef251357388beab6452981b8ece2389 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 3 Jan 2021 21:39:45 +0000
Subject: [PATCH 0021/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 85c20a48a5..4d1c59b8bf 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1171,7 +1171,7 @@
       "evra": "3.0.3-1.fc33.x86_64"
     },
     "tzdata": {
-      "evra": "2020d-1.fc33.noarch"
+      "evra": "2020f-1.fc33.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-2.fc33.x86_64"
@@ -1201,7 +1201,7 @@
       "evra": "2.1.0-15.fc33.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.5-3.fc33.x86_64"
+      "evra": "1.1.9-1.fc33.x86_64"
     },
     "zincati": {
       "evra": "0.0.14-1.fc33.x86_64"
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-02T21:07:09Z",
+    "generated": "2021-01-03T21:07:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2020-12-27T21:43:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-02T00:56:56Z"
+        "generated": "2021-01-03T00:59:38Z"
       }
     }
   }

From 16cc4f067a877dc946db257d612af8ef0483644c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 4 Jan 2021 21:42:37 +0000
Subject: [PATCH 0022/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4d1c59b8bf..062812ec15 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-03T21:07:10Z",
+    "generated": "2021-01-04T21:07:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2020-12-27T21:43:07Z"
+        "generated": "2021-01-03T21:44:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-03T00:59:38Z"
+        "generated": "2021-01-04T00:44:12Z"
       }
     }
   }

From 94c435f03ea6f6a39ab46a3528f9029d051ebfdc Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 4 Jan 2021 15:56:48 -0500
Subject: [PATCH 0023/2157] 05core: re-order and rename some dracut modules

Unlike `ln -sf`, `systemctl add-{requires,wants}` wants to verify that
the target and member units all exist. Because we had some dracut
modules which ran earlier than the `30ignition` module, we would lose
the service enablements which hook into e.g. `ignition-complete.target`
and related units.

Let's simply rename our modules so that they're ordered after
`30ignition`. While we're here, let's consistently prefix them by
`coreos-`. So overall, the changes are:
- `30ignition-coreos` -> `35coreos-ignition`
- `20live` -> `35coreos-live`
- `15coreos-network` -> `35coreos-network`

I've verified that there are now no "Failed to add dependency on unit"
error messages at build-time. (The next patch enforces this more
strictly.)

Fixes: #778
Closes: #799
---
 manifests/fedora-coreos-base.yaml                               | 2 +-
 .../coreos-boot-edit.service                                    | 0
 .../coreos-boot-edit.sh                                         | 0
 .../coreos-diskful-generator                                    | 0
 .../coreos-gpt-setup.service                                    | 0
 .../coreos-gpt-setup.sh                                         | 0
 .../coreos-teardown-initramfs.service                           | 0
 .../coreos-teardown-initramfs.sh                                | 0
 .../{30ignition-coreos => 35coreos-ignition}/module-setup.sh    | 0
 .../coreos-live-clear-sssd-cache.service                        | 0
 .../coreos-live-unmount-tmpfs-var.service                       | 0
 .../{20live => 35coreos-live}/coreos-live-unmount-tmpfs-var.sh  | 0
 .../coreos-liveiso-persist-osmet.service                        | 0
 .../coreos-liveiso-reconfigure-nm-wait-online.service           | 0
 .../coreos-livepxe-persist-osmet.service                        | 0
 .../{20live => 35coreos-live}/coreos-livepxe-rootfs.service     | 0
 .../{20live => 35coreos-live}/coreos-livepxe-rootfs.sh          | 0
 .../dracut/modules.d/{20live => 35coreos-live}/is-live-image.sh | 0
 .../dracut/modules.d/{20live => 35coreos-live}/live-generator   | 0
 .../dracut/modules.d/{20live => 35coreos-live}/module-setup.sh  | 0
 .../modules.d/{20live => 35coreos-live}/ostree-cmdline.sh       | 0
 .../50-afterburn-network-kargs-default.conf                     | 0
 .../coreos-copy-firstboot-network.service                       | 0
 .../coreos-copy-firstboot-network.sh                            | 0
 .../coreos-enable-network.service                               | 0
 .../coreos-enable-network.sh                                    | 0
 .../{15coreos-network => 35coreos-network}/module-setup.sh      | 0
 27 files changed, 1 insertion(+), 1 deletion(-)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-boot-edit.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-boot-edit.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-diskful-generator (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-gpt-setup.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-gpt-setup.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-teardown-initramfs.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/coreos-teardown-initramfs.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{30ignition-coreos => 35coreos-ignition}/module-setup.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-live-clear-sssd-cache.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-live-unmount-tmpfs-var.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-live-unmount-tmpfs-var.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-liveiso-persist-osmet.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-liveiso-reconfigure-nm-wait-online.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-livepxe-persist-osmet.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-livepxe-rootfs.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/coreos-livepxe-rootfs.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/is-live-image.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/live-generator (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/module-setup.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{20live => 35coreos-live}/ostree-cmdline.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/50-afterburn-network-kargs-default.conf (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/coreos-copy-firstboot-network.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/coreos-copy-firstboot-network.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/coreos-enable-network.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/coreos-enable-network.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{15coreos-network => 35coreos-network}/module-setup.sh (100%)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 1aa8274099..39b7fbc2f2 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -101,7 +101,7 @@ packages:
   - afterburn
   - afterburn-dracut
   - passwd
-  # Dependency of 20live dracut module
+  # Dependency of 35coreos-live dracut module
   - bsdtar
   # SSH
   - openssh-server openssh-clients
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-boot-edit.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-boot-edit.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-boot-edit.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-diskful-generator
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-gpt-setup.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-gpt-setup.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-teardown-initramfs.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/coreos-teardown-initramfs.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/30ignition-coreos/module-setup.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-clear-sssd-cache.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-clear-sssd-cache.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-unmount-tmpfs-var.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-unmount-tmpfs-var.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-unmount-tmpfs-var.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-live-unmount-tmpfs-var.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-liveiso-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-liveiso-persist-osmet.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-liveiso-reconfigure-nm-wait-online.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-liveiso-reconfigure-nm-wait-online.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-persist-osmet.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-rootfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-rootfs.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/coreos-livepxe-rootfs.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/is-live-image.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/is-live-image.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/is-live-image.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/is-live-image.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/live-generator
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/module-setup.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/20live/ostree-cmdline.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/20live/ostree-cmdline.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/50-afterburn-network-kargs-default.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/50-afterburn-network-kargs-default.conf
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-copy-firstboot-network.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-copy-firstboot-network.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-enable-network.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-enable-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/coreos-enable-network.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/15coreos-network/module-setup.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh

From bdcebad9c07a7f90661865ef8001d07fda896922 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 4 Jan 2021 16:09:50 -0500
Subject: [PATCH 0024/2157] 05core: add `|| exit 1` to `systemctl
 add-{requires,wants}` calls

Because dracut directly sources `module-setup.sh` scripts and isn't
compatible with `set -e`, we can't just turn it on in our modules.
Instead, let's just manually add `|| exit 1` in all the calls to
`systemctl add-{requires,wants}` so that we catch regressions like
https://github.com/coreos/fedora-coreos-config/issues/799 at build time
in the future.
---
 .../lib/dracut/modules.d/35coreos-ignition/module-setup.sh    | 4 +++-
 .../usr/lib/dracut/modules.d/35coreos-live/module-setup.sh    | 4 +++-
 .../usr/lib/dracut/modules.d/35coreos-network/module-setup.sh | 4 +++-
 .../lib/dracut/modules.d/40ignition-ostree/module-setup.sh    | 4 +++-
 .../usr/lib/dracut/modules.d/50coreos-kernel/module-setup.sh  | 4 +++-
 .../lib/dracut/modules.d/99emergency-timeout/module-setup.sh  | 4 +++-
 6 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 03565e21e6..da869947e0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -11,7 +11,9 @@ install_ignition_unit() {
     local target="${1:-ignition-complete.target}"; shift
     local instantiated="${1:-$unit}"; shift
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-requires "$target" "$instantiated"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "$target" "$instantiated" || exit 1
 }
 
 install() {
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
index 0cf81a2a20..6ae1b8e494 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
@@ -7,7 +7,9 @@ install_and_enable_unit() {
     unit="$1"; shift
     target="$1"; shift
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-requires "$target" "$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
 }
 
 install() {
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
index 12dec8b1b3..7c910b1b74 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
@@ -2,7 +2,9 @@ install_and_enable_unit() {
     unit="$1"; shift
     target="$1"; shift
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-requires "$target" "$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
 }
 
 install() {
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index ba10fed1c4..e88b75c25e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -10,7 +10,9 @@ install_ignition_unit() {
     local unit=$1; shift
     local target=${1:-complete}
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-requires "ignition-${target}.target" "$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "ignition-${target}.target" "$unit" || exit 1
 }
 
 install() {
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/module-setup.sh
index d5cd1b1e12..cac7b643f4 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/module-setup.sh
@@ -2,7 +2,9 @@ install_unit() {
     unit="$1"; shift
     target="$1"; shift
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-requires "$target" "$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
 }
 
 install() {
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
index ed4ccc57ba..63907da412 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
@@ -7,7 +7,9 @@ install_unit_wants() {
     local target="$1"; shift
     local instantiated="${1:-$unit}"; shift
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    systemctl -q --root="$initdir" add-wants "$target" "$instantiated"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-wants "$target" "$instantiated" || exit 1
 }
 
 install() {

From f2b88c2c547430d6d80a2ca656a8add9777bcecb Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 5 Jan 2021 16:05:09 +0000
Subject: [PATCH 0025/2157] overrides: drop stale Afterburn entries

---
 manifest-lock.overrides.aarch64.yaml | 6 ------
 manifest-lock.overrides.ppc64le.yaml | 6 ------
 manifest-lock.overrides.s390x.yaml   | 6 ------
 manifest-lock.overrides.x86_64.yaml  | 6 ------
 4 files changed, 24 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 8e6ad8a364..92b1fb973e 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,9 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
-  # Fast-track Afterburn release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2020-94fd991213
-  afterburn:
-    evra: 4.6.0-2.fc33.aarch64
-  afterburn-dracut:
-    evra: 4.6.0-2.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index e9c123f612..d14f6a913b 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,9 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
-  # Fast-track Afterburn release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2020-94fd991213
-  afterburn:
-    evra: 4.6.0-2.fc33.ppc64le
-  afterburn-dracut:
-    evra: 4.6.0-2.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index 2ff0adbc3e..da2fbcf7e2 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,9 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
-  # Fast-track Afterburn release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2020-94fd991213
-  afterburn:
-    evra: 4.6.0-2.fc33.s390x
-  afterburn-dracut:
-    evra: 4.6.0-2.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 0a82913b1b..85787152ac 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,9 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
-  # Fast-track Afterburn release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2020-94fd991213
-  afterburn:
-    evra: 4.6.0-2.fc33.x86_64
-  afterburn-dracut:
-    evra: 4.6.0-2.fc33.x86_64

From 707107f1f4817efd4905b31e753f1c6297d217d8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Jan 2021 21:39:17 +0000
Subject: [PATCH 0026/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 062812ec15..4e42a5678b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-04T21:07:07Z",
+    "generated": "2021-01-05T21:07:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1223,7 +1223,7 @@
         "generated": "2021-01-03T21:44:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-04T00:44:12Z"
+        "generated": "2021-01-05T00:56:35Z"
       }
     }
   }

From b30c72bc80135c5ff2524272bf5e3d37dd57286c Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Wed, 16 Dec 2020 13:51:32 -0500
Subject: [PATCH 0027/2157] use WALinuxAgent-udev package for Azure udev rules

BZ#1748432 was filed while working on #159 and the udev rules were
split out into a separate package as part of F32.  Let's stop carrying
the rules in the overlay and use the provided package now.
---
 manifest-lock.x86_64.json                     |  3 ++
 manifests/fedora-coreos-base.yaml             |  1 +
 .../lib/udev/rules.d/66-azure-storage.rules   | 28 -------------------
 .../udev/rules.d/99-azure-product-uuid.rules  |  9 ------
 4 files changed, 4 insertions(+), 37 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/udev/rules.d/66-azure-storage.rules
 delete mode 100644 overlay.d/05core/usr/lib/udev/rules.d/99-azure-product-uuid.rules

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4e42a5678b..b76a3e22f1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -12,6 +12,9 @@
     "NetworkManager-tui": {
       "evra": "1:1.26.4-1.fc33.x86_64"
     },
+    "WALinuxAgent-udev": {
+      "evra": "2.2.52-1.fc33.noarch"
+    },
     "acl": {
       "evra": "2.2.53-9.fc33.x86_64"
     },
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 39b7fbc2f2..68e701947f 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -134,6 +134,7 @@ packages:
   - xfsprogs e2fsprogs btrfs-progs mdadm
   - cryptsetup
   - cifs-utils
+  - WALinuxAgent-udev
   # Time sync
   - chrony
   # Allow communication between sudo and SSSD
diff --git a/overlay.d/05core/usr/lib/udev/rules.d/66-azure-storage.rules b/overlay.d/05core/usr/lib/udev/rules.d/66-azure-storage.rules
deleted file mode 100644
index 5fb3693031..0000000000
--- a/overlay.d/05core/usr/lib/udev/rules.d/66-azure-storage.rules
+++ /dev/null
@@ -1,28 +0,0 @@
-ACTION=="add|change", SUBSYSTEM=="block", ENV{ID_VENDOR}=="Msft", ENV{ID_MODEL}=="Virtual_Disk", GOTO="azure_disk"
-GOTO="azure_end"
-
-LABEL="azure_disk"
-# Root has a GUID of 0000 as the second value
-# The resource/resource has GUID of 0001 as the second value
-ATTRS{device_id}=="?00000000-0000-*", ENV{fabric_name}="root", GOTO="azure_names"
-ATTRS{device_id}=="?00000000-0001-*", ENV{fabric_name}="resource", GOTO="azure_names"
-ATTRS{device_id}=="?00000001-0001-*", ENV{fabric_name}="BEK", GOTO="azure_names"
-# Wellknown SCSI controllers
-ATTRS{device_id}=="{f8b3781a-1e82-4818-a1c3-63d806ec15bb}", ENV{fabric_scsi_controller}="scsi0", GOTO="azure_datadisk"
-ATTRS{device_id}=="{f8b3781b-1e82-4818-a1c3-63d806ec15bb}", ENV{fabric_scsi_controller}="scsi1", GOTO="azure_datadisk"
-ATTRS{device_id}=="{f8b3781c-1e82-4818-a1c3-63d806ec15bb}", ENV{fabric_scsi_controller}="scsi2", GOTO="azure_datadisk"
-ATTRS{device_id}=="{f8b3781d-1e82-4818-a1c3-63d806ec15bb}", ENV{fabric_scsi_controller}="scsi3", GOTO="azure_datadisk"
-GOTO="azure_end"
-
-# Retrieve LUN number for datadisks
-LABEL="azure_datadisk"
-ENV{DEVTYPE}=="partition", PROGRAM="/bin/sh -c 'readlink /sys/class/block/%k/../device|cut -d: -f4'", ENV{fabric_name}="$env{fabric_scsi_controller}/lun$result", GOTO="azure_names"
-PROGRAM="/bin/sh -c 'readlink /sys/class/block/%k/device|cut -d: -f4'", ENV{fabric_name}="$env{fabric_scsi_controller}/lun$result", GOTO="azure_names"
-GOTO="azure_end"
-
-# Create the symlinks
-LABEL="azure_names"
-ENV{DEVTYPE}=="disk", SYMLINK+="disk/azure/$env{fabric_name}"
-ENV{DEVTYPE}=="partition", SYMLINK+="disk/azure/$env{fabric_name}-part%n"
-
-LABEL="azure_end"
diff --git a/overlay.d/05core/usr/lib/udev/rules.d/99-azure-product-uuid.rules b/overlay.d/05core/usr/lib/udev/rules.d/99-azure-product-uuid.rules
deleted file mode 100644
index a5af9b1f48..0000000000
--- a/overlay.d/05core/usr/lib/udev/rules.d/99-azure-product-uuid.rules
+++ /dev/null
@@ -1,9 +0,0 @@
-SUBSYSTEM!="dmi", GOTO="product_uuid-exit"
-ATTR{sys_vendor}!="Microsoft Corporation", GOTO="product_uuid-exit"
-ATTR{product_name}!="Virtual Machine", GOTO="product_uuid-exit"
-TEST!="/sys/devices/virtual/dmi/id/product_uuid", GOTO="product_uuid-exit"
-
-RUN+="/bin/chmod 0444 /sys/devices/virtual/dmi/id/product_uuid"
-
-LABEL="product_uuid-exit"
-

From 8c07b7391473910ba3884ee0d3763743805ac78f Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Wed, 16 Dec 2020 17:29:15 -0500
Subject: [PATCH 0028/2157] overlay: add new module for installing Azure udev
 rules

We want the Azure udev rules present in the initrd, so that Ignition
is able to detect the disks and act on them.

If the udev rules end up being installed into the initramfs as part of
the WALinuxAgent-udev package, the dracut module should be removed.

See https://bugzilla.redhat.com/show_bug.cgi?id=1909287
---
 .../25coreos-azure-udev/module-setup.sh        | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh
new file mode 100644
index 0000000000..e796e89267
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+# ex: ts=8 sw=4 sts=4 et filetype=sh
+
+# We want to provide Azure udev rules as part of the initrd, so that Ignition
+# is able to detect disks and act on them.
+#
+# If the WALinuxAgent-udev package is changed to install the udev rules as
+# part of the initramfs, we should drop this module.
+#
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1909287
+# See also https://bugzilla.redhat.com/show_bug.cgi?id=1756173
+
+install() {
+    inst_multiple \
+        /usr/lib/udev/rules.d/66-azure-storage.rules \
+        /usr/lib/udev/rules.d/99-azure-product-uuid.rules
+}

From 7f0a662ebdafdce0f36a00ab2ab9e0d719a1cbfb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 6 Jan 2021 17:59:45 +0000
Subject: [PATCH 0029/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b76a3e22f1..2fb55d7487 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-05T21:07:13Z",
+    "generated": "2021-01-06T17:28:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-03T21:44:56Z"
+        "generated": "2021-01-06T14:20:20Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-05T00:56:35Z"
+        "generated": "2021-01-06T01:13:33Z"
       }
     }
   }

From 1de21ffa98bb22995e5b059501e1955bf52b562c Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 2 Oct 2020 12:40:27 -0400
Subject: [PATCH 0030/2157] overlay/boot-mount-generator: Mount /boot
 read-only,nodev,nosuid

ostree has had support for leaving `/boot` mounted read-only
for a long time: https://github.com/ostreedev/ostree/pull/1767
(And then later extended to `/sysroot`)

Particularly for CoreOS, only a few things should be touching
`/boot`, and we control all of them.  Those projects should
create a new mount namespace and remount these partitions
writable just while they need it.

The main thing we're accomplishing here is making the system
more resilient against accidental damage from a sysadmin
root shell as well as configuration management tools like
Puppet/Ansible.  None of those should be directly manipulating
files on these partitions, they should go through the API
of one of our projects (e.g. `rpm-ostree kargs`, `bootupctl`) etc.

While we're here, also add `nodev,nosuid` because some
OS hardening scanners like to see this.  IMO it's of minimal
value, but hey, might as well.
---
 .../system-generators/coreos-boot-mount-generator  | 14 ++++++++++----
 tests/kola/misc-ro                                 | 13 +++++++++----
 2 files changed, 19 insertions(+), 8 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index d20186de0d..cc8e418d79 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -35,8 +35,9 @@ fi
 mk_mount() {
     local mount_pt="${1}"; shift
     local label="${1}"; shift
-    local path="/dev/disk/by-label/${label}"
+    local options="${1}"; shift
 
+    local path="/dev/disk/by-label/${label}"
     local unit_name=$(systemd-escape -p ${mount_pt} --suffix=mount)
 
     eval $(udevadm info --query property --export "${path}")
@@ -61,15 +62,20 @@ After=systemd-fsck@${device}.service
 [Mount]
 What=${path}
 Where=${mount_pt}
+Options=${options}
 EOF
 
     add_wants "${unit_name}"
 }
 
-
-# Don't create mount units for /boot or /boot/efi on live systems.
+# Don't create mount units for /boot on live systems.
 # ConditionPathExists won't work here because conditions don't affect
 # the dependency on the underlying device unit.
 if [ ! -f /run/ostree-live ]; then
-    mk_mount /boot boot
+    # We mount read-only by default mostly to protect
+    # against accidental damage.  Only a few things
+    # owned by CoreOS should be touching /boot or the ESP.
+    # Use nodev,nosuid because some hardening guides want
+    # that even though it's of minimal value.
+    mk_mount /boot boot ro,nodev,nosuid
 fi
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 4f2dfdd7f0..1a777ae4b2 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -51,10 +51,15 @@ if ip link | grep -o -e " eth[0-9]:"; then
 fi
 ok nic naming
 
-if test -w /sysroot; then
-    fatal "found writable /sysroot"
-fi
-ok sysroot ro
+for part in /sysroot /boot; do
+    if ! findmnt -n -o options ${part} | grep -q "ro,"; then
+        fatal "${part} is missing ro option"
+    fi
+    if test -w "${part}" || touch "${part}/somefile" 2>/dev/null; then
+        fatal "${part} is writable"
+    fi
+done
+ok read-only partitions
 
 if ! lsattr -d / | grep -qe '--i--'; then
     fatal "missing immutable bit on /"

From 51cd4932c7346e9f266ce6940044c7c7e8f80195 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 21 Dec 2020 15:18:13 -0500
Subject: [PATCH 0031/2157] Switch to sqlite rpmdb backend

There won't be any support for writing to the bdb backend in f34, so
e.g. pkglayering won't work (and obviously even composes wouldn't work
once we move cosa to f34).

All the production streams now have an f33 barrier release (as part of
the resolved workarounds), so it should be safe to switch to sqlite now.

For the other rpm-ostree-based variants, we'll probably just flip the
default in rpm-ostree to sqlite in f34. But at least in FCOS, we can do
this now so that we flush out any issues earlier and squash the ugly
warnings when querying the rpmdb.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/623
---
 manifests/fedora-coreos-base.yaml | 3 +++
 tests/kola/misc-ro                | 8 ++++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 68e701947f..0f43eefbfd 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -40,6 +40,9 @@ check-groups:
 
 default-target: multi-user.target
 
+# we can drop this when it's the rpm-ostree default
+rpmdb: sqlite
+
 # ⚠⚠⚠ ONLY TEMPORARY HACKS ALLOWED HERE; ALL ENTRIES NEED TRACKER LINKS ⚠⚠⚠
 # See also the version of this in fedora-coreos.yaml
 postprocess:
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 1a777ae4b2..dc9e706c6b 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -116,12 +116,12 @@ if [ -n "${unlabeled}" ]; then
 fi
 ok no files with unlabeled_t SELinux label
 
-# make sure we stick with bdb until we're ready to move to sqlite
+# make sure we're using the sqlite rpmdb backend
 # https://github.com/coreos/fedora-coreos-tracker/issues/623
-if [ ! -f /usr/share/rpm/Packages ]; then
-    fatal "Didn't find bdb file /usr/share/rpm/Packages"
+if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then
+    fatal "Didn't find file /usr/share/rpm/rpmdb.sqlite"
 fi
-ok rpmdb is bdb
+ok rpmdb is sqlite
 
 # make sure we don't default to having swap on zram
 # https://github.com/coreos/fedora-coreos-tracker/issues/509

From 6c72d2eea6ad570cd9be934b6b92066551b8999e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Jan 2021 21:40:47 +0000
Subject: [PATCH 0032/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2fb55d7487..91d733f7f4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,7 +64,7 @@
       "evra": "0.2.4-2.fc33.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.0-1.fc33.x86_64"
+      "evra": "3.5.1-1.fc33.x86_64"
     },
     "btrfs-progs": {
       "evra": "5.9-1.fc33.x86_64"
@@ -481,10 +481,10 @@
       "evra": "2.0.20-21.fc33.x86_64"
     },
     "keyutils": {
-      "evra": "1.6-5.fc33.x86_64"
+      "evra": "1.6.1-1.fc33.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6-5.fc33.x86_64"
+      "evra": "1.6.1-1.fc33.x86_64"
     },
     "kmod": {
       "evra": "27-3.fc33.x86_64"
@@ -508,7 +508,7 @@
       "evra": "0.3.111-10.fc33.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.0-1.fc33.x86_64"
+      "evra": "3.5.1-1.fc33.x86_64"
     },
     "libargon2": {
       "evra": "20171227-5.fc33.x86_64"
@@ -589,7 +589,7 @@
       "evra": "10.2.1-9.fc33.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.39-1.fc33.x86_64"
+      "evra": "1.41-1.fc33.x86_64"
     },
     "libgudev": {
       "evra": "234-1.fc33.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "5.7.0-1.fc33.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-3.fc33.x86_64"
+      "evra": "5.2.5-4.fc33.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-3.fc33.x86_64"
+      "evra": "5.2.5-4.fc33.x86_64"
     },
     "yajl": {
       "evra": "2.1.0-15.fc33.x86_64"
@@ -1217,7 +1217,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-06T17:28:37Z",
+    "generated": "2021-01-07T21:07:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1226,7 +1226,7 @@
         "generated": "2021-01-06T14:20:20Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-06T01:13:33Z"
+        "generated": "2021-01-07T00:55:43Z"
       }
     }
   }

From 5165d99926f037e8103732743ac0354410b1d805 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Fri, 8 Jan 2021 06:53:23 -0500
Subject: [PATCH 0033/2157] overrides: fast-track Ignition 2.9.0

---
 manifest-lock.overrides.aarch64.yaml | 4 ++++
 manifest-lock.overrides.ppc64le.yaml | 4 ++++
 manifest-lock.overrides.s390x.yaml   | 4 ++++
 manifest-lock.overrides.x86_64.yaml  | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 92b1fb973e..5d3df6edcd 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,3 +15,7 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
+  # Fast-track new Ignition release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  ignition:
+    evra: 2.9.0-1.git1d56dc8.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index d14f6a913b..db19e300d6 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,3 +15,7 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
+  # Fast-track new Ignition release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  ignition:
+    evra: 2.9.0-1.git1d56dc8.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index da2fbcf7e2..ed0e2d3bc1 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,3 +15,7 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
+  # Fast-track new Ignition release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  ignition:
+    evra: 2.9.0-1.git1d56dc8.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 85787152ac..9ceae38d1b 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,3 +15,7 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
+  # Fast-track new Ignition release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  ignition:
+    evra: 2.9.0-1.git1d56dc8.fc33.x86_64

From bfa26fb1f2fc8d2889b9811159900dd9ef08c224 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Jan 2021 21:56:10 +0000
Subject: [PATCH 0034/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 91d733f7f4..3887423fe7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -409,7 +409,7 @@
       "evra": "0.341-1.fc33.noarch"
     },
     "ignition": {
-      "evra": "2.8.1-1.gitc733d23.fc33.x86_64"
+      "evra": "2.9.0-1.git1d56dc8.fc33.x86_64"
     },
     "iproute": {
       "evra": "5.9.0-1.fc33.x86_64"
@@ -643,7 +643,7 @@
       "evra": "1.0.4-12.fc33.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.11.0-1.fc33.x86_64"
+      "evra": "2.11.1-1.fc33.x86_64"
     },
     "libmount": {
       "evra": "2.36-3.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-07T21:07:28Z",
+    "generated": "2021-01-08T21:08:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-06T14:20:20Z"
+        "generated": "2021-01-08T18:34:53Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-07T00:55:43Z"
+        "generated": "2021-01-08T02:53:13Z"
       }
     }
   }

From 19a67f2f2b20cf6567a3655b1fea7ff9eaad6100 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Jan 2021 21:38:31 +0000
Subject: [PATCH 0035/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3887423fe7..2c4d0d9c30 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,7 +406,7 @@
       "evra": "3.23-3.fc33.x86_64"
     },
     "hwdata": {
-      "evra": "0.341-1.fc33.noarch"
+      "evra": "0.343-1.fc33.noarch"
     },
     "ignition": {
       "evra": "2.9.0-1.git1d56dc8.fc33.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "4.16.0-5.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2020.8-1.fc33.x86_64"
+      "evra": "2020.10-1.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2020.8-1.fc33.x86_64"
+      "evra": "2020.10-1.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.0-5.fc33.x86_64"
@@ -1165,7 +1165,7 @@
       "evra": "1.31-2.fc33.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.97-1.fc33.x86_64"
+      "evra": "0.0.98.1-1.fc33.x86_64"
     },
     "tpm2-tools": {
       "evra": "4.3.0-1.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-08T21:08:03Z",
+    "generated": "2021-01-09T21:07:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-08T18:34:53Z"
+        "generated": "2021-01-08T22:02:01Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-08T02:53:13Z"
+        "generated": "2021-01-09T01:00:45Z"
       }
     }
   }

From 97a399175d16f84f2c1fe6bfc4fdd2ab93a80e89 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 10 Jan 2021 21:42:20 +0000
Subject: [PATCH 0036/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2c4d0d9c30..cb5c0ead0d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -523,7 +523,7 @@
       "evra": "0.1.1-46.fc33.x86_64"
     },
     "libblkid": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-3.fc33.x86_64"
@@ -568,7 +568,7 @@
       "evra": "2.1.8-10.fc33.x86_64"
     },
     "libfdisk": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "libffi": {
       "evra": "3.1-26.fc33.x86_64"
@@ -646,7 +646,7 @@
       "evra": "2.11.1-1.fc33.x86_64"
     },
     "libmount": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "libndp": {
       "evra": "1.7-6.fc33.x86_64"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-18.fc33.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.2-1.rc3.fc33.x86_64"
+      "evra": "1:2.5.2-1.rc4.fc33.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.7-3.fc33.x86_64"
@@ -724,7 +724,7 @@
       "evra": "4.3.1-3.fc33.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.13.3-0.fc33.x86_64"
@@ -793,7 +793,7 @@
       "evra": "1.2.1-2.fc33.x86_64"
     },
     "libuuid": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "libvarlink-util": {
       "evra": "19-3.fc33.x86_64"
@@ -892,7 +892,7 @@
       "evra": "0.52.21-8.fc33.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.2-1.rc3.fc33.x86_64"
+      "evra": "1:2.5.2-1.rc4.fc33.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.3-6.fc33.x86_64"
@@ -1180,7 +1180,7 @@
       "evra": "0.12.1-2.fc33.x86_64"
     },
     "util-linux": {
-      "evra": "2.36-3.fc33.x86_64"
+      "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
       "evra": "2:8.2.2146-2.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-09T21:07:10Z",
+    "generated": "2021-01-10T21:07:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-08T22:02:01Z"
+        "generated": "2021-01-09T21:45:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-09T01:00:45Z"
+        "generated": "2021-01-10T00:58:01Z"
       }
     }
   }

From c041adc2e2a41d84f372eeda261a60d914e2f033 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Tue, 12 Jan 2021 08:22:17 -0500
Subject: [PATCH 0037/2157] overrides: fast-track ignition release

---
 manifest-lock.overrides.aarch64.yaml | 4 ++--
 manifest-lock.overrides.ppc64le.yaml | 4 ++--
 manifest-lock.overrides.s390x.yaml   | 4 ++--
 manifest-lock.overrides.x86_64.yaml  | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 5d3df6edcd..2f7c03a67d 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -16,6 +16,6 @@ packages:
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
   # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
-    evra: 2.9.0-1.git1d56dc8.fc33.aarch64
+    evra: 2.9.0-2.git1d56dc8.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index db19e300d6..6051444d8a 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -16,6 +16,6 @@ packages:
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
   # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
-    evra: 2.9.0-1.git1d56dc8.fc33.ppc64le
+    evra: 2.9.0-2.git1d56dc8.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index ed0e2d3bc1..aa71824ffe 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -16,6 +16,6 @@ packages:
   systemd-udev:
     evra: 246.7-1.fc33.s390x
   # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
-    evra: 2.9.0-1.git1d56dc8.fc33.s390x
+    evra: 2.9.0-2.git1d56dc8.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 9ceae38d1b..239efd2f98 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -16,6 +16,6 @@ packages:
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
   # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0741ae4908
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
-    evra: 2.9.0-1.git1d56dc8.fc33.x86_64
+    evra: 2.9.0-2.git1d56dc8.fc33.x86_64

From 9afd0b9f8faab379b78426aa44c68503e7a7d777 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 12 Jan 2021 22:05:09 +0000
Subject: [PATCH 0038/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cb5c0ead0d..f94e39c598 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -409,7 +409,7 @@
       "evra": "0.343-1.fc33.noarch"
     },
     "ignition": {
-      "evra": "2.9.0-1.git1d56dc8.fc33.x86_64"
+      "evra": "2.9.0-2.git1d56dc8.fc33.x86_64"
     },
     "iproute": {
       "evra": "5.9.0-1.fc33.x86_64"
@@ -652,7 +652,7 @@
       "evra": "1.7-6.fc33.x86_64"
     },
     "libnet": {
-      "evra": "1.1.6-20.fc33.x86_64"
+      "evra": "1.2-1.fc33.x86_64"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.7-5.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-10T21:07:23Z",
+    "generated": "2021-01-12T21:15:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-09T21:45:48Z"
+        "generated": "2021-01-12T14:15:24Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-10T00:58:01Z"
+        "generated": "2021-01-12T01:12:22Z"
       }
     }
   }

From b7d199f860487580e5833459fae90f6da7141b58 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Jan 2021 21:42:18 +0000
Subject: [PATCH 0039/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f94e39c598..eee0f63090 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "0.7.2-1.fc33.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-12.fc33.x86_64"
+      "evra": "8.32-15.fc33.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-12.fc33.x86_64"
+      "evra": "8.32-15.fc33.x86_64"
     },
     "cpio": {
       "evra": "2.13-8.fc33.x86_64"
@@ -337,7 +337,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.4-1.fc33.x86_64"
+      "evra": "1.5.5-1.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -1217,7 +1217,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-12T21:15:14Z",
+    "generated": "2021-01-13T21:07:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1226,7 +1226,7 @@
         "generated": "2021-01-12T14:15:24Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-12T01:12:22Z"
+        "generated": "2021-01-13T01:06:15Z"
       }
     }
   }

From 742099ce57973bd73c0e51169764a6369834d9bc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Jan 2021 21:51:34 +0000
Subject: [PATCH 0040/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index eee0f63090..c439f2c983 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -49,16 +49,16 @@
       "evra": "1:2.8-9.fc33.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.11.25-2.fc33.x86_64"
+      "evra": "32:9.11.26-2.fc33.x86_64"
     },
     "bind-libs-lite": {
-      "evra": "32:9.11.25-2.fc33.x86_64"
+      "evra": "32:9.11.26-2.fc33.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.11.25-2.fc33.noarch"
+      "evra": "32:9.11.26-2.fc33.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.11.25-2.fc33.x86_64"
+      "evra": "32:9.11.26-2.fc33.x86_64"
     },
     "bootupd": {
       "evra": "0.2.4-2.fc33.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.9.16-200.fc33.x86_64"
+      "evra": "5.10.6-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.9.16-200.fc33.x86_64"
+      "evra": "5.10.6-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.9.16-200.fc33.x86_64"
+      "evra": "5.10.6-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-21.fc33.x86_64"
@@ -613,7 +613,7 @@
       "evra": "2.4.0-4.fc33.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.4-1.fc33.x86_64"
+      "evra": "0.1.5-1.fc33.x86_64"
     },
     "libjose": {
       "evra": "10-8.fc33.x86_64"
@@ -643,7 +643,7 @@
       "evra": "1.0.4-12.fc33.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.11.1-1.fc33.x86_64"
+      "evra": "2.11.2-2.fc33.x86_64"
     },
     "libmount": {
       "evra": "2.36.1-1.fc33.x86_64"
@@ -1027,10 +1027,10 @@
       "evra": "1.2.5-5.rc1.fc33.3.x86_64"
     },
     "rpm": {
-      "evra": "4.16.0-5.fc33.x86_64"
+      "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.16.0-5.fc33.x86_64"
+      "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
       "evra": "2020.10-1.fc33.x86_64"
@@ -1039,7 +1039,7 @@
       "evra": "2020.10-1.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.16.0-5.fc33.x86_64"
+      "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rsync": {
       "evra": "3.2.3-3.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-13T21:07:38Z",
+    "generated": "2021-01-15T21:08:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-12T14:15:24Z"
+        "generated": "2021-01-13T21:50:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-13T01:06:15Z"
+        "generated": "2021-01-15T01:18:02Z"
       }
     }
   }

From 8b571be68ed8b2d7909f55b53c30b98757569eba Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 16 Jan 2021 21:35:58 +0000
Subject: [PATCH 0041/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c439f2c983..84d3e85003 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -310,7 +310,7 @@
       "evra": "0.8.4-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.8.4-1.fc33.x86_64"
+      "evra": "1.10.0-1.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.6-200.fc33.x86_64"
+      "evra": "5.10.7-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.6-200.fc33.x86_64"
+      "evra": "5.10.7-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.6-200.fc33.x86_64"
+      "evra": "5.10.7-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-21.fc33.x86_64"
@@ -1165,7 +1165,7 @@
       "evra": "1.31-2.fc33.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.98.1-1.fc33.x86_64"
+      "evra": "0.0.99-1.fc33.x86_64"
     },
     "tpm2-tools": {
       "evra": "4.3.0-1.fc33.x86_64"
@@ -1217,7 +1217,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-15T21:08:31Z",
+    "generated": "2021-01-16T21:07:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1226,7 +1226,7 @@
         "generated": "2021-01-13T21:50:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-15T01:18:02Z"
+        "generated": "2021-01-16T01:10:27Z"
       }
     }
   }

From 7ba0b1b106ce0b89bc84b917b90b725527c60c9e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 17 Jan 2021 21:37:05 +0000
Subject: [PATCH 0042/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 84d3e85003..cb0e8f2160 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -307,7 +307,7 @@
       "evra": "1:4.7.0-7.fc33.x86_64"
     },
     "firewalld-filesystem": {
-      "evra": "0.8.4-1.fc33.noarch"
+      "evra": "0.8.6-1.fc33.noarch"
     },
     "flatpak-session-helper": {
       "evra": "1.10.0-1.fc33.x86_64"
@@ -1063,10 +1063,10 @@
       "evra": "4.8-5.fc33.x86_64"
     },
     "selinux-policy": {
-      "evra": "3.14.6-33.fc33.noarch"
+      "evra": "3.14.6-34.fc33.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "3.14.6-33.fc33.noarch"
+      "evra": "3.14.6-34.fc33.noarch"
     },
     "setup": {
       "evra": "2.13.7-2.fc33.noarch"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-16T21:07:18Z",
+    "generated": "2021-01-17T21:07:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-13T21:50:59Z"
+        "generated": "2021-01-16T21:42:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-16T01:10:27Z"
+        "generated": "2021-01-17T01:29:27Z"
       }
     }
   }

From 9da46add641df8580c0003f710e838502bb9d3f0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 18 Jan 2021 21:39:12 +0000
Subject: [PATCH 0043/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cb0e8f2160..f0e50f951c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,13 +358,13 @@
       "evra": "2.66.4-1.fc33.x86_64"
     },
     "glibc": {
-      "evra": "2.32-2.fc33.x86_64"
+      "evra": "2.32-3.fc33.x86_64"
     },
     "glibc-all-langpacks": {
-      "evra": "2.32-2.fc33.x86_64"
+      "evra": "2.32-3.fc33.x86_64"
     },
     "glibc-common": {
-      "evra": "2.32-2.fc33.x86_64"
+      "evra": "2.32-3.fc33.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-5.fc33.x86_64"
@@ -643,7 +643,7 @@
       "evra": "1.0.4-12.fc33.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.11.2-2.fc33.x86_64"
+      "evra": "2.12.0-1.fc33.x86_64"
     },
     "libmount": {
       "evra": "2.36.1-1.fc33.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-17T21:07:18Z",
+    "generated": "2021-01-18T21:08:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-16T21:42:46Z"
+        "generated": "2021-01-17T21:46:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-17T01:29:27Z"
+        "generated": "2021-01-18T01:24:53Z"
       }
     }
   }

From 10a04860386c6357797c5c0b30fc7f05b26c5589 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 19 Jan 2021 21:38:36 +0000
Subject: [PATCH 0044/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f0e50f951c..8123013f49 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-18T21:08:20Z",
+    "generated": "2021-01-19T21:07:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-17T21:46:28Z"
+        "generated": "2021-01-18T21:49:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-18T01:24:53Z"
+        "generated": "2021-01-19T02:15:00Z"
       }
     }
   }

From 505ed511a4597997b923cfe1657a1332596bf6b6 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 14 Jan 2021 15:49:49 -0500
Subject: [PATCH 0045/2157] coreos-growpart: drop support for growing
 multipathed disks

The model we're moving towards is one where multipath enablement is
configured via Ignition and so only takes effect on the next boot:

https://github.com/openshift/os/pull/484#issuecomment-760454177

Therefore, we don't need to worry here about support for growing a
multipathed root partition. This simplifies a big chunk of the script.
---
 .../40ignition-ostree/coreos-growpart         | 50 ++++++-------------
 1 file changed, 15 insertions(+), 35 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart
index f32fcee065..224bb3e974 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart
@@ -45,43 +45,23 @@ case "${TYPE:-}" in
     *) echo "error: Unsupported filesystem for ${path}: '${TYPE:-}'" 1>&2; exit 1 ;;
 esac
 
-if [[ "${src}" =~ "/dev/mapper" ]]; then
-    eval $(udevadm info --query property --export "${src}")
-    # get the partition, if any, and the name for the device mapper
-    partition="${ID_PART_ENTRY_NUMBER:-}"
-    dm_name="${DM_NAME//$partition/}"
-    # identify the type of device mapper.
-    subsystem=$(dmsetup info ${dm_name} -C -o subsystem --noheadings)
-
-    # for now, we only support multipath devices
-    if [ "${subsystem}" == "mpath" ] && [ -n "${partition}" ]; then
-        # growpart does not understand device mapper, instead of having sfdisk inform the kernel,
-        # use kpartx to inform the kernel and the device mapper linear maps.
-        echo ", +" | sfdisk --no-reread --no-tell-kernel --force -N "${ID_PART_ENTRY_NUMBER}" "/dev/mapper/${dm_name}"
-        kpartx -fu /dev/mapper/${dm_name}
-    else
-        echo "coreos-growpart: unsupported device-mapper target: ${dm_name}"
-        exit 0
-    fi
+if test "${TYPE:-}" = "btrfs"; then
+    # Theoretically btrfs can have multiple devices, but when
+    # we start we will always have exactly one.
+    devpath=$(btrfs device usage /sysroot | grep /dev | cut -f 1 -d ,)
+    devpath=$(realpath /sys/class/block/${devpath#/dev/})
 else
-    if test "${TYPE:-}" = "btrfs"; then
-        # Theoretically btrfs can have multiple devices, but when
-        # we start we will always have exactly one.
-        devpath=$(btrfs device usage /sysroot | grep /dev | cut -f 1 -d ,)
-        devpath=$(realpath /sys/class/block/${devpath#/dev/})
-    else
-        # Handle traditional disk/partitions
-        majmin=$(findmnt -nvr -o MAJ:MIN "$path" | tail -n1)
-        devpath=$(realpath "/sys/dev/block/$majmin")
-    fi
-    partition="${partition:-$(cat "$devpath/partition")}"
-    parent_path=$(dirname "$devpath")
-    parent_device=/dev/$(basename "${parent_path}")
-
-    # TODO: make this idempotent, and don't error out if
-    # we can't resize.
-    growpart "${parent_device}" "${partition}" || true
+    # Handle traditional disk/partitions
+    majmin=$(findmnt -nvr -o MAJ:MIN "$path" | tail -n1)
+    devpath=$(realpath "/sys/dev/block/$majmin")
 fi
+partition="${partition:-$(cat "$devpath/partition")}"
+parent_path=$(dirname "$devpath")
+parent_device=/dev/$(basename "${parent_path}")
+
+# TODO: make this idempotent, and don't error out if
+# we can't resize.
+growpart "${parent_device}" "${partition}" || true
 
 # Wipe any filesystem signatures from the extended partition that don't
 # correspond to the FS type we detected earlier.

From 3e3fdd3cdd525516d0721690187db8a7d3a6ce16 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 13 Jan 2021 16:58:35 -0500
Subject: [PATCH 0046/2157] coreos-teardown-initramfs: make Description use
 Title Case

That's the convention for systemd unit descriptions.
---
 .../35coreos-ignition/coreos-teardown-initramfs.service         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
index a2131afcbc..060530e721 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
@@ -3,7 +3,7 @@
 # https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
 
 [Unit]
-Description=CoreOS Tear down initramfs
+Description=CoreOS Tear Down Initramfs
 DefaultDependencies=false
 
 # We want to run the teardown after all other Ignition stages

From 793b0ff482b4ebe97e0474fdaa2a9010d74f8de8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 19 Jan 2021 11:39:24 -0500
Subject: [PATCH 0047/2157] Add python3-libs to exclude list

This was in rawhide due to sudo but will drop out now with
https://src.fedoraproject.org/rpms/sudo/pull-request/21. Let's exclude
it here to make sure we catch it more easily in the future.
---
 manifests/fedora-coreos.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index c92effcd71..1d43b2873f 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -85,7 +85,9 @@ remove-files:
 exclude-packages:
   - python
   - python2
+  - python2-libs
   - python3
+  - python3-libs
   - perl
   - nodejs
   - dnf

From d7a3c856a78160c5dbbc3863563cbbe3b90a4376 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Jan 2021 21:44:04 +0000
Subject: [PATCH 0048/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8123013f49..16c3e43870 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.7-200.fc33.x86_64"
+      "evra": "5.10.8-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.7-200.fc33.x86_64"
+      "evra": "5.10.8-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.7-200.fc33.x86_64"
+      "evra": "5.10.8-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-21.fc33.x86_64"
@@ -1099,7 +1099,7 @@
       "evra": "1.1.8-4.fc33.x86_64"
     },
     "socat": {
-      "evra": "1.7.3.4-3.fc33.x86_64"
+      "evra": "1.7.4.1-1.fc33.x86_64"
     },
     "sqlite-libs": {
       "evra": "3.34.0-1.fc33.x86_64"
@@ -1138,7 +1138,7 @@
       "evra": "2.4.0-4.fc33.x86_64"
     },
     "sudo": {
-      "evra": "1.9.2-1.fc33.x86_64"
+      "evra": "1.9.5p1-1.fc33.x86_64"
     },
     "systemd": {
       "evra": "246.7-1.fc33.x86_64"
@@ -1217,7 +1217,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-19T21:07:35Z",
+    "generated": "2021-01-20T21:09:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1226,7 +1226,7 @@
         "generated": "2021-01-18T21:49:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-19T02:15:00Z"
+        "generated": "2021-01-20T01:19:08Z"
       }
     }
   }

From 8aa57b012c13dba910cead3d0f0bd8574449308f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 20 Jan 2021 15:53:31 -0500
Subject: [PATCH 0049/2157] 40ignition-ostree: make transposefs-related errors
 hard

Noticed that `ignition-ostree-transposefs-save.service` didn't break the
boot immediately after an error while debugging logs with @mike-nguyen.
Let's cargo-cult the `OnFailure` bits into those services too.

I think we may still be suffering from
https://github.com/systemd/systemd/issues/14142 in RHEL systemd.
---
 .../ignition-ostree-transposefs-detect.service                  | 2 ++
 .../ignition-ostree-transposefs-restore.service                 | 2 ++
 .../40ignition-ostree/ignition-ostree-transposefs-save.service  | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-detect.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-detect.service
index 495949ed2a..389dc9eedf 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-detect.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-detect.service
@@ -6,6 +6,8 @@ Before=ignition-disks.service
 Before=initrd-root-fs.target
 Before=sysroot.mount
 ConditionKernelCommandLine=ostree
+OnFailure=emergency.target
+OnFailureJobMode=isolate
 
 # This stage requires udevd to detect disks
 Requires=systemd-udevd.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
index 0b6d1449fc..4eca578934 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
@@ -6,6 +6,8 @@ After=ignition-disks.service
 After=ignition-ostree-uuid-root.service
 Before=ignition-ostree-growfs.service
 Before=ignition-ostree-mount-firstboot-sysroot.service
+OnFailure=emergency.target
+OnFailureJobMode=isolate
 
 ConditionKernelCommandLine=ostree
 ConditionPathIsDirectory=/run/ignition-ostree-transposefs
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
index 591da2d9af..bc03499ecb 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
@@ -8,6 +8,8 @@ ConditionPathIsDirectory=/run/ignition-ostree-transposefs
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service
+OnFailure=emergency.target
+OnFailureJobMode=isolate
 
 [Service]
 Type=oneshot

From 076ba7c0917db6d2d2d12c82f0251d5eff32651a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 22 Jan 2021 21:41:55 +0000
Subject: [PATCH 0050/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 30 +++++++++---------------------
 1 file changed, 9 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 16c3e43870..f211a22d1d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.1-1.fc33.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.9-1.fc33.x86_64"
+      "evra": "5.10-1.fc33.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-2.fc33.x86_64"
@@ -190,7 +190,7 @@
       "evra": "1:1.12.20-2.fc33.x86_64"
     },
     "dbus-broker": {
-      "evra": "24-1.fc33.x86_64"
+      "evra": "26-1.fc33.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-2.fc33.noarch"
@@ -223,7 +223,7 @@
       "evra": "3.7-7.fc33.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.82-3.fc33.x86_64"
+      "evra": "2.83-1.fc33.x86_64"
     },
     "dosfstools": {
       "evra": "4.1-12.fc33.x86_64"
@@ -343,7 +343,7 @@
       "evra": "5.1.0-2.fc33.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.5-2.fc33.x86_64"
+      "evra": "1.0.6-1.fc33.x86_64"
     },
     "gettext": {
       "evra": "0.21-3.fc33.x86_64"
@@ -405,9 +405,6 @@
     "hostname": {
       "evra": "3.23-3.fc33.x86_64"
     },
-    "hwdata": {
-      "evra": "0.343-1.fc33.noarch"
-    },
     "ignition": {
       "evra": "2.9.0-2.git1d56dc8.fc33.x86_64"
     },
@@ -598,7 +595,7 @@
       "evra": "0.3.5-1.fc33.x86_64"
     },
     "libibverbs": {
-      "evra": "32.0-1.fc33.x86_64"
+      "evra": "33.0-1.fc33.x86_64"
     },
     "libicu": {
       "evra": "67.1-4.fc33.x86_64"
@@ -730,7 +727,7 @@
       "evra": "2:4.13.3-0.fc33.x86_64"
     },
     "libsmbios": {
-      "evra": "2.4.2-10.fc33.x86_64"
+      "evra": "2.4.3-1.fc33.x86_64"
     },
     "libsolv": {
       "evra": "0.7.15-1.fc33.x86_64"
@@ -954,12 +951,6 @@
     "passwd": {
       "evra": "0.80-9.fc33.x86_64"
     },
-    "pciutils": {
-      "evra": "3.6.4-2.fc33.x86_64"
-    },
-    "pciutils-libs": {
-      "evra": "3.6.4-2.fc33.x86_64"
-    },
     "pcre": {
       "evra": "8.44-2.fc33.x86_64"
     },
@@ -1017,9 +1008,6 @@
     "qrencode-libs": {
       "evra": "4.0.2-6.fc33.x86_64"
     },
-    "rdma-core": {
-      "evra": "32.0-1.fc33.x86_64"
-    },
     "readline": {
       "evra": "8.0-5.fc33.x86_64"
     },
@@ -1217,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-20T21:09:35Z",
+    "generated": "2021-01-22T21:07:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-18T21:49:34Z"
+        "generated": "2021-01-21T21:44:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-20T01:19:08Z"
+        "generated": "2021-01-22T01:20:44Z"
       }
     }
   }

From 83fc64505321ae98cae39220f0ecff07c1e3d524 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 23 Jan 2021 21:35:34 +0000
Subject: [PATCH 0051/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f211a22d1d..ef2aafbc19 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -310,7 +310,7 @@
       "evra": "0.8.6-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.0-1.fc33.x86_64"
+      "evra": "1.10.1-1.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.8-200.fc33.x86_64"
+      "evra": "5.10.9-201.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.8-200.fc33.x86_64"
+      "evra": "5.10.9-201.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.8-200.fc33.x86_64"
+      "evra": "5.10.9-201.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.20-21.fc33.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-22T21:07:27Z",
+    "generated": "2021-01-23T21:07:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-21T21:44:52Z"
+        "generated": "2021-01-22T21:51:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-22T01:20:44Z"
+        "generated": "2021-01-23T01:01:20Z"
       }
     }
   }

From 1d28accccc15f15a8efcbf2c8d16f6c5792cee91 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 24 Jan 2021 21:35:08 +0000
Subject: [PATCH 0052/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef2aafbc19..0f6c9c903a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -234,9 +234,6 @@
     "dracut-network": {
       "evra": "050-64.git20200529.fc33.x86_64"
     },
-    "dracut-squash": {
-      "evra": "050-64.git20200529.fc33.x86_64"
-    },
     "e2fsprogs": {
       "evra": "1.45.6-4.fc33.x86_64"
     },
@@ -475,7 +472,7 @@
       "evra": "5.10.9-201.fc33.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.20-21.fc33.x86_64"
+      "evra": "2.0.21-4.fc33.x86_64"
     },
     "keyutils": {
       "evra": "1.6.1-1.fc33.x86_64"
@@ -1092,9 +1089,6 @@
     "sqlite-libs": {
       "evra": "3.34.0-1.fc33.x86_64"
     },
-    "squashfs-tools": {
-      "evra": "4.4-2.20200513gitc570c61.fc33.x86_64"
-    },
     "ssh-key-dir": {
       "evra": "0.1.2-5.fc33.x86_64"
     },
@@ -1205,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-23T21:07:28Z",
+    "generated": "2021-01-24T21:07:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-22T21:51:46Z"
+        "generated": "2021-01-23T21:42:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-23T01:01:20Z"
+        "generated": "2021-01-24T01:19:58Z"
       }
     }
   }

From efc6d79515831233b312eb6d4c767b43c5807c15 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Sun, 24 Jan 2021 14:16:18 +0000
Subject: [PATCH 0053/2157] overlay: Disable systemd-firstboot even if
 installed

I'm trying to hack on systemd using `cosa build-fast`, which
doesn't run through the `remove-from-packages` path which we
use to disable systemd-firstboot.

Let's also add this cheap mechanism to disable it even if it's
installed.
---
 manifests/ignition-and-ostree.yaml                          | 3 ++-
 .../system/systemd-firstboot.service.d/fcos-disable.conf    | 6 ++++++
 2 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf

diff --git a/manifests/ignition-and-ostree.yaml b/manifests/ignition-and-ostree.yaml
index 3ac0667137..668d8b2ffa 100644
--- a/manifests/ignition-and-ostree.yaml
+++ b/manifests/ignition-and-ostree.yaml
@@ -27,7 +27,8 @@ packages:
 
 remove-from-packages:
   # We don't want systemd-firstboot.service. It conceptually conflicts with
-  # Ignition.
+  # Ignition.  We also inject runtime bits to disable it in systemd-firstboot.service.d/fcos-disable.conf
+  # to make it easier to use systemd builds from git.
   - [systemd, /usr/bin/systemd-firstboot,
               /usr/lib/systemd/system/systemd-firstboot.service,
               /usr/lib/systemd/system/sysinit.target.wants/systemd-firstboot.service]
diff --git a/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf b/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf
new file mode 100644
index 0000000000..cbda0b99ae
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf
@@ -0,0 +1,6 @@
+# Disable systemd-firstboot because it conflicts with Ignition.
+# In most cases this is handled via the remove-from-packages
+# bits in the manifest (ignition-and-ostree.yaml), but
+# we want to support overlaying builds of systemd from git.
+[Unit]
+ConditionPathExists=/run/nosuchfile

From ee7d2f6c1c1514778011f33a95cea51758b4c6c1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 25 Jan 2021 21:59:09 +0000
Subject: [PATCH 0054/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0f6c9c903a..505bd56dd6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -49,16 +49,16 @@
       "evra": "1:2.8-9.fc33.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.11.26-2.fc33.x86_64"
+      "evra": "32:9.11.27-1.fc33.x86_64"
     },
     "bind-libs-lite": {
-      "evra": "32:9.11.26-2.fc33.x86_64"
+      "evra": "32:9.11.27-1.fc33.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.11.26-2.fc33.noarch"
+      "evra": "32:9.11.27-1.fc33.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.11.26-2.fc33.x86_64"
+      "evra": "32:9.11.27-1.fc33.x86_64"
     },
     "bootupd": {
       "evra": "0.2.4-2.fc33.x86_64"
@@ -889,7 +889,7 @@
       "evra": "1:2.5.2-1.rc4.fc33.x86_64"
     },
     "nftables": {
-      "evra": "1:0.9.3-6.fc33.x86_64"
+      "evra": "1:0.9.3-7.fc33.x86_64"
     },
     "nmap-ncat": {
       "evra": "2:7.80-5.fc33.x86_64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-24T21:07:32Z",
+    "generated": "2021-01-25T21:10:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-23T21:42:23Z"
+        "generated": "2021-01-24T21:44:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-24T01:19:58Z"
+        "generated": "2021-01-25T00:54:50Z"
       }
     }
   }

From 59d862db0789312b3e28c41c9e5131f6a31e0e5f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 26 Jan 2021 21:43:09 +0000
Subject: [PATCH 0055/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 505bd56dd6..aa23a6258b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-25T21:10:16Z",
+    "generated": "2021-01-26T21:09:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-24T21:44:36Z"
+        "generated": "2021-01-25T22:07:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-25T00:54:50Z"
+        "generated": "2021-01-26T01:49:56Z"
       }
     }
   }

From 6fe1cff5ade8bc7489b6ab542d6f3cb5c92d9082 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 27 Jan 2021 12:59:15 -0500
Subject: [PATCH 0056/2157] overrides: pin sudo to 1.9.5p2-1.fc33 for
 CVE-2021-3156

---
 manifest-lock.overrides.aarch64.yaml | 4 ++++
 manifest-lock.overrides.ppc64le.yaml | 4 ++++
 manifest-lock.overrides.s390x.yaml   | 4 ++++
 manifest-lock.overrides.x86_64.yaml  | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 2f7c03a67d..97d95a8fb1 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -19,3 +19,7 @@ packages:
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
     evra: 2.9.0-2.git1d56dc8.fc33.aarch64
+  # CVE-2021-3156
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
+  sudo:
+    evra: 1.9.5p2-1.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 6051444d8a..bd1e6fb0b5 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -19,3 +19,7 @@ packages:
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
     evra: 2.9.0-2.git1d56dc8.fc33.ppc64le
+  # CVE-2021-3156
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
+  sudo:
+    evra: 1.9.5p2-1.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index aa71824ffe..eb5e3e2e78 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -19,3 +19,7 @@ packages:
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
     evra: 2.9.0-2.git1d56dc8.fc33.s390x
+  # CVE-2021-3156
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
+  sudo:
+    evra: 1.9.5p2-1.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 239efd2f98..5a40f73d36 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -19,3 +19,7 @@ packages:
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
   ignition:
     evra: 2.9.0-2.git1d56dc8.fc33.x86_64
+  # CVE-2021-3156
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
+  sudo:
+    evra: 1.9.5p2-1.fc33.x86_64

From 24ec495d914f75a7b1bb2b1973193724b85978ae Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 28 Jan 2021 14:27:23 -0500
Subject: [PATCH 0057/2157] overrides: drop graduated overrides

---
 manifest-lock.overrides.aarch64.yaml | 8 --------
 manifest-lock.overrides.ppc64le.yaml | 8 --------
 manifest-lock.overrides.s390x.yaml   | 8 --------
 manifest-lock.overrides.x86_64.yaml  | 8 --------
 4 files changed, 32 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 97d95a8fb1..92b1fb973e 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,11 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
-  # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
-  ignition:
-    evra: 2.9.0-2.git1d56dc8.fc33.aarch64
-  # CVE-2021-3156
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
-  sudo:
-    evra: 1.9.5p2-1.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index bd1e6fb0b5..d14f6a913b 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,11 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
-  # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
-  ignition:
-    evra: 2.9.0-2.git1d56dc8.fc33.ppc64le
-  # CVE-2021-3156
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
-  sudo:
-    evra: 1.9.5p2-1.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index eb5e3e2e78..da2fbcf7e2 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,11 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
-  # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
-  ignition:
-    evra: 2.9.0-2.git1d56dc8.fc33.s390x
-  # CVE-2021-3156
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
-  sudo:
-    evra: 1.9.5p2-1.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 5a40f73d36..85787152ac 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,11 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
-  # Fast-track new Ignition release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c1659799a
-  ignition:
-    evra: 2.9.0-2.git1d56dc8.fc33.x86_64
-  # CVE-2021-3156
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
-  sudo:
-    evra: 1.9.5p2-1.fc33.x86_64

From 0d7d64ed4a2c3df4d41f54554a33ff7bf7d1751d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Jan 2021 21:45:35 +0000
Subject: [PATCH 0058/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index aa23a6258b..7c117d354b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.16-3.fc33.x86_64"
+      "evra": "0.17-1.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -322,7 +322,7 @@
       "evra": "2.9.9-10.fc33.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.3.0-1.fc33.x86_64"
+      "evra": "1.4.0-1.fc33.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.1-1.fc33.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.9-201.fc33.x86_64"
+      "evra": "5.10.10-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.9-201.fc33.x86_64"
+      "evra": "5.10.10-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.9-201.fc33.x86_64"
+      "evra": "5.10.10-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -1018,10 +1018,10 @@
       "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2020.10-1.fc33.x86_64"
+      "evra": "2021.1-2.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2020.10-1.fc33.x86_64"
+      "evra": "2021.1-2.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.2-1.fc33.x86_64"
@@ -1087,7 +1087,7 @@
       "evra": "1.7.4.1-1.fc33.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.34.0-1.fc33.x86_64"
+      "evra": "3.34.1-1.fc33.x86_64"
     },
     "ssh-key-dir": {
       "evra": "0.1.2-5.fc33.x86_64"
@@ -1120,7 +1120,7 @@
       "evra": "2.4.0-4.fc33.x86_64"
     },
     "sudo": {
-      "evra": "1.9.5p1-1.fc33.x86_64"
+      "evra": "1.9.5p2-1.fc33.x86_64"
     },
     "systemd": {
       "evra": "246.7-1.fc33.x86_64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-26T21:09:58Z",
+    "generated": "2021-01-28T21:14:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-25T22:07:37Z"
+        "generated": "2021-01-27T18:49:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-26T01:49:56Z"
+        "generated": "2021-01-28T01:02:42Z"
       }
     }
   }

From 12bb57775059f865c85c6831cfc74bf41c4d202b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 27 Jan 2021 16:27:17 -0500
Subject: [PATCH 0059/2157] overlay/teardown: assume coreos-relabel exists

We can assume now that we always have coreos-relabel and drop the
fallback to relabeling via tmpfiles. This dates back from when this code
lived in ignition-dracut and it felt odd to rely on coreos-relabel.
---
 .../coreos-teardown-initramfs.sh              | 21 +++++--------------
 1 file changed, 5 insertions(+), 16 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 2c8e5353a5..0d676f0f38 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -22,17 +22,6 @@ dracut_func() {
     return $rc
 }
 
-selinux_relabel() {
-    # If we have access to coreos-relabel then let's use that because
-    # it allows us to set labels on things before switching root
-    # If not, fallback to tmpfiles.
-    if command -v coreos-relabel; then
-        coreos-relabel $1
-    else
-        echo "Z $1 - - -" >> "/run/tmpfiles.d/$(basename $0)-relabel.conf"
-    fi
-}
-
 # Determine if the generated NM connection profiles match the default
 # that would be given to us if the user had provided no additional
 # configuration. i.e. did the user give us any network configuration
@@ -95,7 +84,7 @@ propagate_initramfs_networking() {
             else
                 echo "info: propagating initramfs networking config to the real root"
                 cp -v /run/NetworkManager/system-connections/* /sysroot/etc/NetworkManager/system-connections/
-                selinux_relabel /etc/NetworkManager/system-connections/
+                coreos-relabel /etc/NetworkManager/system-connections/
             fi
         else
             echo "info: no initramfs networking information to propagate"
@@ -147,7 +136,7 @@ propagate_initramfs_hostname() {
         if [ -n "$hostname" ]; then
             echo "info: propagating initramfs hostname (${hostname}) to the real root"
             echo $hostname > /sysroot/etc/hostname
-            selinux_relabel /etc/hostname
+            coreos-relabel /etc/hostname
         else
             echo "info: no initramfs hostname information to propagate"
         fi
@@ -161,7 +150,7 @@ propagate_initramfs_hostname() {
         hostname=$(</run/NetworkManager/initrd/hostname)
         echo "info: propagating initramfs hostname (${hostname}) to the real root"
         echo $hostname > /sysroot/etc/hostname
-        selinux_relabel /etc/hostname
+        coreos-relabel /etc/hostname
     else
         echo "info: no initramfs hostname information to propagate"
     fi
@@ -176,8 +165,8 @@ propagate_initramfs_multipath() {
         echo "info: propagating automatic multipath configuration"
         cp -v /etc/multipath.conf /sysroot/etc/
         mkdir -p /sysroot/etc/multipath/multipath.conf.d
-        selinux_relabel /etc/multipath.conf
-        selinux_relabel /etc/multipath/multipath.conf.d
+        coreos-relabel /etc/multipath.conf
+        coreos-relabel /etc/multipath/multipath.conf.d
     else
         echo "info: no initramfs automatic multipath configuration to propagate"
     fi

From eb9d88e95c24f748ad5dd5286a33de99dfb9ff5a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 27 Jan 2021 16:57:21 -0500
Subject: [PATCH 0060/2157] overlay: propagate multipath config post-firstboot

Because multipath support now works on the second boot, the propagation
code in `coreos-teardown-network.service` didn't work. Split that code
out into a separate dracut module and have it run on subsequent boots.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1920571
---
 .../coreos-teardown-initramfs.sh              | 20 -------------------
 .../coreos-propagate-multipath-conf.service   | 11 ++++++++++
 .../coreos-propagate-multipath-conf.sh        | 17 ++++++++++++++++
 .../35coreos-multipath/module-setup.sh        | 19 ++++++++++++++++++
 4 files changed, 47 insertions(+), 20 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 0d676f0f38..8bcac9e3c9 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -156,22 +156,6 @@ propagate_initramfs_hostname() {
     fi
 }
 
-# Persist automatic multipath configuration, if any.
-# When booting with `rd.multipath=default`, the default multipath
-# configuration is written. We need to ensure that the mutlipath configuration
-# is persisted to the final target.
-propagate_initramfs_multipath() {
-    if [ ! -f /sysroot/etc/multipath.conf ] && [ -f /etc/multipath.conf ]; then
-        echo "info: propagating automatic multipath configuration"
-        cp -v /etc/multipath.conf /sysroot/etc/
-        mkdir -p /sysroot/etc/multipath/multipath.conf.d
-        coreos-relabel /etc/multipath.conf
-        coreos-relabel /etc/multipath/multipath.conf.d
-    else
-        echo "info: no initramfs automatic multipath configuration to propagate"
-    fi
-}
-
 down_interface() {
     echo "info: taking down network device: $1"
     # On recommendation from the NM team let's try to delete the device
@@ -242,10 +226,6 @@ main() {
     # clean it up so that no information from outside of the
     # real root is passed on to NetworkManager in the real root
     rm -rf /run/NetworkManager/
-
-    # If automated multipath configuration has been enabled, ensure
-    # that its propagated to the real rootfs.
-    propagate_initramfs_multipath
 }
 
 main
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
new file mode 100644
index 0000000000..271fdf81fd
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=CoreOS Propagate Multipath Configuration
+After=ostree-prepare-root.service
+Before=initrd.target
+
+ConditionKernelCommandLine=rd.multipath=default
+
+[Service]
+Type=oneshot
+ExecStart=/usr/sbin/coreos-propagate-multipath-conf
+RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
new file mode 100755
index 0000000000..ebf0113737
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+set -euo pipefail
+
+# Persist automatic multipath configuration, if any.
+# When booting with `rd.multipath=default`, the default multipath
+# configuration is written. We need to ensure that the multipath configuration
+# is persisted to the final target.
+
+if [ ! -f /sysroot/etc/multipath.conf ] && [ -f /etc/multipath.conf ]; then
+    echo "info: propagating automatic multipath configuration"
+    cp -v /etc/multipath.conf /sysroot/etc/
+    mkdir -p /sysroot/etc/multipath/multipath.conf.d
+    coreos-relabel /etc/multipath.conf
+    coreos-relabel /etc/multipath/multipath.conf.d
+else
+    echo "info: no initramfs automatic multipath configuration to propagate"
+fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
new file mode 100755
index 0000000000..c0257fd066
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+# ex: ts=8 sw=4 sts=4 et filetype=sh
+
+install_ignition_unit() {
+    local unit=$1; shift
+    local target=${1:-complete}
+    inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "ignition-${target}.target" "$unit" || exit 1
+}
+
+install() {
+    inst_script "$moddir/coreos-propagate-multipath-conf.sh" \
+        "/usr/sbin/coreos-propagate-multipath-conf"
+
+    install_ignition_unit coreos-propagate-multipath-conf.service subsequent
+}

From 867ba196b927bfa189db598f3b3530a10f7cf170 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Jan 2021 21:41:28 +0000
Subject: [PATCH 0061/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7c117d354b..e980bd9e27 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -402,6 +402,9 @@
     "hostname": {
       "evra": "3.23-3.fc33.x86_64"
     },
+    "hwdata": {
+      "evra": "0.343-1.fc33.noarch"
+    },
     "ignition": {
       "evra": "2.9.0-2.git1d56dc8.fc33.x86_64"
     },
@@ -592,7 +595,7 @@
       "evra": "0.3.5-1.fc33.x86_64"
     },
     "libibverbs": {
-      "evra": "33.0-1.fc33.x86_64"
+      "evra": "33.0-2.fc33.x86_64"
     },
     "libicu": {
       "evra": "67.1-4.fc33.x86_64"
@@ -862,7 +865,7 @@
       "evra": "2:0.4.0-2.fc33.x86_64"
     },
     "mozjs78": {
-      "evra": "78.6.0-1.fc33.x86_64"
+      "evra": "78.7.0-1.fc33.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-2.fc33.x86_64"
@@ -948,6 +951,12 @@
     "passwd": {
       "evra": "0.80-9.fc33.x86_64"
     },
+    "pciutils": {
+      "evra": "3.6.4-2.fc33.x86_64"
+    },
+    "pciutils-libs": {
+      "evra": "3.6.4-2.fc33.x86_64"
+    },
     "pcre": {
       "evra": "8.44-2.fc33.x86_64"
     },
@@ -1005,6 +1014,9 @@
     "qrencode-libs": {
       "evra": "4.0.2-6.fc33.x86_64"
     },
+    "rdma-core": {
+      "evra": "33.0-2.fc33.x86_64"
+    },
     "readline": {
       "evra": "8.0-5.fc33.x86_64"
     },
@@ -1199,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-28T21:14:10Z",
+    "generated": "2021-01-29T21:07:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-27T18:49:12Z"
+        "generated": "2021-01-28T21:58:20Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-28T01:02:42Z"
+        "generated": "2021-01-29T01:38:17Z"
       }
     }
   }

From f055e38e41ea38100a35c8b4bee261d5d061cde9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 30 Jan 2021 21:44:01 +0000
Subject: [PATCH 0062/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e980bd9e27..b5dea4da1e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -724,7 +724,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.3-0.fc33.x86_64"
+      "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-1.fc33.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.0-10.fc33.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.3-0.fc33.x86_64"
+      "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.17-1.fc33.x86_64"
@@ -940,10 +940,10 @@
       "evra": "2020.8-1.fc33.x86_64"
     },
     "p11-kit": {
-      "evra": "0.23.22-1.fc33.x86_64"
+      "evra": "0.23.22-2.fc33.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-1.fc33.x86_64"
+      "evra": "0.23.22-2.fc33.x86_64"
     },
     "pam": {
       "evra": "1.4.0-10.fc33.x86_64"
@@ -1045,16 +1045,16 @@
       "evra": "2:1.0.0-279.dev.gitdedadbf.fc33.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.3-0.fc33.x86_64"
+      "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.3-0.fc33.noarch"
+      "evra": "2:4.13.4-0.fc33.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.3-0.fc33.x86_64"
+      "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "samba-libs": {
-      "evra": "2:4.13.3-0.fc33.x86_64"
+      "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "sed": {
       "evra": "4.8-5.fc33.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "3.0.3-1.fc33.x86_64"
     },
     "tzdata": {
-      "evra": "2020f-1.fc33.noarch"
+      "evra": "2021a-1.fc33.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-2.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-29T21:07:44Z",
+    "generated": "2021-01-30T21:07:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-28T21:58:20Z"
+        "generated": "2021-01-29T21:52:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-29T01:38:17Z"
+        "generated": "2021-01-30T01:04:45Z"
       }
     }
   }

From 9c9e48f447d77f41d2de181176ca3bd450fdd6c1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 31 Jan 2021 21:36:56 +0000
Subject: [PATCH 0063/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b5dea4da1e..59d9ba6070 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -415,16 +415,16 @@
       "evra": "5.9.0-1.fc33.x86_64"
     },
     "iptables": {
-      "evra": "1.8.5-4.fc33.x86_64"
+      "evra": "1.8.5-5.fc33.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.5-4.fc33.x86_64"
+      "evra": "1.8.5-5.fc33.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.5-4.fc33.x86_64"
+      "evra": "1.8.5-5.fc33.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.5-4.fc33.x86_64"
+      "evra": "1.8.5-5.fc33.x86_64"
     },
     "iputils": {
       "evra": "20200821-1.fc33.x86_64"
@@ -631,7 +631,7 @@
       "evra": "9-8.fc33.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.4.3-1.fc33.x86_64"
+      "evra": "1.5.0-1.fc33.x86_64"
     },
     "libmetalink": {
       "evra": "0.1.3-13.fc33.x86_64"
@@ -688,7 +688,7 @@
       "evra": "0.21.1-2.fc33.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-1.fc33.x86_64"
+      "evra": "1.4.4-2.fc33.x86_64"
     },
     "libref_array": {
       "evra": "0.1.5-46.fc33.x86_64"
@@ -892,7 +892,7 @@
       "evra": "1:2.5.2-1.rc4.fc33.x86_64"
     },
     "nftables": {
-      "evra": "1:0.9.3-7.fc33.x86_64"
+      "evra": "1:0.9.3-8.fc33.x86_64"
     },
     "nmap-ncat": {
       "evra": "2:7.80-5.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-30T21:07:38Z",
+    "generated": "2021-01-31T21:07:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-29T21:52:15Z"
+        "generated": "2021-01-30T21:56:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-30T01:04:45Z"
+        "generated": "2021-01-31T00:59:37Z"
       }
     }
   }

From c2b791a912592da0928297f05a4b14b1856c434a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 1 Feb 2021 12:27:12 -0500
Subject: [PATCH 0064/2157] overrides: fast-track kernel for CVE-2021-3347
 ("Use after free via PI futex state")

A flaw was found in the Linux kernel. A use after free issue in PI futex
may lead to code execution.

Tracker bug: https://bugzilla.redhat.com/show_bug.cgi?id=1922249
Bodhi update: https://bodhi.fedoraproject.org/updates/FEDORA-2021-879c756377
---
 manifest-lock.overrides.aarch64.yaml | 8 ++++++++
 manifest-lock.overrides.ppc64le.yaml | 8 ++++++++
 manifest-lock.overrides.s390x.yaml   | 8 ++++++++
 manifest-lock.overrides.x86_64.yaml  | 8 ++++++++
 4 files changed, 32 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 92b1fb973e..e5ffb64713 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,3 +15,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
+  # Fast-track kernel fix for CVE-2021-3347
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
+  kernel:
+    evra: 5.10.12-200.fc33.aarch64
+  kernel-core:
+    evra: 5.10.12-200.fc33.aarch64
+  kernel-modules:
+    evra: 5.10.12-200.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index d14f6a913b..03dcfccfb5 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,3 +15,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
+  # Fast-track kernel fix for CVE-2021-3347
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
+  kernel:
+    evra: 5.10.12-200.fc33.ppc64le
+  kernel-core:
+    evra: 5.10.12-200.fc33.ppc64le
+  kernel-modules:
+    evra: 5.10.12-200.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index da2fbcf7e2..3b83e41ffa 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,3 +15,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
+  # Fast-track kernel fix for CVE-2021-3347
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
+  kernel:
+    evra: 5.10.12-200.fc33.s390x
+  kernel-core:
+    evra: 5.10.12-200.fc33.s390x
+  kernel-modules:
+    evra: 5.10.12-200.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 85787152ac..283fd8009f 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,3 +15,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
+  # Fast-track kernel fix for CVE-2021-3347
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
+  kernel:
+    evra: 5.10.12-200.fc33.x86_64
+  kernel-core:
+    evra: 5.10.12-200.fc33.x86_64
+  kernel-modules:
+    evra: 5.10.12-200.fc33.x86_64

From a72825ae939707a5914d184d7ee6c31d7f24ab48 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 1 Feb 2021 21:35:50 +0000
Subject: [PATCH 0065/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 59d9ba6070..3734fddb33 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.10-200.fc33.x86_64"
+      "evra": "5.10.12-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.10-200.fc33.x86_64"
+      "evra": "5.10.12-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.10-200.fc33.x86_64"
+      "evra": "5.10.12-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-01-31T21:07:39Z",
+    "generated": "2021-02-01T21:07:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-01-30T21:56:48Z"
+        "generated": "2021-02-01T19:28:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-01-31T00:59:37Z"
+        "generated": "2021-02-01T01:40:54Z"
       }
     }
   }

From 0fc04d671d7d340b774bd2695f3b2cdce524a08b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 Feb 2021 21:44:33 +0000
Subject: [PATCH 0066/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3734fddb33..7d70d916dc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1211,7 +1211,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-01T21:07:33Z",
+    "generated": "2021-02-02T21:07:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1220,7 +1220,7 @@
         "generated": "2021-02-01T19:28:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-01T01:40:54Z"
+        "generated": "2021-02-02T03:01:09Z"
       }
     }
   }

From 07ba41f9d412a4c0848c8fee1aebfcdd89f8bc79 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 3 Feb 2021 21:38:22 +0000
Subject: [PATCH 0067/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7d70d916dc..385a12b06f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -403,7 +403,7 @@
       "evra": "3.23-3.fc33.x86_64"
     },
     "hwdata": {
-      "evra": "0.343-1.fc33.noarch"
+      "evra": "0.344-1.fc33.noarch"
     },
     "ignition": {
       "evra": "2.9.0-2.git1d56dc8.fc33.x86_64"
@@ -1211,7 +1211,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-02T21:07:47Z",
+    "generated": "2021-02-03T21:07:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1220,7 +1220,7 @@
         "generated": "2021-02-01T19:28:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-02T03:01:09Z"
+        "generated": "2021-02-03T00:58:58Z"
       }
     }
   }

From e58d55960959304fd565a39ee9fcddd9aee8e1c1 Mon Sep 17 00:00:00 2001
From: Kelvin Fan <kfan@redhat.com>
Date: Thu, 3 Dec 2020 16:54:03 -0500
Subject: [PATCH 0068/2157] fedora-coreos-base: Add postprocess script to
 configure `login.defs`

Add `/run/motd.d` as one of the directories that `login(1)` reads
from to display the MOTD. This is required for newer versions of
`console-login-helper-messages` to function properly. The script
can be dropped when `util-linux` adds `/run/motd.d` as a default
in Fedora 34.
https://src.fedoraproject.org/rpms/util-linux/pull-request/8
https://github.com/coreos/fedora-coreos-tracker/issues/704#issuecomment-772862174
---
 manifests/fedora-coreos-base.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 0f43eefbfd..e64ff993bb 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -96,6 +96,20 @@ postprocess:
     DNSStubListener=no
     EOF
 
+  # Edit `login.defs` to configure `login(1)` to read from `/run/motd.d` for
+  # displaying the MOTD. This is required for newer versions of
+  # `console-login-helper-messages` to function properly.
+  # This will be dropped once Fedora util-linux adds `/run/motd.d` as a default
+  # in Fedora 34.
+  # https://src.fedoraproject.org/rpms/util-linux/pull-request/8
+  # https://github.com/coreos/fedora-coreos-tracker/issues/704#issuecomment-772862174
+  - |
+    #!/usr/bin/env bash
+    source /etc/os-release
+    if [ ${VERSION_ID} -lt 34 ]; then
+      echo 'MOTD_FILE=/usr/share/misc/motd:/run/motd:/run/motd.d:/etc/motd:/etc/motd.d' >> /etc/login.defs
+    fi
+
 packages:
   # Security
   - selinux-policy-targeted

From 8fc392350a658284951dfb7b082136bfe2f92946 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Feb 2021 17:18:03 -0500
Subject: [PATCH 0069/2157] overrides: fast-track rpm-ostree-2021.1-3.fc33

To unblock lockfile bumps which try to pull in new libsolv and hit
against https://github.com/coreos/rpm-ostree/pull/2490.
---
 manifest-lock.overrides.aarch64.yaml | 6 ++++++
 manifest-lock.overrides.ppc64le.yaml | 6 ++++++
 manifest-lock.overrides.s390x.yaml   | 6 ++++++
 manifest-lock.overrides.x86_64.yaml  | 6 ++++++
 4 files changed, 24 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index e5ffb64713..00eadd55da 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -23,3 +23,9 @@ packages:
     evra: 5.10.12-200.fc33.aarch64
   kernel-modules:
     evra: 5.10.12-200.fc33.aarch64
+  # Fast-track rpm-ostree for libsolv fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
+  rpm-ostree:
+    evra: 2021.1-3.fc33.aarch64
+  rpm-ostree-libs:
+    evra: 2021.1-3.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 03dcfccfb5..374a4719bb 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -23,3 +23,9 @@ packages:
     evra: 5.10.12-200.fc33.ppc64le
   kernel-modules:
     evra: 5.10.12-200.fc33.ppc64le
+  # Fast-track rpm-ostree for libsolv fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
+  rpm-ostree:
+    evra: 2021.1-3.fc33.ppc64le
+  rpm-ostree-libs:
+    evra: 2021.1-3.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index 3b83e41ffa..f2515ae51f 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -23,3 +23,9 @@ packages:
     evra: 5.10.12-200.fc33.s390x
   kernel-modules:
     evra: 5.10.12-200.fc33.s390x
+  # Fast-track rpm-ostree for libsolv fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
+  rpm-ostree:
+    evra: 2021.1-3.fc33.s390x
+  rpm-ostree-libs:
+    evra: 2021.1-3.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 283fd8009f..3aace7f3ef 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -23,3 +23,9 @@ packages:
     evra: 5.10.12-200.fc33.x86_64
   kernel-modules:
     evra: 5.10.12-200.fc33.x86_64
+  # Fast-track rpm-ostree for libsolv fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
+  rpm-ostree:
+    evra: 2021.1-3.fc33.x86_64
+  rpm-ostree-libs:
+    evra: 2021.1-3.fc33.x86_64

From 7aafde790b7989370699853b742eb3246ed12e3f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Feb 2021 21:36:35 +0000
Subject: [PATCH 0070/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 385a12b06f..f9acf2650a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -730,7 +730,7 @@
       "evra": "2.4.3-1.fc33.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.15-1.fc33.x86_64"
+      "evra": "0.7.17-1.fc33.x86_64"
     },
     "libss": {
       "evra": "1.45.6-4.fc33.x86_64"
@@ -916,13 +916,13 @@
       "evra": "2.4.50-5.fc33.x86_64"
     },
     "openssh": {
-      "evra": "8.4p1-4.fc33.x86_64"
+      "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.4p1-4.fc33.x86_64"
+      "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssh-server": {
-      "evra": "8.4p1-4.fc33.x86_64"
+      "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssl": {
       "evra": "1:1.1.1i-1.fc33.x86_64"
@@ -961,10 +961,10 @@
       "evra": "8.44-2.fc33.x86_64"
     },
     "pcre2": {
-      "evra": "10.36-1.fc33.x86_64"
+      "evra": "10.36-3.fc33.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.36-1.fc33.noarch"
+      "evra": "10.36-3.fc33.noarch"
     },
     "pigz": {
       "evra": "2.4-7.fc33.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.1-2.fc33.x86_64"
+      "evra": "2021.1-3.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.1-2.fc33.x86_64"
+      "evra": "2021.1-3.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.2-1.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-03T21:07:39Z",
+    "generated": "2021-02-05T21:07:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-01T19:28:04Z"
+        "generated": "2021-02-05T01:19:10Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-03T00:58:58Z"
+        "generated": "2021-02-05T01:01:46Z"
       }
     }
   }

From b1c64bd4911b1ef32c5ea5c0c339a70aff94c7a0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 Feb 2021 21:36:50 +0000
Subject: [PATCH 0071/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f9acf2650a..2b4059594d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "0.7.2-1.fc33.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-15.fc33.x86_64"
+      "evra": "8.32-17.fc33.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-15.fc33.x86_64"
+      "evra": "8.32-17.fc33.x86_64"
     },
     "cpio": {
       "evra": "2.13-8.fc33.x86_64"
@@ -355,13 +355,13 @@
       "evra": "2.66.4-1.fc33.x86_64"
     },
     "glibc": {
-      "evra": "2.32-3.fc33.x86_64"
+      "evra": "2.32-4.fc33.x86_64"
     },
     "glibc-all-langpacks": {
-      "evra": "2.32-3.fc33.x86_64"
+      "evra": "2.32-4.fc33.x86_64"
     },
     "glibc-common": {
-      "evra": "2.32-3.fc33.x86_64"
+      "evra": "2.32-4.fc33.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-5.fc33.x86_64"
@@ -952,10 +952,10 @@
       "evra": "0.80-9.fc33.x86_64"
     },
     "pciutils": {
-      "evra": "3.6.4-2.fc33.x86_64"
+      "evra": "3.7.0-3.fc33.x86_64"
     },
     "pciutils-libs": {
-      "evra": "3.6.4-2.fc33.x86_64"
+      "evra": "3.7.0-3.fc33.x86_64"
     },
     "pcre": {
       "evra": "8.44-2.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-05T21:07:19Z",
+    "generated": "2021-02-06T21:07:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-05T01:19:10Z"
+        "generated": "2021-02-05T21:48:39Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-05T01:01:46Z"
+        "generated": "2021-02-06T00:53:34Z"
       }
     }
   }

From 20eb9456af2e871d212a1c252e277b1c4ae4bcb7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 7 Feb 2021 21:38:02 +0000
Subject: [PATCH 0072/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2b4059594d..60caaafe38 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "2.3.4-1.fc33.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op1-1.fc33.x86_64"
+      "evra": "1:2.3.3op2-1.fc33.x86_64"
     },
     "curl": {
       "evra": "7.71.1-8.fc33.x86_64"
@@ -268,7 +268,7 @@
       "evra": "0.0.4-7.fc33.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "33-1.noarch"
+      "evra": "33-2.noarch"
     },
     "fedora-release-common": {
       "evra": "33-3.noarch"
@@ -280,16 +280,16 @@
       "evra": "33-3.noarch"
     },
     "fedora-repos": {
-      "evra": "33-1.noarch"
+      "evra": "33-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "33-1.noarch"
+      "evra": "33-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "33-1.noarch"
+      "evra": "33-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "33-1.noarch"
+      "evra": "33-2.noarch"
     },
     "file": {
       "evra": "5.39-3.fc33.x86_64"
@@ -1177,7 +1177,10 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2146-2.fc33.x86_64"
+      "evra": "2:8.2.2465-1.fc33.x86_64"
+    },
+    "vim-wrappers": {
+      "evra": "2:8.2.2465-1.fc33.noarch"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-06T21:07:30Z",
+    "generated": "2021-02-07T21:07:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-05T21:48:39Z"
+        "generated": "2021-02-06T21:48:06Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-06T00:53:34Z"
+        "generated": "2021-02-07T00:59:12Z"
       }
     }
   }

From 714faaff064c722d9c5325fa015a40195bfe38fe Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Sat, 6 Feb 2021 20:22:54 +0000
Subject: [PATCH 0073/2157] manifest: Revert libsolv to 0.7.15-1.fc33

See https://bugzilla.redhat.com/show_bug.cgi?id=1925717
---
 manifest-lock.overrides.aarch64.yaml | 9 +++------
 manifest-lock.overrides.ppc64le.yaml | 9 +++------
 manifest-lock.overrides.s390x.yaml   | 9 +++------
 manifest-lock.overrides.x86_64.yaml  | 9 +++------
 4 files changed, 12 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 00eadd55da..5aca1d19ad 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -23,9 +23,6 @@ packages:
     evra: 5.10.12-200.fc33.aarch64
   kernel-modules:
     evra: 5.10.12-200.fc33.aarch64
-  # Fast-track rpm-ostree for libsolv fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
-  rpm-ostree:
-    evra: 2021.1-3.fc33.aarch64
-  rpm-ostree-libs:
-    evra: 2021.1-3.fc33.aarch64
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
+  libsolv:
+    evra: 0.7.15-1.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 374a4719bb..dcb5f9de1b 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -23,9 +23,6 @@ packages:
     evra: 5.10.12-200.fc33.ppc64le
   kernel-modules:
     evra: 5.10.12-200.fc33.ppc64le
-  # Fast-track rpm-ostree for libsolv fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
-  rpm-ostree:
-    evra: 2021.1-3.fc33.ppc64le
-  rpm-ostree-libs:
-    evra: 2021.1-3.fc33.ppc64le
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
+  libsolv:
+    evra: 0.7.15-1.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index f2515ae51f..121ed0e5ac 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -23,9 +23,6 @@ packages:
     evra: 5.10.12-200.fc33.s390x
   kernel-modules:
     evra: 5.10.12-200.fc33.s390x
-  # Fast-track rpm-ostree for libsolv fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
-  rpm-ostree:
-    evra: 2021.1-3.fc33.s390x
-  rpm-ostree-libs:
-    evra: 2021.1-3.fc33.s390x
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
+  libsolv:
+    evra: 0.7.15-1.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 3aace7f3ef..763b5b93bd 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -23,9 +23,6 @@ packages:
     evra: 5.10.12-200.fc33.x86_64
   kernel-modules:
     evra: 5.10.12-200.fc33.x86_64
-  # Fast-track rpm-ostree for libsolv fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-937b45bf55
-  rpm-ostree:
-    evra: 2021.1-3.fc33.x86_64
-  rpm-ostree-libs:
-    evra: 2021.1-3.fc33.x86_64
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
+  libsolv:
+    evra: 0.7.15-1.fc33.x86_64

From e68419cd04de2a68ba262ccd70188ae5f710750c Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 8 Feb 2021 15:06:42 -0500
Subject: [PATCH 0074/2157] overrides: fast-track Ignition for IMDSv2 and
 packaging cleanups

---
 manifest-lock.overrides.aarch64.yaml | 4 ++++
 manifest-lock.overrides.ppc64le.yaml | 4 ++++
 manifest-lock.overrides.s390x.yaml   | 4 ++++
 manifest-lock.overrides.x86_64.yaml  | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 5aca1d19ad..67c5168eed 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -26,3 +26,7 @@ packages:
   # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
   libsolv:
     evra: 0.7.15-1.fc33.aarch64
+  # Fast-track Ignition cleanups and IMDSv2 fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
+  ignition:
+    evra: 2.9.0-4.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index dcb5f9de1b..8a49353ec8 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -26,3 +26,7 @@ packages:
   # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
   libsolv:
     evra: 0.7.15-1.fc33.ppc64le
+  # Fast-track Ignition cleanups and IMDSv2 fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
+  ignition:
+    evra: 2.9.0-4.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index 121ed0e5ac..7d1ffc4e24 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -26,3 +26,7 @@ packages:
   # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
   libsolv:
     evra: 0.7.15-1.fc33.s390x
+  # Fast-track Ignition cleanups and IMDSv2 fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
+  ignition:
+    evra: 2.9.0-4.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 763b5b93bd..47e76e60dc 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -26,3 +26,7 @@ packages:
   # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
   libsolv:
     evra: 0.7.15-1.fc33.x86_64
+  # Fast-track Ignition cleanups and IMDSv2 fix
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
+  ignition:
+    evra: 2.9.0-4.fc33.x86_64

From 47410e86025a19ba03dd8c4c2cf7ab4462eb499b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Feb 2021 21:56:30 +0000
Subject: [PATCH 0075/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 60caaafe38..788f99c697 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -352,7 +352,7 @@
       "evra": "2.29.2-3.fc33.x86_64"
     },
     "glib2": {
-      "evra": "2.66.4-1.fc33.x86_64"
+      "evra": "2.66.6-1.fc33.x86_64"
     },
     "glibc": {
       "evra": "2.32-4.fc33.x86_64"
@@ -406,7 +406,7 @@
       "evra": "0.344-1.fc33.noarch"
     },
     "ignition": {
-      "evra": "2.9.0-2.git1d56dc8.fc33.x86_64"
+      "evra": "2.9.0-4.fc33.x86_64"
     },
     "iproute": {
       "evra": "5.9.0-1.fc33.x86_64"
@@ -730,7 +730,7 @@
       "evra": "2.4.3-1.fc33.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.17-1.fc33.x86_64"
+      "evra": "0.7.15-1.fc33.x86_64"
     },
     "libss": {
       "evra": "1.45.6-4.fc33.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-07T21:07:18Z",
+    "generated": "2021-02-09T21:10:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-06T21:48:06Z"
+        "generated": "2021-02-08T21:49:58Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-07T00:59:12Z"
+        "generated": "2021-02-09T00:43:28Z"
       }
     }
   }

From 4aaef0333c049d41a9c910d2cb9d05c101ff361b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 Feb 2021 21:37:44 +0000
Subject: [PATCH 0076/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 788f99c697..c8760819b6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,16 +1,16 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.26.4-1.fc33.x86_64"
+      "evra": "1:1.26.6-1.fc33.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.26.4-1.fc33.x86_64"
+      "evra": "1:1.26.6-1.fc33.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.26.4-1.fc33.x86_64"
+      "evra": "1:1.26.6-1.fc33.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.26.4-1.fc33.x86_64"
+      "evra": "1:1.26.6-1.fc33.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.2.52-1.fc33.noarch"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-09T21:10:01Z",
+    "generated": "2021-02-10T21:07:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-08T21:49:58Z"
+        "generated": "2021-02-09T22:03:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-09T00:43:28Z"
+        "generated": "2021-02-10T00:56:21Z"
       }
     }
   }

From 44bfdaae8288b57a2860f804bddaf7eed49dbda5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 11 Feb 2021 21:42:11 +0000
Subject: [PATCH 0077/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 67 +++++++++++++++++++--------------------
 1 file changed, 32 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c8760819b6..c8441087eb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -268,7 +268,7 @@
       "evra": "0.0.4-7.fc33.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-release-common": {
       "evra": "33-3.noarch"
@@ -280,16 +280,16 @@
       "evra": "33-3.noarch"
     },
     "fedora-repos": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "33-2.noarch"
+      "evra": "33-3.noarch"
     },
     "file": {
       "evra": "5.39-3.fc33.x86_64"
@@ -379,22 +379,22 @@
       "evra": "3.4-5.fc33.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.04-31.fc33.noarch"
+      "evra": "1:2.04-32.fc33.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.04-31.fc33.x86_64"
+      "evra": "1:2.04-32.fc33.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.04-31.fc33.x86_64"
+      "evra": "1:2.04-32.fc33.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.04-31.fc33.noarch"
+      "evra": "1:2.04-32.fc33.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.04-31.fc33.x86_64"
+      "evra": "1:2.04-32.fc33.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.04-31.fc33.x86_64"
+      "evra": "1:2.04-32.fc33.x86_64"
     },
     "gzip": {
       "evra": "1.10-3.fc33.x86_64"
@@ -607,7 +607,7 @@
       "evra": "1.3.1-46.fc33.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "libjcat": {
       "evra": "0.1.5-1.fc33.x86_64"
@@ -664,7 +664,7 @@
       "evra": "1.1.7-3.fc33.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.41.0-3.fc33.x86_64"
+      "evra": "1.43.0-1.fc33.x86_64"
     },
     "libnl3": {
       "evra": "3.5.0-5.fc33.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.5-1.fc33.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "libstdc++": {
       "evra": "10.2.1-9.fc33.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.1-3.fc33.x86_64"
+      "evra": "2021.1-4.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.1-3.fc33.x86_64"
+      "evra": "2021.1-4.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.2-1.fc33.x86_64"
@@ -1105,31 +1105,31 @@
       "evra": "0.1.2-5.fc33.x86_64"
     },
     "sssd": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-client": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-common": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.4.0-4.fc33.x86_64"
+      "evra": "2.3.1-4.fc33.x86_64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc33.x86_64"
@@ -1177,10 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2465-1.fc33.x86_64"
-    },
-    "vim-wrappers": {
-      "evra": "2:8.2.2465-1.fc33.noarch"
+      "evra": "2:8.2.2488-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1214,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-10T21:07:59Z",
+    "generated": "2021-02-11T21:07:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-09T22:03:36Z"
+        "generated": "2021-02-10T21:47:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-10T00:56:21Z"
+        "generated": "2021-02-11T01:29:27Z"
       }
     }
   }

From 474d64531e166d17b17e526b94c8d6ea92da0f5a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 12 Feb 2021 22:00:34 +0000
Subject: [PATCH 0078/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c8441087eb..8271383600 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -112,7 +112,7 @@
       "evra": "5.2-37.fc33.x86_64"
     },
     "conmon": {
-      "evra": "2:2.0.21-3.fc33.x86_64"
+      "evra": "2:2.0.26-1.fc33.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.20.3-1.fc33.noarch"
@@ -454,7 +454,7 @@
       "evra": "0.14-7.fc33.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.0-1.fc33.x86_64"
+      "evra": "1.6.2-1.fc33.x86_64"
     },
     "kbd": {
       "evra": "2.3.0-2.fc33.x86_64"
@@ -529,7 +529,7 @@
       "evra": "0.10.0-4.fc33.x86_64"
     },
     "libcap": {
-      "evra": "2.26-8.fc33.x86_64"
+      "evra": "2.48-1.fc33.x86_64"
     },
     "libcap-ng": {
       "evra": "0.8-1.fc33.x86_64"
@@ -610,7 +610,7 @@
       "evra": "2.3.1-4.fc33.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.5-1.fc33.x86_64"
+      "evra": "0.1.6-1.fc33.x86_64"
     },
     "libjose": {
       "evra": "10-8.fc33.x86_64"
@@ -820,13 +820,13 @@
       "evra": "2.5.1-27.fc33.x86_64"
     },
     "linux-firmware": {
-      "evra": "20201218-116.fc33.noarch"
+      "evra": "20210208-117.fc33.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20201218-116.fc33.noarch"
+      "evra": "20210208-117.fc33.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.27-1.fc33.x86_64"
+      "evra": "0.9.28-1.fc33.x86_64"
     },
     "logrotate": {
       "evra": "3.17.0-3.fc33.x86_64"
@@ -925,10 +925,10 @@
       "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1i-1.fc33.x86_64"
+      "evra": "1:1.1.1i-3.fc33.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1i-1.fc33.x86_64"
+      "evra": "1:1.1.1i-3.fc33.x86_64"
     },
     "os-prober": {
       "evra": "1.77-6.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-11T21:07:29Z",
+    "generated": "2021-02-12T21:12:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-10T21:47:23Z"
+        "generated": "2021-02-11T21:46:47Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-11T01:29:27Z"
+        "generated": "2021-02-12T01:27:30Z"
       }
     }
   }

From cc45f25b02d177af094029ad341fc5f747245617 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 12 Feb 2021 14:45:14 -0500
Subject: [PATCH 0079/2157] manifest: ship specific sssd subpackages instead

The `sssd` subpackage is a meta-package which just pulls in the default
set of packages. This default set changed in Fedora 34, which started
pulling in `python3-sssdconfig`:

https://bugzilla.redhat.com/show_bug.cgi?id=1927907

From the maintainer feedback there, it seems like it'd be better anyway
to be more explicit about the specific backends we want to ship. So
let's do that here: break out `sssd` into the client and the backends
for AD, IPA, KRB5, and LDAP.
---
 manifests/fedora-coreos-base.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index e64ff993bb..607ea18def 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -159,7 +159,9 @@ packages:
   # https://github.com/coreos/fedora-coreos-tracker/issues/445
   - libsss_sudo
   # Extra runtime
-  - sssd shadow-utils
+  - shadow-utils
+  # SSSD; we only ship a subset of the backends
+  - sssd-client sssd-ad sssd-ipa sssd-krb5 sssd-ldap
   # There are things that write outside of the journal still (such as the classic wtmp, etc.)
   # (auditd also writes outside the journal but it has its own log rotation.)
   # Anything package layered will also tend to expect files dropped in

From 8a4b1fdb1a4b769008afb97ccabd1e900b6c88cd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 17 Feb 2021 02:19:54 +0000
Subject: [PATCH 0080/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 51 ++++++++++++++++++---------------------
 1 file changed, 24 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8271383600..12aa885e25 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -34,7 +34,7 @@
       "evra": "2.4.48-10.fc33.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0-1.fc33.x86_64"
+      "evra": "3.0.1-1.fc33.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-7.fc33.x86_64"
@@ -115,16 +115,16 @@
       "evra": "2:2.0.26-1.fc33.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.20.3-1.fc33.noarch"
+      "evra": "0.21.1-1.fc33.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.20.3-1.fc33.noarch"
+      "evra": "0.21.1-1.fc33.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.20.3-1.fc33.noarch"
+      "evra": "0.21.1-1.fc33.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.20.3-1.fc33.noarch"
+      "evra": "0.21.1-1.fc33.noarch"
     },
     "container-selinux": {
       "evra": "2:2.151.0-1.fc33.noarch"
@@ -352,7 +352,7 @@
       "evra": "2.29.2-3.fc33.x86_64"
     },
     "glib2": {
-      "evra": "2.66.6-1.fc33.x86_64"
+      "evra": "2.66.7-1.fc33.x86_64"
     },
     "glibc": {
       "evra": "2.32-4.fc33.x86_64"
@@ -607,7 +607,7 @@
       "evra": "1.3.1-46.fc33.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc33.x86_64"
@@ -679,7 +679,7 @@
       "evra": "0.2.1-46.fc33.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.9.1-6.fc33.x86_64"
+      "evra": "14:1.10.0-1.fc33.x86_64"
     },
     "libpkgconf": {
       "evra": "1.7.3-5.fc33.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.5-1.fc33.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "libsss_nss_idmap": {
       "evra": "2.4.1-1.fc33.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "libstdc++": {
       "evra": "10.2.1-9.fc33.x86_64"
@@ -781,7 +781,7 @@
       "evra": "0.9.10-9.fc33.x86_64"
     },
     "libusbx": {
-      "evra": "1.0.23-2.fc33.x86_64"
+      "evra": "1.0.24-1.fc33.x86_64"
     },
     "libuser": {
       "evra": "0.62-26.fc33.x86_64"
@@ -1104,32 +1104,29 @@
     "ssh-key-dir": {
       "evra": "0.1.2-5.fc33.x86_64"
     },
-    "sssd": {
-      "evra": "2.3.1-4.fc33.x86_64"
-    },
     "sssd-ad": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-client": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-common": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.3.1-4.fc33.x86_64"
+      "evra": "2.4.1-1.fc33.x86_64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc33.x86_64"
@@ -1201,7 +1198,7 @@
       "evra": "1.1.9-1.fc33.x86_64"
     },
     "zincati": {
-      "evra": "0.0.14-1.fc33.x86_64"
+      "evra": "0.0.17-1.fc33.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-23.fc33.x86_64"
@@ -1211,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-12T21:12:58Z",
+    "generated": "2021-02-17T01:46:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-11T21:46:47Z"
+        "generated": "2021-02-12T22:12:43Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-12T01:27:30Z"
+        "generated": "2021-02-16T01:54:52Z"
       }
     }
   }

From 02bda433f7b0a4cb8dd30273f634701b96726cbd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Mon, 8 Feb 2021 18:09:31 +0100
Subject: [PATCH 0081/2157] overlay.d/20platform-chrony: Minor whitespace fix

---
 .../lib/systemd/system-generators/coreos-platform-chrony    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index 27511e730c..30d987f09f 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -46,11 +46,11 @@ if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
     exit 0
 fi
 
-(echo "# Generated by $self - do not edit directly" 
+(echo "# Generated by $self - do not edit directly"
  sed -e s,'^makestep,#makestep,' -e s,'^pool,#pool,' < /etc/chrony.conf
 cat <<EOF
 
-# Allow the system clock step on any clock update. 
+# Allow the system clock step on any clock update.
 # It will avoid the time resynchronization issue when VMs are resumed from suspend.
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1780165 for more information.
 makestep 1.0 -1
@@ -58,7 +58,7 @@ makestep 1.0 -1
 EOF
 ) > "${confpath}"
 case "${platform}" in
-    azure) 
+    azure)
         (echo '# See also https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync'
          echo 'refclock PHC /dev/ptp0 poll 3 dpoll -2 offset 0'
         ) >> "${confpath}" ;;

From 75c4b1049e4005a7a0deb33c1965bcfc3617b1a4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Mon, 8 Feb 2021 18:15:12 +0100
Subject: [PATCH 0082/2157] overlay.d/20platform-chrony: Exit early if already
 run

Make sure we exit early if:
  * the config is not the default one and as been modified
  * this script already generated a configuration for chrony

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1924869
---
 .../system-generators/coreos-platform-chrony    | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index 30d987f09f..71f030d6f1 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -26,6 +26,18 @@ case "${platform}" in
     *) exit 0 ;;
 esac
 
+# Exit early if we have already been run once
+if [[ -f "${confpath}" ]]; then
+    echo "$self: ${confpath} already exists; skipping"
+    exit 0
+fi
+
+# Exit early if chrony configuration as been changed from the image default
+if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
+    echo "$self: /etc/chrony.conf is modified; not changing the default"
+    exit 0
+fi
+
 # If not set already (by host customization or this script), set
 # PEERNTP=no so that DHCP-provided NTP servers are not added to chrony.
 # By doing this we assume the better NTP server choice is the
@@ -41,11 +53,6 @@ PEERNTP=no
 EOF
 fi
 
-if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
-    echo "$self: /etc/chrony.conf is modified; not changing the default"
-    exit 0
-fi
-
 (echo "# Generated by $self - do not edit directly"
  sed -e s,'^makestep,#makestep,' -e s,'^pool,#pool,' < /etc/chrony.conf
 cat <<EOF

From 1e3253538dd3ddd51a1b2f47a54b7e68361b4cc9 Mon Sep 17 00:00:00 2001
From: Kelvin Fan <kfan@redhat.com>
Date: Thu, 18 Feb 2021 14:00:41 -0500
Subject: [PATCH 0083/2157] overlay.d/05core: Remove CLHM-{issuegen,motdgen}
 units

These units no longer exist after CLHM v0.21.
---
 .../05core/usr/lib/systemd/system-preset/40-coreos.preset     | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 183366eb50..fede7828b9 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -1,10 +1,6 @@
 # Presets here that eventually should live in the generic fedora presets
 enable coreos-growpart.service
 # console-login-helper-messages - https://github.com/coreos/console-login-helper-messages
-enable console-login-helper-messages-issuegen.service
-enable console-login-helper-messages-motdgen.service
-enable console-login-helper-messages-issuegen.path
-enable console-login-helper-messages-motdgen.path
 enable console-login-helper-messages-gensnippet-os-release.service
 enable console-login-helper-messages-gensnippet-ssh-keys.service
 # CA certs (probably to add to base fedora eventually)

From 903864f7c20fca47fdef871d796304d541cf3869 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Feb 2021 16:05:10 -0500
Subject: [PATCH 0084/2157] overrides: drop graduated overrides

And also drop the libsolv override now that we're shipping with the
patched rpm-ostree.
---
 manifest-lock.overrides.aarch64.yaml | 15 ---------------
 manifest-lock.overrides.ppc64le.yaml | 15 ---------------
 manifest-lock.overrides.s390x.yaml   | 15 ---------------
 manifest-lock.overrides.x86_64.yaml  | 15 ---------------
 4 files changed, 60 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 67c5168eed..92b1fb973e 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,18 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
-  # Fast-track kernel fix for CVE-2021-3347
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
-  kernel:
-    evra: 5.10.12-200.fc33.aarch64
-  kernel-core:
-    evra: 5.10.12-200.fc33.aarch64
-  kernel-modules:
-    evra: 5.10.12-200.fc33.aarch64
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
-  libsolv:
-    evra: 0.7.15-1.fc33.aarch64
-  # Fast-track Ignition cleanups and IMDSv2 fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
-  ignition:
-    evra: 2.9.0-4.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 8a49353ec8..d14f6a913b 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,18 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
-  # Fast-track kernel fix for CVE-2021-3347
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
-  kernel:
-    evra: 5.10.12-200.fc33.ppc64le
-  kernel-core:
-    evra: 5.10.12-200.fc33.ppc64le
-  kernel-modules:
-    evra: 5.10.12-200.fc33.ppc64le
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
-  libsolv:
-    evra: 0.7.15-1.fc33.ppc64le
-  # Fast-track Ignition cleanups and IMDSv2 fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
-  ignition:
-    evra: 2.9.0-4.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index 7d1ffc4e24..da2fbcf7e2 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,18 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
-  # Fast-track kernel fix for CVE-2021-3347
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
-  kernel:
-    evra: 5.10.12-200.fc33.s390x
-  kernel-core:
-    evra: 5.10.12-200.fc33.s390x
-  kernel-modules:
-    evra: 5.10.12-200.fc33.s390x
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
-  libsolv:
-    evra: 0.7.15-1.fc33.s390x
-  # Fast-track Ignition cleanups and IMDSv2 fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
-  ignition:
-    evra: 2.9.0-4.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 47e76e60dc..85787152ac 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,18 +15,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
-  # Fast-track kernel fix for CVE-2021-3347
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-6e805a5051
-  kernel:
-    evra: 5.10.12-200.fc33.x86_64
-  kernel-core:
-    evra: 5.10.12-200.fc33.x86_64
-  kernel-modules:
-    evra: 5.10.12-200.fc33.x86_64
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1925717
-  libsolv:
-    evra: 0.7.15-1.fc33.x86_64
-  # Fast-track Ignition cleanups and IMDSv2 fix
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e7c4ba680
-  ignition:
-    evra: 2.9.0-4.fc33.x86_64

From 01d59373c09632affb46fb932dcb98e7665348cd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Feb 2021 17:39:19 -0500
Subject: [PATCH 0085/2157] presets: disable systemd-oomd.service

It requires swap, which we don't turn on by default. (It also requires
cgroups v2, which we currently don't turn on by default but are aiming
to in the near future.)
---
 overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index fede7828b9..a279f38fe4 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -22,3 +22,5 @@ enable bootupd.socket
 # The event for the attached device comes as a diag event.
 # Ideally it should have been added as part of base Fedora - but since it was arch specific, it was not added: https://bugzilla.redhat.com/show_bug.cgi?id=1433859
 enable rtas_errd.service
+# We don't have swap by default, and systemd-oomd hard requires it.
+disable systemd-oomd.service

From b287a6a529f8de2cad96ab9a75b1f505750081f0 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 23 Feb 2021 15:00:35 +0000
Subject: [PATCH 0086/2157] overlay: create 40-coreos-systemd.preset

Let's keep 40-coreos.preset to be only `enable` stanzas for
"our stuff" overall.

Create a separate `40-coreos-systemd.preset` which only
relates to systemd things because it really is a distinct
problem domain.
---
 .../usr/lib/systemd/system-preset/40-coreos-systemd.preset    | 4 ++++
 .../05core/usr/lib/systemd/system-preset/40-coreos.preset     | 2 --
 2 files changed, 4 insertions(+), 2 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
new file mode 100644
index 0000000000..67c18e78f6
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
@@ -0,0 +1,4 @@
+# This file contains overrides for systemd services that are
+# enabled by default, but conflict with things we ship
+# We don't have swap by default, and systemd-oomd hard requires it.
+disable systemd-oomd.service
diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index a279f38fe4..fede7828b9 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -22,5 +22,3 @@ enable bootupd.socket
 # The event for the attached device comes as a diag event.
 # Ideally it should have been added as part of base Fedora - but since it was arch specific, it was not added: https://bugzilla.redhat.com/show_bug.cgi?id=1433859
 enable rtas_errd.service
-# We don't have swap by default, and systemd-oomd hard requires it.
-disable systemd-oomd.service

From 2fef5a5dfcf54a6db67997dd275c43281fbec863 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 23 Feb 2021 15:00:35 +0000
Subject: [PATCH 0087/2157] 40-coreos-systemd.preset: Disable
 systemd-sysext.service

I was just reading the pre-release notes: https://lists.freedesktop.org/archives/systemd-devel/2021-February/046147.html

This hasn't been tested with ostree/rpm-ostree and heavily overlaps
with the latter.  Preemptively disable the service; it will hopefully
be subpackaged though for Fedora.
---
 .../usr/lib/systemd/system-preset/40-coreos-systemd.preset    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
index 67c18e78f6..2b287e7238 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
@@ -2,3 +2,7 @@
 # enabled by default, but conflict with things we ship
 # We don't have swap by default, and systemd-oomd hard requires it.
 disable systemd-oomd.service
+# This hasn't been tested with ostree/rpm-ostree and heavily overlaps
+# with the latter.  Preemptively disable the service; it will hopefully
+# be subpackaged though for Fedora.
+disable systemd-sysext.service

From bc2e5963f09ef19480e859b327ddc711d528c1b6 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 23 Feb 2021 15:05:35 +0000
Subject: [PATCH 0088/2157] overlay/40-coreos-systemd:: Add systemd-firstboot
 disablement here too

This way we're moving closer to having our systemd overrides in one place.
---
 .../lib/systemd/system-preset/40-coreos-systemd.preset | 10 +++++++++-
 .../systemd-firstboot.service.d/fcos-disable.conf      |  7 +++----
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
index 2b287e7238..a242ebaaa1 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos-systemd.preset
@@ -1,7 +1,15 @@
 # This file contains overrides for systemd services that are
-# enabled by default, but conflict with things we ship
+# enabled by default, but conflict with things we ship.
+
 # We don't have swap by default, and systemd-oomd hard requires it.
 disable systemd-oomd.service
+
+# Disable systemd-firstboot because it conflicts with Ignition.
+# In most cases this is handled via the remove-from-packages
+# bits in the manifest (ignition-and-ostree.yaml), but
+# we want to support overlaying builds of systemd from git.
+disable systemd-firstboot.service
+
 # This hasn't been tested with ostree/rpm-ostree and heavily overlaps
 # with the latter.  Preemptively disable the service; it will hopefully
 # be subpackaged though for Fedora.
diff --git a/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf b/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf
index cbda0b99ae..fc7f00518b 100644
--- a/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf
+++ b/overlay.d/05core/usr/lib/systemd/system/systemd-firstboot.service.d/fcos-disable.conf
@@ -1,6 +1,5 @@
-# Disable systemd-firstboot because it conflicts with Ignition.
-# In most cases this is handled via the remove-from-packages
-# bits in the manifest (ignition-and-ostree.yaml), but
-# we want to support overlaying builds of systemd from git.
+# See the comment in 40-coreos-systemd.preset; we're
+# keeping this even stronger disable override for now,
+# but it may not really be necessary.
 [Unit]
 ConditionPathExists=/run/nosuchfile

From 03bf48614f566f3786b7ff8f479bdf7309882e63 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 23 Feb 2021 16:27:07 -0500
Subject: [PATCH 0089/2157] overrides: pin clevis to 15-2.fc33

The dracut module from the latest Clevis v16 release has an undeclared
dependency on `seq`. There's a patch to fix that upstream:

https://github.com/latchset/clevis/pull/295

But for now, let's just pin to the previous release. This will unblock
lockfile bumps.
---
 manifest-lock.overrides.aarch64.yaml | 10 ++++++++++
 manifest-lock.overrides.ppc64le.yaml | 10 ++++++++++
 manifest-lock.overrides.s390x.yaml   | 10 ++++++++++
 manifest-lock.overrides.x86_64.yaml  | 10 ++++++++++
 4 files changed, 40 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 92b1fb973e..c0e218f3fd 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -15,3 +15,13 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
+  # Pin to previous version until we have
+  # https://github.com/latchset/clevis/pull/295
+  clevis:
+    evra: 15-2.fc33.aarch64
+  clevis-dracut:
+    evra: 15-2.fc33.aarch64
+  clevis-luks:
+    evra: 15-2.fc33.aarch64
+  clevis-systemd:
+    evra: 15-2.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index d14f6a913b..602d9cbe7b 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -15,3 +15,13 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
+  # Pin to previous version until we have
+  # https://github.com/latchset/clevis/pull/295
+  clevis:
+    evra: 15-2.fc33.ppc64le
+  clevis-dracut:
+    evra: 15-2.fc33.ppc64le
+  clevis-luks:
+    evra: 15-2.fc33.ppc64le
+  clevis-systemd:
+    evra: 15-2.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index da2fbcf7e2..ea7e5b8c03 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -15,3 +15,13 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
+  # Pin to previous version until we have
+  # https://github.com/latchset/clevis/pull/295
+  clevis:
+    evra: 15-2.fc33.s390x
+  clevis-dracut:
+    evra: 15-2.fc33.s390x
+  clevis-luks:
+    evra: 15-2.fc33.s390x
+  clevis-systemd:
+    evra: 15-2.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 85787152ac..1f689e9fcd 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -15,3 +15,13 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
+  # Pin to previous version until we have
+  # https://github.com/latchset/clevis/pull/295
+  clevis:
+    evra: 15-2.fc33.x86_64
+  clevis-dracut:
+    evra: 15-2.fc33.x86_64
+  clevis-luks:
+    evra: 15-2.fc33.x86_64
+  clevis-systemd:
+    evra: 15-2.fc33.x86_64

From 214e9c95924536cb05d7a2358abf34418f61cc67 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 24 Feb 2021 18:04:37 +0000
Subject: [PATCH 0090/2157] manifest: Add stalld

The immediate desire is to use this in OpenShift, but it's
quite similar to irqbalance, albeit disabled by default.
It's very small, off by default but the people who want it
really want it.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/753
---
 manifest-lock.x86_64.json         | 5 ++++-
 manifests/fedora-coreos-base.yaml | 2 ++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 12aa885e25..f34e593026 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1128,6 +1128,9 @@
     "sssd-ldap": {
       "evra": "2.4.1-1.fc33.x86_64"
     },
+    "stalld": {
+      "evra": "1.8-1.fc33.x86_64"
+    },
     "sudo": {
       "evra": "1.9.5p2-1.fc33.x86_64"
     },
@@ -1208,7 +1211,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-17T01:46:18Z",
+    "generated": "2021-02-24T18:41:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 607ea18def..71169170cc 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -198,6 +198,8 @@ packages:
   - zram-generator
   # kdump (https://github.com/coreos/fedora-coreos-tracker/issues/622)
   - kexec-tools
+  # Similar to irqbalance: https://github.com/coreos/fedora-coreos-tracker/issues/753
+  - stalld
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened
 # yet.  Also we may want to add to rpm-ostree something like arch negation;

From 3d7132caa48d3984351ee4fb7d84d36b7ea06e63 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Tue, 23 Feb 2021 13:00:56 -0500
Subject: [PATCH 0091/2157] manifest: split out networking tools into separate
 file

As part of requesting `iproute-tc`[0], it was suggested to break out
the generic networking tools into a separate file so that they could
be shared with RHCOS.

[0] https://github.com/coreos/fedora-coreos-tracker/issues/742
---
 manifests/fedora-coreos-base.yaml | 16 ++++++----------
 manifests/networking-tools.yaml   | 18 ++++++++++++++++++
 2 files changed, 24 insertions(+), 10 deletions(-)
 create mode 100644 manifests/networking-tools.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 71169170cc..e6843cbca6 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -5,6 +5,7 @@
 include:
   - ignition-and-ostree.yaml
   - file-transfer.yaml
+  - networking-tools.yaml
 
 initramfs-args:
   - --no-hostonly
@@ -131,17 +132,13 @@ packages:
   - podman-plugins dnsmasq
   # Remote IPC for podman
   - libvarlink-util
-  # Networking
+  # Minimal NFS client
   - nfs-utils-coreos
-  - NetworkManager hostname
-  - iproute-tc
+  # Active Directory support
   - adcli
-  ## Teaming https://github.com/coreos/fedora-coreos-config/pull/289 and http://bugzilla.redhat.com/1758162
-  - NetworkManager-team teamd
-  # Static firewalling
-  - iptables nftables iptables-nft iptables-services
-  # Interactive Networking configuration during coreos-install
-  - NetworkManager-tui
+  # Additional firewall support; we aren't including these in RHCOS or they
+  # don't exist in RHEL
+  - iptables-nft iptables-services
   # WireGuard https://github.com/coreos/fedora-coreos-tracker/issues/362
   - wireguard-tools
   # Storage
@@ -170,7 +167,6 @@ packages:
   - logrotate
   # Used by admins interactively
   - sudo coreutils attr less tar xz gzip bzip2
-  - socat net-tools bind-utils
   - bash-completion
   - openssl
   - vim-minimal
diff --git a/manifests/networking-tools.yaml b/manifests/networking-tools.yaml
new file mode 100644
index 0000000000..636fca03fc
--- /dev/null
+++ b/manifests/networking-tools.yaml
@@ -0,0 +1,18 @@
+# This defines a set of tools that are useful for configuring, debugging,
+# or manipulating the network of a system.  It is desired to keep this list
+# generic enough to be shared downstream with RHCOS.
+
+packages:
+  # Standard tools for configuring network/hostname
+  - NetworkManager hostname
+  # Interactive Networking configuration during coreos-install
+  - NetworkManager-tui
+  # Teaming https://github.com/coreos/fedora-coreos-config/pull/289 
+  # and http://bugzilla.redhat.com/1758162
+  - NetworkManager-team teamd
+  # Route manipulation and QoS
+  - iproute iproute-tc
+  # Firewall manipulation
+  - iptables nftables
+  # Interactive network tools for admins
+  - socat net-tools bind-utils

From ac0d2f32167f4ac777c1b5dd861079c6ca48ba27 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Feb 2021 20:13:20 +0000
Subject: [PATCH 0092/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 66 +++++++++++++++++++--------------------
 1 file changed, 33 insertions(+), 33 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f34e593026..aa8ccc7634 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -34,7 +34,7 @@
       "evra": "2.4.48-10.fc33.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.1-1.fc33.x86_64"
+      "evra": "3.0.1-2.fc33.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-7.fc33.x86_64"
@@ -145,10 +145,10 @@
       "evra": "0.7.2-1.fc33.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-17.fc33.x86_64"
+      "evra": "8.32-18.fc33.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-17.fc33.x86_64"
+      "evra": "8.32-18.fc33.x86_64"
     },
     "cpio": {
       "evra": "2.13-8.fc33.x86_64"
@@ -190,7 +190,7 @@
       "evra": "1:1.12.20-2.fc33.x86_64"
     },
     "dbus-broker": {
-      "evra": "26-1.fc33.x86_64"
+      "evra": "27-2.fc33.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-2.fc33.noarch"
@@ -250,13 +250,13 @@
       "evra": "37-14.fc33.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.182-1.fc33.noarch"
+      "evra": "0.183-1.fc33.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.182-1.fc33.x86_64"
+      "evra": "0.183-1.fc33.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.182-1.fc33.x86_64"
+      "evra": "0.183-1.fc33.x86_64"
     },
     "ethtool": {
       "evra": "2:5.10-1.fc33.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.12-200.fc33.x86_64"
+      "evra": "5.10.16-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.12-200.fc33.x86_64"
+      "evra": "5.10.16-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.12-200.fc33.x86_64"
+      "evra": "5.10.16-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -529,7 +529,7 @@
       "evra": "0.10.0-4.fc33.x86_64"
     },
     "libcap": {
-      "evra": "2.48-1.fc33.x86_64"
+      "evra": "2.48-2.fc33.x86_64"
     },
     "libcap-ng": {
       "evra": "0.8-1.fc33.x86_64"
@@ -607,7 +607,7 @@
       "evra": "1.3.1-46.fc33.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc33.x86_64"
@@ -730,7 +730,7 @@
       "evra": "2.4.3-1.fc33.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.15-1.fc33.x86_64"
+      "evra": "0.7.17-1.fc33.x86_64"
     },
     "libss": {
       "evra": "1.45.6-4.fc33.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.5-1.fc33.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "libstdc++": {
       "evra": "10.2.1-9.fc33.x86_64"
@@ -781,7 +781,7 @@
       "evra": "0.9.10-9.fc33.x86_64"
     },
     "libusbx": {
-      "evra": "1.0.24-1.fc33.x86_64"
+      "evra": "1.0.24-2.fc33.x86_64"
     },
     "libuser": {
       "evra": "0.62-26.fc33.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.13.4-0.fc33.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.17-1.fc33.x86_64"
+      "evra": "4.4.18-1.fc33.x86_64"
     },
     "libxml2": {
       "evra": "2.9.10-8.fc33.x86_64"
@@ -856,7 +856,7 @@
       "evra": "4.1-6.fc33.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-43.fc33.x86_64"
+      "evra": "2:2.1-43.1.fc33.x86_64"
     },
     "moby-engine": {
       "evra": "19.03.13-1.ce.git4484c46.fc33.x86_64"
@@ -868,7 +868,7 @@
       "evra": "78.7.0-1.fc33.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-2.fc33.x86_64"
+      "evra": "4.1.0-4.fc33.x86_64"
     },
     "ncurses": {
       "evra": "6.2-3.20200222.fc33.x86_64"
@@ -1105,28 +1105,28 @@
       "evra": "0.1.2-5.fc33.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-client": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-common": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.4.1-1.fc33.x86_64"
+      "evra": "2.4.2-2.fc33.x86_64"
     },
     "stalld": {
       "evra": "1.8-1.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2488-1.fc33.x86_64"
+      "evra": "2:8.2.2529-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-24T18:41:46Z",
+    "generated": "2021-02-24T19:40:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-12T22:12:43Z"
+        "generated": "2021-02-24T19:26:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-16T01:54:52Z"
+        "generated": "2021-02-22T00:55:10Z"
       }
     }
   }

From 4a93391f9425fb963d1e608561a990ea8590c90b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Feb 2021 21:43:40 +0000
Subject: [PATCH 0093/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index aa8ccc7634..5190c05d7b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.16-200.fc33.x86_64"
+      "evra": "5.10.17-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.16-200.fc33.x86_64"
+      "evra": "5.10.17-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.16-200.fc33.x86_64"
+      "evra": "5.10.17-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -961,10 +961,10 @@
       "evra": "8.44-2.fc33.x86_64"
     },
     "pcre2": {
-      "evra": "10.36-3.fc33.x86_64"
+      "evra": "10.36-4.fc33.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.36-3.fc33.noarch"
+      "evra": "10.36-4.fc33.noarch"
     },
     "pigz": {
       "evra": "2.4-7.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-24T19:40:36Z",
+    "generated": "2021-02-24T21:09:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-24T19:26:23Z"
+        "generated": "2021-02-24T20:21:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-22T00:55:10Z"
+        "generated": "2021-02-24T20:16:37Z"
       }
     }
   }

From 57354ea1d46dc77e152290331b77b6559b1e084d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 24 Feb 2021 15:18:09 -0500
Subject: [PATCH 0094/2157] manifest: use DEFAULT_HOSTNAME=localhost

systemd in f34 learned to read the default hostname from a
`DEFAULT_HOSTNAME` key in `/etc/os-release`.

Use that to set the hostname back to `localhost` on f34 so that once we
move over we can unpin the systemd build which had this same effect at
compilation time.

Ideally, this would be part of `fedora-release`, but I'm trying to aim
for a better fix where the compiled-in default hostname in Fedora is
back to `localhost` and only on the variants where we really want
`fedora` would we set `DEFAULT_HOSTNAME=fedora` in `fedora-release`.

So for now, let's just do this here.

Closes: #649
---
 manifest-lock.overrides.aarch64.yaml |  7 +++----
 manifest-lock.overrides.ppc64le.yaml |  7 +++----
 manifest-lock.overrides.s390x.yaml   |  7 +++----
 manifest-lock.overrides.x86_64.yaml  |  7 +++----
 manifests/fedora-coreos-base.yaml    | 12 ++++++++++++
 5 files changed, 24 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index c0e218f3fd..beb7a92c43 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -1,8 +1,7 @@
 packages:
-  # Fast-track systemd update that reverts fallback hostname change
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-739956843
-  # This is a one-off build, please don't remove it without talking
-  # to dustymabe or jlebon.
+  # Keep this until we move to Fedora 34.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/649
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
   systemd:
     evra: 246.7-1.fc33.aarch64
   systemd-container:
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 602d9cbe7b..9c65d5bf34 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -1,8 +1,7 @@
 packages:
-  # Fast-track systemd update that reverts fallback hostname change
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-739956843
-  # This is a one-off build, please don't remove it without talking
-  # to dustymabe or jlebon.
+  # Keep this until we move to Fedora 34.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/649
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
   systemd:
     evra: 246.7-1.fc33.ppc64le
   systemd-container:
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index ea7e5b8c03..a430166e16 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -1,8 +1,7 @@
 packages:
-  # Fast-track systemd update that reverts fallback hostname change
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-739956843
-  # This is a one-off build, please don't remove it without talking
-  # to dustymabe or jlebon.
+  # Keep this until we move to Fedora 34.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/649
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
   systemd:
     evra: 246.7-1.fc33.s390x
   systemd-container:
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 1f689e9fcd..862b864289 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -1,8 +1,7 @@
 packages:
-  # Fast-track systemd update that reverts fallback hostname change
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-739956843
-  # This is a one-off build, please don't remove it without talking
-  # to dustymabe or jlebon.
+  # Keep this until we move to Fedora 34.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/649
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
   systemd:
     evra: 246.7-1.fc33.x86_64
   systemd-container:
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index e6843cbca6..4aab5791a5 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -97,6 +97,18 @@ postprocess:
     DNSStubListener=no
     EOF
 
+  # Set the fallback hostname to `localhost`. This piggybacks on the
+  # postprocess script above which neuters systemd-resolved, because
+  # currently, a fallback hostname of `localhost` + systemd-resolved breaks
+  # rDNS. Eventually, we should be able to drop this at the same time as we drop
+  # the above. See: https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
+  - |
+    #!/usr/bin/env bash
+    source /etc/os-release
+    if [ ${VERSION_ID} -ge 34 ] && [ -z "${DEFAULT_HOSTNAME:-}" ]; then
+      echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
+    fi
+
   # Edit `login.defs` to configure `login(1)` to read from `/run/motd.d` for
   # displaying the MOTD. This is required for newer versions of
   # `console-login-helper-messages` to function properly.

From 17def375fc92a661ea75dc859940f410c122455e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 26 Feb 2021 21:36:59 +0000
Subject: [PATCH 0095/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5190c05d7b..3d0a1da484 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,10 +133,10 @@
       "evra": "1.4.3-1.fc33.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "0.9.0-1.fc33.x86_64"
+      "evra": "0.9.1-2.fc33.x86_64"
     },
     "containers-common": {
-      "evra": "1:1.2.0-13.fc33.x86_64"
+      "evra": "4:1-4.fc33.noarch"
     },
     "coreos-installer": {
       "evra": "0.7.2-1.fc33.x86_64"
@@ -979,10 +979,10 @@
       "evra": "1.7.3-5.fc33.x86_64"
     },
     "podman": {
-      "evra": "2:2.2.1-1.fc33.x86_64"
+      "evra": "2:3.0.1-1.fc33.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:2.2.1-1.fc33.x86_64"
+      "evra": "2:3.0.1-1.fc33.x86_64"
     },
     "policycoreutils": {
       "evra": "3.1-4.fc33.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.1-4.fc33.x86_64"
+      "evra": "2021.2-2.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.1-4.fc33.x86_64"
+      "evra": "2021.2-2.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.2-1.fc33.x86_64"
@@ -1084,7 +1084,7 @@
       "evra": "15-8.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.2.0-13.fc33.x86_64"
+      "evra": "1:1.2.2-1.fc33.x86_64"
     },
     "slang": {
       "evra": "2.3.2-8.fc33.x86_64"
@@ -1129,7 +1129,7 @@
       "evra": "2.4.2-2.fc33.x86_64"
     },
     "stalld": {
-      "evra": "1.8-1.fc33.x86_64"
+      "evra": "1.9-1.fc33.x86_64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2529-1.fc33.x86_64"
+      "evra": "2:8.2.2541-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-24T21:09:46Z",
+    "generated": "2021-02-26T21:07:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-24T20:21:50Z"
+        "generated": "2021-02-24T21:51:44Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-24T20:16:37Z"
+        "generated": "2021-02-26T00:31:13Z"
       }
     }
   }

From 5998cc19106d0c5f4697ee3f22b44995045f6045 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 27 Feb 2021 21:37:55 +0000
Subject: [PATCH 0096/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3d0a1da484..92319c829e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -115,16 +115,16 @@
       "evra": "2:2.0.26-1.fc33.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.1-1.fc33.noarch"
+      "evra": "0.21.1-2.fc33.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.1-1.fc33.noarch"
+      "evra": "0.21.1-2.fc33.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.1-1.fc33.noarch"
+      "evra": "0.21.1-2.fc33.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.1-1.fc33.noarch"
+      "evra": "0.21.1-2.fc33.noarch"
     },
     "container-selinux": {
       "evra": "2:2.151.0-1.fc33.noarch"
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.17-200.fc33.x86_64"
+      "evra": "5.10.18-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.17-200.fc33.x86_64"
+      "evra": "5.10.18-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.17-200.fc33.x86_64"
+      "evra": "5.10.18-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-26T21:07:42Z",
+    "generated": "2021-02-27T21:07:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-24T21:51:44Z"
+        "generated": "2021-02-26T21:46:14Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-26T00:31:13Z"
+        "generated": "2021-02-26T23:25:24Z"
       }
     }
   }

From 72a2e7e5b89746b7ea320ee9da057bd8ccba52e0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 28 Feb 2021 21:37:17 +0000
Subject: [PATCH 0097/2157] lockfiles: bump to latest

---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 92319c829e..527efa14d0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.17-1.fc33.x86_64"
+      "evra": "0.18-1.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -334,7 +334,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.5-1.fc33.x86_64"
+      "evra": "1.5.7-1.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -658,7 +658,7 @@
       "evra": "1.0.1-18.fc33.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.2-1.rc4.fc33.x86_64"
+      "evra": "1:2.5.3-0.fc33.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.7-3.fc33.x86_64"
@@ -865,7 +865,7 @@
       "evra": "2:0.4.0-2.fc33.x86_64"
     },
     "mozjs78": {
-      "evra": "78.7.0-1.fc33.x86_64"
+      "evra": "78.8.0-2.fc33.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-4.fc33.x86_64"
@@ -889,7 +889,7 @@
       "evra": "0.52.21-8.fc33.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.2-1.rc4.fc33.x86_64"
+      "evra": "1:2.5.3-0.fc33.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.3-8.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-27T21:07:55Z",
+    "generated": "2021-02-28T21:07:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-26T21:46:14Z"
+        "generated": "2021-02-27T21:45:10Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-26T23:25:24Z"
+        "generated": "2021-02-28T17:09:53Z"
       }
     }
   }

From 291b2de9042b68cf7d017a89f5e7c0a39f78d4b4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 1 Mar 2021 22:23:11 +0000
Subject: [PATCH 0098/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/147/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 527efa14d0..462299f5df 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -466,13 +466,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.18-200.fc33.x86_64"
+      "evra": "5.10.19-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.18-200.fc33.x86_64"
+      "evra": "5.10.19-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.18-200.fc33.x86_64"
+      "evra": "5.10.19-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-02-28T21:07:45Z",
+    "generated": "2021-03-01T21:44:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-27T21:45:10Z"
+        "generated": "2021-02-28T21:46:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-02-28T17:09:53Z"
+        "generated": "2021-03-01T16:45:38Z"
       }
     }
   }

From 60a8970b0b5f7024f56c04e4ade326d58ceeba9f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 3 Mar 2021 21:42:49 +0000
Subject: [PATCH 0099/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/150/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 462299f5df..b31af8e166 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -223,7 +223,7 @@
       "evra": "3.7-7.fc33.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.83-1.fc33.x86_64"
+      "evra": "2.84-1.fc33.x86_64"
     },
     "dosfstools": {
       "evra": "4.1-12.fc33.x86_64"
@@ -403,7 +403,7 @@
       "evra": "3.23-3.fc33.x86_64"
     },
     "hwdata": {
-      "evra": "0.344-1.fc33.noarch"
+      "evra": "0.345-1.fc33.noarch"
     },
     "ignition": {
       "evra": "2.9.0-4.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2541-1.fc33.x86_64"
+      "evra": "2:8.2.2559-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-01T21:44:06Z",
+    "generated": "2021-03-03T21:08:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-02-28T21:46:23Z"
+        "generated": "2021-03-02T22:46:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-01T16:45:38Z"
+        "generated": "2021-03-02T15:25:06Z"
       }
     }
   }

From 2fcf25092ed76ca0214ddca8d2cbb0751da7813f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 3 Mar 2021 15:28:00 -0500
Subject: [PATCH 0100/2157] transposefs: error out cleanly if less than 1G of
 RAM available

I commonly do `cosa run` to test something related to rootfs
reprovisioning and forget to allocate more RAM. The failure mode is a
massive spam of "Input/output error" messages from `cp` unable to copy
more files into RAM (and there doesn't seem to be a way to have it fail
on first error; yet another reason we should rewrite this into !shell).

Instead, just sanity-check that we have at least 1G of RAM and error out
with a nice and clear message if not.
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index fcfddfceda..42043ad6e8 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -100,6 +100,16 @@ case "${1:-}" in
             echo "Found duplicate or missing ESP, BIOS-BOOT, or PReP labels in config" >&2
             exit 1
         fi
+        mem_available=$(grep MemAvailable /proc/meminfo | awk '{print $2}')
+        # Just error out early if we don't even have 1G to work with. This
+        # commonly happens if you `cosa run` but forget to add `--memory`. That
+        # way you get a nicer error instead of the spew of EIO errors from `cp`.
+        # The amount we need is really dependent on a bunch of factors, but just
+        # ballpark it at 3G.
+        if [ "${mem_available}" -lt $((1*1024*1024)) ] && [ "${wipes_root}" != 0 ]; then
+            echo "Root reprovisioning requires at least 3G of RAM" >&2
+            exit 1
+        fi
         modprobe zram num_devices=0
         read dev < /sys/class/zram-control/hot_add
         # disksize is set arbitrarily large, as zram is capped by mem_limit
@@ -107,7 +117,7 @@ case "${1:-}" in
         # Limit zram to 90% of available RAM: we want to be greedy since the
         # boot breaks anyway, but we still want to leave room for everything
         # else so it hits ENOSPC and doesn't invoke the OOM killer
-        echo $(( $(grep MemAvailable /proc/meminfo | awk '{print $2}') * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
+        echo $(( mem_available * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
         mkfs.xfs -q /dev/zram"${dev}"
         mkdir "${saved_data}"
         mount /dev/zram"${dev}" "${saved_data}"

From b6dcb8a203d8604b4a27ceb902efc3e24577f848 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 4 Mar 2021 21:42:25 +0000
Subject: [PATCH 0101/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/151/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b31af8e166..cbf411d7aa 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -49,16 +49,16 @@
       "evra": "1:2.8-9.fc33.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.11.27-1.fc33.x86_64"
+      "evra": "32:9.11.28-1.fc33.x86_64"
     },
     "bind-libs-lite": {
-      "evra": "32:9.11.27-1.fc33.x86_64"
+      "evra": "32:9.11.28-1.fc33.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.11.27-1.fc33.noarch"
+      "evra": "32:9.11.28-1.fc33.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.11.27-1.fc33.x86_64"
+      "evra": "32:9.11.28-1.fc33.x86_64"
     },
     "bootupd": {
       "evra": "0.2.4-2.fc33.x86_64"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-5.fc33.x86_64"
     },
     "selinux-policy": {
-      "evra": "3.14.6-34.fc33.noarch"
+      "evra": "3.14.6-35.fc33.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "3.14.6-34.fc33.noarch"
+      "evra": "3.14.6-35.fc33.noarch"
     },
     "setup": {
       "evra": "2.13.7-2.fc33.noarch"
@@ -1159,7 +1159,7 @@
       "evra": "1.31-2.fc33.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99-1.fc33.x86_64"
+      "evra": "0.0.99.1-1.fc33.x86_64"
     },
     "tpm2-tools": {
       "evra": "4.3.0-1.fc33.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "2.21-20.fc33.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20200827-2.fc33.x86_64"
+      "evra": "1.0.20210223-1.fc33.x86_64"
     },
     "xfsprogs": {
       "evra": "5.7.0-1.fc33.x86_64"
@@ -1211,7 +1211,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-03T21:08:30Z",
+    "generated": "2021-03-04T21:08:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1220,7 +1220,7 @@
         "generated": "2021-03-02T22:46:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-02T15:25:06Z"
+        "generated": "2021-03-04T19:57:48Z"
       }
     }
   }

From ac8bb93dbc833ae27f46b24397bf64837c759dae Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Wed, 3 Mar 2021 18:02:04 -0500
Subject: [PATCH 0102/2157] manifests: improve ability to share downstream

This introduces two new categories of packages which exist in both
the FCOS and RHCOS manifests.

The `system-configuration` manifest includes packages related to
configuration and management of the system itself.  Think storage,
NTP, users/groups, etc.

The `user-experience` manifest includes packages that will generally
make a users time on the system more pleasant.  Think commonly used
Linux utilities, container tooling, remote access, etc.

The goal of this change is to improve the ability to share these
manifests with RHCOS and reduce the duplication of packages in the
FCOS and RHCOS manifests.
---
 manifests/fedora-coreos-base.yaml   | 44 ++++-------------------------
 manifests/system-configuration.yaml | 37 ++++++++++++++++++++++++
 manifests/user-experience.yaml      | 36 +++++++++++++++++++++++
 3 files changed, 79 insertions(+), 38 deletions(-)
 create mode 100644 manifests/system-configuration.yaml
 create mode 100644 manifests/user-experience.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 4aab5791a5..55da9e082e 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -6,6 +6,8 @@ include:
   - ignition-and-ostree.yaml
   - file-transfer.yaml
   - networking-tools.yaml
+  - system-configuration.yaml
+  - user-experience.yaml
 
 initramfs-args:
   - --no-hostonly
@@ -125,23 +127,17 @@ postprocess:
 
 packages:
   # Security
-  - selinux-policy-targeted
   - polkit
   # System setup
-  - afterburn
   - afterburn-dracut
-  - passwd
-  # Dependency of 35coreos-live dracut module
-  - bsdtar
   # SSH
-  - openssh-server openssh-clients
   - ssh-key-dir
   # Containers
-  - podman skopeo runc systemd-container catatonit
+  - systemd-container catatonit
   - fuse-overlayfs slirp4netns
   # name resolution for podman containers
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
-  - podman-plugins dnsmasq
+  - podman-plugins
   # Remote IPC for podman
   - libvarlink-util
   # Minimal NFS client
@@ -154,34 +150,17 @@ packages:
   # WireGuard https://github.com/coreos/fedora-coreos-tracker/issues/362
   - wireguard-tools
   # Storage
-  - cloud-utils-growpart
-  - lvm2 iscsi-initiator-utils sg3_utils
-  - device-mapper-multipath
-  - xfsprogs e2fsprogs btrfs-progs mdadm
-  - cryptsetup
-  - cifs-utils
+  - btrfs-progs
   - WALinuxAgent-udev
-  # Time sync
-  - chrony
   # Allow communication between sudo and SSSD
   # for caching sudo rules by SSSD.
   # https://github.com/coreos/fedora-coreos-tracker/issues/445
   - libsss_sudo
-  # Extra runtime
-  - shadow-utils
   # SSSD; we only ship a subset of the backends
   - sssd-client sssd-ad sssd-ipa sssd-krb5 sssd-ldap
-  # There are things that write outside of the journal still (such as the classic wtmp, etc.)
-  # (auditd also writes outside the journal but it has its own log rotation.)
-  # Anything package layered will also tend to expect files dropped in
-  # /etc/logrotate.d to work.  Really, this is a legacy thing, but if we don't
-  # have it then people's disks will slowly fill up with logs.
-  - logrotate
   # Used by admins interactively
-  - sudo coreutils attr less tar xz gzip bzip2
-  - bash-completion
+  - attr
   - openssl
-  - vim-minimal
   - lsof
   # Provides terminal tools like clear, reset, tput, and tset
   - ncurses
@@ -189,25 +168,14 @@ packages:
   # so we can't put it in file-transfer.yaml
   - fuse-sshfs
   # User experience
-  - console-login-helper-messages-issuegen
   - console-login-helper-messages-motdgen
-  - console-login-helper-messages-profile
-  - toolbox
-  # CoreOS Installer
-  - coreos-installer coreos-installer-bootinfra
   # i18n
   - kbd
-  # Parsing/Interacting with JSON data
-  - jq
   # nvme-cli for managing nvme disks
   - nvme-cli
   # zram-generator (but not zram-generator-defaults) for F33 change
   # https://github.com/coreos/fedora-coreos-tracker/issues/509
   - zram-generator
-  # kdump (https://github.com/coreos/fedora-coreos-tracker/issues/622)
-  - kexec-tools
-  # Similar to irqbalance: https://github.com/coreos/fedora-coreos-tracker/issues/753
-  - stalld
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened
 # yet.  Also we may want to add to rpm-ostree something like arch negation;
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
new file mode 100644
index 0000000000..e5a0c3c7d5
--- /dev/null
+++ b/manifests/system-configuration.yaml
@@ -0,0 +1,37 @@
+# These are packages that are related to configuring parts of the system.
+# It is intended to be kept generic so that it may be shared downstream with
+# RHCOS.
+
+packages:
+  # Configuring SSH keys, cloud provider check-in, etc
+  - afterburn
+  # NTP support
+  - chrony
+  # Installing CoreOS itself
+  - coreos-installer coreos-installer-bootinfra
+  # Storage configuration/management
+  - cifs-utils
+  - cloud-utils-growpart
+  - cryptsetup 
+  - device-mapper-multipath
+  - e2fsprogs
+  - iscsi-initiator-utils
+  - lvm2
+  - mdadm
+  - sg3_utils
+  - xfsprogs
+  # User configuration
+  - passwd
+  - shadow-utils
+  # SELinux policy
+  - selinux-policy-targeted
+  # There are things that write outside of the journal still (such as the 
+  # classic wtmp, etc.)
+  #(auditd also writes outside the journal but it has its own log rotation.)
+  # Anything package layered will also tend to expect files dropped in
+  # /etc/logrotate.d to work.  Really, this is a legacy thing, but if we don't
+  # have it then people's disks will slowly fill up with logs.
+  - logrotate
+  # Boost starving threads
+  # https://github.com/coreos/fedora-coreos-tracker/issues/753
+  - stalld
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
new file mode 100644
index 0000000000..60ce67d593
--- /dev/null
+++ b/manifests/user-experience.yaml
@@ -0,0 +1,36 @@
+# These packages are either widely used utilities/services or 
+# are targeted for improving the general CoreOS user experience.
+# It is intended to be kept generic so that it may be shared downstream with
+# RHCOS.
+
+packages:
+  # Basic user tools
+  ## jq - parsing/interacting with JSON data
+  - bash-completion
+  - coreutils
+  - jq
+  - less
+  - sudo
+  - vim-minimal
+  # File compression/decompression
+  ## (bsdtar - dependency of 35coreos-live dracut module)
+  - bsdtar
+  - bzip2
+  - gzip
+  - tar
+  - xz
+  # Improved MOTD experience
+  - console-login-helper-messages-issuegen
+  - console-login-helper-messages-profile
+  # DNS/DHCP server
+  - dnsmasq
+  # kdump support
+  # https://github.com/coreos/fedora-coreos-tracker/issues/622
+  - kexec-tools
+  # Remote Access
+  - openssh-clients openssh-server
+  # Container tooling
+  - podman
+  - runc
+  - skopeo
+  - toolbox

From e682e95d57431196c86dc028d899014f0b9fc450 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Thu, 4 Mar 2021 11:05:35 -0500
Subject: [PATCH 0103/2157] README: add blurb about interacting with CI jobs

I keep forgetting how to interact with failed CI jobs, so I documented
now to do so.
---
 README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/README.md b/README.md
index c93b82a7b2..6ae62cc33d 100644
--- a/README.md
+++ b/README.md
@@ -149,3 +149,16 @@ done
 # After verifying the list looks good:
 #   - koji untag-build coreos-pool $untaglist
 ```
+
+## Interacting with CI jobs on PRs
+
+Pull requests submitted to this repo will run through a CI job that builds
+and tests Fedora CoreOS with your change.  The CI jobs are run via Jenkins
+in the [CentOS CI cluster](https://jenkins-coreos-ci.apps.ocp.ci.centos.org/) and
+can be retried in case of a failure.
+
+In order to retry the failed job, click through to the details of the failed job
+and use the retry "loopy icon" at the top right of the job page.  You will need
+to be logged into the CentOS CI cluster for this ability.  See the instructions
+on the [fedora-coreos-pipeline](https://github.com/coreos/fedora-coreos-pipeline)
+repo on how to request access to the CentOS CI cluster.
\ No newline at end of file

From 0899d3cad15204b0197c8aed8e77161ce9271905 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 11 Feb 2021 16:13:05 -0500
Subject: [PATCH 0104/2157] overlay: add warning if rootfs < 8G

We've recently had our first case of a "trapped" rootfs running out of
space for upgrades:

https://github.com/coreos/fedora-coreos-tracker/issues/731

Until we actually implement stronger behaviour for this, let's
explicitly check for this case and emit a warning if we detect it. In
the future, we'll look at making this a hard error by default (with an
escape hatch).

For more information, see:

https://github.com/coreos/fedora-coreos-tracker/issues/586#issuecomment-777220000
---
 .../coreos-check-rootfs-size                  | 37 +++++++++++++++++++
 .../ignition-ostree-check-rootfs-size.service | 13 +++++++
 .../40ignition-ostree/module-setup.sh         |  4 ++
 3 files changed, 54 insertions(+)
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
new file mode 100755
index 0000000000..2c320bed93
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
@@ -0,0 +1,37 @@
+#!/bin/bash
+set -euo pipefail
+
+# See also ignition-ostree-check-rootfs-size.service
+# https://github.com/coreos/fedora-coreos-tracker/issues/586#issuecomment-777220000
+
+srcdev=$(findmnt -nvr -o SOURCE /sysroot | tail -n1)
+size=$(lsblk --nodeps --noheadings --bytes -o SIZE "${srcdev}")
+
+MINIMUM_GB=8
+MINIMUM_BYTES=$((1024 * 1024 * 1024 * MINIMUM_GB))
+
+MOTD_DROPIN=/etc/motd.d/60-coreos-rootfs-size.motd
+
+YELLOW=$(echo -e '\033[0;33m')
+RESET=$(echo -e '\033[0m')
+
+if [ "${size}" -lt "${MINIMUM_BYTES}" ]; then
+    mkdir -p "/sysroot/$(dirname "${MOTD_DROPIN}")"
+    cat > "/sysroot/${MOTD_DROPIN}" <<EOF
+${YELLOW}
+############################################################################
+WARNING: The root filesystem is too small. It is strongly recommended to
+allocate at least ${MINIMUM_GB} GiB of space to allow for upgrades. From June 2021, this
+condition will trigger a failure in some cases. For more information, see:
+https://docs.fedoraproject.org/en-US/fedora-coreos/storage/
+
+You may delete this warning using:
+sudo rm ${MOTD_DROPIN}
+############################################################################
+${RESET}
+EOF
+
+    # And also write it on stdout for the journal and console
+    cat "/sysroot/${MOTD_DROPIN}"
+    coreos-relabel "${MOTD_DROPIN}"
+fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
new file mode 100644
index 0000000000..5802f49de9
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Ignition OSTree: Check Root Filesystem Size
+Documentation=https://docs.fedoraproject.org/en-US/fedora-coreos/storage/
+DefaultDependencies=false
+ConditionKernelCommandLine=ostree
+ConditionPathExists=!/run/ostree-live
+After=ignition-ostree-growfs.service
+After=ostree-prepare-root.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-check-rootfs-size
+RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index e88b75c25e..5a52cda3d7 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -89,5 +89,9 @@ install() {
     install_ignition_unit ignition-ostree-growfs.service
     inst_script "$moddir/coreos-growpart" /usr/libexec/coreos-growpart
 
+    install_ignition_unit ignition-ostree-check-rootfs-size.service
+    inst_script "$moddir/coreos-check-rootfs-size" \
+        /usr/libexec/coreos-check-rootfs-size
+
     inst_script "$moddir/coreos-relabel" /usr/bin/coreos-relabel
 }

From 7050e58d3423144e1753ae7bde5f1a9ecc847504 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 4 Mar 2021 22:12:29 +0000
Subject: [PATCH 0105/2157] manifest: Block plymouth

For (datacenter/cloud oriented) servers, we want to see the details by default.
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
---
 manifests/fedora-coreos.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 1d43b2873f..3da75faf8f 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -96,6 +96,9 @@ exclude-packages:
   # Let's make sure initscripts doesn't get pulled back in
   # https://github.com/coreos/fedora-coreos-tracker/issues/220#issuecomment-611566254
   - initscripts
+  # For (datacenter/cloud oriented) servers, we want to see the details by default.
+  # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
+  - plymouth
 
 # And remove some cruft from grub2
 arch-include:

From 2aafa70b5650efc92ace1e3756ea63fcd90fedfe Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 5 Mar 2021 10:33:01 -0500
Subject: [PATCH 0106/2157] README.md: Link to CoreOS CI docs

There's already a bunch of info in the docs there. Let's enhance that if
needed, and just link to it from projects.
---
 README.md | 18 ++++++------------
 1 file changed, 6 insertions(+), 12 deletions(-)

diff --git a/README.md b/README.md
index 6ae62cc33d..23e4f8426d 100644
--- a/README.md
+++ b/README.md
@@ -42,7 +42,7 @@ To derive from this repository, the recommendation is to add it
 as a git submodule.  Then create your own `manifest.yaml` which does
 `include: fedora-coreos-config/ignition-and-ostree.yaml` for example.
 You will also want to create an `overlay.d` and symlink in components
-in this repository's `overlay.d.
+in this repository's `overlay.d`.
 
 ## Overriding packages
 
@@ -150,15 +150,9 @@ done
 #   - koji untag-build coreos-pool $untaglist
 ```
 
-## Interacting with CI jobs on PRs
+## CoreOS CI
 
-Pull requests submitted to this repo will run through a CI job that builds
-and tests Fedora CoreOS with your change.  The CI jobs are run via Jenkins
-in the [CentOS CI cluster](https://jenkins-coreos-ci.apps.ocp.ci.centos.org/) and
-can be retried in case of a failure.
-
-In order to retry the failed job, click through to the details of the failed job
-and use the retry "loopy icon" at the top right of the job page.  You will need
-to be logged into the CentOS CI cluster for this ability.  See the instructions
-on the [fedora-coreos-pipeline](https://github.com/coreos/fedora-coreos-pipeline)
-repo on how to request access to the CentOS CI cluster.
\ No newline at end of file
+Pull requests submitted to this repo are tested by
+[CoreOS CI](https://github.com/coreos/coreos-ci). You can see the pipeline
+executed in `.cci.jenkinsfile`. For more information, including interacting with
+CI, see the [CoreOS CI documentation](https://github.com/coreos/coreos-ci/blob/master/README-upstream-ci.md).

From 30df661b7c313773a689025defe18b42a51386fd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 Mar 2021 21:41:57 +0000
Subject: [PATCH 0107/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/153/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cbf411d7aa..8acb56026a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -694,7 +694,7 @@
       "evra": "0.1.5-46.fc33.x86_64"
     },
     "librepo": {
-      "evra": "1.12.1-1.fc33.x86_64"
+      "evra": "1.13.0-1.fc33.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.14.0-15.fc33.noarch"
@@ -925,10 +925,10 @@
       "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1i-3.fc33.x86_64"
+      "evra": "1:1.1.1j-1.fc33.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1i-3.fc33.x86_64"
+      "evra": "1:1.1.1j-1.fc33.x86_64"
     },
     "os-prober": {
       "evra": "1.77-6.fc33.x86_64"
@@ -1201,7 +1201,7 @@
       "evra": "1.1.9-1.fc33.x86_64"
     },
     "zincati": {
-      "evra": "0.0.17-1.fc33.x86_64"
+      "evra": "0.0.18-1.fc33.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-23.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-04T21:08:45Z",
+    "generated": "2021-03-06T21:07:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-02T22:46:07Z"
+        "generated": "2021-03-04T21:50:19Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-04T19:57:48Z"
+        "generated": "2021-03-05T18:50:33Z"
       }
     }
   }

From 8dbd6fa4878ec0b9a07bc035d05df0ed5bc39997 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 7 Mar 2021 21:50:29 +0000
Subject: [PATCH 0108/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/154/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8acb56026a..12f23a0ebb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -814,7 +814,7 @@
       "evra": "0.2.5-3.fc33.x86_64"
     },
     "libzstd": {
-      "evra": "1.4.7-1.fc33.x86_64"
+      "evra": "1.4.9-1.fc33.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-27.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-06T21:07:40Z",
+    "generated": "2021-03-07T21:14:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-04T21:50:19Z"
+        "generated": "2021-03-06T21:51:24Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-05T18:50:33Z"
+        "generated": "2021-03-07T16:28:23Z"
       }
     }
   }

From ad5eb32f8bde4d09bfc4320166ed5a23953d4d33 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 9 Mar 2021 10:42:18 -0500
Subject: [PATCH 0109/2157] overlay: temporarily ship `seq` in initrd

Previously we pinned clevis to v15 in order to work around
https://github.com/latchset/clevis/pull/295.

But overrides are not set up in the tagger for mechanical streams, so we
can't easily pin in `branched` and `rawhide`. Let's just unpin and
temporarily ship `seq` ourselves to work around this. Put that temporary
hack in `40ignition-ostree` since that's the closest module conceptually
to clevis.
---
 manifest-lock.overrides.aarch64.yaml                   | 10 ----------
 manifest-lock.overrides.ppc64le.yaml                   | 10 ----------
 manifest-lock.overrides.s390x.yaml                     | 10 ----------
 manifest-lock.overrides.x86_64.yaml                    | 10 ----------
 .../dracut/modules.d/40ignition-ostree/module-setup.sh |  3 +++
 5 files changed, 3 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index beb7a92c43..c95c72ed56 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -14,13 +14,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
-  # Pin to previous version until we have
-  # https://github.com/latchset/clevis/pull/295
-  clevis:
-    evra: 15-2.fc33.aarch64
-  clevis-dracut:
-    evra: 15-2.fc33.aarch64
-  clevis-luks:
-    evra: 15-2.fc33.aarch64
-  clevis-systemd:
-    evra: 15-2.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index 9c65d5bf34..f979aca40e 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -14,13 +14,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
-  # Pin to previous version until we have
-  # https://github.com/latchset/clevis/pull/295
-  clevis:
-    evra: 15-2.fc33.ppc64le
-  clevis-dracut:
-    evra: 15-2.fc33.ppc64le
-  clevis-luks:
-    evra: 15-2.fc33.ppc64le
-  clevis-systemd:
-    evra: 15-2.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index a430166e16..c65f06c8b9 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -14,13 +14,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
-  # Pin to previous version until we have
-  # https://github.com/latchset/clevis/pull/295
-  clevis:
-    evra: 15-2.fc33.s390x
-  clevis-dracut:
-    evra: 15-2.fc33.s390x
-  clevis-luks:
-    evra: 15-2.fc33.s390x
-  clevis-systemd:
-    evra: 15-2.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 862b864289..8b0c5346d2 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -14,13 +14,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
-  # Pin to previous version until we have
-  # https://github.com/latchset/clevis/pull/295
-  clevis:
-    evra: 15-2.fc33.x86_64
-  clevis-dracut:
-    evra: 15-2.fc33.x86_64
-  clevis-luks:
-    evra: 15-2.fc33.x86_64
-  clevis-systemd:
-    evra: 15-2.fc33.x86_64
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 5a52cda3d7..d2d61e1d0a 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -59,6 +59,9 @@ install() {
         sgdisk    \
         find
 
+    # TODO f34: check if we can drop this temporary workaround for https://github.com/latchset/clevis/pull/295
+    inst_multiple seq
+
     for x in mount populate; do
         install_ignition_unit ignition-ostree-${x}-var.service
         inst_script "$moddir/ignition-ostree-${x}-var.sh" "/usr/sbin/ignition-ostree-${x}-var"

From cdcb78f3ad71b2df773cac97dc977d01be744e21 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Mar 2021 16:42:48 -0500
Subject: [PATCH 0110/2157] overlay: nuke obsolete coreos-growpart.service
 preset

That service no longer runs in the real root. The preset should've been
removed as part of the move to the initramfs way back when.
---
 overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index fede7828b9..9299d17f89 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -1,5 +1,5 @@
 # Presets here that eventually should live in the generic fedora presets
-enable coreos-growpart.service
+
 # console-login-helper-messages - https://github.com/coreos/console-login-helper-messages
 enable console-login-helper-messages-gensnippet-os-release.service
 enable console-login-helper-messages-gensnippet-ssh-keys.service

From eaca26086e63b53d21e68f9d6b07ce98835409f8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Mar 2021 16:35:51 -0500
Subject: [PATCH 0111/2157] overlay: rename coreos-growpart to
 ignition-ostree-growfs

Now that coreos-growpart is only in the initramfs, its scope is
essentially reduced to handling the `/sysroot`. Let's formalize this by
renaming the script to match the service which calls it and dropping
support for passing the target path as an argument.

Also freshen up the comments at the top of the file.
---
 .../ignition-ostree-growfs.service            |  2 +-
 ...eos-growpart => ignition-ostree-growfs.sh} | 20 +++++++++----------
 .../40ignition-ostree/module-setup.sh         |  5 +++--
 .../root-reprovision/filesystem-only/test.sh  |  4 ++--
 tests/kola/root-reprovision/luks/test.sh      |  6 +++---
 tests/kola/root-reprovision/raid1/test.sh     |  6 +++---
 6 files changed, 22 insertions(+), 21 deletions(-)
 rename overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/{coreos-growpart => ignition-ostree-growfs.sh} (83%)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index 0dc4cf7950..63e4106160 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -15,5 +15,5 @@ Before=ostree-prepare-root.service
 
 [Service]
 Type=oneshot
-ExecStart=/usr/libexec/coreos-growpart /sysroot
+ExecStart=/usr/sbin/ignition-ostree-growfs
 RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
similarity index 83%
rename from overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart
rename to overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 224bb3e974..e7f488360a 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-growpart
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -1,23 +1,23 @@
 #!/bin/bash
 set -euo pipefail
 
-# See also ignition-ostree-growfs.service.
-
-# https://github.com/coreos/fedora-coreos-tracker/issues/18
-# See also image.ks.
-# Growpart /, until we can fix Ignition for separate /var
-# (And eventually we want ignition-disks)
+# This script is run by ignition-ostree-growfs.service. It grows the root
+# partition, unless it determines that either the rootfs was moved or the
+# partition was already resized (e.g. via Ignition).
 
+# If root reprovisioning was triggered, this file contains state of the root
+# partition *before* ignition-disks.
 saved_partstate=/run/ignition-ostree-rootfs-partstate.json
 
-path=$1
-shift
+# We run after the rootfs is mounted at /sysroot, but before ostree-prepare-root
+# moves it to /sysroot/sysroot.
+path=/sysroot
 
 # The use of tail is to avoid errors from duplicate mounts;
 # this shouldn't happen for us but we're being conservative.
 src=$(findmnt -nvr -o SOURCE "$path" | tail -n1)
 
-if [ "${path}" == /sysroot ] && [ -f "${saved_partstate}" ]; then
+if [ -f "${saved_partstate}" ]; then
     # We're still ironing out our rootfs automatic growpart story, see e.g.:
     # https://github.com/coreos/fedora-coreos-tracker/issues/570
     # https://github.com/coreos/fedora-coreos-tracker/issues/586
@@ -76,4 +76,4 @@ case "${TYPE}" in
 esac
 
 # this is useful for tests
-touch /run/coreos-growpart.stamp
+touch /run/ignition-ostree-growfs.stamp
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index d2d61e1d0a..94610d3b6c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -25,7 +25,7 @@ install() {
         sort \
         uniq
 
-    # coreos-growpart deps
+    # ignition-ostree-growfs deps
     inst_multiple  \
         basename   \
         blkid      \
@@ -90,7 +90,8 @@ install() {
         "/usr/sbin/coreos-rootflags"
 
     install_ignition_unit ignition-ostree-growfs.service
-    inst_script "$moddir/coreos-growpart" /usr/libexec/coreos-growpart
+    inst_script "$moddir/ignition-ostree-growfs.sh" \
+        /usr/sbin/ignition-ostree-growfs
 
     install_ignition_unit ignition-ostree-check-rootfs-size.service
     inst_script "$moddir/coreos-check-rootfs-size" \
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 10b2faf8b8..13e671a9e7 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -8,8 +8,8 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that the partition was grown
-      if [ ! -e /run/coreos-growpart.stamp ]; then
-          echo "coreos-growpart did not run"
+      if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
+          echo "ignition-ostree-growfs did not run"
           exit 1
       fi
 
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index ae357437bb..2594f935a1 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -13,9 +13,9 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      # check that growpart didn't run
-      if [ -e /run/coreos-growpart.stamp ]; then
-          echo "coreos-growpart ran"
+      # check that ignition-ostree-growfs ran
+      if [ -e /run/ignition-ostree-growfs.stamp ]; then
+          echo "ignition-ostree-growfs ran"
           exit 1
       fi
 
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 7ecc340e60..b00c72ed89 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -13,9 +13,9 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      # check that growpart didn't run
-      if [ -e /run/coreos-growpart.stamp ]; then
-          echo "coreos-growpart ran"
+      # check that ignition-ostree-growfs didn't run
+      if [ -e /run/ignition-ostree-growfs.stamp ]; then
+          echo "ignition-ostree-growfs ran"
           exit 1
       fi
 

From 544085a8a798e8814f03f61e5d20614652722c0d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Mar 2021 16:48:22 -0500
Subject: [PATCH 0112/2157] overlay/growfs: rename variable

There's lots of `eval`s going on here. Let's copy the rootfs format name
to a dedicated variable instead of re-using the same `eval`'ed name.
---
 .../40ignition-ostree/ignition-ostree-growfs.sh       | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index e7f488360a..2a301edf64 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -40,12 +40,13 @@ fi
 # from the previous contents of the disk (notably ZFS), causing blkid to
 # refuse to return any filesystem type at all.
 eval $(blkid -o export "${src}")
-case "${TYPE:-}" in
+ROOTFS_TYPE=${TYPE:-}
+case "${ROOTFS_TYPE}" in
     xfs|ext4|btrfs) ;;
-    *) echo "error: Unsupported filesystem for ${path}: '${TYPE:-}'" 1>&2; exit 1 ;;
+    *) echo "error: Unsupported filesystem for ${path}: '${ROOTFS_TYPE}'" 1>&2; exit 1 ;;
 esac
 
-if test "${TYPE:-}" = "btrfs"; then
+if test "${ROOTFS_TYPE}" = "btrfs"; then
     # Theoretically btrfs can have multiple devices, but when
     # we start we will always have exactly one.
     devpath=$(btrfs device usage /sysroot | grep /dev | cut -f 1 -d ,)
@@ -65,11 +66,11 @@ growpart "${parent_device}" "${partition}" || true
 
 # Wipe any filesystem signatures from the extended partition that don't
 # correspond to the FS type we detected earlier.
-wipefs -af -t "no${TYPE}" "${src}"
+wipefs -af -t "no${ROOTFS_TYPE}" "${src}"
 
 # TODO: Add XFS to https://github.com/systemd/systemd/blob/master/src/partition/growfs.c
 # and use it instead.
-case "${TYPE}" in
+case "${ROOTFS_TYPE}" in
     xfs) xfs_growfs "${path}" ;;
     ext4) resize2fs "${src}" ;;
     btrfs) btrfs filesystem resize max ${path} ;;

From f12a5132ebe169ad643dab5b7fe028889c77a386 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 9 Mar 2021 11:11:46 -0500
Subject: [PATCH 0113/2157] kola-denylist.yaml: add
 ext.config.podman.rootless-systemd

This test is currently failing on f34+ due to a regression in buildah:
https://github.com/containers/buildah/issues/3071
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index cf3a3d8c88..5c0edff573 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,3 +5,8 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
+- pattern: ext.config.podman.rootless-systemd
+  tracker: https://github.com/containers/buildah/issues/3071
+  streams:
+    - branched
+    - rawhide

From 43437b494db35b764c89ff65130f32f505a4f7c9 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Mar 2021 16:46:58 -0500
Subject: [PATCH 0114/2157] overlay/growfs: fix in-place root reprovisioning
 detection

The semantic we want to capture for auto-growing the rootfs is that we
want it to kick in as long as either no rootfs reprovisioning happened,
or it was in-place (i.e. reused the same partition).

We detected this by checking that the block device (i.e. partition)
backing the rootfs and its size didn't change. But this breaks with
in-place LUKS reprovisioning because the immediate block device does
change (to the LUKS container), even though it's ultimately still backed
by the same untouched partition.

Fix this by (1) verifying that the rootfs is still ultimately backed by
the same partition, and (2) that partition has not been resized.

This doesn't actually add support for growing LUKS containers yet, but
it's prep for that.
---
 .../ignition-ostree-growfs.sh                 | 74 +++++++++++--------
 .../ignition-ostree-transposefs.sh            |  4 +-
 2 files changed, 44 insertions(+), 34 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 2a301edf64..64bae7ea26 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -7,7 +7,7 @@ set -euo pipefail
 
 # If root reprovisioning was triggered, this file contains state of the root
 # partition *before* ignition-disks.
-saved_partstate=/run/ignition-ostree-rootfs-partstate.json
+saved_partstate=/run/ignition-ostree-rootfs-partstate.sh
 
 # We run after the rootfs is mounted at /sysroot, but before ostree-prepare-root
 # moves it to /sysroot/sysroot.
@@ -17,24 +17,37 @@ path=/sysroot
 # this shouldn't happen for us but we're being conservative.
 src=$(findmnt -nvr -o SOURCE "$path" | tail -n1)
 
-if [ -f "${saved_partstate}" ]; then
-    # We're still ironing out our rootfs automatic growpart story, see e.g.:
-    # https://github.com/coreos/fedora-coreos-tracker/issues/570
-    # https://github.com/coreos/fedora-coreos-tracker/issues/586
-    #
-    # In the context of rootfs reprovisioning, for now our rule is the
-    # following: if the rootfs partition was moved off of the boot disk or it
-    # was resized, then we don't growpart.
-    #
-    # To detect this, we compare the output of `lsblk --paths -o NAME,SIZE`
-    # before and after `ignition-disks.service`.
-    partstate=$(lsblk "${src}" --nodeps --paths --json -b -o NAME,SIZE | jq -c .)
-    if [ "${partstate}" != "$(cat "${saved_partstate}")" ]; then
-        echo "coreos-growpart: detected rootfs partition changes; not auto-growing"
+if [ ! -f "${saved_partstate}" ]; then
+    partition=$(realpath /dev/disk/by-label/root)
+else
+    # The rootfs was reprovisioned. Our rule in this case is: we only grow if
+    # the partition backing the rootfs is the same and its size didn't change
+    # (IOW, it was an in-place reprovisioning; e.g. xfs -> btrfs).
+    source "${saved_partstate}"
+    if [ "${TYPE}" != "part" ]; then
+        # this really should never happen; but play nice
+        echo "$0: original rootfs blockdev not of type 'part'; not auto-growing"
+        exit 0
+    fi
+    partition=$(realpath "${NAME}")
+    if [ "${SIZE}" != "$(lsblk --nodeps -bno SIZE "${partition}")" ]; then
+        echo "$0: original root partition changed size; not auto-growing"
+        exit 0
+    fi
+    if ! lsblk -no MOUNTPOINT "${partition}" | grep -q '^/sysroot$'; then
+        echo "$0: original root partition no longer backing rootfs; not auto-growing"
         exit 0
     fi
 fi
 
+# Go through each blockdev in the hierarchy and verify we know how to grow them
+lsblk -no TYPE "${partition}" | while read dev; do
+    case "${dev}" in
+        part) ;;
+        *) echo "error: Unsupported blockdev type ${dev}" 1>&2; exit 1 ;;
+    esac
+done
+
 # Get the filesystem type before extending the partition.  This matters
 # because the partition, once extended, might include leftover superblocks
 # from the previous contents of the disk (notably ZFS), causing blkid to
@@ -46,23 +59,20 @@ case "${ROOTFS_TYPE}" in
     *) echo "error: Unsupported filesystem for ${path}: '${ROOTFS_TYPE}'" 1>&2; exit 1 ;;
 esac
 
-if test "${ROOTFS_TYPE}" = "btrfs"; then
-    # Theoretically btrfs can have multiple devices, but when
-    # we start we will always have exactly one.
-    devpath=$(btrfs device usage /sysroot | grep /dev | cut -f 1 -d ,)
-    devpath=$(realpath /sys/class/block/${devpath#/dev/})
-else
-    # Handle traditional disk/partitions
-    majmin=$(findmnt -nvr -o MAJ:MIN "$path" | tail -n1)
-    devpath=$(realpath "/sys/dev/block/$majmin")
-fi
-partition="${partition:-$(cat "$devpath/partition")}"
-parent_path=$(dirname "$devpath")
-parent_device=/dev/$(basename "${parent_path}")
-
-# TODO: make this idempotent, and don't error out if
-# we can't resize.
-growpart "${parent_device}" "${partition}" || true
+# Now, go through the hierarchy, growing everything
+lsblk --paths --pairs -o NAME,TYPE,PKNAME "${partition}" | while read line; do
+    eval "${line}"
+    case "${TYPE}" in
+        part)
+            majmin=$(echo $(lsblk -dno MAJ:MIN "${NAME}"))
+            partnum=$(cat "/sys/dev/block/${majmin}/partition")
+            # XXX: ideally this'd be idempotent and we wouldn't `|| :`
+            growpart "${PKNAME}" "${partnum}" || :
+            ;;
+        # already checked
+        *) echo "unreachable" 1>&2; exit 1 ;;
+    esac
+done
 
 # Wipe any filesystem signatures from the extended partition that don't
 # correspond to the FS type we detected earlier.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 42043ad6e8..18224c363c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -22,7 +22,7 @@ saved_esp=${saved_data}/esp
 saved_bios=${saved_data}/bios
 saved_prep=${saved_data}/prep
 zram_dev=${saved_data}/zram_dev
-partstate_root=/run/ignition-ostree-rootfs-partstate.json
+partstate_root=/run/ignition-ostree-rootfs-partstate.sh
 
 # Print jq query string for wiped filesystems with label $1
 query_fslabel() {
@@ -147,7 +147,7 @@ case "${1:-}" in
             mount_verbose "${root_part}" /sysroot
             cp -aT /sysroot "${saved_root}"
             # also store the state of the partition
-            lsblk "${root_part}" --nodeps --paths --json -b -o NAME,SIZE | jq -c . > "${partstate_root}"
+            lsblk "${root_part}" --nodeps --pairs -b --paths -o NAME,TYPE,SIZE > "${partstate_root}"
         fi
         if [ -d "${saved_boot}" ]; then
             echo "Moving bootfs to RAM..."

From c2d88f0282275f7a9b704d4954f2008ebf423c4f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 4 Mar 2021 16:49:14 -0500
Subject: [PATCH 0115/2157] overlay/growfs: support growing LUKS containers

We need to support in-place LUKS root reprovisioning. This is pretty
straightforward, modulo the terrible clevis hack used to resize the
container. We'll want to circle back and clean this up once there's a
better interface to do this (but at least until then, we have tests
which cover this).

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1934174
---
 .../40ignition-ostree/ignition-ostree-growfs.sh       | 11 +++++++++--
 tests/kola/root-reprovision/luks/test.sh              |  4 ++--
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 64bae7ea26..99239c864f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -22,7 +22,7 @@ if [ ! -f "${saved_partstate}" ]; then
 else
     # The rootfs was reprovisioned. Our rule in this case is: we only grow if
     # the partition backing the rootfs is the same and its size didn't change
-    # (IOW, it was an in-place reprovisioning; e.g. xfs -> btrfs).
+    # (IOW, it was an in-place reprovisioning; e.g. LUKS or xfs -> btrfs).
     source "${saved_partstate}"
     if [ "${TYPE}" != "part" ]; then
         # this really should never happen; but play nice
@@ -43,7 +43,7 @@ fi
 # Go through each blockdev in the hierarchy and verify we know how to grow them
 lsblk -no TYPE "${partition}" | while read dev; do
     case "${dev}" in
-        part) ;;
+        part|crypt) ;;
         *) echo "error: Unsupported blockdev type ${dev}" 1>&2; exit 1 ;;
     esac
 done
@@ -69,6 +69,13 @@ lsblk --paths --pairs -o NAME,TYPE,PKNAME "${partition}" | while read line; do
             # XXX: ideally this'd be idempotent and we wouldn't `|| :`
             growpart "${PKNAME}" "${partnum}" || :
             ;;
+        crypt)
+            # XXX: yuck... we need to expose this sanely in clevis
+            (. /usr/bin/clevis-luks-common-functions
+             eval $(udevadm info --query=property --export "${NAME}")
+             clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
+            )
+            ;;
         # already checked
         *) echo "unreachable" 1>&2; exit 1 ;;
     esac
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 2594f935a1..434b4fbd60 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -14,8 +14,8 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs ran
-      if [ -e /run/ignition-ostree-growfs.stamp ]; then
-          echo "ignition-ostree-growfs ran"
+      if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
+          echo "ignition-ostree-growfs did not run"
           exit 1
       fi
 

From 48ffc572e5db4ef4a28e2761a6c7a2a5792ede75 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 11 Mar 2021 17:09:04 -0500
Subject: [PATCH 0116/2157] overrides: pin to kernel-5.10.19-200.fc33 for
 rootless podman

There's a regression in 5.10.20+ which breaks rootless podman:
https://github.com/containers/buildah/issues/3071

(This is the same regression which prompted
https://github.com/coreos/fedora-coreos-config/pull/883 but for the
production streams, let's try to avoid exposing the regression to users
for now while it gets sorted out.)
---
 manifest-lock.overrides.aarch64.yaml | 8 ++++++++
 manifest-lock.overrides.ppc64le.yaml | 8 ++++++++
 manifest-lock.overrides.s390x.yaml   | 8 ++++++++
 manifest-lock.overrides.x86_64.yaml  | 8 ++++++++
 4 files changed, 32 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index c95c72ed56..4eaafaef8e 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -14,3 +14,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.aarch64
+  # There's a regression in 5.10.20+ which breaks rootless podman
+  # https://github.com/containers/buildah/issues/3071
+  kernel:
+    evra: 5.10.19-200.fc33.aarch64
+  kernel-core:
+    evra: 5.10.19-200.fc33.aarch64
+  kernel-modules:
+    evra: 5.10.19-200.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index f979aca40e..ffa467a162 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -14,3 +14,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.ppc64le
+  # There's a regression in 5.10.20+ which breaks rootless podman
+  # https://github.com/containers/buildah/issues/3071
+  kernel:
+    evra: 5.10.19-200.fc33.ppc64le
+  kernel-core:
+    evra: 5.10.19-200.fc33.ppc64le
+  kernel-modules:
+    evra: 5.10.19-200.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index c65f06c8b9..35e6144bef 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -14,3 +14,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.s390x
+  # There's a regression in 5.10.20+ which breaks rootless podman
+  # https://github.com/containers/buildah/issues/3071
+  kernel:
+    evra: 5.10.19-200.fc33.s390x
+  kernel-core:
+    evra: 5.10.19-200.fc33.s390x
+  kernel-modules:
+    evra: 5.10.19-200.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 8b0c5346d2..9c4de90e2c 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -14,3 +14,11 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evra: 246.7-1.fc33.x86_64
+  # There's a regression in 5.10.20+ which breaks rootless podman
+  # https://github.com/containers/buildah/issues/3071
+  kernel:
+    evra: 5.10.19-200.fc33.x86_64
+  kernel-core:
+    evra: 5.10.19-200.fc33.x86_64
+  kernel-modules:
+    evra: 5.10.19-200.fc33.x86_64

From 1a3b2b4cc86d557521379238ae51b51ee64d50ff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 Mar 2021 21:42:04 +0000
Subject: [PATCH 0117/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/161/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 31 ++++++++++++++-----------------
 1 file changed, 14 insertions(+), 17 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 12f23a0ebb..ed2487d35e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -94,16 +94,16 @@
       "evra": "6.11-2.fc33.x86_64"
     },
     "clevis": {
-      "evra": "15-2.fc33.x86_64"
+      "evra": "16-1.fc33.x86_64"
     },
     "clevis-dracut": {
-      "evra": "15-2.fc33.x86_64"
+      "evra": "16-1.fc33.x86_64"
     },
     "clevis-luks": {
-      "evra": "15-2.fc33.x86_64"
+      "evra": "16-1.fc33.x86_64"
     },
     "clevis-systemd": {
-      "evra": "15-2.fc33.x86_64"
+      "evra": "16-1.fc33.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-7.fc33.noarch"
@@ -127,7 +127,7 @@
       "evra": "0.21.1-2.fc33.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.151.0-1.fc33.noarch"
+      "evra": "2:2.158.0-1.fc33.noarch"
     },
     "containerd": {
       "evra": "1.4.3-1.fc33.x86_64"
@@ -340,7 +340,7 @@
       "evra": "5.1.0-2.fc33.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.6-1.fc33.x86_64"
+      "evra": "1.0.7-1.fc33.x86_64"
     },
     "gettext": {
       "evra": "0.21-3.fc33.x86_64"
@@ -349,7 +349,7 @@
       "evra": "0.21-3.fc33.x86_64"
     },
     "git-core": {
-      "evra": "2.29.2-3.fc33.x86_64"
+      "evra": "2.30.2-1.fc33.x86_64"
     },
     "glib2": {
       "evra": "2.66.7-1.fc33.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-27.fc33.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210208-117.fc33.noarch"
+      "evra": "20210208-118.fc33.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210208-117.fc33.noarch"
+      "evra": "20210208-118.fc33.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.28-1.fc33.x86_64"
@@ -894,9 +894,6 @@
     "nftables": {
       "evra": "1:0.9.3-8.fc33.x86_64"
     },
-    "nmap-ncat": {
-      "evra": "2:7.80-5.fc33.x86_64"
-    },
     "npth": {
       "evra": "1.6-5.fc33.x86_64"
     },
@@ -1090,7 +1087,7 @@
       "evra": "2.3.2-8.fc33.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.1.8-1.fc33.x86_64"
+      "evra": "1.1.9-1.fc33.x86_64"
     },
     "snappy": {
       "evra": "1.1.8-4.fc33.x86_64"
@@ -1177,7 +1174,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2559-1.fc33.x86_64"
+      "evra": "2:8.2.2576-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-07T21:14:47Z",
+    "generated": "2021-03-14T21:07:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-06T21:51:24Z"
+        "generated": "2021-03-07T21:58:31Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-07T16:28:23Z"
+        "generated": "2021-03-13T21:29:53Z"
       }
     }
   }

From bc6d95a0290d74195ba3279f10bdec48b0688d22 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 11 Mar 2021 14:51:18 -0500
Subject: [PATCH 0118/2157] image.yaml: bump virtual disk images to 10G

Right now, our images are triggering the new 8G warning because the disk
size itself is 8G, so the rootfs is less than that. Let's go to 10G so
we meet our own standard.
---
 image.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/image.yaml b/image.yaml
index a91ab32025..6e83494bd7 100644
--- a/image.yaml
+++ b/image.yaml
@@ -1,6 +1,7 @@
-# This replaces image.ks
-# size is the target disk size in GB.
-size: 8
+# Target disk size in GB.
+# Make it at least 10G because we want the rootfs to be at least 8G:
+# https://github.com/coreos/fedora-coreos-tracker/issues/586
+size: 10
 
 extra-kargs:
     # Disable SMT on systems vulnerable to MDS or any similar future issue.

From 5ccbbf144e8fa2204d0c78d0e29f82fd1d42636a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 16 Mar 2021 09:23:53 -0400
Subject: [PATCH 0119/2157] manifest: use `mkdir -p` for resolved.conf.d/ dir

This directory already exists in the latest f34 builds, so we need
`mkdir -p` here.
---
 manifests/fedora-coreos-base.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 55da9e082e..ad07f231c7 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -90,7 +90,7 @@ postprocess:
     set -xeuo pipefail
     # Get us back to Fedora 32's nsswitch.conf settings
     sed -i 's/^hosts:.*/hosts:      files dns myhostname/' /etc/nsswitch.conf
-    mkdir /usr/lib/systemd/resolved.conf.d/
+    mkdir -p /usr/lib/systemd/resolved.conf.d/
     cat > /usr/lib/systemd/resolved.conf.d/fedora-coreos-stub-listener.conf <<'EOF'
     # Fedora CoreOS is electing to not use systemd-resolved's internal
     # logic for now because of issues with setting hostnames via reverse DNS.

From 50cce16f873bda540420ddcb233cdaf56c9c4e52 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 16 Mar 2021 21:52:39 +0000
Subject: [PATCH 0120/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/165/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ed2487d35e..b1e2fbd3df 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,7 +130,7 @@
       "evra": "2:2.158.0-1.fc33.noarch"
     },
     "containerd": {
-      "evra": "1.4.3-1.fc33.x86_64"
+      "evra": "1.4.4-1.fc33.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "0.9.1-2.fc33.x86_64"
@@ -379,22 +379,22 @@
       "evra": "3.4-5.fc33.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.04-32.fc33.noarch"
+      "evra": "1:2.04-33.fc33.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.04-32.fc33.x86_64"
+      "evra": "1:2.04-33.fc33.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.04-32.fc33.x86_64"
+      "evra": "1:2.04-33.fc33.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.04-32.fc33.noarch"
+      "evra": "1:2.04-33.fc33.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.04-32.fc33.x86_64"
+      "evra": "1:2.04-33.fc33.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.04-32.fc33.x86_64"
+      "evra": "1:2.04-33.fc33.x86_64"
     },
     "gzip": {
       "evra": "1.10-3.fc33.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.4-0.fc33.x86_64"
+      "evra": "2:4.13.5-0.fc33.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-1.fc33.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.0-10.fc33.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.4-0.fc33.x86_64"
+      "evra": "2:4.13.5-0.fc33.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.18-1.fc33.x86_64"
@@ -1042,16 +1042,16 @@
       "evra": "2:1.0.0-279.dev.gitdedadbf.fc33.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.4-0.fc33.x86_64"
+      "evra": "2:4.13.5-0.fc33.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.4-0.fc33.noarch"
+      "evra": "2:4.13.5-0.fc33.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.4-0.fc33.x86_64"
+      "evra": "2:4.13.5-0.fc33.x86_64"
     },
     "samba-libs": {
-      "evra": "2:4.13.4-0.fc33.x86_64"
+      "evra": "2:4.13.5-0.fc33.x86_64"
     },
     "sed": {
       "evra": "4.8-5.fc33.x86_64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-14T21:07:43Z",
+    "generated": "2021-03-16T21:09:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-07T21:58:31Z"
+        "generated": "2021-03-15T18:59:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-13T21:29:53Z"
+        "generated": "2021-03-15T20:35:49Z"
       }
     }
   }

From 570fb45df744dff0adf213409fe0744ee6baac8f Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Thu, 3 Dec 2020 11:48:16 +0000
Subject: [PATCH 0121/2157] fedora-coreos-base: add nm-cloud-setup, forward
 platform variables

This adds nm-cloud-setup package to fedora-coreos-base set,
and configures the relevant environment variable for AWS, Azure,
and GCP.
---
 manifests/networking-tools.yaml                |  3 +++
 .../20-aws-nm-cloud-setup.ign                  | 16 ++++++++++++++++
 .../20-azure-nm-cloud-setup.ign                | 16 ++++++++++++++++
 .../20-gcp-nm-cloud-setup.ign                  | 16 ++++++++++++++++
 .../50ignition-conf-fcos/module-setup.sh       | 18 ++++++++++++++++++
 5 files changed, 69 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-aws-nm-cloud-setup.ign
 create mode 100644 overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-azure-nm-cloud-setup.ign
 create mode 100644 overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-gcp-nm-cloud-setup.ign

diff --git a/manifests/networking-tools.yaml b/manifests/networking-tools.yaml
index 636fca03fc..2221aa7bca 100644
--- a/manifests/networking-tools.yaml
+++ b/manifests/networking-tools.yaml
@@ -10,6 +10,9 @@ packages:
   # Teaming https://github.com/coreos/fedora-coreos-config/pull/289 
   # and http://bugzilla.redhat.com/1758162
   - NetworkManager-team teamd
+  # Support for cloud quirks and dynamic config in real rootfs:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/320
+  - NetworkManager-cloud-setup
   # Route manipulation and QoS
   - iproute iproute-tc
   # Firewall manipulation
diff --git a/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-aws-nm-cloud-setup.ign b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-aws-nm-cloud-setup.ign
new file mode 100644
index 0000000000..0d39b1686c
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-aws-nm-cloud-setup.ign
@@ -0,0 +1,16 @@
+{
+  "ignition": {
+    "version": "3.0.0"
+  },
+  "storage": {
+    "files": [
+      {
+        "path": "/etc/systemd/system/nm-cloud-setup.service.d/env-aws.conf",
+        "contents": {
+          "source": "data:,%5BService%5D%0AEnvironment%3DNM_CLOUD_SETUP_EC2%3Dyes%0A"
+        },
+        "mode": 420
+      }
+    ]
+  }
+}
diff --git a/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-azure-nm-cloud-setup.ign b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-azure-nm-cloud-setup.ign
new file mode 100644
index 0000000000..ed2a5c5ac8
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-azure-nm-cloud-setup.ign
@@ -0,0 +1,16 @@
+{
+  "ignition": {
+    "version": "3.0.0"
+  },
+  "storage": {
+    "files": [
+      {
+        "path": "/etc/systemd/system/nm-cloud-setup.service.d/env-azure.conf",
+        "contents": {
+          "source": "data:,%5BService%5D%0AEnvironment%3DNM_CLOUD_SETUP_AZURE%3Dyes%0A"
+        },
+        "mode": 420
+      }
+    ]
+  }
+}
diff --git a/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-gcp-nm-cloud-setup.ign b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-gcp-nm-cloud-setup.ign
new file mode 100644
index 0000000000..22966dd36b
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/20-gcp-nm-cloud-setup.ign
@@ -0,0 +1,16 @@
+{
+  "ignition": {
+    "version": "3.0.0"
+  },
+  "storage": {
+    "files": [
+      {
+        "path": "/etc/systemd/system/nm-cloud-setup.service.d/env-gcp.conf",
+        "contents": {
+          "source": "data:,%5BService%5D%0AEnvironment%3DNM_CLOUD_SETUP_GCP%3Dyes%0A"
+        },
+        "mode": 420
+      }
+    ]
+  }
+}
diff --git a/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/module-setup.sh b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/module-setup.sh
index 88463c4b58..8e9f9d923d 100755
--- a/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/module-setup.sh
+++ b/overlay.d/15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos/module-setup.sh
@@ -8,6 +8,24 @@ depends() {
 
 install() {
     mkdir -p "$initdir/usr/lib/ignition/base.d"
+    mkdir -p "$initdir/usr/lib/ignition/base.platform.d"
+
+    # Common entries
     inst "$moddir/30-afterburn-sshkeys-core.ign" \
         "/usr/lib/ignition/base.d/30-afterburn-sshkeys-core.ign"
+
+    # Platform specific: aws
+    mkdir -p "$initdir/usr/lib/ignition/base.platform.d/aws"
+    inst "$moddir/20-aws-nm-cloud-setup.ign" \
+        "/usr/lib/ignition/base.platform.d/aws/20-aws-nm-cloud-setup.ign"
+
+    # Platform specific: azure
+    mkdir -p "$initdir/usr/lib/ignition/base.platform.d/azure"
+    inst "$moddir/20-azure-nm-cloud-setup.ign" \
+        "/usr/lib/ignition/base.platform.d/azure/20-azure-nm-cloud-setup.ign"
+
+    # Platform specific: gcp
+    mkdir -p "$initdir/usr/lib/ignition/base.platform.d/gcp"
+    inst "$moddir/20-gcp-nm-cloud-setup.ign" \
+        "/usr/lib/ignition/base.platform.d/gcp/20-gcp-nm-cloud-setup.ign"
 }

From 33cedaf13dc23521bb72be4c0c9c64cd0f84f4ef Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Thu, 3 Dec 2020 12:18:12 +0000
Subject: [PATCH 0122/2157] lockfile: refresh after manifest changes

---
 manifest-lock.x86_64.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b1e2fbd3df..fb5d1ecb0c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -3,6 +3,9 @@
     "NetworkManager": {
       "evra": "1:1.26.6-1.fc33.x86_64"
     },
+    "NetworkManager-cloud-setup": {
+      "evra": "1:1.26.6-1.fc33.x86_64"
+    },
     "NetworkManager-libnm": {
       "evra": "1:1.26.6-1.fc33.x86_64"
     },

From 10ebedac9628273a738872bdcac730bdb0bf1385 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 17 Mar 2021 22:15:57 +0000
Subject: [PATCH 0123/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/166/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fb5d1ecb0c..fd723bf5a6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,16 +97,16 @@
       "evra": "6.11-2.fc33.x86_64"
     },
     "clevis": {
-      "evra": "16-1.fc33.x86_64"
+      "evra": "16-2.fc33.x86_64"
     },
     "clevis-dracut": {
-      "evra": "16-1.fc33.x86_64"
+      "evra": "16-2.fc33.x86_64"
     },
     "clevis-luks": {
-      "evra": "16-1.fc33.x86_64"
+      "evra": "16-2.fc33.x86_64"
     },
     "clevis-systemd": {
-      "evra": "16-1.fc33.x86_64"
+      "evra": "16-2.fc33.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-7.fc33.noarch"
@@ -136,7 +136,7 @@
       "evra": "1.4.4-1.fc33.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "0.9.1-2.fc33.x86_64"
+      "evra": "0.9.1-4.fc33.x86_64"
     },
     "containers-common": {
       "evra": "4:1-4.fc33.noarch"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2576-1.fc33.x86_64"
+      "evra": "2:8.2.2607-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,7 +1211,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-16T21:09:40Z",
+    "generated": "2021-03-17T21:12:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
@@ -1220,7 +1220,7 @@
         "generated": "2021-03-15T18:59:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-15T20:35:49Z"
+        "generated": "2021-03-17T01:37:53Z"
       }
     }
   }

From d6ce1565e5ea75f67074bc061bc20a76e24614ff Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Thu, 18 Mar 2021 12:59:20 -0400
Subject: [PATCH 0124/2157] overrides: fast-track coreos-installer 0.8.0

---
 manifest-lock.overrides.aarch64.yaml | 6 ++++++
 manifest-lock.overrides.ppc64le.yaml | 6 ++++++
 manifest-lock.overrides.s390x.yaml   | 6 ++++++
 manifest-lock.overrides.x86_64.yaml  | 6 ++++++
 4 files changed, 24 insertions(+)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 4eaafaef8e..54458f8673 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -22,3 +22,9 @@ packages:
     evra: 5.10.19-200.fc33.aarch64
   kernel-modules:
     evra: 5.10.19-200.fc33.aarch64
+  # Fast-track coreos-installer release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
+  coreos-installer:
+    evra: 0.8.0-1.fc33.aarch64
+  coreos-installer-bootinfra:
+    evra: 0.8.0-1.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index ffa467a162..df28b9cfcd 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -22,3 +22,9 @@ packages:
     evra: 5.10.19-200.fc33.ppc64le
   kernel-modules:
     evra: 5.10.19-200.fc33.ppc64le
+  # Fast-track coreos-installer release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
+  coreos-installer:
+    evra: 0.8.0-1.fc33.ppc64le
+  coreos-installer-bootinfra:
+    evra: 0.8.0-1.fc33.ppc64le
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index 35e6144bef..4fcee5c6e7 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -22,3 +22,9 @@ packages:
     evra: 5.10.19-200.fc33.s390x
   kernel-modules:
     evra: 5.10.19-200.fc33.s390x
+  # Fast-track coreos-installer release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
+  coreos-installer:
+    evra: 0.8.0-1.fc33.s390x
+  coreos-installer-bootinfra:
+    evra: 0.8.0-1.fc33.s390x
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 9c4de90e2c..c348026ac0 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -22,3 +22,9 @@ packages:
     evra: 5.10.19-200.fc33.x86_64
   kernel-modules:
     evra: 5.10.19-200.fc33.x86_64
+  # Fast-track coreos-installer release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
+  coreos-installer:
+    evra: 0.8.0-1.fc33.x86_64
+  coreos-installer-bootinfra:
+    evra: 0.8.0-1.fc33.x86_64

From 195ae1fc4b52bc7e52e2bcbbbc2761555cd7d16f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Mar 2021 13:35:49 -0400
Subject: [PATCH 0125/2157] overlay: don't restamp rootfs UUID if
 reprovisioning

Since we've created a new filesystem anyway.

This implicitly also works around the service racing against the
`by-label/root` symlink not being up to date after reprovisioning (which
`ignition-ostree-transposefs-restore.service` now intercepts and fixes).
---
 .../40ignition-ostree/ignition-ostree-uuid-root.service         | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index 8f3ea1c5f5..45da600af0 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -7,6 +7,8 @@ ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target
 After=ignition-disks.service
+# If we've reprovisioned the rootfs, then there's no need to restamp
+ConditionPathExists=!/run/ignition-ostree-transposefs
 
 After=dev-disk-by\x2dlabel-root.device
 # Avoid racing with fsck

From 5228316f76186c7e91236c53f7f005ca475ca927 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Mar 2021 13:38:16 -0400
Subject: [PATCH 0126/2157] overlay/growfs: handle broken lsblk in el8

Sometimes `lsblk` returns devices in the wrong order, so we can't rely
on it to iterate over the devices in hierarchical order. Instead, use
the `holders/` directory ourselves directly and use `--nodeps` when
calling `lsblk`.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1934174#c4
See: https://bugzilla.redhat.com/show_bug.cgi?id=1940607
See: https://github.com/coreos/coreos-installer/pull/453
---
 .../ignition-ostree-growfs.sh                 | 26 +++++++++++++++----
 .../40ignition-ostree/module-setup.sh         |  1 +
 2 files changed, 22 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 99239c864f..9b629b0194 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -59,13 +59,16 @@ case "${ROOTFS_TYPE}" in
     *) echo "error: Unsupported filesystem for ${path}: '${ROOTFS_TYPE}'" 1>&2; exit 1 ;;
 esac
 
-# Now, go through the hierarchy, growing everything
-lsblk --paths --pairs -o NAME,TYPE,PKNAME "${partition}" | while read line; do
-    eval "${line}"
+# Now, go through the hierarchy, growing everything. Note we go one device at a
+# time using --nodeps, because ordering is buggy in el8:
+# https://bugzilla.redhat.com/show_bug.cgi?id=1940607
+current_blkdev=${partition}
+while true; do
+    eval "$(lsblk --paths --nodeps --pairs -o NAME,TYPE,PKNAME "${current_blkdev}")"
+    MAJMIN=$(echo $(lsblk -dno MAJ:MIN "${NAME}"))
     case "${TYPE}" in
         part)
-            majmin=$(echo $(lsblk -dno MAJ:MIN "${NAME}"))
-            partnum=$(cat "/sys/dev/block/${majmin}/partition")
+            partnum=$(cat "/sys/dev/block/${MAJMIN}/partition")
             # XXX: ideally this'd be idempotent and we wouldn't `|| :`
             growpart "${PKNAME}" "${partnum}" || :
             ;;
@@ -73,12 +76,25 @@ lsblk --paths --pairs -o NAME,TYPE,PKNAME "${partition}" | while read line; do
             # XXX: yuck... we need to expose this sanely in clevis
             (. /usr/bin/clevis-luks-common-functions
              eval $(udevadm info --query=property --export "${NAME}")
+             # lsblk doesn't print PKNAME of crypt devices with --nodeps
+             PKNAME=/dev/$(ls "/sys/dev/block/${MAJMIN}/slaves")
              clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
             )
             ;;
         # already checked
         *) echo "unreachable" 1>&2; exit 1 ;;
     esac
+    holders="/sys/dev/block/${MAJMIN}/holders"
+    [ -d "${holders}" ] || break
+    nholders="$(ls "${holders}" | wc -l)"
+    if [ "${nholders}" -eq 0 ]; then
+        break
+    elif [ "${nholders}" -gt 1 ]; then
+        # this shouldn't happen since we've checked the partition types already
+        echo "error: Unsupported block device with multiple children: ${NAME}" 1>&2
+        exit 1
+    fi
+    current_blkdev=/dev/$(ls "${holders}")
 done
 
 # Wipe any filesystem signatures from the extended partition that don't
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 94610d3b6c..57239dc966 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -40,6 +40,7 @@ install() {
         touch      \
         xfs_admin  \
         xfs_growfs \
+        wc         \
         wipefs
 
     # growpart deps

From b9dca277336fdb88ab565afd0962745eb64f8f09 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 19 Mar 2021 12:17:18 -0400
Subject: [PATCH 0127/2157] tests/misc-ro: check for prjquota

By default, we mount XFS with the `prjquota` option. Verify this.
---
 tests/kola/misc-ro | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index dc9e706c6b..bf36423e05 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -144,3 +144,9 @@ if [ $(systemctl is-enabled systemd-repart.service) != 'masked' ]; then
     fatal "systemd-repart.service systemd unit should be masked"
 fi
 ok "systemd-repart.service systemd unit is masked"
+
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"

From 1b11322d9e98f37a8efb00dde4efd02ebaaff587 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 19 Mar 2021 12:20:20 -0400
Subject: [PATCH 0128/2157] tests/root-reprovision: use `ok` and `fatal`
 helpers

We should have those in a shared shell library.
---
 .../root-reprovision/filesystem-only/test.sh     | 16 +++++++++++++---
 tests/kola/root-reprovision/luks/test.sh         | 16 +++++++++++++---
 tests/kola/root-reprovision/raid1/test.sh        | 16 +++++++++++++---
 3 files changed, 39 insertions(+), 9 deletions(-)

diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 13e671a9e7..4833ae52ad 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -2,15 +2,24 @@
 # kola: {"platforms": "qemu", "minMemory": 4096}
 set -xeuo pipefail
 
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
 fstype=$(findmnt -nvr / -o FSTYPE)
 [[ $fstype == ext4 ]]
+ok "source is ext4"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that the partition was grown
       if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
-          echo "ignition-ostree-growfs did not run"
-          exit 1
+          fatal "ignition-ostree-growfs did not run"
       fi
 
       # reboot once to sanity-check we can find root on second boot
@@ -19,6 +28,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 
   rebooted)
       grep root=UUID= /proc/cmdline
+      ok "found root karg"
       ;;
-  *) echo "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"; exit 1;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
 esac
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 434b4fbd60..4a2307866a 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -2,6 +2,15 @@
 # kola: {"platforms": "qemu", "minMemory": 4096, "architectures": "!s390x"}
 set -xeuo pipefail
 
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == /dev/mapper/myluksdev ]]
 
@@ -10,13 +19,13 @@ blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
 
 fstype=$(findmnt -nvr / -o FSTYPE)
 [[ ${fstype} == xfs ]]
+ok "source is XFS on LUKS device"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs ran
       if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
-          echo "ignition-ostree-growfs did not run"
-          exit 1
+          fatal "ignition-ostree-growfs did not run"
       fi
 
       # reboot once to sanity-check we can find root on second boot
@@ -26,6 +35,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   rebooted)
       grep root=UUID= /proc/cmdline
       grep rd.luks.name= /proc/cmdline
+      ok "found root kargs"
       ;;
-  *) echo "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"; exit 1;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
 esac
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index b00c72ed89..f18673e1f9 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -2,6 +2,15 @@
 # kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
 set -xeuo pipefail
 
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == $(realpath /dev/md/foobar) ]]
 
@@ -10,13 +19,13 @@ blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
 
 fstype=$(findmnt -nvr / -o FSTYPE)
 [[ ${fstype} == xfs ]]
+ok "source is XFS on RAID1 device"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs didn't run
       if [ -e /run/ignition-ostree-growfs.stamp ]; then
-          echo "ignition-ostree-growfs ran"
-          exit 1
+          fatal "ignition-ostree-growfs ran"
       fi
 
       # reboot once to sanity-check we can find root on second boot
@@ -26,6 +35,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   rebooted)
       grep root=UUID= /proc/cmdline
       grep rd.md.uuid= /proc/cmdline
+      ok "found root kargs"
       ;;
-  *) echo "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"; exit 1;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
 esac

From a57a999c4f56f07e7fd9ab037c35d28069731fa8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 19 Mar 2021 12:21:13 -0400
Subject: [PATCH 0129/2157] overlay: always use prjquota for XFS rootfs

By default, we use `prjquota` for the rootfs for container orchestrators
to monitor and set drive space limits.

However, with the added support for rootfs reprovisioning, we made this
conditional on the rootfs not being reprovisioned, with the assumption
that you can just set whatever options you'd like instead. Though
actually doing that is really awkward right now, and it requires
surfacing prjquota in user documentations (see
https://bugzilla.redhat.com/show_bug.cgi?id=1940704#c2).

Since AFAICT `prjquota` doesn't actually have any significant overhead,
let's just simplify the messaging to: we *always* enable prjquota on XFS
root filesystems. Users who want to override this can fallback to
`rpm-ostree kargs` (and eventually once we have
https://github.com/coreos/fedora-coreos-config/issues/805, to
`mountOptions: []`).

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1940704
---
 .../dracut/modules.d/40ignition-ostree/coreos-rootflags.sh | 7 -------
 tests/kola/root-reprovision/luks/test.sh                   | 6 ++++++
 tests/kola/root-reprovision/raid1/test.sh                  | 6 ++++++
 3 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
index 332665e4f3..8c25d96118 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
@@ -3,14 +3,7 @@ set -euo pipefail
 
 rootpath=/dev/disk/by-label/root
 
-# If the rootfs was reprovisioned, then the user is free to define their own
-# rootflags.
-if [ -d /run/ignition-ostree-transposefs/root ]; then
-    exit 0
-fi
-
 eval $(blkid -o export ${rootpath})
-# this really should always be true, but let's be conservative
 if [ "${TYPE}" == "xfs" ]; then
     # We use prjquota on XFS by default to aid multi-tenant Kubernetes (and
     # other container) clusters.  See
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 4a2307866a..656b6feee6 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -21,6 +21,12 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 [[ ${fstype} == xfs ]]
 ok "source is XFS on LUKS device"
 
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs ran
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index f18673e1f9..a1e510cffa 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -21,6 +21,12 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 [[ ${fstype} == xfs ]]
 ok "source is XFS on RAID1 device"
 
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs didn't run

From eaf5777c9dab8a8702a8d090b048655922138493 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 19 Mar 2021 21:50:47 +0000
Subject: [PATCH 0130/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/169/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fd723bf5a6..37aa46859d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,10 +142,10 @@
       "evra": "4:1-4.fc33.noarch"
     },
     "coreos-installer": {
-      "evra": "0.7.2-1.fc33.x86_64"
+      "evra": "0.8.0-1.fc33.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.7.2-1.fc33.x86_64"
+      "evra": "0.8.0-1.fc33.x86_64"
     },
     "coreutils": {
       "evra": "8.32-18.fc33.x86_64"
@@ -310,7 +310,7 @@
       "evra": "0.8.6-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.1-1.fc33.x86_64"
+      "evra": "1.10.2-1.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -598,7 +598,7 @@
       "evra": "0.3.5-1.fc33.x86_64"
     },
     "libibverbs": {
-      "evra": "33.0-2.fc33.x86_64"
+      "evra": "34.0-1.fc33.x86_64"
     },
     "libicu": {
       "evra": "67.1-4.fc33.x86_64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-27.fc33.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210208-118.fc33.noarch"
+      "evra": "20210315-119.fc33.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210208-118.fc33.noarch"
+      "evra": "20210315-119.fc33.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.28-1.fc33.x86_64"
@@ -1015,7 +1015,7 @@
       "evra": "4.0.2-6.fc33.x86_64"
     },
     "rdma-core": {
-      "evra": "33.0-2.fc33.x86_64"
+      "evra": "34.0-1.fc33.x86_64"
     },
     "readline": {
       "evra": "8.0-5.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-17T21:12:04Z",
+    "generated": "2021-03-19T21:08:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-15T18:59:27Z"
+        "generated": "2021-03-18T19:04:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-17T01:37:53Z"
+        "generated": "2021-03-19T18:30:23Z"
       }
     }
   }

From 02c41e3012911330699626278bde3f2393c87f59 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 9 Mar 2021 16:49:15 -0500
Subject: [PATCH 0131/2157] overrides: move to an arch-independent lockfile

Now that rpm-ostree and cosa support it, move to just using a
`manifest-lock.overrides.yaml` which uses `evr` instead of `evra` so
that we can avoid all the duplication.

The previous filenames are still supported in case we do have
arch-specific overrides (e.g. grub) in the future.
---
 manifest-lock.overrides.aarch64.yaml          | 30 -------------------
 manifest-lock.overrides.ppc64le.yaml          | 30 -------------------
 manifest-lock.overrides.x86_64.yaml           | 30 -------------------
 ...s390x.yaml => manifest-lock.overrides.yaml | 20 ++++++-------
 4 files changed, 10 insertions(+), 100 deletions(-)
 delete mode 100644 manifest-lock.overrides.aarch64.yaml
 delete mode 100644 manifest-lock.overrides.ppc64le.yaml
 delete mode 100644 manifest-lock.overrides.x86_64.yaml
 rename manifest-lock.overrides.s390x.yaml => manifest-lock.overrides.yaml (67%)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
deleted file mode 100644
index 54458f8673..0000000000
--- a/manifest-lock.overrides.aarch64.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-packages:
-  # Keep this until we move to Fedora 34.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
-  systemd:
-    evra: 246.7-1.fc33.aarch64
-  systemd-container:
-    evra: 246.7-1.fc33.aarch64
-  systemd-libs:
-    evra: 246.7-1.fc33.aarch64
-  systemd-pam:
-    evra: 246.7-1.fc33.aarch64
-  systemd-rpm-macros:
-    evra: 246.7-1.fc33.noarch
-  systemd-udev:
-    evra: 246.7-1.fc33.aarch64
-  # There's a regression in 5.10.20+ which breaks rootless podman
-  # https://github.com/containers/buildah/issues/3071
-  kernel:
-    evra: 5.10.19-200.fc33.aarch64
-  kernel-core:
-    evra: 5.10.19-200.fc33.aarch64
-  kernel-modules:
-    evra: 5.10.19-200.fc33.aarch64
-  # Fast-track coreos-installer release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
-  coreos-installer:
-    evra: 0.8.0-1.fc33.aarch64
-  coreos-installer-bootinfra:
-    evra: 0.8.0-1.fc33.aarch64
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
deleted file mode 100644
index df28b9cfcd..0000000000
--- a/manifest-lock.overrides.ppc64le.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-packages:
-  # Keep this until we move to Fedora 34.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
-  systemd:
-    evra: 246.7-1.fc33.ppc64le
-  systemd-container:
-    evra: 246.7-1.fc33.ppc64le
-  systemd-libs:
-    evra: 246.7-1.fc33.ppc64le
-  systemd-pam:
-    evra: 246.7-1.fc33.ppc64le
-  systemd-rpm-macros:
-    evra: 246.7-1.fc33.noarch
-  systemd-udev:
-    evra: 246.7-1.fc33.ppc64le
-  # There's a regression in 5.10.20+ which breaks rootless podman
-  # https://github.com/containers/buildah/issues/3071
-  kernel:
-    evra: 5.10.19-200.fc33.ppc64le
-  kernel-core:
-    evra: 5.10.19-200.fc33.ppc64le
-  kernel-modules:
-    evra: 5.10.19-200.fc33.ppc64le
-  # Fast-track coreos-installer release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
-  coreos-installer:
-    evra: 0.8.0-1.fc33.ppc64le
-  coreos-installer-bootinfra:
-    evra: 0.8.0-1.fc33.ppc64le
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
deleted file mode 100644
index c348026ac0..0000000000
--- a/manifest-lock.overrides.x86_64.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-packages:
-  # Keep this until we move to Fedora 34.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
-  systemd:
-    evra: 246.7-1.fc33.x86_64
-  systemd-container:
-    evra: 246.7-1.fc33.x86_64
-  systemd-libs:
-    evra: 246.7-1.fc33.x86_64
-  systemd-pam:
-    evra: 246.7-1.fc33.x86_64
-  systemd-rpm-macros:
-    evra: 246.7-1.fc33.noarch
-  systemd-udev:
-    evra: 246.7-1.fc33.x86_64
-  # There's a regression in 5.10.20+ which breaks rootless podman
-  # https://github.com/containers/buildah/issues/3071
-  kernel:
-    evra: 5.10.19-200.fc33.x86_64
-  kernel-core:
-    evra: 5.10.19-200.fc33.x86_64
-  kernel-modules:
-    evra: 5.10.19-200.fc33.x86_64
-  # Fast-track coreos-installer release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
-  coreos-installer:
-    evra: 0.8.0-1.fc33.x86_64
-  coreos-installer-bootinfra:
-    evra: 0.8.0-1.fc33.x86_64
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.yaml
similarity index 67%
rename from manifest-lock.overrides.s390x.yaml
rename to manifest-lock.overrides.yaml
index 4fcee5c6e7..db3ea672f2 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.yaml
@@ -3,28 +3,28 @@ packages:
   # https://github.com/coreos/fedora-coreos-tracker/issues/649
   # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
   systemd:
-    evra: 246.7-1.fc33.s390x
+    evr: 246.7-1.fc33
   systemd-container:
-    evra: 246.7-1.fc33.s390x
+    evr: 246.7-1.fc33
   systemd-libs:
-    evra: 246.7-1.fc33.s390x
+    evr: 246.7-1.fc33
   systemd-pam:
-    evra: 246.7-1.fc33.s390x
+    evr: 246.7-1.fc33
   systemd-rpm-macros:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
-    evra: 246.7-1.fc33.s390x
+    evr: 246.7-1.fc33
   # There's a regression in 5.10.20+ which breaks rootless podman
   # https://github.com/containers/buildah/issues/3071
   kernel:
-    evra: 5.10.19-200.fc33.s390x
+    evr: 5.10.19-200.fc33
   kernel-core:
-    evra: 5.10.19-200.fc33.s390x
+    evr: 5.10.19-200.fc33
   kernel-modules:
-    evra: 5.10.19-200.fc33.s390x
+    evr: 5.10.19-200.fc33
   # Fast-track coreos-installer release
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
   coreos-installer:
-    evra: 0.8.0-1.fc33.s390x
+    evr: 0.8.0-1.fc33
   coreos-installer-bootinfra:
-    evra: 0.8.0-1.fc33.s390x
+    evr: 0.8.0-1.fc33

From 7eeb2da7896637e6c2c7f2bf4e54ba57a7a078a9 Mon Sep 17 00:00:00 2001
From: Vadim Rutkovsky <vrutkovs@redhat.com>
Date: Wed, 10 Mar 2021 16:54:55 +0100
Subject: [PATCH 0132/2157] rootless-systemd: update packages before installing
 httpd

Fedora container may be outdated and in order to install httpd existing packages may require an update
---
 tests/kola/podman/rootless-systemd | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 13874a5e76..c12cec80a9 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -26,7 +26,8 @@ set -euxo pipefail
 cd $(mktemp -d)
 cat <<EOF > Containerfile
 FROM registry.fedoraproject.org/fedora:33
-RUN dnf -y install systemd httpd \
+RUN dnf -y update \
+&& dnf -y install systemd httpd \
 && dnf clean all \
 && systemctl enable httpd
 ENTRYPOINT [ "/sbin/init" ]

From e5b3bcd52ab047c9b036df0390ec9f878cd2b5e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 23 Feb 2021 15:12:14 +0100
Subject: [PATCH 0133/2157] tests: Add basic toolbox functional testing

This will make sure that builds can at least do the following without
errors:
  - pull the image
  - create a toolbox
  - run a basic command inside it
  - stop and remove the container
---
 tests/kola/toolbox/test.sh | 46 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100755 tests/kola/toolbox/test.sh

diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
new file mode 100755
index 0000000000..e9dc2a5ab0
--- /dev/null
+++ b/tests/kola/toolbox/test.sh
@@ -0,0 +1,46 @@
+#!/bin/bash
+
+# Make sure that basic toolbox functionnality is working:
+# - Creating a toolbox
+# - Running a command in a toolbox
+# - Removing all toolbox containers
+#
+# Important note: Commands are run indirectly via calls to `machinectl shell`
+# to re-create the user environment needed for unprivileged podman
+# functionality. However, machinectl shell does not propagate the exit
+# code/status of the invoked shell process thus we need additionnal checks to
+# ensure that previous commands were successful.
+
+# Only run on QEMU to reduce CI costs as nothing is platform specific here.
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
+if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
+	fatal "Could not create toolbox"
+fi
+ok toolbox create
+
+machinectl shell core@ /bin/toolbox run touch ok_toolbox
+if [[ ! -f '/home/core/ok_toolbox' ]]; then
+	fatal "Could not run a simple command inside a toolbox"
+fi
+ok toolbox run
+
+toolbox="$(machinectl shell core@ /bin/toolbox list --containers | grep fedora-toolbox- | awk '{print $2}')"
+machinectl shell core@ /bin/podman stop "${toolbox}"
+machinectl shell core@ /bin/toolbox rm "${toolbox}"
+if [[ -n "$(machinectl shell core@ /bin/toolbox list --containers)" ]]; then
+	fatal "Could not remove the toolbox container"
+fi
+ok toolbox rm

From ef7c4b9055d2d7779d082d81864af529b171b499 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 19 Mar 2021 13:11:34 -0400
Subject: [PATCH 0134/2157] overlay: propagate rootfs mountOptions to rootflags
 karg

Right now, specifying `mountOptions` for the rootfs in the Ignition
config is ignored. To fix that, we simply need to have
`coreos-rootflags` inspect the Ignition config if the rootfs was
reprovisioned and extract the field.

This then takes effect on first boot (via
`ignition-ostree-mount-sysroot.sh` calling out to it) and subsequent
boots (via `rdcore rootmap` calling out to `coreos-rootflags`).

Closes: https://github.com/coreos/fedora-coreos-config/issues/805
---
 .../40ignition-ostree/coreos-rootflags.sh      | 18 ++++++++++++++++++
 .../filesystem-only/config.ign                 |  5 +++--
 .../root-reprovision/filesystem-only/test.sh   |  6 ++++++
 3 files changed, 27 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
index 8c25d96118..1a7c0a2996 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
@@ -1,8 +1,26 @@
 #!/bin/bash
 set -euo pipefail
 
+# see related comment block in transposefs.sh re. inspecting the config directly
+ignition_cfg=/run/ignition.json
 rootpath=/dev/disk/by-label/root
 
+query_rootfs() {
+    local filter=$1
+    jq -re ".storage?.filesystems? // [] |
+                map(select(.label == \"root\" and .wipeFilesystem == true)) |
+                .[0] | $filter" "${ignition_cfg}"
+}
+
+# If the rootfs was reprovisioned, then the mountOptions from the Ignition
+# config has priority.
+if [ -d /run/ignition-ostree-transposefs/root ]; then
+    if query_rootfs 'has("mountOptions")' >/dev/null; then
+        query_rootfs '.mountOptions | join(",")'
+        exit 0
+    fi
+fi
+
 eval $(blkid -o export ${rootpath})
 if [ "${TYPE}" == "xfs" ]; then
     # We use prjquota on XFS by default to aid multi-tenant Kubernetes (and
diff --git a/tests/kola/root-reprovision/filesystem-only/config.ign b/tests/kola/root-reprovision/filesystem-only/config.ign
index 3784c8cbfe..28d6ca57f5 100644
--- a/tests/kola/root-reprovision/filesystem-only/config.ign
+++ b/tests/kola/root-reprovision/filesystem-only/config.ign
@@ -1,6 +1,6 @@
 {
     "ignition": {
-        "version": "3.0.0"
+        "version": "3.2.0"
     },
     "storage": {
         "filesystems": [
@@ -8,7 +8,8 @@
                 "device": "/dev/disk/by-label/root",
                 "wipeFilesystem": true,
                 "format": "ext4",
-                "label": "root"
+                "label": "root",
+                "mountOptions": ["debug"]
             }
         ]
     }
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 4833ae52ad..1a61befc79 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -15,6 +15,12 @@ fstype=$(findmnt -nvr / -o FSTYPE)
 [[ $fstype == ext4 ]]
 ok "source is ext4"
 
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep debug <<< "${rootflags}"; then
+    fatal "missing debug in root mount flags: ${rootflags}"
+fi
+ok "root mounted with debug"
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that the partition was grown

From 7c73bd7b192a26b3a4d88b82117163c2dffd27b5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Mar 2021 21:50:00 +0000
Subject: [PATCH 0135/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/174/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 37aa46859d..a403242d6b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -172,10 +172,10 @@
       "evra": "20200918-1.git85dccc5.fc33.noarch"
     },
     "cryptsetup": {
-      "evra": "2.3.4-1.fc33.x86_64"
+      "evra": "2.3.5-2.fc33.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.3.4-1.fc33.x86_64"
+      "evra": "2.3.5-2.fc33.x86_64"
     },
     "cups-libs": {
       "evra": "1:2.3.3op2-1.fc33.x86_64"
@@ -355,7 +355,7 @@
       "evra": "2.30.2-1.fc33.x86_64"
     },
     "glib2": {
-      "evra": "2.66.7-1.fc33.x86_64"
+      "evra": "2.66.8-1.fc33.x86_64"
     },
     "glibc": {
       "evra": "2.32-4.fc33.x86_64"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-18.fc33.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.3-0.fc33.x86_64"
+      "evra": "1:2.5.3-1.fc33.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.7-3.fc33.x86_64"
@@ -871,7 +871,7 @@
       "evra": "78.8.0-2.fc33.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-4.fc33.x86_64"
+      "evra": "4.1.0-5.fc33.x86_64"
     },
     "ncurses": {
       "evra": "6.2-3.20200222.fc33.x86_64"
@@ -892,7 +892,7 @@
       "evra": "0.52.21-8.fc33.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.3-0.fc33.x86_64"
+      "evra": "1:2.5.3-1.fc33.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.3-8.fc33.x86_64"
@@ -1177,13 +1177,13 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2607-1.fc33.x86_64"
+      "evra": "2:8.2.2637-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210223-1.fc33.x86_64"
+      "evra": "1.0.20210315-1.fc33.x86_64"
     },
     "xfsprogs": {
       "evra": "5.7.0-1.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-19T21:08:14Z",
+    "generated": "2021-03-24T21:08:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-18T19:04:38Z"
+        "generated": "2021-03-23T22:08:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-19T18:30:23Z"
+        "generated": "2021-03-24T02:28:50Z"
       }
     }
   }

From f02095f3194f10ce86c4201f5a0ae68129374ca4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 18 Nov 2020 16:47:50 -0500
Subject: [PATCH 0136/2157] Move buildroot image here

When using cosa to build OSes, we've been pretty good at shielding
ourselves from versioning differences between source and target
environments (for example, RHCOS is built by Fedora packages). But when
it comes to building things meant to run *in* that OS, we really should
match the buildroot of the target.

Right now, many of our projects use the buildroot cosa container to
build their projects in CI. But this doesn't necessarily match the
buildroot of the rest of the OS.

Since the buildroot to use is defined here (specifically via the
`releasever` key), let's move the concept of a "buildroot image" from
cosa to here. Specifically, we want a container image with all the deps
to the components we mostly hack on for use by both CI and local
developers.

This can then be used by CoreOS CI for building upstream projects, as
well as by cosa itself for building kolet.

See also: https://github.com/coreos/coreos-assembler/issues/1863
---
 README.md                            |  3 ++-
 ci/buildroot/Dockerfile              | 13 ++++++++++
 ci/buildroot/buildroot-buildreqs.txt |  9 +++++++
 ci/buildroot/buildroot-reqs.txt      | 39 ++++++++++++++++++++++++++++
 ci/buildroot/buildroot-specs.txt     |  3 +++
 ci/buildroot/install-buildroot.sh    | 23 ++++++++++++++++
 6 files changed, 89 insertions(+), 1 deletion(-)
 create mode 100644 ci/buildroot/Dockerfile
 create mode 100644 ci/buildroot/buildroot-buildreqs.txt
 create mode 100644 ci/buildroot/buildroot-reqs.txt
 create mode 100644 ci/buildroot/buildroot-specs.txt
 create mode 100755 ci/buildroot/install-buildroot.sh

diff --git a/README.md b/README.md
index 23e4f8426d..675862fe18 100644
--- a/README.md
+++ b/README.md
@@ -95,7 +95,8 @@ Updating this repo:
 1. bump `releasever` in `manifest.yaml`
 2. update the repos in `manifest.yaml` if needed
 3. run `cosa fetch --update-lockfile`
-4. PR the result
+4. bump the base Fedora version in `ci/buildroot/Dockerfile`
+5. PR the result
 
 Update server changes:
 
diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
new file mode 100644
index 0000000000..6c52fcdf49
--- /dev/null
+++ b/ci/buildroot/Dockerfile
@@ -0,0 +1,13 @@
+# This includes the build dependencies for some key packages
+# such as ignition, rpm-ostree, libpod, systemd, and kernel.
+# If you want another package in this list, submit a PR and
+# we can probably add it.
+#
+# This image is used by CoreOS CI to build software like
+# Ignition, rpm-ostree, ostree, coreos-installer, etc...
+FROM registry.fedoraproject.org/fedora:33
+USER root
+WORKDIR /root/containerbuild
+COPY . tmp
+RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf
+WORKDIR /root
diff --git a/ci/buildroot/buildroot-buildreqs.txt b/ci/buildroot/buildroot-buildreqs.txt
new file mode 100644
index 0000000000..ce510912d6
--- /dev/null
+++ b/ci/buildroot/buildroot-buildreqs.txt
@@ -0,0 +1,9 @@
+# This is what the CoreOS developers tend to actively develop/own.
+# If you want to extend this, feel free to file a PR.
+ignition
+ostree
+librepo
+kernel
+systemd
+dracut
+podman
diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
new file mode 100644
index 0000000000..481a756411
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -0,0 +1,39 @@
+# This is a list of basic buildrequires; it'd be a bit better to
+# yum -y install @buildsys-build but unfortunately that hits a bug:
+# https://fedoraproject.org/wiki/Common_F30_bugs#Conflicts_between_fedora-release_packages_when_installing_package_groups
+# So here we inline it, minus the -release package.
+bash
+bzip2
+coreutils
+cpio
+diffutils
+findutils
+gawk
+glibc-minimal-langpack
+grep
+gzip
+info
+make
+patch
+redhat-rpm-config
+rpm-build
+sed
+shadow-utils
+tar
+unzip
+util-linux
+which
+xz
+
+# For rust projects like rpm-ostree
+rustfmt
+
+# Used by ostree/rpm-ostree CI
+parallel gjs
+
+# Also, add clang since it's useful at least in CI for C/C++ projects
+clang lld
+# All C/C++ projects should have CI that uses the sanitizers
+libubsan libasan libtsan
+# And all C/C++ projects should use clang-analyzer
+clang-analyzer
diff --git a/ci/buildroot/buildroot-specs.txt b/ci/buildroot/buildroot-specs.txt
new file mode 100644
index 0000000000..f164c9d9b4
--- /dev/null
+++ b/ci/buildroot/buildroot-specs.txt
@@ -0,0 +1,3 @@
+# for projects which have their canonical spec files upstream, use those instead
+# since they're more up to date
+https://raw.githubusercontent.com/coreos/rpm-ostree/master/packaging/rpm-ostree.spec.in
diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
new file mode 100755
index 0000000000..ab13d5c76f
--- /dev/null
+++ b/ci/buildroot/install-buildroot.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+set -euo pipefail
+
+dn=$(dirname "$0")
+
+# This is invoked by Dockerfile
+
+echo "Installing base build requirements"
+dnf -y install /usr/bin/xargs 'dnf-command(builddep)'
+deps=$(grep -v '^#' "${dn}"/buildroot-reqs.txt)
+echo "${deps}" | xargs dnf -y install
+
+echo "Installing build dependencies of primary packages"
+brs=$(grep -v '^#' "${dn}"/buildroot-buildreqs.txt)
+echo "${brs}" | xargs dnf -y builddep
+
+echo "Installing build dependencies from canonical spec files"
+specs=$(grep -v '^#' "${dn}"/buildroot-specs.txt)
+tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
+(cd "${tmpd}" && echo "${specs}" | xargs curl -L --remote-name-all)
+(cd "${tmpd}" && find . -type f -print0 | xargs -0 dnf -y builddep --spec)
+
+echo 'Done!'

From a2221a8a1d8f6a24b7f0bf1b22239cefb0ffbc20 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 26 Mar 2021 00:12:22 +0000
Subject: [PATCH 0137/2157] buildroot: Add jq

This is used by rpm-ostree's CI; add it to the buildroot for
the same reason we ship it in FCOS.
---
 ci/buildroot/buildroot-reqs.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 481a756411..9161edb09e 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -28,6 +28,9 @@ xz
 # For rust projects like rpm-ostree
 rustfmt
 
+# A super common tool
+jq
+
 # Used by ostree/rpm-ostree CI
 parallel gjs
 

From bf0e7decbefee00659b70ce212e2046ffef4cda7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 24 Mar 2021 17:48:10 -0400
Subject: [PATCH 0138/2157] image.yaml: split out image-base.yaml

The `image.yaml` file will be unique to each stream (like
`manifest.yaml`), while `image-base.yaml` will be shared by all streams
(like `manifests/fedora-coreos-base.yaml`).

Prep for dropping the `systemd.unified_cgroup_hierarchy=0` karg on the
next stream.
---
 image-base.yaml | 28 ++++++++++++++++++++++++++++
 image.yaml      | 32 ++++----------------------------
 2 files changed, 32 insertions(+), 28 deletions(-)
 create mode 100644 image-base.yaml

diff --git a/image-base.yaml b/image-base.yaml
new file mode 100644
index 0000000000..6e83494bd7
--- /dev/null
+++ b/image-base.yaml
@@ -0,0 +1,28 @@
+# Target disk size in GB.
+# Make it at least 10G because we want the rootfs to be at least 8G:
+# https://github.com/coreos/fedora-coreos-tracker/issues/586
+size: 10
+
+extra-kargs:
+    # Disable SMT on systems vulnerable to MDS or any similar future issue.
+    - mitigations=auto,nosmt
+    # https://github.com/coreos/fedora-coreos-tracker/issues/292
+    # https://fedoraproject.org/wiki/Changes/CGroupsV2
+    - systemd.unified_cgroup_hierarchy=0
+
+# Disable networking by default on firstboot. We can drop this once cosa stops
+# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
+ignition-network-kcmdline: []
+
+# Optional remote by which to prefix the deployed OSTree ref
+ostree-remote: fedora
+
+# We want read-only /sysroot to protect from unintentional damage.
+# https://github.com/ostreedev/ostree/issues/1265
+sysroot-readonly: true
+
+# After this, we plan to add support for the Ignition
+# storage/filesystems sections.  (Although one can do
+# that on boot as well)
+
+
diff --git a/image.yaml b/image.yaml
index 6e83494bd7..1bf800cca2 100644
--- a/image.yaml
+++ b/image.yaml
@@ -1,28 +1,4 @@
-# Target disk size in GB.
-# Make it at least 10G because we want the rootfs to be at least 8G:
-# https://github.com/coreos/fedora-coreos-tracker/issues/586
-size: 10
-
-extra-kargs:
-    # Disable SMT on systems vulnerable to MDS or any similar future issue.
-    - mitigations=auto,nosmt
-    # https://github.com/coreos/fedora-coreos-tracker/issues/292
-    # https://fedoraproject.org/wiki/Changes/CGroupsV2
-    - systemd.unified_cgroup_hierarchy=0
-
-# Disable networking by default on firstboot. We can drop this once cosa stops
-# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
-ignition-network-kcmdline: []
-
-# Optional remote by which to prefix the deployed OSTree ref
-ostree-remote: fedora
-
-# We want read-only /sysroot to protect from unintentional damage.
-# https://github.com/ostreedev/ostree/issues/1265
-sysroot-readonly: true
-
-# After this, we plan to add support for the Ignition
-# storage/filesystems sections.  (Although one can do
-# that on boot as well)
-
-
+# This file can optionally contain configuration specific to the stream,
+# similarly to manifest.yaml. Unlike image-base.yaml, which is shared by all
+# streams.
+include: image-base.yaml

From f483cfa7584baba872fd6fea47751f33e47ed2bb Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 26 Mar 2021 18:08:22 +0000
Subject: [PATCH 0139/2157] buildroot: Add attr

ostree's tests depend on this, it's tiny and useful.
---
 ci/buildroot/buildroot-reqs.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 9161edb09e..946f8eedc0 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -31,7 +31,8 @@ rustfmt
 # A super common tool
 jq
 
-# Used by ostree/rpm-ostree CI
+# Used by ostree/rpm-ostree CI (TODO: add to something like TestBuildRequires in spec files)
+attr
 parallel gjs
 
 # Also, add clang since it's useful at least in CI for C/C++ projects

From cb58430ffdbf05f20339eca7539be7f23b0fb999 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 26 Mar 2021 21:39:57 +0000
Subject: [PATCH 0140/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/177/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a403242d6b..a8eb0c34fd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1030,10 +1030,10 @@
       "evra": "4.16.1.2-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.2-2.fc33.x86_64"
+      "evra": "2021.3-2.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.2-2.fc33.x86_64"
+      "evra": "2021.3-2.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.2-1.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-24T21:08:29Z",
+    "generated": "2021-03-26T21:08:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-23T22:08:13Z"
+        "generated": "2021-03-26T18:55:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-24T02:28:50Z"
+        "generated": "2021-03-26T01:00:44Z"
       }
     }
   }

From b0718b340d0576d06b50443a02c0b59df9c3285f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 28 Mar 2021 21:45:12 +0000
Subject: [PATCH 0141/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/179/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a8eb0c34fd..2ba3a8dd40 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,7 +139,7 @@
       "evra": "0.9.1-4.fc33.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-4.fc33.noarch"
+      "evra": "4:1-9.fc33.noarch"
     },
     "coreos-installer": {
       "evra": "0.8.0-1.fc33.x86_64"
@@ -178,7 +178,7 @@
       "evra": "2.3.5-2.fc33.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-1.fc33.x86_64"
+      "evra": "1:2.3.3op2-3.fc33.x86_64"
     },
     "curl": {
       "evra": "7.71.1-8.fc33.x86_64"
@@ -193,7 +193,7 @@
       "evra": "1:1.12.20-2.fc33.x86_64"
     },
     "dbus-broker": {
-      "evra": "27-2.fc33.x86_64"
+      "evra": "28-3.fc33.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-2.fc33.noarch"
@@ -418,16 +418,16 @@
       "evra": "5.9.0-1.fc33.x86_64"
     },
     "iptables": {
-      "evra": "1.8.5-5.fc33.x86_64"
+      "evra": "1.8.5-6.fc33.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.5-5.fc33.x86_64"
+      "evra": "1.8.5-6.fc33.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.5-5.fc33.x86_64"
+      "evra": "1.8.5-6.fc33.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.5-5.fc33.x86_64"
+      "evra": "1.8.5-6.fc33.x86_64"
     },
     "iputils": {
       "evra": "20200821-1.fc33.x86_64"
@@ -595,7 +595,7 @@
       "evra": "234-1.fc33.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.5-1.fc33.x86_64"
+      "evra": "0.3.6-1.fc33.x86_64"
     },
     "libibverbs": {
       "evra": "34.0-1.fc33.x86_64"
@@ -868,7 +868,7 @@
       "evra": "2:0.4.0-2.fc33.x86_64"
     },
     "mozjs78": {
-      "evra": "78.8.0-2.fc33.x86_64"
+      "evra": "78.9.0-1.fc33.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-5.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-26T21:08:05Z",
+    "generated": "2021-03-28T21:07:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-26T18:55:40Z"
+        "generated": "2021-03-27T21:49:39Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-26T01:00:44Z"
+        "generated": "2021-03-28T17:15:17Z"
       }
     }
   }

From 44463ac4f7cd0c010756c27c312197ee8e5fdadd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 29 Mar 2021 14:36:22 -0400
Subject: [PATCH 0142/2157] buildroot: add dumb-init

We want this, just like we had for the cosa buildroot image. At least
until this becomes built into k8s and we can just request it via the pod
manifest.
---
 ci/buildroot/buildroot-reqs.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 946f8eedc0..266186d9c5 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -41,3 +41,6 @@ clang lld
 libubsan libasan libtsan
 # And all C/C++ projects should use clang-analyzer
 clang-analyzer
+
+# We don't want zombies in our pods
+dumb-init

From e5891e3c4047a550bb3e60ce813f87dc3147ba27 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 29 Mar 2021 22:10:00 +0000
Subject: [PATCH 0143/2157] buildroot: Also pull in python3-pyyaml

Another ostree dep.  I think this is really the last one.
---
 ci/buildroot/buildroot-reqs.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 266186d9c5..9087247d0c 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -33,6 +33,7 @@ jq
 
 # Used by ostree/rpm-ostree CI (TODO: add to something like TestBuildRequires in spec files)
 attr
+python3-pyyaml
 parallel gjs
 
 # Also, add clang since it's useful at least in CI for C/C++ projects

From 22b65e33574cb64d4fff22c4e36ccecb2e088501 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 29 Mar 2021 14:56:27 -0400
Subject: [PATCH 0144/2157] ci/buildroot: default to builder user

Let's match cosa's default of using an unprivileged builder user for
builds. Projects which really want to can request uid 0 via
`runAsUser:`.

Add `wheel` access to make it nicer for local development.
---
 ci/buildroot/Dockerfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 6c52fcdf49..6f5d397c9b 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -11,3 +11,8 @@ WORKDIR /root/containerbuild
 COPY . tmp
 RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf
 WORKDIR /root
+# match cosa's unprivileged default
+RUN useradd builder --uid 1000 -G wheel && \
+        echo '%wheel ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel-nopasswd && \
+        chmod 600 /etc/sudoers.d/wheel-nopasswd
+USER builder

From 567b8dcfe6f75674c3f147505fcda6fcb39914dc Mon Sep 17 00:00:00 2001
From: Sinny Kumari <sinny@redhat.com>
Date: Tue, 30 Mar 2021 17:05:57 +0200
Subject: [PATCH 0145/2157] overrides: drop coreos-installer

---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index db3ea672f2..d92e72a4c6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -22,9 +22,4 @@ packages:
     evr: 5.10.19-200.fc33
   kernel-modules:
     evr: 5.10.19-200.fc33
-  # Fast-track coreos-installer release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a0ce6189e
-  coreos-installer:
-    evr: 0.8.0-1.fc33
-  coreos-installer-bootinfra:
-    evr: 0.8.0-1.fc33
+

From de0c0b62b02c1d8a3f12c7dd6452c05bbfa5ecec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Wed, 10 Mar 2021 19:34:18 +0100
Subject: [PATCH 0146/2157] manifests: Fix split to enable sharing with RHCOS

  - Move stalld back to fedora-coreos-base until it is released in RHEL
  - Keep dnsmasq alongside podman-plugins as explicit dependency
---
 manifests/fedora-coreos-base.yaml   | 5 ++++-
 manifests/system-configuration.yaml | 3 ---
 manifests/user-experience.yaml      | 2 --
 3 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index ad07f231c7..a90c740d12 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -137,7 +137,7 @@ packages:
   - fuse-overlayfs slirp4netns
   # name resolution for podman containers
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
-  - podman-plugins
+  - podman-plugins dnsmasq
   # Remote IPC for podman
   - libvarlink-util
   # Minimal NFS client
@@ -176,6 +176,9 @@ packages:
   # zram-generator (but not zram-generator-defaults) for F33 change
   # https://github.com/coreos/fedora-coreos-tracker/issues/509
   - zram-generator
+  # Boost starving threads
+  # https://github.com/coreos/fedora-coreos-tracker/issues/753
+  - stalld
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened
 # yet.  Also we may want to add to rpm-ostree something like arch negation;
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index e5a0c3c7d5..f87be6b19d 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -32,6 +32,3 @@ packages:
   # /etc/logrotate.d to work.  Really, this is a legacy thing, but if we don't
   # have it then people's disks will slowly fill up with logs.
   - logrotate
-  # Boost starving threads
-  # https://github.com/coreos/fedora-coreos-tracker/issues/753
-  - stalld
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 60ce67d593..3f1f7c2d59 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -22,8 +22,6 @@ packages:
   # Improved MOTD experience
   - console-login-helper-messages-issuegen
   - console-login-helper-messages-profile
-  # DNS/DHCP server
-  - dnsmasq
   # kdump support
   # https://github.com/coreos/fedora-coreos-tracker/issues/622
   - kexec-tools

From bd54cff005810ee18e09c47c131ba4c780ba030b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Wed, 10 Mar 2021 19:34:55 +0100
Subject: [PATCH 0147/2157] manifests: Cosmetic changes

---
 manifests/fedora-coreos-base.yaml   |  5 ++++-
 manifests/system-configuration.yaml | 11 ++++++-----
 manifests/user-experience.yaml      |  2 +-
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index a90c740d12..375435286d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -125,6 +125,9 @@ postprocess:
       echo 'MOTD_FILE=/usr/share/misc/motd:/run/motd:/run/motd.d:/etc/motd:/etc/motd.d' >> /etc/login.defs
     fi
 
+# Packages listed here should be specific to Fedore CoreOS (as in not yet
+# available in RHCOS or not desired in RHCOS). All other packages should go
+# into one of the sub-manifests listed at the top.
 packages:
   # Security
   - polkit
@@ -167,7 +170,7 @@ packages:
   # file-transfer: note fuse-sshfs is not in RHEL
   # so we can't put it in file-transfer.yaml
   - fuse-sshfs
-  # User experience
+  # Improved MOTD experience
   - console-login-helper-messages-motdgen
   # i18n
   - kbd
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index f87be6b19d..0bf2e014b3 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -10,9 +10,10 @@ packages:
   # Installing CoreOS itself
   - coreos-installer coreos-installer-bootinfra
   # Storage configuration/management
+  ## cloud-utils-growpart - For growing root partition
   - cifs-utils
   - cloud-utils-growpart
-  - cryptsetup 
+  - cryptsetup
   - device-mapper-multipath
   - e2fsprogs
   - iscsi-initiator-utils
@@ -25,10 +26,10 @@ packages:
   - shadow-utils
   # SELinux policy
   - selinux-policy-targeted
-  # There are things that write outside of the journal still (such as the 
-  # classic wtmp, etc.)
-  #(auditd also writes outside the journal but it has its own log rotation.)
+  # There are things that write outside of the journal still (such as the
+  # classic wtmp, etc.). auditd also writes outside the journal but it has its
+  # own log rotation.
   # Anything package layered will also tend to expect files dropped in
-  # /etc/logrotate.d to work.  Really, this is a legacy thing, but if we don't
+  # /etc/logrotate.d to work. Really, this is a legacy thing, but if we don't
   # have it then people's disks will slowly fill up with logs.
   - logrotate
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 3f1f7c2d59..1874669071 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -13,7 +13,7 @@ packages:
   - sudo
   - vim-minimal
   # File compression/decompression
-  ## (bsdtar - dependency of 35coreos-live dracut module)
+  ## bsdtar - dependency of 35coreos-live dracut module
   - bsdtar
   - bzip2
   - gzip

From 724df209e27231ec1d43958a0819a9b2fcbac8d5 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 30 Mar 2021 17:59:46 +0000
Subject: [PATCH 0148/2157] buildroot: Add rsync

It's a convenient way to *merge* local filesystem trees, see
https://github.com/ostreedev/ostree/blob/47bf29fed3b99d72c153d3c1581bf9a19c7a9b6d/.cci.jenkinsfile#L73
(Tempting to have this functionality in ostree too but)
---
 ci/buildroot/buildroot-reqs.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 9087247d0c..daff6950a5 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -33,6 +33,7 @@ jq
 
 # Used by ostree/rpm-ostree CI (TODO: add to something like TestBuildRequires in spec files)
 attr
+rsync
 python3-pyyaml
 parallel gjs
 

From bc86b32b1c7040ab92f8d40d5517874ad3ef0af4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 30 Mar 2021 21:04:13 -0400
Subject: [PATCH 0149/2157] ci/buildroot: set WORKDIR to /home/builder

The `builder` user doesn't have permissions to access `/root`.
Should've been part of #917.
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 6f5d397c9b..c7c1e81e2f 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -10,9 +10,9 @@ USER root
 WORKDIR /root/containerbuild
 COPY . tmp
 RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf
-WORKDIR /root
 # match cosa's unprivileged default
 RUN useradd builder --uid 1000 -G wheel && \
         echo '%wheel ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel-nopasswd && \
         chmod 600 /etc/sudoers.d/wheel-nopasswd
 USER builder
+WORKDIR /home/builder

From d709e4f5fc3970fb6b938dc7bcfdb8d602d2db94 Mon Sep 17 00:00:00 2001
From: Kelvin Fan <kelvinfan001@gmail.com>
Date: Tue, 30 Mar 2021 17:28:07 -0400
Subject: [PATCH 0150/2157] overrides: Fast-track
 console-login-helper-messages-0.21.2.fc33

---
 manifest-lock.overrides.yaml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d92e72a4c6..b14844a892 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -22,4 +22,17 @@ packages:
     evr: 5.10.19-200.fc33
   kernel-modules:
     evr: 5.10.19-200.fc33
-
+  # Fast-track console-login-helper-messages release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-cf005d6480
+  # New updates in console-login-helper-messages v0.21.2 fixes
+  # the console prompt being left solid white after displaying
+  # the OS release MOTD.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/750
+  console-login-helper-messages:
+    evra: 0.21.2-1.fc33.noarch
+  console-login-helper-messages-issuegen:
+    evra: 0.21.2-1.fc33.noarch
+  console-login-helper-messages-motdgen:
+    evra: 0.21.2-1.fc33.noarch
+  console-login-helper-messages-profile:
+    evra: 0.21.2-1.fc33.noarch

From 5863ecfa6f2532eadedc369b0c88ee5b6f41ea33 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 3 Apr 2021 21:40:07 +0000
Subject: [PATCH 0151/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/185/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2ba3a8dd40..79c050eb01 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -118,16 +118,16 @@
       "evra": "2:2.0.26-1.fc33.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.1-2.fc33.noarch"
+      "evra": "0.21.2-1.fc33.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.1-2.fc33.noarch"
+      "evra": "0.21.2-1.fc33.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.1-2.fc33.noarch"
+      "evra": "0.21.2-1.fc33.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.1-2.fc33.noarch"
+      "evra": "0.21.2-1.fc33.noarch"
     },
     "container-selinux": {
       "evra": "2:2.158.0-1.fc33.noarch"
@@ -166,7 +166,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.18-1.fc33.x86_64"
+      "evra": "0.18-4.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -337,7 +337,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.7-1.fc33.x86_64"
+      "evra": "1.5.8-1.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -634,7 +634,7 @@
       "evra": "9-8.fc33.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.5.0-1.fc33.x86_64"
+      "evra": "1.5.2-1.fc33.x86_64"
     },
     "libmetalink": {
       "evra": "0.1.3-13.fc33.x86_64"
@@ -925,19 +925,19 @@
       "evra": "8.4p1-5.fc33.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1j-1.fc33.x86_64"
+      "evra": "1:1.1.1k-1.fc33.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1j-1.fc33.x86_64"
+      "evra": "1:1.1.1k-1.fc33.x86_64"
     },
     "os-prober": {
       "evra": "1.77-6.fc33.x86_64"
     },
     "ostree": {
-      "evra": "2020.8-1.fc33.x86_64"
+      "evra": "2021.1-2.fc33.x86_64"
     },
     "ostree-libs": {
-      "evra": "2020.8-1.fc33.x86_64"
+      "evra": "2021.1-2.fc33.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-2.fc33.x86_64"
@@ -1024,10 +1024,10 @@
       "evra": "1.2.5-5.rc1.fc33.3.x86_64"
     },
     "rpm": {
-      "evra": "4.16.1.2-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc33.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.16.1.2-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc33.x86_64"
     },
     "rpm-ostree": {
       "evra": "2021.3-2.fc33.x86_64"
@@ -1036,7 +1036,7 @@
       "evra": "2021.3-2.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.16.1.2-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc33.x86_64"
     },
     "rsync": {
       "evra": "3.2.3-3.fc33.x86_64"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-5.fc33.x86_64"
     },
     "selinux-policy": {
-      "evra": "3.14.6-35.fc33.noarch"
+      "evra": "3.14.6-36.fc33.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "3.14.6-35.fc33.noarch"
+      "evra": "3.14.6-36.fc33.noarch"
     },
     "setup": {
       "evra": "2.13.7-2.fc33.noarch"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-03-28T21:07:35Z",
+    "generated": "2021-04-03T21:11:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-27T21:49:39Z"
+        "generated": "2021-03-31T13:33:09Z"
       },
       "fedora-updates": {
-        "generated": "2021-03-28T17:15:17Z"
+        "generated": "2021-04-03T00:40:02Z"
       }
     }
   }

From 0f4f3a395935f6cb226ad90dd1419bb3c34f2119 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 4 Apr 2021 21:37:31 +0000
Subject: [PATCH 0152/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/186/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 79c050eb01..42a5ee241f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -181,7 +181,7 @@
       "evra": "1:2.3.3op2-3.fc33.x86_64"
     },
     "curl": {
-      "evra": "7.71.1-8.fc33.x86_64"
+      "evra": "7.71.1-9.fc33.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-6.fc33.x86_64"
@@ -547,7 +547,7 @@
       "evra": "1.45.6-4.fc33.x86_64"
     },
     "libcurl": {
-      "evra": "7.71.1-8.fc33.x86_64"
+      "evra": "7.71.1-9.fc33.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-03T21:11:01Z",
+    "generated": "2021-04-04T21:07:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-03-31T13:33:09Z"
+        "generated": "2021-04-03T21:51:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-03T00:40:02Z"
+        "generated": "2021-04-04T00:56:39Z"
       }
     }
   }

From d8e5bb29f8b04d06cd2ec6f10ceb4c5c6fd61b93 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Dec 2020 16:06:05 -0500
Subject: [PATCH 0153/2157] tests/manual: docsnettest: enhance dhcp server
 instructions

Make it easier to use a different interface name and also add in
the missing EOF.
---
 tests/manual/coreos-docs-net-testing.sh | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 5e0482a53a..6d471ce866 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -20,13 +20,15 @@ set -eu -o pipefail
 # I test this way I usually stand up a separate VM on the same bridge
 # and run dnsmasq on a tagged network like:
 #
+#     interface=eth1
 #     cat <<EOF > /etc/dnsmasq.d/vlandhcp
-#     interface=eth1.100
+#     interface=${interface}.100
 #     bind-interfaces
 #     dhcp-range=192.168.200.150,192.168.200.160,12h
-#     ip link add link eth0 name eth0.100 type vlan id 100
-#     ip addr add 192.168.200.1/24 dev eth0.100
-#     ip link set eth0.100 up
+#     EOF
+#     ip link add link $interface name "${interface}.100" type vlan id 100
+#     ip addr add 192.168.200.1/24 dev "${interface}.100"
+#     ip link set "${interface}.100" up
 #     systemctl enable dnsmasq --now
 #
 # - Dusty Mabe - dusty@dustymabe.com

From b623e02983c53a6ffe1905c40bf22e9bafd3879d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Dec 2020 16:07:00 -0500
Subject: [PATCH 0154/2157] tests/manual: docsnettest: align the dhcpvlan test

This didn't match with the docs. Let's fix it.
---
 tests/manual/coreos-docs-net-testing.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 6d471ce866..03e71b8be9 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -283,6 +283,8 @@ fcct_dhcpvlanbond='
           mode=active-backup
           [ipv4]
           method=disabled
+          [ipv6]
+          method=disabled
     - path: /etc/NetworkManager/system-connections/${bondname}-slave-${subnic1}.nmconnection
       mode: 0600
       contents:

From 4ec23e2078c01719ced198e085f2f0e0b47994df Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Dec 2020 16:56:59 -0500
Subject: [PATCH 0155/2157] tests/manual: remove bug workarounds from net tests

The NM bugs we were working around [1], [2], [3] are fixed upstream
now so let's remove the workarounds from the code.

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/509
[2] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/539
[3] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/581
---
 tests/manual/coreos-docs-net-testing.sh | 10 ++--------
 tests/manual/coreos-network-testing.sh  |  4 +---
 2 files changed, 3 insertions(+), 11 deletions(-)

diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 03e71b8be9..ffd4d9db7e 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -437,10 +437,6 @@ EOF
     common_args+=' ignition.firstboot' # manually set ignition.firstboot
    #common_args+=' rd.break=pre-mount'
 
-    # Have to add ipv6.disable=1 for Fedora 33+ because of
-    # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/539
-    common_args+=' ipv6.disable=1'
-
     # export these values so we can substitute the values
     # in using the envsubst command
     export ip gateway netmask prefix interface nameserver bondname teamname bridgename subnic1 subnic2 vlanid
@@ -484,7 +480,6 @@ EOF
     export hostname="staticvlan"
     x="${common_args} rd.neednet=1"
     x+=" ip=${ip}::${gateway}:${netmask}:${hostname}:${interface}.${vlanid}:none:${nameserver}"
-    x+=" ip=${interface}:off"
     x+=" vlan=${interface}.${vlanid}:${interface}"
     x+=" ip=${subnic2}:off"
     initramfs_staticvlan=$x
@@ -493,10 +488,9 @@ EOF
 
     export hostname="dhcpvlanbond"
     x="${common_args} rd.neednet=1"
-    x+=" ip=vlan${vlanid}:dhcp"
-    x+=" ip=${bondname}:off"
+    x+=" ip=${bondname}.${vlanid}:dhcp"
     x+=" bond=${bondname}:${subnic1},${subnic2}:mode=active-backup,miimon=100"
-    x+=" vlan=vlan${vlanid}:${bondname}"
+    x+=" vlan=${bondname}.${vlanid}:${bondname}"
     initramfs_dhcpvlanbond=$x
     fcct_initramfs_dhcpvlanbond=$(echo "${fcct_common}${fcct_hostname}" | envsubst)
     fcct_dhcpvlanbond=$(echo "${fcct_common}${fcct_hostname}${fcct_dhcpvlanbond}" | envsubst)
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index 505a543a0f..2ebbdd5fea 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -546,10 +546,8 @@ EOF
     x="${common_args} rd.neednet=1 ip=${nic0}:dhcp ip=${nic1}:dhcp"
     initramfs_dhcp_nic0nic1=$x
 
-    # Have to add ipv6.disable=1 for Fedora 33+ because of
-    # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/539
     devname=$nic0
-    x="${common_args} rd.neednet=1 ip=${nic1}:off ipv6.disable=1"
+    x="${common_args} rd.neednet=1 ip=${nic1}:off"
     x+=" ip=${ip}::${gateway}:${netmask}:${initramfshostname}:${devname}:none:${nameserverstatic}"
     initramfs_static_nic0=$x
 

From f67ac16bd600a0a867a9c4cbed26f2689ad5cdb7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 6 Apr 2021 16:29:43 +0200
Subject: [PATCH 0156/2157] manifests: Move stalld to shared
 'system-configuration' manifest

This manifest is shared with RHCOS which will have stalld with the move
to 8.4 content.
---
 manifests/fedora-coreos-base.yaml   | 3 ---
 manifests/system-configuration.yaml | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 375435286d..c5462782e4 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -179,9 +179,6 @@ packages:
   # zram-generator (but not zram-generator-defaults) for F33 change
   # https://github.com/coreos/fedora-coreos-tracker/issues/509
   - zram-generator
-  # Boost starving threads
-  # https://github.com/coreos/fedora-coreos-tracker/issues/753
-  - stalld
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened
 # yet.  Also we may want to add to rpm-ostree something like arch negation;
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index 0bf2e014b3..5b4bb68795 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -33,3 +33,6 @@ packages:
   # /etc/logrotate.d to work. Really, this is a legacy thing, but if we don't
   # have it then people's disks will slowly fill up with logs.
   - logrotate
+  # Boost starving threads
+  # https://github.com/coreos/fedora-coreos-tracker/issues/753
+  - stalld

From b5a7b3ab1f929addaa1646abcd478aef995d6393 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Mar 2021 15:19:03 -0400
Subject: [PATCH 0157/2157] ci: use --parent-build

This is prep for more easily re-diff'ing the previous and new build via
rpm-ostree. But also it more closely matches what production builds do.
---
 .cci.jenkinsfile | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 82d958b285..62ccef4f10 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -14,7 +14,18 @@ cosaPod {
         cosa buildprep https://builds.coreos.fedoraproject.org/prod/streams/${env.CHANGE_TARGET}/builds
     """)
 
-    fcosBuild(skipInit: true, extraFetchArgs: '--with-cosa-overrides')
+    // use a --parent-build arg so we can diff later and it matches prod
+    def parent_arg = ""
+    def parent_commit = ""
+    if (shwrapRc("test -e /srv/fcos/builds/latest/x86_64/meta.json") == 0) {
+        shwrap("cp /srv/fcos/builds/latest/x86_64/meta.json .") // readJSON wants it in the WORKSPACE
+        def meta = readJSON file: "meta.json"
+        def version = meta["buildid"]
+        parent_arg = "--parent-build ${version}"
+        parent_commit = meta["ostree-commit"]
+    }
+
+    fcosBuild(skipInit: true, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
 
     parallel metal: {
         shwrap("cd /srv/fcos && cosa buildextend-metal")

From 793a0d0250c235fee3835420848981751c9a2cb6 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 12 Mar 2021 16:27:23 -0500
Subject: [PATCH 0158/2157] ci: print human-readable RPM diff

The `.pkgdiff` element from the build metadata isn't very useful to
humans. Let's just re-invoke `rpm-ostree db diff` to get a nice legible
diff.
---
 .cci.jenkinsfile | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 62ccef4f10..c76c0147b8 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -44,7 +44,13 @@ cosaPod {
     }
 
     // also print the pkgdiff as a separate stage to make it more visible
-    stage("RPM Diff") {
-        shwrap("jq .pkgdiff /srv/fcos/builds/latest/x86_64/meta.json")
+    if (parent_arg != "") {
+        stage("RPM Diff") {
+            shwrap("""
+                cd /srv/fcos
+                new_commit=\$(jq -r '.["ostree-commit"]' builds/latest/x86_64/meta.json)
+                rpm-ostree db diff --repo tmp/repo ${parent_commit} \${new_commit} | tee tmp/diff.txt
+            """)
+        }
     }
 }

From 09c392dadbc93bb6c131fc6e3bc8e03744f730cb Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 12 Mar 2021 16:28:27 -0500
Subject: [PATCH 0159/2157] ci: error out if downgrade detected

In the majority of cases, we don't expect new builds to downgrade RPMs.
Let's default to erroring out and contributors can consciously override
CI if was really expected.
---
 .cci.jenkinsfile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index c76c0147b8..bf62662eaf 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -50,6 +50,10 @@ cosaPod {
                 cd /srv/fcos
                 new_commit=\$(jq -r '.["ostree-commit"]' builds/latest/x86_64/meta.json)
                 rpm-ostree db diff --repo tmp/repo ${parent_commit} \${new_commit} | tee tmp/diff.txt
+                if grep -q Downgraded tmp/diff.txt; then
+                    echo "Downgrade detected. This is likely unintentional. If not, you may safely ignore this error."
+                    exit 1
+                fi
             """)
         }
     }

From f63d8b832794e5e4fe8f42e98317bdbc8dece5d9 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 29 Mar 2021 15:05:46 -0400
Subject: [PATCH 0160/2157] ci: use `cosa basearch` instead of hardcoding
 x86_64

This doesn't matter right now, but just on principle.
---
 .cci.jenkinsfile | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index bf62662eaf..07553f4633 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -3,6 +3,8 @@
 cosaPod {
     checkoutToDir(scm, 'config')
 
+    def basearch = shwrapCapture("cosa basearch")
+
     shwrap("cd config && ci/validate")
 
     shwrap("""
@@ -17,8 +19,8 @@ cosaPod {
     // use a --parent-build arg so we can diff later and it matches prod
     def parent_arg = ""
     def parent_commit = ""
-    if (shwrapRc("test -e /srv/fcos/builds/latest/x86_64/meta.json") == 0) {
-        shwrap("cp /srv/fcos/builds/latest/x86_64/meta.json .") // readJSON wants it in the WORKSPACE
+    if (shwrapRc("test -e /srv/fcos/builds/latest/${basearch}/meta.json") == 0) {
+        shwrap("cp /srv/fcos/builds/latest/${basearch}/meta.json .") // readJSON wants it in the WORKSPACE
         def meta = readJSON file: "meta.json"
         def version = meta["buildid"]
         parent_arg = "--parent-build ${version}"
@@ -48,7 +50,7 @@ cosaPod {
         stage("RPM Diff") {
             shwrap("""
                 cd /srv/fcos
-                new_commit=\$(jq -r '.["ostree-commit"]' builds/latest/x86_64/meta.json)
+                new_commit=\$(jq -r '.["ostree-commit"]' builds/latest/${basearch}/meta.json)
                 rpm-ostree db diff --repo tmp/repo ${parent_commit} \${new_commit} | tee tmp/diff.txt
                 if grep -q Downgraded tmp/diff.txt; then
                     echo "Downgrade detected. This is likely unintentional. If not, you may safely ignore this error."

From b4a65864ef3b7d05b1452ee92384266c875196df Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 6 Apr 2021 11:11:55 -0400
Subject: [PATCH 0161/2157] 35coreos-live/coreos-livepxe-rootfs: add in
 connectivity check before downloading

This should help us get around some race conditions on startup
where we've seen curl exit with "No route to host" errors. This
most likely happens because the Networking in the kernel is still
being brought up (seen more in complex networking scenarios) and
curl hits that error the first time it tries. Since "No route to
host" isn't considered retryable, curl exits.

Instead let's just verify we can get to the remote at all in an
initial `curl --head` call. In this one we'll use --retry-all-errors
so that we will retry all errors. Once the connectivity to the remote
is verified then it should be safe to start downloading.
---
 .../35coreos-live/coreos-livepxe-rootfs.sh        | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index 05824f3f24..0bc4e893bc 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -30,11 +30,24 @@ elif [[ -n "${rootfs_url}" ]]; then
         echo "Please fix your PXE configuration." >&2
         exit 1
     fi
+
+    # First, reach out to the server to verify connectivity before
+    # trying to download and pipe content through other programs.
+    # Doing this allows us to retry all errors (including transient
+    # "no route to host" errors during startup), without using the
+    # --retry-all-errors, which is problematic (see curl man page)
+    # when piping the output.
+    curl_common_args="--silent --show-error --insecure --location --retry 5"
+    if ! curl --head --retry-all-errors $curl_common_args "${rootfs_url}" >/dev/null; then
+        echo "Couldn't establish connectivity with the server specified by coreos.live.rootfs_url=" >&2
+        echo "Check that the URL is correct and can be reached." >&2
+        exit 1
+    fi
     # We don't need to verify TLS certificates because we're checking the
     # image hash.
     # bsdtar can read cpio archives and we already depend on it for
     # coreos-liveiso-persist-osmet.service, so use it instead of cpio.
-    if ! curl --silent --show-error --insecure --location --retry 5 "${rootfs_url}" | \
+    if ! curl $curl_common_args "${rootfs_url}" | \
             rdcore stream-hash /etc/coreos-live-want-rootfs | \
             bsdtar -xf - -C / ; then
         echo "Couldn't fetch, verify, and unpack image specified by coreos.live.rootfs_url=" >&2

From 829dae04337b924c59ca1d8646f2904a58481215 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Thu, 1 Apr 2021 16:25:42 +0200
Subject: [PATCH 0162/2157] overrides: Fast-track podman 3.1.0-2

From https://bodhi.fedoraproject.org/updates/FEDORA-2021-e70b450680
---
 manifest-lock.overrides.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b14844a892..aa47ac3d54 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -36,3 +36,10 @@ packages:
     evra: 0.21.2-1.fc33.noarch
   console-login-helper-messages-profile:
     evra: 0.21.2-1.fc33.noarch
+  # Fast-track new podman release to fix podman cp:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/771
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-e70b450680
+  podman:
+    evr: 2:3.1.0-2.fc33
+  podman-plugins:
+    evr: 2:3.1.0-2.fc33

From 168cdf7f9b1afd1f476fe48eeb40a03bf070a3a7 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 6 Apr 2021 17:05:52 +0000
Subject: [PATCH 0163/2157] buildroot: Blow out quay.io cache

This is going to be problematic for the buildroot in
general.  Not finding docs on a mechanism to avoid
this on quay.
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index c7c1e81e2f..b9ffcaa2e5 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -9,7 +9,7 @@ FROM registry.fedoraproject.org/fedora:33
 USER root
 WORKDIR /root/containerbuild
 COPY . tmp
-RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf
+RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf # nocache 20210406
 # match cosa's unprivileged default
 RUN useradd builder --uid 1000 -G wheel && \
         echo '%wheel ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel-nopasswd && \

From b3715fa61d5d000bfdcf8eb5a8ffa2b5856bc887 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 7 Apr 2021 00:39:33 +0000
Subject: [PATCH 0164/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/193/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 42a5ee241f..295018bd86 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -166,7 +166,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.18-4.fc33.x86_64"
+      "evra": "0.18-5.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -979,10 +979,10 @@
       "evra": "1.7.3-5.fc33.x86_64"
     },
     "podman": {
-      "evra": "2:3.0.1-1.fc33.x86_64"
+      "evra": "2:3.1.0-2.fc33.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.0.1-1.fc33.x86_64"
+      "evra": "2:3.1.0-2.fc33.x86_64"
     },
     "policycoreutils": {
       "evra": "3.1-4.fc33.x86_64"
@@ -1042,7 +1042,7 @@
       "evra": "3.2.3-3.fc33.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.0-279.dev.gitdedadbf.fc33.x86_64"
+      "evra": "2:1.0.0-375.dev.git12644e6.fc33.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.13.5-0.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-04T21:07:47Z",
+    "generated": "2021-04-07T00:03:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-03T21:51:55Z"
+        "generated": "2021-04-06T22:33:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-04T00:56:39Z"
+        "generated": "2021-04-06T00:55:53Z"
       }
     }
   }

From b7e4622ed68a76e8cf4d11f67290c249a40c9b0b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 26 Mar 2021 11:12:58 -0400
Subject: [PATCH 0165/2157] Move next-devel to cgroupsv2 for new nodes

All we need to do is to make the associated karg be specific to
`testing-devel` by uplisting it to `image.yaml`. Then `next-devel` will
naturally shed it when `image-base.yaml` gets synced over.

See: https://github.com/coreos/fedora-coreos-tracker/issues/292
---
 image-base.yaml    |  6 +++---
 image.yaml         |  5 +++++
 tests/kola/misc-ro | 23 +++++++++++++++++++++++
 3 files changed, 31 insertions(+), 3 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index 6e83494bd7..1aabf6ace6 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -1,3 +1,6 @@
+# This file is shared by all streams. For a stream-specific change, use
+# image.yaml instead.
+
 # Target disk size in GB.
 # Make it at least 10G because we want the rootfs to be at least 8G:
 # https://github.com/coreos/fedora-coreos-tracker/issues/586
@@ -6,9 +9,6 @@ size: 10
 extra-kargs:
     # Disable SMT on systems vulnerable to MDS or any similar future issue.
     - mitigations=auto,nosmt
-    # https://github.com/coreos/fedora-coreos-tracker/issues/292
-    # https://fedoraproject.org/wiki/Changes/CGroupsV2
-    - systemd.unified_cgroup_hierarchy=0
 
 # Disable networking by default on firstboot. We can drop this once cosa stops
 # defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
diff --git a/image.yaml b/image.yaml
index 1bf800cca2..8f79a3abde 100644
--- a/image.yaml
+++ b/image.yaml
@@ -2,3 +2,8 @@
 # similarly to manifest.yaml. Unlike image-base.yaml, which is shared by all
 # streams.
 include: image-base.yaml
+
+extra-kargs:
+    # https://github.com/coreos/fedora-coreos-tracker/issues/292
+    # https://fedoraproject.org/wiki/Changes/CGroupsV2
+    - systemd.unified_cgroup_hierarchy=0
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index bf36423e05..c79c88c2fb 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -150,3 +150,26 @@ if ! grep prjquota <<< "${rootflags}"; then
     fatal "missing prjquota in root mount flags: ${rootflags}"
 fi
 ok "root mounted with prjquota"
+
+has_cgroup_karg=1
+grep -q systemd.unified_cgroup_hierarchy /proc/cmdline || has_cgroup_karg=0
+sys_fs_cgroup_source=$(findmnt -no SOURCE /sys/fs/cgroup)
+stream=$(rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
+case "$stream" in
+    "testing-devel" | "testing" | "stable")
+        if [ $has_cgroup_karg == 0 ]; then
+            fatal "missing systemd.unified_cgroup_hierarchy=0"
+        fi
+        if [[ $sys_fs_cgroup_source != tmpfs ]]; then
+            fatal "/sys/fs/cgroup is not tmpfs"
+        fi
+        ;;
+    *)
+        if [ $has_cgroup_karg == 1 ]; then
+            fatal "found systemd.unified_cgroup_hierarchy=0"
+        fi
+        if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
+            fatal "/sys/fs/cgroup is not cgroup2"
+        fi
+        ;;
+esac

From 01c6d01cca73c87688529c3db81aadb81e830a51 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 16 Mar 2021 17:42:04 +0100
Subject: [PATCH 0166/2157] tests: Add basic test for rpm-ostree countme

Test that:
- The timer is started when rpm-ostreed started
- Manual startup of the count me service is sucessful
- Output matches the number of expected successful requests
---
 tests/kola/rpm-ostree-countme/config.fcc |  7 +++++
 tests/kola/rpm-ostree-countme/test.sh    | 36 ++++++++++++++++++++++++
 2 files changed, 43 insertions(+)
 create mode 100644 tests/kola/rpm-ostree-countme/config.fcc
 create mode 100755 tests/kola/rpm-ostree-countme/test.sh

diff --git a/tests/kola/rpm-ostree-countme/config.fcc b/tests/kola/rpm-ostree-countme/config.fcc
new file mode 100644
index 0000000000..002cc59a7a
--- /dev/null
+++ b/tests/kola/rpm-ostree-countme/config.fcc
@@ -0,0 +1,7 @@
+variant: fcos
+version: 1.3.0
+systemd:
+  units:
+    - name: rpm-ostree-countme.timer
+      mask: false
+      enabled: true
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
new file mode 100755
index 0000000000..598fd8c50f
--- /dev/null
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# No need to run an other platforms than QEMU.
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Check that the timer got pulled when rpm-ostreed got started
+if [[ $(systemctl show -p ActiveState rpm-ostree-countme.timer) != "ActiveState=active" ]] \
+	&& [[ $(systemctl show -p SubState rpm-ostree-countme.timer) != "SubState=waiting" ]]; then
+	fatal "rpm-ostree-countme timer has not been started"
+fi
+
+# Check that running the service manually is successful
+systemctl start rpm-ostree-countme.service
+if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveState=inactive" ]] \
+	&& [[ $(systemctl show -p SubState rpm-ostree-countme.service) != "SubState=dead" ]] \
+	&& [[ $(systemctl show -p Result rpm-ostree-countme.service) != "Result=success" ]] \
+	&& [[ $(systemctl show -p ExecMainStatus rpm-ostree-countme.service) != "ExecMainStatus=0" ]]; then
+	fatal "rpm-ostree-countme exited with an error"
+fi
+
+# Check rpm-ostree count me output
+if [[ $(journalctl --output=json --boot --unit=rpm-ostree-countme.service --grep "Successful requests:" | jq --raw-output '.MESSAGE') != "Successful requests: 2/2" ]]; then
+	fatal "rpm-ostree-countme service ouput does not match expected sucess output"
+fi
+
+ok countme

From 330d0ab12c322e312fe31d01fedfb7d3deee84a2 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 6 Apr 2021 23:09:02 +0000
Subject: [PATCH 0167/2157] buildroot: Drop USER creation, add
 createrepo_c+ostree

The USER bit breaks the ability to use this in Github actions.
Further, it's not useful for OpenShift because the platform
allocates a dynamic UID today (Eventually Kube user namespaces
will augment this).

We added this for the Jenkins/CCI, but previously we
were running the buildroot as uid 0 (i.e. Docker default) anyways.
If we want to enhance the flow to run as non-root, I think the
right thing is to do it in the platform and not the container.
---
 ci/buildroot/Dockerfile         | 12 ++----------
 ci/buildroot/buildroot-reqs.txt |  4 ++++
 2 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index b9ffcaa2e5..a3dc9a67be 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -6,13 +6,5 @@
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:33
-USER root
-WORKDIR /root/containerbuild
-COPY . tmp
-RUN ./tmp/install-buildroot.sh && yum clean all && rm tmp -rf # nocache 20210406
-# match cosa's unprivileged default
-RUN useradd builder --uid 1000 -G wheel && \
-        echo '%wheel ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel-nopasswd && \
-        chmod 600 /etc/sudoers.d/wheel-nopasswd
-USER builder
-WORKDIR /home/builder
+COPY . /src
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210406
diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index daff6950a5..9fa769516c 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -28,6 +28,9 @@ xz
 # For rust projects like rpm-ostree
 rustfmt
 
+# For unit tests at least.
+ostree
+
 # A super common tool
 jq
 
@@ -36,6 +39,7 @@ attr
 rsync
 python3-pyyaml
 parallel gjs
+createrepo_c
 
 # Also, add clang since it's useful at least in CI for C/C++ projects
 clang lld

From 0f8eeaf26c839d12e77ca1767cc0ca04695bc5f7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Apr 2021 17:19:16 -0400
Subject: [PATCH 0168/2157] tests/kola: handle possible rootless-systemd flake

The sleep 5 might not be long enough if CI is loaded. Let's make curl
itself do the retry, which contains logic for exponential backoff.
---
 tests/kola/podman/rootless-systemd | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index c12cec80a9..87936bacec 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -53,10 +53,8 @@ main() {
     chmod +x /tmp/runascoreuserscript
     runascoreuser /tmp/runascoreuserscript
 
-    # Let it come up
-    sleep 5
-
-    if ! curl http://localhost:8080 1>/dev/null; then
+    # Try to grab the web page. Retry as it might not be up fully yet.
+    if ! curl --silent --show-error --retry 4 --retry-all-errors http://localhost:8080 >/dev/null; then
         echo TEST FAILED 1>&2
         runascoreuser podman logs httpd
         return 1

From 67f5a40785fab863d8f9b6dd8f37fd13ad7d86a8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 7 Apr 2021 15:23:26 -0400
Subject: [PATCH 0169/2157] 35coreos-network: enable initrd networking on
 azurestack

Just like on Azure, Afterburn needs networking for hostname fetching and
boot check-in. Ideally, Afterburn would request it itself but this is
where that logic lives for now (see [1]).

[1] https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-initramfs.md#networking
---
 .../modules.d/35coreos-network/coreos-enable-network.service   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
index 9f9cc92e4b..e7ba08d153 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
@@ -7,10 +7,11 @@ After=basic.target
 # Triggering conditions for cases where we need network:
 #  * when Ignition signals that it is required for provisioning.
 #  * on live systems fetching the remote rootfs in initramfs.
-#  * on Azure, for hostname fetching (metadata endpoint) and boot check-in (wireserver).
+#  * on Azure and Azure Stack Hub, for hostname fetching (metadata endpoint) and boot check-in (wireserver).
 ConditionPathExists=|/run/ignition/neednet
 ConditionKernelCommandLine=|coreos.live.rootfs_url
 ConditionKernelCommandLine=|ignition.platform.id=azure
+ConditionKernelCommandLine=|ignition.platform.id=azurestack
 
 # Creates /run/ignition/neednet
 After=ignition-fetch-offline.service

From 3167d834e18ab5bbf106cef91d5eaf1e155a4786 Mon Sep 17 00:00:00 2001
From: Kelvin Fan <kelvinfan001@gmail.com>
Date: Wed, 7 Apr 2021 17:03:42 -0400
Subject: [PATCH 0170/2157] 12kdump: Remount /boot rw before `kdump.service`

Right now, `kdump` fails to generate its initramfs because
it cannot place it next to our default initramfs in
`/boot/ostree`, which is read-only.
This is a workaround to get `kdump` working again until
it gains the ability to place its generated initramfs
in a different location (e.g. `/var/lib/kdump`).

xref: https://bugzilla.redhat.com/show_bug.cgi?id=1918493
---
 .../lib/systemd/system/kdump.service.d/remount-boot.conf | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf

diff --git a/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf b/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf
new file mode 100644
index 0000000000..2b4d940847
--- /dev/null
+++ b/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf
@@ -0,0 +1,9 @@
+# https://bugzilla.redhat.com/show_bug.cgi?id=1918493
+# `/boot` is read-only, but `kdump.service` wants to 
+# places its generated initramfs alongside the default
+# initramfs under `/boot/ostree`.
+# Until `kdump` gains the ability to place its initramfs
+# elsewhere, temporarily remount `/boot` read-write before
+# the `kdump` initramfs is generated.
+[Service]
+ExecStartPre=/usr/bin/mount -o remount,rw /boot

From fb53c99f6a3a90786cf4fc0d8cd57f1a0d771f8b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 8 Apr 2021 21:50:49 +0000
Subject: [PATCH 0171/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/196/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 295018bd86..1e2981166d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,7 +130,7 @@
       "evra": "0.21.2-1.fc33.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.158.0-1.fc33.noarch"
+      "evra": "2:2.160.0-1.fc33.noarch"
     },
     "containerd": {
       "evra": "1.4.4-1.fc33.x86_64"
@@ -310,7 +310,7 @@
       "evra": "0.8.6-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-1.fc33.x86_64"
+      "evra": "1.10.2-2.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -325,7 +325,7 @@
       "evra": "2.9.9-10.fc33.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.4.0-1.fc33.x86_64"
+      "evra": "1.5.0-1.fc33.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.1-1.fc33.x86_64"
@@ -406,7 +406,7 @@
       "evra": "3.23-3.fc33.x86_64"
     },
     "hwdata": {
-      "evra": "0.345-1.fc33.noarch"
+      "evra": "0.346-1.fc33.noarch"
     },
     "ignition": {
       "evra": "2.9.0-4.fc33.x86_64"
@@ -628,7 +628,7 @@
       "evra": "1.3.5-13.fc33.x86_64"
     },
     "libldb": {
-      "evra": "2.2.0-4.fc33.x86_64"
+      "evra": "2.2.1-1.fc33.x86_64"
     },
     "libluksmeta": {
       "evra": "9-8.fc33.x86_64"
@@ -727,7 +727,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.5-0.fc33.x86_64"
+      "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-1.fc33.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.0-10.fc33.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.5-0.fc33.x86_64"
+      "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.18-1.fc33.x86_64"
@@ -1045,16 +1045,16 @@
       "evra": "2:1.0.0-375.dev.git12644e6.fc33.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.5-0.fc33.x86_64"
+      "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.5-0.fc33.noarch"
+      "evra": "2:4.13.7-0.fc33.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.5-0.fc33.x86_64"
+      "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "samba-libs": {
-      "evra": "2:4.13.5-0.fc33.x86_64"
+      "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "sed": {
       "evra": "4.8-5.fc33.x86_64"
@@ -1201,7 +1201,7 @@
       "evra": "1.1.9-1.fc33.x86_64"
     },
     "zincati": {
-      "evra": "0.0.18-1.fc33.x86_64"
+      "evra": "0.0.19-1.fc33.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-23.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-07T00:03:40Z",
+    "generated": "2021-04-08T21:12:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-06T22:33:54Z"
+        "generated": "2021-04-07T00:50:58Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-06T00:55:53Z"
+        "generated": "2021-04-08T20:32:21Z"
       }
     }
   }

From 24c126f4f67c5691684216870a3b3b1c7c54ed86 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Fri, 9 Apr 2021 06:07:29 -0400
Subject: [PATCH 0172/2157] overrides: fast-track coreos-installer 0.9.0

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index aa47ac3d54..05b9e28e0f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -43,3 +43,9 @@ packages:
     evr: 2:3.1.0-2.fc33
   podman-plugins:
     evr: 2:3.1.0-2.fc33
+  # Fast-track new coreos-installer release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-c67cfeca62
+  coreos-installer:
+    evr: 0.9.0-2.fc33
+  coreos-installer-bootinfra:
+    evr: 0.9.0-2.fc33

From 9af03f7b2c97442591b7857fd9b16b6246050934 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 12 Apr 2021 13:51:59 +0000
Subject: [PATCH 0173/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/201/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1e2981166d..132482cbad 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,10 +142,10 @@
       "evra": "4:1-9.fc33.noarch"
     },
     "coreos-installer": {
-      "evra": "0.8.0-1.fc33.x86_64"
+      "evra": "0.9.0-2.fc33.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.8.0-1.fc33.x86_64"
+      "evra": "0.9.0-2.fc33.x86_64"
     },
     "coreutils": {
       "evra": "8.32-18.fc33.x86_64"
@@ -271,7 +271,7 @@
       "evra": "0.0.4-7.fc33.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-release-common": {
       "evra": "33-3.noarch"
@@ -283,16 +283,16 @@
       "evra": "33-3.noarch"
     },
     "fedora-repos": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "file": {
       "evra": "5.39-3.fc33.x86_64"
@@ -382,22 +382,22 @@
       "evra": "3.4-5.fc33.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.04-33.fc33.noarch"
+      "evra": "1:2.06~rc1-1.fc33.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.04-33.fc33.x86_64"
+      "evra": "1:2.06~rc1-1.fc33.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.04-33.fc33.x86_64"
+      "evra": "1:2.06~rc1-1.fc33.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.04-33.fc33.noarch"
+      "evra": "1:2.06~rc1-1.fc33.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.04-33.fc33.x86_64"
+      "evra": "1:2.06~rc1-1.fc33.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.04-33.fc33.x86_64"
+      "evra": "1:2.06~rc1-1.fc33.x86_64"
     },
     "gzip": {
       "evra": "1.10-3.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2637-1.fc33.x86_64"
+      "evra": "2:8.2.2735-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-08T21:12:06Z",
+    "generated": "2021-04-12T13:15:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-07T00:50:58Z"
+        "generated": "2021-04-09T13:35:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-08T20:32:21Z"
+        "generated": "2021-04-11T14:37:20Z"
       }
     }
   }

From 2ffd8269736790752c1404173cc0a12c32b61dc5 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Sat, 10 Apr 2021 01:23:31 -0400
Subject: [PATCH 0174/2157] overrides: fast-track afterburn release

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 05b9e28e0f..f13b91b222 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -49,3 +49,9 @@ packages:
     evr: 0.9.0-2.fc33
   coreos-installer-bootinfra:
     evr: 0.9.0-2.fc33
+  # Fast-track new afterburn release
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb2a204001
+  afterburn:
+    evr: 5.0.0-1.fc33
+  afterburn-dracut:
+    evr: 5.0.0-1.fc33

From af0c23d0dcca4bba440260091a0ecccb13c9b81b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 9 Apr 2021 16:36:56 -0400
Subject: [PATCH 0175/2157] tests/kola/var-mount: convert to Butane config

It's just way less verbose and is closer to what users actually actually
do.
---
 tests/kola/var-mount/config.fcc | 15 ++++++++++++++
 tests/kola/var-mount/config.ign | 36 ---------------------------------
 2 files changed, 15 insertions(+), 36 deletions(-)
 create mode 100644 tests/kola/var-mount/config.fcc
 delete mode 100644 tests/kola/var-mount/config.ign

diff --git a/tests/kola/var-mount/config.fcc b/tests/kola/var-mount/config.fcc
new file mode 100644
index 0000000000..66613f18be
--- /dev/null
+++ b/tests/kola/var-mount/config.fcc
@@ -0,0 +1,15 @@
+variant: fcos
+version: 1.3.0
+storage:
+  disks:
+    - device: /dev/vda
+      partitions:
+        - label: var
+          size_mib: 0
+          start_mib: 5000
+      wipe_table: false
+  filesystems:
+    - device: /dev/disk/by-partlabel/var
+      format: xfs
+      path: /var
+      with_mount_unit: true
diff --git a/tests/kola/var-mount/config.ign b/tests/kola/var-mount/config.ign
deleted file mode 100644
index 3408b0cc43..0000000000
--- a/tests/kola/var-mount/config.ign
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  "ignition": {
-    "version": "3.0.0"
-  },
-  "storage": {
-    "disks": [
-      {
-        "device": "/dev/vda",
-        "partitions": [
-          {
-            "label": "var",
-            "sizeMiB": 0,
-            "startMiB": 5000
-          }
-        ],
-        "wipeTable": false
-      }
-    ],
-    "filesystems": [
-      {
-        "device": "/dev/disk/by-partlabel/var",
-        "format": "xfs",
-        "path": "/var"
-      }
-    ]
-  },
-  "systemd": {
-    "units": [
-      {
-        "contents": "[Unit]\nBefore=local-fs.target\nRequires=systemd-fsck@/dev/disk/by-partlabel/var\nAfter=systemd-fsck@/dev/disk/by-partlabel/var\n\n[Mount]\nWhere=/var\nWhat=/dev/disk/by-partlabel/var\nType=xfs\n\n[Install]\nRequiredBy=local-fs.target",
-        "enabled": true,
-        "name": "var.mount"
-      }
-    ]
-  }
-}

From 7ea4a30228348cf2433fd9f3d0dba1808ff992d5 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 9 Apr 2021 16:42:19 -0400
Subject: [PATCH 0176/2157] tests/kola/var-mount: test mounting on reboot

The first boot is special. And although we try to make it like any other
boot wrt non-root filesystems, let's verify that.
---
 tests/kola/var-mount/test.sh | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/tests/kola/var-mount/test.sh b/tests/kola/var-mount/test.sh
index ec5bd84c68..d268abb5fa 100755
--- a/tests/kola/var-mount/test.sh
+++ b/tests/kola/var-mount/test.sh
@@ -4,8 +4,31 @@ set -xeuo pipefail
 # restrict to qemu for now because the primary disk path is platform-dependent
 # kola: {"platforms": "qemu"}
 
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
 src=$(findmnt -nvr /var -o SOURCE)
 [[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/var) ]]
 
 fstype=$(findmnt -nvr /var -o FSTYPE)
 [[ $fstype == xfs ]]
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      ok "mounted on first boot"
+
+      # reboot once to sanity-check we can mount on second boot
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      ok "mounted on reboot"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From 66d0a8d672d1f5752584a340d96a328ea89b711c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 9 Apr 2021 16:55:42 -0400
Subject: [PATCH 0177/2157] presets: enable clevis-luks-askpass.path

This is required for *non-root* Clevis LUKS devices to be unlocked
successfully on subsequent boots. We could enable it at runtime when we
detect Clevis being used, but path units are normally lightweight, and
having it enabled by default matches the configuration in the initrd.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/687
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1947490
---
 .../usr/lib/systemd/system-preset/40-coreos.preset  |  1 +
 tests/kola/var-mount/config.fcc                     | 12 +++++++++++-
 tests/kola/var-mount/test.sh                        | 13 +++++++++++++
 3 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 9299d17f89..871d19565e 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -22,3 +22,4 @@ enable bootupd.socket
 # The event for the attached device comes as a diag event.
 # Ideally it should have been added as part of base Fedora - but since it was arch specific, it was not added: https://bugzilla.redhat.com/show_bug.cgi?id=1433859
 enable rtas_errd.service
+enable clevis-luks-askpass.path
diff --git a/tests/kola/var-mount/config.fcc b/tests/kola/var-mount/config.fcc
index 66613f18be..294426e29c 100644
--- a/tests/kola/var-mount/config.fcc
+++ b/tests/kola/var-mount/config.fcc
@@ -5,11 +5,21 @@ storage:
     - device: /dev/vda
       partitions:
         - label: var
-          size_mib: 0
+          size_mib: 1000
           start_mib: 5000
+        - label: varlog
       wipe_table: false
+  luks:
+    - name: varlog
+      device: /dev/disk/by-partlabel/varlog
+      clevis:
+        tpm2: true
   filesystems:
     - device: /dev/disk/by-partlabel/var
       format: xfs
       path: /var
       with_mount_unit: true
+    - device: /dev/mapper/varlog
+      format: ext4
+      path: /var/log
+      with_mount_unit: true
diff --git a/tests/kola/var-mount/test.sh b/tests/kola/var-mount/test.sh
index d268abb5fa..ba6565e80b 100755
--- a/tests/kola/var-mount/test.sh
+++ b/tests/kola/var-mount/test.sh
@@ -13,12 +13,25 @@ fatal() {
     exit 1
 }
 
+# /var
+
 src=$(findmnt -nvr /var -o SOURCE)
 [[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/var) ]]
 
 fstype=$(findmnt -nvr /var -o FSTYPE)
 [[ $fstype == xfs ]]
 
+# /var/log
+
+src=$(findmnt -nvr /var/log -o SOURCE)
+[[ $(realpath "$src") == $(realpath /dev/mapper/varlog) ]]
+
+blktype=$(lsblk -o TYPE "${src}" --noheadings)
+[[ ${blktype} == crypt ]]
+
+fstype=$(findmnt -nvr /var/log -o FSTYPE)
+[[ $fstype == ext4 ]]
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       ok "mounted on first boot"

From c7ff431c9538b2e99320bc179c84253cd790750b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Mon, 12 Apr 2021 17:14:07 +0200
Subject: [PATCH 0178/2157] tests/kola/rpm-ostree-countme: Update for
 pre-release repo count

In production, we allow counting to silently fail when partially
reporting count me status to avoid unnecessary unit failures as this not
critical. In CI however, we want to make sure this test is properly
working so we need to manually validate the output.

FCOS versions based on pre-release Fedora (branched/beta/rc) will have
an additionnal repo enabled, so this updates the check to take that into
account.

For: https://github.com/coreos/fedora-coreos-tracker/issues/790
---
 tests/kola/rpm-ostree-countme/test.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 598fd8c50f..c4dd7ebda2 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -29,7 +29,8 @@ if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveStat
 fi
 
 # Check rpm-ostree count me output
-if [[ $(journalctl --output=json --boot --unit=rpm-ostree-countme.service --grep "Successful requests:" | jq --raw-output '.MESSAGE') != "Successful requests: 2/2" ]]; then
+output="$(journalctl --output=json --boot --unit=rpm-ostree-countme.service --grep "Successful requests:" | jq --raw-output '.MESSAGE')"
+if [[ "${output}" != "Successful requests: 2/2" ]] && [[ "${output}" != "Successful requests: 3/3" ]]; then
 	fatal "rpm-ostree-countme service ouput does not match expected sucess output"
 fi
 

From dc0c3fcf646c69818e9bd4572bbc4fc6b349fa5d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Apr 2021 15:56:34 -0400
Subject: [PATCH 0179/2157] manifests: f34: Delete
 coreos-reset-stub-resolv-selinux-context.{path,service}.

Not needed in Fedora 34 since https://github.com/systemd/systemd/pull/17976 has landed.
---
 manifests/fedora-coreos-base.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index c5462782e4..2dc6e9a45a 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -99,6 +99,18 @@ postprocess:
     DNSStubListener=no
     EOF
 
+  # Disable and delete the coreos-reset-stub-resolv-selinux-context.{path,service}.
+  # Not needed in Fedora 34 since https://github.com/systemd/systemd/pull/17976 has landed.
+  # Can remove this and the files in the overlay once we've migrated everything to F34.
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    source /etc/os-release
+    if [ ${VERSION_ID} -ge 34 ]; then
+    rm -fv /etc/systemd/system/multi-user.target.wants/coreos-reset-stub-resolv-selinux-context.{path,service} \
+           /usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.{path,service}
+    fi
+
   # Set the fallback hostname to `localhost`. This piggybacks on the
   # postprocess script above which neuters systemd-resolved, because
   # currently, a fallback hostname of `localhost` + systemd-resolved breaks

From 72eed4c14e3fbecd44350d14e230653c6e760d08 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 12 Apr 2021 10:02:42 -0400
Subject: [PATCH 0180/2157] tests/kola/rootless-systemd: add back sleep

Let's both sleep upfront and have `curl` do its exponential retry.
Follow-up to #937 since I saw this test failing still in #946.
---
 tests/kola/podman/rootless-systemd | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 87936bacec..e41df869c0 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -53,8 +53,10 @@ main() {
     chmod +x /tmp/runascoreuserscript
     runascoreuser /tmp/runascoreuserscript
 
+    sleep 5
+
     # Try to grab the web page. Retry as it might not be up fully yet.
-    if ! curl --silent --show-error --retry 4 --retry-all-errors http://localhost:8080 >/dev/null; then
+    if ! curl --silent --show-error --retry 5 --retry-all-errors http://localhost:8080 >/dev/null; then
         echo TEST FAILED 1>&2
         runascoreuser podman logs httpd
         return 1

From 2c5f2e309b9c3cde83fc855f55c53354aefea12d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 12 Apr 2021 17:44:19 -0400
Subject: [PATCH 0181/2157] overrides: fast-track rpm-ostree-2021.4

For CVE-2021-3445 (https://bugzilla.redhat.com/show_bug.cgi?id=1932079).
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f13b91b222..91ebc1e8bd 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -55,3 +55,9 @@ packages:
     evr: 5.0.0-1.fc33
   afterburn-dracut:
     evr: 5.0.0-1.fc33
+  # Fast-track rpm-ostree for CVE-2021-3445
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-eadfc56b95
+  rpm-ostree:
+    evr: 2021.4-1.fc33
+  rpm-ostree-libs:
+    evr: 2021.4-1.fc33

From 1c4ee025493fc8ab17dc6a2cf1f8e2aba8c68a53 Mon Sep 17 00:00:00 2001
From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Tue, 13 Apr 2021 18:23:58 +0200
Subject: [PATCH 0182/2157] overlay.d/20platform-chrony: Fix misconfiguration
 with leap-smearing servers

NTP servers provided by AWS and GCP implement a "leap smear" to
hide leap seconds from clients. When chronyd is configured with
leap-smearing servers, the leapsectz directive must be disabled to
avoid the kernel making a wrong correction of the clock at the time of
the leap second.

Disable any leapsectz directives coming from the default configuration
and enable it only in the Azure case (the PTP clock doesn't provide
information about leap seconds).
---
 .../usr/lib/systemd/system-generators/coreos-platform-chrony   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index 71f030d6f1..958c6e1732 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -54,7 +54,7 @@ EOF
 fi
 
 (echo "# Generated by $self - do not edit directly"
- sed -e s,'^makestep,#makestep,' -e s,'^pool,#pool,' < /etc/chrony.conf
+ sed -e s,'^makestep,#makestep,' -e s,'^pool,#pool,' -e s,'^leapsectz,#leapsectz,' < /etc/chrony.conf
 cat <<EOF
 
 # Allow the system clock step on any clock update.
@@ -68,6 +68,7 @@ case "${platform}" in
     azure)
         (echo '# See also https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync'
          echo 'refclock PHC /dev/ptp0 poll 3 dpoll -2 offset 0'
+         echo 'leapsectz right/UTC'
         ) >> "${confpath}" ;;
     aws)
         (echo '# See also https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html'

From 53e0634f366fcf69f79427b4afdce7e3476fd788 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 13 Apr 2021 20:12:12 +0200
Subject: [PATCH 0183/2157] tests/kola/toolbox: Retry 'toolbox create' to avoid
 infra flakes

Retry to create the toolbox container five times to avoid failing on
Fedora registry infra flakes.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/788
---
 tests/kola/toolbox/test.sh | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index e9dc2a5ab0..db5bc1f4b5 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -25,7 +25,16 @@ fatal() {
     exit 1
 }
 
-machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
+# Try five times to create the toolbox to avoid Fedora registry infra flakes
+for i in $(seq 1 5); do
+	machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
+	if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
+		echo "Could not create toolbox on try: $i"
+		sleep 10
+	else
+		break
+	fi
+done
 if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
 	fatal "Could not create toolbox"
 fi

From d31a4db41fe46c3c9bd160c53e8d14514e7afb8a Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Wed, 14 Apr 2021 17:12:19 +0000
Subject: [PATCH 0184/2157] manifest-lock: drop graduated overrides

Promoted to stable: https://bodhi.fedoraproject.org/updates/FEDORA-2021-cf005d6480
---
 manifest-lock.overrides.yaml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 91ebc1e8bd..fa0fc5b5bf 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -22,20 +22,6 @@ packages:
     evr: 5.10.19-200.fc33
   kernel-modules:
     evr: 5.10.19-200.fc33
-  # Fast-track console-login-helper-messages release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-cf005d6480
-  # New updates in console-login-helper-messages v0.21.2 fixes
-  # the console prompt being left solid white after displaying
-  # the OS release MOTD.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/750
-  console-login-helper-messages:
-    evra: 0.21.2-1.fc33.noarch
-  console-login-helper-messages-issuegen:
-    evra: 0.21.2-1.fc33.noarch
-  console-login-helper-messages-motdgen:
-    evra: 0.21.2-1.fc33.noarch
-  console-login-helper-messages-profile:
-    evra: 0.21.2-1.fc33.noarch
   # Fast-track new podman release to fix podman cp:
   # https://github.com/coreos/fedora-coreos-tracker/issues/771
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-e70b450680

From d29a62f3357ce5ea5a038978ce276b0bf4a9bb72 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Apr 2021 21:10:09 +0000
Subject: [PATCH 0185/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/207/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 132482cbad..e11733d633 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.0-4.fc33.x86_64"
     },
     "afterburn": {
-      "evra": "4.6.0-2.fc33.x86_64"
+      "evra": "5.0.0-1.fc33.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "4.6.0-2.fc33.x86_64"
+      "evra": "5.0.0-1.fc33.x86_64"
     },
     "alternatives": {
       "evra": "1.14-3.fc33.x86_64"
@@ -166,7 +166,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.18-5.fc33.x86_64"
+      "evra": "0.19-1.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -382,22 +382,22 @@
       "evra": "3.4-5.fc33.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06~rc1-1.fc33.noarch"
+      "evra": "1:2.06~rc1-2.fc33.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06~rc1-1.fc33.x86_64"
+      "evra": "1:2.06~rc1-2.fc33.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06~rc1-1.fc33.x86_64"
+      "evra": "1:2.06~rc1-2.fc33.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06~rc1-1.fc33.noarch"
+      "evra": "1:2.06~rc1-2.fc33.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06~rc1-1.fc33.x86_64"
+      "evra": "1:2.06~rc1-2.fc33.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06~rc1-1.fc33.x86_64"
+      "evra": "1:2.06~rc1-2.fc33.x86_64"
     },
     "gzip": {
       "evra": "1.10-3.fc33.x86_64"
@@ -619,10 +619,10 @@
       "evra": "10-8.fc33.x86_64"
     },
     "libkcapi": {
-      "evra": "1.2.0-3.fc33.x86_64"
+      "evra": "1.2.1-1.fc33.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.2.0-3.fc33.x86_64"
+      "evra": "1.2.1-1.fc33.x86_64"
     },
     "libksba": {
       "evra": "1.3.5-13.fc33.x86_64"
@@ -631,7 +631,7 @@
       "evra": "2.2.1-1.fc33.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-8.fc33.x86_64"
+      "evra": "9-9.fc33.x86_64"
     },
     "libmaxminddb": {
       "evra": "1.5.2-1.fc33.x86_64"
@@ -805,7 +805,7 @@
       "evra": "2:4.13.7-0.fc33.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.18-1.fc33.x86_64"
+      "evra": "4.4.19-1.fc33.x86_64"
     },
     "libxml2": {
       "evra": "2.9.10-8.fc33.x86_64"
@@ -841,7 +841,7 @@
       "evra": "5.4.2-1.fc33.x86_64"
     },
     "luksmeta": {
-      "evra": "9-8.fc33.x86_64"
+      "evra": "9-9.fc33.x86_64"
     },
     "lvm2": {
       "evra": "2.03.10-1.fc33.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "4.16.1.3-1.fc33.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.3-2.fc33.x86_64"
+      "evra": "2021.4-1.fc33.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.3-2.fc33.x86_64"
+      "evra": "2021.4-1.fc33.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-12T13:15:09Z",
+    "generated": "2021-04-14T20:38:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-09T13:35:48Z"
+        "generated": "2021-04-13T21:55:21Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-11T14:37:20Z"
+        "generated": "2021-04-14T14:34:43Z"
       }
     }
   }

From 17a9691e2b9f08b5565b4cc8c7554070bff8063b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Apr 2021 14:19:52 -0400
Subject: [PATCH 0186/2157] overrides: drop kernel 5.10.19 freeze

The linked issue is resolved in kernel 5.11.
---
 manifest-lock.overrides.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fa0fc5b5bf..a069a111c9 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,14 +14,6 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evr: 246.7-1.fc33
-  # There's a regression in 5.10.20+ which breaks rootless podman
-  # https://github.com/containers/buildah/issues/3071
-  kernel:
-    evr: 5.10.19-200.fc33
-  kernel-core:
-    evr: 5.10.19-200.fc33
-  kernel-modules:
-    evr: 5.10.19-200.fc33
   # Fast-track new podman release to fix podman cp:
   # https://github.com/coreos/fedora-coreos-tracker/issues/771
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-e70b450680

From 8a640a6113c0716240550511cf83adf4e4964d07 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Apr 2021 15:01:36 -0400
Subject: [PATCH 0187/2157] overrides: drop graduated podman override

This actually got replaced in the updated with podman-3.1.0-3, but that
has now made it to stable so we can just drop the override altogether.
---
 manifest-lock.overrides.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index a069a111c9..ff0c7c7b92 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,13 +14,6 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evr: 246.7-1.fc33
-  # Fast-track new podman release to fix podman cp:
-  # https://github.com/coreos/fedora-coreos-tracker/issues/771
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-e70b450680
-  podman:
-    evr: 2:3.1.0-2.fc33
-  podman-plugins:
-    evr: 2:3.1.0-2.fc33
   # Fast-track new coreos-installer release
   # https://bodhi.fedoraproject.org/updates/FEDORA-2021-c67cfeca62
   coreos-installer:

From 843255067e4a0f300c6380dd810c5aabd32edf12 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Apr 2021 14:03:00 -0400
Subject: [PATCH 0188/2157] overlay.d/35coreos-network: handle new
 nm-run.service in initramfs

In dracut 053+ dracut starting running NetworkManager from a systemd
unit if systemd was used to start the system [1]. Let's adapt for that
by ordering our units before `nm-run.service`. We'll also keep the
ordering on dracut-initqueue.service for now for backwards compatibility
and it's harmless to keep around.

[1] https://github.com/dracutdevs/dracut/commit/c17c5b7
---
 .../coreos-livepxe-rootfs.service             |  3 ++-
 .../coreos-copy-firstboot-network.service     | 22 +++++++++----------
 .../coreos-enable-network.service             |  3 ++-
 3 files changed, 15 insertions(+), 13 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
index 337b55bcd0..a09e67c469 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
@@ -7,7 +7,8 @@ ConditionKernelCommandLine=!coreos.liveiso
 
 After=basic.target
 # Network is enabled here
-After=dracut-initqueue.service
+After=nm-run.service
+After=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
 
 # If we fail, the boot will fail.  Be explicit about it.
 OnFailure=emergency.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 200032c4c5..3e6c385291 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -8,30 +8,30 @@
 #     - i.e. after /dev/disk/by-label/boot is available
 #     - and after the ignition-dracut GPT generator (see below)
 # - Need to run before networking is brought up.
-#     - This is done in nm-run.sh [1] that runs as part of dracut-initqueue [2]
-#     - i.e. Before=dracut-initqueue.service
+#     - This is done in nm-run.service [1]
+#     - i.e. Before=nm-run.service
 # - Need to make sure karg networking configuration isn't applied
 #     - There are two ways to do this.
-#         - One is to run *before* the nm-config.sh [3] that runs as part of
-#           dracut-cmdline [4] and `ln -sf /bin/true /usr/libexec/nm-initrd-generator`.
+#         - One is to run *before* the nm-config.sh [2] that runs as part of
+#           dracut-cmdline [3] and `ln -sf /bin/true /usr/libexec/nm-initrd-generator`.
 #             - i.e. Before=dracut-cmdline.service
-#         - Another is to run *after* nm-config.sh [3] in dracut-cmdline [4]
+#         - Another is to run *after* nm-config.sh [2] in dracut-cmdline [3]
 #           and just delete all the files created by nm-initrd-generator.
-#             - i.e. After=dracut-cmdline.service, but Before=dracut-initqueue.service
+#             - i.e. After=dracut-cmdline.service, but Before=nm-run.service
 #     - We'll go with the second option here because the need for the /boot
 #       device (mentioned above) means we can't start before dracut-cmdline.service
 #
-# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-run.sh
-# [2] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/module-setup.sh#L37
-# [3] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-config.sh
-# [4] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/module-setup.sh#L36
+# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-run.service
+# [2] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-config.sh
+# [3] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/module-setup.sh#L34
 #
 [Unit]
 Description=Copy CoreOS Firstboot Networking Config
 ConditionPathExists=/usr/lib/initrd-release
 DefaultDependencies=false
 Before=ignition-diskful.target
-Before=dracut-initqueue.service
+Before=nm-run.service
+Before=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
 After=dracut-cmdline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
index e7ba08d153..3dc96c4a3c 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
@@ -20,7 +20,8 @@ Before=ignition-fetch.service
 
 # See hack in coreos-enable-network, as well as coreos-copy-firstboot-network.service.
 After=dracut-cmdline.service
-Before=dracut-initqueue.service
+Before=nm-run.service
+Before=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
 
 [Service]
 Type=oneshot

From 2747e11aa0798a5b04e3230c2ba2f7014698391b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Apr 2021 16:44:42 -0400
Subject: [PATCH 0189/2157] overlay.d/35coreos-network: don't bring up NM if
 not needed

In dracut 053+ dracut starting running NetworkManager from a systemd
unit if systemd was used to start the system [1]. That systemd unit
will always get started if there is any NM configuration. Let's make
it only get started if we actually need the network. This is a
simplified version of the more complicated proposed fix upstream [2].

[1] https://github.com/dracutdevs/dracut/commit/c17c5b7
[2] https://github.com/dracutdevs/dracut/pull/1347

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/782
---
 .../50-nm-run-only-if-neednet.conf              |  7 +++++++
 .../modules.d/35coreos-network/module-setup.sh  |  4 ++++
 tests/kola/misc-ro                              | 17 +++++++++++++++++
 3 files changed, 28 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf
new file mode 100644
index 0000000000..c56c45d612
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf
@@ -0,0 +1,7 @@
+[Unit]
+# Workaround https://github.com/dracutdevs/dracut/pull/1347 until it lands.
+# Only run if network is needed. Right now we can detect this by seeing
+# if the /usr/lib/dracut/hooks/initqueue/finished/nm.sh file exists (written
+# out by nm_generate_connections() [1], which is called in the cmdline hook).
+# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-lib.sh#L16.
+ConditionPathExists=/usr/lib/dracut/hooks/initqueue/finished/nm.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
index 7c910b1b74..dd409b4a67 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
@@ -25,4 +25,8 @@ install() {
     inst_simple "$moddir/50-afterburn-network-kargs-default.conf" \
         "/usr/lib/systemd/system/afterburn-network-kargs.service.d/50-afterburn-network-kargs-default.conf"
 
+    # Workaround for https://github.com/dracutdevs/dracut/pull/1347 until it lands.
+    # Dropin to make NetworkManager systemd service only start if network is needed.
+    inst_simple "$moddir/50-nm-run-only-if-neednet.conf" \
+        "/usr/lib/systemd/system/nm-run.service.d/50-nm-run-only-if-neednet.conf"
 }
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index c79c88c2fb..39f0058a10 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -91,6 +91,23 @@ elif [[ $nm_ts -gt $switchroot_ts ]] && on_platform aws; then
 fi
 ok conditional initrd networking
 
+# In F34 network-manager in dracut started executing NM in
+# oneshot mode via a systemd unit. That needed some fixups.
+# https://github.com/dracutdevs/dracut/pull/1347
+# We're waiting on those changes to flow downstream.
+# When we get them we'll need to adjust some things so let's
+# complain when we detect they've come in.
+source /etc/os-release
+if [ "$VERSION_ID" -gt "33" ]; then
+    if [ ! -f /usr/lib/dracut/modules.d/35network-manager/nm-run.service ]; then
+        fatal "Did not find expected nm-run.service in dracut"
+    fi
+    if grep -q neednet /usr/lib/dracut/modules.d/35network-manager/nm-run.service; then
+        fatal "Upstream dracut fix landed. Please adjust the workaround."
+    fi
+fi
+ok dracut-networkmanager
+
 if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
     fatal missing LICENSE
 fi

From d2776ed618d7d72fc0b226b7f08e45d3182406e7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 15 Apr 2021 13:34:13 -0400
Subject: [PATCH 0190/2157] 35coreos-live/coreos-livepxe-rootfs: retry fetching
 rootfs forever

We don't know how long it will take for networking to come up, so let's
match Ignition's semantic of retrying to fetch remote resources forever.

`curl` doesn't natively have support for this, so wrap it in a `while`
loop. This also works around the fact that el8's `curl` doesn't support
`--retry-all-errors`.

This was previously added in #929.
---
 .../35coreos-live/coreos-livepxe-rootfs.sh    | 22 +++++++++++--------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index 0bc4e893bc..483587efa5 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -34,20 +34,24 @@ elif [[ -n "${rootfs_url}" ]]; then
     # First, reach out to the server to verify connectivity before
     # trying to download and pipe content through other programs.
     # Doing this allows us to retry all errors (including transient
-    # "no route to host" errors during startup), without using the
-    # --retry-all-errors, which is problematic (see curl man page)
-    # when piping the output.
-    curl_common_args="--silent --show-error --insecure --location --retry 5"
-    if ! curl --head --retry-all-errors $curl_common_args "${rootfs_url}" >/dev/null; then
+    # "no route to host" errors during startup). Note we can't use
+    # curl's --retry-all-errors here because it's not in el8's curl yet.
+    # We retry forever, matching Ignition's semantics.
+    curl_common_args="--silent --show-error --insecure --location"
+    while ! curl --head $curl_common_args "${rootfs_url}" >/dev/null; do
         echo "Couldn't establish connectivity with the server specified by coreos.live.rootfs_url=" >&2
-        echo "Check that the URL is correct and can be reached." >&2
-        exit 1
-    fi
+        echo "Retrying in 5s..." >&2
+        sleep 5
+    done
+
     # We don't need to verify TLS certificates because we're checking the
     # image hash.
     # bsdtar can read cpio archives and we already depend on it for
     # coreos-liveiso-persist-osmet.service, so use it instead of cpio.
-    if ! curl $curl_common_args "${rootfs_url}" | \
+    # We shouldn't need a --retry here since we've just successfully HEADed the
+    # file, but let's add one just to be safe (e.g. if the connection just went
+    # online and flickers or something).
+    if ! curl $curl_common_args --retry 5 "${rootfs_url}" | \
             rdcore stream-hash /etc/coreos-live-want-rootfs | \
             bsdtar -xf - -C / ; then
         echo "Couldn't fetch, verify, and unpack image specified by coreos.live.rootfs_url=" >&2

From 28856f30b4af04c4e862f11520aff453ddd795cc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Apr 2021 18:57:26 +0000
Subject: [PATCH 0191/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/210/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e11733d633..a1833a870d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -115,7 +115,7 @@
       "evra": "5.2-37.fc33.x86_64"
     },
     "conmon": {
-      "evra": "2:2.0.26-1.fc33.x86_64"
+      "evra": "2:2.0.27-2.fc33.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-1.fc33.noarch"
@@ -139,7 +139,7 @@
       "evra": "0.9.1-4.fc33.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-9.fc33.noarch"
+      "evra": "4:1-10.fc33.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.0-2.fc33.x86_64"
@@ -178,7 +178,7 @@
       "evra": "2.3.5-2.fc33.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-3.fc33.x86_64"
+      "evra": "1:2.3.3op2-4.fc33.x86_64"
     },
     "curl": {
       "evra": "7.71.1-9.fc33.x86_64"
@@ -310,7 +310,7 @@
       "evra": "0.8.6-1.fc33.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-2.fc33.x86_64"
+      "evra": "1.10.2-3.fc33.x86_64"
     },
     "fstrm": {
       "evra": "0.6.0-1.fc33.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.10.19-200.fc33.x86_64"
+      "evra": "5.11.14-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.10.19-200.fc33.x86_64"
+      "evra": "5.11.14-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.10.19-200.fc33.x86_64"
+      "evra": "5.11.14-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -727,7 +727,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.7-0.fc33.x86_64"
+      "evra": "2:4.13.7-1.fc33.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-1.fc33.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.0-10.fc33.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.7-0.fc33.x86_64"
+      "evra": "2:4.13.7-1.fc33.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.19-1.fc33.x86_64"
@@ -979,10 +979,10 @@
       "evra": "1.7.3-5.fc33.x86_64"
     },
     "podman": {
-      "evra": "2:3.1.0-2.fc33.x86_64"
+      "evra": "2:3.1.0-3.fc33.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.1.0-2.fc33.x86_64"
+      "evra": "2:3.1.0-3.fc33.x86_64"
     },
     "policycoreutils": {
       "evra": "3.1-4.fc33.x86_64"
@@ -1045,16 +1045,16 @@
       "evra": "2:1.0.0-375.dev.git12644e6.fc33.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.7-0.fc33.x86_64"
+      "evra": "2:4.13.7-1.fc33.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.7-0.fc33.noarch"
+      "evra": "2:4.13.7-1.fc33.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.7-0.fc33.x86_64"
+      "evra": "2:4.13.7-1.fc33.x86_64"
     },
     "samba-libs": {
-      "evra": "2:4.13.7-0.fc33.x86_64"
+      "evra": "2:4.13.7-1.fc33.x86_64"
     },
     "sed": {
       "evra": "4.8-5.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-14T20:38:37Z",
+    "generated": "2021-04-16T18:12:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-13T21:55:21Z"
+        "generated": "2021-04-16T17:35:19Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-14T14:34:43Z"
+        "generated": "2021-04-16T14:22:28Z"
       }
     }
   }

From 2fa5061f4b417fd347250819866b35d09d8e5007 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 19 Apr 2021 21:40:31 +0000
Subject: [PATCH 0192/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/214/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a1833a870d..9b8f39f513 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -313,7 +313,7 @@
       "evra": "1.10.2-3.fc33.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.0-1.fc33.x86_64"
+      "evra": "0.6.1-2.fc33.x86_64"
     },
     "fuse": {
       "evra": "2.9.9-10.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-16T18:12:14Z",
+    "generated": "2021-04-19T21:08:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-16T17:35:19Z"
+        "generated": "2021-04-18T21:45:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-16T14:22:28Z"
+        "generated": "2021-04-19T17:35:22Z"
       }
     }
   }

From 3969ff90249375c6974c5a81b27159eb1089d0df Mon Sep 17 00:00:00 2001
From: Andy McCrae <andy.mccrae@gmail.com>
Date: Thu, 22 Apr 2021 13:45:42 +0100
Subject: [PATCH 0193/2157] Move comments in systemd services to own line

Comments in systemd services at the end of lines cause unnecessary
warning messges:

Failed to add dependency on on, ignoring: Invalid argument
Failed to add dependency on dracut, ignoring: Invalid argument
Failed to add dependency on 053+, ignoring: Invalid argument

The services would still start so this is a cosmetic change only.
---
 .../modules.d/35coreos-live/coreos-livepxe-rootfs.service      | 3 ++-
 .../35coreos-network/coreos-copy-firstboot-network.service     | 3 ++-
 .../modules.d/35coreos-network/coreos-enable-network.service   | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
index a09e67c469..ed935ba162 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
@@ -8,7 +8,8 @@ ConditionKernelCommandLine=!coreos.liveiso
 After=basic.target
 # Network is enabled here
 After=nm-run.service
-After=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
+# compat: remove when everyone is on dracut 053+
+After=dracut-initqueue.service
 
 # If we fail, the boot will fail.  Be explicit about it.
 OnFailure=emergency.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 3e6c385291..0a78add956 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -31,7 +31,8 @@ ConditionPathExists=/usr/lib/initrd-release
 DefaultDependencies=false
 Before=ignition-diskful.target
 Before=nm-run.service
-Before=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
+# compat: remove when everyone is on dracut 053+
+Before=dracut-initqueue.service
 After=dracut-cmdline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
index 3dc96c4a3c..42273e5fa6 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
@@ -21,7 +21,8 @@ Before=ignition-fetch.service
 # See hack in coreos-enable-network, as well as coreos-copy-firstboot-network.service.
 After=dracut-cmdline.service
 Before=nm-run.service
-Before=dracut-initqueue.service # compat: remove when everyone is on dracut 053+
+# compat: remove when everyone is on dracut 053+
+Before=dracut-initqueue.service
 
 [Service]
 Type=oneshot

From f799123fb8741ea828d9ba6b737cb0261582dc15 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 22 Apr 2021 13:33:03 -0400
Subject: [PATCH 0194/2157] Revert "overlay.d/35coreos-network: don't bring up
 NM if not needed"

This reverts commit 2747e11aa0798a5b04e3230c2ba2f7014698391b.
Now that we have a dracut build in f34 with the fixes, we don't
need these workarounds any longer.
---
 .../50-nm-run-only-if-neednet.conf              |  7 -------
 .../modules.d/35coreos-network/module-setup.sh  |  4 ----
 tests/kola/misc-ro                              | 17 -----------------
 3 files changed, 28 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf
deleted file mode 100644
index c56c45d612..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-nm-run-only-if-neednet.conf
+++ /dev/null
@@ -1,7 +0,0 @@
-[Unit]
-# Workaround https://github.com/dracutdevs/dracut/pull/1347 until it lands.
-# Only run if network is needed. Right now we can detect this by seeing
-# if the /usr/lib/dracut/hooks/initqueue/finished/nm.sh file exists (written
-# out by nm_generate_connections() [1], which is called in the cmdline hook).
-# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-lib.sh#L16.
-ConditionPathExists=/usr/lib/dracut/hooks/initqueue/finished/nm.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
index dd409b4a67..7c910b1b74 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
@@ -25,8 +25,4 @@ install() {
     inst_simple "$moddir/50-afterburn-network-kargs-default.conf" \
         "/usr/lib/systemd/system/afterburn-network-kargs.service.d/50-afterburn-network-kargs-default.conf"
 
-    # Workaround for https://github.com/dracutdevs/dracut/pull/1347 until it lands.
-    # Dropin to make NetworkManager systemd service only start if network is needed.
-    inst_simple "$moddir/50-nm-run-only-if-neednet.conf" \
-        "/usr/lib/systemd/system/nm-run.service.d/50-nm-run-only-if-neednet.conf"
 }
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 39f0058a10..c79c88c2fb 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -91,23 +91,6 @@ elif [[ $nm_ts -gt $switchroot_ts ]] && on_platform aws; then
 fi
 ok conditional initrd networking
 
-# In F34 network-manager in dracut started executing NM in
-# oneshot mode via a systemd unit. That needed some fixups.
-# https://github.com/dracutdevs/dracut/pull/1347
-# We're waiting on those changes to flow downstream.
-# When we get them we'll need to adjust some things so let's
-# complain when we detect they've come in.
-source /etc/os-release
-if [ "$VERSION_ID" -gt "33" ]; then
-    if [ ! -f /usr/lib/dracut/modules.d/35network-manager/nm-run.service ]; then
-        fatal "Did not find expected nm-run.service in dracut"
-    fi
-    if grep -q neednet /usr/lib/dracut/modules.d/35network-manager/nm-run.service; then
-        fatal "Upstream dracut fix landed. Please adjust the workaround."
-    fi
-fi
-ok dracut-networkmanager
-
 if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
     fatal missing LICENSE
 fi

From 1fe0d1a41f35a42e4f99377ea38f34a9f26db890 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Apr 2021 02:49:11 +0000
Subject: [PATCH 0195/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/218/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9b8f39f513..3814d0c7ad 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.26.6-1.fc33.x86_64"
+      "evra": "1:1.26.8-1.fc33.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.26.6-1.fc33.x86_64"
+      "evra": "1:1.26.8-1.fc33.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.26.6-1.fc33.x86_64"
+      "evra": "1:1.26.8-1.fc33.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.26.6-1.fc33.x86_64"
+      "evra": "1:1.26.8-1.fc33.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.26.6-1.fc33.x86_64"
+      "evra": "1:1.26.8-1.fc33.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.2.52-1.fc33.noarch"
@@ -274,13 +274,13 @@
       "evra": "33-4.noarch"
     },
     "fedora-release-common": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "33-3.noarch"
+      "evra": "33-4.noarch"
     },
     "fedora-repos": {
       "evra": "33-4.noarch"
@@ -337,7 +337,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.8-1.fc33.x86_64"
+      "evra": "1.5.9-1.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.11.14-200.fc33.x86_64"
+      "evra": "5.11.15-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.14-200.fc33.x86_64"
+      "evra": "5.11.15-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.14-200.fc33.x86_64"
+      "evra": "5.11.15-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2735-1.fc33.x86_64"
+      "evra": "2:8.2.2787-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-19T21:08:32Z",
+    "generated": "2021-04-23T02:10:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-18T21:45:40Z"
+        "generated": "2021-04-21T12:15:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-19T17:35:22Z"
+        "generated": "2021-04-21T21:28:49Z"
       }
     }
   }

From e916080b9db657b8fd9b4ded1e97e31d58f88005 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Apr 2021 21:45:56 +0000
Subject: [PATCH 0196/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/220/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3814d0c7ad..40aa62c18b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -226,7 +226,7 @@
       "evra": "3.7-7.fc33.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.84-1.fc33.x86_64"
+      "evra": "2.85-1.fc33.x86_64"
     },
     "dosfstools": {
       "evra": "4.1-12.fc33.x86_64"
@@ -778,7 +778,7 @@
       "evra": "0.21-3.fc33.x86_64"
     },
     "libtirpc": {
-      "evra": "1.2.6-2.rc4.fc33.x86_64"
+      "evra": "1.2.6-3.rc4.fc33.x86_64"
     },
     "libunistring": {
       "evra": "0.9.10-9.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-23T02:10:19Z",
+    "generated": "2021-04-23T21:09:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-21T12:15:27Z"
+        "generated": "2021-04-23T02:57:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-21T21:28:49Z"
+        "generated": "2021-04-23T14:41:11Z"
       }
     }
   }

From 45b01675f9139aacf306830e5fda0a1c5d454b65 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 26 Apr 2021 11:07:30 -0400
Subject: [PATCH 0197/2157] manifests: require crun

Recently runc started providing `oci-runtime` as well, which caused
crun to fall out of the required dependencies. Let's explicitly
require crun as well so we get crun too.
---
 manifests/user-experience.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 1874669071..93d961dc83 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -28,6 +28,7 @@ packages:
   # Remote Access
   - openssh-clients openssh-server
   # Container tooling
+  - crun
   - podman
   - runc
   - skopeo

From 2dd8c8fe21ff48675515cd7e27f4ed911cc3c7bb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 26 Apr 2021 17:31:27 +0000
Subject: [PATCH 0198/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/230/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 40aa62c18b..8ed09eb380 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,16 +97,16 @@
       "evra": "6.11-2.fc33.x86_64"
     },
     "clevis": {
-      "evra": "16-2.fc33.x86_64"
+      "evra": "18-1.fc33.x86_64"
     },
     "clevis-dracut": {
-      "evra": "16-2.fc33.x86_64"
+      "evra": "18-1.fc33.x86_64"
     },
     "clevis-luks": {
-      "evra": "16-2.fc33.x86_64"
+      "evra": "18-1.fc33.x86_64"
     },
     "clevis-systemd": {
-      "evra": "16-2.fc33.x86_64"
+      "evra": "18-1.fc33.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-7.fc33.noarch"
@@ -139,7 +139,7 @@
       "evra": "0.9.1-4.fc33.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-10.fc33.noarch"
+      "evra": "4:1-15.fc33.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.0-2.fc33.x86_64"
@@ -166,7 +166,7 @@
       "evra": "3.15-1.fc33.x86_64"
     },
     "crun": {
-      "evra": "0.19-1.fc33.x86_64"
+      "evra": "0.19.1-2.fc33.x86_64"
     },
     "crypto-policies": {
       "evra": "20200918-1.git85dccc5.fc33.noarch"
@@ -337,7 +337,7 @@
       "evra": "3.9.4-1.fc33.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.9-1.fc33.x86_64"
+      "evra": "1.5.9-2.fc33.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-2.fc33.x86_64"
@@ -979,10 +979,10 @@
       "evra": "1.7.3-5.fc33.x86_64"
     },
     "podman": {
-      "evra": "2:3.1.0-3.fc33.x86_64"
+      "evra": "2:3.1.2-1.fc33.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.1.0-3.fc33.x86_64"
+      "evra": "2:3.1.2-1.fc33.x86_64"
     },
     "policycoreutils": {
       "evra": "3.1-4.fc33.x86_64"
@@ -1042,7 +1042,7 @@
       "evra": "3.2.3-3.fc33.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.0-375.dev.git12644e6.fc33.x86_64"
+      "evra": "2:1.0.0-377.rc93.fc33.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.13.7-1.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-23T21:09:24Z",
+    "generated": "2021-04-26T16:58:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-23T02:57:56Z"
+        "generated": "2021-04-24T21:45:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-23T14:41:11Z"
+        "generated": "2021-04-26T01:12:26Z"
       }
     }
   }

From e70a7606602bef07aaee268eeb75ac2e930691d7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 26 Apr 2021 14:16:30 -0400
Subject: [PATCH 0199/2157] overrides: drop graduated overrides

---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ff0c7c7b92..3b88693e34 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,21 +14,3 @@ packages:
     evra: 246.7-1.fc33.noarch
   systemd-udev:
     evr: 246.7-1.fc33
-  # Fast-track new coreos-installer release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-c67cfeca62
-  coreos-installer:
-    evr: 0.9.0-2.fc33
-  coreos-installer-bootinfra:
-    evr: 0.9.0-2.fc33
-  # Fast-track new afterburn release
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb2a204001
-  afterburn:
-    evr: 5.0.0-1.fc33
-  afterburn-dracut:
-    evr: 5.0.0-1.fc33
-  # Fast-track rpm-ostree for CVE-2021-3445
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-eadfc56b95
-  rpm-ostree:
-    evr: 2021.4-1.fc33
-  rpm-ostree-libs:
-    evr: 2021.4-1.fc33

From 33048b3778863968507d77d486f33f7c50fd2eca Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 26 Apr 2021 10:25:12 -0400
Subject: [PATCH 0200/2157] buildroot: Blow quay.io cache

So we get the updated ostree.

This is getting a bit tiring; we need to either find a way
to regularly expire the quay.io caching automatically, or
use something other than quay to do builds.
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index a3dc9a67be..cbbb314c6a 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -7,4 +7,4 @@
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:33
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210406
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210426

From 2763cb1662e304aef0aae6156aafe8b5ed43973a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 27 Apr 2021 11:46:52 -0400
Subject: [PATCH 0201/2157] manifests: explicitly add fwupd

This was pulled in transitively when we moved to f33, and we knowingly
allowed it because we wanted it. But in f34, it looks like it gets
dropped out again, so explicitly list it now to make sure we keep
shipping it.
---
 manifests/bootable-rpm-ostree.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 809cc77af6..862a01e58b 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -10,6 +10,8 @@ packages:
  - kernel kernel-core kernel-modules systemd
  # rpm-ostree
  - rpm-ostree nss-altfiles
+ # firmware updates
+ - fwupd
 
 # bootloader
 packages-aarch64:

From da55a2e50c2dddc96dfb9e3743ebfd374627133a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Apr 2021 21:34:21 +0000
Subject: [PATCH 0202/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/237/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8ed09eb380..3d24bcd6ab 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.3.0-2.fc33.noarch"
     },
     "kernel": {
-      "evra": "5.11.15-200.fc33.x86_64"
+      "evra": "5.11.16-200.fc33.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.15-200.fc33.x86_64"
+      "evra": "5.11.16-200.fc33.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.15-200.fc33.x86_64"
+      "evra": "5.11.16-200.fc33.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-4.fc33.x86_64"
@@ -580,13 +580,13 @@
       "evra": "1.4-3.fc33.x86_64"
     },
     "libgcc": {
-      "evra": "10.2.1-9.fc33.x86_64"
+      "evra": "10.3.1-1.fc33.x86_64"
     },
     "libgcrypt": {
       "evra": "1.8.7-1.fc33.x86_64"
     },
     "libgomp": {
-      "evra": "10.2.1-9.fc33.x86_64"
+      "evra": "10.3.1-1.fc33.x86_64"
     },
     "libgpg-error": {
       "evra": "1.41-1.fc33.x86_64"
@@ -757,7 +757,7 @@
       "evra": "2.4.2-2.fc33.x86_64"
     },
     "libstdc++": {
-      "evra": "10.2.1-9.fc33.x86_64"
+      "evra": "10.3.1-1.fc33.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.1-5.fc33.x86_64"
@@ -868,7 +868,7 @@
       "evra": "2:0.4.0-2.fc33.x86_64"
     },
     "mozjs78": {
-      "evra": "78.9.0-1.fc33.x86_64"
+      "evra": "78.10.0-1.fc33.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-5.fc33.x86_64"
@@ -934,10 +934,10 @@
       "evra": "1.77-6.fc33.x86_64"
     },
     "ostree": {
-      "evra": "2021.1-2.fc33.x86_64"
+      "evra": "2021.2-2.fc33.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.1-2.fc33.x86_64"
+      "evra": "2021.2-2.fc33.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-2.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-26T16:58:45Z",
+    "generated": "2021-04-28T20:55:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-24T21:45:29Z"
+        "generated": "2021-04-27T21:49:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-26T01:12:26Z"
+        "generated": "2021-04-28T02:39:37Z"
       }
     }
   }

From c8628a4fb684d32a35b115832d44ebedd219a821 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 29 Apr 2021 01:37:53 -0400
Subject: [PATCH 0203/2157] README: move rebase instructions to a tracker
 checklist

https://github.com/coreos/fedora-coreos-tracker/pull/806
---
 README.md | 61 +------------------------------------------------------
 1 file changed, 1 insertion(+), 60 deletions(-)

diff --git a/README.md b/README.md
index 675862fe18..8b98fcaadf 100644
--- a/README.md
+++ b/README.md
@@ -90,66 +90,7 @@ one easy way to do this is for now:
 
 ## Moving to a new major version (N) of Fedora
 
-Updating this repo:
-
-1. bump `releasever` in `manifest.yaml`
-2. update the repos in `manifest.yaml` if needed
-3. run `cosa fetch --update-lockfile`
-4. bump the base Fedora version in `ci/buildroot/Dockerfile`
-5. PR the result
-
-Update server changes:
-
-1. Set a new update barrier for N-2 on all streams.
-   In the barrier entry set a link to [the docs](https://docs.fedoraproject.org/en-US/fedora-coreos/update-barrier-signing-keys/).
-   See [discussion](https://github.com/coreos/fedora-coreos-tracker/issues/480#issuecomment-631724629).
-
-CoreOS Installer changes:
-
-1. Update CoreOS Installer to know about the signing key used for the
-   future new major version of Fedora (N+1). Note that the signing
-   keys for N+1 won't get created until releng branches and rawhide
-   becomes N+1.
-
-Release engineering changes:
-
-1. Verify that a few tags have been created. These should have been created
-   by releng scripts on branching: 
-
-- `f${releasever}-coreos-signing-pending`
-- `f${releasever}-coreos-continuous`
-
-2. The tag info for the coreos-pool tag has the new release (N) and
-   next release (N+1) signing keys (just to stay ahead of the curve)
-   and removes the old release (N-2) signing key. The following commands
-   view the current settings and then update the list to 32/33/34 keys.
-   You'll most likely have to get someone from releng to run the second
-   command (`edit-tag`).
-
-- `koji taginfo coreos-pool`
-- `koji edit-tag coreos-pool -x tag2distrepo.keys="12c944d0 9570ff31 45719a39"`
-
-
-3. `koji untag` N-2 packages from the pool (at some point we'll have GC
-   in place to do this for us, but for now we must remember to do this
-   manually or otherwise distRepo will fail once the signed packages are
-   GC'ed). For example the following snippet finds all RPMs signed by the
-   Fedora 31 key and untags them.
-
-```
-f31key=3c3359c4
-key=$f31key
-untaglist=''
-for build in $(koji list-tagged --quiet coreos-pool | cut -f1 -d' '); do
-    if koji buildinfo $build | grep $key 1>/dev/null; then
-        untaglist+="${build} "
-        echo "Adding $build to untag list"
-    fi
-done
-
-# After verifying the list looks good:
-#   - koji untag-build coreos-pool $untaglist
-```
+[Create a rebase checklist](https://github.com/coreos/fedora-coreos-tracker/issues/new?labels=kind/enhancement&template=rebase.md&title=Rebase+onto+Fedora+N) in fedora-coreos-tracker.
 
 ## CoreOS CI
 

From af44cb3673a15472ff71673e26213c14530a4bb0 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 29 Apr 2021 09:53:08 -0400
Subject: [PATCH 0204/2157] Add temporary workaround for `agetty --reload`
 SELinux denial

In f34+, we're hitting an SELinux denial from c-l-h-m trying to do
`agetty --reload` and causing `/run/agetty.reload` to be created with
the wrong label. This then prevents agetty from adding an inotify watch
to know when to reload the prompt to display new information. For more
details, see:

https://github.com/coreos/fedora-coreos-config/pull/859#issuecomment-783713383

This is tracked at https://bugzilla.redhat.com/show_bug.cgi?id=1932053.

With this workaround, we create the file up front in the initrd so that
it gets relabeled by systemd on switchroot and thus will already exists
with the right label well before c-l-h-m or anything else tries to
`agetty --reload`.
---
 .../coreos-touch-run-agetty.service           | 12 +++++++++++
 .../module-setup.sh                           | 21 +++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
new file mode 100644
index 0000000000..743670ea0b
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
@@ -0,0 +1,12 @@
+# Temporary hack to work around agetty SELinux denials.
+# https://github.com/coreos/fedora-coreos-config/pull/859#issuecomment-783713383
+# https://bugzilla.redhat.com/show_bug.cgi?id=1932053
+[Unit]
+Description=CoreOS: Touch /run/agetty.reload
+Documentation=https://bugzilla.redhat.com/show_bug.cgi?id=1932053
+DefaultDependencies=false
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/touch /run/agetty.reload
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh
new file mode 100755
index 0000000000..a796f5b593
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+# ex: ts=8 sw=4 sts=4 et filetype=sh
+
+# Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1932053.
+
+install_unit() {
+    local unit=$1; shift
+    inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires initrd.target "$unit" || exit 1
+}
+
+install() {
+    inst_multiple \
+        touch
+
+    # TODO f34: check if we can drop this whole module
+    install_unit coreos-touch-run-agetty.service
+}

From b70d19c2d674403c4b970f6df657bc0abc866f0a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Apr 2021 21:36:51 +0000
Subject: [PATCH 0205/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/240/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3d24bcd6ab..d4b3573206 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -871,7 +871,7 @@
       "evra": "78.10.0-1.fc33.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-5.fc33.x86_64"
+      "evra": "4.1.0-6.fc33.x86_64"
     },
     "ncurses": {
       "evra": "6.2-3.20200222.fc33.x86_64"
@@ -1177,7 +1177,7 @@
       "evra": "2.36.1-1.fc33.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2787-1.fc33.x86_64"
+      "evra": "2:8.2.2811-1.fc33.x86_64"
     },
     "which": {
       "evra": "2.21-20.fc33.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-28T20:55:01Z",
+    "generated": "2021-04-29T20:55:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2020-10-19T23:27:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-27T21:49:40Z"
+        "generated": "2021-04-29T04:39:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-28T02:39:37Z"
+        "generated": "2021-04-29T18:47:17Z"
       }
     }
   }

From 15c266af05c25049eb1abb958b6ab161be5f94c3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 29 Apr 2021 17:15:10 -0400
Subject: [PATCH 0206/2157] Move to Fedora 34!

---
 manifest-lock.overrides.yaml |  21 +-
 manifest-lock.x86_64.json    | 829 +++++++++++++++++------------------
 manifest.yaml                |   2 +-
 3 files changed, 414 insertions(+), 438 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3b88693e34..b60cbc3ecc 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,16 +1,7 @@
 packages:
-  # Keep this until we move to Fedora 34.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649
-  # https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
-  systemd:
-    evr: 246.7-1.fc33
-  systemd-container:
-    evr: 246.7-1.fc33
-  systemd-libs:
-    evr: 246.7-1.fc33
-  systemd-pam:
-    evr: 246.7-1.fc33
-  systemd-rpm-macros:
-    evra: 246.7-1.fc33.noarch
-  systemd-udev:
-    evr: 246.7-1.fc33
+  #############################################
+  # updates to prevent downgrades from f33->f34
+  #############################################
+  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-39df52b880
+  fstrm:
+    evr: 0.6.1-2.fc34
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d4b3573206..eae162edc4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1226 +1,1211 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.26.8-1.fc33.x86_64"
+      "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.26.8-1.fc33.x86_64"
+      "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.26.8-1.fc33.x86_64"
+      "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.26.8-1.fc33.x86_64"
+      "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.26.8-1.fc33.x86_64"
+      "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.2.52-1.fc33.noarch"
+      "evra": "2.2.52-5.fc34.noarch"
     },
     "acl": {
-      "evra": "2.2.53-9.fc33.x86_64"
+      "evra": "2.3.1-1.fc34.x86_64"
     },
     "adcli": {
-      "evra": "0.9.0-4.fc33.x86_64"
+      "evra": "0.9.1-3.fc34.x86_64"
     },
     "afterburn": {
-      "evra": "5.0.0-1.fc33.x86_64"
+      "evra": "5.0.0-1.fc34.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.0.0-1.fc33.x86_64"
+      "evra": "5.0.0-1.fc34.x86_64"
     },
     "alternatives": {
-      "evra": "1.14-3.fc33.x86_64"
+      "evra": "1.15-2.fc34.x86_64"
     },
     "attr": {
-      "evra": "2.4.48-10.fc33.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.1-2.fc33.x86_64"
+      "evra": "3.0.1-2.fc34.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-7.fc33.x86_64"
+      "evra": "0.8-9.fc34.x86_64"
     },
     "basesystem": {
-      "evra": "11-10.fc33.noarch"
+      "evra": "11-11.fc34.noarch"
     },
     "bash": {
-      "evra": "5.0.17-2.fc33.x86_64"
+      "evra": "5.1.0-2.fc34.x86_64"
     },
     "bash-completion": {
-      "evra": "1:2.8-9.fc33.noarch"
+      "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.11.28-1.fc33.x86_64"
+      "evra": "32:9.16.11-5.fc34.x86_64"
     },
     "bind-libs-lite": {
-      "evra": "32:9.11.28-1.fc33.x86_64"
+      "evra": "32:9.16.11-5.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.11.28-1.fc33.noarch"
+      "evra": "32:9.16.11-5.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.11.28-1.fc33.x86_64"
+      "evra": "32:9.16.11-5.fc34.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.4-2.fc33.x86_64"
+      "evra": "0.2.5-3.fc34.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.1-1.fc33.x86_64"
+      "evra": "3.5.1-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.10-1.fc33.x86_64"
+      "evra": "5.11.1-1.fc34.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.4.1-2.fc33.x86_64"
+      "evra": "0.4.1-3.fc34.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-4.fc33.x86_64"
+      "evra": "1.0.8-6.fc34.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-4.fc33.x86_64"
+      "evra": "1.0.8-6.fc34.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.0-1.fc33.x86_64"
+      "evra": "1.17.1-2.fc34.x86_64"
     },
     "ca-certificates": {
-      "evra": "2020.2.41-4.fc33.noarch"
+      "evra": "2020.2.41-7.fc34.noarch"
     },
     "catatonit": {
-      "evra": "0.1.5-3.fc33.x86_64"
+      "evra": "0.1.5-4.fc34.x86_64"
     },
     "chrony": {
-      "evra": "4.0-1.fc33.x86_64"
+      "evra": "4.0-3.fc34.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.11-2.fc33.x86_64"
+      "evra": "6.11-3.fc34.x86_64"
     },
     "clevis": {
-      "evra": "18-1.fc33.x86_64"
+      "evra": "18-1.fc34.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-1.fc33.x86_64"
+      "evra": "18-1.fc34.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-1.fc33.x86_64"
+      "evra": "18-1.fc34.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-1.fc33.x86_64"
+      "evra": "18-1.fc34.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-7.fc33.noarch"
+      "evra": "0.31-8.fc34.noarch"
     },
     "compat-readline5": {
-      "evra": "5.2-37.fc33.x86_64"
+      "evra": "5.2-39.fc34.x86_64"
     },
     "conmon": {
-      "evra": "2:2.0.27-2.fc33.x86_64"
+      "evra": "2:2.0.27-2.fc34.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-1.fc33.noarch"
+      "evra": "0.21.2-1.fc34.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-1.fc33.noarch"
+      "evra": "0.21.2-1.fc34.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-1.fc33.noarch"
+      "evra": "0.21.2-1.fc34.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-1.fc33.noarch"
+      "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.160.0-1.fc33.noarch"
+      "evra": "2:2.160.0-2.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.4.4-1.fc33.x86_64"
+      "evra": "1.5.0~rc.1-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "0.9.1-4.fc33.x86_64"
+      "evra": "0.9.1-4.fc34.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-15.fc33.noarch"
+      "evra": "4:1-15.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.9.0-2.fc33.x86_64"
+      "evra": "0.9.0-2.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.9.0-2.fc33.x86_64"
+      "evra": "0.9.0-2.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-18.fc33.x86_64"
+      "evra": "8.32-23.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-18.fc33.x86_64"
+      "evra": "8.32-23.fc34.x86_64"
     },
     "cpio": {
-      "evra": "2.13-8.fc33.x86_64"
+      "evra": "2.13-10.fc34.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.6-24.fc33.x86_64"
+      "evra": "2.9.6-25.fc34.x86_64"
     },
     "criu": {
-      "evra": "3.15-1.fc33.x86_64"
+      "evra": "3.15-3.fc34.x86_64"
     },
     "criu-libs": {
-      "evra": "3.15-1.fc33.x86_64"
+      "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.19.1-2.fc33.x86_64"
+      "evra": "0.19.1-2.fc34.x86_64"
     },
     "crypto-policies": {
-      "evra": "20200918-1.git85dccc5.fc33.noarch"
+      "evra": "20210213-1.git5c710c0.fc34.noarch"
     },
     "cryptsetup": {
-      "evra": "2.3.5-2.fc33.x86_64"
+      "evra": "2.3.5-2.fc34.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.3.5-2.fc33.x86_64"
+      "evra": "2.3.5-2.fc34.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-4.fc33.x86_64"
+      "evra": "1:2.3.3op2-4.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.71.1-9.fc33.x86_64"
+      "evra": "7.76.1-1.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-6.fc33.x86_64"
+      "evra": "2.1.27-8.fc34.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-6.fc33.x86_64"
+      "evra": "2.1.27-8.fc34.x86_64"
     },
     "dbus": {
-      "evra": "1:1.12.20-2.fc33.x86_64"
+      "evra": "1:1.12.20-3.fc34.x86_64"
     },
     "dbus-broker": {
-      "evra": "28-3.fc33.x86_64"
+      "evra": "28-3.fc34.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.12.20-2.fc33.noarch"
+      "evra": "1:1.12.20-3.fc34.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.20-2.fc33.x86_64"
+      "evra": "1:1.12.20-3.fc34.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.173-1.fc33.x86_64"
+      "evra": "1.02.175-1.fc34.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.173-1.fc33.x86_64"
+      "evra": "1.02.175-1.fc34.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.173-1.fc33.x86_64"
+      "evra": "1.02.175-1.fc34.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.173-1.fc33.x86_64"
+      "evra": "1.02.175-1.fc34.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.4-7.fc33.x86_64"
+      "evra": "0.8.5-4.fc34.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.4-7.fc33.x86_64"
+      "evra": "0.8.5-4.fc34.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.8.5-4.fc33.x86_64"
+      "evra": "0.9.0-3.fc34.x86_64"
     },
     "diffutils": {
-      "evra": "3.7-7.fc33.x86_64"
+      "evra": "3.7-8.fc34.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.85-1.fc33.x86_64"
+      "evra": "2.85-1.fc34.x86_64"
     },
     "dosfstools": {
-      "evra": "4.1-12.fc33.x86_64"
+      "evra": "4.2-1.fc34.x86_64"
     },
     "dracut": {
-      "evra": "050-64.git20200529.fc33.x86_64"
+      "evra": "053-5.fc34.x86_64"
     },
     "dracut-network": {
-      "evra": "050-64.git20200529.fc33.x86_64"
+      "evra": "053-5.fc34.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.45.6-4.fc33.x86_64"
+      "evra": "1.45.6-5.fc34.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.45.6-4.fc33.x86_64"
+      "evra": "1.45.6-5.fc34.x86_64"
     },
     "efi-filesystem": {
-      "evra": "4-5.fc33.noarch"
+      "evra": "5-2.fc34.noarch"
     },
     "efibootmgr": {
-      "evra": "16-9.fc33.x86_64"
+      "evra": "16-10.fc34.x86_64"
     },
     "efivar-libs": {
-      "evra": "37-14.fc33.x86_64"
+      "evra": "37-15.fc34.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.183-1.fc33.noarch"
+      "evra": "0.183-1.fc34.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.183-1.fc33.x86_64"
+      "evra": "0.183-1.fc34.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.183-1.fc33.x86_64"
+      "evra": "0.183-1.fc34.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.10-1.fc33.x86_64"
+      "evra": "2:5.10-2.fc34.x86_64"
     },
     "expat": {
-      "evra": "2.2.8-3.fc33.x86_64"
+      "evra": "2.2.10-2.fc34.x86_64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-7.fc33.x86_64"
+      "evra": "0.0.4-9.fc34.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-repos": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "33-4.noarch"
+      "evra": "34-1.noarch"
     },
     "file": {
-      "evra": "5.39-3.fc33.x86_64"
+      "evra": "5.39-5.fc34.x86_64"
     },
     "file-libs": {
-      "evra": "5.39-3.fc33.x86_64"
+      "evra": "5.39-5.fc34.x86_64"
     },
     "filesystem": {
-      "evra": "3.14-3.fc33.x86_64"
+      "evra": "3.14-5.fc34.x86_64"
     },
     "findutils": {
-      "evra": "1:4.7.0-7.fc33.x86_64"
+      "evra": "1:4.8.0-2.fc34.x86_64"
     },
     "firewalld-filesystem": {
-      "evra": "0.8.6-1.fc33.noarch"
+      "evra": "0.9.3-2.fc34.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-3.fc33.x86_64"
+      "evra": "1.10.2-3.fc34.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-2.fc33.x86_64"
+      "evra": "0.6.1-2.fc34.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-10.fc33.x86_64"
+      "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-common": {
-      "evra": "3.9.4-1.fc33.x86_64"
+      "evra": "3.10.2-1.fc34.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-10.fc33.x86_64"
+      "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.5.0-1.fc33.x86_64"
+      "evra": "1.5.0-1.fc34.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.1-1.fc33.x86_64"
+      "evra": "3.7.1-2.fc34.x86_64"
     },
     "fuse3": {
-      "evra": "3.9.4-1.fc33.x86_64"
+      "evra": "3.10.2-1.fc34.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.9.4-1.fc33.x86_64"
+      "evra": "3.10.2-1.fc34.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.9-2.fc33.x86_64"
+      "evra": "1.5.9-2.fc34.x86_64"
     },
     "gawk": {
-      "evra": "5.1.0-2.fc33.x86_64"
+      "evra": "5.1.0-3.fc34.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.7-1.fc33.x86_64"
+      "evra": "1.0.7-1.fc34.x86_64"
     },
     "gettext": {
-      "evra": "0.21-3.fc33.x86_64"
+      "evra": "0.21-4.fc34.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21-3.fc33.x86_64"
+      "evra": "0.21-4.fc34.x86_64"
     },
     "git-core": {
-      "evra": "2.30.2-1.fc33.x86_64"
+      "evra": "2.31.1-1.fc34.x86_64"
     },
     "glib2": {
-      "evra": "2.66.8-1.fc33.x86_64"
+      "evra": "2.68.1-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.32-4.fc33.x86_64"
-    },
-    "glibc-all-langpacks": {
-      "evra": "2.32-4.fc33.x86_64"
+      "evra": "2.33-5.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.32-4.fc33.x86_64"
+      "evra": "2.33-5.fc34.x86_64"
+    },
+    "glibc-minimal-langpack": {
+      "evra": "2.33-5.fc34.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.0-5.fc33.x86_64"
+      "evra": "1:6.2.0-6.fc34.x86_64"
     },
     "gnupg2": {
-      "evra": "2.2.25-2.fc33.x86_64"
+      "evra": "2.2.27-4.fc34.x86_64"
     },
     "gnutls": {
-      "evra": "3.6.15-1.fc33.x86_64"
+      "evra": "3.7.1-2.fc34.x86_64"
     },
     "gpgme": {
-      "evra": "1.14.0-2.fc33.x86_64"
+      "evra": "1.15.1-2.fc34.x86_64"
     },
     "grep": {
-      "evra": "3.4-5.fc33.x86_64"
+      "evra": "3.6-2.fc34.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06~rc1-2.fc33.noarch"
+      "evra": "1:2.06~rc1-4.fc34.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06~rc1-2.fc33.x86_64"
+      "evra": "1:2.06~rc1-4.fc34.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06~rc1-2.fc33.x86_64"
+      "evra": "1:2.06~rc1-4.fc34.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06~rc1-2.fc33.noarch"
+      "evra": "1:2.06~rc1-4.fc34.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06~rc1-2.fc33.x86_64"
+      "evra": "1:2.06~rc1-4.fc34.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06~rc1-2.fc33.x86_64"
+      "evra": "1:2.06~rc1-4.fc34.x86_64"
     },
     "gzip": {
-      "evra": "1.10-3.fc33.x86_64"
+      "evra": "1.10-4.fc34.x86_64"
     },
     "hostname": {
-      "evra": "3.23-3.fc33.x86_64"
-    },
-    "hwdata": {
-      "evra": "0.346-1.fc33.noarch"
+      "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.9.0-4.fc33.x86_64"
+      "evra": "2.9.0-4.fc34.x86_64"
+    },
+    "inih": {
+      "evra": "49-3.fc34.x86_64"
     },
     "iproute": {
-      "evra": "5.9.0-1.fc33.x86_64"
+      "evra": "5.10.0-2.fc34.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.9.0-1.fc33.x86_64"
+      "evra": "5.10.0-2.fc34.x86_64"
     },
     "iptables": {
-      "evra": "1.8.5-6.fc33.x86_64"
+      "evra": "1.8.7-3.fc34.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.5-6.fc33.x86_64"
+      "evra": "1.8.7-3.fc34.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.5-6.fc33.x86_64"
+      "evra": "1.8.7-3.fc34.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.5-6.fc33.x86_64"
+      "evra": "1.8.7-6.fc34.x86_64"
     },
     "iputils": {
-      "evra": "20200821-1.fc33.x86_64"
+      "evra": "20210202-2.fc34.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-4.fc33.x86_64"
+      "evra": "2:1.7.0-5.fc34.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.1-0.gitac87641.fc33.2.x86_64"
+      "evra": "6.2.1.2-5.gita8fcb37.fc34.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.1-0.gitac87641.fc33.2.x86_64"
+      "evra": "6.2.1.2-5.gita8fcb37.fc34.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.97-11.fc33.x86_64"
+      "evra": "0.100-1.fc34.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-1.fc33.x86_64"
+      "evra": "2.13.1-2.fc34.x86_64"
     },
     "jose": {
-      "evra": "10-8.fc33.x86_64"
+      "evra": "10-9.fc34.x86_64"
     },
     "jq": {
-      "evra": "1.6-5.fc33.x86_64"
+      "evra": "1.6-7.fc34.x86_64"
     },
     "json-c": {
-      "evra": "0.14-7.fc33.x86_64"
+      "evra": "0.14-8.fc34.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.2-1.fc33.x86_64"
+      "evra": "1.6.2-1.fc34.x86_64"
     },
     "kbd": {
-      "evra": "2.3.0-2.fc33.x86_64"
-    },
-    "kbd-legacy": {
-      "evra": "2.3.0-2.fc33.noarch"
+      "evra": "2.4.0-2.fc34.x86_64"
     },
     "kbd-misc": {
-      "evra": "2.3.0-2.fc33.noarch"
+      "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.16-200.fc33.x86_64"
+      "evra": "5.11.16-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.16-200.fc33.x86_64"
+      "evra": "5.11.16-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.16-200.fc33.x86_64"
+      "evra": "5.11.16-300.fc34.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.21-4.fc33.x86_64"
+      "evra": "2.0.21-5.fc34.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-1.fc33.x86_64"
+      "evra": "1.6.1-2.fc34.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-1.fc33.x86_64"
+      "evra": "1.6.1-2.fc34.x86_64"
     },
     "kmod": {
-      "evra": "27-3.fc33.x86_64"
+      "evra": "28-2.fc34.x86_64"
     },
     "kmod-libs": {
-      "evra": "27-3.fc33.x86_64"
+      "evra": "28-2.fc34.x86_64"
     },
     "kpartx": {
-      "evra": "0.8.4-7.fc33.x86_64"
+      "evra": "0.8.5-4.fc34.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.18.2-29.fc33.x86_64"
+      "evra": "1.19.1-3.fc34.x86_64"
     },
     "less": {
-      "evra": "551-4.fc33.x86_64"
+      "evra": "575-2.fc34.x86_64"
     },
     "libacl": {
-      "evra": "2.2.53-9.fc33.x86_64"
+      "evra": "2.3.1-1.fc34.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-10.fc33.x86_64"
+      "evra": "0.3.111-11.fc34.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.1-1.fc33.x86_64"
+      "evra": "3.5.1-2.fc34.x86_64"
     },
     "libargon2": {
-      "evra": "20171227-5.fc33.x86_64"
+      "evra": "20171227-6.fc34.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.3-4.fc33.x86_64"
+      "evra": "2.5.5-1.fc34.x86_64"
     },
     "libattr": {
-      "evra": "2.4.48-10.fc33.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-46.fc33.x86_64"
+      "evra": "0.1.1-47.fc34.x86_64"
     },
     "libblkid": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
     },
     "libbrotli": {
-      "evra": "1.0.9-3.fc33.x86_64"
+      "evra": "1.0.9-4.fc34.x86_64"
     },
     "libbsd": {
-      "evra": "0.10.0-4.fc33.x86_64"
+      "evra": "0.10.0-7.fc34.x86_64"
     },
     "libcap": {
-      "evra": "2.48-2.fc33.x86_64"
+      "evra": "2.48-2.fc34.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8-1.fc33.x86_64"
+      "evra": "0.8.2-4.fc34.x86_64"
     },
     "libcbor": {
-      "evra": "0.5.0-7.fc33.x86_64"
+      "evra": "0.7.0-3.fc34.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-46.fc33.x86_64"
+      "evra": "0.7.0-47.fc34.x86_64"
     },
     "libcom_err": {
-      "evra": "1.45.6-4.fc33.x86_64"
+      "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.71.1-9.fc33.x86_64"
+      "evra": "7.76.1-1.fc34.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-20.fc33.x86_64"
+      "evra": "0.14-21.fc34.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-45.fc33.x86_64"
+      "evra": "5.3.28-46.fc34.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-46.fc33.x86_64"
+      "evra": "0.5.0-47.fc34.x86_64"
     },
     "libeconf": {
-      "evra": "0.3.8-4.fc33.x86_64"
+      "evra": "0.3.8-5.fc34.x86_64"
     },
     "libedit": {
-      "evra": "3.1-33.20191231cvs.fc33.x86_64"
+      "evra": "3.1-36.20210419cvs.fc34.x86_64"
     },
     "libevent": {
-      "evra": "2.1.8-10.fc33.x86_64"
+      "evra": "2.1.12-3.fc34.x86_64"
     },
     "libfdisk": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
     },
     "libffi": {
-      "evra": "3.1-26.fc33.x86_64"
+      "evra": "3.1-28.fc34.x86_64"
     },
     "libfido2": {
-      "evra": "1.4.0-3.fc33.x86_64"
+      "evra": "1.6.0-2.fc34.x86_64"
     },
     "libgcab1": {
-      "evra": "1.4-3.fc33.x86_64"
+      "evra": "1.4-4.fc34.x86_64"
     },
     "libgcc": {
-      "evra": "10.3.1-1.fc33.x86_64"
+      "evra": "11.0.1-0.3.fc34.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.8.7-1.fc33.x86_64"
+      "evra": "1.9.3-1.fc34.x86_64"
     },
     "libgomp": {
-      "evra": "10.3.1-1.fc33.x86_64"
+      "evra": "11.0.1-0.3.fc34.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.41-1.fc33.x86_64"
+      "evra": "1.42-1.fc34.x86_64"
     },
     "libgudev": {
-      "evra": "234-1.fc33.x86_64"
+      "evra": "236-1.fc34.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.6-1.fc33.x86_64"
+      "evra": "0.3.6-1.fc34.x86_64"
     },
     "libibverbs": {
-      "evra": "34.0-1.fc33.x86_64"
+      "evra": "34.0-3.fc34.x86_64"
     },
     "libicu": {
-      "evra": "67.1-4.fc33.x86_64"
+      "evra": "67.1-6.fc34.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.0-4.fc33.x86_64"
+      "evra": "2.3.0-5.fc34.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-46.fc33.x86_64"
+      "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.6-1.fc33.x86_64"
+      "evra": "0.1.6-1.fc34.x86_64"
     },
     "libjose": {
-      "evra": "10-8.fc33.x86_64"
+      "evra": "10-9.fc34.x86_64"
     },
     "libkcapi": {
-      "evra": "1.2.1-1.fc33.x86_64"
+      "evra": "1.2.1-1.fc34.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.2.1-1.fc33.x86_64"
+      "evra": "1.2.1-1.fc34.x86_64"
     },
     "libksba": {
-      "evra": "1.3.5-13.fc33.x86_64"
+      "evra": "1.5.0-2.fc34.x86_64"
     },
     "libldb": {
-      "evra": "2.2.1-1.fc33.x86_64"
+      "evra": "2.3.0-1.fc34.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-9.fc33.x86_64"
+      "evra": "9-10.fc34.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.5.2-1.fc33.x86_64"
+      "evra": "1.5.2-1.fc34.x86_64"
     },
     "libmetalink": {
-      "evra": "0.1.3-13.fc33.x86_64"
+      "evra": "0.1.3-14.fc34.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.4-12.fc33.x86_64"
+      "evra": "1.0.4-13.fc34.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.12.0-1.fc33.x86_64"
+      "evra": "2.12.0-2.fc34.x86_64"
     },
     "libmount": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
     },
     "libndp": {
-      "evra": "1.7-6.fc33.x86_64"
+      "evra": "1.7-7.fc34.x86_64"
     },
     "libnet": {
-      "evra": "1.2-1.fc33.x86_64"
+      "evra": "1.2-2.fc34.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.7-5.fc33.x86_64"
+      "evra": "1.0.8-2.fc34.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-18.fc33.x86_64"
+      "evra": "1.0.1-19.fc34.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.3-1.fc33.x86_64"
+      "evra": "1:2.5.3-3.rc2.fc34.x86_64"
     },
     "libnftnl": {
-      "evra": "1.1.7-3.fc33.x86_64"
+      "evra": "1.1.9-2.fc34.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.43.0-1.fc33.x86_64"
+      "evra": "1.43.0-2.fc34.x86_64"
     },
     "libnl3": {
-      "evra": "3.5.0-5.fc33.x86_64"
+      "evra": "3.5.0-6.fc34.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-5.fc33.x86_64"
+      "evra": "3.5.0-6.fc34.x86_64"
     },
     "libnsl2": {
-      "evra": "1.2.0-8.20180605git4a062cf.fc33.x86_64"
+      "evra": "1.3.0-2.fc34.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-46.fc33.x86_64"
+      "evra": "0.2.1-47.fc34.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.0-1.fc33.x86_64"
+      "evra": "14:1.10.0-1.fc34.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.7.3-5.fc33.x86_64"
+      "evra": "1.7.3-6.fc34.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.1-2.fc33.x86_64"
+      "evra": "0.21.1-3.fc34.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-2.fc33.x86_64"
+      "evra": "1.4.4-2.fc34.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-46.fc33.x86_64"
+      "evra": "0.1.5-47.fc34.x86_64"
     },
     "librepo": {
-      "evra": "1.13.0-1.fc33.x86_64"
+      "evra": "1.13.0-1.fc34.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.14.0-15.fc33.noarch"
+      "evra": "2.14.0-17.fc34.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.0-3.fc33.x86_64"
+      "evra": "2.5.0-4.fc34.x86_64"
     },
     "libselinux": {
-      "evra": "3.1-2.fc33.x86_64"
+      "evra": "3.2-1.fc34.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.1-2.fc33.x86_64"
+      "evra": "3.2-1.fc34.x86_64"
     },
     "libsemanage": {
-      "evra": "3.1-2.fc33.x86_64"
+      "evra": "3.2-1.fc34.x86_64"
     },
     "libsepol": {
-      "evra": "3.1-3.fc33.x86_64"
+      "evra": "3.2-1.fc34.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.11-11.fc33.x86_64"
+      "evra": "2.13-2.fc34.x86_64"
     },
     "libslirp": {
-      "evra": "4.3.1-3.fc33.x86_64"
+      "evra": "4.4.0-2.fc34.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.13.7-1.fc33.x86_64"
+      "evra": "2:4.14.3-0.fc34.x86_64"
     },
     "libsmbios": {
-      "evra": "2.4.3-1.fc33.x86_64"
+      "evra": "2.4.3-2.fc34.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.17-1.fc33.x86_64"
+      "evra": "0.7.17-3.fc34.x86_64"
     },
     "libss": {
-      "evra": "1.45.6-4.fc33.x86_64"
+      "evra": "1.45.6-5.fc34.x86_64"
     },
     "libssh": {
-      "evra": "0.9.5-1.fc33.x86_64"
+      "evra": "0.9.5-2.fc34.x86_64"
     },
     "libssh-config": {
-      "evra": "0.9.5-1.fc33.noarch"
+      "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "libstdc++": {
-      "evra": "10.3.1-1.fc33.x86_64"
+      "evra": "11.0.1-0.3.fc34.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.1-5.fc33.x86_64"
+      "evra": "2.3.2-2.fc34.x86_64"
     },
     "libtasn1": {
-      "evra": "4.16.0-3.fc33.x86_64"
+      "evra": "4.16.0-4.fc34.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.3-5.fc33.x86_64"
+      "evra": "1.4.3-6.fc34.x86_64"
     },
     "libteam": {
-      "evra": "1.31-2.fc33.x86_64"
+      "evra": "1.31-3.fc34.x86_64"
     },
     "libtevent": {
-      "evra": "0.10.2-5.fc33.x86_64"
+      "evra": "0.10.2-7.fc34.x86_64"
     },
     "libtextstyle": {
-      "evra": "0.21-3.fc33.x86_64"
+      "evra": "0.21-4.fc34.x86_64"
     },
     "libtirpc": {
-      "evra": "1.2.6-3.rc4.fc33.x86_64"
+      "evra": "1.3.1-1.rc2.fc34.x86_64"
     },
     "libunistring": {
-      "evra": "0.9.10-9.fc33.x86_64"
+      "evra": "0.9.10-10.fc34.x86_64"
     },
     "libusbx": {
-      "evra": "1.0.24-2.fc33.x86_64"
+      "evra": "1.0.24-2.fc34.x86_64"
     },
     "libuser": {
-      "evra": "0.62-26.fc33.x86_64"
+      "evra": "0.63-1.fc34.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-2.fc33.x86_64"
+      "evra": "1.2.1-4.fc34.x86_64"
     },
     "libuuid": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
+    },
+    "libuv": {
+      "evra": "1:1.41.0-1.fc34.x86_64"
     },
     "libvarlink-util": {
-      "evra": "19-3.fc33.x86_64"
+      "evra": "21-1.fc34.x86_64"
     },
     "libverto": {
-      "evra": "0.3.0-10.fc33.x86_64"
+      "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.13.7-1.fc33.x86_64"
+      "evra": "2:4.14.3-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.19-1.fc33.x86_64"
+      "evra": "4.4.19-1.fc34.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.10-8.fc33.x86_64"
+      "evra": "2.9.10-10.fc34.x86_64"
     },
     "libxmlb": {
-      "evra": "0.2.1-1.fc33.x86_64"
+      "evra": "0.3.0-1.fc34.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-3.fc33.x86_64"
+      "evra": "0.2.5-5.fc34.x86_64"
     },
     "libzstd": {
-      "evra": "1.4.9-1.fc33.x86_64"
+      "evra": "1.4.9-1.fc34.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-27.fc33.x86_64"
+      "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210315-119.fc33.noarch"
+      "evra": "20210315-119.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210315-119.fc33.noarch"
+      "evra": "20210315-119.fc34.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.28-1.fc33.x86_64"
+      "evra": "0.9.29-1.fc34.x86_64"
     },
     "logrotate": {
-      "evra": "3.17.0-3.fc33.x86_64"
+      "evra": "3.18.0-2.fc34.x86_64"
     },
     "lsof": {
-      "evra": "4.93.2-4.fc33.x86_64"
+      "evra": "4.94.0-1.fc34.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.2-1.fc33.x86_64"
+      "evra": "5.4.2-2.fc34.x86_64"
     },
     "luksmeta": {
-      "evra": "9-9.fc33.x86_64"
+      "evra": "9-10.fc34.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.10-1.fc33.x86_64"
+      "evra": "2.03.11-1.fc34.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.10-1.fc33.x86_64"
+      "evra": "2.03.11-1.fc34.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.1-3.fc33.x86_64"
+      "evra": "1.9.3-2.fc34.x86_64"
     },
     "lzo": {
-      "evra": "2.10-3.fc33.x86_64"
+      "evra": "2.10-4.fc34.x86_64"
     },
     "mdadm": {
-      "evra": "4.1-6.fc33.x86_64"
+      "evra": "4.1-7.fc34.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-43.1.fc33.x86_64"
+      "evra": "2:2.1-45.fc34.x86_64"
     },
     "moby-engine": {
-      "evra": "19.03.13-1.ce.git4484c46.fc33.x86_64"
+      "evra": "20.10.6-1.fc34.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.4.0-2.fc33.x86_64"
+      "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.10.0-1.fc33.x86_64"
+      "evra": "78.10.0-1.fc34.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-6.fc33.x86_64"
+      "evra": "4.1.0-6.fc34.x86_64"
     },
     "ncurses": {
-      "evra": "6.2-3.20200222.fc33.x86_64"
+      "evra": "6.2-4.20200222.fc34.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.2-3.20200222.fc33.noarch"
+      "evra": "6.2-4.20200222.fc34.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-3.20200222.fc33.x86_64"
+      "evra": "6.2-4.20200222.fc34.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.58.20160912git.fc33.x86_64"
+      "evra": "2.0-0.59.20160912git.fc34.x86_64"
     },
     "nettle": {
-      "evra": "3.6-3.fc33.x86_64"
+      "evra": "3.7.2-1.fc34.x86_64"
     },
     "newt": {
-      "evra": "0.52.21-8.fc33.x86_64"
+      "evra": "0.52.21-9.fc34.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.3-1.fc33.x86_64"
+      "evra": "1:2.5.3-3.rc2.fc34.x86_64"
     },
     "nftables": {
-      "evra": "1:0.9.3-8.fc33.x86_64"
+      "evra": "1:0.9.8-2.fc34.x86_64"
     },
     "npth": {
-      "evra": "1.6-5.fc33.x86_64"
+      "evra": "1.6-6.fc34.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-17.fc33.x86_64"
+      "evra": "2.18.1-18.fc34.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-1.fc33.x86_64"
+      "evra": "2.0.14-3.fc34.x86_64"
     },
     "nvme-cli": {
-      "evra": "1.11.1-2.fc33.x86_64"
+      "evra": "1.11.1-3.fc34.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.6-1.fc33.x86_64"
+      "evra": "6.9.6-1.fc34.2.x86_64"
     },
     "openldap": {
-      "evra": "2.4.50-5.fc33.x86_64"
+      "evra": "2.4.57-3.fc34.x86_64"
     },
     "openssh": {
-      "evra": "8.4p1-5.fc33.x86_64"
+      "evra": "8.5p1-2.fc34.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.4p1-5.fc33.x86_64"
+      "evra": "8.5p1-2.fc34.x86_64"
     },
     "openssh-server": {
-      "evra": "8.4p1-5.fc33.x86_64"
+      "evra": "8.5p1-2.fc34.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1k-1.fc33.x86_64"
+      "evra": "1:1.1.1k-1.fc34.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1k-1.fc33.x86_64"
+      "evra": "1:1.1.1k-1.fc34.x86_64"
     },
     "os-prober": {
-      "evra": "1.77-6.fc33.x86_64"
+      "evra": "1.77-7.fc34.x86_64"
     },
     "ostree": {
-      "evra": "2021.2-2.fc33.x86_64"
+      "evra": "2021.2-2.fc34.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.2-2.fc33.x86_64"
+      "evra": "2021.2-2.fc34.x86_64"
     },
     "p11-kit": {
-      "evra": "0.23.22-2.fc33.x86_64"
+      "evra": "0.23.22-3.fc34.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-2.fc33.x86_64"
+      "evra": "0.23.22-3.fc34.x86_64"
     },
     "pam": {
-      "evra": "1.4.0-10.fc33.x86_64"
+      "evra": "1.5.1-5.fc34.x86_64"
     },
     "passwd": {
-      "evra": "0.80-9.fc33.x86_64"
-    },
-    "pciutils": {
-      "evra": "3.7.0-3.fc33.x86_64"
-    },
-    "pciutils-libs": {
-      "evra": "3.7.0-3.fc33.x86_64"
+      "evra": "0.80-10.fc34.x86_64"
     },
     "pcre": {
-      "evra": "8.44-2.fc33.x86_64"
+      "evra": "8.44-3.fc34.1.x86_64"
     },
     "pcre2": {
-      "evra": "10.36-4.fc33.x86_64"
+      "evra": "10.36-4.fc34.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.36-4.fc33.noarch"
+      "evra": "10.36-4.fc34.noarch"
     },
     "pigz": {
-      "evra": "2.4-7.fc33.x86_64"
+      "evra": "2.5-1.fc34.x86_64"
     },
     "pkgconf": {
-      "evra": "1.7.3-5.fc33.x86_64"
+      "evra": "1.7.3-6.fc34.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.7.3-5.fc33.noarch"
+      "evra": "1.7.3-6.fc34.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.7.3-5.fc33.x86_64"
+      "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "2:3.1.2-1.fc33.x86_64"
+      "evra": "2:3.1.2-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.1.2-1.fc33.x86_64"
+      "evra": "2:3.1.2-1.fc34.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.1-4.fc33.x86_64"
+      "evra": "3.2-1.fc34.x86_64"
     },
     "polkit": {
-      "evra": "0.117-2.fc33.x86_64"
+      "evra": "0.117-3.fc34.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.117-2.fc33.x86_64"
+      "evra": "0.117-3.fc34.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-18.fc33.x86_64"
+      "evra": "0.1-19.fc34.x86_64"
     },
     "popt": {
-      "evra": "1.18-2.fc33.x86_64"
+      "evra": "1.18-4.fc34.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.16-2.fc33.x86_64"
+      "evra": "3.3.17-1.fc34.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.3.3-3.fc33.x86_64"
+      "evra": "1.3.3-7.fc34.x86_64"
     },
     "psmisc": {
-      "evra": "23.3-4.fc33.x86_64"
+      "evra": "23.4-1.fc34.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20190417-4.fc33.noarch"
-    },
-    "qrencode-libs": {
-      "evra": "4.0.2-6.fc33.x86_64"
-    },
-    "rdma-core": {
-      "evra": "34.0-1.fc33.x86_64"
+      "evra": "20190417-5.fc34.noarch"
     },
     "readline": {
-      "evra": "8.0-5.fc33.x86_64"
+      "evra": "8.1-2.fc34.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.5-5.rc1.fc33.3.x86_64"
+      "evra": "1.2.5-5.rc1.fc34.4.x86_64"
     },
     "rpm": {
-      "evra": "4.16.1.3-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.16.1.3-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.4-1.fc33.x86_64"
+      "evra": "2021.4-3.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.4-1.fc33.x86_64"
+      "evra": "2021.4-3.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.16.1.3-1.fc33.x86_64"
+      "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rsync": {
-      "evra": "3.2.3-3.fc33.x86_64"
+      "evra": "3.2.3-5.fc34.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.0-377.rc93.fc33.x86_64"
+      "evra": "2:1.0.0-377.rc93.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.13.7-1.fc33.x86_64"
+      "evra": "2:4.14.3-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.13.7-1.fc33.noarch"
+      "evra": "2:4.14.3-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.13.7-1.fc33.x86_64"
-    },
-    "samba-libs": {
-      "evra": "2:4.13.7-1.fc33.x86_64"
+      "evra": "2:4.14.3-0.fc34.x86_64"
     },
     "sed": {
-      "evra": "4.8-5.fc33.x86_64"
+      "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "3.14.6-36.fc33.noarch"
+      "evra": "34.3-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "3.14.6-36.fc33.noarch"
+      "evra": "34.3-1.fc34.noarch"
     },
     "setup": {
-      "evra": "2.13.7-2.fc33.noarch"
+      "evra": "2.13.7-3.fc34.noarch"
     },
     "sg3_utils": {
-      "evra": "1.45-3.fc33.x86_64"
+      "evra": "1.45-4.fc34.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.45-3.fc33.x86_64"
+      "evra": "1.45-4.fc34.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.8.1-5.fc33.x86_64"
+      "evra": "2:4.8.1-8.fc34.x86_64"
     },
     "shared-mime-info": {
-      "evra": "2.0-3.fc33.x86_64"
+      "evra": "2.1-2.fc34.x86_64"
     },
     "shim-x64": {
-      "evra": "15-8.x86_64"
+      "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.2.2-1.fc33.x86_64"
+      "evra": "1:1.2.2-24.fc34.x86_64"
     },
     "slang": {
-      "evra": "2.3.2-8.fc33.x86_64"
+      "evra": "2.3.2-9.fc34.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.1.9-1.fc33.x86_64"
+      "evra": "1.1.9-1.fc34.x86_64"
     },
     "snappy": {
-      "evra": "1.1.8-4.fc33.x86_64"
+      "evra": "1.1.8-5.fc34.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.1-1.fc33.x86_64"
+      "evra": "1.7.4.1-2.fc34.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.34.1-1.fc33.x86_64"
+      "evra": "3.34.1-2.fc34.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.2-5.fc33.x86_64"
+      "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.4.2-2.fc33.x86_64"
+      "evra": "2.4.2-3.fc34.x86_64"
     },
     "stalld": {
-      "evra": "1.9-1.fc33.x86_64"
+      "evra": "1.9-1.fc34.x86_64"
     },
     "sudo": {
-      "evra": "1.9.5p2-1.fc33.x86_64"
+      "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "246.7-1.fc33.x86_64"
+      "evra": "248-2.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "246.7-1.fc33.x86_64"
+      "evra": "248-2.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "246.7-1.fc33.x86_64"
+      "evra": "248-2.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "246.7-1.fc33.x86_64"
+      "evra": "248-2.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "246.7-1.fc33.noarch"
+      "evra": "248-2.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "246.7-1.fc33.x86_64"
+      "evra": "248-2.fc34.x86_64"
     },
     "tar": {
-      "evra": "2:1.32-6.fc33.x86_64"
+      "evra": "2:1.34-1.fc34.x86_64"
     },
     "teamd": {
-      "evra": "1.31-2.fc33.x86_64"
+      "evra": "1.31-3.fc34.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.1-1.fc33.x86_64"
+      "evra": "0.0.99.1-1.fc34.x86_64"
     },
     "tpm2-tools": {
-      "evra": "4.3.0-1.fc33.x86_64"
+      "evra": "5.0-2.fc34.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.0.3-1.fc33.x86_64"
+      "evra": "3.0.3-2.fc34.x86_64"
     },
     "tzdata": {
-      "evra": "2021a-1.fc33.noarch"
+      "evra": "2021a-1.fc34.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.12.1-2.fc33.x86_64"
+      "evra": "0.12.1-3.fc34.x86_64"
     },
     "util-linux": {
-      "evra": "2.36.1-1.fc33.x86_64"
+      "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2811-1.fc33.x86_64"
+      "evra": "2:8.2.2811-1.fc34.x86_64"
     },
     "which": {
-      "evra": "2.21-20.fc33.x86_64"
+      "evra": "2.21-24.fc34.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210315-1.fc33.x86_64"
+      "evra": "1.0.20210315-1.fc34.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.7.0-1.fc33.x86_64"
+      "evra": "5.10.0-2.fc34.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-4.fc33.x86_64"
+      "evra": "5.2.5-5.fc34.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-4.fc33.x86_64"
+      "evra": "5.2.5-5.fc34.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-15.fc33.x86_64"
+      "evra": "2.1.0-16.fc34.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.9-1.fc33.x86_64"
+      "evra": "1.1.9-2.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.19-1.fc33.x86_64"
+      "evra": "0.0.19-1.fc34.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-23.fc33.x86_64"
+      "evra": "1.2.11-26.fc34.x86_64"
     },
     "zram-generator": {
-      "evra": "0.2.0-4.fc33.x86_64"
+      "evra": "0.3.2-3.fc34.x86_64"
     }
   },
   "metadata": {
-    "generated": "2021-04-29T20:55:15Z",
+    "generated": "2021-04-29T21:13:46Z",
     "rpmmd_repos": {
       "fedora": {
-        "generated": "2020-10-19T23:27:19Z"
+        "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
         "generated": "2021-04-29T04:39:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-29T18:47:17Z"
+        "generated": "2021-04-29T17:54:41Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index aaf361dd5b..f2141b1297 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -1,7 +1,7 @@
 ref: fedora/${basearch}/coreos/testing-devel
 include: manifests/fedora-coreos.yaml
 
-releasever: "33"
+releasever: "34"
 
 rojig:
   license: MIT

From 87dde4953c52195f23de1642af7d4c677d93f1b5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 14:56:07 -0400
Subject: [PATCH 0207/2157] buildroot: Fedora 34 is out!

---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index cbbb314c6a..154a16efe5 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:33
+FROM registry.fedoraproject.org/fedora:34
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210426

From 8d422eeb39c83393446d0e061bef79d6c90080c9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 14:59:00 -0400
Subject: [PATCH 0208/2157] manifests: drop login.defs configuration

This was needed for f33-. No longer needed for f34+.
Originally added in https://github.com/coreos/fedora-coreos-config/pull/765
---
 manifests/fedora-coreos-base.yaml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2dc6e9a45a..478792822f 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -123,20 +123,6 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
-  # Edit `login.defs` to configure `login(1)` to read from `/run/motd.d` for
-  # displaying the MOTD. This is required for newer versions of
-  # `console-login-helper-messages` to function properly.
-  # This will be dropped once Fedora util-linux adds `/run/motd.d` as a default
-  # in Fedora 34.
-  # https://src.fedoraproject.org/rpms/util-linux/pull-request/8
-  # https://github.com/coreos/fedora-coreos-tracker/issues/704#issuecomment-772862174
-  - |
-    #!/usr/bin/env bash
-    source /etc/os-release
-    if [ ${VERSION_ID} -lt 34 ]; then
-      echo 'MOTD_FILE=/usr/share/misc/motd:/run/motd:/run/motd.d:/etc/motd:/etc/motd.d' >> /etc/login.defs
-    fi
-
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.

From 2d9c8164df7b10154867b46c2fdd64b7e32b41c1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 15:01:48 -0400
Subject: [PATCH 0209/2157] tests/kola: update systemd-resolved test

No longer need to consider F32.
---
 tests/kola/misc-ro | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index c79c88c2fb..4e132e21db 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -31,17 +31,10 @@ done
 if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive; then
     fatal "Unit kdump.service shouldn't be active"
 fi
-# systemd-resolved should be disabled on f32 but
-# enabled on f33+.
+# systemd-resolved should be enabled
 source /etc/os-release
-if systemctl is-enabled systemd-resolved 1>/dev/null; then
-    if [ "$VERSION_ID" == "32" ]; then
-        fatal "Unit systemd-resolved should not be enabled"
-    fi
-else
-    if [ "$VERSION_ID" != "32" ]; then
-        fatal "Unit systemd-resolved should be enabled"
-    fi
+if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
+    fatal "Unit systemd-resolved should be enabled"
 fi
 ok services
 

From 474c87bddd776d01686af2b2ee7bea398e1225a0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 15:06:01 -0400
Subject: [PATCH 0210/2157] overlay: remove
 coreos-reset-stub-resolv-selinux-context units

This was added in 4356928. It's no longer needed because the contexts
are correct in F34+ and don't need to be "fixed".
---
 manifests/fedora-coreos-base.yaml              | 12 ------------
 .../lib/systemd/system-preset/45-fcos.preset   |  5 -----
 ...reos-reset-stub-resolv-selinux-context.path | 11 -----------
 ...s-reset-stub-resolv-selinux-context.service | 18 ------------------
 4 files changed, 46 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.path
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.service

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 478792822f..fa66933fdc 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -99,18 +99,6 @@ postprocess:
     DNSStubListener=no
     EOF
 
-  # Disable and delete the coreos-reset-stub-resolv-selinux-context.{path,service}.
-  # Not needed in Fedora 34 since https://github.com/systemd/systemd/pull/17976 has landed.
-  # Can remove this and the files in the overlay once we've migrated everything to F34.
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    source /etc/os-release
-    if [ ${VERSION_ID} -ge 34 ]; then
-    rm -fv /etc/systemd/system/multi-user.target.wants/coreos-reset-stub-resolv-selinux-context.{path,service} \
-           /usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.{path,service}
-    fi
-
   # Set the fallback hostname to `localhost`. This piggybacks on the
   # postprocess script above which neuters systemd-resolved, because
   # currently, a fallback hostname of `localhost` + systemd-resolved breaks
diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index f54a5805a3..54c813d3fa 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,8 +3,3 @@ enable fedora-coreos-pinger.service
 # Provide information if no ignition is provided
 enable coreos-check-ignition-config.service
 enable coreos-check-ssh-keys.service
-# Monitor the stub-resolv.conf SELinux context
-enable coreos-reset-stub-resolv-selinux-context.path
-# Run once on startup to prevent some race conditions with
-# NetworkManager and systemd-resolved starting up.
-enable coreos-reset-stub-resolv-selinux-context.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.path b/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.path
deleted file mode 100644
index 05bd20fd3f..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.path
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=Monitor /run/systemd/resolve/stub-resolv.conf to fixup SELinux context.
-Documentation=https://github.com/systemd/systemd/pull/17976
-Before=systemd-resolved.service
-
-[Path]
-PathModified=/run/systemd/resolve/stub-resolv.conf
-Unit=coreos-reset-stub-resolv-selinux-context.service
-
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.service
deleted file mode 100644
index dab08f9853..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-reset-stub-resolv-selinux-context.service
+++ /dev/null
@@ -1,18 +0,0 @@
-[Unit]
-Description=Fixup SELinux context on /run/systemd/resolve/stub-resolv.conf
-Documentation=https://github.com/systemd/systemd/pull/17976
-ConditionPathExists=/run/systemd/resolve/stub-resolv.conf
-# Run once on startup in addition to the path unit invocations
-# so that we can order ourselves before NetworkManager to prevent
-# at least a few race condition denials.
-After=systemd-resolved.service
-Before=NetworkManager.service
-
-[Service]
-Type=oneshot
-# This service can be started more than once. If the file changes.
-RemainAfterExit=no
-ExecStart=restorecon -v /run/systemd/resolve/stub-resolv.conf
-
-[Install]
-WantedBy=multi-user.target

From 1054c6b6ee8c19e577abc8896df2d8d8f32d6879 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 15:13:35 -0400
Subject: [PATCH 0211/2157] overlay: don't ship seq in initrd

This was added in ad5eb32 for clevis, but clevis has been
changed to no longer need `seq` [1] so we can drop it.

[1] https://github.com/latchset/clevis/pull/295
---
 .../usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 57239dc966..99796ebf4b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -60,9 +60,6 @@ install() {
         sgdisk    \
         find
 
-    # TODO f34: check if we can drop this temporary workaround for https://github.com/latchset/clevis/pull/295
-    inst_multiple seq
-
     for x in mount populate; do
         install_ignition_unit ignition-ostree-${x}-var.service
         inst_script "$moddir/ignition-ostree-${x}-var.sh" "/usr/sbin/ignition-ostree-${x}-var"

From 9dada2ff05d4346b5a3c4a32279ca60f2b8a7352 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 15:19:08 -0400
Subject: [PATCH 0212/2157] overlay: update reminder for f35 cycle

Since I'm going through all of the TODO f34 items now
let's update this one to remind us in the f35 cycle if
we haven't already removed it before then.
---
 .../dracut/modules.d/60coreos-agetty-workaround/module-setup.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh
index a796f5b593..1423fd5a42 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/module-setup.sh
@@ -16,6 +16,6 @@ install() {
     inst_multiple \
         touch
 
-    # TODO f34: check if we can drop this whole module
+    # TODO f35: check if we can drop this whole module
     install_unit coreos-touch-run-agetty.service
 }

From 74dd84c2b2b4484d33308851a211e667e8a6a767 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Apr 2021 15:23:04 -0400
Subject: [PATCH 0213/2157] manifests: remove Fedora version constraint

Fedora 34 is now the default and there is nothing less
than that so we can remove the version check.
---
 manifests/fedora-coreos-base.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index fa66933fdc..5b80174c53 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -107,7 +107,7 @@ postprocess:
   - |
     #!/usr/bin/env bash
     source /etc/os-release
-    if [ ${VERSION_ID} -ge 34 ] && [ -z "${DEFAULT_HOSTNAME:-}" ]; then
+    if [ -z "${DEFAULT_HOSTNAME:-}" ]; then
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 

From 7f420f72d27e1e152eb14b5a7f48b4a5974fd782 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 30 Apr 2021 21:40:12 +0000
Subject: [PATCH 0214/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/242/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index eae162edc4..7d3adb29b5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -724,7 +724,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.3-0.fc34.x86_64"
+      "evra": "2:4.14.4-0.fc34.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-2.fc34.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.3-0.fc34.x86_64"
+      "evra": "2:4.14.4-0.fc34.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.19-1.fc34.x86_64"
@@ -1033,13 +1033,13 @@
       "evra": "2:1.0.0-377.rc93.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.3-0.fc34.x86_64"
+      "evra": "2:4.14.4-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.3-0.fc34.noarch"
+      "evra": "2:4.14.4-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.3-0.fc34.x86_64"
+      "evra": "2:4.14.4-0.fc34.x86_64"
     },
     "sed": {
       "evra": "4.8-7.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-29T21:13:46Z",
+    "generated": "2021-04-30T21:02:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-29T04:39:55Z"
+        "generated": "2021-04-30T20:41:16Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-29T17:54:41Z"
+        "generated": "2021-04-30T00:50:52Z"
       }
     }
   }

From 9ddb3b1a503fc19ef40b462541c58e29597bf215 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 30 Apr 2021 09:51:33 -0400
Subject: [PATCH 0215/2157] tests/countme: adapt for rawhide

Rawhide only has a single repo enabled with the countme flag.
---
 tests/kola/rpm-ostree-countme/test.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index c4dd7ebda2..a8a83aeded 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -30,7 +30,10 @@ fi
 
 # Check rpm-ostree count me output
 output="$(journalctl --output=json --boot --unit=rpm-ostree-countme.service --grep "Successful requests:" | jq --raw-output '.MESSAGE')"
-if [[ "${output}" != "Successful requests: 2/2" ]] && [[ "${output}" != "Successful requests: 3/3" ]]; then
+# depending on the stream, we expect different numbers of countme-enabled repos
+if [[ "${output}" != "Successful requests: 1/1" ]] && \
+   [[ "${output}" != "Successful requests: 2/2" ]] && \
+   [[ "${output}" != "Successful requests: 3/3" ]]; then
 	fatal "rpm-ostree-countme service ouput does not match expected sucess output"
 fi
 

From daea13342cbe0e52d8c480ad062dcf3735d89b32 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 3 May 2021 21:10:27 +0000
Subject: [PATCH 0216/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/250/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7d3adb29b5..be03a26259 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -271,7 +271,7 @@
       "evra": "0.0.4-9.fc34.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "34-1.noarch"
+      "evra": "34-2.noarch"
     },
     "fedora-release-common": {
       "evra": "34-1.noarch"
@@ -283,16 +283,16 @@
       "evra": "34-1.noarch"
     },
     "fedora-repos": {
-      "evra": "34-1.noarch"
+      "evra": "34-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "34-1.noarch"
+      "evra": "34-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "34-1.noarch"
+      "evra": "34-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "34-1.noarch"
+      "evra": "34-2.noarch"
     },
     "file": {
       "evra": "5.39-5.fc34.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.16-300.fc34.x86_64"
+      "evra": "5.11.17-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.16-300.fc34.x86_64"
+      "evra": "5.11.17-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.16-300.fc34.x86_64"
+      "evra": "5.11.17-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -577,13 +577,13 @@
       "evra": "1.4-4.fc34.x86_64"
     },
     "libgcc": {
-      "evra": "11.0.1-0.3.fc34.x86_64"
+      "evra": "11.1.1-1.fc34.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.9.3-1.fc34.x86_64"
+      "evra": "1.9.3-2.fc34.x86_64"
     },
     "libgomp": {
-      "evra": "11.0.1-0.3.fc34.x86_64"
+      "evra": "11.1.1-1.fc34.x86_64"
     },
     "libgpg-error": {
       "evra": "1.42-1.fc34.x86_64"
@@ -754,7 +754,7 @@
       "evra": "2.4.2-3.fc34.x86_64"
     },
     "libstdc++": {
-      "evra": "11.0.1-0.3.fc34.x86_64"
+      "evra": "11.1.1-1.fc34.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.2-2.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-04-30T21:02:49Z",
+    "generated": "2021-05-03T20:37:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-30T20:41:16Z"
+        "generated": "2021-04-30T21:46:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-04-30T00:50:52Z"
+        "generated": "2021-05-03T01:54:02Z"
       }
     }
   }

From 113682404839f7fa727f79c27d43fe412f03f2fa Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 4 May 2021 21:28:08 +0000
Subject: [PATCH 0217/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/254/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index be03a26259..3685bec8ac 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1045,10 +1045,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.3-1.fc34.noarch"
+      "evra": "34.4-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.3-1.fc34.noarch"
+      "evra": "34.4-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1069,7 +1069,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.2.2-24.fc34.x86_64"
+      "evra": "1:1.2.3-1.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-03T20:37:21Z",
+    "generated": "2021-05-04T20:53:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-04-30T21:46:50Z"
+        "generated": "2021-05-03T22:50:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-03T01:54:02Z"
+        "generated": "2021-05-04T00:50:10Z"
       }
     }
   }

From 72ea97ac43f279f778410b02c4840f6e6c06a9e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Thu, 6 May 2021 12:43:20 +0200
Subject: [PATCH 0218/2157] overrides: drop graduated overrides

---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b60cbc3ecc..c33c0b6dff 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,7 +1 @@
-packages:
-  #############################################
-  # updates to prevent downgrades from f33->f34
-  #############################################
-  # https://bodhi.fedoraproject.org/updates/FEDORA-2021-39df52b880
-  fstrm:
-    evr: 0.6.1-2.fc34
+packages: {}

From fee37377fdb91030b64902242cdb1c9f2668793d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 6 May 2021 21:27:02 +0000
Subject: [PATCH 0219/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/258/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 37 +++++++++++++++++--------------------
 1 file changed, 17 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3685bec8ac..d40db0da9d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,16 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.11-5.fc34.x86_64"
-    },
-    "bind-libs-lite": {
-      "evra": "32:9.16.11-5.fc34.x86_64"
+      "evra": "32:9.16.15-1.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.11-5.fc34.noarch"
+      "evra": "32:9.16.15-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.11-5.fc34.x86_64"
+      "evra": "32:9.16.15-1.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -148,10 +145,10 @@
       "evra": "0.9.0-2.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-23.fc34.x86_64"
+      "evra": "8.32-24.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-23.fc34.x86_64"
+      "evra": "8.32-24.fc34.x86_64"
     },
     "cpio": {
       "evra": "2.13-10.fc34.x86_64"
@@ -178,10 +175,10 @@
       "evra": "2.3.5-2.fc34.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-4.fc34.x86_64"
+      "evra": "1:2.3.3op2-5.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-1.fc34.x86_64"
+      "evra": "7.76.1-2.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.x86_64"
@@ -262,7 +259,7 @@
       "evra": "0.183-1.fc34.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.10-2.fc34.x86_64"
+      "evra": "2:5.12-1.fc34.x86_64"
     },
     "expat": {
       "evra": "2.2.10-2.fc34.x86_64"
@@ -352,7 +349,7 @@
       "evra": "0.21-4.fc34.x86_64"
     },
     "git-core": {
-      "evra": "2.31.1-1.fc34.x86_64"
+      "evra": "2.31.1-3.fc34.x86_64"
     },
     "glib2": {
       "evra": "2.68.1-1.fc34.x86_64"
@@ -427,7 +424,7 @@
       "evra": "1.8.7-3.fc34.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.7-6.fc34.x86_64"
+      "evra": "1.8.7-7.fc34.x86_64"
     },
     "iputils": {
       "evra": "20210202-2.fc34.x86_64"
@@ -544,7 +541,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-1.fc34.x86_64"
+      "evra": "7.76.1-2.fc34.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.x86_64"
@@ -838,7 +835,7 @@
       "evra": "4.94.0-1.fc34.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.2-2.fc34.x86_64"
+      "evra": "5.4.3-1.fc34.x86_64"
     },
     "luksmeta": {
       "evra": "9-10.fc34.x86_64"
@@ -1162,10 +1159,10 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2811-1.fc34.x86_64"
+      "evra": "2:8.2.2825-1.fc34.x86_64"
     },
     "which": {
-      "evra": "2.21-24.fc34.x86_64"
+      "evra": "2.21-26.fc34.x86_64"
     },
     "wireguard-tools": {
       "evra": "1.0.20210315-1.fc34.x86_64"
@@ -1196,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-04T20:53:58Z",
+    "generated": "2021-05-06T20:54:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-03T22:50:56Z"
+        "generated": "2021-05-06T13:30:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-04T00:50:10Z"
+        "generated": "2021-05-06T00:49:52Z"
       }
     }
   }

From 7b1dbc3fcad534b25313f455149e99dcd21ba22c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 8 May 2021 21:24:31 +0000
Subject: [PATCH 0220/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/262/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 40 +++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d40db0da9d..71a09245ab 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,13 +355,13 @@
       "evra": "2.68.1-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-5.fc34.x86_64"
+      "evra": "2.33-8.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-5.fc34.x86_64"
+      "evra": "2.33-8.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-5.fc34.x86_64"
+      "evra": "2.33-8.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.17-300.fc34.x86_64"
+      "evra": "5.11.18-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.17-300.fc34.x86_64"
+      "evra": "5.11.18-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.17-300.fc34.x86_64"
+      "evra": "5.11.18-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -493,7 +493,7 @@
       "evra": "1.19.1-3.fc34.x86_64"
     },
     "less": {
-      "evra": "575-2.fc34.x86_64"
+      "evra": "581.2-1.fc34.x86_64"
     },
     "libacl": {
       "evra": "2.3.1-1.fc34.x86_64"
@@ -637,7 +637,7 @@
       "evra": "1.0.4-13.fc34.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.12.0-2.fc34.x86_64"
+      "evra": "2.12.1-1.fc34.x86_64"
     },
     "libmount": {
       "evra": "2.36.2-1.fc34.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.14.4-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.19-1.fc34.x86_64"
+      "evra": "4.4.20-2.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.10-10.fc34.x86_64"
@@ -829,7 +829,7 @@
       "evra": "0.9.29-1.fc34.x86_64"
     },
     "logrotate": {
-      "evra": "3.18.0-2.fc34.x86_64"
+      "evra": "3.18.0-3.fc34.x86_64"
     },
     "lsof": {
       "evra": "4.94.0-1.fc34.x86_64"
@@ -907,7 +907,7 @@
       "evra": "1.11.1-3.fc34.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.6-1.fc34.2.x86_64"
+      "evra": "6.9.7.1-1.fc34.x86_64"
     },
     "openldap": {
       "evra": "2.4.57-3.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "2:3.1.2-1.fc34.x86_64"
+      "evra": "2:3.2.0-0.1.rc1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.1.2-1.fc34.x86_64"
+      "evra": "2:3.2.0-0.1.rc1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.4-1.fc34.noarch"
+      "evra": "34.5-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.4-1.fc34.noarch"
+      "evra": "34.5-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1111,7 +1111,7 @@
       "evra": "2.4.2-3.fc34.x86_64"
     },
     "stalld": {
-      "evra": "1.9-1.fc34.x86_64"
+      "evra": "1.10-1.fc34.x86_64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc34.x86_64"
@@ -1180,7 +1180,7 @@
       "evra": "2.1.0-16.fc34.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.9-2.fc34.x86_64"
+      "evra": "1.1.11-1.fc34.x86_64"
     },
     "zincati": {
       "evra": "0.0.19-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-06T20:54:39Z",
+    "generated": "2021-05-08T20:54:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-06T13:30:23Z"
+        "generated": "2021-05-07T21:45:14Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-06T00:49:52Z"
+        "generated": "2021-05-08T01:12:59Z"
       }
     }
   }

From 6d7d07f11d9403378bbf5dee4307f2cd8c12645b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 9 May 2021 21:24:59 +0000
Subject: [PATCH 0221/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/264/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 71a09245ab..2bc49b0ae6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.9.1-4.fc34.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-15.fc34.noarch"
+      "evra": "4:1-16.fc34.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.0-2.fc34.x86_64"
@@ -403,7 +403,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.9.0-4.fc34.x86_64"
+      "evra": "2.10.1-1.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-08T20:54:20Z",
+    "generated": "2021-05-09T20:53:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-07T21:45:14Z"
+        "generated": "2021-05-08T21:32:57Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-08T01:12:59Z"
+        "generated": "2021-05-09T00:53:31Z"
       }
     }
   }

From f946fc83af5eaadad27144e5f4ab8375c8302b33 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 10 May 2021 21:28:23 +0000
Subject: [PATCH 0222/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/266/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2bc49b0ae6..a9991261ae 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -805,7 +805,7 @@
       "evra": "4.4.20-2.fc34.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.10-10.fc34.x86_64"
+      "evra": "2.9.10-12.fc34.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.0-1.fc34.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.5-1.fc34.noarch"
+      "evra": "34.6-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.5-1.fc34.noarch"
+      "evra": "34.6-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1165,7 +1165,7 @@
       "evra": "2.21-26.fc34.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210315-1.fc34.x86_64"
+      "evra": "1.0.20210424-1.fc34.x86_64"
     },
     "xfsprogs": {
       "evra": "5.10.0-2.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-09T20:53:57Z",
+    "generated": "2021-05-10T20:54:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-08T21:32:57Z"
+        "generated": "2021-05-09T21:31:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-09T00:53:31Z"
+        "generated": "2021-05-10T00:53:55Z"
       }
     }
   }

From b72844c5c801e7bf899ac65b4040aaecb743a7ec Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 10 May 2021 12:20:30 -0400
Subject: [PATCH 0223/2157] overrides: freeze podman to 3.1.2-1

There is a regression in the latest 3.2.0 RC in stable:
- https://github.com/containers/podman/issues/10274
- https://github.com/containers/podman/pull/10288

No Bodhi updates yet with the fix.

Also hit that bug myself locally on FSB.
---
 manifest-lock.overrides.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index c33c0b6dff..1e5d9ad1da 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1 +1,8 @@
-packages: {}
+packages:
+    # Freeze due to regression in 3.2.0 rc
+    # https://github.com/containers/podman/issues/10274
+    # https://github.com/containers/podman/pull/10288
+    podman:
+        evr: 2:3.1.2-1.fc34
+    podman-plugins:
+        evr: 2:3.1.2-1.fc34

From 26a33f685ba5b63e2063c8b7f5c54240055d6c08 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 11 May 2021 14:13:57 +0000
Subject: [PATCH 0224/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/268/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/master/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a9991261ae..717956bc0d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "2:3.2.0-0.1.rc1.fc34.x86_64"
+      "evra": "2:3.1.2-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.2.0-0.1.rc1.fc34.x86_64"
+      "evra": "2:3.1.2-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1117,22 +1117,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248-2.fc34.x86_64"
+      "evra": "248.2-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248-2.fc34.x86_64"
+      "evra": "248.2-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248-2.fc34.x86_64"
+      "evra": "248.2-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248-2.fc34.x86_64"
+      "evra": "248.2-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248-2.fc34.noarch"
+      "evra": "248.2-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248-2.fc34.x86_64"
+      "evra": "248.2-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-10T20:54:44Z",
+    "generated": "2021-05-11T13:44:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-05-09T21:31:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-10T00:53:55Z"
+        "generated": "2021-05-11T01:50:18Z"
       }
     }
   }

From de05fc7426d4daff5fe7b32de987662d7514aaea Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 5 May 2021 16:30:07 -0400
Subject: [PATCH 0225/2157] Updates for master -> main branch renamings

---
 .cci.jenkinsfile                 |  4 ++--
 README.md                        | 10 +++++-----
 ci/buildroot/buildroot-specs.txt |  2 +-
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 07553f4633..5e7f1a6c29 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -1,4 +1,4 @@
-// Documentation: https://github.com/coreos/coreos-ci/blob/master/README-upstream-ci.md
+// Documentation: https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md
 
 cosaPod {
     checkoutToDir(scm, 'config')
@@ -10,7 +10,7 @@ cosaPod {
     shwrap("""
         mkdir -p /srv/fcos && cd /srv/fcos
         cosa init ${env.WORKSPACE}/config
-        curl -LO https://raw.githubusercontent.com/coreos/fedora-coreos-releng-automation/master/scripts/download-overrides.py
+        curl -LO https://raw.githubusercontent.com/coreos/fedora-coreos-releng-automation/main/scripts/download-overrides.py
         python3 download-overrides.py
         # prep from the latest builds so that we generate a diff on PRs that add packages
         cosa buildprep https://builds.coreos.fedoraproject.org/prod/streams/${env.CHANGE_TARGET}/builds
diff --git a/README.md b/README.md
index 8b98fcaadf..19e81652d0 100644
--- a/README.md
+++ b/README.md
@@ -14,13 +14,13 @@ https://github.com/coreos/fedora-coreos-tracker.
 There is one branch for each stream. The default branch is
 [`testing-devel`](https://github.com/coreos/fedora-coreos-config/commits/testing-devel),
 on which all development happens. See
-[the design](https://github.com/coreos/fedora-coreos-tracker/blob/master/Design.md#release-streams)
-and [tooling](https://github.com/coreos/fedora-coreos-tracker/blob/master/stream-tooling.md)
+[the design](https://github.com/coreos/fedora-coreos-tracker/blob/main//Design.md#release-streams)
+and [tooling](https://github.com/coreos/fedora-coreos-tracker/blob/main//stream-tooling.md)
 docs for more information about streams.
 
 All file changes in `testing-devel` are propagated to other
 branches (to `bodhi-updates` through
-[config-bot](https://github.com/coreos/fedora-coreos-releng-automation/tree/master/config-bot),
+[config-bot](https://github.com/coreos/fedora-coreos-releng-automation/tree/main/config-bot),
 and to `testing` through usual promotion), with the
 following exceptions:
 - `manifest.yaml`: contains the stream "identity", such as
@@ -65,7 +65,7 @@ update to Bodhi so that we don't have to carry the override
 forever.
 
 Once an override PR is merged,
-[`coreos-koji-tagger`](https://github.com/coreos/fedora-coreos-releng-automation/tree/master/coreos-koji-tagger)
+[`coreos-koji-tagger`](https://github.com/coreos/fedora-coreos-releng-automation/tree/main/coreos-koji-tagger)
 will automatically tag overridden packages into the pool.
 
 ## Adding packages to the OS
@@ -97,4 +97,4 @@ one easy way to do this is for now:
 Pull requests submitted to this repo are tested by
 [CoreOS CI](https://github.com/coreos/coreos-ci). You can see the pipeline
 executed in `.cci.jenkinsfile`. For more information, including interacting with
-CI, see the [CoreOS CI documentation](https://github.com/coreos/coreos-ci/blob/master/README-upstream-ci.md).
+CI, see the [CoreOS CI documentation](https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md).
diff --git a/ci/buildroot/buildroot-specs.txt b/ci/buildroot/buildroot-specs.txt
index f164c9d9b4..24715e5be5 100644
--- a/ci/buildroot/buildroot-specs.txt
+++ b/ci/buildroot/buildroot-specs.txt
@@ -1,3 +1,3 @@
 # for projects which have their canonical spec files upstream, use those instead
 # since they're more up to date
-https://raw.githubusercontent.com/coreos/rpm-ostree/master/packaging/rpm-ostree.spec.in
+https://raw.githubusercontent.com/coreos/rpm-ostree/main/packaging/rpm-ostree.spec.in

From d87b52bc6a90b53e1afeab2731b52612d5e3bbc0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 12 May 2021 17:20:06 +0000
Subject: [PATCH 0226/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/272/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 717956bc0d..2551b185f2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -793,7 +793,7 @@
       "evra": "1:1.41.0-1.fc34.x86_64"
     },
     "libvarlink-util": {
-      "evra": "21-1.fc34.x86_64"
+      "evra": "22-2.fc34.x86_64"
     },
     "libverto": {
       "evra": "0.3.2-1.fc34.x86_64"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-11T13:44:08Z",
+    "generated": "2021-05-12T16:50:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-05-09T21:31:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-11T01:50:18Z"
+        "generated": "2021-05-12T05:27:39Z"
       }
     }
   }

From 8922690823b7dbc1202f6d494d104bf4f2747f8d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 12 May 2021 15:38:28 -0400
Subject: [PATCH 0227/2157] overrides: Fast-track podman-3.1.2-3

Fixes podman selinux labelling regression.
https://github.com/coreos/fedora-coreos-tracker/issues/818
---
 manifest-lock.overrides.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1e5d9ad1da..9416e829f6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,8 +1,8 @@
 packages:
-    # Freeze due to regression in 3.2.0 rc
-    # https://github.com/containers/podman/issues/10274
-    # https://github.com/containers/podman/pull/10288
+    # Fast-track 3.1.2-3. Fixes podman selinux labelling regression.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/818
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-aab271bbc8
     podman:
-        evr: 2:3.1.2-1.fc34
+        evr: 3:3.1.2-3.fc34
     podman-plugins:
-        evr: 2:3.1.2-1.fc34
+        evr: 3:3.1.2-3.fc34

From fb1a8b6b32df3b5eacba68e289b0ca7f20cb50bd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 13 May 2021 21:54:33 +0000
Subject: [PATCH 0228/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/275/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2551b185f2..32605b2897 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.18-300.fc34.x86_64"
+      "evra": "5.11.19-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.18-300.fc34.x86_64"
+      "evra": "5.11.19-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.18-300.fc34.x86_64"
+      "evra": "5.11.19-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "2:3.1.2-1.fc34.x86_64"
+      "evra": "3:3.1.2-3.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "2:3.1.2-1.fc34.x86_64"
+      "evra": "3:3.1.2-3.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2825-1.fc34.x86_64"
+      "evra": "2:8.2.2846-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-12T16:50:58Z",
+    "generated": "2021-05-13T20:55:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-09T21:31:54Z"
+        "generated": "2021-05-12T23:21:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-12T05:27:39Z"
+        "generated": "2021-05-13T00:53:41Z"
       }
     }
   }

From c7d25b56320b5c02e479f67ba50fe7dd1e5f8dd3 Mon Sep 17 00:00:00 2001
From: Stephen Lowrie <slowrie@redhat.com>
Date: Fri, 19 Mar 2021 01:50:28 -0500
Subject: [PATCH 0229/2157] 35coreos-ignition: add coreos-kargs

Co-authored-by: Jonathan Lebon <jonathan@jlebon.com>
---
 .../coreos-kargs-reboot.service               | 21 +++++++++++++++++++
 .../35coreos-ignition/coreos-kargs.sh         |  4 ++++
 .../35coreos-ignition/module-setup.sh         |  6 ++++++
 tests/kola/ignition/kargs/config.ign          |  9 ++++++++
 tests/kola/ignition/kargs/test.sh             | 19 +++++++++++++++++
 5 files changed, 59 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
 create mode 100644 tests/kola/ignition/kargs/config.ign
 create mode 100755 tests/kola/ignition/kargs/test.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
new file mode 100644
index 0000000000..4f50823092
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
@@ -0,0 +1,21 @@
+[Unit]
+Description=CoreOS Kernel Arguments Reboot
+ConditionPathExists=/etc/initrd-release
+ConditionPathExists=/run/ignition-modified-kargs
+DefaultDependencies=false
+Before=ignition-complete.target
+ 
+# This runs after ignition-kargs & before ignition-disks so that it can optionally reboot
+# if kargs were modified via Ignition. This is done in a two-stage fashion so that other
+# mechanisms which may want to reboot (e.x. FIPS) can also hook in here and only reboot
+# once from the initrd.
+After=ignition-kargs.service
+Before=ignition-disks.service
+ 
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+ 
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/systemctl reboot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
new file mode 100755
index 0000000000..3744eb6d4b
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+set -euo pipefail
+
+/usr/bin/rdcore kargs --boot-device /dev/disk/by-label/boot --create-if-changed /run/ignition-modified-kargs "$@"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index da869947e0..c874f1e160 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -40,6 +40,12 @@ install() {
     # path generated by systemd-escape --path /dev/disk/by-label/root
     install_ignition_unit coreos-gpt-setup.service ignition-diskful.target
 
+    # dracut inst_script doesn't allow overwrites and we are replacing
+    # the default script placed by Ignition
+    binpath="/usr/sbin/ignition-kargs-helper"
+    mv "$moddir/coreos-kargs.sh" "$initdir$binpath"
+    install_ignition_unit coreos-kargs-reboot.service
+
     inst_script "$moddir/coreos-boot-edit.sh" \
         "/usr/sbin/coreos-boot-edit"
     # Only start when the system has disks since we are editing /boot.
diff --git a/tests/kola/ignition/kargs/config.ign b/tests/kola/ignition/kargs/config.ign
new file mode 100644
index 0000000000..fb9fa01a5a
--- /dev/null
+++ b/tests/kola/ignition/kargs/config.ign
@@ -0,0 +1,9 @@
+{
+  "ignition": {
+    "version": "3.3.0-experimental"
+  },
+  "kernelArguments": {
+    "shouldExist": ["foobar"],
+    "shouldNotExist": ["mitigations=auto,nosmt"]
+  }
+}
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
new file mode 100755
index 0000000000..a7535254f8
--- /dev/null
+++ b/tests/kola/ignition/kargs/test.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! grep foobar /proc/cmdline; then
+    fatal "missing foobar in kernel cmdline"
+fi
+if grep mitigations /proc/cmdline; then
+    fatal "found mitigations in kernel cmdline"
+fi
+ok "Ignition kargs"

From 579e46ad1da987b28bef097e51bd7b674879e4c8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 15 May 2021 21:19:45 +0000
Subject: [PATCH 0230/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/281/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 32605b2897..4aea6b25f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -352,7 +352,7 @@
       "evra": "2.31.1-3.fc34.x86_64"
     },
     "glib2": {
-      "evra": "2.68.1-1.fc34.x86_64"
+      "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
       "evra": "2.33-8.fc34.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210315-119.fc34.noarch"
+      "evra": "20210511-120.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210315-119.fc34.noarch"
+      "evra": "20210511-120.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-13T20:55:47Z",
+    "generated": "2021-05-15T20:53:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-12T23:21:52Z"
+        "generated": "2021-05-14T19:11:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-13T00:53:41Z"
+        "generated": "2021-05-15T01:28:39Z"
       }
     }
   }

From 455a26aa6c540c834c848e29cbc8c737fb495207 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 17 May 2021 13:03:32 +0000
Subject: [PATCH 0231/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/285/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4aea6b25f9..397f75954a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,7 +133,7 @@
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "0.9.1-4.fc34.x86_64"
+      "evra": "1.0.0-0.1.rc1.fc34.x86_64"
     },
     "containers-common": {
       "evra": "4:1-16.fc34.noarch"
@@ -163,7 +163,7 @@
       "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.19.1-2.fc34.x86_64"
+      "evra": "0.19.1-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -445,7 +445,7 @@
       "evra": "2.13.1-2.fc34.x86_64"
     },
     "jose": {
-      "evra": "10-9.fc34.x86_64"
+      "evra": "11-1.fc34.x86_64"
     },
     "jq": {
       "evra": "1.6-7.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.19-300.fc34.x86_64"
+      "evra": "5.11.20-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.19-300.fc34.x86_64"
+      "evra": "5.11.20-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.19-300.fc34.x86_64"
+      "evra": "5.11.20-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -610,7 +610,7 @@
       "evra": "0.1.6-1.fc34.x86_64"
     },
     "libjose": {
-      "evra": "10-9.fc34.x86_64"
+      "evra": "11-1.fc34.x86_64"
     },
     "libkcapi": {
       "evra": "1.2.1-1.fc34.x86_64"
@@ -691,7 +691,7 @@
       "evra": "0.1.5-47.fc34.x86_64"
     },
     "librepo": {
-      "evra": "1.13.0-1.fc34.x86_64"
+      "evra": "1.14.0-1.fc34.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.14.0-17.fc34.noarch"
@@ -991,7 +991,7 @@
       "evra": "1.18-4.fc34.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-1.fc34.x86_64"
+      "evra": "3.3.17-1.fc34.1.x86_64"
     },
     "protobuf-c": {
       "evra": "1.3.3-7.fc34.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.6-1.fc34.noarch"
+      "evra": "34.7-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.6-1.fc34.noarch"
+      "evra": "34.7-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-15T20:53:44Z",
+    "generated": "2021-05-17T12:28:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-05-14T19:11:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-15T01:28:39Z"
+        "generated": "2021-05-17T02:57:42Z"
       }
     }
   }

From b68d653fe3cc6d8b3571f0feb6e807b89ace76e5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 17 May 2021 10:51:45 -0400
Subject: [PATCH 0232/2157] overrides: fast-track crun-0.19.1-3.fc34

It was erroneously downgraded in Fedora.
https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
---
 manifest-lock.overrides.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 9416e829f6..5954027b54 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -6,3 +6,7 @@ packages:
         evr: 3:3.1.2-3.fc34
     podman-plugins:
         evr: 3:3.1.2-3.fc34
+    # Fast-track crun-0.19.1-3.fc34 It was erroneously downgraded in Fedora.
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
+    crun:
+        evr: 0.19.1-3.fc34

From c0e52cb4854d47e660d28632fb4e7adffb6c1b0a Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Mon, 17 May 2021 14:07:01 -0400
Subject: [PATCH 0233/2157] overrides: fast-track coreos-installer 0.9.1

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5954027b54..03595457e5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,3 +10,9 @@ packages:
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
     crun:
         evr: 0.19.1-3.fc34
+    # Fast-track new coreos-installer release
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-46c72bed26
+    coreos-installer:
+        evr: 0.9.1-1.fc34
+    coreos-installer-bootinfra:
+        evr: 0.9.1-1.fc34

From 0387c930f88857990385e1b45fd68a6d27f7a919 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 18 May 2021 08:21:48 +0000
Subject: [PATCH 0234/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/289/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 397f75954a..def2b1fde3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-16.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.9.0-2.fc34.x86_64"
+      "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.9.0-2.fc34.x86_64"
+      "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreutils": {
       "evra": "8.32-24.fc34.x86_64"
@@ -163,7 +163,7 @@
       "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.19.1-1.fc34.x86_64"
+      "evra": "0.19.1-3.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -814,7 +814,7 @@
       "evra": "0.2.5-5.fc34.x86_64"
     },
     "libzstd": {
-      "evra": "1.4.9-1.fc34.x86_64"
+      "evra": "1.5.0-1.fc34.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-28.fc34.x86_64"
@@ -1117,22 +1117,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.2-1.fc34.x86_64"
+      "evra": "248.3-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.2-1.fc34.x86_64"
+      "evra": "248.3-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.2-1.fc34.x86_64"
+      "evra": "248.3-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.2-1.fc34.x86_64"
+      "evra": "248.3-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.2-1.fc34.noarch"
+      "evra": "248.3-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.2-1.fc34.x86_64"
+      "evra": "248.3-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "1.1.11-1.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.19-1.fc34.x86_64"
+      "evra": "0.0.20-1.fc34.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-17T12:28:40Z",
+    "generated": "2021-05-18T07:54:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-14T19:11:15Z"
+        "generated": "2021-05-17T19:42:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-17T02:57:42Z"
+        "generated": "2021-05-18T00:50:03Z"
       }
     }
   }

From 3fc2e10fc09537f46e229f8ee644af6b12b0a7ec Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 13 Jan 2021 17:00:26 -0500
Subject: [PATCH 0235/2157] ignition-ostree-growfs: don't conditionalize on
 root= karg

Anaconda is long gone now. We do want this service to always run on
first boot, regardless of whether there's a `root=` karg or not. In the
case of multipath, a `root=` karg is expected on first boot.
---
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.service | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index 63e4106160..62d2db692f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -2,9 +2,6 @@
 Description=Ignition OSTree: Grow root filesystem
 DefaultDependencies=false
 ConditionKernelCommandLine=ostree
-# Similar to the other mount rules, suppress invocation if we detect
-# we are running from a legacy setup created by Anaconda.
-ConditionKernelCommandLine=!root
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target
 After=ignition-ostree-mount-firstboot-sysroot.service

From caa586a5f7dc9db58624aee12c24755f7dc0ac85 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 13 Jan 2021 17:04:33 -0500
Subject: [PATCH 0236/2157] ignition-ostree-growfs: fix dependency to sysroot
 mount

In the case of multipath,
`ignition-ostree-mount-firstboot-sysroot.service` won't kick in because
the `root=` karg is already present on first boot. But we still need to
grow the partition and filesystem in that case.

What we really mean here is that the sysroot should already be mounted
before we growfs. Drop the `Requires=` and add `sysroot.mount` to the
list of `After=` so that we cover the case where the sysroot is mounted
via the mount unit generated via systemd-fstab-generator from the
`root=` karg.
---
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.service | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index 62d2db692f..8704894f3b 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -4,8 +4,7 @@ DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target
-After=ignition-ostree-mount-firstboot-sysroot.service
-Requires=ignition-ostree-mount-firstboot-sysroot.service
+After=sysroot.mount ignition-ostree-mount-firstboot-sysroot.service
 # This shouldn't be strictly necessary, but it's cleaner to not have OSTree muck
 # around with moving mounts while we're still resizing the filesystem.
 Before=ostree-prepare-root.service

From 2b22dcb6261c463832dfc4495c34b26fc641f0f2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 10:32:00 -0400
Subject: [PATCH 0237/2157] overlay: convert more unit descriptions to Title
 Case

This is the convention in systemd and in most of our other units.
---
 .../dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service | 2 +-
 .../40ignition-ostree/ignition-ostree-uuid-boot.service         | 2 +-
 .../40ignition-ostree/ignition-ostree-uuid-root.service         | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index 6d873665fb..e70c74e38b 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Generate new UUID for boot disk GPT
+Description=Generate New UUID For Boot Disk GPT
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=no
 Before=local-fs-pre.target systemd-fsck-root.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index bad9ece0ce..6805127e83 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ignition OSTree: Regenerate filesystem UUID (boot)
+Description=Ignition OSTree: Regenerate Filesystem UUID (boot)
 DefaultDependencies=false
 ConditionPathExists=/usr/lib/initrd-release
 ConditionKernelCommandLine=ostree
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index 45da600af0..f9a77c30aa 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ignition OSTree: Regenerate filesystem UUID (root)
+Description=Ignition OSTree: Regenerate Filesystem UUID (root)
 # These conditions match mount-firstboot-sysroot.service
 DefaultDependencies=false
 ConditionKernelCommandLine=!root

From be9e9ecef1507eb93b7fbeb21a9dedf9ee9f6a94 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 10:32:55 -0400
Subject: [PATCH 0238/2157] coreos-gpt-setup: log whether sgdisk was called

Helpful for debugging.
---
 .../dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh  | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index 757d8fe96d..dd62209d48 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -24,7 +24,11 @@ fi
 #  - The PTUUID is empty. This happens on s390x where DASD disks don't
 #    have PTUUID or any of the other traditional partition table
 #    attributes of GPT disks.
-[ "${PTUUID:-}" != "$UNINITIALIZED_GUID" ] && exit 0
+if [ "${PTUUID:-}" != "$UNINITIALIZED_GUID" ]; then
+    echo "Not randomizing disk GUID; found ${PTUUID:-none}"
+    exit 0
+fi
 
+echo "Randomizing disk GUID"
 sgdisk --disk-guid=R --move-second-header "$PKNAME"
 udevadm settle

From 5b96230305b3a1784daa6e94729e06e5509c74f6 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 10:33:58 -0400
Subject: [PATCH 0239/2157] ignition-ostree-uuid-root: also run if root= is
 provided

We want it to run in the multipath case, in which users may provide a
`root=` karg. So drop that condition.

This service is already queued against `ignition-diskful.target` so it
only runs on first boot. It also already correctly does nothing if
somehow the UUID was already changed.
---
 .../40ignition-ostree/ignition-ostree-uuid-root.service          | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index f9a77c30aa..7164aaf5c3 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -2,7 +2,6 @@
 Description=Ignition OSTree: Regenerate Filesystem UUID (root)
 # These conditions match mount-firstboot-sysroot.service
 DefaultDependencies=false
-ConditionKernelCommandLine=!root
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target

From 47cc852b50998cb629050bfbe43c882de98aa030 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 18 May 2021 10:56:26 -0400
Subject: [PATCH 0240/2157] coreos-boot-mount-generator: Move all "exit 0"
 checks to early on

This way it's a lot clearer under which conditions the generator
runs.
---
 .../coreos-boot-mount-generator               | 38 ++++++++++---------
 1 file changed, 20 insertions(+), 18 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index cc8e418d79..ec2d059d77 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -14,13 +14,6 @@ UNIT_DIR="${1:-/tmp}"
     exit 0
 }
 
-add_wants() {
-    local name="$1"; shift
-    local wants_dir="${UNIT_DIR}/local-fs.target.wants"
-    mkdir -p "${wants_dir}"
-    ln -sf "../${name}" "${wants_dir}/${name}"
-}
-
 # If there's already an /etc/fstab entries for /boot, then this is is a non-FCOS
 # system, likely RHCOS pre-4.3 (which still used Anaconda).  In that case, we
 # don't want to overwrite what the systemd-fstab-generator will do.
@@ -28,6 +21,20 @@ if findmnt --fstab /boot &>/dev/null; then
     exit 0
 fi
 
+# Don't create mount units for /boot on live systems.
+# ConditionPathExists won't work here because conditions don't affect
+# the dependency on the underlying device unit.
+if [ -f /run/ostree-live ]; then
+    exit 0
+fi
+
+add_wants() {
+    local name="$1"; shift
+    local wants_dir="${UNIT_DIR}/local-fs.target.wants"
+    mkdir -p "${wants_dir}"
+    ln -sf "../${name}" "${wants_dir}/${name}"
+}
+
 # Generate mount units that work with device mapper. The traditional
 # device unit (dev-disk-by\x2dlabel...) does not work since it is not the
 # device that systemd will fsck. This code ensures that if the label
@@ -68,14 +75,9 @@ EOF
     add_wants "${unit_name}"
 }
 
-# Don't create mount units for /boot on live systems.
-# ConditionPathExists won't work here because conditions don't affect
-# the dependency on the underlying device unit.
-if [ ! -f /run/ostree-live ]; then
-    # We mount read-only by default mostly to protect
-    # against accidental damage.  Only a few things
-    # owned by CoreOS should be touching /boot or the ESP.
-    # Use nodev,nosuid because some hardening guides want
-    # that even though it's of minimal value.
-    mk_mount /boot boot ro,nodev,nosuid
-fi
+# We mount read-only by default mostly to protect
+# against accidental damage.  Only a few things
+# owned by CoreOS should be touching /boot or the ESP.
+# Use nodev,nosuid because some hardening guides want
+# that even though it's of minimal value.
+mk_mount /boot boot ro,nodev,nosuid

From 3f19340ab9c3c9ec35cf79a89a6f2925f12e217c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 18 May 2021 12:28:07 -0400
Subject: [PATCH 0241/2157] live-generator: don't call `man bootup`

Even though it's on a comment line, because it's in a heredoc, bash does
try to execute this. This fails on FCOS thankfully because there is no
`man` on FCOS, but it still logs an error message. (And... any derived
system which does ship `man`, I think this actually would dump the
manpage into the unit.)
---
 .../usr/lib/dracut/modules.d/35coreos-live/live-generator       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index fec5860061..3cdd88fd2a 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -90,7 +90,7 @@ EOF
 DefaultDependencies=false
 # HACK for https://github.com/coreos/fedora-coreos-config/issues/437
 Wants=systemd-udev-settle.service
-# Note that `man bootup` implies that initrd-root-device is After=basic.target
+# Note that bootup(7) implies that initrd-root-device is After=basic.target
 # but that appears to not be the case.  We explicitly order after sysinit.target
 After=sysinit.target
 After=initrd-root-device.target

From 9142419669cbfaa79832b5e0a722c7bd50a7ba0d Mon Sep 17 00:00:00 2001
From: Clement Verna <cverna@tutanota.com>
Date: Wed, 19 May 2021 17:49:13 +0200
Subject: [PATCH 0242/2157] testing-devel: remove podman overrides now that the
 update is in the stable repos

Signed-off-by: Clement Verna <cverna@tutanota.com>
---
 manifest-lock.overrides.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 03595457e5..bf43473571 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,11 +1,4 @@
 packages:
-    # Fast-track 3.1.2-3. Fixes podman selinux labelling regression.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/818
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-aab271bbc8
-    podman:
-        evr: 3:3.1.2-3.fc34
-    podman-plugins:
-        evr: 3:3.1.2-3.fc34
     # Fast-track crun-0.19.1-3.fc34 It was erroneously downgraded in Fedora.
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
     crun:

From 78b5cd7532c52524219562a6f0cb107efb53aeb4 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 18 May 2021 12:21:24 -0400
Subject: [PATCH 0243/2157] udev/90-coreos-device-mapper: Create label links in
 real root too

We're currently gating on `ENV{DM_SUSPENDED}=="Active"` but
`10-dm.rules` does:

```
ENV{DM_SUSPENDED}=="Active", ENV{DM_SUSPENDED}="0"
ENV{DM_SUSPENDED}=="Suspended", ENV{DM_SUSPENDED}="1"
```

So what I think is happening here is that our rule happens to
run before that kicks in, so we make the links once, but not
thereafter.

Change the condition to match what `13-dm-disk.rules` from
LVM is doing.

Also slightly reorder the code and add some comments for extra clarity.
---
 .../lib/udev/rules.d/90-coreos-device-mapper.rules  | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules b/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
index b908be71e9..e2413c3746 100644
--- a/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
+++ b/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
@@ -1,24 +1,27 @@
+# CoreOS-specific symlinks for dm-multipath filesystem labels,
+# used for `label=boot` and `label=root`.
+
 ACTION=="remove", GOTO="dm_label_end"
 SUBSYSTEM!="block", GOTO="dm_label_end"
 KERNEL!="dm-*", GOTO="dm_label_end"
 
 # Ensure that the device mapper target is active
-# And the required attributes exist.
 ENV{DM_ACTIVATION}!="1", GOTO="dm_label_end"
-ENV{ID_FS_LABEL_ENC}!="?*", GOTO="dm_label_end"
-ENV{ID_FS_UUID_ENC}!="?*", GOTO="dm_label_end"
+ENV{DM_SUSPENDED}=="1", GOTO="dm_label_end"
 
 # Only act on filesystems. This should prevent layered devices
 # such as Raid on Multipath devices from appearing.
 ENV{ID_FS_USAGE}!="filesystem", GOTO="dm_label_end"
 
+# And if the filesystem doesn't have a label+uuid, we're done.
+ENV{ID_FS_LABEL_ENC}!="?*", GOTO="dm_label_end"
+ENV{ID_FS_UUID_ENC}!="?*", GOTO="dm_label_end"
+
 # Setup up Multipath labels and UUID's. Match on DM_UUID which
 # is stable regardless of whether friendly names are used or not.
 # 66-kpartx.rules use DM_UUID to match for linear mappings on multipath
 # targets.
 ENV{DM_UUID}=="*mpath*" \
-  , ENV{DM_SUSPENDED}=="Active" \
-  , ENV{DM_TABLES_LOADED}=="Live" \
   , SYMLINK+="disk/by-label/dm-mpath-$env{ID_FS_LABEL_ENC}" \
   , SYMLINK+="disk/by-uuid/dm-mpath-$env{ID_FS_UUID_ENC}"
 

From 508afe35dc498189aa8d9975cca3d5950a98a496 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 18 May 2021 10:55:21 -0400
Subject: [PATCH 0244/2157] coreos-boot-mount-generator: Always use mpath for
 /boot if rd.multipath

If root is on multipath (which is today for CoreOS always `rd.multipath=default`)
then we *know* we must use it for `/boot`.  We're not going to
support "tearing" where `/boot` is on a non-mpath device but
`/` is on mpath.

The current code is I believe racy because at the time the generator
runs (and systemd generators run *early*), we're querying the
"current" properties of the device at
`/dev/disk/by-label/boot`.  But multipathd could still be in
the process of setting up and replacing the target of that
symlink.  This can cause systemd to tear down and reinitialize
the mount, causing races.

https://bugzilla.redhat.com/show_bug.cgi?id=1944660
---
 .../coreos-boot-mount-generator               | 31 ++++++++++---------
 1 file changed, 16 insertions(+), 15 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index ec2d059d77..321bd2e33d 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -41,21 +41,12 @@ add_wants() {
 # is backed by a device-mapper target the dev-mapper.*.device is used.
 mk_mount() {
     local mount_pt="${1}"; shift
-    local label="${1}"; shift
+    local path="${1}"; shift
     local options="${1}"; shift
 
-    local path="/dev/disk/by-label/${label}"
+    local devservice=$(systemd-escape -p ${path} --suffix=service)
     local unit_name=$(systemd-escape -p ${mount_pt} --suffix=mount)
 
-    eval $(udevadm info --query property --export "${path}")
-    device="$(systemd-escape ${path})"
-    if [ "${DM_NAME:-x}" != "x" ]; then
-        path="/dev/mapper/${DM_NAME}"
-        device="$(systemd-escape dev/mapper/${DM_NAME})"
-    fi
-    device="${device//-dev/dev}"
-    echo "coreos-boot-mount-generator: using ${device} for ${label} mount to ${mount_pt}"
-
     cat > "${UNIT_DIR}/${unit_name}" <<EOF
 # Automatically created by coreos-boot-mount-generator
 [Unit]
@@ -63,21 +54,31 @@ Description=CoreOS Dynamic Mount for ${mount_pt}
 Documentation=https://github.com/coreos/fedora-coreos-config
 
 Before=local-fs.target
-Requires=systemd-fsck@${device}.service
-After=systemd-fsck@${device}.service
+Requires=systemd-fsck@${devservice}
+After=systemd-fsck@${devservice}
 
 [Mount]
 What=${path}
 Where=${mount_pt}
 Options=${options}
 EOF
-
     add_wants "${unit_name}"
 }
 
+# If the root device is multipath, hook up /boot to use that too,
+# based on our custom udev rules in 90-coreos-device-mapper.rules
+# that creates "label found on mpath" links.
+# Otherwise, use the usual by-label symlink.
+# See discussion in https://github.com/coreos/fedora-coreos-config/pull/1022
+bootdev=/dev/disk/by-label/boot
+# Yes this isn't a real karg parser but we're trapped in this shell script
+if grep -q rd.multipath /proc/cmdline; then
+    bootdev=/dev/disk/by-label/dm-mpath-boot
+fi
+
 # We mount read-only by default mostly to protect
 # against accidental damage.  Only a few things
 # owned by CoreOS should be touching /boot or the ESP.
 # Use nodev,nosuid because some hardening guides want
 # that even though it's of minimal value.
-mk_mount /boot boot ro,nodev,nosuid
+mk_mount /boot "${bootdev}" ro,nodev,nosuid

From 08e72dfc25ac3b2d95a8b4fdf8e90ff1de383f71 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 19 May 2021 16:15:36 -0400
Subject: [PATCH 0245/2157] overrides: fast-track runc-1.0.0-378.rc95.fc34 for
 CVE-2021-30465 (symlink exchange attack)

---
 manifest-lock.overrides.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index bf43473571..26432de99e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,3 +9,7 @@ packages:
         evr: 0.9.1-1.fc34
     coreos-installer-bootinfra:
         evr: 0.9.1-1.fc34
+    # For CVE-2021-30465 (symlink exchange attack)
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0440f235a0
+    runc:
+        evr: 2:1.0.0-378.rc95.fc34

From 1fc7cd93efc1ffc6762a3b0c65f76c837e5b620b Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 19 May 2021 15:05:35 -0400
Subject: [PATCH 0246/2157] overlay/05core: Add a new
 /usr/lib/coreos/generator-lib.sh

Hopefully in the future we'll create a nice `rdcore` like Rust
place for our generators.

For now let's factor out a little helper library.
---
 .../05core/usr/lib/coreos/generator-lib.sh    | 19 +++++++++++++++++++
 .../coreos-boot-mount-generator               | 10 +++-------
 .../coreos-liveiso-autologin-generator        | 18 +-----------------
 3 files changed, 23 insertions(+), 24 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/coreos/generator-lib.sh

diff --git a/overlay.d/05core/usr/lib/coreos/generator-lib.sh b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
new file mode 100644
index 0000000000..b133e5ac67
--- /dev/null
+++ b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
@@ -0,0 +1,19 @@
+# File intended to be sourced by shell script generators shipped with CoreOS systems
+
+# Generators don't have logging right now
+# https://github.com/systemd/systemd/issues/15638
+exec 1>/dev/kmsg; exec 2>&1
+
+UNIT_DIR="${1:-/tmp}"
+
+have_karg() {
+    local arg="$1"
+    local cmdline=( $(</proc/cmdline) )
+    local i
+    for i in "${cmdline[@]}"; do
+        if [[ "$i" =~ "$arg=" ]]; then
+            return 0
+        fi
+    done
+    return 1
+}
diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index 321bd2e33d..a742ff7751 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -2,11 +2,7 @@
 export PATH="/usr/bin:/usr/sbin:${PATH}"
 set -euo pipefail
 
-# Generators don't have logging right now
-# https://github.com/systemd/systemd/issues/15638
-exec 1>/dev/kmsg; exec 2>&1
-
-UNIT_DIR="${1:-/tmp}"
+. /usr/lib/coreos/generator-lib.sh
 
 # Turn out if you boot with "root=..." $UNIT_DIR is not writable.
 [ -w "${UNIT_DIR}" ] || {
@@ -71,8 +67,8 @@ EOF
 # Otherwise, use the usual by-label symlink.
 # See discussion in https://github.com/coreos/fedora-coreos-config/pull/1022
 bootdev=/dev/disk/by-label/boot
-# Yes this isn't a real karg parser but we're trapped in this shell script
-if grep -q rd.multipath /proc/cmdline; then
+# TODO add equivalent of getargbool() so we handle rd.multipath=0
+if have_karg rd.multipath; then
     bootdev=/dev/disk/by-label/dm-mpath-boot
 fi
 
diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
index aa8e9f4ffd..c49139b315 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
@@ -2,23 +2,7 @@
 
 set -euo pipefail
 
-# Generators don't have logging right now
-# https://github.com/systemd/systemd/issues/15638
-exec 1>/dev/kmsg; exec 2>&1
-
-UNIT_DIR="${1:-/tmp}"
-
-have_karg() {
-    local arg="$1"
-    local cmdline=( $(</proc/cmdline) )
-    local i
-    for i in "${cmdline[@]}"; do
-        if [[ "$i" =~ "$arg=" ]]; then
-            return 0
-        fi
-    done
-    return 1
-}
+. /usr/lib/coreos/generator-lib.sh
 
 write_dropin() {
     local service="$1"; shift

From b6311a040e577e6d3642199342e7cade0dabd602 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 20 May 2021 21:28:10 +0000
Subject: [PATCH 0247/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/296/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index def2b1fde3..6ecb3474d9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-24.fc34.x86_64"
+      "evra": "8.32-26.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-24.fc34.x86_64"
+      "evra": "8.32-26.fc34.x86_64"
     },
     "cpio": {
       "evra": "2.13-10.fc34.x86_64"
@@ -175,7 +175,7 @@
       "evra": "2.3.5-2.fc34.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-5.fc34.x86_64"
+      "evra": "1:2.3.3op2-7.fc34.x86_64"
     },
     "curl": {
       "evra": "7.76.1-2.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.20-300.fc34.x86_64"
+      "evra": "5.11.21-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.20-300.fc34.x86_64"
+      "evra": "5.11.21-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.20-300.fc34.x86_64"
+      "evra": "5.11.21-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1027,7 +1027,7 @@
       "evra": "3.2.3-5.fc34.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.0-377.rc93.fc34.x86_64"
+      "evra": "2:1.0.0-378.rc95.fc34.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.14.4-0.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-18T07:54:30Z",
+    "generated": "2021-05-20T20:54:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-17T19:42:55Z"
+        "generated": "2021-05-19T22:08:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-18T00:50:03Z"
+        "generated": "2021-05-20T00:51:45Z"
       }
     }
   }

From e252ccbf8dbb578858f90dd1805f0290c5f793f5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 24 May 2021 16:22:39 -0400
Subject: [PATCH 0248/2157] overrides: freeze on dracut-053-5.fc34

There are some NetworkManager related changes and possibly others
that are causing failures in our bump-lockfile process. We need
to investigate these issues before promoting dracut-054.

https://github.com/coreos/fedora-coreos-tracker/issues/842
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 26432de99e..0bd4621666 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,4 +1,10 @@
 packages:
+    # Freeze dracut on 053. We need to investigate NetworkManager systemd changes.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/842
+    dracut:
+        evr: 053-5.fc34
+    dracut-network:
+        evr: 053-5.fc34
     # Fast-track crun-0.19.1-3.fc34 It was erroneously downgraded in Fedora.
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
     crun:

From a70a9ee5390221d49ce962388c3a855b3bc8855d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 25 May 2021 01:46:08 +0000
Subject: [PATCH 0249/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/308/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 76 +++++++++++++++++++--------------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6ecb3474d9..21accadb99 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.1-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.11.1-1.fc34.x86_64"
+      "evra": "5.12.1-1.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -88,7 +88,7 @@
       "evra": "0.1.5-4.fc34.x86_64"
     },
     "chrony": {
-      "evra": "4.0-3.fc34.x86_64"
+      "evra": "4.1-1.fc34.x86_64"
     },
     "cifs-utils": {
       "evra": "6.11-3.fc34.x86_64"
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.160.0-2.fc34.noarch"
+      "evra": "2:2.162.1-3.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
@@ -316,7 +316,7 @@
       "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.2-1.fc34.x86_64"
+      "evra": "3.10.3-1.fc34.x86_64"
     },
     "fuse-libs": {
       "evra": "2.9.9-11.fc34.x86_64"
@@ -328,10 +328,10 @@
       "evra": "3.7.1-2.fc34.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.2-1.fc34.x86_64"
+      "evra": "3.10.3-1.fc34.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.2-1.fc34.x86_64"
+      "evra": "3.10.3-1.fc34.x86_64"
     },
     "fwupd": {
       "evra": "1.5.9-2.fc34.x86_64"
@@ -424,7 +424,7 @@
       "evra": "1.8.7-3.fc34.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.7-7.fc34.x86_64"
+      "evra": "1.8.7-8.fc34.x86_64"
     },
     "iputils": {
       "evra": "20210202-2.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.11.21-300.fc34.x86_64"
+      "evra": "5.12.6-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.11.21-300.fc34.x86_64"
+      "evra": "5.12.6-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.11.21-300.fc34.x86_64"
+      "evra": "5.12.6-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -490,7 +490,7 @@
       "evra": "0.8.5-4.fc34.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.1-3.fc34.x86_64"
+      "evra": "1.19.1-8.fc34.x86_64"
     },
     "less": {
       "evra": "581.2-1.fc34.x86_64"
@@ -592,19 +592,19 @@
       "evra": "0.3.6-1.fc34.x86_64"
     },
     "libibverbs": {
-      "evra": "34.0-3.fc34.x86_64"
+      "evra": "35.0-1.fc34.x86_64"
     },
     "libicu": {
       "evra": "67.1-6.fc34.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.0-5.fc34.x86_64"
+      "evra": "2.3.1-1.fc34.x86_64"
     },
     "libini_config": {
       "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.x86_64"
@@ -622,7 +622,7 @@
       "evra": "1.5.0-2.fc34.x86_64"
     },
     "libldb": {
-      "evra": "2.3.0-1.fc34.x86_64"
+      "evra": "2.3.0-2.fc34.x86_64"
     },
     "libluksmeta": {
       "evra": "9-10.fc34.x86_64"
@@ -739,16 +739,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "libstdc++": {
       "evra": "11.1.1-1.fc34.x86_64"
@@ -772,7 +772,7 @@
       "evra": "0.21-4.fc34.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.1-1.rc2.fc34.x86_64"
+      "evra": "1.3.2-0.fc34.x86_64"
     },
     "libunistring": {
       "evra": "0.9.10-10.fc34.x86_64"
@@ -781,7 +781,7 @@
       "evra": "1.0.24-2.fc34.x86_64"
     },
     "libuser": {
-      "evra": "0.63-1.fc34.x86_64"
+      "evra": "0.63-3.fc34.x86_64"
     },
     "libutempter": {
       "evra": "1.2.1-4.fc34.x86_64"
@@ -805,7 +805,7 @@
       "evra": "4.4.20-2.fc34.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.10-12.fc34.x86_64"
+      "evra": "2.9.12-2.fc34.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.0-1.fc34.x86_64"
@@ -1006,7 +1006,7 @@
       "evra": "8.1-2.fc34.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.5-5.rc1.fc34.4.x86_64"
+      "evra": "1.2.6-0.fc34.x86_64"
     },
     "rpm": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.4-3.fc34.x86_64"
+      "evra": "2021.5-1.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.4-3.fc34.x86_64"
+      "evra": "2021.5-1.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1087,28 +1087,28 @@
       "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.4.2-3.fc34.x86_64"
+      "evra": "2.5.0-2.fc34.x86_64"
     },
     "stalld": {
       "evra": "1.10-1.fc34.x86_64"
@@ -1147,7 +1147,7 @@
       "evra": "5.0-2.fc34.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.0.3-2.fc34.x86_64"
+      "evra": "3.1.0-1.fc34.x86_64"
     },
     "tzdata": {
       "evra": "2021a-1.fc34.noarch"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2846-1.fc34.x86_64"
+      "evra": "2:8.2.2875-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-20T20:54:20Z",
+    "generated": "2021-05-25T01:18:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-19T22:08:56Z"
+        "generated": "2021-05-24T22:16:16Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-20T00:51:45Z"
+        "generated": "2021-05-25T01:01:15Z"
       }
     }
   }

From aa16ec31d3986cc85ebc26e885ae0d60e2d3bb27 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 25 May 2021 11:37:43 -0400
Subject: [PATCH 0250/2157] move to cgroups v2 everywhere

Adjust the kernel arguments so that we're now using cgroups v2
in our testing-devel (and subsequently, testing and stable) stream(s).

Context: https://github.com/coreos/fedora-coreos-tracker/issues/292
---
 image.yaml         |  5 -----
 tests/kola/misc-ro | 25 +++++++------------------
 2 files changed, 7 insertions(+), 23 deletions(-)

diff --git a/image.yaml b/image.yaml
index 8f79a3abde..1bf800cca2 100644
--- a/image.yaml
+++ b/image.yaml
@@ -2,8 +2,3 @@
 # similarly to manifest.yaml. Unlike image-base.yaml, which is shared by all
 # streams.
 include: image-base.yaml
-
-extra-kargs:
-    # https://github.com/coreos/fedora-coreos-tracker/issues/292
-    # https://fedoraproject.org/wiki/Changes/CGroupsV2
-    - systemd.unified_cgroup_hierarchy=0
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 4e132e21db..b30542d356 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -144,25 +144,14 @@ if ! grep prjquota <<< "${rootflags}"; then
 fi
 ok "root mounted with prjquota"
 
+# make sure the system is on cgroups v2
 has_cgroup_karg=1
 grep -q systemd.unified_cgroup_hierarchy /proc/cmdline || has_cgroup_karg=0
 sys_fs_cgroup_source=$(findmnt -no SOURCE /sys/fs/cgroup)
 stream=$(rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
-case "$stream" in
-    "testing-devel" | "testing" | "stable")
-        if [ $has_cgroup_karg == 0 ]; then
-            fatal "missing systemd.unified_cgroup_hierarchy=0"
-        fi
-        if [[ $sys_fs_cgroup_source != tmpfs ]]; then
-            fatal "/sys/fs/cgroup is not tmpfs"
-        fi
-        ;;
-    *)
-        if [ $has_cgroup_karg == 1 ]; then
-            fatal "found systemd.unified_cgroup_hierarchy=0"
-        fi
-        if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
-            fatal "/sys/fs/cgroup is not cgroup2"
-        fi
-        ;;
-esac
+if [ $has_cgroup_karg == 1 ]; then
+    fatal "found systemd.unified_cgroup_hierarchy=0"
+fi
+if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
+    fatal "/sys/fs/cgroup is not cgroup2"
+fi

From c9be4ca5cc1460e8e9255a5f20507bec64a9700e Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Thu, 1 Apr 2021 12:04:30 -0400
Subject: [PATCH 0251/2157] overlay: helper service for warning about cgroupsv1

This will check if a system is still using cgroupsv1 and generate a
message to be printed as part of CLHM.

Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 .../lib/systemd/system-preset/45-fcos.preset  |  2 ++
 .../system/coreos-check-cgroups.service       | 11 ++++++++
 .../usr/libexec/coreos-check-cgroups.sh       | 25 +++++++++++++++++++
 3 files changed, 38 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
 create mode 100755 overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index 54c813d3fa..d153b69b73 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,3 +3,5 @@ enable fedora-coreos-pinger.service
 # Provide information if no ignition is provided
 enable coreos-check-ignition-config.service
 enable coreos-check-ssh-keys.service
+# Check if cgroupsv1 is still being used
+enable coreos-check-cgroups.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
new file mode 100644
index 0000000000..ceeb3edd64
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
@@ -0,0 +1,11 @@
+# This service is used for printing a message if
+# cgroups v1 is still being used
+[Unit]
+Description=Check if cgroupsv1 is still being used
+ConditionControlGroupController=v1
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-check-cgroups.sh
+RemainAfterExit=yes
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh b/overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh
new file mode 100755
index 0000000000..39a68b7178
--- /dev/null
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/bash
+# This script checks if the system is still using cgroups v1
+# and prints a message to the serial console.
+
+# Change the output color to yellow
+warn=$(echo -e '\033[0;33m')
+# No color
+nc=$(echo -e '\033[0m')
+
+motd_path=/run/motd.d/30_cgroupsv1_warning.motd
+
+cat << EOF > "${motd_path}"
+${warn}
+############################################################################
+WARNING: This system is using cgroups v1. For increased reliability
+it is strongly recommended to migrate this system and your workloads
+to use cgroups v2. For instructions on how to adjust kernel arguments
+to use cgroups v2, see:
+https://docs.fedoraproject.org/en-US/fedora-coreos/kernel-args/
+
+To disable this warning, use:
+sudo systemctl disable coreos-check-cgroups.service
+############################################################################
+${nc}
+EOF

From ac2645a79cc6e5839a855a6ad8f00f3a2570e8ea Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 26 May 2021 21:18:32 +0000
Subject: [PATCH 0252/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/310/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 21accadb99..bdf37a8b15 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2875-1.fc34.x86_64"
+      "evra": "2:8.2.2879-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "1.1.11-1.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.20-1.fc34.x86_64"
+      "evra": "0.0.21-1.fc34.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-25T01:18:06Z",
+    "generated": "2021-05-26T20:53:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-24T22:16:16Z"
+        "generated": "2021-05-25T01:53:18Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-25T01:01:15Z"
+        "generated": "2021-05-26T00:54:05Z"
       }
     }
   }

From f0a776d1235620e7371795a3a14fac71e6ec1fd1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 26 May 2021 17:36:00 -0400
Subject: [PATCH 0253/2157] overrides: fast-track ignition-2.10.1-3.fc34

For firstboot multipath support:
https://github.com/coreos/fedora-coreos-config/pull/1011
---
 manifest-lock.overrides.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 0bd4621666..3548cf3136 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,7 @@ packages:
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0440f235a0
     runc:
         evr: 2:1.0.0-378.rc95.fc34
+    # For firstboot multipath
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
+    ignition:
+        evr: 2.10.1-3.fc34

From 175a350f8d65a7831be971dddfa1932fc3d9c67b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Thu, 27 May 2021 16:41:10 +0200
Subject: [PATCH 0254/2157] manifests: Move crun to fedora-coreos-base

crun was explicitely included in [1] for Fedora CoreOS but we don't use
it in RHCOS for now as we default to runc [2] so this moves it to the
fedora-coreos-base manifest to make it FCOS only.

[1] https://github.com/coreos/fedora-coreos-config/commit/45b01675f9139aacf306830e5fda0a1c5d454b65
[2] https://github.com/openshift/os/commit/80aa676918965abd2c5f47415d70d8ceb55f2129
---
 manifests/fedora-coreos-base.yaml | 2 ++
 manifests/user-experience.yaml    | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 5b80174c53..524c56f042 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -115,6 +115,8 @@ postprocess:
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
 packages:
+  # Container tooling
+  - crun
   # Security
   - polkit
   # System setup
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 93d961dc83..1874669071 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -28,7 +28,6 @@ packages:
   # Remote Access
   - openssh-clients openssh-server
   # Container tooling
-  - crun
   - podman
   - runc
   - skopeo

From 39c9e73f92c5f7b146ad745061054ff76e649a09 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 10:45:52 -0400
Subject: [PATCH 0255/2157] Add support for multipath on firstboot

As we've learned in https://bugzilla.redhat.com/show_bug.cgi?id=1954025,
we can't assume that we can use any individual path before multipathd
unifies them. This means that it's not correct to turn it on from the
second boot onwards only, which is the current approach.

So we need to support multipath at first boot, and further, we need to
delay all I/O to the boot disk to *after* multipathd takes ownership.

This patch does this by introducing a generator and a target. We need to
use a target because `After=multipathd.service` is not enough to ensure
that multipathd finished setting up the devices. The target explicitly
waits for the multipathed boot device to appear. (Note though that we
*can't* assume that root is also directly on top of the multipath device
because of LUKS-on-root.)

This creates an awkward UX, which is that multipath is the only root
setup option which is *not* driven by Ignition but instead set up behind
its back.

This will be somewhat better once Ignition supports kernel arguments,
because the `rd.multipath` karg can be fed that way. But long-term, we
should consider teaching Ignition to configure multipath devices. This
would fix the configuration problem (right now, we only support
first-booting with default configs), and would free users from adding
the necessary kargs, which would be done by the rootmap code as usual.

But still, even in that world, there's a gap where the Ignition config
could be on the boot device, in which case multipathd would need to be
turned on beforehand.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1954025
---
 .../coreos-boot-edit.service                  |  2 ++
 .../coreos-gpt-setup.service                  |  3 ++
 .../coreos-multipath-generator                | 30 +++++++++++++++++++
 .../coreos-multipath-trigger.service          | 19 ++++++++++++
 .../coreos-multipath-wait.target              | 17 +++++++++++
 .../35coreos-multipath/module-setup.sh        |  9 ++++++
 .../coreos-copy-firstboot-network.service     |  3 ++
 7 files changed, 83 insertions(+)
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-generator
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-trigger.service
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
index 99a28563c2..b51059f008 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
@@ -14,6 +14,8 @@ Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
 # Start after Ignition has finished
 After=ignition-files.service
+# As above, this isn't strictly necessary, but on principle.
+After=coreos-multipath-wait.target
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index e70c74e38b..b9fad50ce7 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -19,6 +19,9 @@ After=systemd-udevd.service
 # unit.
 Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
+# And since the boot device may be on multipath; optionally wait for it to
+# appear via the dynamic target.
+After=coreos-multipath-wait.target
 
 # Run before services that use device nodes, preventing them from racing
 # with udev activity generated by sgdisk
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-generator
new file mode 100755
index 0000000000..7165620fb1
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-generator
@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# Generators don't have logging right now
+# https://github.com/systemd/systemd/issues/15638
+exec 1>/dev/kmsg; exec 2>&1
+
+command -v getargbool >/dev/null || . /usr/lib/dracut-lib.sh
+
+set -e
+
+if is-live-image; then
+    exit 0
+fi
+
+UNIT_DIR="${1:-/tmp}"
+
+add_requires() {
+    local name="$1"; shift
+    local target="$1"; shift
+    local requires_dir="${UNIT_DIR}/${target}.requires"
+    mkdir -p "${requires_dir}"
+    ln -sf "../${name}" "${requires_dir}/${name}"
+}
+
+if getargbool 0 rd.multipath; then
+    add_requires coreos-multipath-wait.target initrd.target
+    if ! getargbool 0 ignition.firstboot; then
+        add_requires coreos-multipath-trigger.service initrd.target
+    fi
+fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-trigger.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-trigger.service
new file mode 100644
index 0000000000..524dc9140e
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-trigger.service
@@ -0,0 +1,19 @@
+# This unit is needed in the LUKS-on-multipath case on subsequent boots. When
+# multipathd takes ownership of the individual paths, the by-uuid/ symlink
+# which systemd-cryptsetup@.service binds to gets lost. So we retrigger udev
+# here to make sure it's re-added.
+#
+# This is tracked at:
+# https://bugzilla.redhat.com/show_bug.cgi?id=1963242
+
+[Unit]
+Description=CoreOS Trigger Multipath
+DefaultDependencies=false
+Requires=coreos-multipath-wait.target
+After=coreos-multipath-wait.target
+Before=cryptsetup-pre.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/sbin/udevadm trigger --settle --subsystem-match block
+RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
new file mode 100644
index 0000000000..cf24cd6f57
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -0,0 +1,17 @@
+[Unit]
+Description=CoreOS Wait For Multipathed Boot
+DefaultDependencies=false
+Before=dracut-initqueue.service
+After=dracut-cmdline.service
+Requires=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
+After=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
+Requires=multipathd.service
+After=multipathd.service
+
+# This is already enforced transitively by coreos-gpt-setup.service, but since
+# it's an external unit, let's be more explicit and list it directly here too.
+Before=ignition-setup-user.service
+
+# This is already enforced by coreos-multipath-trigger.service, though ideally
+# eventually we can get rid of that one and then we *would* need this.
+Before=cryptsetup-pre.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
index c0257fd066..4ab4bc4006 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
@@ -16,4 +16,13 @@ install() {
         "/usr/sbin/coreos-propagate-multipath-conf"
 
     install_ignition_unit coreos-propagate-multipath-conf.service subsequent
+
+    inst_simple "$moddir/coreos-multipath-generator" \
+        "$systemdutildir/system-generators/coreos-multipath-generator"
+
+    # we don't enable these; they're enabled dynamically via the generator
+    inst_simple "$moddir/coreos-multipath-wait.target" \
+        "$systemdsystemunitdir/coreos-multipath-wait.target"
+    inst_simple "$moddir/coreos-multipath-trigger.service" \
+        "$systemdsystemunitdir/coreos-multipath-trigger.service"
 }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 0a78add956..e2b8588506 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -40,6 +40,9 @@ After=coreos-gpt-setup.service
 # Since we are mounting /boot/, require the device first
 Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
+# And since the boot device may be on multipath; optionally wait for it to
+# appear via the dynamic target.
+After=coreos-multipath-wait.target
 # Need to run after coreos-enable-network since it may re-run the NM cmdline
 # hook which will generate NM configs from the network kargs, but we want to
 # have precedence.

From 4664e64f1e5a44d427c37e0010e79b09953c622f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 11:13:11 -0400
Subject: [PATCH 0256/2157] coreos-gpt-setup: add support for multipath

`lsblk` doesn't know how to query the `PKNAME` and `PTUUID` on multipath
devices, so handle that case.
---
 .../35coreos-ignition/coreos-gpt-setup.sh     | 28 ++++++++++++-------
 1 file changed, 18 insertions(+), 10 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index dd62209d48..ee2fc4f4c0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -6,17 +6,25 @@ set -euo pipefail
 
 UNINITIALIZED_GUID='00000000-0000-4000-a000-000000000001'
 
-# On RHEL 8 the version of lsblk doesn't have PTUUID. Let's detect
-# if lsblk supports it. In the future we can remove the 'if' and
-# just use the 'else'.
-if ! lsblk --help | grep -q PTUUID; then
-    # Get the PKNAME
-    eval $(lsblk --output PKNAME --pairs --paths --nodeps "$1")
-    # Get the PTUUID
-    eval $(blkid -o export $PKNAME)
+# If it's on multipath, get the parent device from udev properties.
+DM_MPATH=$(eval $(udevadm info --query property --export "$1") && echo "${DM_MPATH:-}")
+
+if [ -n "${DM_MPATH:-}" ]; then
+    PKNAME=/dev/mapper/$DM_MPATH
+    PTUUID=$(eval $(udevadm info --query property --export "$PKNAME") && echo "${ID_PART_TABLE_UUID:-}")
 else
-    # PTUUID is the disk guid, PKNAME is the parent kernel name
-    eval $(lsblk --output PTUUID,PKNAME --pairs --paths --nodeps "$1")
+    # On RHEL 8 the version of lsblk doesn't have PTUUID. Let's detect
+    # if lsblk supports it. In the future we can remove the 'if' and
+    # just use the 'else'.
+    if ! lsblk --help | grep -q PTUUID; then
+        # Get the PKNAME
+        eval $(lsblk --output PKNAME --pairs --paths --nodeps "$1")
+        # Get the PTUUID
+        eval $(blkid -o export $PKNAME)
+    else
+        # PTUUID is the disk guid, PKNAME is the parent kernel name
+        eval $(lsblk --output PTUUID,PKNAME --pairs --paths --nodeps "$1")
+    fi
 fi
 
 # Skip in the following two cases:

From 8796041ac8284818edb3b8d42fece5f2e0f7fdca Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 May 2021 11:14:56 -0400
Subject: [PATCH 0257/2157] ignition-ostree-growfs: add support for multipath

We need special handling here to grow multipathed devices. The `sfdisk`
line is the same as was added in #392.
---
 .../40ignition-ostree/ignition-ostree-growfs.sh     | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 9b629b0194..2dfaf13d00 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -68,9 +68,16 @@ while true; do
     MAJMIN=$(echo $(lsblk -dno MAJ:MIN "${NAME}"))
     case "${TYPE}" in
         part)
-            partnum=$(cat "/sys/dev/block/${MAJMIN}/partition")
-            # XXX: ideally this'd be idempotent and we wouldn't `|| :`
-            growpart "${PKNAME}" "${partnum}" || :
+            eval $(udevadm info --query property --export "${current_blkdev}" | grep ^DM_ || :)
+            if [ -n "${DM_MPATH:-}" ]; then
+                # Since growpart does not understand device mapper, we have to use sfdisk.
+                echo ", +" | sfdisk --no-reread --no-tell-kernel --force -N "${DM_PART}" "/dev/mapper/${DM_MPATH}"
+                udevadm settle # Wait for udev-triggered kpartx to update mappings
+            else
+                partnum=$(cat "/sys/dev/block/${MAJMIN}/partition")
+                # XXX: ideally this'd be idempotent and we wouldn't `|| :`
+                growpart "${PKNAME}" "${partnum}" || :
+            fi
             ;;
         crypt)
             # XXX: yuck... we need to expose this sanely in clevis

From 0d85ee2d942409410e7f88dfeeafb23dba9aa46e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 21 May 2021 13:41:44 -0400
Subject: [PATCH 0258/2157] udev/90-coreos-device-mapper: ignore DM_ACTIVATION

We shouldn't conditionalize on `DM_ACTIVATION` here. It's used by device
mapper to differentiate between different types of events, but it
doesn't mean the device isn't active.

For example, in a multipath "reload" event, `DM_ACTIVATION` will be 0,
and the symlinks shouldn't flicker through this.

This fixes udev CHANGE events (e.g. from a partition table reread)
sometimes causing our multipath symlinks to go away even if the
multipath devices themselves are completely fine.

See: https://sourceware.org/git/?p=lvm2.git;a=blob;f=udev/10-dm.rules.in;h=b4fa52ab766effb04fc198fd52e6181ad5758eef;hb=HEAD#l91
See: https://github.com/opensvc/multipath-tools/blob/23a01fa679481ff1144139222fbd2c4c863b78f8/multipath/11-dm-mpath.rules#L49
---
 .../05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules    | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules b/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
index e2413c3746..385f262437 100644
--- a/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
+++ b/overlay.d/05core/usr/lib/udev/rules.d/90-coreos-device-mapper.rules
@@ -6,7 +6,6 @@ SUBSYSTEM!="block", GOTO="dm_label_end"
 KERNEL!="dm-*", GOTO="dm_label_end"
 
 # Ensure that the device mapper target is active
-ENV{DM_ACTIVATION}!="1", GOTO="dm_label_end"
 ENV{DM_SUSPENDED}=="1", GOTO="dm_label_end"
 
 # Only act on filesystems. This should prevent layered devices

From 35b1a3a445fc9b8dda051265db33d1d2508eff99 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 27 May 2021 09:42:46 -0400
Subject: [PATCH 0259/2157] ci: abbreviate testiso directory and artifacts

By design, `kola testiso` exercises the metal path. So adding "metal" to
the filenames of things is redundant.
---
 .cci.jenkinsfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 5e7f1a6c29..ff9ab8578f 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -38,10 +38,10 @@ cosaPod {
     stage("Test ISO") {
         shwrap("cd /srv/fcos && cosa buildextend-live")
         try {
-            shwrap("cd /srv/fcos && kola testiso -S --scenarios pxe-install,pxe-offline-install,iso-install,iso-offline-install --output-dir tmp/kola-testiso-metal")
+            shwrap("cd /srv/fcos && kola testiso -S --scenarios pxe-install,pxe-offline-install,iso-install,iso-offline-install --output-dir tmp/kola-testiso")
         } finally {
-            shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso-metal/ | xz -c9 > ${env.WORKSPACE}/kola-testiso-metal.tar.xz")
-            archiveArtifacts allowEmptyArchive: true, artifacts: 'kola-testiso-metal.tar.xz'
+            shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso/ | xz -c9 > ${env.WORKSPACE}/kola-testiso.tar.xz")
+            archiveArtifacts allowEmptyArchive: true, artifacts: 'kola-testiso.tar.xz'
         }
     }
 

From cf0e29e14f708d4cc401a3d01411f4b05d82474c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 27 May 2021 09:44:19 -0400
Subject: [PATCH 0260/2157] ci: run iso-offline-install using --qemu-multipath

This exercises the new support for multipath on firstboot:
https://github.com/coreos/fedora-coreos-config/pull/1011
---
 .cci.jenkinsfile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index ff9ab8578f..0c5ffc4eac 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -38,9 +38,10 @@ cosaPod {
     stage("Test ISO") {
         shwrap("cd /srv/fcos && cosa buildextend-live")
         try {
-            shwrap("cd /srv/fcos && kola testiso -S --scenarios pxe-install,pxe-offline-install,iso-install,iso-offline-install --output-dir tmp/kola-testiso")
+            shwrap("cd /srv/fcos && kola testiso -S --scenarios pxe-install,pxe-offline-install,iso-install --output-dir tmp/kola-testiso")
+            shwrap("cd /srv/fcos && kola testiso -S --scenarios iso-offline-install --qemu-multipath --output-dir tmp/kola-testiso-mpath")
         } finally {
-            shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso/ | xz -c9 > ${env.WORKSPACE}/kola-testiso.tar.xz")
+            shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso/ tmp/kola-testiso-mpath/ | xz -c9 > ${env.WORKSPACE}/kola-testiso.tar.xz")
             archiveArtifacts allowEmptyArchive: true, artifacts: 'kola-testiso.tar.xz'
         }
     }

From 1a7a533e473f620fcdcc43880a47d47c5406c696 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 May 2021 21:21:44 +0000
Subject: [PATCH 0261/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/311/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bdf37a8b15..1c7753f6f0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -403,7 +403,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.10.1-1.fc34.x86_64"
+      "evra": "2.10.1-3.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-26T20:53:30Z",
+    "generated": "2021-05-27T20:55:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-25T01:53:18Z"
+        "generated": "2021-05-27T14:45:44Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-26T00:54:05Z"
+        "generated": "2021-05-27T00:27:13Z"
       }
     }
   }

From 289534726678ba9ad8db572d599bb44ba0e94618 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 28 May 2021 21:19:18 +0000
Subject: [PATCH 0262/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/312/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1c7753f6f0..6f6aafb693 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -178,7 +178,7 @@
       "evra": "1:2.3.3op2-7.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-2.fc34.x86_64"
+      "evra": "7.76.1-3.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.6-300.fc34.x86_64"
+      "evra": "5.12.7-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.6-300.fc34.x86_64"
+      "evra": "5.12.7-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.6-300.fc34.x86_64"
+      "evra": "5.12.7-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -481,10 +481,10 @@
       "evra": "1.6.1-2.fc34.x86_64"
     },
     "kmod": {
-      "evra": "28-2.fc34.x86_64"
+      "evra": "29-2.fc34.x86_64"
     },
     "kmod-libs": {
-      "evra": "28-2.fc34.x86_64"
+      "evra": "29-2.fc34.x86_64"
     },
     "kpartx": {
       "evra": "0.8.5-4.fc34.x86_64"
@@ -541,7 +541,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-2.fc34.x86_64"
+      "evra": "7.76.1-3.fc34.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.x86_64"
@@ -556,7 +556,7 @@
       "evra": "0.3.8-5.fc34.x86_64"
     },
     "libedit": {
-      "evra": "3.1-36.20210419cvs.fc34.x86_64"
+      "evra": "3.1-37.20210522cvs.fc34.x86_64"
     },
     "libevent": {
       "evra": "2.1.12-3.fc34.x86_64"
@@ -589,7 +589,7 @@
       "evra": "236-1.fc34.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.6-1.fc34.x86_64"
+      "evra": "0.3.7-1.fc34.x86_64"
     },
     "libibverbs": {
       "evra": "35.0-1.fc34.x86_64"
@@ -694,7 +694,7 @@
       "evra": "1.14.0-1.fc34.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.14.0-17.fc34.noarch"
+      "evra": "2.15.1-1.fc34.noarch"
     },
     "libseccomp": {
       "evra": "2.5.0-4.fc34.x86_64"
@@ -808,7 +808,7 @@
       "evra": "2.9.12-2.fc34.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.0-1.fc34.x86_64"
+      "evra": "0.3.2-1.fc34.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-5.fc34.x86_64"
@@ -868,7 +868,7 @@
       "evra": "78.10.0-1.fc34.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-6.fc34.x86_64"
+      "evra": "4.1.0-7.fc34.x86_64"
     },
     "ncurses": {
       "evra": "6.2-4.20200222.fc34.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.7-1.fc34.noarch"
+      "evra": "34.8-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.7-1.fc34.noarch"
+      "evra": "34.8-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-27T20:55:03Z",
+    "generated": "2021-05-28T20:53:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-05-27T14:45:44Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-27T00:27:13Z"
+        "generated": "2021-05-28T00:52:10Z"
       }
     }
   }

From adb618327f29f113214a7769186fcb681b11186d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 May 2021 21:19:40 +0000
Subject: [PATCH 0263/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/313/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6f6aafb693..1a43545b8b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1180,7 +1180,7 @@
       "evra": "2.1.0-16.fc34.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.11-1.fc34.x86_64"
+      "evra": "1.1.14-1.fc34.x86_64"
     },
     "zincati": {
       "evra": "0.0.21-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-28T20:53:48Z",
+    "generated": "2021-05-29T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-27T14:45:44Z"
+        "generated": "2021-05-28T21:27:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-28T00:52:10Z"
+        "generated": "2021-05-29T00:50:08Z"
       }
     }
   }

From e377a1b82a4452cd686ea1cd097d1c59beb9c12b Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 2 Jun 2021 02:57:09 -0500
Subject: [PATCH 0264/2157] overrides: drop graduated overrides

---
 manifest-lock.overrides.yaml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3548cf3136..73b05dbca8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -5,20 +5,6 @@ packages:
         evr: 053-5.fc34
     dracut-network:
         evr: 053-5.fc34
-    # Fast-track crun-0.19.1-3.fc34 It was erroneously downgraded in Fedora.
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-316efff8f2
-    crun:
-        evr: 0.19.1-3.fc34
-    # Fast-track new coreos-installer release
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-46c72bed26
-    coreos-installer:
-        evr: 0.9.1-1.fc34
-    coreos-installer-bootinfra:
-        evr: 0.9.1-1.fc34
-    # For CVE-2021-30465 (symlink exchange attack)
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-0440f235a0
-    runc:
-        evr: 2:1.0.0-378.rc95.fc34
     # For firstboot multipath
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
     ignition:

From 826658a13a2eb9dfce9fba4af2dce20d4acb2055 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 2 Jun 2021 09:44:10 -0400
Subject: [PATCH 0265/2157] tests/kdump: New kdump test

We should have done this from the very start.  I hit a few issues
here:

- Docs are missing the requirement for a `root` karg
- cosa needs patching to ignore the crash on the console
---
 tests/kola/kdump/test.sh | 50 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100755 tests/kola/kdump/test.sh

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
new file mode 100755
index 0000000000..6f46278580
--- /dev/null
+++ b/tests/kola/kdump/test.sh
@@ -0,0 +1,50 @@
+#!/bin/bash
+set -xeuo pipefail
+# https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
+# kola: {"minMemory": 4096, "tags": "skip-base-checks"}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      rhelver=$(. /etc/os-release && echo ${RHEL_VERSION:-})
+      if test -n "${rhelver}"; then
+        rhelminor=$(echo "${rhelver}" | cut -f 2 -d '.')
+        if test '!' -w /boot && test "${rhelminor}" -lt "5"; then
+          mkdir -p /etc/systemd/system/kdump.service.d
+          cat > /etc/systemd/system/kdump.service.d/rw.conf << 'EOF'
+[Service]
+ExecStartPre=mount -o remount,rw /boot
+EOF
+        fi
+      fi
+      rpm-ostree kargs --append='crashkernel=300M'
+      systemctl enable kdump.service
+      /tmp/autopkgtest-reboot setcrashkernel
+      ;;
+  setcrashkernel)
+      /tmp/autopkgtest-reboot-prepare aftercrash
+      echo "Triggering sysrq"
+      sync
+      echo 1 > /proc/sys/kernel/sysrq
+      # This one will trigger kdump, which will write the kernel core, then reboot.
+      echo c > /proc/sysrq-trigger
+      # We shouldn't reach this point
+      sleep 5
+      fatal "failed to invoke sysrq"
+      ;;
+  aftercrash)
+      kcore=$(find /var/crash -type f -name vmcore)
+      if test -z "${kcore}"; then
+        fatal "No kcore found in /var/crash"
+      fi
+      info=$(file ${kcore})
+      if ! [[ "${info}" =~ 'vmcore: Kdump'.*'system Linux' ]]; then
+        fatal "vmcore does not appear to be a Kdump?"
+      fi
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From 5e71732655611384d77c150cd9bf4bde5bf1a2b6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 6 Jun 2021 14:32:13 -0400
Subject: [PATCH 0266/2157] overrides: freeze on selinux-policy-34.8-1.fc34

The new one causes issues and has taken too long to get a fix.
https://github.com/coreos/fedora-coreos-tracker/issues/850

Let's unblock the lockfile bumper.
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 73b05dbca8..50fe1498fa 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -5,6 +5,12 @@ packages:
         evr: 053-5.fc34
     dracut-network:
         evr: 053-5.fc34
+    # Freeze selinux-policy so we can unblock bumping lockfiles
+    # https://github.com/coreos/fedora-coreos-tracker/issues/850
+    selinux-policy:
+        evra: 34.8-1.fc34.noarch
+    selinux-policy-targeted:
+        evra: 34.8-1.fc34.noarch
     # For firstboot multipath
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
     ignition:

From 025c1248e2b18c71e29b9c54d18b138c2b38e526 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 6 Jun 2021 14:33:14 -0400
Subject: [PATCH 0267/2157] bump lockfile with latest rpm content

This allows us to skip a cycle and get the content faster than
waiting on the bot to do it.
---
 manifest-lock.x86_64.json | 54 +++++++++++++++++++--------------------
 1 file changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1a43545b8b..005c927bb0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.162.1-3.fc34.noarch"
+      "evra": "2:2.162.2-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
@@ -169,10 +169,10 @@
       "evra": "20210213-1.git5c710c0.fc34.noarch"
     },
     "cryptsetup": {
-      "evra": "2.3.5-2.fc34.x86_64"
+      "evra": "2.3.6-1.fc34.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.3.5-2.fc34.x86_64"
+      "evra": "2.3.6-1.fc34.x86_64"
     },
     "cups-libs": {
       "evra": "1:2.3.3op2-7.fc34.x86_64"
@@ -250,13 +250,13 @@
       "evra": "37-15.fc34.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.183-1.fc34.noarch"
+      "evra": "0.185-2.fc34.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.183-1.fc34.x86_64"
+      "evra": "0.185-2.fc34.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.183-1.fc34.x86_64"
+      "evra": "0.185-2.fc34.x86_64"
     },
     "ethtool": {
       "evra": "2:5.12-1.fc34.x86_64"
@@ -304,7 +304,7 @@
       "evra": "1:4.8.0-2.fc34.x86_64"
     },
     "firewalld-filesystem": {
-      "evra": "0.9.3-2.fc34.noarch"
+      "evra": "0.9.3-3.fc34.noarch"
     },
     "flatpak-session-helper": {
       "evra": "1.10.2-3.fc34.x86_64"
@@ -355,13 +355,13 @@
       "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-8.fc34.x86_64"
+      "evra": "2.33-14.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-8.fc34.x86_64"
+      "evra": "2.33-14.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-8.fc34.x86_64"
+      "evra": "2.33-14.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -370,7 +370,7 @@
       "evra": "2.2.27-4.fc34.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.1-2.fc34.x86_64"
+      "evra": "3.7.2-1.fc34.x86_64"
     },
     "gpgme": {
       "evra": "1.15.1-2.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.7-300.fc34.x86_64"
+      "evra": "5.12.8-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.7-300.fc34.x86_64"
+      "evra": "5.12.8-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.7-300.fc34.x86_64"
+      "evra": "5.12.8-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -574,13 +574,13 @@
       "evra": "1.4-4.fc34.x86_64"
     },
     "libgcc": {
-      "evra": "11.1.1-1.fc34.x86_64"
+      "evra": "11.1.1-3.fc34.x86_64"
     },
     "libgcrypt": {
       "evra": "1.9.3-2.fc34.x86_64"
     },
     "libgomp": {
-      "evra": "11.1.1-1.fc34.x86_64"
+      "evra": "11.1.1-3.fc34.x86_64"
     },
     "libgpg-error": {
       "evra": "1.42-1.fc34.x86_64"
@@ -751,7 +751,7 @@
       "evra": "2.5.0-2.fc34.x86_64"
     },
     "libstdc++": {
-      "evra": "11.1.1-1.fc34.x86_64"
+      "evra": "11.1.1-3.fc34.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.2-2.fc34.x86_64"
@@ -805,7 +805,7 @@
       "evra": "4.4.20-2.fc34.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.12-2.fc34.x86_64"
+      "evra": "2.9.12-4.fc34.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.2-1.fc34.x86_64"
@@ -913,13 +913,13 @@
       "evra": "2.4.57-3.fc34.x86_64"
     },
     "openssh": {
-      "evra": "8.5p1-2.fc34.x86_64"
+      "evra": "8.6p1-3.fc34.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.5p1-2.fc34.x86_64"
+      "evra": "8.6p1-3.fc34.x86_64"
     },
     "openssh-server": {
-      "evra": "8.5p1-2.fc34.x86_64"
+      "evra": "8.6p1-3.fc34.x86_64"
     },
     "openssl": {
       "evra": "1:1.1.1k-1.fc34.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.2.3-1.fc34.x86_64"
+      "evra": "1:1.3.0-1.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1144,7 +1144,7 @@
       "evra": "0.0.99.1-1.fc34.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.0-2.fc34.x86_64"
+      "evra": "5.1-1.fc34.x86_64"
     },
     "tpm2-tss": {
       "evra": "3.1.0-1.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2879-1.fc34.x86_64"
+      "evra": "2:8.2.2932-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-05-29T20:53:20Z",
+    "generated": "2021-06-06T18:29:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-28T21:27:46Z"
+        "generated": "2021-05-29T21:25:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-05-29T00:50:08Z"
+        "generated": "2021-06-06T00:48:39Z"
       }
     }
   }

From dac777a1f4172c980bc97c17c8b4d9263825361f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 7 Jun 2021 18:15:54 +0000
Subject: [PATCH 0268/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/323/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 005c927bb0..983baa90b3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -865,7 +865,7 @@
       "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.10.0-1.fc34.x86_64"
+      "evra": "78.11.0-1.fc34.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.x86_64"
@@ -979,10 +979,10 @@
       "evra": "3.2-1.fc34.x86_64"
     },
     "polkit": {
-      "evra": "0.117-3.fc34.x86_64"
+      "evra": "0.117-3.fc34.1.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.117-3.fc34.x86_64"
+      "evra": "0.117-3.fc34.1.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-19.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-06T18:29:13Z",
+    "generated": "2021-06-07T17:34:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-05-29T21:25:40Z"
+        "generated": "2021-06-07T13:18:30Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-06T00:48:39Z"
+        "generated": "2021-06-07T01:11:58Z"
       }
     }
   }

From 12281740c215db9b08713de8301c9c958175e923 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 7 Jun 2021 13:20:26 -0400
Subject: [PATCH 0269/2157] overrides: fast-track selinux-policy-34.10-1.fc34

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/850
---
 manifest-lock.overrides.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 50fe1498fa..5ef8ed5d0a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -5,13 +5,13 @@ packages:
         evr: 053-5.fc34
     dracut-network:
         evr: 053-5.fc34
-    # Freeze selinux-policy so we can unblock bumping lockfiles
-    # https://github.com/coreos/fedora-coreos-tracker/issues/850
-    selinux-policy:
-        evra: 34.8-1.fc34.noarch
-    selinux-policy-targeted:
-        evra: 34.8-1.fc34.noarch
-    # For firstboot multipath
+    # Fast-track for firstboot multipath
     # https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
     ignition:
         evr: 2.10.1-3.fc34
+    # Fast-track for https://github.com/coreos/fedora-coreos-tracker/issues/850
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-f014ca8326
+    selinux-policy:
+        evra: 34.10-1.fc34.noarch
+    selinux-policy-targeted:
+        evra: 34.10-1.fc34.noarch

From 2020aa459a0effa4dd1bff1b32b2734826cbe4c7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Jun 2021 11:16:47 -0400
Subject: [PATCH 0270/2157] overlay: initramfs teardown: delete compat code for
 hostname propagation

Everything is now newer than the minimimum requirement of NetworkManager 1.26.0.
---
 .../coreos-teardown-initramfs.sh              | 37 -------------------
 1 file changed, 37 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 8bcac9e3c9..c64d4b846f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -106,43 +106,6 @@ propagate_initramfs_hostname() {
         return 0
     fi
 
-    # COMPAT: keep two code paths, one for older NetworkManager and
-    #         one for newer NetworkManager that supports writing to
-    #         /run/NetworkManager/initrd/hostname. We can delete this
-    #         block once RHCOS and FCOS minimum NM version is >= 1.26.0
-    #         See https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/ff70adf
-    barrierversion='1.26.0'
-    nmversion=$(/usr/sbin/NetworkManager --version)
-    sorted=$((echo $barrierversion; echo $nmversion) | sort -V | tail -n 1)
-    if [ $sorted == $barrierversion ]; then
-        # The version of NM on the system is older than we need
-        # execute compat code in this block.
-        echo "info: NM version is older than $barrierversion. Executing compat code path."
-
-        # Detect if any hostname was provided via static ip= kargs
-        # run in a subshell so we don't pollute our environment
-        hostnamefile=$(mktemp)
-        (
-            last_nonempty_hostname=''
-            # Inspired from ifup.sh from the 40network dracut module. Note that
-            # $hostname from ip_to_var will only be nonempty for static networking.
-            for iparg in $(dracut_func getargs ip=); do
-                dracut_func ip_to_var $iparg
-                [ -n "${hostname:-}" ] && last_nonempty_hostname="$hostname"
-            done
-            echo -n "$last_nonempty_hostname" > $hostnamefile
-        )
-        hostname=$(<$hostnamefile); rm $hostnamefile
-        if [ -n "$hostname" ]; then
-            echo "info: propagating initramfs hostname (${hostname}) to the real root"
-            echo $hostname > /sysroot/etc/hostname
-            coreos-relabel /etc/hostname
-        else
-            echo "info: no initramfs hostname information to propagate"
-        fi
-        return 0
-    fi
-
     # If any hostname was provided NetworkManager will write it out to
     # /run/NetworkManager/initrd/hostname. See
     # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/481

From 0488b7aef824dc0feb1d4b494f8435a2619fc6bd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Jun 2021 11:49:27 -0400
Subject: [PATCH 0271/2157] overlay: initramfs teardown: add support for
 coreos.force_persist_ip karg

This karg will override the check to see if Networking Configuration is
in the real root (i.e. written by Ignition most likely) and force
propagation of initramfs networking anyway. It should only be used in
cases where you know exactly what you are doing. For example, in the
problem described in https://bugzilla.redhat.com/show_bug.cgi?id=1958930
the networking configs didn't conflict at all, thus this could be used
safely. This option will help users who get stuck like they were in that
bug to get unstuck easily and then change their strategy later.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/853
---
 .../coreos-teardown-initramfs.sh              | 25 ++++++++++++++++---
 tests/manual/coreos-network-testing.sh        | 11 ++++++++
 2 files changed, 33 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index c64d4b846f..8fea202022 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -70,14 +70,33 @@ are_default_NM_configs() {
 #
 # See https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721173
 propagate_initramfs_networking() {
-    # Check the two locations where a user could have provided network configuration
-    # On FCOS we only support keyfiles, but on RHCOS we support keyfiles and ifcfg
+    # Check for any real root config in the two locations where a user could have
+    # provided network configuration. On FCOS we only support keyfiles, but on RHCOS
+    # we support keyfiles and ifcfg
     if [ -n "$(ls -A /sysroot/etc/NetworkManager/system-connections/)" -o \
          -n "$(ls -A /sysroot/etc/sysconfig/network-scripts/)" ]; then
         echo "info: networking config is defined in the real root"
-        echo "info: will not attempt to propagate initramfs networking"
+        realrootconfig=1
     else
         echo "info: no networking config is defined in the real root"
+        realrootconfig=0
+    fi
+
+    # Did the user tell us to force initramfs networking config
+    # propagation even if real root networking config exists?
+    # Hopefully we only need this in rare circumstances.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/853
+    forcepropagate=0
+    if dracut_func getargbool 0 'coreos.force_persist_ip'; then
+        forcepropagate=1
+        echo "info: coreos.force_persist_ip detected: will force network config propagation"
+    fi
+
+    if [ $realrootconfig == 1 -a $forcepropagate == 0 ]; then
+        echo "info: will not attempt to propagate initramfs networking"
+    fi
+
+    if [ $realrootconfig == 0 -o $forcepropagate == 1 ]; then
         if [ -n "$(ls -A /run/NetworkManager/system-connections/)" ]; then
             if are_default_NM_configs; then
                 echo "info: skipping propagation of default networking configs"
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index 2ebbdd5fea..1110b9efac 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -607,6 +607,17 @@ EOF
     check_vm 'dhcp' 2 0 $ip $nic0 'n/a' $nameserverdhcp $sshkeyfile
     destroy_vm
 
+    # Do a `coreos.force_persist_ip` check. In this case we won't pass any networking
+    # configuration via Ignition either, so we'll just end up with DHCP and a
+    # static hostname that is unset (`n/a`).
+    echo -e "\n###### Testing coreos.force_persist_ip forces initramfs propagation\n"
+    create_ignition_file "$fcct_static_nic0" $ignitionfile
+    start_vm $qcow $ignitionfile $kernel $initramfs "${initramfs_static_bond0} coreos.force_persist_ip"
+    check_vm 'none' 1 3 $ip bond0 $ignitionhostname $nameserverstatic $sshkeyfile
+    reboot_vm
+    check_vm 'none' 1 3 $ip bond0 $ignitionhostname $nameserverstatic $sshkeyfile
+    destroy_vm
+
     # Do a check for the `nameserver=` initramfs arg. Need to test along with
     # the $initramfs_dhcp_nic0nic1 because that brings up more than one
     # interface and is one that doesn't specify the nameserver as part of the

From b38d597102cfb832b13427fd41d8584060890770 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 1 Jun 2021 16:13:32 +0200
Subject: [PATCH 0272/2157] overlay.d/README: Remove duplicated
 20platform-chrony entry

---
 overlay.d/README.md | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/overlay.d/README.md b/overlay.d/README.md
index 1784ca51b9..384112faec 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -22,14 +22,6 @@ Warning about `/etc/sysconfig`.
 
 Disables the Red Hat Linux legacy `ifcfg` format.
 
-20platform-chrony
------------------
-
-Add static chrony configuration for NTP servers provided on platforms
-such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
-should override other chrony configuration (e.g. DHCP-provided)
-configuration.
-
 15fcos
 ------
 
@@ -45,4 +37,7 @@ Things that are more closely "Fedora CoreOS":
 20platform-chrony
 -----------------
 
-Platform aware timeserver setup for chrony daemon.
+Add static chrony configuration for NTP servers provided on platforms
+such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
+should override other chrony configuration (e.g. DHCP-provided)
+configuration.

From 73145e08b856ec59906e2256e200d626eba75097 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 1 Jun 2021 16:13:47 +0200
Subject: [PATCH 0273/2157] overlay.d/09misc: Fix mode for some files in /etc

Fix mode for existing system on bootup via a tmpfiles config. This is a
nop for new systems.

Workaround for https://github.com/coreos/fedora-coreos-tracker/issues/829
---
 .../usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf  | 11 +++++++++++
 overlay.d/README.md                                   |  3 ++-
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf

diff --git a/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf b/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf
new file mode 100644
index 0000000000..3415d220f6
--- /dev/null
+++ b/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf
@@ -0,0 +1,11 @@
+# Workaround for https://github.com/coreos/fedora-coreos-tracker/issues/829
+# Fix mode (chmod g-w) for existing files on the system during boot
+z /etc/crypto-policies/state/current               644 root root
+z /etc/group                                       644 root root
+z /etc/group-                                      644 root root
+z /etc/iscsi/initiatorname.iscsi                   644 root root
+z /etc/passwd                                      644 root root
+z /etc/passwd-                                     644 root root
+z /etc/selinux/config                              644 root root
+z /etc/ssh/sshd_config.d/40-disable-passwords.conf 644 root root
+z /etc/systemd/dont-synthesize-nobody              644 root root
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 384112faec..0dbe9031a1 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -15,7 +15,8 @@ https://bugzilla.redhat.com/show_bug.cgi?id=1700056
 09misc
 ------
 
-Warning about `/etc/sysconfig`.
+* Warning about `/etc/sysconfig`.
+* Temporary systemd-tpmfiles.d config to fix ownership and permissions in /etc
 
 14NetworkManager-plugins
 ------------------------

From 5633091c05d5e559d109c5720ecb776f324059ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Wed, 12 May 2021 13:57:42 +0200
Subject: [PATCH 0274/2157] tests/misc-ro: Check mode for files in /etc

- Do not allow others or group writable files in /etc
- Extended ownership (root:root) & mode (644) checks for
  /etc/{passwd,group}

Test for https://github.com/coreos/fedora-coreos-tracker/issues/829
---
 tests/kola/misc-ro | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index b30542d356..06694f682b 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -155,3 +155,18 @@ fi
 if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
     fatal "/sys/fs/cgroup is not cgroup2"
 fi
+
+for perms in 'o+w' 'g+w'; do
+	list="$(find /etc -type f -perm /${perms})"
+	if [[ -n "${list}" ]]; then
+		fatal "found files with ${perms}:\n${list}"
+	fi
+done
+ok "no files with o+w or g+w found in /etc"
+
+for f in '/etc/passwd' '/etc/group'; do
+	if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
+		fatal "found incorrect permissions for ${f}"
+	fi
+done
+ok "correct ownership and mode on /etc/passwd & /etc/group"

From a2303045cca4f310b11c4cca6b5558cfc806d6f6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 10 Jun 2021 14:43:58 +0000
Subject: [PATCH 0275/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/325/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 44 +++++++++++++++++++--------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 983baa90b3..0810bc3be0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.15-1.fc34.x86_64"
+      "evra": "32:9.16.16-1.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.15-1.fc34.noarch"
+      "evra": "32:9.16.16-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.15-1.fc34.x86_64"
+      "evra": "32:9.16.16-1.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -178,7 +178,7 @@
       "evra": "1:2.3.3op2-7.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-3.fc34.x86_64"
+      "evra": "7.76.1-4.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.8-300.fc34.x86_64"
+      "evra": "5.12.9-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.8-300.fc34.x86_64"
+      "evra": "5.12.9-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.8-300.fc34.x86_64"
+      "evra": "5.12.9-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -541,7 +541,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-3.fc34.x86_64"
+      "evra": "7.76.1-4.fc34.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.x86_64"
@@ -694,7 +694,7 @@
       "evra": "1.14.0-1.fc34.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.1-1.fc34.noarch"
+      "evra": "2.15.2-2.fc34.noarch"
     },
     "libseccomp": {
       "evra": "2.5.0-4.fc34.x86_64"
@@ -721,7 +721,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.4-0.fc34.x86_64"
+      "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-2.fc34.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.4-0.fc34.x86_64"
+      "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.20-2.fc34.x86_64"
@@ -856,7 +856,7 @@
       "evra": "4.1-7.fc34.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-45.fc34.x86_64"
+      "evra": "2:2.1-46.fc34.x86_64"
     },
     "moby-engine": {
       "evra": "20.10.6-1.fc34.x86_64"
@@ -1030,22 +1030,22 @@
       "evra": "2:1.0.0-378.rc95.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.4-0.fc34.x86_64"
+      "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.4-0.fc34.noarch"
+      "evra": "2:4.14.5-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.4-0.fc34.x86_64"
+      "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "sed": {
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.8-1.fc34.noarch"
+      "evra": "34.10-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.8-1.fc34.noarch"
+      "evra": "34.10-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2932-1.fc34.x86_64"
+      "evra": "2:8.2.2956-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1180,7 +1180,7 @@
       "evra": "2.1.0-16.fc34.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.14-1.fc34.x86_64"
+      "evra": "1.1.15-1.fc34.x86_64"
     },
     "zincati": {
       "evra": "0.0.21-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-07T17:34:27Z",
+    "generated": "2021-06-10T14:09:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-07T13:18:30Z"
+        "generated": "2021-06-07T21:49:00Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-07T01:11:58Z"
+        "generated": "2021-06-10T00:55:40Z"
       }
     }
   }

From f902bb033159b70e7dc7e9652ce13090d308b966 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Jun 2021 13:26:20 -0400
Subject: [PATCH 0276/2157] overrides: fast-track selinux-policy-34.11-1.fc34

See https://github.com/coreos/fedora-coreos-tracker/issues/850#issuecomment-856736597
---
 manifest-lock.overrides.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5ef8ed5d0a..3f00ba75fd 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,8 +10,8 @@ packages:
     ignition:
         evr: 2.10.1-3.fc34
     # Fast-track for https://github.com/coreos/fedora-coreos-tracker/issues/850
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-f014ca8326
+    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
     selinux-policy:
-        evra: 34.10-1.fc34.noarch
+        evra: 34.11-1.fc34.noarch
     selinux-policy-targeted:
-        evra: 34.10-1.fc34.noarch
+        evra: 34.11-1.fc34.noarch

From 16bd7413e80d4b7c7b807be7dde2ea59a189c5dc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 10 Jun 2021 21:21:57 +0000
Subject: [PATCH 0277/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/326/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0810bc3be0..71c4704650 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.10-1.fc34.noarch"
+      "evra": "34.11-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.10-1.fc34.noarch"
+      "evra": "34.11-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1193,13 +1193,13 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-10T14:09:30Z",
+    "generated": "2021-06-10T20:52:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-07T21:49:00Z"
+        "generated": "2021-06-10T18:40:56Z"
       },
       "fedora-updates": {
         "generated": "2021-06-10T00:55:40Z"

From 35b54400b459ab15b04cacc75f19f187d47347a8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Jun 2021 09:39:44 -0400
Subject: [PATCH 0278/2157] tests: add test for enabling systemd instance unit

---
 .../systemd-enable-instance-unit/config.fcc   | 14 ++++++++++
 .../systemd-enable-instance-unit/test.sh      | 27 +++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 tests/kola/ignition/systemd-enable-instance-unit/config.fcc
 create mode 100755 tests/kola/ignition/systemd-enable-instance-unit/test.sh

diff --git a/tests/kola/ignition/systemd-enable-instance-unit/config.fcc b/tests/kola/ignition/systemd-enable-instance-unit/config.fcc
new file mode 100644
index 0000000000..0d39eac884
--- /dev/null
+++ b/tests/kola/ignition/systemd-enable-instance-unit/config.fcc
@@ -0,0 +1,14 @@
+variant: fcos
+version: 1.3.0
+systemd:
+  units:
+    - name: echo@.service
+      contents: |
+        [Service]
+        Type=oneshot
+        ExecStart=/bin/echo %i
+        RemainAfterExit=yes
+        [Install]
+        WantedBy=multi-user.target
+    - name: echo@foo.service
+      enabled: true
diff --git a/tests/kola/ignition/systemd-enable-instance-unit/test.sh b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
new file mode 100755
index 0000000000..6b577df42b
--- /dev/null
+++ b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
@@ -0,0 +1,27 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# This test makes sure that ignition is able to enable instance units.
+# https://github.com/coreos/ignition/issues/586
+# https://github.com/systemd/systemd/pull/9901
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure the presets worked and the instantiated unit is enabled
+if [ $(systemctl is-enabled echo@foo.service) != 'enabled' ]; then
+    fatal "echo@foo.service systemd unit should be enabled"
+fi
+ok "echo@foo.service systemd unit is enabled"
+
+# make sure the unit ran and wrote 'foo' to the journal
+if [ $(journalctl -o cat -u echo@foo.service | sed -n 2p) != 'foo' ]; then
+    fatal "echo@foo.service did not write 'foo' to journal"
+fi
+ok "echo@foo.service ran and wrote 'foo' to the journal"

From 18a4c1617924ec7cf61828468ed296b0161adb47 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Jun 2021 16:35:41 -0400
Subject: [PATCH 0279/2157] tests: limit a few ignition systemd tests to a
 single platform

If they pass once they'll pass everywhere. No need to run them in
all places.
---
 tests/kola/ignition/systemd-enable-instance-unit/test.sh | 4 ++++
 tests/kola/ignition/systemd-unmasking/test.sh            | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/tests/kola/ignition/systemd-enable-instance-unit/test.sh b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
index 6b577df42b..0a3b09ac05 100755
--- a/tests/kola/ignition/systemd-enable-instance-unit/test.sh
+++ b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
@@ -5,6 +5,10 @@ set -xeuo pipefail
 # https://github.com/coreos/ignition/issues/586
 # https://github.com/systemd/systemd/pull/9901
 
+# We don't need to test this on every platform. If it passes in
+# one place it will pass everywhere.
+# kola: { "platforms": "qemu-unpriv" }
+
 ok() {
     echo "ok" "$@"
 }
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 77c5e8f4be..272f521295 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -5,6 +5,10 @@ set -xeuo pipefail
 # It just so happens we have masked dnsmasq in FCOS so we can
 # test this by unmasking it.
 
+# We don't need to test this on every platform. If it passes in
+# one place it will pass everywhere.
+# kola: { "platforms": "qemu-unpriv" }
+
 ok() {
     echo "ok" "$@"
 }

From f634cb32a4ff81b2cec3f38975df6781782a72a8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 8 Jun 2021 17:29:27 -0400
Subject: [PATCH 0280/2157] repos: drop `failovermethod` key

This isn't supported by `dnf`. `libdnf` will parse it but it's not
actually hooked up to anything. Recent repo files no longer use this
key. So just nuke it.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1653831
---
 fedora-next.repo | 5 -----
 fedora.repo      | 5 -----
 2 files changed, 10 deletions(-)

diff --git a/fedora-next.repo b/fedora-next.repo
index 49f684cbf1..a7bb4a23d5 100644
--- a/fedora-next.repo
+++ b/fedora-next.repo
@@ -3,7 +3,6 @@
 
 [fedora-next]
 name=Fedora $releasever - $basearch
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/development/$releasever/Everything/$basearch/os/
         https://dl.fedoraproject.org/pub/fedora-secondary/development/$releasever/Everything/$basearch/os/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
@@ -17,7 +16,6 @@ skip_if_unavailable=False
 
 [fedora-next-updates]
 name=Fedora $releasever - $basearch - Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Everything/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Everything/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-f$releasever&arch=$basearch
@@ -31,7 +29,6 @@ skip_if_unavailable=False
 
 [fedora-next-updates-testing]
 name=Fedora $releasever - $basearch - Test Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Everything/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Everything/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
@@ -56,7 +53,6 @@ skip_if_unavailable=False
 
 [fedora-next-updates-modular]
 name=Fedora Modular $releasever - $basearch - Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Modular/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Modular/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-modular-f$releasever&arch=$basearch
@@ -70,7 +66,6 @@ skip_if_unavailable=False
 
 [fedora-next-updates-testing-modular]
 name=Fedora Modular $releasever - $basearch - Test Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Modular/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Modular/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
diff --git a/fedora.repo b/fedora.repo
index 4a94919a7f..c4bc1c81bd 100644
--- a/fedora.repo
+++ b/fedora.repo
@@ -3,7 +3,6 @@
 
 [fedora]
 name=Fedora $releasever - $basearch
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
         https://dl.fedoraproject.org/pub/fedora-secondary/releases/$releasever/Everything/$basearch/os/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
@@ -17,7 +16,6 @@ skip_if_unavailable=False
 
 [fedora-updates]
 name=Fedora $releasever - $basearch - Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Everything/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Everything/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-f$releasever&arch=$basearch
@@ -31,7 +29,6 @@ skip_if_unavailable=False
 
 [fedora-updates-testing]
 name=Fedora $releasever - $basearch - Test Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Everything/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Everything/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
@@ -56,7 +53,6 @@ skip_if_unavailable=False
 
 [fedora-updates-modular]
 name=Fedora Modular $releasever - $basearch - Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Modular/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Modular/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-modular-f$releasever&arch=$basearch
@@ -70,7 +66,6 @@ skip_if_unavailable=False
 
 [fedora-updates-testing-modular]
 name=Fedora Modular $releasever - $basearch - Test Updates
-failovermethod=priority
 baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Modular/$basearch/
         https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Modular/$basearch/
 #metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch

From 1e707cd85761a81f022f437de4dc0938732c1fc3 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 10 Jun 2021 22:49:39 -0400
Subject: [PATCH 0281/2157] tests/kdump: disable test

It's a new test, and is broken on three cloud platforms plus Ignition
upstream CI.

https://github.com/coreos/fedora-coreos-config/pull/1043#issuecomment-859028582
---
 tests/kola/kdump/test.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
index 6f46278580..f6ece82706 100755
--- a/tests/kola/kdump/test.sh
+++ b/tests/kola/kdump/test.sh
@@ -3,6 +3,11 @@ set -xeuo pipefail
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 # kola: {"minMemory": 4096, "tags": "skip-base-checks"}
 
+# ===== FIXME: Disabled due to broken CI
+echo "Test disabled"
+exit 0
+# =====
+
 fatal() {
     echo "$@" >&2
     exit 1

From 8a9a10894dbefb264c352ed45d989fa97adf517f Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 8 Jun 2021 17:54:22 -0400
Subject: [PATCH 0282/2157] misc-ro: Validate aleph version is present and is
 valid JSON

I was idly thinking about deduplication between cosa and osbuild,
and this is a good example of a detail we should keep.  Let's
test it's present.
---
 tests/kola/misc-ro | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 06694f682b..9141255c41 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -89,6 +89,10 @@ if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
 fi
 ok LICENSE
 
+# Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
+jq < /sysroot/.coreos-aleph-version.json >/dev/null
+ok aleph
+
 case "$(arch)" in
     x86_64|aarch64)
         # This is just a basic sanity check; at some point we

From c730db2d15874b74ddb1ef73490979e4f44ba7c7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 11 Jun 2021 10:04:55 -0400
Subject: [PATCH 0283/2157] ci: add GitHub Action to automatically graduate
 overrides

Currently, we have to manually check if fast-tracked packages have made
it into the Fedora repos and drop them. This GitHub Action automates
this process.

It also formalizes the process of pinning packages a bit by adding
guidelines for metadata keys overrides should use to be more explicit.
---
 .../workflows/remove-graduated-overrides.yml  |  45 +++++++
 README.md                                     |  60 +++++++--
 ci/remove-graduated-overrides.py              | 125 ++++++++++++++++++
 manifest-lock.overrides.yaml                  |  53 +++++---
 manifest.yaml                                 |   5 +-
 5 files changed, 262 insertions(+), 26 deletions(-)
 create mode 100644 .github/workflows/remove-graduated-overrides.yml
 create mode 100755 ci/remove-graduated-overrides.py

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
new file mode 100644
index 0000000000..f30a2b2711
--- /dev/null
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -0,0 +1,45 @@
+name: remove-graduated-overrides
+
+on:
+  schedule:
+    - cron: '0 */6 * * *'
+
+jobs:
+  remove-graduated-overrides:
+    name: Remove graduated overrides
+    runs-on: ubuntu-latest
+    # TODO: use cosa directly here
+    # https://github.com/coreos/coreos-assembler/issues/2223
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
+    strategy:
+      matrix:
+        branch:
+          - testing-devel
+          - next-devel
+    steps:
+      - run: dnf install -y rpm-ostree # see related TODO above
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          ref: ${{ matrix.branch }}
+      - name: Remove graduated overrides
+        run: |
+          git config user.name 'CoreOS Bot'
+          git config user.email coreosbot@fedoraproject.org
+          ci/remove-graduated-overrides.py
+      - name: Open pull request
+        run: |
+          if ! git diff --quiet --exit-code; then
+              git commit -am "lockfiles: drop graduated overrides 🎓" \
+                -m "Triggered by remove-graduated-overrides GitHub Action."
+          fi
+      - name: Open pull request
+        uses: peter-evans/create-pull-request@v3.8.2
+        with:
+          token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
+          branch: ${{ matrix.branch }}-graduation
+          push-to-fork: coreosbot-releng/fedora-coreos-config
+          title: "lockfiles: drop graduated overrides 🎓"
+          body: "Triggered by remove-graduated-overrides GitHub Action."
+          committer: "CoreOS Bot <coreosbot@fedoraproject.org>"
+          author: "CoreOS Bot <coreosbot@fedoraproject.org>"
diff --git a/README.md b/README.md
index 19e81652d0..5c8b31e9bc 100644
--- a/README.md
+++ b/README.md
@@ -50,19 +50,63 @@ By default, all packages for FCOS come from the stable
 Fedora repos. However, it is sometimes necessary to either
 hold back some packages, or pull in fixes ahead of Bodhi. To
 add such overrides, one needs to add the packages to
-`manifest-lock.overrides.$basearch.yaml`. E.g.:
+`manifest-lock.overrides.yaml` (there are also arch-specific
+variants of these files for the rare occasions the override
+should only apply to a specific arch).
+
+Note that comments are not preserved in these files. The
+lockfile supports arbitrary keys under the `metadata` key to
+carry information. Some keys are semantically meaningful to
+humans or other tools.
+
+### Fast-tracking
+
+Example:
 
 ```yaml
 packages:
-  # document reason here and link to any Bodhi update
-  foobar:
-    evra: 1.2.3-1.fc31.x86_64
+  selinux-policy:
+    evra: 34.10-1.fc34.noarch
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f014ca8326
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/850
+  selinux-policy-targeted:
+    evra: 34.10-1.fc34.noarch
+    metadata:
+      type: fast-track
+      # you don't have to repeat the other keys for related packages
+```
+
+Whenever possible, it is important that the package be
+submitted as an update to Bodhi so that we don't have to
+carry the override for a long time.
+
+Fast-tracked packages will automatically be removed by the
+`remove-graduated-overrides` GitHub Action in this repo once
+they reach the stable Fedora repos (or newer versions). They
+are detected by the `type: fast-track` key.
+
+### Pinning
+
+Example:
+
+```
+packages:
+  dracut:
+      evr: 053-5.fc34
+      metadata:
+        type: pin
+        reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
+  dracut-network:
+      evr: 053-5.fc34
+      metadata:
+        type: pin
+        reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
 ```
 
-Whenever possible, in the case of pulling in a newer
-package, it is important that the package be submitted as an
-update to Bodhi so that we don't have to carry the override
-forever.
+All pinned packages *must* have a `reason` key containing
+more information about why the pin is necessary.
 
 Once an override PR is merged,
 [`coreos-koji-tagger`](https://github.com/coreos/fedora-coreos-releng-automation/tree/main/coreos-koji-tagger)
diff --git a/ci/remove-graduated-overrides.py b/ci/remove-graduated-overrides.py
new file mode 100755
index 0000000000..0734174796
--- /dev/null
+++ b/ci/remove-graduated-overrides.py
@@ -0,0 +1,125 @@
+#!/usr/bin/python3
+
+import os
+import sys
+import json
+import yaml
+import subprocess
+
+import dnf
+import hawkey
+
+ARCHES = ['s390x', 'x86_64', 'ppc64le', 'aarch64']
+
+OVERRIDES_HEADER = """
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a URL in the `metadata.reason` key, though it's acceptable to
+# omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
+"""
+
+
+def main():
+    treefile = get_treefile()
+    base = get_dnf_base(treefile)
+    setup_repos(base, treefile)
+
+    for fn in get_lockfiles():
+        update_lockfile(base, fn)
+
+
+def get_treefile():
+    treefile = subprocess.check_output(['rpm-ostree', 'compose', 'tree',
+                                        '--print-only', 'manifest.yaml'])
+    return json.loads(treefile)
+
+
+def get_dnf_base(treefile):
+    base = dnf.Base()
+    base.conf.reposdir = "."
+    base.conf.releasever = treefile['releasever']
+    base.read_all_repos()
+    return base
+
+
+def setup_repos(base, treefile):
+    for repo in base.repos.values():
+        repo.disable()
+
+    print("Enabled repos:")
+    for repo in treefile['repos']:
+        base.repos[repo].enable()
+        print(f"- {repo}")
+
+    print("Downloading metadata")
+    base.fill_sack(load_system_repo=False)
+
+
+def get_lockfiles():
+    lockfiles = ['manifest-lock.overrides.yaml']
+    # TODO: for now, we only support the archless variant; supporting
+    # arch-specific lockfiles will require making dnf fetch metadata not just
+    # for the basearch on which we're running
+    # lockfiles += [f'manifest-lock.overrides.{arch}.yaml' for arch in ARCHES]
+    return lockfiles
+
+
+def update_lockfile(base, fn):
+    if not os.path.exists(fn):
+        return
+
+    with open(fn) as f:
+        lockfile = yaml.load(f)
+    if 'packages' not in lockfile:
+        return
+
+    new_packages = {}
+    for name, lock in lockfile['packages'].items():
+        if ('metadata' not in lock or
+                lock['metadata'].get('type') != "fast-track"):
+            new_packages[name] = lock
+            continue
+
+        if 'evra' in lock:
+            nevra = f"{name}-{lock['evra']}"
+        else:
+            # it applies to all arches, so we can just check our arch (see
+            # related TODO above)
+            nevra = f"{name}-{lock['evr']}.{base.conf.basearch}"
+        graduated = sack_has_nevra_greater_or_equal(base, nevra)
+        if not graduated:
+            new_packages[name] = lock
+        else:
+            print(f"{fn}: {nevra} has graduated")
+
+    if lockfile['packages'] != new_packages:
+        lockfile['packages'] = new_packages
+        with open(fn, 'w') as f:
+            f.write(OVERRIDES_HEADER.strip())
+            f.write('\n\n')
+            yaml.dump(lockfile, f)
+    else:
+        print(f"{fn}: no packages graduated")
+
+
+def sack_has_nevra_greater_or_equal(base, nevra):
+    nevra = hawkey.split_nevra(nevra)
+    pkgs = base.sack.query().filterm(name=nevra.name).latest().run()
+
+    if len(pkgs) == 0:
+        # Odd... the only way I can imagine this happen is if we fast-track a
+        # brand new package from Koji which hasn't hit the updates repo yet.
+        # Corner-case, but let's be nice.
+        print(f"couldn't find package {nevra.name}; assuming not graduated")
+        return False
+
+    nevra_latest = hawkey.split_nevra(str(pkgs[0]))
+    return nevra_latest >= nevra
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3f00ba75fd..8b764b7787 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -1,17 +1,38 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a URL in the `metadata.reason` key, though it's acceptable to
+# omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
+
 packages:
-    # Freeze dracut on 053. We need to investigate NetworkManager systemd changes.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/842
-    dracut:
-        evr: 053-5.fc34
-    dracut-network:
-        evr: 053-5.fc34
-    # Fast-track for firstboot multipath
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
-    ignition:
-        evr: 2.10.1-3.fc34
-    # Fast-track for https://github.com/coreos/fedora-coreos-tracker/issues/850
-    # https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
-    selinux-policy:
-        evra: 34.11-1.fc34.noarch
-    selinux-policy-targeted:
-        evra: 34.11-1.fc34.noarch
+  dracut:
+    evr: 053-5.fc34
+    metadata:
+      type: pin
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
+  dracut-network:
+    evr: 053-5.fc34
+    metadata:
+      type: pin
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
+  ignition:
+    evr: 2.10.1-3.fc34
+    metadata:
+      type: fast-track
+      reason: https://github.com/coreos/fedora-coreos-config/pull/1011
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
+  selinux-policy:
+    evra: 34.11-1.fc34.noarch
+    metadata:
+      type: fast-track
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/850
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
+  selinux-policy-targeted:
+    evra: 34.11-1.fc34.noarch
+    metadata:
+      type: fast-track
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/850
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
diff --git a/manifest.yaml b/manifest.yaml
index f2141b1297..213cb88408 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -9,9 +9,10 @@ rojig:
   summary: Fedora CoreOS testing-devel
 
 repos:
-  # these repos are there to make it easier to add new packages to the OS and to
+  # These repos are there to make it easier to add new packages to the OS and to
   # use `cosa fetch --update-lockfile`; but note that all package versions are
-  # still pinned
+  # still pinned. These repos are also used by the remove-graduated-overrides
+  # GitHub Action.
   - fedora
   - fedora-updates
 

From d963f9734c7ff34909ca7dbbc780f8f841507d62 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 11 Jun 2021 21:23:46 +0000
Subject: [PATCH 0284/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/327/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 71c4704650..de2836d99b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,10 +133,10 @@
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-0.1.rc1.fc34.x86_64"
+      "evra": "1.0.0-0.2.rc1.fc34.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-16.fc34.noarch"
+      "evra": "4:1-19.fc34.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.1-1.fc34.x86_64"
@@ -145,10 +145,10 @@
       "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-26.fc34.x86_64"
+      "evra": "8.32-27.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-26.fc34.x86_64"
+      "evra": "8.32-27.fc34.x86_64"
     },
     "cpio": {
       "evra": "2.13-10.fc34.x86_64"
@@ -163,7 +163,7 @@
       "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.19.1-3.fc34.x86_64"
+      "evra": "0.20.1-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -355,13 +355,13 @@
       "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-14.fc34.x86_64"
+      "evra": "2.33-15.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-14.fc34.x86_64"
+      "evra": "2.33-15.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-14.fc34.x86_64"
+      "evra": "2.33-15.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.1.2-3.fc34.x86_64"
+      "evra": "3:3.2.0-5.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.1.2-3.fc34.x86_64"
+      "evra": "3:3.2.0-5.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-10T20:52:43Z",
+    "generated": "2021-06-11T20:52:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-06-10T18:40:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-10T00:55:40Z"
+        "generated": "2021-06-11T00:54:44Z"
       }
     }
   }

From 9b637c055bf5fd58225120db481b8af9fda707c5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 12 Jun 2021 23:00:02 -0400
Subject: [PATCH 0285/2157] tests/kola/chrony: move container in test to F34

---
 tests/kola/chrony/dhcp-propagation | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 018af69677..fcb579df1a 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -32,7 +32,7 @@ test_setup() {
     pushd $(mktemp -d)
     NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:33
+FROM registry.fedoraproject.org/fedora:34
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq

From bed3837a49d8ddbf149f52bc8cb654796243e104 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 12 Jun 2021 23:01:48 -0400
Subject: [PATCH 0286/2157] tests/kola/chrony: hardcode NTP server address for
 now

DNS for time-c-g.nist.gov is not resolving right now in CentOS CI
and this test is failing in CI as a result:

```
Jun 12 21:00:52 qemu0 kola-runext-dhcp-propagation[1293]: ++ getent hosts time-c-g.nist.gov
Jun 12 21:01:11 qemu0 kola-runext-dhcp-propagation[1280]: + NTPHOSTIP=
Jun 12 21:01:11 qemu0 systemd[1]: kola-runext.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
```

Opened an issue for the DNS issue over at https://pagure.io/centos-infra/issue/356
---
 tests/kola/chrony/dhcp-propagation | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index fcb579df1a..a097364b0f 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -30,7 +30,10 @@ test_setup() {
 
     # run podman commands to set up dnsmasq server
     pushd $(mktemp -d)
-    NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+    # XXX: hardcode IP for now until can resolve in CentOS CI again
+    #      https://pagure.io/centos-infra/issue/356
+    #NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+    NTPHOSTIP='129.6.15.30'
     cat <<EOF >Dockerfile
 FROM registry.fedoraproject.org/fedora:34
 RUN dnf -y install systemd dnsmasq iproute iputils \

From facac1e9f972a4155603145bf47b555a866c001c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 12 Jun 2021 12:21:22 +0000
Subject: [PATCH 0287/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 22 ++--------------------
 1 file changed, 2 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 8b764b7787..2b3b40b760 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -11,28 +11,10 @@ packages:
   dracut:
     evr: 053-5.fc34
     metadata:
-      type: pin
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
+      type: pin
   dracut-network:
     evr: 053-5.fc34
     metadata:
-      type: pin
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
-  ignition:
-    evr: 2.10.1-3.fc34
-    metadata:
-      type: fast-track
-      reason: https://github.com/coreos/fedora-coreos-config/pull/1011
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-123bd6e0dc
-  selinux-policy:
-    evra: 34.11-1.fc34.noarch
-    metadata:
-      type: fast-track
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/850
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
-  selinux-policy-targeted:
-    evra: 34.11-1.fc34.noarch
-    metadata:
-      type: fast-track
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/850
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-d8e34dbd6e
+      type: pin

From d5b99be33fc09a35bb0e9443d4dcb7424d356ab4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 14 Jun 2021 15:57:11 +0000
Subject: [PATCH 0288/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/330/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index de2836d99b..0ded7504fb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.2.52-5.fc34.noarch"
+      "evra": "2.2.54.2-1.fc34.noarch"
     },
     "acl": {
       "evra": "2.3.1-1.fc34.x86_64"
@@ -292,10 +292,10 @@
       "evra": "34-2.noarch"
     },
     "file": {
-      "evra": "5.39-5.fc34.x86_64"
+      "evra": "5.39-6.fc34.x86_64"
     },
     "file-libs": {
-      "evra": "5.39-5.fc34.x86_64"
+      "evra": "5.39-6.fc34.x86_64"
     },
     "filesystem": {
       "evra": "3.14-5.fc34.x86_64"
@@ -355,13 +355,13 @@
       "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-15.fc34.x86_64"
+      "evra": "2.33-16.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-15.fc34.x86_64"
+      "evra": "2.33-16.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-15.fc34.x86_64"
+      "evra": "2.33-16.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -910,7 +910,7 @@
       "evra": "6.9.7.1-1.fc34.x86_64"
     },
     "openldap": {
-      "evra": "2.4.57-3.fc34.x86_64"
+      "evra": "2.4.57-4.fc34.x86_64"
     },
     "openssh": {
       "evra": "8.6p1-3.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-11T20:52:36Z",
+    "generated": "2021-06-14T14:47:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-10T18:40:56Z"
+        "generated": "2021-06-14T12:21:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-11T00:54:44Z"
+        "generated": "2021-06-14T00:54:59Z"
       }
     }
   }

From c4d47315b8d669686e5ebb70d9a12cbd263d5f01 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 14 Jun 2021 08:42:22 -0400
Subject: [PATCH 0289/2157] ci/remove-graduated-overrides: don't fail-fast in
 matrix job

If e.g. the `next-devel` branch of the job failed, don't stop the
`testing-devel` branch.
---
 .github/workflows/remove-graduated-overrides.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index f30a2b2711..6472cb335c 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -16,6 +16,7 @@ jobs:
         branch:
           - testing-devel
           - next-devel
+      fail-fast: false
     steps:
       - run: dnf install -y rpm-ostree # see related TODO above
       - name: Checkout

From dd186ad4980e730703034f6ab860352a085e2830 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Jun 2021 16:18:19 -0400
Subject: [PATCH 0290/2157] overlay: ignition-ostree-firstboot-uuid: use
 metadata_csum_seed fs feature

We're hitting issues in some cases where users are seeing the
`tune2fs -U random` on the /boot filesystem fail even though it's
ran directly after an `e2fsck`. To prevent needing a filesystem
check at all let's store the metadata checksum seed in the superblock
which will allow us to change the UUID without needing any filesystem
checks.

This was not possible before but we recently got a grub fix so that
having this filesystem feature enabled wouldn't cause grub2 to throw
an error.

- https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/735
---
 .../40ignition-ostree/ignition-ostree-firstboot-uuid         | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 0027bed357..0eed19db06 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -27,10 +27,7 @@ esac
 
 if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
   case "${TYPE}" in
-    # For now we need to fsck first, see https://github.com/coreos/coreos-assembler/pull/1452
-    # Basically we're not passing `metadata_csum_seed` as a mkfs.ext4 option
-    # because grub2 barfs on it.
-    ext4) e2fsck -fy "${target}" && tune2fs -U random "${target}" ;;
+    ext4) tune2fs -O metadata_csum_seed -U random "${target}" ;;
     xfs) xfs_admin -U generate "${target}" ;;
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac

From da83a0aa8d9cadad4ee132e7a7af1f9e88d08b59 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Jun 2021 18:19:14 -0400
Subject: [PATCH 0291/2157] overlay: ignition-ostree-firstboot-uuid: add
 workaround for FS without metadata_csum_seed

It will be some time before we can support metadata_csum_seed in grub
on all our target platforms. This commit adds a workaround for the case
where grub doesn't support it yet. We specifically workaround the
behavior of tune2fs that isn't sensitive to timing inconsistencies.

See https://github.com/coreos/fedora-coreos-tracker/issues/735#issuecomment-859605953

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/735
---
 .../ignition-ostree-firstboot-uuid            | 32 ++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 0eed19db06..0318471354 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -27,7 +27,37 @@ esac
 
 if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
   case "${TYPE}" in
-    ext4) tune2fs -O metadata_csum_seed -U random "${target}" ;;
+    ext4)
+          # If the filesystem supports metadata_csum_seed then the UUID is stored
+          # in the superblock and there is no need to worry with an fsck. For the
+          # boot filesystem this FS feature wasn't supported by GRUB until recently.
+          # https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html
+          # Once grub is updated in all systems we care about we can standardize
+          # on the metadata_csum_seed and delete the `else` code block.
+          if tune2fs -l ${target} | grep 'metadata_csum_seed'; then
+              tune2fs -U random "${target}"
+          else
+              # Run an fsck since tune2fs -U requires the FS to be clean
+              e2fsck -fy "${target}"
+              # We just ran an fsck, but there is a bug where tune2fs -U will still
+              # complain. It will still error if the last checked timestamp (just
+              # set by the e2fsck above) is older than the last mount timestamp (happens
+              # on systems with out of date or non-functioning hardware clocks).
+              # See https://github.com/coreos/fedora-coreos-tracker/issues/735#issuecomment-859605953
+              # Potentially fixed in future by: https://www.spinics.net/lists/linux-ext4/msg78012.html
+              tune2fsinfo="$(tune2fs -l ${target})"
+              lastmount=$(echo "$tune2fsinfo" | grep '^Last mount time:' | cut -d ':' -f 2,3,4)
+              lastfsck=$(echo "$tune2fsinfo" | grep '^Last checked:' | cut -d ':' -f 2,3,4)
+              lastmountsse=$(date --date="$lastmount" +%s)
+              lastfscksse=$(date --date="$lastfsck" +%s)
+              if (( lastfscksse < lastmountsse )); then
+                  echo "Detected timestamp of last fsck is older than timestamp of last mount."
+                  echo "Setting "${target}" timestamp of last fsck to same time as last mount."
+                  tune2fs -T $(date --date="$lastmount" +%Y%m%d%H%M%S) "${target}"
+              fi
+              # Finally, we can randomize the UUID
+              tune2fs -U random "${target}"
+          fi ;;
     xfs) xfs_admin -U generate "${target}" ;;
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac

From 7361a9c1cfc131176b7c3dd72c875b66fff1ef86 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 15 Jun 2021 21:22:12 +0000
Subject: [PATCH 0292/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/332/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 42 +++++++++++++++++++--------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0ded7504fb..2e196585d8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.1-2.fc34.x86_64"
+      "evra": "3.0.2-1.fc34.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-9.fc34.x86_64"
@@ -262,7 +262,7 @@
       "evra": "2:5.12-1.fc34.x86_64"
     },
     "expat": {
-      "evra": "2.2.10-2.fc34.x86_64"
+      "evra": "2.4.1-1.fc34.x86_64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-9.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.9-300.fc34.x86_64"
+      "evra": "5.12.10-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.9-300.fc34.x86_64"
+      "evra": "5.12.10-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.9-300.fc34.x86_64"
+      "evra": "5.12.10-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.x86_64"
@@ -739,16 +739,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "libstdc++": {
       "evra": "11.1.1-3.fc34.x86_64"
@@ -1087,28 +1087,28 @@
       "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.0-2.fc34.x86_64"
+      "evra": "2.5.1-1.fc34.x86_64"
     },
     "stalld": {
       "evra": "1.10-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-14T14:47:16Z",
+    "generated": "2021-06-15T20:52:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-14T12:21:25Z"
+        "generated": "2021-06-14T16:18:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-14T00:54:59Z"
+        "generated": "2021-06-15T00:57:18Z"
       }
     }
   }

From 6f39113b0bd0e40d783edcfedc69b93b0492b096 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 16 Jun 2021 21:27:10 +0000
Subject: [PATCH 0293/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/333/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2e196585d8..400b138866 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.3-1.fc34.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.9-2.fc34.x86_64"
+      "evra": "1.5.10-1.fc34.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-3.fc34.x86_64"
@@ -379,22 +379,22 @@
       "evra": "3.6-2.fc34.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06~rc1-4.fc34.noarch"
+      "evra": "1:2.06-2.fc34.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06~rc1-4.fc34.x86_64"
+      "evra": "1:2.06-2.fc34.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06~rc1-4.fc34.x86_64"
+      "evra": "1:2.06-2.fc34.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06~rc1-4.fc34.noarch"
+      "evra": "1:2.06-2.fc34.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06~rc1-4.fc34.x86_64"
+      "evra": "1:2.06-2.fc34.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06~rc1-4.fc34.x86_64"
+      "evra": "1:2.06-2.fc34.x86_64"
     },
     "gzip": {
       "evra": "1.10-4.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2956-1.fc34.x86_64"
+      "evra": "2:8.2.2956-2.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-15T20:52:38Z",
+    "generated": "2021-06-16T20:55:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-14T16:18:50Z"
+        "generated": "2021-06-15T21:30:11Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-15T00:57:18Z"
+        "generated": "2021-06-16T20:37:44Z"
       }
     }
   }

From 975f0dc68cd597893bd1b9b817eac72f0ef9598c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 19 Jun 2021 21:20:20 +0000
Subject: [PATCH 0294/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/336/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 400b138866..8e2dd6ca3e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -82,7 +82,7 @@
       "evra": "1.17.1-2.fc34.x86_64"
     },
     "ca-certificates": {
-      "evra": "2020.2.41-7.fc34.noarch"
+      "evra": "2021.2.50-1.0.fc34.noarch"
     },
     "catatonit": {
       "evra": "0.1.5-4.fc34.x86_64"
@@ -316,7 +316,7 @@
       "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.3-1.fc34.x86_64"
+      "evra": "3.10.4-1.fc34.x86_64"
     },
     "fuse-libs": {
       "evra": "2.9.9-11.fc34.x86_64"
@@ -325,13 +325,13 @@
       "evra": "1.5.0-1.fc34.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.1-2.fc34.x86_64"
+      "evra": "3.7.2-1.fc34.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.3-1.fc34.x86_64"
+      "evra": "3.10.4-1.fc34.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.3-1.fc34.x86_64"
+      "evra": "3.10.4-1.fc34.x86_64"
     },
     "fwupd": {
       "evra": "1.5.10-1.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.10-300.fc34.x86_64"
+      "evra": "5.12.11-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.10-300.fc34.x86_64"
+      "evra": "5.12.11-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.10-300.fc34.x86_64"
+      "evra": "5.12.11-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -676,7 +676,7 @@
       "evra": "0.2.1-47.fc34.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.0-1.fc34.x86_64"
+      "evra": "14:1.10.1-1.fc34.x86_64"
     },
     "libpkgconf": {
       "evra": "1.7.3-6.fc34.x86_64"
@@ -691,7 +691,7 @@
       "evra": "0.1.5-47.fc34.x86_64"
     },
     "librepo": {
-      "evra": "1.14.0-1.fc34.x86_64"
+      "evra": "1.14.1-1.fc34.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.15.2-2.fc34.noarch"
@@ -883,7 +883,7 @@
       "evra": "2.0-0.59.20160912git.fc34.x86_64"
     },
     "nettle": {
-      "evra": "3.7.2-1.fc34.x86_64"
+      "evra": "3.7.3-1.fc34.x86_64"
     },
     "newt": {
       "evra": "0.52.21-9.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-16T20:55:33Z",
+    "generated": "2021-06-19T20:52:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-15T21:30:11Z"
+        "generated": "2021-06-16T21:34:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-16T20:37:44Z"
+        "generated": "2021-06-19T00:57:18Z"
       }
     }
   }

From 4c3bd966f6743a42ae41303c017f825a0bc5beb5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Jun 2021 21:20:25 +0000
Subject: [PATCH 0295/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/337/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8e2dd6ca3e..f09770dd9c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.162.2-1.fc34.noarch"
+      "evra": "2:2.163.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
@@ -355,13 +355,13 @@
       "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-16.fc34.x86_64"
+      "evra": "2.33-18.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-16.fc34.x86_64"
+      "evra": "2.33-18.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-16.fc34.x86_64"
+      "evra": "2.33-18.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.2.0-5.fc34.x86_64"
+      "evra": "3:3.2.1-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.0-5.fc34.x86_64"
+      "evra": "3:3.2.1-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-19T20:52:33Z",
+    "generated": "2021-06-20T20:52:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-16T21:34:37Z"
+        "generated": "2021-06-19T21:27:10Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-19T00:57:18Z"
+        "generated": "2021-06-20T00:55:51Z"
       }
     }
   }

From d498325f2502ca0aaa71c0e5c8376d95f7541c14 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20=C4=8Cajka?= <jcajka@redhat.com>
Date: Fri, 18 Jun 2021 14:52:07 +0200
Subject: [PATCH 0296/2157] tests/kola/toolbox: Run only on x86_64 and aarch64
 Toolbox container is currently missing on ppc64le and s390x in Fedora.

---
 tests/kola/toolbox/test.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index db5bc1f4b5..bde7235d74 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -12,7 +12,8 @@
 # ensure that previous commands were successful.
 
 # Only run on QEMU to reduce CI costs as nothing is platform specific here.
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+# Toolbox container is currently available only for x86_64 and aarch64 in Fedora
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
 
 set -xeuo pipefail
 

From d389fd1bd46d374736632763c97276f37f638f1f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 24 Jun 2021 21:14:19 +0000
Subject: [PATCH 0297/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/343/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f09770dd9c..2ea671e6d6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.30.4-1.fc34.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.2.54.2-1.fc34.noarch"
+      "evra": "2.3.0.2-1.fc34.noarch"
     },
     "acl": {
       "evra": "2.3.1-1.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.11-300.fc34.x86_64"
+      "evra": "5.12.12-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.11-300.fc34.x86_64"
+      "evra": "5.12.12-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.11-300.fc34.x86_64"
+      "evra": "5.12.12-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-20T20:52:34Z",
+    "generated": "2021-06-24T20:49:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-19T21:27:10Z"
+        "generated": "2021-06-20T21:29:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-20T00:55:51Z"
+        "generated": "2021-06-24T16:32:58Z"
       }
     }
   }

From 3105a4a18c10878cfa55de629a0d076d5c51c513 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 26 Jun 2021 01:47:59 +0000
Subject: [PATCH 0298/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/348/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2ea671e6d6..6b4f97393f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,7 +190,7 @@
       "evra": "1:1.12.20-3.fc34.x86_64"
     },
     "dbus-broker": {
-      "evra": "28-3.fc34.x86_64"
+      "evra": "29-1.fc34.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-3.fc34.noarch"
@@ -802,7 +802,7 @@
       "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.20-2.fc34.x86_64"
+      "evra": "4.4.22-2.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.x86_64"
@@ -943,7 +943,7 @@
       "evra": "0.23.22-3.fc34.x86_64"
     },
     "pam": {
-      "evra": "1.5.1-5.fc34.x86_64"
+      "evra": "1.5.1-6.fc34.x86_64"
     },
     "passwd": {
       "evra": "0.80-10.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-24T20:49:09Z",
+    "generated": "2021-06-26T01:16:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-20T21:29:27Z"
+        "generated": "2021-06-24T21:24:51Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-24T16:32:58Z"
+        "generated": "2021-06-26T00:53:13Z"
       }
     }
   }

From 6ecb69bb51ca8efdec4f828f457a22bf466a3944 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 27 Jun 2021 14:04:00 -0400
Subject: [PATCH 0299/2157] tests: temporarily drop kargs test for spec
 stabilization

---
 tests/kola/ignition/kargs/config.ign |  9 ---------
 tests/kola/ignition/kargs/test.sh    | 19 -------------------
 2 files changed, 28 deletions(-)
 delete mode 100644 tests/kola/ignition/kargs/config.ign
 delete mode 100755 tests/kola/ignition/kargs/test.sh

diff --git a/tests/kola/ignition/kargs/config.ign b/tests/kola/ignition/kargs/config.ign
deleted file mode 100644
index fb9fa01a5a..0000000000
--- a/tests/kola/ignition/kargs/config.ign
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  "ignition": {
-    "version": "3.3.0-experimental"
-  },
-  "kernelArguments": {
-    "shouldExist": ["foobar"],
-    "shouldNotExist": ["mitigations=auto,nosmt"]
-  }
-}
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
deleted file mode 100755
index a7535254f8..0000000000
--- a/tests/kola/ignition/kargs/test.sh
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
-if ! grep foobar /proc/cmdline; then
-    fatal "missing foobar in kernel cmdline"
-fi
-if grep mitigations /proc/cmdline; then
-    fatal "found mitigations in kernel cmdline"
-fi
-ok "Ignition kargs"

From 455eb6644f91c3c2f36ceaa904b5605ca563de76 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 25 Jun 2021 23:24:49 -0400
Subject: [PATCH 0300/2157] overrides: fast-track Ignition 2.11.0-1.fc34

---
 manifest-lock.overrides.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2b3b40b760..e9e8d7a2c5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -18,3 +18,7 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
       type: pin
+  ignition:
+    evr: 2.11.0-1.fc34
+    metadata:
+      type: fast-track

From a2aa6183b457f9bd7de64ccec843e7b19e6e16c6 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 27 Jun 2021 16:48:59 -0400
Subject: [PATCH 0301/2157] Revert "tests: temporarily drop kargs test for spec
 stabilization"

This reverts commit 6ecb69bb51ca8efdec4f828f457a22bf466a3944.
---
 tests/kola/ignition/kargs/config.ign |  9 +++++++++
 tests/kola/ignition/kargs/test.sh    | 19 +++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 tests/kola/ignition/kargs/config.ign
 create mode 100755 tests/kola/ignition/kargs/test.sh

diff --git a/tests/kola/ignition/kargs/config.ign b/tests/kola/ignition/kargs/config.ign
new file mode 100644
index 0000000000..fb9fa01a5a
--- /dev/null
+++ b/tests/kola/ignition/kargs/config.ign
@@ -0,0 +1,9 @@
+{
+  "ignition": {
+    "version": "3.3.0-experimental"
+  },
+  "kernelArguments": {
+    "shouldExist": ["foobar"],
+    "shouldNotExist": ["mitigations=auto,nosmt"]
+  }
+}
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
new file mode 100755
index 0000000000..a7535254f8
--- /dev/null
+++ b/tests/kola/ignition/kargs/test.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! grep foobar /proc/cmdline; then
+    fatal "missing foobar in kernel cmdline"
+fi
+if grep mitigations /proc/cmdline; then
+    fatal "found mitigations in kernel cmdline"
+fi
+ok "Ignition kargs"

From 9e6e621aa06af552c8c2e41fa9b84cf6d96f6f77 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 27 Jun 2021 16:49:44 -0400
Subject: [PATCH 0302/2157] tests/kola/ignition/kargs: stabilize Ignition spec
 3.3.0

---
 tests/kola/ignition/kargs/config.ign | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/ignition/kargs/config.ign b/tests/kola/ignition/kargs/config.ign
index fb9fa01a5a..00816dc153 100644
--- a/tests/kola/ignition/kargs/config.ign
+++ b/tests/kola/ignition/kargs/config.ign
@@ -1,6 +1,6 @@
 {
   "ignition": {
-    "version": "3.3.0-experimental"
+    "version": "3.3.0"
   },
   "kernelArguments": {
     "shouldExist": ["foobar"],

From fffae203a834fc325cbd8e6ddd8a585e2d9df21d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 28 Jun 2021 08:54:01 -0400
Subject: [PATCH 0303/2157] 35coreos-ignition: use cp instead of mv

We can't `mv` out of the module directory since `/usr` is mounted
read-only in the dracut container when rpm-ostree runs it.

Follow up to #938.

Reported-by: Luca BRUNO <luca.bruno@coreos.com>
---
 .../usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index c874f1e160..94895b9882 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -43,7 +43,7 @@ install() {
     # dracut inst_script doesn't allow overwrites and we are replacing
     # the default script placed by Ignition
     binpath="/usr/sbin/ignition-kargs-helper"
-    mv "$moddir/coreos-kargs.sh" "$initdir$binpath"
+    cp "$moddir/coreos-kargs.sh" "$initdir$binpath"
     install_ignition_unit coreos-kargs-reboot.service
 
     inst_script "$moddir/coreos-boot-edit.sh" \

From 05a6946eefbcd1cac565de535cd7408d8e974dc9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 28 Jun 2021 21:23:00 +0000
Subject: [PATCH 0304/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/351/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6b4f97393f..d99b75ec24 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -403,7 +403,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.10.1-3.fc34.x86_64"
+      "evra": "2.11.0-1.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.2956-2.fc34.x86_64"
+      "evra": "2:8.2.3046-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-26T01:16:31Z",
+    "generated": "2021-06-28T20:53:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-24T21:24:51Z"
+        "generated": "2021-06-27T21:38:00Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-26T00:53:13Z"
+        "generated": "2021-06-28T01:23:25Z"
       }
     }
   }

From 4d96eaaaffdf96e8cc9a0282bbc200487b1c619a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 28 Jun 2021 12:02:49 -0400
Subject: [PATCH 0305/2157] coreos-propagate-multipath-conf: trigger
 emergency.target on failure

We have this in all our units right now we consider critical. This is
one of them.

Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974411
---
 .../35coreos-multipath/coreos-propagate-multipath-conf.service | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
index 271fdf81fd..978fc56c4e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
@@ -5,6 +5,9 @@ Before=initrd.target
 
 ConditionKernelCommandLine=rd.multipath=default
 
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
 [Service]
 Type=oneshot
 ExecStart=/usr/sbin/coreos-propagate-multipath-conf

From 1c0ca68427db763d3f6bff78f43c64c8b9a6bca1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 28 Jun 2021 12:06:46 -0400
Subject: [PATCH 0306/2157] coreos-propagate-multipath-conf: run
 After=initrd-root-fs.target

We should only copy to the sysroot's `/etc` after we're sure it's all
set up. This is marked by `initrd-root-fs.target`.

Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974411
---
 .../coreos-propagate-multipath-conf.service                   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
index 978fc56c4e..c475eaa6c5 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
@@ -1,8 +1,10 @@
 [Unit]
 Description=CoreOS Propagate Multipath Configuration
-After=ostree-prepare-root.service
 Before=initrd.target
 
+# we write to the rootfs, so run after it's ready
+After=initrd-root-fs.target
+
 ConditionKernelCommandLine=rd.multipath=default
 
 OnFailure=emergency.target

From e0d33028848a64e1c13272543edc95432de8de34 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 30 Jun 2021 20:54:38 +0000
Subject: [PATCH 0307/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/353/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d99b75ec24..d7ddb4cf41 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.12-300.fc34.x86_64"
+      "evra": "5.12.13-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.12-300.fc34.x86_64"
+      "evra": "5.12.13-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.12-300.fc34.x86_64"
+      "evra": "5.12.13-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -910,7 +910,7 @@
       "evra": "6.9.7.1-1.fc34.x86_64"
     },
     "openldap": {
-      "evra": "2.4.57-4.fc34.x86_64"
+      "evra": "2.4.57-5.fc34.x86_64"
     },
     "openssh": {
       "evra": "8.6p1-3.fc34.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.11-1.fc34.noarch"
+      "evra": "34.12-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.11-1.fc34.noarch"
+      "evra": "34.12-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1144,7 +1144,7 @@
       "evra": "0.0.99.1-1.fc34.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.1-1.fc34.x86_64"
+      "evra": "5.1.1-1.fc34.x86_64"
     },
     "tpm2-tss": {
       "evra": "3.1.0-1.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3046-1.fc34.x86_64"
+      "evra": "2:8.2.3070-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-28T20:53:49Z",
+    "generated": "2021-06-30T20:04:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-27T21:38:00Z"
+        "generated": "2021-06-28T21:32:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-28T01:23:25Z"
+        "generated": "2021-06-30T00:54:00Z"
       }
     }
   }

From 4e335e4de185aa3f8494789494739a39563347a2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 15 Jun 2021 17:15:38 -0400
Subject: [PATCH 0308/2157] image-base.yaml: set bootfs_metadata_csum_seed to
 true

This will tell COSA to set the metadata_csum_seed filesystem feature
for the boot filesystem. This helps us not have to run a filesystem
check before running tune2fs to randomize the filesystem UUID on first boot. See
https://github.com/coreos/fedora-coreos-tracker/issues/735 for more context.

Depends on https://github.com/coreos/coreos-assembler/pull/2228
---
 image-base.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/image-base.yaml b/image-base.yaml
index 1aabf6ace6..3d9e1d5d1b 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -21,6 +21,15 @@ ostree-remote: fedora
 # https://github.com/ostreedev/ostree/issues/1265
 sysroot-readonly: true
 
+# opt in to using the `metadata_csum_seed` feature of the ext4 filesystem
+# for the /boot filesystem. Support for this was only recently added to grub
+# and isn't available everywhere yet so we'll gate it behind this image.yaml
+# knob. It should be easy to know when RHEL/RHCOS supports this by just flipping
+# this to `true` and doing a build. It should error when building the disk
+# images if grub doesn't support it.
+# https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html
+bootfs_metadata_csum_seed: true
+
 # After this, we plan to add support for the Ignition
 # storage/filesystems sections.  (Although one can do
 # that on boot as well)

From 6a8be3c91342fa71977677a4788956594cbf504e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Jul 2021 01:04:00 +0000
Subject: [PATCH 0309/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/356/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 46 +++++++++++++++++++--------------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d7ddb4cf41..1d5feea9f4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.16-1.fc34.x86_64"
+      "evra": "32:9.16.18-1.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.16-1.fc34.noarch"
+      "evra": "32:9.16.18-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.16-1.fc34.x86_64"
+      "evra": "32:9.16.18-1.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -340,7 +340,7 @@
       "evra": "5.1.0-3.fc34.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.7-1.fc34.x86_64"
+      "evra": "1.0.8-1.fc34.x86_64"
     },
     "gettext": {
       "evra": "0.21-4.fc34.x86_64"
@@ -577,7 +577,7 @@
       "evra": "11.1.1-3.fc34.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.9.3-2.fc34.x86_64"
+      "evra": "1.9.3-3.fc34.x86_64"
     },
     "libgomp": {
       "evra": "11.1.1-3.fc34.x86_64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.x86_64"
@@ -739,16 +739,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "libstdc++": {
       "evra": "11.1.1-3.fc34.x86_64"
@@ -781,7 +781,7 @@
       "evra": "1.0.24-2.fc34.x86_64"
     },
     "libuser": {
-      "evra": "0.63-3.fc34.x86_64"
+      "evra": "0.63-4.fc34.x86_64"
     },
     "libutempter": {
       "evra": "1.2.1-4.fc34.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.14.5-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.22-2.fc34.x86_64"
+      "evra": "4.4.23-1.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.x86_64"
@@ -1087,28 +1087,28 @@
       "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-2.fc34.x86_64"
     },
     "stalld": {
       "evra": "1.10-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-06-30T20:04:21Z",
+    "generated": "2021-07-02T00:36:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-28T21:32:38Z"
+        "generated": "2021-06-30T21:03:30Z"
       },
       "fedora-updates": {
-        "generated": "2021-06-30T00:54:00Z"
+        "generated": "2021-07-01T00:58:53Z"
       }
     }
   }

From 76586f014f96fa72e2b5eefa9b40655fc170be5e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 1 Jul 2021 14:52:50 -0400
Subject: [PATCH 0310/2157] Revert "kola-denylist.yaml: add
 ext.config.podman.rootless-systemd"

Kernel 5.11+ seems to fix this based on the comments in
https://github.com/containers/buildah/issues/3071#issuecomment-806072194

Indeed, when I run the test against a rawhide build it passes.

This reverts commit f12a5132ebe169ad643dab5b7fe028889c77a386.
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5c0edff573..cf3a3d8c88 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,8 +5,3 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: ext.config.podman.rootless-systemd
-  tracker: https://github.com/containers/buildah/issues/3071
-  streams:
-    - branched
-    - rawhide

From a29bcfa8bce5be8a73502612babc869ee1307fb3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Jul 2021 21:22:55 +0000
Subject: [PATCH 0311/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/357/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1d5feea9f4..8b3850ff9b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -304,7 +304,7 @@
       "evra": "1:4.8.0-2.fc34.x86_64"
     },
     "firewalld-filesystem": {
-      "evra": "0.9.3-3.fc34.noarch"
+      "evra": "0.9.4-1.fc34.noarch"
     },
     "flatpak-session-helper": {
       "evra": "1.10.2-3.fc34.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.5-1.fc34.x86_64"
+      "evra": "2021.6-2.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.5-1.fc34.x86_64"
+      "evra": "2021.6-2.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-02T00:36:22Z",
+    "generated": "2021-07-02T20:53:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-06-30T21:03:30Z"
+        "generated": "2021-07-02T01:15:32Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-01T00:58:53Z"
+        "generated": "2021-07-02T00:57:13Z"
       }
     }
   }

From 9d56ef722ae3d15895ea49ab7dd7d65c47bb0c3e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 3 Jul 2021 21:21:56 +0000
Subject: [PATCH 0312/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/358/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8b3850ff9b..634cc10170 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-27.fc34.x86_64"
+      "evra": "8.32-28.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-27.fc34.x86_64"
+      "evra": "8.32-28.fc34.x86_64"
     },
     "cpio": {
       "evra": "2.13-10.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-02T20:53:09Z",
+    "generated": "2021-07-03T20:54:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-02T01:15:32Z"
+        "generated": "2021-07-02T21:35:18Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-02T00:57:13Z"
+        "generated": "2021-07-03T01:17:26Z"
       }
     }
   }

From 698f5086e2fbe998559abcc9d06039308d9c3702 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 4 Jul 2021 21:21:39 +0000
Subject: [PATCH 0313/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/359/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 634cc10170..1326f2baa5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "1.0.0-0.2.rc1.fc34.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-19.fc34.noarch"
+      "evra": "4:1-20.fc34.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.1-1.fc34.x86_64"
@@ -715,7 +715,7 @@
       "evra": "2.13-2.fc34.x86_64"
     },
     "libslirp": {
-      "evra": "4.4.0-2.fc34.x86_64"
+      "evra": "4.4.0-4.fc34.x86_64"
     },
     "libsmartcols": {
       "evra": "2.36.2-1.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.2.1-1.fc34.x86_64"
+      "evra": "3:3.2.2-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.1-1.fc34.x86_64"
+      "evra": "3:3.2.2-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1189,20 +1189,20 @@
       "evra": "1.2.11-26.fc34.x86_64"
     },
     "zram-generator": {
-      "evra": "0.3.2-3.fc34.x86_64"
+      "evra": "0.3.2-4.fc34.x86_64"
     }
   },
   "metadata": {
-    "generated": "2021-07-03T20:54:49Z",
+    "generated": "2021-07-04T20:53:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-02T21:35:18Z"
+        "generated": "2021-07-03T21:30:49Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-03T01:17:26Z"
+        "generated": "2021-07-04T00:55:20Z"
       }
     }
   }

From 413bf20df500a1a3cabaa8055140d0c0bba9991b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Jul 2021 06:18:10 +0000
Subject: [PATCH 0314/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index e9e8d7a2c5..2b3b40b760 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -18,7 +18,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
       type: pin
-  ignition:
-    evr: 2.11.0-1.fc34
-    metadata:
-      type: fast-track

From fc4c9b49b2200c2a278feaa0be917c9827333717 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Jul 2021 21:23:59 +0000
Subject: [PATCH 0315/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/360/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1326f2baa5..8c7bd69968 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -655,7 +655,7 @@
       "evra": "1.0.1-19.fc34.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.3-3.rc2.fc34.x86_64"
+      "evra": "1:2.5.4-0.fc34.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.9-2.fc34.x86_64"
@@ -889,7 +889,7 @@
       "evra": "0.52.21-9.fc34.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.3-3.rc2.fc34.x86_64"
+      "evra": "1:2.5.4-0.fc34.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.8-2.fc34.x86_64"
@@ -1141,7 +1141,7 @@
       "evra": "1.31-3.fc34.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.1-1.fc34.x86_64"
+      "evra": "0.0.99.2-1.fc34.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.1.1-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-04T20:53:03Z",
+    "generated": "2021-07-05T20:53:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-03T21:30:49Z"
+        "generated": "2021-07-04T21:31:20Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-04T00:55:20Z"
+        "generated": "2021-07-05T01:22:13Z"
       }
     }
   }

From 1fe884335ba7caa75815374dd1382a2b42a29675 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 5 Jul 2021 14:00:24 -0400
Subject: [PATCH 0316/2157] 40ignition-ostree: explicitly add zram kmod in
 initrd

We were relying on the zram kmod already being in the initramfs so far,
though that assumption for whatever reason is now incorrect in rawhide,
causing rootfs reprovisioning related tests to fail.

Anyway, we should be more explicit here about what our requirements are.
---
 .../lib/dracut/modules.d/40ignition-ostree/module-setup.sh   | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 99796ebf4b..bf9a7872ab 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -15,6 +15,11 @@ install_ignition_unit() {
     systemctl -q --root="$initdir" add-requires "ignition-${target}.target" "$unit" || exit 1
 }
 
+installkernel() {
+    # Used by ignition-ostree-transposefs
+    instmods -c zram
+}
+
 install() {
     inst_multiple \
         realpath \

From 3568dc2e7f691ed6abf8a37242a616b9eaf9ba5b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Jul 2021 11:21:09 -0400
Subject: [PATCH 0317/2157] ci/buildroot: bump nocache hack to defeat Quay.io
 caching

The images are being built, but the contents at this point are almost a
month out of date. If there's no sustainable way to work around this, we
should probably just move it to e.g. openshift/release and have it push
to Quay.io.

See: https://github.com/coreos/fedora-coreos-tracker/issues/890
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 154a16efe5..135644f473 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -7,4 +7,4 @@
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:34
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210426
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210706

From 4b896a4110c9a0fe06a6c0c5e564b31f40d153a5 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Jul 2021 14:53:47 -0400
Subject: [PATCH 0318/2157] 05core: add
 coreos-ignition-firstboot-complete.service

This is mostly a mechanical move of ignition-firstboot-complete.service
to this repo. The only differences are tweaking the service unit name
and the Description and Documentation keys.

Prompted by tweaks we'd like to do here, and possibly eventually moving
it to the initramfs fully (merging it with coreos-boot-edit.service).

The renaming also allows us to loosen the order of operation in which
this is done, so that we can get this in to enable the new unit, while
keeping the old unit disabled, without necessarily waiting for the
original unit file itself to drop out of the `ignition` package.

For background, see: https://github.com/coreos/ignition/issues/1125
---
 .../systemd/system-preset/40-coreos.preset    |  4 +--
 ...coreos-ignition-firstboot-complete.service | 31 +++++++++++++++++++
 2 files changed, 33 insertions(+), 2 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 871d19565e..a3ea8b5485 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -5,8 +5,8 @@ enable console-login-helper-messages-gensnippet-os-release.service
 enable console-login-helper-messages-gensnippet-ssh-keys.service
 # CA certs (probably to add to base fedora eventually)
 enable coreos-update-ca-trust.service
-# This one is from https://github.com/coreos/ignition-dracut
-enable ignition-firstboot-complete.service
+# https://github.com/coreos/ignition/issues/1125
+enable coreos-ignition-firstboot-complete.service
 # Boot checkin services for cloud providers.
 enable afterburn-checkin.service
 enable afterburn-firstboot-checkin.service
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
new file mode 100644
index 0000000000..02edcf886d
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
@@ -0,0 +1,31 @@
+[Unit]
+Description=CoreOS Mark Ignition Boot Complete
+Documentation=https://docs.fedoraproject.org/en-US/fedora-coreos/
+ConditionKernelCommandLine=ignition.firstboot
+ConditionPathExists=!/run/ostree-live
+RequiresMountsFor=/boot
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# The MountFlags=slave is so we remount /boot temporarily writable;
+# see https://github.com/ostreedev/ostree/issues/1265 for the bigger picture.
+# This option creates a new mount namespace; from the point of view of
+# everything else, /boot stays readonly. We only have a transient writable mount
+# for the lifetime of the unit.
+#
+# Also regarding the lack of `-f` for rm ; we should have only run if GRUB
+# detected this file. Fail if we are unable to remove it, rather than risking
+# rerunning Ignition at next boot.
+MountFlags=slave
+# It is better to have a separate script to do this but it might be polluting
+# the target system with some script in i.e. /usr/sbin/firstboot-complete
+# The retval code is still respected with having this if-else block.
+ExecStart=/bin/sh -c \
+	'mount -o remount,rw /boot && \
+	if [[ $(uname -m) = s390x ]]; then zipl; fi && \
+	rm /boot/ignition.firstboot'
+
+[Install]
+# Part of basic.target so this happens early on in firstboot
+WantedBy=basic.target

From f0a3cd55b8a01dba9a6aa298a612f4c9280b8467 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 7 Jul 2021 21:22:23 +0000
Subject: [PATCH 0319/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/362/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8c7bd69968..ce97cb7772 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.12-1.fc34.noarch"
+      "evra": "34.13-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.12-1.fc34.noarch"
+      "evra": "34.13-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-05T20:53:39Z",
+    "generated": "2021-07-07T20:53:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-04T21:31:20Z"
+        "generated": "2021-07-05T21:32:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-05T01:22:13Z"
+        "generated": "2021-07-07T01:37:53Z"
       }
     }
   }

From 5c05b84fcbba26c5150c0f80e344965b0696319a Mon Sep 17 00:00:00 2001
From: Ben Howard <ben.howard@redhat.com>
Date: Wed, 7 Jul 2021 16:54:03 -0600
Subject: [PATCH 0320/2157] Buildroot: add golang

Adding golang means that we can start using a common build root for
Prow, Jenkins and as the seed image for COSA.
---
 ci/buildroot/buildroot-reqs.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 9fa769516c..0568b79a14 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -34,6 +34,9 @@ ostree
 # A super common tool
 jq
 
+# For golang projects like mantle and gangplank
+golang
+
 # Used by ostree/rpm-ostree CI (TODO: add to something like TestBuildRequires in spec files)
 attr
 rsync

From d682520dd6dd763361c05a8f9bf7cbeeb945a805 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 7 Jul 2021 18:25:36 -0400
Subject: [PATCH 0321/2157] dracut: drop references to
 ignition-setup-base.service

It was dropped in Ignition 2.8.0 (e2d3fa3a61b3).
---
 .../dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service | 2 +-
 .../40ignition-ostree/ignition-ostree-uuid-boot.service         | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index b9fad50ce7..18cc4fb18a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -25,7 +25,7 @@ After=coreos-multipath-wait.target
 
 # Run before services that use device nodes, preventing them from racing
 # with udev activity generated by sgdisk
-Before=ignition-setup-base.service ignition-setup-user.service ignition-disks.service
+Before=ignition-setup-user.service ignition-disks.service
 
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index 6805127e83..ff083239d3 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -7,7 +7,6 @@ ConditionPathExists=!/run/ostree-live
 # We run pretty early
 Before=coreos-copy-firstboot-network.service
 Before=ignition-fetch.service
-Before=ignition-setup-base.service
 Before=ignition-setup-user.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.

From 6e178e717e1d20336ef285b2612428960854a600 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 7 Jul 2021 21:37:07 -0400
Subject: [PATCH 0322/2157] overlay: remove /boot/ignition on upgrade if
 present

On subsequent boots, if /boot/ignition is present, remove it.  This fixes
up old nodes with a world-readable Ignition config in /boot.

https://github.com/coreos/fedora-coreos-tracker/issues/889
---
 .../lib/systemd/system-preset/45-fcos.preset  |  3 ++
 .../coreos-cleanup-ignition-config.service    | 20 ++++++++++++
 .../libexec/coreos-cleanup-ignition-config    | 10 ++++++
 tests/kola/migration/installer-cleanup        | 32 +++++++++++++++++++
 4 files changed, 65 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
 create mode 100755 overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
 create mode 100755 tests/kola/migration/installer-cleanup

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index d153b69b73..ad40cb9d2c 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -5,3 +5,6 @@ enable coreos-check-ignition-config.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
+# Clean up injected Ignition config in /boot on upgrade
+# https://github.com/coreos/fedora-coreos-tracker/issues/889
+enable coreos-cleanup-ignition-config.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
new file mode 100644
index 0000000000..2df7e2db1a
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
@@ -0,0 +1,20 @@
+[Unit]
+Description=Clean Up Injected Ignition Config in /boot
+Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/889
+# Newer Ignition will handle this on first boot; we only want to clean up
+# leftover configs on upgrade.  Disambiguate those two code paths for tests.
+ConditionKernelCommandLine=!ignition.firstboot
+RequiresMountsFor=/boot
+ConditionPathExists=/boot/ignition
+# We ship a kdump.service dropin that remounts /boot rw; avoid conflicts
+Before=kdump.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-cleanup-ignition-config
+RemainAfterExit=yes
+# MountFlags=slave ensures the rw mount of /boot is private to the unit
+MountFlags=slave
+
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
new file mode 100755
index 0000000000..ee76687c0a
--- /dev/null
+++ b/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+#
+# Clean up existing nodes that have a world-readable /boot/ignition/config.ign.
+# Remove this after the next barrier release on all streams.
+# https://github.com/coreos/fedora-coreos-tracker/issues/889
+
+set -euo pipefail
+
+mount -o remount,rw /boot
+rm -rf /boot/ignition
diff --git a/tests/kola/migration/installer-cleanup b/tests/kola/migration/installer-cleanup
new file mode 100755
index 0000000000..81dc015788
--- /dev/null
+++ b/tests/kola/migration/installer-cleanup
@@ -0,0 +1,32 @@
+#!/bin/bash
+# Old instances might have a leftover Ignition config in /boot/ignition on
+# upgrade.  Manually create one, reboot, and ensure that it's correctly
+# cleaned up.
+# https://github.com/coreos/fedora-coreos-tracker/issues/889
+
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+"")
+    sudo mount -o remount,rw /boot
+    sudo mkdir -p /boot/ignition
+    sudo touch /boot/ignition/config.ign
+    /tmp/autopkgtest-reboot rebooted
+    ;;
+rebooted)
+    [[ ! -e /boot/ignition ]]
+    ok "/boot/ignition was removed"
+    ;;
+*)
+    fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"
+    ;;
+esac

From aaa09be0091dd5eab79e3ca6bc8538781c90f568 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Jul 2021 12:31:57 -0400
Subject: [PATCH 0323/2157] 15fcos: add missing dash in "user provided"

---
 overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh
index 819a79b8d1..93093bdba0 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh
@@ -16,7 +16,7 @@ nc='\033[0m'
 output=$(journalctl -o json-pretty MESSAGE_ID=57124006b5c94805b77ce473e92a8aeb | jq -s '.[] | select(.IGNITION_CONFIG_TYPE == "user")'| wc -l)
 
 if [[ $output -gt  0 ]];then
-    echo "Ignition: user provided config was applied" > /etc/issue.d/30_ignition_config_info.issue
+    echo "Ignition: user-provided config was applied" > /etc/issue.d/30_ignition_config_info.issue
 else
     echo -e "${warn}Ignition: no config provided by user${nc}" > /etc/issue.d/30_ignition_config_info.issue
 fi

From b380c9708216211b8502de4d7cd2f667aadf25de Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Jul 2021 12:32:32 -0400
Subject: [PATCH 0324/2157] 15fcos: make "ssh" all caps

The SSH host keys are also being printed in the issue, and there it's
all caps, so let's be consistent with that.
---
 overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh
index f59d2c064c..1cc4fba975 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh
@@ -38,7 +38,7 @@ main() {
     if [ -n "$output" ]; then
         echo "$output" > /etc/issue.d/30_ssh_authorized_keys.issue
     else
-        echo -e "${warn}No ssh authorized keys provided by Ignition or Afterburn${nc}" \
+        echo -e "${warn}No SSH authorized keys provided by Ignition or Afterburn${nc}" \
             > /etc/issue.d/30_ssh_authorized_keys.issue
     fi
 

From 596e95b83ed7bc002058746356cc76457c52ddd1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Jul 2021 15:52:52 -0400
Subject: [PATCH 0325/2157] 05core: move coreos-ignition-firstboot-complete
 logic to separate script

We want to expand on it and it's awkward to do it in a systemd unit.
No change to the logic itself.
---
 .../coreos-ignition-firstboot-complete.service      | 12 +-----------
 .../libexec/coreos-ignition-firstboot-complete.sh   | 13 +++++++++++++
 2 files changed, 14 insertions(+), 11 deletions(-)
 create mode 100755 overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh

diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
index 02edcf886d..63af75ca44 100644
--- a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
@@ -13,18 +13,8 @@ RemainAfterExit=yes
 # This option creates a new mount namespace; from the point of view of
 # everything else, /boot stays readonly. We only have a transient writable mount
 # for the lifetime of the unit.
-#
-# Also regarding the lack of `-f` for rm ; we should have only run if GRUB
-# detected this file. Fail if we are unable to remove it, rather than risking
-# rerunning Ignition at next boot.
 MountFlags=slave
-# It is better to have a separate script to do this but it might be polluting
-# the target system with some script in i.e. /usr/sbin/firstboot-complete
-# The retval code is still respected with having this if-else block.
-ExecStart=/bin/sh -c \
-	'mount -o remount,rw /boot && \
-	if [[ $(uname -m) = s390x ]]; then zipl; fi && \
-	rm /boot/ignition.firstboot'
+ExecStart=/usr/libexec/coreos-ignition-firstboot-complete.sh
 
 [Install]
 # Part of basic.target so this happens early on in firstboot
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh
new file mode 100755
index 0000000000..0735c8fbcc
--- /dev/null
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -euo pipefail
+
+mount -o remount,rw /boot
+
+if [[ $(uname -m) = s390x ]]; then
+    zipl
+fi
+
+# Regarding the lack of `-f` for rm ; we should have only run if GRUB detected
+# this file. Fail if we are unable to remove it, rather than risking rerunning
+# Ignition at next boot.
+rm /boot/ignition.firstboot

From 11595c2da9a6d7ed5b34ac59f56c9417316ee5bf Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 7 Jul 2021 14:48:54 -0400
Subject: [PATCH 0326/2157] overlay.d: drop .sh extensions on /usr/libexec
 shell scripts

I personally don't like including the .sh extension on installed
executable scripts because it "leaks" that it's a shell script, whereas
all we should care about is that it's an executable.
---
 .../systemd/system/coreos-ignition-firstboot-complete.service   | 2 +-
 ...firstboot-complete.sh => coreos-ignition-firstboot-complete} | 0
 .../15fcos/usr/lib/systemd/system/coreos-check-cgroups.service  | 2 +-
 .../usr/lib/systemd/system/coreos-check-ignition-config.service | 2 +-
 .../15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service | 2 +-
 .../libexec/{coreos-check-cgroups.sh => coreos-check-cgroups}   | 0
 ...os-check-ignition-config.sh => coreos-check-ignition-config} | 0
 .../libexec/{coreos-check-ssh-keys.sh => coreos-check-ssh-keys} | 0
 8 files changed, 4 insertions(+), 4 deletions(-)
 rename overlay.d/05core/usr/libexec/{coreos-ignition-firstboot-complete.sh => coreos-ignition-firstboot-complete} (100%)
 rename overlay.d/15fcos/usr/libexec/{coreos-check-cgroups.sh => coreos-check-cgroups} (100%)
 rename overlay.d/15fcos/usr/libexec/{coreos-check-ignition-config.sh => coreos-check-ignition-config} (100%)
 rename overlay.d/15fcos/usr/libexec/{coreos-check-ssh-keys.sh => coreos-check-ssh-keys} (100%)

diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
index 63af75ca44..42adf1e6b0 100644
--- a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-firstboot-complete.service
@@ -14,7 +14,7 @@ RemainAfterExit=yes
 # everything else, /boot stays readonly. We only have a transient writable mount
 # for the lifetime of the unit.
 MountFlags=slave
-ExecStart=/usr/libexec/coreos-ignition-firstboot-complete.sh
+ExecStart=/usr/libexec/coreos-ignition-firstboot-complete
 
 [Install]
 # Part of basic.target so this happens early on in firstboot
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
similarity index 100%
rename from overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete.sh
rename to overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
index ceeb3edd64..18e4b85ad7 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
@@ -5,7 +5,7 @@ Description=Check if cgroupsv1 is still being used
 ConditionControlGroupController=v1
 [Service]
 Type=oneshot
-ExecStart=/usr/libexec/coreos-check-cgroups.sh
+ExecStart=/usr/libexec/coreos-check-cgroups
 RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
index 3b73e3d176..1a91853d6b 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
@@ -10,7 +10,7 @@ Description=Check if Ignition config is provided
 ConditionKernelCommandLine=ignition.firstboot
 [Service]
 Type=oneshot
-ExecStart=/usr/libexec/coreos-check-ignition-config.sh
+ExecStart=/usr/libexec/coreos-check-ignition-config
 RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index 3536f52900..c11047bc9b 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -16,7 +16,7 @@ ConditionKernelCommandLine=ignition.firstboot
 [Service]
 Type=oneshot
 ProtectHome=read-only
-ExecStart=/usr/libexec/coreos-check-ssh-keys.sh
+ExecStart=/usr/libexec/coreos-check-ssh-keys
 RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh b/overlay.d/15fcos/usr/libexec/coreos-check-cgroups
similarity index 100%
rename from overlay.d/15fcos/usr/libexec/coreos-check-cgroups.sh
rename to overlay.d/15fcos/usr/libexec/coreos-check-cgroups
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
similarity index 100%
rename from overlay.d/15fcos/usr/libexec/coreos-check-ignition-config.sh
rename to overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
similarity index 100%
rename from overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys.sh
rename to overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys

From 4719415a4749454068408adf2fdf213a927f6df8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 7 Jul 2021 14:53:40 -0400
Subject: [PATCH 0327/2157] 05core/firstboot-complete: also delete
 /boot/ignition if it exists

Once we're done provisioning, nuke any baked Ignition config since it
may contain secrets. We nuke the whole dir in the name of keeping
`/boot` neat and tidy.

Part of https://github.com/coreos/fedora-coreos-tracker/issues/889.
---
 .../05core/usr/libexec/coreos-ignition-firstboot-complete    | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
index 0735c8fbcc..3973d11e04 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
@@ -7,6 +7,11 @@ if [[ $(uname -m) = s390x ]]; then
     zipl
 fi
 
+# We're done provisioning. Remove the whole /boot/ignition directory if present,
+# which may include a baked Ignition config. See
+# https://github.com/coreos/fedora-coreos-tracker/issues/889.
+rm -rf /boot/ignition
+
 # Regarding the lack of `-f` for rm ; we should have only run if GRUB detected
 # this file. Fail if we are unable to remove it, rather than risking rerunning
 # Ignition at next boot.

From dd54e8cb1aa93420cbdd714dcd2376962c5b86a3 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 7 Jul 2021 11:07:48 -0400
Subject: [PATCH 0328/2157] 35coreos-live: stop overriding
 NetworkManager-wait-online timeout to 5s

We originally did this in #326 because we wanted to support booting the
live ISO without networking. This was solved on the initramfs side by
the conditional networking work (#426). But for the real root, this was
still useful because if booting the ISO interactively on a system
without any network, or a non-DHCP network, we didn't want the user to
have to wait until the service timed out before getting a shell.

The core issue however is that we're requesting `network-online.target`
at all. It's an "active unit" which means that it's only pulled in the
transaction, possibly delaying boot, if another systemd unit needs it.
And ideally, no service would need it as per:

https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/

In our case, this unit was fedora-coreos-pinger. We drop that
requirement here:

https://github.com/coreos/fedora-coreos-pinger/pull/41

With that, we no longer pull in `network-online.target` and so no longer
delay reaching the console even if NetworkManager isn't able to get an
active connection for whatever reason. This matches how it works on
traditional Fedora as well.

Having a short timeout actually also had a counterproductive effect in
the automated install case. There, `coreos-installer.service` does pull
in `network-online.target` (which with
https://github.com/coreos/coreos-installer/pull/565 we could consider
dropping as advised by systemd, though we probably should bump the
number of retries some more in that case), but because of the short
timeout, we genuinely may not yet have the network fully up before we
run (see https://bugzilla.redhat.com/show_bug.cgi?id=1967483).
---
 ...liveiso-reconfigure-nm-wait-online.service | 23 -------------------
 .../modules.d/35coreos-live/live-generator    |  2 --
 .../modules.d/35coreos-live/module-setup.sh   |  3 ---
 tests/kola/misc-ro                            |  8 +++++++
 4 files changed, 8 insertions(+), 28 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service
deleted file mode 100644
index 1c910a2eeb..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-reconfigure-nm-wait-online.service
+++ /dev/null
@@ -1,23 +0,0 @@
-# Configure NetworkManager-wait-online in the real root for the
-# Live ISO to timeout quicker and also not explicitly fail since
-# booting the Live ISO without network is a valid use case.
-#
-# Doing this improves the user experience when booting the
-# Live ISO without network.
-
-[Unit]
-Description=Reconfigure NetworkManager-wait-online service
-DefaultDependencies=no
-# Make sure we are in the initramfs and we are booted to the live ISO
-ConditionPathExists=/usr/lib/initrd-release
-ConditionKernelCommandLine=coreos.liveiso
-ConditionPathExists=/run/ostree-live
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-# Note keep this in sync with NetworkManager-wait-online.service
-# Right now we are keeping the same ExecStart but we are making it
-# OK to fail (`-`) and timeout sooner (5 seconds vs 30).
-ExecStartPre=/usr/bin/mkdir -p /run/systemd/system/NetworkManager-wait-online.service.d
-ExecStart=/bin/bash -c 'echo -e "[Service]\nExecStart=\nExecStart=-/usr/bin/nm-online -s -q --timeout=5" > /run/systemd/system/NetworkManager-wait-online.service.d/liveiso.conf'
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index 3cdd88fd2a..560b0b6af5 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -31,8 +31,6 @@ add_requires sysroot.mount     initrd-root-fs.target
 add_requires sysroot-etc.mount initrd-root-fs.target
 add_requires sysroot-var.mount initrd-root-fs.target
 
-add_requires coreos-liveiso-reconfigure-nm-wait-online.service initrd.target
-
 mkdir -p "${UNIT_DIR}/ostree-prepare-root.service.d"
 cat > "${UNIT_DIR}/ostree-prepare-root.service.d/10-live.conf" <<EOF
 # With live PXE there's no ostree= argument on the kernel command line, so
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
index 6ae1b8e494..65ee50a43f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
@@ -47,7 +47,4 @@ install() {
 
     install_and_enable_unit "coreos-livepxe-persist-osmet.service" \
         "default.target"
-
-    inst_simple "$moddir/coreos-liveiso-reconfigure-nm-wait-online.service" \
-        "$systemdsystemunitdir/coreos-liveiso-reconfigure-nm-wait-online.service"
 }
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 9141255c41..cdf9073e58 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -174,3 +174,11 @@ for f in '/etc/passwd' '/etc/group'; do
 	fi
 done
 ok "correct ownership and mode on /etc/passwd & /etc/group"
+
+# We shouldn't pull this into the transaction by default. See
+# https://github.com/coreos/fedora-coreos-config/pull/1088
+# https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
+if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=inactive; then
+    fatal "Unit network-online.target shouldn't be active"
+fi
+ok "unit network-online.target inactive"

From 9942612e584f1d6e402b9df4f2237e613cca877c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 8 Jul 2021 13:34:55 -0400
Subject: [PATCH 0329/2157] overrides: fast-track
 fedora-coreos-pinger-0.0.4-11.fc34

Contains https://github.com/coreos/fedora-coreos-pinger/pull/41 for
https://github.com/coreos/fedora-coreos-config/pull/1088.
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2b3b40b760..62e78369e6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -18,3 +18,9 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
       type: pin
+  fedora-coreos-pinger:
+    evr: 0.0.4-11.fc34
+    metadata:
+      type: fast-track
+      reason: https://github.com/coreos/fedora-coreos-config/pull/1088
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d4c3ddc8a

From c84da092010100cd64f6807e80db8ccb1fb63dc8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Jul 2021 10:57:17 +0000
Subject: [PATCH 0330/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/364/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ce97cb7772..76dc6e723a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -265,7 +265,7 @@
       "evra": "2.4.1-1.fc34.x86_64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-9.fc34.x86_64"
+      "evra": "0.0.4-11.fc34.x86_64"
     },
     "fedora-gpg-keys": {
       "evra": "34-2.noarch"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.13-300.fc34.x86_64"
+      "evra": "5.12.14-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.13-300.fc34.x86_64"
+      "evra": "5.12.14-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.13-300.fc34.x86_64"
+      "evra": "5.12.14-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "1.1.15-1.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.21-1.fc34.x86_64"
+      "evra": "0.0.21-2.fc34.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-07T20:53:22Z",
+    "generated": "2021-07-09T10:30:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-05T21:32:50Z"
+        "generated": "2021-07-08T20:43:32Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-07T01:37:53Z"
+        "generated": "2021-07-09T00:50:04Z"
       }
     }
   }

From c2dd8ebd6f14ee7377bd103d7eda5f1041413f39 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 8 Jul 2021 16:24:12 -0400
Subject: [PATCH 0331/2157] 35coreos-ignition: depend on coreos-live; assume
 is-live-image exists

Upstream Ignition can't assume is-live-image exists, because the distro
may not have provided it.  But we know the coreos-live module is providing
it, so drop the check.
---
 .../dracut/modules.d/35coreos-ignition/coreos-diskful-generator | 2 +-
 .../usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 852cdc34aa..caea175701 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -45,7 +45,7 @@ if ! $(cmdline_bool 'ignition.firstboot' 0); then
     exit 0
 fi
 
-if ! command -v is-live-image >/dev/null || ! is-live-image; then
+if ! is-live-image; then
     # ignition-setup-user.service should depend on the boot device node
     # only on diskful boots
     mkdir -p "${UNIT_DIR}/ignition-setup-user.service.d"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 94895b9882..a2c7ea2a35 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -3,7 +3,7 @@
 # ex: ts=8 sw=4 sts=4 et filetype=sh
 
 depends() {
-    echo systemd network ignition
+    echo systemd network ignition coreos-live
 }
 
 install_ignition_unit() {

From 6a624277d2a0f6ec9c7bcfb3a06a90bdf56f56df Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 8 Jul 2021 15:57:57 -0400
Subject: [PATCH 0332/2157] 35coreos-ignition: add ignition-setup-user.service
 from Ignition repo

The service contains distro-specific assumptions, so move it out of the
upstream Ignition repo.  This commit is a straight `cp`.
---
 .../ignition-setup-user.service               | 23 +++++++++++++
 .../35coreos-ignition/ignition-setup-user.sh  | 32 +++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service
new file mode 100644
index 0000000000..40c53dd1ab
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=Ignition (setup user config)
+Documentation=https://github.com/coreos/ignition
+ConditionPathExists=/etc/initrd-release
+DefaultDependencies=false
+Before=ignition-complete.target
+
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+# Stage order: setup -> fetch-offline [-> fetch] [-> kargs] -> disks -> mount -> files.
+Before=ignition-fetch-offline.service
+
+# On diskful boots, ignition-generator adds Requires/After on
+# dev-disk-by\x2dlabel-boot.device
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# The MountFlags=slave is so the umount of /boot is guaranteed to happen
+# /boot will only be mounted for the lifetime of the unit.
+MountFlags=slave
+ExecStart=/usr/sbin/ignition-setup-user
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh
new file mode 100755
index 0000000000..e0f3c4e2fc
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+set -euo pipefail
+
+copy_file_if_exists() {
+    src="${1}"; dst="${2}"
+    if [ -f "${src}" ]; then
+        echo "Copying ${src} to ${dst}"
+        cp "${src}" "${dst}"
+    else
+        echo "File ${src} does not exist.. Skipping copy"
+    fi
+}
+
+destination=/usr/lib/ignition
+mkdir -p $destination
+
+if command -v is-live-image >/dev/null && is-live-image; then
+    # Live image. If the user has supplied a config.ign via an appended
+    # initrd, put it in the right place.
+    copy_file_if_exists "/config.ign" "${destination}/user.ign"
+else
+    # We will support a user embedded config in the boot partition
+    # under $bootmnt/ignition/config.ign. Note that we mount /boot
+    # but we don't unmount boot because we are run in a systemd unit
+    # with MountFlags=slave so it is unmounted for us.
+    bootmnt=/mnt/boot_partition
+    mkdir -p $bootmnt
+    # mount as read-only since we don't strictly need write access and we may be
+    # running alongside other code that also has it mounted ro
+    mount -o ro /dev/disk/by-label/boot $bootmnt
+    copy_file_if_exists "${bootmnt}/ignition/config.ign" "${destination}/user.ign"
+fi

From 04146467485247bbedc79d6fa75bad34e4f2f517 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 8 Jul 2021 16:47:36 -0400
Subject: [PATCH 0333/2157] 35coreos-ignition: update ignition-setup-user for
 this repo

---
 .../35coreos-ignition/coreos-diskful-generator   |  9 ++++++---
 .../35coreos-ignition/coreos-gpt-setup.service   |  2 +-
 ...ervice => coreos-ignition-setup-user.service} | 16 ++++++++--------
 ...tup-user.sh => coreos-ignition-setup-user.sh} |  2 +-
 .../modules.d/35coreos-ignition/module-setup.sh  |  4 ++++
 .../coreos-multipath-wait.target                 |  6 +++---
 .../ignition-ostree-uuid-boot.service            |  2 +-
 7 files changed, 24 insertions(+), 17 deletions(-)
 rename overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/{ignition-setup-user.service => coreos-ignition-setup-user.service} (55%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/{ignition-setup-user.sh => coreos-ignition-setup-user.sh} (94%)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index caea175701..8c41621331 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -46,11 +46,14 @@ if ! $(cmdline_bool 'ignition.firstboot' 0); then
 fi
 
 if ! is-live-image; then
-    # ignition-setup-user.service should depend on the boot device node
+    # coreos-ignition-setup-user.service should depend on the boot device node
     # only on diskful boots
-    mkdir -p "${UNIT_DIR}/ignition-setup-user.service.d"
-    cat > "${UNIT_DIR}/ignition-setup-user.service.d/diskful-gpt.conf" <<EOF
+    mkdir -p "${UNIT_DIR}/coreos-ignition-setup-user.service.d"
+    cat > "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" <<EOF
 [Unit]
+Requires=dev-disk-by\x2dlabel-boot.device
+After=dev-disk-by\x2dlabel-boot.device
+
 Requires=coreos-gpt-setup.service
 After=coreos-gpt-setup.service
 EOF
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index 18cc4fb18a..f14f2e72f5 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -25,7 +25,7 @@ After=coreos-multipath-wait.target
 
 # Run before services that use device nodes, preventing them from racing
 # with udev activity generated by sgdisk
-Before=ignition-setup-user.service ignition-disks.service
+Before=coreos-ignition-setup-user.service ignition-disks.service
 
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
similarity index 55%
rename from overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
index 40c53dd1ab..df0e256c8a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
@@ -1,18 +1,18 @@
 [Unit]
-Description=Ignition (setup user config)
+Description=CoreOS Ignition User Config Setup
 Documentation=https://github.com/coreos/ignition
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=false
-Before=ignition-complete.target
+
+# We run before config fetch because we may copy in new/different configs
+# for Ignition to consume.
+Before=ignition-fetch-offline.service
 
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
-# Stage order: setup -> fetch-offline [-> fetch] [-> kargs] -> disks -> mount -> files.
-Before=ignition-fetch-offline.service
-
-# On diskful boots, ignition-generator adds Requires/After on
-# dev-disk-by\x2dlabel-boot.device
+# On diskful boots, coreos-diskful-generator adds Requires/After on
+# dev-disk-by\x2dlabel-boot.device and coreos-gpt-setup.service
 
 [Service]
 Type=oneshot
@@ -20,4 +20,4 @@ RemainAfterExit=yes
 # The MountFlags=slave is so the umount of /boot is guaranteed to happen
 # /boot will only be mounted for the lifetime of the unit.
 MountFlags=slave
-ExecStart=/usr/sbin/ignition-setup-user
+ExecStart=/usr/sbin/coreos-ignition-setup-user
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.sh
similarity index 94%
rename from overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.sh
index e0f3c4e2fc..efc8cc7612 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/ignition-setup-user.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.sh
@@ -14,7 +14,7 @@ copy_file_if_exists() {
 destination=/usr/lib/ignition
 mkdir -p $destination
 
-if command -v is-live-image >/dev/null && is-live-image; then
+if is-live-image; then
     # Live image. If the user has supplied a config.ign via an appended
     # initrd, put it in the right place.
     copy_file_if_exists "/config.ign" "${destination}/user.ign"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index a2c7ea2a35..a42bcc3724 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -30,6 +30,9 @@ install() {
     inst_script "$moddir/coreos-gpt-setup.sh" \
         "/usr/sbin/coreos-gpt-setup"
 
+    inst_script "$moddir/coreos-ignition-setup-user.sh" \
+        "/usr/sbin/coreos-ignition-setup-user"
+
     # For consistency tear down the network and persist multipath between the initramfs and
     # real root. See https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
     inst_script "$moddir/coreos-teardown-initramfs.sh" \
@@ -52,4 +55,5 @@ install() {
     install_ignition_unit "coreos-boot-edit.service" \
         "ignition-diskful.target"
 
+    install_ignition_unit coreos-ignition-setup-user.service
 }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
index cf24cd6f57..b003f4d94b 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -8,9 +8,9 @@ After=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
 Requires=multipathd.service
 After=multipathd.service
 
-# This is already enforced transitively by coreos-gpt-setup.service, but since
-# it's an external unit, let's be more explicit and list it directly here too.
-Before=ignition-setup-user.service
+# This is already enforced transitively by coreos-gpt-setup.service, but
+# let's be more explicit and list it directly here too.
+Before=coreos-ignition-setup-user.service
 
 # This is already enforced by coreos-multipath-trigger.service, though ideally
 # eventually we can get rid of that one and then we *would* need this.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index ff083239d3..09fb5e281f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -6,8 +6,8 @@ ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 # We run pretty early
 Before=coreos-copy-firstboot-network.service
+Before=coreos-ignition-setup-user.service
 Before=ignition-fetch.service
-Before=ignition-setup-user.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service

From f124289fc96ecfa04f59b1a3ae87b7aec9154071 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 8 Jul 2021 16:49:33 -0400
Subject: [PATCH 0334/2157] 40ignition-ostree: update an ignition-fetch dep to
 fetch-offline

The fetch-offline stage now exists and runs before fetch, so update the
dep.  This shouldn't be a functional change.
---
 .../40ignition-ostree/ignition-ostree-uuid-boot.service         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index 09fb5e281f..cde3b16296 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -7,7 +7,7 @@ ConditionPathExists=!/run/ostree-live
 # We run pretty early
 Before=coreos-copy-firstboot-network.service
 Before=coreos-ignition-setup-user.service
-Before=ignition-fetch.service
+Before=ignition-fetch-offline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service

From 0954cfb3864166d0a59199d295939e10acf723ce Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 9 Jul 2021 13:58:00 -0400
Subject: [PATCH 0335/2157] overrides: fast-track Ignition 2.11.0-2.fc34

Move ignition-firstboot-complete and ignition-setup-user services to
fedora-coreos-config.
---
 manifest-lock.overrides.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62e78369e6..9ec7af26cf 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,3 +24,7 @@ packages:
       type: fast-track
       reason: https://github.com/coreos/fedora-coreos-config/pull/1088
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d4c3ddc8a
+  ignition:
+    evr: 2.11.0-2.fc34
+    metadata:
+      type: fast-track

From 1aa60d962c7790c6958cff3344161b2b8410b656 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 24 Jun 2021 15:24:58 -0400
Subject: [PATCH 0336/2157] unfreeze dracut, adapt for NM via systemd in initrd

Upstream dracut updated NM to run as a systemd service
(with full dbus support) in the initrd in [1]. Adapt our
systemd units to handle this case.

This should still work fine for RHCOS because we still have
`Before=dracut-initqueue.service`, which can be dropped when
everyone is on dracut 0.54+.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/842
---
 manifest-lock.overrides.yaml                         | 10 ----------
 .../coreos-copy-firstboot-network.service            | 12 ++++++------
 .../35coreos-network/coreos-enable-network.service   |  4 ++--
 3 files changed, 8 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 9ec7af26cf..86c8e66c42 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,6 @@
 # omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
 
 packages:
-  dracut:
-    evr: 053-5.fc34
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
-      type: pin
-  dracut-network:
-    evr: 053-5.fc34
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842
-      type: pin
   fedora-coreos-pinger:
     evr: 0.0.4-11.fc34
     metadata:
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index e2b8588506..6ba396625b 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -8,8 +8,8 @@
 #     - i.e. after /dev/disk/by-label/boot is available
 #     - and after the ignition-dracut GPT generator (see below)
 # - Need to run before networking is brought up.
-#     - This is done in nm-run.service [1]
-#     - i.e. Before=nm-run.service
+#     - This is done in nm-initrd.service [1]
+#     - i.e. Before=nm-initrd.service
 # - Need to make sure karg networking configuration isn't applied
 #     - There are two ways to do this.
 #         - One is to run *before* the nm-config.sh [2] that runs as part of
@@ -17,11 +17,11 @@
 #             - i.e. Before=dracut-cmdline.service
 #         - Another is to run *after* nm-config.sh [2] in dracut-cmdline [3]
 #           and just delete all the files created by nm-initrd-generator.
-#             - i.e. After=dracut-cmdline.service, but Before=nm-run.service
+#             - i.e. After=dracut-cmdline.service, but Before=nm-initrd.service
 #     - We'll go with the second option here because the need for the /boot
 #       device (mentioned above) means we can't start before dracut-cmdline.service
 #
-# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-run.service
+# [1] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-initrd.service
 # [2] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/nm-config.sh
 # [3] https://github.com/dracutdevs/dracut/blob/master/modules.d/35network-manager/module-setup.sh#L34
 #
@@ -30,8 +30,8 @@ Description=Copy CoreOS Firstboot Networking Config
 ConditionPathExists=/usr/lib/initrd-release
 DefaultDependencies=false
 Before=ignition-diskful.target
-Before=nm-run.service
-# compat: remove when everyone is on dracut 053+
+Before=nm-initrd.service
+# compat: remove when everyone is on dracut 054+
 Before=dracut-initqueue.service
 After=dracut-cmdline.service
 # Any services looking at mounts need to order after this
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
index 42273e5fa6..92c4829cd1 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
@@ -20,8 +20,8 @@ Before=ignition-fetch.service
 
 # See hack in coreos-enable-network, as well as coreos-copy-firstboot-network.service.
 After=dracut-cmdline.service
-Before=nm-run.service
-# compat: remove when everyone is on dracut 053+
+Before=nm-initrd.service
+# compat: remove when everyone is on dracut 054+
 Before=dracut-initqueue.service
 
 [Service]

From 85193e31ab4568e2ab131ec0d16e86143b8fd440 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Jul 2021 11:51:46 -0400
Subject: [PATCH 0337/2157] overrides: fast-track dracut-055-3.fc34

Contains upstream fixes needed to get NM running via systemd+dbus
in the initramfs without issues.

- https://github.com/dracutdevs/dracut/pull/1547
- https://github.com/dracutdevs/dracut/pull/1548
- https://github.com/dracutdevs/dracut/pull/1552

Needed to get dracut unfrozen:
https://github.com/coreos/fedora-coreos-tracker/issues/842#issuecomment-867900969
---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 86c8e66c42..1f189b926d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,6 +8,18 @@
 # omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
 
 packages:
+  dracut:
+    evr: 055-3.fc34
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842#issuecomment-867900969
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d1b72b267
+  dracut-network:
+    evr: 055-3.fc34
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842#issuecomment-867900969
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d1b72b267
   fedora-coreos-pinger:
     evr: 0.0.4-11.fc34
     metadata:

From 876fda14ab53cc358d52c4f5111d2e59e5777450 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Jul 2021 12:33:14 -0400
Subject: [PATCH 0338/2157] 35coreos-network: order
 coreos-copy-firstboot-network before ignition-kargs

We've seen races with ignition-kargs.service, which accesses /boot rw.
Let's introduce some ordering here. Need to use `Before` because otherwise
we get a systemd ordering cycle.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/883
---
 .../35coreos-network/coreos-copy-firstboot-network.service    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 6ba396625b..7dfbc59c8a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -47,6 +47,10 @@ After=coreos-multipath-wait.target
 # hook which will generate NM configs from the network kargs, but we want to
 # have precedence.
 After=coreos-enable-network.service
+# We've seen races with ignition-kargs.service, which accesses /boot rw.
+# Let's introduce some ordering here. Need to use `Before` because otherwise
+# we get a systemd ordering cycle. https://github.com/coreos/fedora-coreos-tracker/issues/883
+Before=ignition-kargs.service
 
 [Service]
 Type=oneshot

From 8b804863c64c3df4f34384019de019c48d18ad5e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 9 Jul 2021 15:57:17 -0400
Subject: [PATCH 0339/2157] 35coreos-multipath: add
 Before=initrd-parse-etc.service in coreos-propagate-multipath-conf.service

Otherwise, we'll end up racing with `initrd-cleanup.service` which wants
to kill everything. It has `After=initrd.target` and we do have
`Before=initrd.target`, but that's not being respected, we think because
`initrd-parse-etc.service` does an explicit `systemctl start` on it.

Anyway, we need to dig more into this, but for now this will unblock us.
---
 .../coreos-propagate-multipath-conf.service                  | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
index c475eaa6c5..27d1d5e7fa 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
@@ -5,6 +5,11 @@ Before=initrd.target
 # we write to the rootfs, so run after it's ready
 After=initrd-root-fs.target
 
+# That service starts initrd-cleanup.service which will race with us completing
+# before we get nuked. Need to get to the bottom of it, but for now we need
+# this (XXX: add link to systemd issue here).
+Before=initrd-parse-etc.service
+
 ConditionKernelCommandLine=rd.multipath=default
 
 OnFailure=emergency.target

From 1c5dffe82891f613fad8d02aeed404d03303684f Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 9 Jul 2021 20:18:47 -0400
Subject: [PATCH 0340/2157] tests/installer-cleanup: only run on QEMU

coreos-installer doesn't usually run on clouds and there's nothing
cloud-specific about the cleanup code.  Also, rebooting from external
tests doesn't seem to work outside of QEMU right now.
---
 tests/kola/migration/installer-cleanup | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tests/kola/migration/installer-cleanup b/tests/kola/migration/installer-cleanup
index 81dc015788..9069a27de1 100755
--- a/tests/kola/migration/installer-cleanup
+++ b/tests/kola/migration/installer-cleanup
@@ -4,6 +4,10 @@
 # cleaned up.
 # https://github.com/coreos/fedora-coreos-tracker/issues/889
 
+# Just run on QEMU.  coreos-installer doesn't run in clouds, and rebooting
+# doesn't seem to work there currently.
+# kola: { "platforms": "qemu-unpriv" }
+
 set -xeuo pipefail
 
 ok() {

From b83240b921e0ba0a47972b171a99d8eaa3cd8a51 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 10 Jul 2021 16:25:33 +0000
Subject: [PATCH 0341/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/366/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 76dc6e723a..249e6d7708 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "0.9.1-1.fc34.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-28.fc34.x86_64"
+      "evra": "8.32-30.fc34.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-28.fc34.x86_64"
+      "evra": "8.32-30.fc34.x86_64"
     },
     "cpio": {
       "evra": "2.13-10.fc34.x86_64"
@@ -229,10 +229,10 @@
       "evra": "4.2-1.fc34.x86_64"
     },
     "dracut": {
-      "evra": "053-5.fc34.x86_64"
+      "evra": "055-3.fc34.x86_64"
     },
     "dracut-network": {
-      "evra": "053-5.fc34.x86_64"
+      "evra": "055-3.fc34.x86_64"
     },
     "e2fsprogs": {
       "evra": "1.45.6-5.fc34.x86_64"
@@ -403,7 +403,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.11.0-1.fc34.x86_64"
+      "evra": "2.11.0-2.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-09T10:30:29Z",
+    "generated": "2021-07-10T15:57:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-08T20:43:32Z"
+        "generated": "2021-07-09T21:26:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-09T00:50:04Z"
+        "generated": "2021-07-10T00:55:35Z"
       }
     }
   }

From daf40418f1f517c2628f523d96b62a14e7d69b2f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 11 Jul 2021 21:18:55 +0000
Subject: [PATCH 0342/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/368/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 249e6d7708..d70adfd164 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -259,7 +259,7 @@
       "evra": "0.185-2.fc34.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.12-1.fc34.x86_64"
+      "evra": "2:5.13-1.fc34.x86_64"
     },
     "expat": {
       "evra": "2.4.1-1.fc34.x86_64"
@@ -553,7 +553,7 @@
       "evra": "0.5.0-47.fc34.x86_64"
     },
     "libeconf": {
-      "evra": "0.3.8-5.fc34.x86_64"
+      "evra": "0.4.0-1.fc34.x86_64"
     },
     "libedit": {
       "evra": "3.1-37.20210522cvs.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-10T15:57:35Z",
+    "generated": "2021-07-11T20:53:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-09T21:26:26Z"
+        "generated": "2021-07-10T16:33:45Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-10T00:55:35Z"
+        "generated": "2021-07-11T00:54:43Z"
       }
     }
   }

From 62d2330e0aa4e27a28aaf5f5f7db79c4d63131c5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 12 Jul 2021 00:43:08 +0000
Subject: [PATCH 0343/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 16 ++--------------
 1 file changed, 2 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1f189b926d..3af5dab19d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,24 +8,12 @@
 # omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
 
 packages:
-  dracut:
-    evr: 055-3.fc34
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842#issuecomment-867900969
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d1b72b267
-  dracut-network:
-    evr: 055-3.fc34
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/842#issuecomment-867900969
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d1b72b267
   fedora-coreos-pinger:
     evr: 0.0.4-11.fc34
     metadata:
-      type: fast-track
-      reason: https://github.com/coreos/fedora-coreos-config/pull/1088
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d4c3ddc8a
+      reason: https://github.com/coreos/fedora-coreos-config/pull/1088
+      type: fast-track
   ignition:
     evr: 2.11.0-2.fc34
     metadata:

From cc6e504e28fec00b527d3e2b1ec9c1932b9a34a6 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 9 Jul 2021 19:08:31 -0400
Subject: [PATCH 0344/2157] ci: encourage adding Bodhi update link to
 fast-track overrides

See discussion in https://github.com/coreos/fedora-coreos-config/pull/1096#pullrequestreview-703323756.
---
 ci/remove-graduated-overrides.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ci/remove-graduated-overrides.py b/ci/remove-graduated-overrides.py
index 0734174796..598891c954 100755
--- a/ci/remove-graduated-overrides.py
+++ b/ci/remove-graduated-overrides.py
@@ -18,8 +18,9 @@
 #
 # IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
 # include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a URL in the `metadata.reason` key, though it's acceptable to
-# omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
 """
 
 

From 49141cc04ce41e70ac3933830b85119c7b59a726 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 13 Jul 2021 13:52:29 -0400
Subject: [PATCH 0345/2157] overrides: fast-track coreos-installer-0.9.1-2.fc34

Contains backport of https://github.com/coreos/coreos-installer/pull/571
for https://github.com/coreos/fedora-coreos-tracker/issues/889.
---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3af5dab19d..6919231c34 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -18,3 +18,15 @@ packages:
     evr: 2.11.0-2.fc34
     metadata:
       type: fast-track
+  coreos-installer:
+    evr: 0.9.1-2.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.9.1-2.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
+      type: fast-track

From a9960d5661f979d7522bf3cbcaeb68d7e3bf555b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 13 Jul 2021 21:42:04 +0000
Subject: [PATCH 0346/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/370/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d70adfd164..43052ff4f5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-20.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.9.1-1.fc34.x86_64"
+      "evra": "0.9.1-2.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.9.1-1.fc34.x86_64"
+      "evra": "0.9.1-2.fc34.x86_64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.x86_64"
@@ -637,7 +637,7 @@
       "evra": "1.0.4-13.fc34.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.12.1-1.fc34.x86_64"
+      "evra": "2.13.0-1.fc34.x86_64"
     },
     "libmount": {
       "evra": "2.36.2-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-11T20:53:14Z",
+    "generated": "2021-07-13T20:53:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-10T16:33:45Z"
+        "generated": "2021-07-13T18:45:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-11T00:54:43Z"
+        "generated": "2021-07-13T00:53:12Z"
       }
     }
   }

From 0ba5d82eeaf735fa57ea82a5cef780848c5d49de Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Jul 2021 17:01:00 -0400
Subject: [PATCH 0347/2157] 35coreos-live: add requirement on loop kmod

For some reason in rawhide this is no longer getting pulled in to the
initramfs. Since we require the use of it here then let's be explicit
and pull it in.
---
 .../usr/lib/dracut/modules.d/35coreos-live/module-setup.sh   | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
index 65ee50a43f..6a91048d7d 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/module-setup.sh
@@ -12,6 +12,11 @@ install_and_enable_unit() {
     systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
 }
 
+installkernel() {
+    # we do loopmounts
+    instmods -c loop
+}
+
 install() {
     inst_multiple \
         bsdtar \

From 252b00f34be80f6a1a9d748948d9cc1e67f8f4d4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Jul 2021 22:07:47 -0400
Subject: [PATCH 0348/2157] ci: don't do a strict build for mechanical streams

If we are operating on a mechanical stream then we can pin packages in
lockfiles but we don't maintain a full set so we can't do a strict build.
---
 .cci.jenkinsfile | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 0c5ffc4eac..aace0afe79 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -4,6 +4,7 @@ cosaPod {
     checkoutToDir(scm, 'config')
 
     def basearch = shwrapCapture("cosa basearch")
+    def mechanical_streams = ['rawhide']
 
     shwrap("cd config && ci/validate")
 
@@ -27,7 +28,14 @@ cosaPod {
         parent_commit = meta["ostree-commit"]
     }
 
-    fcosBuild(skipInit: true, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
+    // do a build. If we are operating on a mechanical stream then we
+    // can pin packages in lockfiles but we don't maintain a full set
+    // so we can't do a strict build.
+    def no_strict_build = false
+    if (env.CHANGE_TARGET in mechanical_streams) {
+        no_strict_build = true
+    }
+    fcosBuild(skipInit: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
 
     parallel metal: {
         shwrap("cd /srv/fcos && cosa buildextend-metal")

From a8ec676641d04d68422ffc73ee47c1195af96e3f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 14 Jul 2021 10:15:21 -0400
Subject: [PATCH 0349/2157] manifests: move fedora-coreos-pool to
 fedora-coreos.yaml

This is common to all streams, so we can move it here. I had initially
kept it in `manifest.yaml` because of:

https://github.com/coreos/fedora-coreos-config/pull/355#issuecomment-620860762
---
 manifest.yaml                | 6 ------
 manifests/fedora-coreos.yaml | 4 ++++
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/manifest.yaml b/manifest.yaml
index 213cb88408..2acf1e4979 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -16,12 +16,6 @@ repos:
   - fedora
   - fedora-updates
 
-# All Fedora CoreOS streams share the same pool for locked files.
-# This will be in fedora-coreos.yaml in the future so it can be more easily be
-# shared between all the streams
-lockfile-repos:
-  - fedora-coreos-pool
-
 add-commit-metadata:
   fedora-coreos.stream: testing-devel
 
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 3da75faf8f..726e0af407 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -7,6 +7,10 @@ include: fedora-coreos-base.yaml
 automatic-version-prefix: "${releasever}.<date:%Y%m%d>.dev"
 mutate-os-release: "${releasever}"
 
+# All Fedora CoreOS streams share the same pool for locked files.
+lockfile-repos:
+  - fedora-coreos-pool
+
 packages:
   - fedora-release-coreos
   - fedora-repos-ostree

From 31832a5c6771462d66f71331ee913cb24e3ec651 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 14 Jul 2021 10:54:36 -0400
Subject: [PATCH 0350/2157] ci: add `branched` to list of mechanical streams

We might as well enable overrides support on all mechanical streams
while we're at it.

Eventually, we should move our stream definitions into coreos-ci-lib to
have it in one canonical place.
---
 .cci.jenkinsfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index aace0afe79..ec9517e6c3 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -4,7 +4,7 @@ cosaPod {
     checkoutToDir(scm, 'config')
 
     def basearch = shwrapCapture("cosa basearch")
-    def mechanical_streams = ['rawhide']
+    def mechanical_streams = ['branched', 'rawhide']
 
     shwrap("cd config && ci/validate")
 

From f72855e7a364f6a0ca00b89576eb4fe50a33ff82 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Jul 2021 21:29:15 +0000
Subject: [PATCH 0351/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/371/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 43052ff4f5..5fc6c9d878 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,13 +355,13 @@
       "evra": "2.68.2-1.fc34.x86_64"
     },
     "glibc": {
-      "evra": "2.33-18.fc34.x86_64"
+      "evra": "2.33-20.fc34.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-18.fc34.x86_64"
+      "evra": "2.33-20.fc34.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-18.fc34.x86_64"
+      "evra": "2.33-20.fc34.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-6.fc34.x86_64"
@@ -490,7 +490,7 @@
       "evra": "0.8.5-4.fc34.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.1-8.fc34.x86_64"
+      "evra": "1.19.1-14.fc34.x86_64"
     },
     "less": {
       "evra": "581.2-1.fc34.x86_64"
@@ -766,7 +766,7 @@
       "evra": "1.31-3.fc34.x86_64"
     },
     "libtevent": {
-      "evra": "0.10.2-7.fc34.x86_64"
+      "evra": "0.11.0-0.fc34.x86_64"
     },
     "libtextstyle": {
       "evra": "0.21-4.fc34.x86_64"
@@ -1117,22 +1117,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.3-1.fc34.x86_64"
+      "evra": "248.4-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.3-1.fc34.x86_64"
+      "evra": "248.4-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.3-1.fc34.x86_64"
+      "evra": "248.4-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.3-1.fc34.x86_64"
+      "evra": "248.4-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.3-1.fc34.noarch"
+      "evra": "248.4-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.3-1.fc34.x86_64"
+      "evra": "248.4-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3070-1.fc34.x86_64"
+      "evra": "2:8.2.3154-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "1.1.15-1.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.21-2.fc34.x86_64"
+      "evra": "0.0.22-1.fc34.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-13T20:53:39Z",
+    "generated": "2021-07-14T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-13T18:45:12Z"
+        "generated": "2021-07-14T13:53:09Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-13T00:53:12Z"
+        "generated": "2021-07-14T00:52:10Z"
       }
     }
   }

From dba5fd294b28f534353fd0d1369a1c0d959ad380 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Jul 2021 23:08:09 -0400
Subject: [PATCH 0352/2157] lockfiles: fast-track selinux-policy-34.14-1.fc34

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/861
---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 6919231c34..402ce35635 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -30,3 +30,15 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
       type: fast-track
+  selinux-policy:
+    evra: 34.14-1.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      type: fast-track
+  selinux-policy-targeted:
+    evra: 34.14-1.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      type: fast-track

From 54cacec4936fc8b97fd53ee40de2aa67b5e5a7ee Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 14 Jul 2021 16:19:57 -0400
Subject: [PATCH 0353/2157] overlay: add empty statoverride files in all
 overlays

This is a no-op, but helps document the functionality.

Part of https://github.com/coreos/coreos-assembler/pull/2293.
---
 overlay.d/05core/statoverride                   | 2 ++
 overlay.d/08nouveau/statoverride                | 2 ++
 overlay.d/09misc/statoverride                   | 2 ++
 overlay.d/12kdump/statoverride                  | 2 ++
 overlay.d/14NetworkManager-plugins/statoverride | 2 ++
 overlay.d/15fcos/statoverride                   | 2 ++
 overlay.d/20platform-chrony/statoverride        | 2 ++
 7 files changed, 14 insertions(+)
 create mode 100644 overlay.d/05core/statoverride
 create mode 100644 overlay.d/08nouveau/statoverride
 create mode 100644 overlay.d/09misc/statoverride
 create mode 100644 overlay.d/12kdump/statoverride
 create mode 100644 overlay.d/14NetworkManager-plugins/statoverride
 create mode 100644 overlay.d/15fcos/statoverride
 create mode 100644 overlay.d/20platform-chrony/statoverride

diff --git a/overlay.d/05core/statoverride b/overlay.d/05core/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/05core/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/08nouveau/statoverride b/overlay.d/08nouveau/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/08nouveau/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/09misc/statoverride b/overlay.d/09misc/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/09misc/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/12kdump/statoverride b/overlay.d/12kdump/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/12kdump/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/14NetworkManager-plugins/statoverride b/overlay.d/14NetworkManager-plugins/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/14NetworkManager-plugins/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/15fcos/statoverride b/overlay.d/15fcos/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/15fcos/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/20platform-chrony/statoverride b/overlay.d/20platform-chrony/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/20platform-chrony/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>

From 67a70afe3cf82d66a8bee11c7b15208c38102d9a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 14 Jul 2021 16:25:38 -0400
Subject: [PATCH 0354/2157] overlay: chmod 600 /etc/sudoers.d/coreos-sudo-group

Apparently there are security scanners that object to mode 644.

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1981979.
---
 overlay.d/05core/statoverride | 4 ++++
 tests/kola/misc-ro            | 8 ++++++++
 2 files changed, 12 insertions(+)

diff --git a/overlay.d/05core/statoverride b/overlay.d/05core/statoverride
index 27a95affe2..9769b8ccb0 100644
--- a/overlay.d/05core/statoverride
+++ b/overlay.d/05core/statoverride
@@ -1,2 +1,6 @@
 # Config file for overriding permission bits on overlay files/dirs
 # Format: =<file mode in decimal> <absolute path to a file or directory>
+
+# Some security scanners complain if /etc/sudoers.d files have 0044 mode bits
+# https://bugzilla.redhat.com/show_bug.cgi?id=1981979
+=384 /etc/sudoers.d/coreos-sudo-group
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index cdf9073e58..0ebfabfa0a 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -64,6 +64,14 @@ if test -d /usr/share/info; then
     fatal "found /usr/share/info"
 fi
 
+# Security scanners complain about world-readable files in /etc/sudoers.d.
+# Check that there aren't any.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1981979
+sudoers_files="$(find /etc/sudoers.d -type f ! -perm 600 2>&1)"
+if [ -n "$sudoers_files" ]; then
+    fatal "Found files in /etc/sudoers.d with unexpected permissions: $sudoers_files"
+fi
+
 # See https://github.com/coreos/coreos-assembler/pull/1786
 path=/usr/lib/systemd/system-generators/coreos-platform-chrony
 mode=$(stat -c '%a' ${path})

From 3b7d74c53845d2ff8ee79954e552fc57c39ec8fd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 15 Jul 2021 14:48:30 -0400
Subject: [PATCH 0355/2157] lockfiles: fast-track ostree-2021.3-1.fc34

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/746
---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 402ce35635..696c5238ec 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -42,3 +42,15 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
       type: fast-track
+  ostree:
+    evr: 2021.3-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
+      type: fast-track
+  ostree-libs:
+    evr: 2021.3-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
+      type: fast-track

From f67317aadb647e52ee40988c846039f5659e24d9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 15 Jul 2021 21:28:02 +0000
Subject: [PATCH 0356/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/372/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5fc6c9d878..c12fe21deb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.14-300.fc34.x86_64"
+      "evra": "5.12.15-300.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.14-300.fc34.x86_64"
+      "evra": "5.12.15-300.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.14-300.fc34.x86_64"
+      "evra": "5.12.15-300.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -721,7 +721,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.5-0.fc34.x86_64"
+      "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-2.fc34.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.5-0.fc34.x86_64"
+      "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.23-1.fc34.x86_64"
@@ -865,7 +865,7 @@
       "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.11.0-1.fc34.x86_64"
+      "evra": "78.12.0-1.fc34.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.x86_64"
@@ -931,10 +931,10 @@
       "evra": "1.77-7.fc34.x86_64"
     },
     "ostree": {
-      "evra": "2021.2-2.fc34.x86_64"
+      "evra": "2021.3-1.fc34.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.2-2.fc34.x86_64"
+      "evra": "2021.3-1.fc34.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-3.fc34.x86_64"
@@ -1030,22 +1030,22 @@
       "evra": "2:1.0.0-378.rc95.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.5-0.fc34.x86_64"
+      "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.5-0.fc34.noarch"
+      "evra": "2:4.14.6-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.5-0.fc34.x86_64"
+      "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "sed": {
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.13-1.fc34.noarch"
+      "evra": "34.14-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.13-1.fc34.noarch"
+      "evra": "34.14-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-14T20:53:20Z",
+    "generated": "2021-07-15T20:53:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-14T13:53:09Z"
+        "generated": "2021-07-15T20:28:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-14T00:52:10Z"
+        "generated": "2021-07-15T00:52:27Z"
       }
     }
   }

From a1ab210d4d5abdc520c4b73c8b4142deac9a5423 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 15 Jun 2021 17:55:38 +0200
Subject: [PATCH 0357/2157] Revert "overlay.d/09misc: Fix mode for some files
 in /etc"

This is now safe to revert as this has been included in a testing
release with a barrier and will thus also be in the next stable release:
https://github.com/coreos/fedora-coreos-streams/pull/328

This reverts commit 73145e08b856ec59906e2256e200d626eba75097.
---
 .../usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf  | 11 -----------
 overlay.d/README.md                                   |  3 +--
 2 files changed, 1 insertion(+), 13 deletions(-)
 delete mode 100644 overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf

diff --git a/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf b/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf
deleted file mode 100644
index 3415d220f6..0000000000
--- a/overlay.d/09misc/usr/lib/tmpfiles.d/coreos-fix-etc-ownership.conf
+++ /dev/null
@@ -1,11 +0,0 @@
-# Workaround for https://github.com/coreos/fedora-coreos-tracker/issues/829
-# Fix mode (chmod g-w) for existing files on the system during boot
-z /etc/crypto-policies/state/current               644 root root
-z /etc/group                                       644 root root
-z /etc/group-                                      644 root root
-z /etc/iscsi/initiatorname.iscsi                   644 root root
-z /etc/passwd                                      644 root root
-z /etc/passwd-                                     644 root root
-z /etc/selinux/config                              644 root root
-z /etc/ssh/sshd_config.d/40-disable-passwords.conf 644 root root
-z /etc/systemd/dont-synthesize-nobody              644 root root
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 0dbe9031a1..384112faec 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -15,8 +15,7 @@ https://bugzilla.redhat.com/show_bug.cgi?id=1700056
 09misc
 ------
 
-* Warning about `/etc/sysconfig`.
-* Temporary systemd-tpmfiles.d config to fix ownership and permissions in /etc
+Warning about `/etc/sysconfig`.
 
 14NetworkManager-plugins
 ------------------------

From b535894c22a8bb0a19b1aa661713c29749cf5f19 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 15 Jul 2021 15:36:23 -0400
Subject: [PATCH 0358/2157] tests/manual: silence audit messages to the console

Makes poking around on the serial console easier.
---
 tests/manual/coreos-docs-net-testing.sh | 7 ++++++-
 tests/manual/coreos-network-testing.sh  | 7 ++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index ffd4d9db7e..9d3da3006c 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -56,7 +56,12 @@ systemd:
           ExecStart=-/usr/sbin/agetty --autologin core --noclear %I $TERM
           TTYVTDisallocate=no
 storage:
-  files:'
+  files:
+    - path: /etc/sysctl.d/20-silence-audit.conf
+      contents:
+        inline: |
+          # Raise console message logging level from DEBUG (7) to WARNING (4)
+          kernel.printk=4'
 
 fcct_hostname='
     - path: /etc/hostname
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index 1110b9efac..c8bf50609b 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -45,7 +45,12 @@ storage:
       contents:
         source: https://raw.githubusercontent.com/coreos/fedora-coreos-config/8b08bd030ef3968d00d4fea9a0fa3ca3fbabf852/COPYING
         verification:
-          hash: sha512-d904690e4fc5defb804c2151e397cbe2aeeea821639995610aa377bb2446214c3433616a8708163776941df585b657648f20955e50d4b011ea2a96e7d8e08c66'
+          hash: sha512-d904690e4fc5defb804c2151e397cbe2aeeea821639995610aa377bb2446214c3433616a8708163776941df585b657648f20955e50d4b011ea2a96e7d8e08c66
+    - path: /etc/sysctl.d/20-silence-audit.conf
+      contents:
+        inline: |
+          # Raise console message logging level from DEBUG (7) to WARNING (4)
+          kernel.printk=4'
 
 ignitionhostname='ignitionhost'
 fcct_hostname='

From d153b350c77d12b9902142e88a412eca036fdbf1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 15 Jul 2021 15:39:18 -0400
Subject: [PATCH 0359/2157] tests/manual: fcct is now known as butane

---
 tests/manual/coreos-docs-net-testing.sh | 68 ++++++++++++-------------
 tests/manual/coreos-network-testing.sh  | 64 +++++++++++------------
 2 files changed, 66 insertions(+), 66 deletions(-)

diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 9d3da3006c..5f6438d13d 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -35,7 +35,7 @@ set -eu -o pipefail
 
 vmname="coreos-docs-nettest"
 
-fcct_common=\
+butane_common=\
 'variant: fcos
 version: 1.0.0
 passwd:
@@ -63,14 +63,14 @@ storage:
           # Raise console message logging level from DEBUG (7) to WARNING (4)
           kernel.printk=4'
 
-fcct_hostname='
+butane_hostname='
     - path: /etc/hostname
       mode: 0644
       contents:
         inline: |
           ${hostname}'
 
-fcct_disable_subnic2='
+butane_disable_subnic2='
     - path: /etc/NetworkManager/system-connections/${subnic2}.nmconnection
       mode: 0600
       contents:
@@ -84,7 +84,7 @@ fcct_disable_subnic2='
           [ipv6]
           method=disabled'
 
-fcct_staticip='
+butane_staticip='
     - path: /etc/NetworkManager/system-connections/${interface}.nmconnection
       mode: 0600
       contents:
@@ -101,7 +101,7 @@ fcct_staticip='
           may-fail=false
           method=manual'
 
-fcct_staticbond='
+butane_staticbond='
     - path: /etc/NetworkManager/system-connections/${bondname}.nmconnection
       mode: 0600
       contents:
@@ -141,7 +141,7 @@ fcct_staticbond='
           master=${bondname}
           slave-type=bond'
 
-fcct_dhcpbridge='
+butane_dhcpbridge='
     - path: /etc/NetworkManager/system-connections/${bridgename}.nmconnection
       mode: 0600
       contents:
@@ -178,7 +178,7 @@ fcct_dhcpbridge='
           slave-type=bridge
           [bridge-port]'
 
-fcct_dhcpteam='
+butane_dhcpteam='
     - path: /etc/NetworkManager/system-connections/${teamname}.nmconnection
       mode: 0600
       contents:
@@ -218,7 +218,7 @@ fcct_dhcpteam='
           [team-port]
           config={"prio": 100}'
 
-fcct_staticvlan='
+butane_staticvlan='
     - path: /etc/NetworkManager/system-connections/${interface}.${vlanid}.nmconnection
       mode: 0600
       contents:
@@ -256,7 +256,7 @@ fcct_staticvlan='
           dns-search=
           method=disabled'
 
-fcct_dhcpvlanbond='
+butane_dhcpvlanbond='
     - path: /etc/NetworkManager/system-connections/${bondname}.${vlanid}.nmconnection
       mode: 0600
       contents:
@@ -323,7 +323,7 @@ check_requirements() {
     reqs=(
         chcon
         envsubst
-        fcct
+        butane
         jq
         ssh
         ssh-keygen
@@ -361,11 +361,11 @@ destroy_vm() {
 }
 
 create_ignition_file() {
-    local fcctconfig=$1
+    local butaneconfig=$1
     local ignitionfile=$2
     # uncomment and use ign-converter instead if on rhcos less than 4.6
-    #echo "$fcctconfig" | fcct --strict | ign-converter -downtranslate -output $ignitionfile
-    echo "$fcctconfig" | fcct --strict --output $ignitionfile
+    #echo "$butaneconfig" | butane --strict | ign-converter -downtranslate -output $ignitionfile
+    echo "$butaneconfig" | butane --strict --output $ignitionfile
     chcon --verbose unconfined_u:object_r:svirt_home_t:s0 $ignitionfile &>/dev/null
 }
 
@@ -391,7 +391,7 @@ main() {
     local sshpubkeyfile="${PWD}/coreos-nettest-sshkey.pub"
     local ignitionfile="${PWD}/coreos-nettest-config.ign"
     local sshpubkey
-    local fcct
+    local butane
      
     check_requirements
 
@@ -446,23 +446,23 @@ EOF
     # in using the envsubst command
     export ip gateway netmask prefix interface nameserver bondname teamname bridgename subnic1 subnic2 vlanid
 
-    fcct_none=$(echo "${fcct_common}" | envsubst)
+    butane_none=$(echo "${butane_common}" | envsubst)
 
     export hostname="staticip"
     x="${common_args} rd.neednet=1"
     x+=" ip=${ip}::${gateway}:${netmask}:${hostname}:${interface}:none:${nameserver}"
     x+=" ip=${subnic2}:off"
     initramfs_staticip=$x
-    fcct_initramfs_staticip="${fcct_none}"
-    fcct_staticip=$(echo "${fcct_common}${fcct_hostname}${fcct_staticip}${fcct_disable_subnic2}" | envsubst)
+    butane_initramfs_staticip="${butane_none}"
+    butane_staticip=$(echo "${butane_common}${butane_hostname}${butane_staticip}${butane_disable_subnic2}" | envsubst)
 
     export hostname="staticbond"
     x="${common_args} rd.neednet=1"
     x+=" ip=${ip}::${gateway}:${netmask}:${hostname}:${bondname}:none:${nameserver}"
     x+=" bond=${bondname}:${subnic1},${subnic2}:mode=active-backup,miimon=100"
     initramfs_staticbond=$x
-    fcct_initramfs_staticbond="${fcct_none}"
-    fcct_staticbond=$(echo "${fcct_common}${fcct_hostname}${fcct_staticbond}" | envsubst)
+    butane_initramfs_staticbond="${butane_none}"
+    butane_staticbond=$(echo "${butane_common}${butane_hostname}${butane_staticbond}" | envsubst)
 
     export hostname="dhcpbridge"
     x="${common_args} rd.neednet=1"
@@ -470,8 +470,8 @@ EOF
     x+=" bridge=${bridgename}:${subnic1},${subnic2}"
     x+=" nameserver=${nameserver}"
     initramfs_dhcpbridge=$x
-    fcct_initramfs_dhcpbridge=$(echo "${fcct_common}${fcct_hostname}" | envsubst)
-    fcct_dhcpbridge=$(echo "${fcct_common}${fcct_hostname}${fcct_dhcpbridge}" | envsubst)
+    butane_initramfs_dhcpbridge=$(echo "${butane_common}${butane_hostname}" | envsubst)
+    butane_dhcpbridge=$(echo "${butane_common}${butane_hostname}${butane_dhcpbridge}" | envsubst)
 
     export hostname="dhcpteam"
     x="${common_args} rd.neednet=1"
@@ -479,8 +479,8 @@ EOF
     x+=" team=${teamname}:${subnic1},${subnic2}"
     x+=" nameserver=${nameserver}"
     initramfs_dhcpteam=$x
-    fcct_initramfs_dhcpteam=$(echo "${fcct_common}${fcct_hostname}" | envsubst)
-    fcct_dhcpteam=$(echo "${fcct_common}${fcct_hostname}${fcct_dhcpteam}" | envsubst)
+    butane_initramfs_dhcpteam=$(echo "${butane_common}${butane_hostname}" | envsubst)
+    butane_dhcpteam=$(echo "${butane_common}${butane_hostname}${butane_dhcpteam}" | envsubst)
 
     export hostname="staticvlan"
     x="${common_args} rd.neednet=1"
@@ -488,8 +488,8 @@ EOF
     x+=" vlan=${interface}.${vlanid}:${interface}"
     x+=" ip=${subnic2}:off"
     initramfs_staticvlan=$x
-    fcct_initramfs_staticvlan="${fcct_none}"
-    fcct_staticvlan=$(echo "${fcct_common}${fcct_hostname}${fcct_staticvlan}${fcct_disable_subnic2}" | envsubst)
+    butane_initramfs_staticvlan="${butane_none}"
+    butane_staticvlan=$(echo "${butane_common}${butane_hostname}${butane_staticvlan}${butane_disable_subnic2}" | envsubst)
 
     export hostname="dhcpvlanbond"
     x="${common_args} rd.neednet=1"
@@ -497,8 +497,8 @@ EOF
     x+=" bond=${bondname}:${subnic1},${subnic2}:mode=active-backup,miimon=100"
     x+=" vlan=${bondname}.${vlanid}:${bondname}"
     initramfs_dhcpvlanbond=$x
-    fcct_initramfs_dhcpvlanbond=$(echo "${fcct_common}${fcct_hostname}" | envsubst)
-    fcct_dhcpvlanbond=$(echo "${fcct_common}${fcct_hostname}${fcct_dhcpvlanbond}" | envsubst)
+    butane_initramfs_dhcpvlanbond=$(echo "${butane_common}${butane_hostname}" | envsubst)
+    butane_dhcpvlanbond=$(echo "${butane_common}${butane_hostname}${butane_dhcpvlanbond}" | envsubst)
 
     destroy_vm || true
 
@@ -511,22 +511,22 @@ EOF
        #dhcpvlanbond  # Requires special setup, see top of file comment
     )
 
-    create_ignition_file "$fcct_none" $ignitionfile
+    create_ignition_file "$butane_none" $ignitionfile
     for net in ${loopitems[@]}; do
         var="initramfs_${net}"
         kernel_args=${!var}
-        var="fcct_initramfs_${net}"
-        fcctconfig=${!var}
-        create_ignition_file "$fcctconfig" $ignitionfile
+        var="butane_initramfs_${net}"
+        butaneconfig=${!var}
+        create_ignition_file "$butaneconfig" $ignitionfile
         start_vm $qcow $ignitionfile $kernel $initramfs "${kernel_args}"
         destroy_vm
     done
 
     for net in ${loopitems[@]}; do
-        var="fcct_${net}"
-        fcctconfig=${!var}
+        var="butane_${net}"
+        butaneconfig=${!var}
         kernel_args=${common_args}
-        create_ignition_file "$fcctconfig" $ignitionfile
+        create_ignition_file "$butaneconfig" $ignitionfile
         start_vm $qcow $ignitionfile $kernel $initramfs "${kernel_args}"
         destroy_vm
     done
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index c8bf50609b..bf1268343b 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -13,7 +13,7 @@ set -eu -o pipefail
 
 vmname="coreos-nettest"
 
-fcct_common=\
+butane_common=\
 'variant: fcos
 version: 1.0.0
 passwd:
@@ -53,14 +53,14 @@ storage:
           kernel.printk=4'
 
 ignitionhostname='ignitionhost'
-fcct_hostname='
+butane_hostname='
     - path: /etc/hostname
       mode: 0644
       contents:
         inline: |
           ${ignitionhostname}'
 
-fcct_static_nic0_ifcfg='
+butane_static_nic0_ifcfg='
     - path: /etc/sysconfig/network-scripts/ifcfg-${nic0}
       mode: 0600
       contents:
@@ -86,7 +86,7 @@ fcct_static_nic0_ifcfg='
           DEVICE=${nic1}
           ONBOOT=no'
 
-fcct_static_nic0='
+butane_static_nic0='
     - path: /etc/NetworkManager/system-connections/${nic0}.nmconnection
       mode: 0600
       contents:
@@ -116,7 +116,7 @@ fcct_static_nic0='
           [ipv6]
           method=disabled'
 
-fcct_static_team0='
+butane_static_team0='
     - path: /etc/NetworkManager/system-connections/team0.nmconnection
       mode: 0600
       contents:
@@ -158,7 +158,7 @@ fcct_static_team0='
           [team-port]
           config={"prio": 100}'
 
-fcct_static_bond0='
+butane_static_bond0='
     - path: /etc/NetworkManager/system-connections/bond0.nmconnection
       mode: 0600
       contents:
@@ -197,7 +197,7 @@ fcct_static_bond0='
           master=bond0
           slave-type=bond'
 
-fcct_static_br0='
+butane_static_br0='
     - path: /etc/NetworkManager/system-connections/br0.nmconnection
       mode: 0600
       contents:
@@ -248,7 +248,7 @@ check_requirements() {
     reqs=(
         chcon
         envsubst
-        fcct
+        butane
         jq
         ssh
         ssh-keygen
@@ -448,11 +448,11 @@ destroy_vm() {
 }
 
 create_ignition_file() {
-    local fcctconfig=$1
+    local butaneconfig=$1
     local ignitionfile=$2
     # uncomment and use ign-converter instead if on rhcos less than 4.6
-    #echo "$fcctconfig" | fcct --strict | ign-converter -downtranslate -output $ignitionfile
-    echo "$fcctconfig" | fcct --strict --output $ignitionfile
+    #echo "$butaneconfig" | butane --strict | ign-converter -downtranslate -output $ignitionfile
+    echo "$butaneconfig" | butane --strict --output $ignitionfile
     chcon --verbose unconfined_u:object_r:svirt_home_t:s0 $ignitionfile &>/dev/null
 }
 
@@ -472,7 +472,7 @@ main() {
     local sshpubkeyfile="${PWD}/coreos-nettest-sshkey.pub"
     local ignitionfile="${PWD}/coreos-nettest-config.ign"
     local sshpubkey
-    local fcct
+    local butane
      
     check_requirements
 
@@ -578,12 +578,12 @@ EOF
     # in using the envsubst command
     export ip prefix nameserverstatic gateway sshpubkey ignitionhostname nic0 nic1
 
-    fcct_none=$(echo "${fcct_common}" | envsubst)
-    fcct_static_nic0=$(echo "${fcct_common}${fcct_hostname}${fcct_static_nic0}" | envsubst)
-    fcct_static_bond0=$(echo "${fcct_common}${fcct_hostname}${fcct_static_bond0}" | envsubst)
-    fcct_static_team0=$(echo "${fcct_common}${fcct_hostname}${fcct_static_team0}" | envsubst)
-    fcct_static_br0=$(echo "${fcct_common}${fcct_hostname}${fcct_static_br0}" | envsubst)
-    fcct_static_nic0_ifcfg=$(echo "${fcct_common}${fcct_hostname}${fcct_static_nic0_ifcfg}" | envsubst)
+    butane_none=$(echo "${butane_common}" | envsubst)
+    butane_static_nic0=$(echo "${butane_common}${butane_hostname}${butane_static_nic0}" | envsubst)
+    butane_static_bond0=$(echo "${butane_common}${butane_hostname}${butane_static_bond0}" | envsubst)
+    butane_static_team0=$(echo "${butane_common}${butane_hostname}${butane_static_team0}" | envsubst)
+    butane_static_br0=$(echo "${butane_common}${butane_hostname}${butane_static_br0}" | envsubst)
+    butane_static_nic0_ifcfg=$(echo "${butane_common}${butane_hostname}${butane_static_nic0_ifcfg}" | envsubst)
 
     # If the VM is still around for whatever reason, destroy it
     destroy_vm || true
@@ -593,7 +593,7 @@ EOF
     # networking. Do a ifcfg check to make sure.
     if [ "$rhcos" == 1 ]; then
         echo -e "\n###### Testing ifcfg file via Ignition disables initramfs propagation\n"
-        create_ignition_file "$fcct_static_nic0_ifcfg" $ignitionfile
+        create_ignition_file "$butane_static_nic0_ifcfg" $ignitionfile
         start_vm $qcow $ignitionfile $kernel $initramfs "$initramfs_static_bond0"
         check_vm 'none' 1 0 $ip $nic0 $ignitionhostname $nameserverstatic $sshkeyfile
         reboot_vm
@@ -605,7 +605,7 @@ EOF
     # configuration via Ignition either, so we'll just end up with DHCP and a
     # static hostname that is unset (`n/a`).
     echo -e "\n###### Testing coreos.no_persist_ip disables initramfs propagation\n"
-    create_ignition_file "$fcct_none" $ignitionfile
+    create_ignition_file "$butane_none" $ignitionfile
     start_vm $qcow $ignitionfile $kernel $initramfs "${initramfs_static_nic0} coreos.no_persist_ip"
     check_vm 'dhcp' 2 0 $ip $nic0 'n/a' $nameserverdhcp $sshkeyfile
     reboot_vm
@@ -616,7 +616,7 @@ EOF
     # configuration via Ignition either, so we'll just end up with DHCP and a
     # static hostname that is unset (`n/a`).
     echo -e "\n###### Testing coreos.force_persist_ip forces initramfs propagation\n"
-    create_ignition_file "$fcct_static_nic0" $ignitionfile
+    create_ignition_file "$butane_static_nic0" $ignitionfile
     start_vm $qcow $ignitionfile $kernel $initramfs "${initramfs_static_bond0} coreos.force_persist_ip"
     check_vm 'none' 1 3 $ip bond0 $ignitionhostname $nameserverstatic $sshkeyfile
     reboot_vm
@@ -642,7 +642,7 @@ EOF
     # 
     # [1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/issues/391
     echo -e "\n###### Testing initramfs nameserver= option\n"
-    create_ignition_file "$fcct_none" $ignitionfile
+    create_ignition_file "$butane_none" $ignitionfile
     start_vm $qcow $ignitionfile $kernel $initramfs "nameserver=${nameserverstatic} ${initramfs_dhcp_nic0nic1}"
     check_vm 'dhcp' 2 2 $ip $nic0 'n/a' $nameserverstatic $sshkeyfile
     reboot_vm
@@ -652,7 +652,7 @@ EOF
     # Do a `net.ifnames=0` check and make sure eth0 is the interface name.
     # We don't pass any hostname information so it will just be (`n/a`).
     echo -e "\n###### Testing net.ifnames=0 gives us legacy NIC naming\n"
-    create_ignition_file "$fcct_none" $ignitionfile
+    create_ignition_file "$butane_none" $ignitionfile
     start_vm $qcow $ignitionfile $kernel $initramfs "${initramfs_dhcp_eth0} net.ifnames=0"
     check_vm 'dhcp' 2 1 $ip 'eth0' 'n/a' $nameserverdhcp $sshkeyfile
     # Don't reboot and do another check because we didn't persist the net.ifnames=0 karg
@@ -667,7 +667,7 @@ EOF
         static_br0
     )
 
-    fcctloop=(
+    butaneloop=(
         none
         static_nic0
         static_bond0
@@ -676,11 +676,11 @@ EOF
     )
         
     for initramfsnet in ${initramfsloop[@]}; do
-        for fcctnet in ${fcctloop[@]}; do
+        for butanenet in ${butaneloop[@]}; do
             method='none'; interfaces=1;
             nameserver=${nameserverstatic}
             numkeyfiles=3
-            if [ "${fcctnet}" == 'none' ]; then
+            if [ "${butanenet}" == 'none' ]; then
                 # because we propagate initramfs networking if no real root networking 
                 devname=${initramfsnet##*_}
                 hostname=${initramfshostname}
@@ -700,24 +700,24 @@ EOF
                     numkeyfiles=2
                 fi
             else
-                devname=${fcctnet##*_}
+                devname=${butanenet##*_}
                 hostname=${ignitionhostname}
                 # If we're not using a virtual NIC (bond, bridge, team, etc)
                 # then only two keyfiles will be created.
-                if [ "${fcctnet}" == 'static_nic0' ]; then
+                if [ "${butanenet}" == 'static_nic0' ]; then
                     numkeyfiles=2
                 fi
             fi
             # If devname=nic0 then replace with ${nic0} variable
             [ $devname == "nic0" ] && devname=${nic0}
-            fcctvar="fcct_${fcctnet}"
-            fcctconfig=${!fcctvar}
+            butanevar="butane_${butanenet}"
+            butaneconfig=${!butanevar}
             initramfsvar="initramfs_${initramfsnet}"
             kernel_args=${!initramfsvar}
 
-            echo -e "\n###### Testing initramfs: ${initramfsnet} + ignition/fcct: ${fcctnet}\n"
+            echo -e "\n###### Testing initramfs: ${initramfsnet} + ignition/butane: ${butanenet}\n"
 
-            create_ignition_file "$fcctconfig" $ignitionfile
+            create_ignition_file "$butaneconfig" $ignitionfile
             start_vm $qcow $ignitionfile $kernel $initramfs "${kernel_args}"
             check_vm $method $interfaces $numkeyfiles $ip $devname $hostname $nameserver $sshkeyfile
             reboot_vm

From a4fb9e264f8fb1f2c7b5e6116d08e9a76dab9130 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Jul 2021 21:19:32 +0000
Subject: [PATCH 0360/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/373/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c12fe21deb..342fd5a516 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.1-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.12.1-1.fc34.x86_64"
+      "evra": "5.13-1.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-15T20:53:04Z",
+    "generated": "2021-07-16T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-15T20:28:37Z"
+        "generated": "2021-07-15T21:36:11Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-15T00:52:27Z"
+        "generated": "2021-07-16T00:51:31Z"
       }
     }
   }

From 589866fb685b02063c7a11fd29647d6df7f1bee0 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Fri, 18 Jun 2021 16:02:35 -0400
Subject: [PATCH 0361/2157] tests: add test for watching files labeled
 kubernetes_file_t

Adds a test for the ability of `systemd` to watch files
labeled with `kubernetes_file_t`.

See: https://github.com/coreos/fedora-coreos-tracker/issues/861
See: https://github.com/containers/container-selinux/issues/135

Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 tests/kola/misc-ign-ro/config.fcc | 33 ++++++++++++++++++++++++++++++-
 tests/kola/misc-ign-ro/test.sh    | 22 +++++++++++++++++++++
 2 files changed, 54 insertions(+), 1 deletion(-)

diff --git a/tests/kola/misc-ign-ro/config.fcc b/tests/kola/misc-ign-ro/config.fcc
index 7dcb62bf93..2895e7e8c1 100644
--- a/tests/kola/misc-ign-ro/config.fcc
+++ b/tests/kola/misc-ign-ro/config.fcc
@@ -1,6 +1,12 @@
 variant: fcos
-version: 1.1.0
+version: 1.2.0
 storage:
+  directories:
+    # This is for verifying that `kubernetes_file_t` labeled files can be
+    # watched by systemd
+    # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+    # See: https://github.com/containers/container-selinux/issues/135
+    - path: /etc/kubernetes
   files:
     - path: /etc/systemd/zram-generator.conf
       mode: 0644
@@ -33,3 +39,28 @@ storage:
           AKbyaAqbChEy9CvDgyv6qxTYU+eeBImLKS3PH2uW5etc/69V/sDojqpH3hEffsOt
           9g==
           -----END CERTIFICATE-----
+systemd:
+  units:
+    - name: kube-watch.service
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # watched by systemd
+      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      # See: https://github.com/containers/container-selinux/issues/135
+      contents: |
+        [Service]
+        ExecStart=/usr/bin/echo "Found it"
+        RemainAfterExit=yes
+        Type=oneshot
+        [Install]
+        WantedBy=multi-user.target
+    - name: kube-watch.path
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # watched by systemd
+      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      # See: https://github.com/containers/container-selinux/issues/135
+      enabled: true
+      contents: |
+        [Path]
+        PathExists=/etc/kubernetes/kubeconfig
+        [Install]
+        WantedBy=multi-user.target
diff --git a/tests/kola/misc-ign-ro/test.sh b/tests/kola/misc-ign-ro/test.sh
index 6321fc7207..525e5ba2eb 100755
--- a/tests/kola/misc-ign-ro/test.sh
+++ b/tests/kola/misc-ign-ro/test.sh
@@ -36,3 +36,25 @@ if [ "$context" != "system_u:object_r:net_conf_t:s0" ]; then
     fatal "SELinux context on stub-resolv.conf is wrong"
 fi
 ok "SELinux context on stub-resolv.conf is correct"
+
+# This is for verifying that `kubernetes_file_t` labeled files can be
+# watched by systemd
+# See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+# See: https://github.com/containers/container-selinux/issues/135
+if [ "$(systemctl is-active kube-watch.path)" != "active" ]; then
+    fatal "kube-watch.path did not activate successfully"
+fi
+ok "kube-watch.path successfully activated"
+
+touch /etc/kubernetes/kubeconfig
+ok "successfully created /etc/kubernetes/kubeconfig"
+
+if [ "$(systemctl is-active kube-watch.service)" != "active" ]; then
+    fatal "kube-watch.service did not successfully activate"
+fi
+ok "kube-watch.service activated successfully"
+
+if [ "$(journalctl -o cat -u kube-watch.service | sed -n 2p)" != "Found it" ]; then
+    fatal "kube-watch.service did not print message to journal"
+fi
+ok "Found message from kube-watch.service in journal"

From ac1eb3b9880d7328d479983d7f663d6561c78a8a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Jul 2021 06:18:01 +0000
Subject: [PATCH 0362/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 39 ++++++++++++++++--------------------
 1 file changed, 17 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 696c5238ec..74ed3a56ba 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -4,20 +4,11 @@
 #
 # IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
 # include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a URL in the `metadata.reason` key, though it's acceptable to
-# omit one for FCOS-specific packages (e.g. ignition, afterburn, etc...).
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  fedora-coreos-pinger:
-    evr: 0.0.4-11.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-9d4c3ddc8a
-      reason: https://github.com/coreos/fedora-coreos-config/pull/1088
-      type: fast-track
-  ignition:
-    evr: 2.11.0-2.fc34
-    metadata:
-      type: fast-track
   coreos-installer:
     evr: 0.9.1-2.fc34
     metadata:
@@ -30,17 +21,9 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
       type: fast-track
-  selinux-policy:
-    evra: 34.14-1.fc34.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
-      type: fast-track
-  selinux-policy-targeted:
-    evra: 34.14-1.fc34.noarch
+  ignition:
+    evr: 2.11.0-2.fc34
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
       type: fast-track
   ostree:
     evr: 2021.3-1.fc34
@@ -54,3 +37,15 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
       type: fast-track
+  selinux-policy:
+    evra: 34.14-1.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      type: fast-track
+  selinux-policy-targeted:
+    evra: 34.14-1.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      type: fast-track

From ce835a1ace3bbaf3548a2fdfb7f69db3f6dd0845 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Jul 2021 21:20:05 +0000
Subject: [PATCH 0363/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/374/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 342fd5a516..7e687de421 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -112,7 +112,7 @@
       "evra": "5.2-39.fc34.x86_64"
     },
     "conmon": {
-      "evra": "2:2.0.27-2.fc34.x86_64"
+      "evra": "2:2.0.29-2.fc34.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-1.fc34.noarch"
@@ -307,7 +307,7 @@
       "evra": "0.9.4-1.fc34.noarch"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-3.fc34.x86_64"
+      "evra": "1.10.2-4.fc34.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-2.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-16T20:53:01Z",
+    "generated": "2021-07-17T20:53:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-15T21:36:11Z"
+        "generated": "2021-07-16T21:32:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-16T00:51:31Z"
+        "generated": "2021-07-17T01:33:35Z"
       }
     }
   }

From e1f7b689c1cd7c0d08fbd6b822e4ed554ee85275 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Jul 2021 06:18:06 +0000
Subject: [PATCH 0364/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 16 ----------------
 1 file changed, 16 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 74ed3a56ba..760628aa09 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -21,10 +21,6 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
       type: fast-track
-  ignition:
-    evr: 2.11.0-2.fc34
-    metadata:
-      type: fast-track
   ostree:
     evr: 2021.3-1.fc34
     metadata:
@@ -37,15 +33,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
       type: fast-track
-  selinux-policy:
-    evra: 34.14-1.fc34.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
-      type: fast-track
-  selinux-policy-targeted:
-    evra: 34.14-1.fc34.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-119c2c9b63
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/861
-      type: fast-track

From 11ef6b5eb4f3da898ca5b6d9889cc71a41a55ef5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Jul 2021 21:19:43 +0000
Subject: [PATCH 0365/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/375/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7e687de421..61086a1d89 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.30.4-1.fc34.x86_64"
+      "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.30.4-1.fc34.x86_64"
+      "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.30.4-1.fc34.x86_64"
+      "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.30.4-1.fc34.x86_64"
+      "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.30.4-1.fc34.x86_64"
+      "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.3.0.2-1.fc34.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-17T20:53:15Z",
+    "generated": "2021-07-18T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-16T21:32:12Z"
+        "generated": "2021-07-17T21:29:35Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-17T01:33:35Z"
+        "generated": "2021-07-18T00:53:12Z"
       }
     }
   }

From 386b6fedfdee105e35b75381e48cc46c28806fad Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 19 Jul 2021 14:49:13 -0400
Subject: [PATCH 0366/2157] 15fcos: order coreos-check-ignition-config.service
 before systemd-user-sessions.service

That way we can avoid the `agetty --reload`.
---
 .../lib/systemd/system/coreos-check-ignition-config.service    | 1 +
 overlay.d/15fcos/usr/libexec/coreos-check-ignition-config      | 3 ---
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
index 1a91853d6b..a44ba0497a 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
@@ -8,6 +8,7 @@ Description=Check if Ignition config is provided
 # get misleading messages. Also handles the case where the journal
 # gets rotated and no longer has the structured log messages.
 ConditionKernelCommandLine=ignition.firstboot
+Before=systemd-user-sessions.service
 [Service]
 Type=oneshot
 ExecStart=/usr/libexec/coreos-check-ignition-config
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
index 93093bdba0..cf3c69c0f2 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
@@ -21,6 +21,3 @@ else
     echo -e "${warn}Ignition: no config provided by user${nc}" > /etc/issue.d/30_ignition_config_info.issue
 fi
 
-# Ask all running agetty instances to reload and update their
-# displayed prompts in case this script was run before agetty.
-/usr/sbin/agetty --reload

From 333d5068f0fe3a6ded1c8db04268251044f04a75 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 19 Jul 2021 14:49:58 -0400
Subject: [PATCH 0367/2157] 15fcos: remember when Ignition ran and print on
 console

Some users sometimes may not realize that they're using a pre-booted
version of a CoreOS image. This makes things confusing because they then
don't understand why the Ignition config wasn't applied.

There's no way to consistently detect this, but at least we can print an
informational message about (1) when Ignition ran, and (2) how many
boots ago that was.

This enhances the Ignition issue we already write for whether a
user config was provided rather than creating a separate one.

Related: https://bugzilla.redhat.com/show_bug.cgi?id=1977949
Related: https://github.com/coreos/ignition/issues/1214
---
 .../coreos-ignition-firstboot-complete        | 30 +++++++++++
 .../coreos-check-ignition-config.service      | 13 ++---
 .../usr/libexec/coreos-check-ignition-config  | 51 +++++++++++++------
 3 files changed, 72 insertions(+), 22 deletions(-)

diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
index 3973d11e04..97baea619d 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
@@ -1,6 +1,14 @@
 #!/bin/bash
 set -euo pipefail
 
+# We put this in /run and it's then moved by
+# coreos-check-ignition-config.service into /var/lib/coreos. The reason is that
+# I don't want to use RequiresMountsFor=/var/lib on this service to keep it less
+# fallible. Once we move this service to the initramfs, then we can directly
+# write there since /var mounts are in place and we can safely trigger
+# emergency.target if we fail.
+IGNITION_INFO=/run/ignition.info.json
+
 mount -o remount,rw /boot
 
 if [[ $(uname -m) = s390x ]]; then
@@ -16,3 +24,25 @@ rm -rf /boot/ignition
 # this file. Fail if we are unable to remove it, rather than risking rerunning
 # Ignition at next boot.
 rm /boot/ignition.firstboot
+
+# See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
+nusercfgs=$(journalctl -o json-pretty MESSAGE_ID=57124006b5c94805b77ce473e92a8aeb \
+                | jq -s '.[] | select(.IGNITION_CONFIG_TYPE == "user")'| wc -l)
+if [ "${nusercfgs}" -gt 0 ]; then
+    usercfg=true
+else
+    usercfg=false
+fi
+
+mkdir -p "$(dirname "${IGNITION_INFO}")"
+
+# This is hardly sooper seekret stuff, but let's be conservative in light of
+# https://github.com/coreos/fedora-coreos-tracker/issues/889.
+touch "${IGNITION_INFO}"
+chmod 600 "${IGNITION_INFO}"
+cat >> "${IGNITION_INFO}" <<EOF
+{
+    "date": $(date +%s),
+    "usercfg": ${usercfg}
+}
+EOF
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
index a44ba0497a..525cdf8d30 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
@@ -2,16 +2,17 @@
 # no Ignition config is provided.
 [Unit]
 Description=Check if Ignition config is provided
-# Only perform checks on the first (Ignition) boot as they are
-# mostly useful only on that boot. This ensures systems started
-# before Ignition/Afterburn started logging structured data don't
-# get misleading messages. Also handles the case where the journal
-# gets rotated and no longer has the structured log messages.
-ConditionKernelCommandLine=ignition.firstboot
+After=coreos-ignition-firstboot-complete.service
 Before=systemd-user-sessions.service
+RequiresMountsFor=/var/lib/coreos
+ConditionPathExists=|/var/lib/coreos/ignition.info.json
+# See coreos-ignition-firstboot-complete
+ConditionPathExists=|/run/ignition.info.json
+
 [Service]
 Type=oneshot
 ExecStart=/usr/libexec/coreos-check-ignition-config
 RemainAfterExit=yes
+
 [Install]
 WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
index cf3c69c0f2..851999f7e8 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
@@ -1,23 +1,42 @@
 #!/usr/bin/bash
-# The logic for the message_id is handled in 
-# https://github.com/coreos/ignition/pull/958
-# In this script, we need to capture the journald 
-# log with the particular message_id and query using 
-#`jq` utility to check if a user config is provided.
+set -euo pipefail
 
-# Change the output color to yellow
-warn='\033[0;33m'
-# No color
-nc='\033[0m'
+IGNITION_INFO=/var/lib/coreos/ignition.info.json
+IGNITION_FIRSTBOOT_INFO=/run/ignition.info.json
 
-# See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
-# It will track the journal messages related to an Ignition config provided 
-# by the user.
-output=$(journalctl -o json-pretty MESSAGE_ID=57124006b5c94805b77ce473e92a8aeb | jq -s '.[] | select(.IGNITION_CONFIG_TYPE == "user")'| wc -l)
+WARN='\033[0;33m' # yellow
+RESET='\033[0m' # reset
 
-if [[ $output -gt  0 ]];then
-    echo "Ignition: user-provided config was applied" > /etc/issue.d/30_ignition_config_info.issue
+# See coreos-ignition-firstboot-complete
+is_firstboot=0
+if [ -e "${IGNITION_FIRSTBOOT_INFO}" ]; then
+    is_firstboot=1
+    mkdir -p "$(dirname "${IGNITION_INFO}")"
+    mv "${IGNITION_FIRSTBOOT_INFO}" "${IGNITION_INFO}"
+fi
+
+mkdir -p /run/issue.d
+touch /run/issue.d/30_coreos_ignition_provisioning.issue
+
+d=$(date --date "@$(jq .date "${IGNITION_INFO}")" +"%Y/%m/%d %H:%M:%S %Z")
+if [ "${is_firstboot}" == 1 ]; then
+    echo "Ignition: ran on ${d} (this boot)" \
+        > /run/issue.d/30_coreos_ignition_provisioning.issue
+else
+    nreboots=$(($(journalctl --list-boots | wc -l) - 1))
+    [ "${nreboots}" -eq 1 ] && boot="boot" || boot="boots"
+    echo "Ignition: ran on ${d} (at least $nreboots $boot ago)" \
+        > /run/issue.d/30_coreos_ignition_provisioning.issue
+fi
+
+if jq -e .usercfg "${IGNITION_INFO}" &>/dev/null; then
+    echo "Ignition: user-provided config was applied" \
+        >> /run/issue.d/30_coreos_ignition_provisioning.issue
 else
-    echo -e "${warn}Ignition: no config provided by user${nc}" > /etc/issue.d/30_ignition_config_info.issue
+    echo -e "${WARN}Ignition: no config provided by user${RESET}" \
+        >> /run/issue.d/30_coreos_ignition_provisioning.issue
 fi
 
+# Our makeshift way of getting /run/issue.d semantics. See:
+# https://github.com/coreos/console-login-helper-messages/blob/e06fc88ae8fbcc3a422bc8c686f70c15aebb9d9a/usr/lib/console-login-helper-messages/issue.defs#L8-L17
+ln -sf /run/issue.d/30_coreos_ignition_provisioning.issue /etc/issue.d/

From a530fe76f6815335f6acc7fb7691c28cf6ec8102 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 19 Jul 2021 14:37:37 -0400
Subject: [PATCH 0368/2157] lockfiles: fast-track
 container-selinux-2.164.1-1.git563ba3f.fc34

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/881
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 760628aa09..cf444a0f5b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,12 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  container-selinux:
+    evra: 2:2.164.1-1.git563ba3f.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-463a2721ec
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/881
+      type: fast-track
   coreos-installer:
     evr: 0.9.1-2.fc34
     metadata:

From d50a040753f22a60ae426fe6b03945c9d42d8610 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Jul 2021 17:01:53 -0400
Subject: [PATCH 0369/2157] manifests: remove outdated comment

The coreos-reset-stub-resolv-selinux-context path/service were
removed in 474c87b. So we don't need the comment.
---
 manifests/fedora-coreos-base.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 524c56f042..93a8eb7ba8 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -83,8 +83,6 @@ postprocess:
 
   # Neuter systemd-resolved for now.
   # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-743219353
-  # Note: When removing this, we likely also want to remove
-  # coreos-reset-stub-resolv-selinux-context.{path,service} and their presets.
   - |
     #!/usr/bin/env bash
     set -xeuo pipefail

From 35ba0419cd3daaf424c4c8d74654d51403932d2c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Jul 2021 17:06:08 -0400
Subject: [PATCH 0370/2157] manifests: make the systemd-resolved neutering F34
 only

The underlying issues are resolved in the latest NetworkManager in
Fedora 35+ so let's conditionalize it on Fedora 34.

Was fixed upstream by https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/877

Will fix https://github.com/coreos/fedora-coreos-tracker/issues/834
---
 manifests/fedora-coreos-base.yaml | 18 +++++++++++++-----
 tests/kola/misc-ro                |  8 +++++++-
 2 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 93a8eb7ba8..581845dfa5 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -83,9 +83,16 @@ postprocess:
 
   # Neuter systemd-resolved for now.
   # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-743219353
+  # Remove when on F35+ as NM now handles rdns + resolved better
+  # https://github.com/coreos/fedora-coreos-tracker/issues/834
+  # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/601
+  # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/877
   - |
     #!/usr/bin/env bash
     set -xeuo pipefail
+    # Only operate on F34 since F35+ has been fixed
+    source /etc/os-release
+    [ ${VERSION_ID} -eq 34 ] || exit 0
     # Get us back to Fedora 32's nsswitch.conf settings
     sed -i 's/^hosts:.*/hosts:      files dns myhostname/' /etc/nsswitch.conf
     mkdir -p /usr/lib/systemd/resolved.conf.d/
@@ -97,11 +104,12 @@ postprocess:
     DNSStubListener=no
     EOF
 
-  # Set the fallback hostname to `localhost`. This piggybacks on the
-  # postprocess script above which neuters systemd-resolved, because
-  # currently, a fallback hostname of `localhost` + systemd-resolved breaks
-  # rDNS. Eventually, we should be able to drop this at the same time as we drop
-  # the above. See: https://bugzilla.redhat.com/show_bug.cgi?id=1892235#c25
+  # Set the fallback hostname to `localhost`. This was needed in F33/F34
+  # because a fallback hostname of `fedora` + systemd-resolved broke
+  # rDNS. It's now fixed in F35+ NetworkManager to handle the corner cases
+  # around synthetized hostnames and systemd-resolved, but the question
+  # remains on what is a more appropriate default hostname for a server like
+  # host. https://github.com/coreos/fedora-coreos-tracker/issues/902
   - |
     #!/usr/bin/env bash
     source /etc/os-release
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 0ebfabfa0a..50ebaa5aab 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -32,10 +32,16 @@ if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive;
     fatal "Unit kdump.service shouldn't be active"
 fi
 # systemd-resolved should be enabled
-source /etc/os-release
 if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
     fatal "Unit systemd-resolved should be enabled"
 fi
+# systemd-resolved should be fully functional on f35+
+source /etc/os-release
+if [ "$VERSION_ID" -ge "35" ]; then
+    if ! grep 'nameserver 127.0.0.53' /etc/resolv.conf; then
+        fatal "systemd-resolved stub listener isn't enabled"
+    fi
+fi
 ok services
 
 # https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f

From 1f756d7c3e6eeb5bdd9ca488e0611af1782443b1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 19 Jul 2021 22:58:38 +0000
Subject: [PATCH 0371/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/377/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 61086a1d89..37f1bbc633 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.163.0-1.fc34.noarch"
+      "evra": "2:2.164.1-1.git563ba3f.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.0~rc.1-1.fc34.x86_64"
@@ -556,7 +556,7 @@
       "evra": "0.4.0-1.fc34.x86_64"
     },
     "libedit": {
-      "evra": "3.1-37.20210522cvs.fc34.x86_64"
+      "evra": "3.1-38.20210714cvs.fc34.x86_64"
     },
     "libevent": {
       "evra": "2.1.12-3.fc34.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210511-120.fc34.noarch"
+      "evra": "20210716-121.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210511-120.fc34.noarch"
+      "evra": "20210716-121.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-18T20:53:16Z",
+    "generated": "2021-07-19T21:49:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-17T21:29:35Z"
+        "generated": "2021-07-19T20:25:51Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-18T00:53:12Z"
+        "generated": "2021-07-19T00:52:17Z"
       }
     }
   }

From 2b3687b6b5a8a74bbbe392bf207b2c391f0235b3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 20 Jul 2021 13:43:42 -0400
Subject: [PATCH 0372/2157] lockfiles: fast-track systemd-248.5-1.fc34

Contains a fix for CVE-2021-33910.

See https://github.com/coreos/fedora-coreos-tracker/issues/904
---
 manifest-lock.overrides.yaml | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index cf444a0f5b..d338e5538b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -39,3 +39,39 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
       type: fast-track
+  systemd:
+    evr: 248.5-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  systemd-container:
+    evr: 248.5-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  systemd-libs:
+    evr: 248.5-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  systemd-pam:
+    evr: 248.5-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  systemd-udev:
+    evr: 248.5-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  systemd-rpm-macros:
+    evra: 248.5-1.fc34.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track

From 569504505889c29f2da0019b01773edb4141ad92 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 20 Jul 2021 21:29:26 +0000
Subject: [PATCH 0373/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/378/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 37f1bbc633..516a04f224 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1117,22 +1117,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.4-1.fc34.x86_64"
+      "evra": "248.5-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.4-1.fc34.x86_64"
+      "evra": "248.5-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.4-1.fc34.x86_64"
+      "evra": "248.5-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.4-1.fc34.x86_64"
+      "evra": "248.5-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.4-1.fc34.noarch"
+      "evra": "248.5-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.4-1.fc34.x86_64"
+      "evra": "248.5-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-19T21:49:55Z",
+    "generated": "2021-07-20T20:53:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-19T20:25:51Z"
+        "generated": "2021-07-20T18:46:00Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-19T00:52:17Z"
+        "generated": "2021-07-20T00:55:02Z"
       }
     }
   }

From 29f74c49793798a86e54bb4fadafc85275b3f871 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 20 Jul 2021 20:08:46 -0400
Subject: [PATCH 0374/2157] lockfiles: fast-track kernel-5.13.4-200.fc34

Contains 5.13 stream fix for CVE-2021-33909. Will add the
link to the bodhi update (once it's created) in a followup.

See https://github.com/coreos/fedora-coreos-tracker/issues/904
---
 manifest-lock.overrides.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d338e5538b..2032e72087 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -27,6 +27,21 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
       type: fast-track
+  kernel:
+    evr: 5.13.4-200.fc34
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  kernel-core:
+    evr: 5.13.4-200.fc34
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
+  kernel-modules:
+    evr: 5.13.4-200.fc34
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
+      type: fast-track
   ostree:
     evr: 2021.3-1.fc34
     metadata:

From c4da7a6015b711e9f3d7760fb0ef74eebbe5842d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 21 Jul 2021 09:55:13 -0400
Subject: [PATCH 0375/2157] lockfiles: update bodhi link for
 kernel-5.13.4-200.fc34

The bodhi update had not been created yet when we fast-tracked it
originally.
---
 manifest-lock.overrides.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2032e72087..e2b48be7e8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -30,16 +30,19 @@ packages:
   kernel:
     evr: 5.13.4-200.fc34
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
       type: fast-track
   kernel-core:
     evr: 5.13.4-200.fc34
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
       type: fast-track
   kernel-modules:
     evr: 5.13.4-200.fc34
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
       type: fast-track
   ostree:

From a5eee68225aeb0ee51c9c4c4a27ecebf5d0003d4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 21 Jul 2021 21:20:42 +0000
Subject: [PATCH 0376/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/379/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 516a04f224..9fd7ea592b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.12.15-300.fc34.x86_64"
+      "evra": "5.13.4-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.12.15-300.fc34.x86_64"
+      "evra": "5.13.4-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.12.15-300.fc34.x86_64"
+      "evra": "5.13.4-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.3.0-1.fc34.x86_64"
+      "evra": "1:1.3.1-1.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3154-1.fc34.x86_64"
+      "evra": "2:8.2.3182-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-20T20:53:55Z",
+    "generated": "2021-07-21T20:53:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-20T18:46:00Z"
+        "generated": "2021-07-21T04:52:24Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-20T00:55:02Z"
+        "generated": "2021-07-21T00:55:04Z"
       }
     }
   }

From f1a30dc38b116943acd59be2c8821ac1ed5b04ec Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 22 Jul 2021 06:20:12 +0000
Subject: [PATCH 0377/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 48 ------------------------------------
 1 file changed, 48 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index e2b48be7e8..68c95ccb0c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,36 +15,6 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-463a2721ec
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/881
       type: fast-track
-  coreos-installer:
-    evr: 0.9.1-2.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.9.1-2.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb7aefc9
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/889
-      type: fast-track
-  kernel:
-    evr: 5.13.4-200.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  kernel-core:
-    evr: 5.13.4-200.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  kernel-modules:
-    evr: 5.13.4-200.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-07dc0b3eb1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
   ostree:
     evr: 2021.3-1.fc34
     metadata:
@@ -75,21 +45,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
       type: fast-track
-  systemd-pam:
-    evr: 248.5-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  systemd-udev:
-    evr: 248.5-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  systemd-rpm-macros:
-    evra: 248.5-1.fc34.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track

From a75418838e2357757556ac38792ab7827339d172 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 22 Jul 2021 09:26:03 -0400
Subject: [PATCH 0378/2157] ci/remove-graduated-overrides: query by arch too

The x86_64 repo also includes i686 packages so we need to filter on the
arch too when querying to make sure we're comparing packages of the same
arch.
---
 ci/remove-graduated-overrides.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ci/remove-graduated-overrides.py b/ci/remove-graduated-overrides.py
index 598891c954..0ae84a6741 100755
--- a/ci/remove-graduated-overrides.py
+++ b/ci/remove-graduated-overrides.py
@@ -109,7 +109,8 @@ def update_lockfile(base, fn):
 
 def sack_has_nevra_greater_or_equal(base, nevra):
     nevra = hawkey.split_nevra(nevra)
-    pkgs = base.sack.query().filterm(name=nevra.name).latest().run()
+    pkgs = base.sack.query().filterm(name=nevra.name,
+                                     arch=nevra.arch).latest().run()
 
     if len(pkgs) == 0:
         # Odd... the only way I can imagine this happen is if we fast-track a

From c54185a575740214f90d21a744ca5ebbef230f89 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 22 Jul 2021 18:18:25 +0000
Subject: [PATCH 0379/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 30 ------------------------------
 1 file changed, 30 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 68c95ccb0c..3b61f4656e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,33 +15,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-463a2721ec
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/881
       type: fast-track
-  ostree:
-    evr: 2021.3-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
-      type: fast-track
-  ostree-libs:
-    evr: 2021.3-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5ae883a27
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/746
-      type: fast-track
-  systemd:
-    evr: 248.5-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  systemd-container:
-    evr: 248.5-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track
-  systemd-libs:
-    evr: 248.5-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a6ba64260
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/904
-      type: fast-track

From b944ebcd22b9329ef37ec3db0b326035963922e7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 22 Jul 2021 21:43:16 -0400
Subject: [PATCH 0380/2157] 35coreos-ignition: perform kargs reboot with
 --force

Without --force, the boot process races with service shutdown, leaving
enough time for the disks stage to start.  With --force, systemd
immediately kills processes, unmounts filesystems, and reboots.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/896.
---
 .../modules.d/35coreos-ignition/coreos-kargs-reboot.service   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
index 4f50823092..18258a0a1e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
@@ -18,4 +18,6 @@ OnFailureJobMode=isolate
 [Service]
 Type=oneshot
 RemainAfterExit=yes
-ExecStart=/usr/bin/systemctl reboot
+# --force causes a rapid reboot.  Without it, systemd continues running
+# Ignition stages in parallel with shutting down.
+ExecStart=/usr/bin/systemctl reboot --force

From 7d3c177f43af646bac634bd0e8fbcedab27e887e Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 23 Jul 2021 14:23:51 -0400
Subject: [PATCH 0381/2157] coreos-kargs-reboot: rename flag file

The RHCOS FIPS code is going to create the same flag file, so let's name
it something more generic.
---
 .../modules.d/35coreos-ignition/coreos-kargs-reboot.service     | 2 +-
 .../usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
index 18258a0a1e..6ac57ff7b7 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
@@ -1,7 +1,7 @@
 [Unit]
 Description=CoreOS Kernel Arguments Reboot
 ConditionPathExists=/etc/initrd-release
-ConditionPathExists=/run/ignition-modified-kargs
+ConditionPathExists=/run/coreos-kargs-reboot
 DefaultDependencies=false
 Before=ignition-complete.target
  
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
index 3744eb6d4b..adad195737 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 set -euo pipefail
 
-/usr/bin/rdcore kargs --boot-device /dev/disk/by-label/boot --create-if-changed /run/ignition-modified-kargs "$@"
+/usr/bin/rdcore kargs --boot-device /dev/disk/by-label/boot --create-if-changed /run/coreos-kargs-reboot "$@"

From caad7ce2692e10f698369ffe2317cc80518f35dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Fri, 23 Jul 2021 11:37:48 +0200
Subject: [PATCH 0382/2157] tests/misc-ro: Simplify permission checks for files
 in /etc

Make use of some GNU find extensions to make the check simpler.
---
 tests/kola/misc-ro | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 50ebaa5aab..a900d63e72 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -174,16 +174,16 @@ if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
     fatal "/sys/fs/cgroup is not cgroup2"
 fi
 
-for perms in 'o+w' 'g+w'; do
-	list="$(find /etc -type f -perm /${perms})"
-	if [[ -n "${list}" ]]; then
-		fatal "found files with ${perms}:\n${list}"
-	fi
-done
-ok "no files with o+w or g+w found in /etc"
+list="$(find /etc -type f,d -perm /022)"
+if [[ -n "${list}" ]]; then
+	find /etc -type f,d -perm /022 -print0 | xargs -0 ls -al
+	fatal "found files or directories with 'g+w' or 'o+w' permission"
+fi
+ok "no files with 'g+w' or 'o+w' permission found in /etc"
 
 for f in '/etc/passwd' '/etc/group'; do
 	if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
+		ls -al "${f}"
 		fatal "found incorrect permissions for ${f}"
 	fi
 done

From ff689b8ab0496e140fb254c4b4b8fcfbefa19cb2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Jul 2021 21:33:23 +0000
Subject: [PATCH 0383/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/381/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 45 ++++++++++++++++++---------------------
 1 file changed, 21 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9fd7ea592b..bcb88eb88a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.2-1.fc34.x86_64"
+      "evra": "3.0.3-1.fc34.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-9.fc34.x86_64"
@@ -178,7 +178,7 @@
       "evra": "1:2.3.3op2-7.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-4.fc34.x86_64"
+      "evra": "7.76.1-7.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.x86_64"
@@ -541,7 +541,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-4.fc34.x86_64"
+      "evra": "7.76.1-7.fc34.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.x86_64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.x86_64"
@@ -630,9 +630,6 @@
     "libmaxminddb": {
       "evra": "1.5.2-1.fc34.x86_64"
     },
-    "libmetalink": {
-      "evra": "0.1.3-14.fc34.x86_64"
-    },
     "libmnl": {
       "evra": "1.0.4-13.fc34.x86_64"
     },
@@ -739,16 +736,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "libstdc++": {
       "evra": "11.1.1-3.fc34.x86_64"
@@ -970,10 +967,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.2.2-1.fc34.x86_64"
+      "evra": "3:3.2.3-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.2-1.fc34.x86_64"
+      "evra": "3:3.2.3-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1087,28 +1084,28 @@
       "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.1-2.fc34.x86_64"
+      "evra": "2.5.2-1.fc34.x86_64"
     },
     "stalld": {
       "evra": "1.10-1.fc34.x86_64"
@@ -1193,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-21T20:53:18Z",
+    "generated": "2021-07-23T20:53:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-21T04:52:24Z"
+        "generated": "2021-07-21T21:37:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-21T00:55:04Z"
+        "generated": "2021-07-23T00:59:08Z"
       }
     }
   }

From eb84698282c0011d8789581441a96eaf52b95b75 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 24 Jul 2021 21:21:00 +0000
Subject: [PATCH 0384/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/382/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bcb88eb88a..b040046895 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "1.0.0-0.2.rc1.fc34.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-20.fc34.noarch"
+      "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
       "evra": "0.9.1-2.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-23T20:53:08Z",
+    "generated": "2021-07-24T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-21T21:37:36Z"
+        "generated": "2021-07-23T21:44:33Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-23T00:59:08Z"
+        "generated": "2021-07-24T02:08:24Z"
       }
     }
   }

From d4f6818e52f8533bb5d03993ccc4aa4977300f2b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 25 Jul 2021 21:20:09 +0000
Subject: [PATCH 0385/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/383/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b040046895..02e703e702 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.18-1.fc34.x86_64"
+      "evra": "32:9.16.19-1.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.18-1.fc34.noarch"
+      "evra": "32:9.16.19-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.18-1.fc34.x86_64"
+      "evra": "32:9.16.19-1.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -130,7 +130,7 @@
       "evra": "2:2.164.1-1.git563ba3f.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.5.0~rc.1-1.fc34.x86_64"
+      "evra": "1.5.3-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.0-0.2.rc1.fc34.x86_64"
@@ -598,7 +598,7 @@
       "evra": "67.1-6.fc34.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.1-1.fc34.x86_64"
+      "evra": "2.3.2-1.fc34.x86_64"
     },
     "libini_config": {
       "evra": "1.3.1-47.fc34.x86_64"
@@ -856,7 +856,7 @@
       "evra": "2:2.1-46.fc34.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.6-1.fc34.x86_64"
+      "evra": "20.10.7-1.fc34.x86_64"
     },
     "mokutil": {
       "evra": "2:0.4.0-4.fc34.x86_64"
@@ -1114,22 +1114,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.5-1.fc34.x86_64"
+      "evra": "248.6-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.5-1.fc34.x86_64"
+      "evra": "248.6-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.5-1.fc34.x86_64"
+      "evra": "248.6-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.5-1.fc34.x86_64"
+      "evra": "248.6-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.5-1.fc34.noarch"
+      "evra": "248.6-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.5-1.fc34.x86_64"
+      "evra": "248.6-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-24T20:53:02Z",
+    "generated": "2021-07-25T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-23T21:44:33Z"
+        "generated": "2021-07-24T21:29:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-24T02:08:24Z"
+        "generated": "2021-07-25T00:55:23Z"
       }
     }
   }

From af4daf21646805ea7b83fc19e40612fe8aef3d88 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 26 Jul 2021 14:12:00 -0400
Subject: [PATCH 0386/2157] lockfiles: initial aarch64 lockfile

We'll pre-populate it here and then bump-lockfile will handle
updating it in the future.
---
 manifest-lock.aarch64.json | 1194 ++++++++++++++++++++++++++++++++++++
 1 file changed, 1194 insertions(+)
 create mode 100644 manifest-lock.aarch64.json

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
new file mode 100644
index 0000000000..cc16d7602b
--- /dev/null
+++ b/manifest-lock.aarch64.json
@@ -0,0 +1,1194 @@
+{
+  "packages": {
+    "NetworkManager": {
+      "evra": "1:1.30.6-1.fc34.aarch64"
+    },
+    "NetworkManager-cloud-setup": {
+      "evra": "1:1.30.6-1.fc34.aarch64"
+    },
+    "NetworkManager-libnm": {
+      "evra": "1:1.30.6-1.fc34.aarch64"
+    },
+    "NetworkManager-team": {
+      "evra": "1:1.30.6-1.fc34.aarch64"
+    },
+    "NetworkManager-tui": {
+      "evra": "1:1.30.6-1.fc34.aarch64"
+    },
+    "WALinuxAgent-udev": {
+      "evra": "2.3.0.2-1.fc34.noarch"
+    },
+    "acl": {
+      "evra": "2.3.1-1.fc34.aarch64"
+    },
+    "adcli": {
+      "evra": "0.9.1-3.fc34.aarch64"
+    },
+    "afterburn": {
+      "evra": "5.0.0-1.fc34.aarch64"
+    },
+    "afterburn-dracut": {
+      "evra": "5.0.0-1.fc34.aarch64"
+    },
+    "alternatives": {
+      "evra": "1.15-2.fc34.aarch64"
+    },
+    "attr": {
+      "evra": "2.5.1-1.fc34.aarch64"
+    },
+    "audit-libs": {
+      "evra": "3.0.3-1.fc34.aarch64"
+    },
+    "avahi-libs": {
+      "evra": "0.8-9.fc34.aarch64"
+    },
+    "basesystem": {
+      "evra": "11-11.fc34.noarch"
+    },
+    "bash": {
+      "evra": "5.1.0-2.fc34.aarch64"
+    },
+    "bash-completion": {
+      "evra": "1:2.11-2.fc34.noarch"
+    },
+    "bind-libs": {
+      "evra": "32:9.16.19-1.fc34.aarch64"
+    },
+    "bind-license": {
+      "evra": "32:9.16.19-1.fc34.noarch"
+    },
+    "bind-utils": {
+      "evra": "32:9.16.19-1.fc34.aarch64"
+    },
+    "bootupd": {
+      "evra": "0.2.5-3.fc34.aarch64"
+    },
+    "bsdtar": {
+      "evra": "3.5.1-2.fc34.aarch64"
+    },
+    "btrfs-progs": {
+      "evra": "5.13-1.fc34.aarch64"
+    },
+    "bubblewrap": {
+      "evra": "0.4.1-3.fc34.aarch64"
+    },
+    "bzip2": {
+      "evra": "1.0.8-6.fc34.aarch64"
+    },
+    "bzip2-libs": {
+      "evra": "1.0.8-6.fc34.aarch64"
+    },
+    "c-ares": {
+      "evra": "1.17.1-2.fc34.aarch64"
+    },
+    "ca-certificates": {
+      "evra": "2021.2.50-1.0.fc34.noarch"
+    },
+    "catatonit": {
+      "evra": "0.1.5-4.fc34.aarch64"
+    },
+    "chrony": {
+      "evra": "4.1-1.fc34.aarch64"
+    },
+    "cifs-utils": {
+      "evra": "6.11-3.fc34.aarch64"
+    },
+    "clevis": {
+      "evra": "18-1.fc34.aarch64"
+    },
+    "clevis-dracut": {
+      "evra": "18-1.fc34.aarch64"
+    },
+    "clevis-luks": {
+      "evra": "18-1.fc34.aarch64"
+    },
+    "clevis-systemd": {
+      "evra": "18-1.fc34.aarch64"
+    },
+    "cloud-utils-growpart": {
+      "evra": "0.31-8.fc34.noarch"
+    },
+    "compat-readline5": {
+      "evra": "5.2-39.fc34.aarch64"
+    },
+    "conmon": {
+      "evra": "2:2.0.29-2.fc34.aarch64"
+    },
+    "console-login-helper-messages": {
+      "evra": "0.21.2-1.fc34.noarch"
+    },
+    "console-login-helper-messages-issuegen": {
+      "evra": "0.21.2-1.fc34.noarch"
+    },
+    "console-login-helper-messages-motdgen": {
+      "evra": "0.21.2-1.fc34.noarch"
+    },
+    "console-login-helper-messages-profile": {
+      "evra": "0.21.2-1.fc34.noarch"
+    },
+    "container-selinux": {
+      "evra": "2:2.164.1-1.git563ba3f.fc34.noarch"
+    },
+    "containerd": {
+      "evra": "1.5.3-1.fc34.aarch64"
+    },
+    "containernetworking-plugins": {
+      "evra": "1.0.0-0.2.rc1.fc34.aarch64"
+    },
+    "containers-common": {
+      "evra": "4:1-21.fc34.noarch"
+    },
+    "coreos-installer": {
+      "evra": "0.9.1-2.fc34.aarch64"
+    },
+    "coreos-installer-bootinfra": {
+      "evra": "0.9.1-2.fc34.aarch64"
+    },
+    "coreutils": {
+      "evra": "8.32-30.fc34.aarch64"
+    },
+    "coreutils-common": {
+      "evra": "8.32-30.fc34.aarch64"
+    },
+    "cpio": {
+      "evra": "2.13-10.fc34.aarch64"
+    },
+    "cracklib": {
+      "evra": "2.9.6-25.fc34.aarch64"
+    },
+    "criu": {
+      "evra": "3.15-3.fc34.aarch64"
+    },
+    "criu-libs": {
+      "evra": "3.15-3.fc34.aarch64"
+    },
+    "crun": {
+      "evra": "0.20.1-1.fc34.aarch64"
+    },
+    "crypto-policies": {
+      "evra": "20210213-1.git5c710c0.fc34.noarch"
+    },
+    "cryptsetup": {
+      "evra": "2.3.6-1.fc34.aarch64"
+    },
+    "cryptsetup-libs": {
+      "evra": "2.3.6-1.fc34.aarch64"
+    },
+    "cups-libs": {
+      "evra": "1:2.3.3op2-7.fc34.aarch64"
+    },
+    "curl": {
+      "evra": "7.76.1-7.fc34.aarch64"
+    },
+    "cyrus-sasl-gssapi": {
+      "evra": "2.1.27-8.fc34.aarch64"
+    },
+    "cyrus-sasl-lib": {
+      "evra": "2.1.27-8.fc34.aarch64"
+    },
+    "dbus": {
+      "evra": "1:1.12.20-3.fc34.aarch64"
+    },
+    "dbus-broker": {
+      "evra": "29-1.fc34.aarch64"
+    },
+    "dbus-common": {
+      "evra": "1:1.12.20-3.fc34.noarch"
+    },
+    "dbus-libs": {
+      "evra": "1:1.12.20-3.fc34.aarch64"
+    },
+    "device-mapper": {
+      "evra": "1.02.175-1.fc34.aarch64"
+    },
+    "device-mapper-event": {
+      "evra": "1.02.175-1.fc34.aarch64"
+    },
+    "device-mapper-event-libs": {
+      "evra": "1.02.175-1.fc34.aarch64"
+    },
+    "device-mapper-libs": {
+      "evra": "1.02.175-1.fc34.aarch64"
+    },
+    "device-mapper-multipath": {
+      "evra": "0.8.5-4.fc34.aarch64"
+    },
+    "device-mapper-multipath-libs": {
+      "evra": "0.8.5-4.fc34.aarch64"
+    },
+    "device-mapper-persistent-data": {
+      "evra": "0.9.0-3.fc34.aarch64"
+    },
+    "diffutils": {
+      "evra": "3.7-8.fc34.aarch64"
+    },
+    "dnsmasq": {
+      "evra": "2.85-1.fc34.aarch64"
+    },
+    "dosfstools": {
+      "evra": "4.2-1.fc34.aarch64"
+    },
+    "dracut": {
+      "evra": "055-3.fc34.aarch64"
+    },
+    "dracut-network": {
+      "evra": "055-3.fc34.aarch64"
+    },
+    "e2fsprogs": {
+      "evra": "1.45.6-5.fc34.aarch64"
+    },
+    "e2fsprogs-libs": {
+      "evra": "1.45.6-5.fc34.aarch64"
+    },
+    "efi-filesystem": {
+      "evra": "5-2.fc34.noarch"
+    },
+    "efibootmgr": {
+      "evra": "16-10.fc34.aarch64"
+    },
+    "efivar-libs": {
+      "evra": "37-15.fc34.aarch64"
+    },
+    "elfutils-default-yama-scope": {
+      "evra": "0.185-2.fc34.noarch"
+    },
+    "elfutils-libelf": {
+      "evra": "0.185-2.fc34.aarch64"
+    },
+    "elfutils-libs": {
+      "evra": "0.185-2.fc34.aarch64"
+    },
+    "ethtool": {
+      "evra": "2:5.13-1.fc34.aarch64"
+    },
+    "expat": {
+      "evra": "2.4.1-1.fc34.aarch64"
+    },
+    "fedora-coreos-pinger": {
+      "evra": "0.0.4-11.fc34.aarch64"
+    },
+    "fedora-gpg-keys": {
+      "evra": "34-2.noarch"
+    },
+    "fedora-release-common": {
+      "evra": "34-1.noarch"
+    },
+    "fedora-release-coreos": {
+      "evra": "34-1.noarch"
+    },
+    "fedora-release-identity-coreos": {
+      "evra": "34-1.noarch"
+    },
+    "fedora-repos": {
+      "evra": "34-2.noarch"
+    },
+    "fedora-repos-archive": {
+      "evra": "34-2.noarch"
+    },
+    "fedora-repos-modular": {
+      "evra": "34-2.noarch"
+    },
+    "fedora-repos-ostree": {
+      "evra": "34-2.noarch"
+    },
+    "file": {
+      "evra": "5.39-6.fc34.aarch64"
+    },
+    "file-libs": {
+      "evra": "5.39-6.fc34.aarch64"
+    },
+    "filesystem": {
+      "evra": "3.14-5.fc34.aarch64"
+    },
+    "findutils": {
+      "evra": "1:4.8.0-2.fc34.aarch64"
+    },
+    "firewalld-filesystem": {
+      "evra": "0.9.4-1.fc34.noarch"
+    },
+    "flatpak-session-helper": {
+      "evra": "1.10.2-4.fc34.aarch64"
+    },
+    "fstrm": {
+      "evra": "0.6.1-2.fc34.aarch64"
+    },
+    "fuse": {
+      "evra": "2.9.9-11.fc34.aarch64"
+    },
+    "fuse-common": {
+      "evra": "3.10.4-1.fc34.aarch64"
+    },
+    "fuse-libs": {
+      "evra": "2.9.9-11.fc34.aarch64"
+    },
+    "fuse-overlayfs": {
+      "evra": "1.5.0-1.fc34.aarch64"
+    },
+    "fuse-sshfs": {
+      "evra": "3.7.2-1.fc34.aarch64"
+    },
+    "fuse3": {
+      "evra": "3.10.4-1.fc34.aarch64"
+    },
+    "fuse3-libs": {
+      "evra": "3.10.4-1.fc34.aarch64"
+    },
+    "fwupd": {
+      "evra": "1.5.10-1.fc34.aarch64"
+    },
+    "gawk": {
+      "evra": "5.1.0-3.fc34.aarch64"
+    },
+    "gdisk": {
+      "evra": "1.0.8-1.fc34.aarch64"
+    },
+    "gettext": {
+      "evra": "0.21-4.fc34.aarch64"
+    },
+    "gettext-libs": {
+      "evra": "0.21-4.fc34.aarch64"
+    },
+    "git-core": {
+      "evra": "2.31.1-3.fc34.aarch64"
+    },
+    "glib2": {
+      "evra": "2.68.2-1.fc34.aarch64"
+    },
+    "glibc": {
+      "evra": "2.33-20.fc34.aarch64"
+    },
+    "glibc-common": {
+      "evra": "2.33-20.fc34.aarch64"
+    },
+    "glibc-minimal-langpack": {
+      "evra": "2.33-20.fc34.aarch64"
+    },
+    "gmp": {
+      "evra": "1:6.2.0-6.fc34.aarch64"
+    },
+    "gnupg2": {
+      "evra": "2.2.27-4.fc34.aarch64"
+    },
+    "gnutls": {
+      "evra": "3.7.2-1.fc34.aarch64"
+    },
+    "gpgme": {
+      "evra": "1.15.1-2.fc34.aarch64"
+    },
+    "grep": {
+      "evra": "3.6-2.fc34.aarch64"
+    },
+    "grub2-common": {
+      "evra": "1:2.06-2.fc34.noarch"
+    },
+    "grub2-efi-aa64": {
+      "evra": "1:2.06-2.fc34.aarch64"
+    },
+    "grub2-tools": {
+      "evra": "1:2.06-2.fc34.aarch64"
+    },
+    "grub2-tools-minimal": {
+      "evra": "1:2.06-2.fc34.aarch64"
+    },
+    "gzip": {
+      "evra": "1.10-4.fc34.aarch64"
+    },
+    "hostname": {
+      "evra": "3.23-4.fc34.aarch64"
+    },
+    "ignition": {
+      "evra": "2.11.0-2.fc34.aarch64"
+    },
+    "inih": {
+      "evra": "49-3.fc34.aarch64"
+    },
+    "iproute": {
+      "evra": "5.10.0-2.fc34.aarch64"
+    },
+    "iproute-tc": {
+      "evra": "5.10.0-2.fc34.aarch64"
+    },
+    "iptables": {
+      "evra": "1.8.7-3.fc34.aarch64"
+    },
+    "iptables-libs": {
+      "evra": "1.8.7-3.fc34.aarch64"
+    },
+    "iptables-nft": {
+      "evra": "1.8.7-3.fc34.aarch64"
+    },
+    "iptables-services": {
+      "evra": "1.8.7-8.fc34.aarch64"
+    },
+    "iputils": {
+      "evra": "20210202-2.fc34.aarch64"
+    },
+    "irqbalance": {
+      "evra": "2:1.7.0-5.fc34.aarch64"
+    },
+    "iscsi-initiator-utils": {
+      "evra": "6.2.1.2-5.gita8fcb37.fc34.aarch64"
+    },
+    "iscsi-initiator-utils-iscsiuio": {
+      "evra": "6.2.1.2-5.gita8fcb37.fc34.aarch64"
+    },
+    "isns-utils-libs": {
+      "evra": "0.100-1.fc34.aarch64"
+    },
+    "jansson": {
+      "evra": "2.13.1-2.fc34.aarch64"
+    },
+    "jose": {
+      "evra": "11-1.fc34.aarch64"
+    },
+    "jq": {
+      "evra": "1.6-7.fc34.aarch64"
+    },
+    "json-c": {
+      "evra": "0.14-8.fc34.aarch64"
+    },
+    "json-glib": {
+      "evra": "1.6.2-1.fc34.aarch64"
+    },
+    "kbd": {
+      "evra": "2.4.0-2.fc34.aarch64"
+    },
+    "kbd-misc": {
+      "evra": "2.4.0-2.fc34.noarch"
+    },
+    "kernel": {
+      "evra": "5.13.4-200.fc34.aarch64"
+    },
+    "kernel-core": {
+      "evra": "5.13.4-200.fc34.aarch64"
+    },
+    "kernel-modules": {
+      "evra": "5.13.4-200.fc34.aarch64"
+    },
+    "kexec-tools": {
+      "evra": "2.0.21-5.fc34.aarch64"
+    },
+    "keyutils": {
+      "evra": "1.6.1-2.fc34.aarch64"
+    },
+    "keyutils-libs": {
+      "evra": "1.6.1-2.fc34.aarch64"
+    },
+    "kmod": {
+      "evra": "29-2.fc34.aarch64"
+    },
+    "kmod-libs": {
+      "evra": "29-2.fc34.aarch64"
+    },
+    "kpartx": {
+      "evra": "0.8.5-4.fc34.aarch64"
+    },
+    "krb5-libs": {
+      "evra": "1.19.1-14.fc34.aarch64"
+    },
+    "less": {
+      "evra": "581.2-1.fc34.aarch64"
+    },
+    "libacl": {
+      "evra": "2.3.1-1.fc34.aarch64"
+    },
+    "libaio": {
+      "evra": "0.3.111-11.fc34.aarch64"
+    },
+    "libarchive": {
+      "evra": "3.5.1-2.fc34.aarch64"
+    },
+    "libargon2": {
+      "evra": "20171227-6.fc34.aarch64"
+    },
+    "libassuan": {
+      "evra": "2.5.5-1.fc34.aarch64"
+    },
+    "libattr": {
+      "evra": "2.5.1-1.fc34.aarch64"
+    },
+    "libbasicobjects": {
+      "evra": "0.1.1-47.fc34.aarch64"
+    },
+    "libblkid": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "libbrotli": {
+      "evra": "1.0.9-4.fc34.aarch64"
+    },
+    "libbsd": {
+      "evra": "0.10.0-7.fc34.aarch64"
+    },
+    "libcap": {
+      "evra": "2.48-2.fc34.aarch64"
+    },
+    "libcap-ng": {
+      "evra": "0.8.2-4.fc34.aarch64"
+    },
+    "libcbor": {
+      "evra": "0.7.0-3.fc34.aarch64"
+    },
+    "libcollection": {
+      "evra": "0.7.0-47.fc34.aarch64"
+    },
+    "libcom_err": {
+      "evra": "1.45.6-5.fc34.aarch64"
+    },
+    "libcurl": {
+      "evra": "7.76.1-7.fc34.aarch64"
+    },
+    "libdaemon": {
+      "evra": "0.14-21.fc34.aarch64"
+    },
+    "libdb": {
+      "evra": "5.3.28-46.fc34.aarch64"
+    },
+    "libdhash": {
+      "evra": "0.5.0-47.fc34.aarch64"
+    },
+    "libeconf": {
+      "evra": "0.4.0-1.fc34.aarch64"
+    },
+    "libedit": {
+      "evra": "3.1-38.20210714cvs.fc34.aarch64"
+    },
+    "libevent": {
+      "evra": "2.1.12-3.fc34.aarch64"
+    },
+    "libfdisk": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "libffi": {
+      "evra": "3.1-28.fc34.aarch64"
+    },
+    "libfido2": {
+      "evra": "1.6.0-2.fc34.aarch64"
+    },
+    "libgcab1": {
+      "evra": "1.4-4.fc34.aarch64"
+    },
+    "libgcc": {
+      "evra": "11.1.1-3.fc34.aarch64"
+    },
+    "libgcrypt": {
+      "evra": "1.9.3-3.fc34.aarch64"
+    },
+    "libgomp": {
+      "evra": "11.1.1-3.fc34.aarch64"
+    },
+    "libgpg-error": {
+      "evra": "1.42-1.fc34.aarch64"
+    },
+    "libgudev": {
+      "evra": "236-1.fc34.aarch64"
+    },
+    "libgusb": {
+      "evra": "0.3.7-1.fc34.aarch64"
+    },
+    "libibverbs": {
+      "evra": "35.0-1.fc34.aarch64"
+    },
+    "libicu": {
+      "evra": "67.1-6.fc34.aarch64"
+    },
+    "libidn2": {
+      "evra": "2.3.2-1.fc34.aarch64"
+    },
+    "libini_config": {
+      "evra": "1.3.1-47.fc34.aarch64"
+    },
+    "libipa_hbac": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "libjcat": {
+      "evra": "0.1.6-1.fc34.aarch64"
+    },
+    "libjose": {
+      "evra": "11-1.fc34.aarch64"
+    },
+    "libkcapi": {
+      "evra": "1.2.1-1.fc34.aarch64"
+    },
+    "libkcapi-hmaccalc": {
+      "evra": "1.2.1-1.fc34.aarch64"
+    },
+    "libksba": {
+      "evra": "1.5.0-2.fc34.aarch64"
+    },
+    "libldb": {
+      "evra": "2.3.0-2.fc34.aarch64"
+    },
+    "libluksmeta": {
+      "evra": "9-10.fc34.aarch64"
+    },
+    "libmaxminddb": {
+      "evra": "1.5.2-1.fc34.aarch64"
+    },
+    "libmnl": {
+      "evra": "1.0.4-13.fc34.aarch64"
+    },
+    "libmodulemd": {
+      "evra": "2.13.0-1.fc34.aarch64"
+    },
+    "libmount": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "libndp": {
+      "evra": "1.7-7.fc34.aarch64"
+    },
+    "libnet": {
+      "evra": "1.2-2.fc34.aarch64"
+    },
+    "libnetfilter_conntrack": {
+      "evra": "1.0.8-2.fc34.aarch64"
+    },
+    "libnfnetlink": {
+      "evra": "1.0.1-19.fc34.aarch64"
+    },
+    "libnfsidmap": {
+      "evra": "1:2.5.4-0.fc34.aarch64"
+    },
+    "libnftnl": {
+      "evra": "1.1.9-2.fc34.aarch64"
+    },
+    "libnghttp2": {
+      "evra": "1.43.0-2.fc34.aarch64"
+    },
+    "libnl3": {
+      "evra": "3.5.0-6.fc34.aarch64"
+    },
+    "libnl3-cli": {
+      "evra": "3.5.0-6.fc34.aarch64"
+    },
+    "libnsl2": {
+      "evra": "1.3.0-2.fc34.aarch64"
+    },
+    "libpath_utils": {
+      "evra": "0.2.1-47.fc34.aarch64"
+    },
+    "libpcap": {
+      "evra": "14:1.10.1-1.fc34.aarch64"
+    },
+    "libpkgconf": {
+      "evra": "1.7.3-6.fc34.aarch64"
+    },
+    "libpsl": {
+      "evra": "0.21.1-3.fc34.aarch64"
+    },
+    "libpwquality": {
+      "evra": "1.4.4-2.fc34.aarch64"
+    },
+    "libref_array": {
+      "evra": "0.1.5-47.fc34.aarch64"
+    },
+    "librepo": {
+      "evra": "1.14.1-1.fc34.aarch64"
+    },
+    "libreport-filesystem": {
+      "evra": "2.15.2-2.fc34.noarch"
+    },
+    "libseccomp": {
+      "evra": "2.5.0-4.fc34.aarch64"
+    },
+    "libselinux": {
+      "evra": "3.2-1.fc34.aarch64"
+    },
+    "libselinux-utils": {
+      "evra": "3.2-1.fc34.aarch64"
+    },
+    "libsemanage": {
+      "evra": "3.2-1.fc34.aarch64"
+    },
+    "libsepol": {
+      "evra": "3.2-1.fc34.aarch64"
+    },
+    "libsigsegv": {
+      "evra": "2.13-2.fc34.aarch64"
+    },
+    "libslirp": {
+      "evra": "4.4.0-4.fc34.aarch64"
+    },
+    "libsmartcols": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "libsmbclient": {
+      "evra": "2:4.14.6-0.fc34.aarch64"
+    },
+    "libsolv": {
+      "evra": "0.7.17-3.fc34.aarch64"
+    },
+    "libss": {
+      "evra": "1.45.6-5.fc34.aarch64"
+    },
+    "libssh": {
+      "evra": "0.9.5-2.fc34.aarch64"
+    },
+    "libssh-config": {
+      "evra": "0.9.5-2.fc34.noarch"
+    },
+    "libsss_certmap": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "libsss_idmap": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "libsss_nss_idmap": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "libsss_sudo": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "libstdc++": {
+      "evra": "11.1.1-3.fc34.aarch64"
+    },
+    "libtalloc": {
+      "evra": "2.3.2-2.fc34.aarch64"
+    },
+    "libtasn1": {
+      "evra": "4.16.0-4.fc34.aarch64"
+    },
+    "libtdb": {
+      "evra": "1.4.3-6.fc34.aarch64"
+    },
+    "libteam": {
+      "evra": "1.31-3.fc34.aarch64"
+    },
+    "libtevent": {
+      "evra": "0.11.0-0.fc34.aarch64"
+    },
+    "libtextstyle": {
+      "evra": "0.21-4.fc34.aarch64"
+    },
+    "libtirpc": {
+      "evra": "1.3.2-0.fc34.aarch64"
+    },
+    "libunistring": {
+      "evra": "0.9.10-10.fc34.aarch64"
+    },
+    "libusbx": {
+      "evra": "1.0.24-2.fc34.aarch64"
+    },
+    "libuser": {
+      "evra": "0.63-4.fc34.aarch64"
+    },
+    "libutempter": {
+      "evra": "1.2.1-4.fc34.aarch64"
+    },
+    "libuuid": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "libuv": {
+      "evra": "1:1.41.0-1.fc34.aarch64"
+    },
+    "libvarlink-util": {
+      "evra": "22-2.fc34.aarch64"
+    },
+    "libverto": {
+      "evra": "0.3.2-1.fc34.aarch64"
+    },
+    "libwbclient": {
+      "evra": "2:4.14.6-0.fc34.aarch64"
+    },
+    "libxcrypt": {
+      "evra": "4.4.23-1.fc34.aarch64"
+    },
+    "libxml2": {
+      "evra": "2.9.12-4.fc34.aarch64"
+    },
+    "libxmlb": {
+      "evra": "0.3.2-1.fc34.aarch64"
+    },
+    "libyaml": {
+      "evra": "0.2.5-5.fc34.aarch64"
+    },
+    "libzstd": {
+      "evra": "1.5.0-1.fc34.aarch64"
+    },
+    "linux-atm-libs": {
+      "evra": "2.5.1-28.fc34.aarch64"
+    },
+    "linux-firmware": {
+      "evra": "20210716-121.fc34.noarch"
+    },
+    "linux-firmware-whence": {
+      "evra": "20210716-121.fc34.noarch"
+    },
+    "lmdb-libs": {
+      "evra": "0.9.29-1.fc34.aarch64"
+    },
+    "logrotate": {
+      "evra": "3.18.0-3.fc34.aarch64"
+    },
+    "lsof": {
+      "evra": "4.94.0-1.fc34.aarch64"
+    },
+    "lua-libs": {
+      "evra": "5.4.3-1.fc34.aarch64"
+    },
+    "luksmeta": {
+      "evra": "9-10.fc34.aarch64"
+    },
+    "lvm2": {
+      "evra": "2.03.11-1.fc34.aarch64"
+    },
+    "lvm2-libs": {
+      "evra": "2.03.11-1.fc34.aarch64"
+    },
+    "lz4-libs": {
+      "evra": "1.9.3-2.fc34.aarch64"
+    },
+    "lzo": {
+      "evra": "2.10-4.fc34.aarch64"
+    },
+    "mdadm": {
+      "evra": "4.1-7.fc34.aarch64"
+    },
+    "moby-engine": {
+      "evra": "20.10.7-1.fc34.aarch64"
+    },
+    "mokutil": {
+      "evra": "2:0.4.0-4.fc34.aarch64"
+    },
+    "mozjs78": {
+      "evra": "78.12.0-1.fc34.aarch64"
+    },
+    "mpfr": {
+      "evra": "4.1.0-7.fc34.aarch64"
+    },
+    "ncurses": {
+      "evra": "6.2-4.20200222.fc34.aarch64"
+    },
+    "ncurses-base": {
+      "evra": "6.2-4.20200222.fc34.noarch"
+    },
+    "ncurses-libs": {
+      "evra": "6.2-4.20200222.fc34.aarch64"
+    },
+    "net-tools": {
+      "evra": "2.0-0.59.20160912git.fc34.aarch64"
+    },
+    "nettle": {
+      "evra": "3.7.3-1.fc34.aarch64"
+    },
+    "newt": {
+      "evra": "0.52.21-9.fc34.aarch64"
+    },
+    "nfs-utils-coreos": {
+      "evra": "1:2.5.4-0.fc34.aarch64"
+    },
+    "nftables": {
+      "evra": "1:0.9.8-2.fc34.aarch64"
+    },
+    "npth": {
+      "evra": "1.6-6.fc34.aarch64"
+    },
+    "nss-altfiles": {
+      "evra": "2.18.1-18.fc34.aarch64"
+    },
+    "numactl-libs": {
+      "evra": "2.0.14-3.fc34.aarch64"
+    },
+    "nvme-cli": {
+      "evra": "1.11.1-3.fc34.aarch64"
+    },
+    "oniguruma": {
+      "evra": "6.9.7.1-1.fc34.aarch64"
+    },
+    "openldap": {
+      "evra": "2.4.57-5.fc34.aarch64"
+    },
+    "openssh": {
+      "evra": "8.6p1-3.fc34.aarch64"
+    },
+    "openssh-clients": {
+      "evra": "8.6p1-3.fc34.aarch64"
+    },
+    "openssh-server": {
+      "evra": "8.6p1-3.fc34.aarch64"
+    },
+    "openssl": {
+      "evra": "1:1.1.1k-1.fc34.aarch64"
+    },
+    "openssl-libs": {
+      "evra": "1:1.1.1k-1.fc34.aarch64"
+    },
+    "os-prober": {
+      "evra": "1.77-7.fc34.aarch64"
+    },
+    "ostree": {
+      "evra": "2021.3-1.fc34.aarch64"
+    },
+    "ostree-libs": {
+      "evra": "2021.3-1.fc34.aarch64"
+    },
+    "p11-kit": {
+      "evra": "0.23.22-3.fc34.aarch64"
+    },
+    "p11-kit-trust": {
+      "evra": "0.23.22-3.fc34.aarch64"
+    },
+    "pam": {
+      "evra": "1.5.1-6.fc34.aarch64"
+    },
+    "passwd": {
+      "evra": "0.80-10.fc34.aarch64"
+    },
+    "pcre": {
+      "evra": "8.44-3.fc34.1.aarch64"
+    },
+    "pcre2": {
+      "evra": "10.36-4.fc34.aarch64"
+    },
+    "pcre2-syntax": {
+      "evra": "10.36-4.fc34.noarch"
+    },
+    "pigz": {
+      "evra": "2.5-1.fc34.aarch64"
+    },
+    "pkgconf": {
+      "evra": "1.7.3-6.fc34.aarch64"
+    },
+    "pkgconf-m4": {
+      "evra": "1.7.3-6.fc34.noarch"
+    },
+    "pkgconf-pkg-config": {
+      "evra": "1.7.3-6.fc34.aarch64"
+    },
+    "podman": {
+      "evra": "3:3.2.3-1.fc34.aarch64"
+    },
+    "podman-plugins": {
+      "evra": "3:3.2.3-1.fc34.aarch64"
+    },
+    "policycoreutils": {
+      "evra": "3.2-1.fc34.aarch64"
+    },
+    "polkit": {
+      "evra": "0.117-3.fc34.1.aarch64"
+    },
+    "polkit-libs": {
+      "evra": "0.117-3.fc34.1.aarch64"
+    },
+    "polkit-pkla-compat": {
+      "evra": "0.1-19.fc34.aarch64"
+    },
+    "popt": {
+      "evra": "1.18-4.fc34.aarch64"
+    },
+    "procps-ng": {
+      "evra": "3.3.17-1.fc34.1.aarch64"
+    },
+    "protobuf-c": {
+      "evra": "1.3.3-7.fc34.aarch64"
+    },
+    "psmisc": {
+      "evra": "23.4-1.fc34.aarch64"
+    },
+    "publicsuffix-list-dafsa": {
+      "evra": "20190417-5.fc34.noarch"
+    },
+    "readline": {
+      "evra": "8.1-2.fc34.aarch64"
+    },
+    "rpcbind": {
+      "evra": "1.2.6-0.fc34.aarch64"
+    },
+    "rpm": {
+      "evra": "4.16.1.3-1.fc34.aarch64"
+    },
+    "rpm-libs": {
+      "evra": "4.16.1.3-1.fc34.aarch64"
+    },
+    "rpm-ostree": {
+      "evra": "2021.6-2.fc34.aarch64"
+    },
+    "rpm-ostree-libs": {
+      "evra": "2021.6-2.fc34.aarch64"
+    },
+    "rpm-plugin-selinux": {
+      "evra": "4.16.1.3-1.fc34.aarch64"
+    },
+    "rsync": {
+      "evra": "3.2.3-5.fc34.aarch64"
+    },
+    "runc": {
+      "evra": "2:1.0.0-378.rc95.fc34.aarch64"
+    },
+    "samba-client-libs": {
+      "evra": "2:4.14.6-0.fc34.aarch64"
+    },
+    "samba-common": {
+      "evra": "2:4.14.6-0.fc34.noarch"
+    },
+    "samba-common-libs": {
+      "evra": "2:4.14.6-0.fc34.aarch64"
+    },
+    "sed": {
+      "evra": "4.8-7.fc34.aarch64"
+    },
+    "selinux-policy": {
+      "evra": "34.14-1.fc34.noarch"
+    },
+    "selinux-policy-targeted": {
+      "evra": "34.14-1.fc34.noarch"
+    },
+    "setup": {
+      "evra": "2.13.7-3.fc34.noarch"
+    },
+    "sg3_utils": {
+      "evra": "1.45-4.fc34.aarch64"
+    },
+    "sg3_utils-libs": {
+      "evra": "1.45-4.fc34.aarch64"
+    },
+    "shadow-utils": {
+      "evra": "2:4.8.1-8.fc34.aarch64"
+    },
+    "shared-mime-info": {
+      "evra": "2.1-2.fc34.aarch64"
+    },
+    "shim-aa64": {
+      "evra": "15.4-4.aarch64"
+    },
+    "skopeo": {
+      "evra": "1:1.3.1-1.fc34.aarch64"
+    },
+    "slang": {
+      "evra": "2.3.2-9.fc34.aarch64"
+    },
+    "slirp4netns": {
+      "evra": "1.1.9-1.fc34.aarch64"
+    },
+    "snappy": {
+      "evra": "1.1.8-5.fc34.aarch64"
+    },
+    "socat": {
+      "evra": "1.7.4.1-2.fc34.aarch64"
+    },
+    "sqlite-libs": {
+      "evra": "3.34.1-2.fc34.aarch64"
+    },
+    "ssh-key-dir": {
+      "evra": "0.1.2-7.fc34.aarch64"
+    },
+    "sssd-ad": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-client": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-common": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-common-pac": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-ipa": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-krb5": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-krb5-common": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "sssd-ldap": {
+      "evra": "2.5.2-1.fc34.aarch64"
+    },
+    "stalld": {
+      "evra": "1.10-1.fc34.aarch64"
+    },
+    "sudo": {
+      "evra": "1.9.5p2-1.fc34.aarch64"
+    },
+    "systemd": {
+      "evra": "248.6-1.fc34.aarch64"
+    },
+    "systemd-container": {
+      "evra": "248.6-1.fc34.aarch64"
+    },
+    "systemd-libs": {
+      "evra": "248.6-1.fc34.aarch64"
+    },
+    "systemd-pam": {
+      "evra": "248.6-1.fc34.aarch64"
+    },
+    "systemd-rpm-macros": {
+      "evra": "248.6-1.fc34.noarch"
+    },
+    "systemd-udev": {
+      "evra": "248.6-1.fc34.aarch64"
+    },
+    "tar": {
+      "evra": "2:1.34-1.fc34.aarch64"
+    },
+    "teamd": {
+      "evra": "1.31-3.fc34.aarch64"
+    },
+    "toolbox": {
+      "evra": "0.0.99.2-1.fc34.aarch64"
+    },
+    "tpm2-tools": {
+      "evra": "5.1.1-1.fc34.aarch64"
+    },
+    "tpm2-tss": {
+      "evra": "3.1.0-1.fc34.aarch64"
+    },
+    "tzdata": {
+      "evra": "2021a-1.fc34.noarch"
+    },
+    "userspace-rcu": {
+      "evra": "0.12.1-3.fc34.aarch64"
+    },
+    "util-linux": {
+      "evra": "2.36.2-1.fc34.aarch64"
+    },
+    "vim-minimal": {
+      "evra": "2:8.2.3182-1.fc34.aarch64"
+    },
+    "which": {
+      "evra": "2.21-26.fc34.aarch64"
+    },
+    "wireguard-tools": {
+      "evra": "1.0.20210424-1.fc34.aarch64"
+    },
+    "xfsprogs": {
+      "evra": "5.10.0-2.fc34.aarch64"
+    },
+    "xz": {
+      "evra": "5.2.5-5.fc34.aarch64"
+    },
+    "xz-libs": {
+      "evra": "5.2.5-5.fc34.aarch64"
+    },
+    "yajl": {
+      "evra": "2.1.0-16.fc34.aarch64"
+    },
+    "zchunk-libs": {
+      "evra": "1.1.15-1.fc34.aarch64"
+    },
+    "zincati": {
+      "evra": "0.0.22-1.fc34.aarch64"
+    },
+    "zlib": {
+      "evra": "1.2.11-26.fc34.aarch64"
+    },
+    "zram-generator": {
+      "evra": "0.3.2-4.fc34.aarch64"
+    }
+  },
+  "metadata": {
+    "generated": "2021-07-26T18:06:13Z",
+    "rpmmd_repos": {
+      "fedora": {
+        "generated": "2021-04-23T10:47:46Z"
+      },
+      "fedora-coreos-pool": {
+        "generated": "2021-07-25T21:27:48Z"
+      },
+      "fedora-updates": {
+        "generated": "2021-07-26T00:33:18Z"
+      }
+    }
+  }
+}

From 1d8cebb0991c174d5607b7e99a5522bc488562f5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 27 Jul 2021 20:55:05 +0000
Subject: [PATCH 0387/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/385/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.x86_64.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 02e703e702..89abb486d0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-25T20:53:07Z",
+    "generated": "2021-07-27T20:54:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-24T21:29:55Z"
+        "generated": "2021-07-25T21:27:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-25T00:55:23Z"
+        "generated": "2021-07-27T00:56:37Z"
       }
     }
   }

From d00f177ab36f0f561b0fd522aa7d61b3729172d3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Jul 2021 06:18:40 +0000
Subject: [PATCH 0388/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3b61f4656e..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  container-selinux:
-    evra: 2:2.164.1-1.git563ba3f.fc34.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-463a2721ec
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/881
-      type: fast-track
+packages: {}

From b687264542731df175f50d45d40302b60d94bf68 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 27 Jul 2021 16:21:29 +0200
Subject: [PATCH 0389/2157] 15fcos: Order coreos-check-ssh-keys before
 systemd-user-sessions

Run before user sessions to avoid reloading agetty.

See also: https://github.com/coreos/fedora-coreos-config/commit/386b6fedfdee105e35b75381e48cc46c28806fad
---
 .../usr/lib/systemd/system/coreos-check-ssh-keys.service      | 2 ++
 overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys            | 4 ----
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index c11047bc9b..858e7ed693 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -12,6 +12,8 @@ After=afterburn-sshkeys.target
 # get misleading messages. Also handles the case where the journal
 # gets rotated and no longer has the structured log messages.
 ConditionKernelCommandLine=ignition.firstboot
+# Run before user sessions to avoid reloading agetty
+Before=systemd-user-sessions.service
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
index 1cc4fba975..7a7bc35079 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
@@ -41,10 +41,6 @@ main() {
         echo -e "${warn}No SSH authorized keys provided by Ignition or Afterburn${nc}" \
             > /etc/issue.d/30_ssh_authorized_keys.issue
     fi
-
-    # Ask all running agetty instances to reload and update their
-    # displayed prompts in case this script was run before agetty.
-    /usr/sbin/agetty --reload
 }
 
 main

From e7b9b92628f3577f10c89546ceebe4dcd0ae7c62 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Jul 2021 21:49:21 +0000
Subject: [PATCH 0390/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/388/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cc16d7602b..94e22dc071 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.30.6-1.fc34.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.0.2-1.fc34.noarch"
+      "evra": "2.3.1.1-1.fc34.noarch"
     },
     "acl": {
       "evra": "2.3.1-1.fc34.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "4.16.1.3-1.fc34.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.6-2.fc34.aarch64"
+      "evra": "2021.7-1.fc34.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.6-2.fc34.aarch64"
+      "evra": "2021.7-1.fc34.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.aarch64"
@@ -1012,7 +1012,7 @@
       "evra": "3.2.3-5.fc34.aarch64"
     },
     "runc": {
-      "evra": "2:1.0.0-378.rc95.fc34.aarch64"
+      "evra": "2:1.0.1-1.fc34.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.14.6-0.fc34.aarch64"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-26T18:06:13Z",
+    "generated": "2021-07-28T20:51:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-07-25T21:27:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-26T00:33:18Z"
+        "generated": "2021-07-28T01:11:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 89abb486d0..83dfb4693a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.30.6-1.fc34.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.0.2-1.fc34.noarch"
+      "evra": "2.3.1.1-1.fc34.noarch"
     },
     "acl": {
       "evra": "2.3.1-1.fc34.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.6-2.fc34.x86_64"
+      "evra": "2021.7-1.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.6-2.fc34.x86_64"
+      "evra": "2021.7-1.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1024,7 +1024,7 @@
       "evra": "3.2.3-5.fc34.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.0-378.rc95.fc34.x86_64"
+      "evra": "2:1.0.1-1.fc34.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.14.6-0.fc34.x86_64"
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-27T20:54:54Z",
+    "generated": "2021-07-28T20:52:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-07-25T21:27:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-27T00:56:37Z"
+        "generated": "2021-07-28T01:12:07Z"
       }
     }
   }

From bc8814cf5c7f5d4d888f544e17f6eaf612ff4043 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 28 Jul 2021 17:58:59 -0400
Subject: [PATCH 0391/2157] workflows: limit permissions to reading repo
 contents

---
 .github/workflows/remove-graduated-overrides.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 6472cb335c..01db0b7f6b 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -4,6 +4,9 @@ on:
   schedule:
     - cron: '0 */6 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   remove-graduated-overrides:
     name: Remove graduated overrides

From 14d9684f1f8ffa577edb1739b7ceee1ccf1436a4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 28 Jul 2021 17:01:33 -0400
Subject: [PATCH 0392/2157] denylist: snooze podman.network-single on openstack

See https://github.com/coreos/fedora-coreos-tracker/issues/901

The problem comes and goes in the vexxhost environment. Let's wait
a month and see if it's better then.
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index cf3a3d8c88..05d61c6722 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,3 +5,8 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
+- pattern: podman.network-single
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/901
+  snooze: 2021-09-01
+  platforms:
+    - openstack

From 8efd4a44e129307a85b16fd4c5c5a36a18ca107a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 30 Jul 2021 15:26:22 +0000
Subject: [PATCH 0393/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/392/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 94e22dc071..6143d59648 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -190,7 +190,7 @@
       "evra": "1:1.12.20-3.fc34.aarch64"
     },
     "dbus-broker": {
-      "evra": "29-1.fc34.aarch64"
+      "evra": "29-2.fc34.aarch64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-3.fc34.noarch"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.4-200.fc34.aarch64"
+      "evra": "5.13.5-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.4-200.fc34.aarch64"
+      "evra": "5.13.5-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.4-200.fc34.aarch64"
+      "evra": "5.13.5-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -586,7 +586,7 @@
       "evra": "0.3.7-1.fc34.aarch64"
     },
     "libibverbs": {
-      "evra": "35.0-1.fc34.aarch64"
+      "evra": "36.0-1.fc34.aarch64"
     },
     "libicu": {
       "evra": "67.1-6.fc34.aarch64"
@@ -1096,7 +1096,7 @@
       "evra": "2.5.2-1.fc34.aarch64"
     },
     "stalld": {
-      "evra": "1.10-1.fc34.aarch64"
+      "evra": "1.14.1-1.fc34.aarch64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc34.aarch64"
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3182-1.fc34.aarch64"
+      "evra": "2:8.2.3223-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-28T20:51:45Z",
+    "generated": "2021-07-30T14:54:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-25T21:27:48Z"
+        "generated": "2021-07-28T21:57:05Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-28T01:11:46Z"
+        "generated": "2021-07-30T00:53:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 83dfb4693a..f2b80fd7e1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,7 +190,7 @@
       "evra": "1:1.12.20-3.fc34.x86_64"
     },
     "dbus-broker": {
-      "evra": "29-1.fc34.x86_64"
+      "evra": "29-2.fc34.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.12.20-3.fc34.noarch"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.4-200.fc34.x86_64"
+      "evra": "5.13.5-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.4-200.fc34.x86_64"
+      "evra": "5.13.5-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.4-200.fc34.x86_64"
+      "evra": "5.13.5-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -592,7 +592,7 @@
       "evra": "0.3.7-1.fc34.x86_64"
     },
     "libibverbs": {
-      "evra": "35.0-1.fc34.x86_64"
+      "evra": "36.0-1.fc34.x86_64"
     },
     "libicu": {
       "evra": "67.1-6.fc34.x86_64"
@@ -1108,7 +1108,7 @@
       "evra": "2.5.2-1.fc34.x86_64"
     },
     "stalld": {
-      "evra": "1.10-1.fc34.x86_64"
+      "evra": "1.14.1-1.fc34.x86_64"
     },
     "sudo": {
       "evra": "1.9.5p2-1.fc34.x86_64"
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3182-1.fc34.x86_64"
+      "evra": "2:8.2.3223-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-28T20:52:16Z",
+    "generated": "2021-07-30T14:54:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-25T21:27:52Z"
+        "generated": "2021-07-28T21:58:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-28T01:12:07Z"
+        "generated": "2021-07-30T00:53:40Z"
       }
     }
   }

From 48c6e61a53d28c92bc38e1d2b58afe6f95133bc4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 31 Jul 2021 21:22:49 +0000
Subject: [PATCH 0394/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/394/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6143d59648..a4d03f2cf8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -568,13 +568,13 @@
       "evra": "1.4-4.fc34.aarch64"
     },
     "libgcc": {
-      "evra": "11.1.1-3.fc34.aarch64"
+      "evra": "11.2.1-1.fc34.aarch64"
     },
     "libgcrypt": {
       "evra": "1.9.3-3.fc34.aarch64"
     },
     "libgomp": {
-      "evra": "11.1.1-3.fc34.aarch64"
+      "evra": "11.2.1-1.fc34.aarch64"
     },
     "libgpg-error": {
       "evra": "1.42-1.fc34.aarch64"
@@ -739,7 +739,7 @@
       "evra": "2.5.2-1.fc34.aarch64"
     },
     "libstdc++": {
-      "evra": "11.1.1-3.fc34.aarch64"
+      "evra": "11.2.1-1.fc34.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.2-2.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-30T14:54:33Z",
+    "generated": "2021-07-31T20:53:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-28T21:57:05Z"
+        "generated": "2021-07-30T16:04:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-30T00:53:18Z"
+        "generated": "2021-07-31T01:31:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f2b80fd7e1..b39c814de7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -574,13 +574,13 @@
       "evra": "1.4-4.fc34.x86_64"
     },
     "libgcc": {
-      "evra": "11.1.1-3.fc34.x86_64"
+      "evra": "11.2.1-1.fc34.x86_64"
     },
     "libgcrypt": {
       "evra": "1.9.3-3.fc34.x86_64"
     },
     "libgomp": {
-      "evra": "11.1.1-3.fc34.x86_64"
+      "evra": "11.2.1-1.fc34.x86_64"
     },
     "libgpg-error": {
       "evra": "1.42-1.fc34.x86_64"
@@ -748,7 +748,7 @@
       "evra": "2.5.2-1.fc34.x86_64"
     },
     "libstdc++": {
-      "evra": "11.1.1-3.fc34.x86_64"
+      "evra": "11.2.1-1.fc34.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.2-2.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-30T14:54:18Z",
+    "generated": "2021-07-31T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-28T21:58:36Z"
+        "generated": "2021-07-30T16:08:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-30T00:53:40Z"
+        "generated": "2021-07-31T01:31:57Z"
       }
     }
   }

From e69021a50d5fa71308f0342cc8f3ccba4144deff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 2 Aug 2021 21:38:00 +0000
Subject: [PATCH 0395/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/396/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a4d03f2cf8..af26d1b98b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.1-2.fc34.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.13-1.fc34.aarch64"
+      "evra": "5.13.1-1.fc34.aarch64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.5-200.fc34.aarch64"
+      "evra": "5.13.6-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.5-200.fc34.aarch64"
+      "evra": "5.13.6-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.5-200.fc34.aarch64"
+      "evra": "5.13.6-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-31T20:53:40Z",
+    "generated": "2021-08-02T20:56:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-30T16:04:37Z"
+        "generated": "2021-07-31T21:34:02Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-31T01:31:31Z"
+        "generated": "2021-08-02T00:55:13Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b39c814de7..0ef3fa0655 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.1-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.13-1.fc34.x86_64"
+      "evra": "5.13.1-1.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.5-200.fc34.x86_64"
+      "evra": "5.13.6-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.5-200.fc34.x86_64"
+      "evra": "5.13.6-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.5-200.fc34.x86_64"
+      "evra": "5.13.6-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-07-31T20:53:25Z",
+    "generated": "2021-08-02T20:56:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-30T16:08:46Z"
+        "generated": "2021-07-31T21:35:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-07-31T01:31:57Z"
+        "generated": "2021-08-02T00:55:35Z"
       }
     }
   }

From 6740a0d07e4ac7ee4f2455a05d5b059b635391ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 4 Aug 2021 21:40:28 +0000
Subject: [PATCH 0396/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/398/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index af26d1b98b..1673cad333 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -955,10 +955,10 @@
       "evra": "1.7.3-6.fc34.aarch64"
     },
     "podman": {
-      "evra": "3:3.2.3-1.fc34.aarch64"
+      "evra": "3:3.2.3-2.fc34.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.3-1.fc34.aarch64"
+      "evra": "3:3.2.3-2.fc34.aarch64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.aarch64"
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3223-1.fc34.aarch64"
+      "evra": "2:8.2.3273-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-02T20:56:42Z",
+    "generated": "2021-08-04T21:01:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-31T21:34:02Z"
+        "generated": "2021-08-02T21:45:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-02T00:55:13Z"
+        "generated": "2021-08-04T03:30:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0ef3fa0655..28f532766d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -967,10 +967,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.2.3-1.fc34.x86_64"
+      "evra": "3:3.2.3-2.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.3-1.fc34.x86_64"
+      "evra": "3:3.2.3-2.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3223-1.fc34.x86_64"
+      "evra": "2:8.2.3273-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-02T20:56:28Z",
+    "generated": "2021-08-04T21:01:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-07-31T21:35:46Z"
+        "generated": "2021-08-02T21:48:02Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-02T00:55:35Z"
+        "generated": "2021-08-04T03:31:20Z"
       }
     }
   }

From b916cea4473ea30520712cbdd63874e824401f8c Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Fri, 6 Aug 2021 11:28:18 -0400
Subject: [PATCH 0397/2157] lockfiles: fast-track Ignition v2.12.0

---
 manifest-lock.overrides.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..2a6acc05ac 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,10 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ignition:
+    evr: 2.12.0-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-429119296e
+      reason: https://github.com/coreos/ignition/issues/1255
+      type: fast-track

From 7760720eda5c706d6e47ad3bd15f69d682cae456 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 21 Jul 2021 02:36:52 -0400
Subject: [PATCH 0398/2157] overlay: use Ignition result.json

As of https://github.com/coreos/ignition/pull/1250, Ignition produces
its own report similar to ignition.info.json, so use that instead of
making our own.
---
 .../coreos-liveiso-autologin-generator        |  4 +--
 .../coreos-ignition-firstboot-complete        | 30 -------------------
 .../coreos-check-ignition-config.service      |  7 ++---
 .../usr/libexec/coreos-check-ignition-config  | 18 ++++-------
 4 files changed, 8 insertions(+), 51 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
index c49139b315..7fe8a66332 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
@@ -85,9 +85,7 @@ fi
 # If the user supplied an Ignition config, they have the ability to enable
 # autologin themselves.  Don't automatically render them insecure, since
 # they might be running in production and booting via e.g. IPMI.
-# See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
-ign_usercfg_msg=$(journalctl -q MESSAGE_ID=57124006b5c94805b77ce473e92a8aeb IGNITION_CONFIG_TYPE=user)
-if [ -n "${ign_usercfg_msg}" ]; then
+if jq -e .userConfigProvided /var/lib/ignition/result.json &>/dev/null; then
     exit 0
 fi
 
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
index 97baea619d..3973d11e04 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
@@ -1,14 +1,6 @@
 #!/bin/bash
 set -euo pipefail
 
-# We put this in /run and it's then moved by
-# coreos-check-ignition-config.service into /var/lib/coreos. The reason is that
-# I don't want to use RequiresMountsFor=/var/lib on this service to keep it less
-# fallible. Once we move this service to the initramfs, then we can directly
-# write there since /var mounts are in place and we can safely trigger
-# emergency.target if we fail.
-IGNITION_INFO=/run/ignition.info.json
-
 mount -o remount,rw /boot
 
 if [[ $(uname -m) = s390x ]]; then
@@ -24,25 +16,3 @@ rm -rf /boot/ignition
 # this file. Fail if we are unable to remove it, rather than risking rerunning
 # Ignition at next boot.
 rm /boot/ignition.firstboot
-
-# See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
-nusercfgs=$(journalctl -o json-pretty MESSAGE_ID=57124006b5c94805b77ce473e92a8aeb \
-                | jq -s '.[] | select(.IGNITION_CONFIG_TYPE == "user")'| wc -l)
-if [ "${nusercfgs}" -gt 0 ]; then
-    usercfg=true
-else
-    usercfg=false
-fi
-
-mkdir -p "$(dirname "${IGNITION_INFO}")"
-
-# This is hardly sooper seekret stuff, but let's be conservative in light of
-# https://github.com/coreos/fedora-coreos-tracker/issues/889.
-touch "${IGNITION_INFO}"
-chmod 600 "${IGNITION_INFO}"
-cat >> "${IGNITION_INFO}" <<EOF
-{
-    "date": $(date +%s),
-    "usercfg": ${usercfg}
-}
-EOF
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
index 525cdf8d30..93ece5adfd 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
@@ -2,12 +2,9 @@
 # no Ignition config is provided.
 [Unit]
 Description=Check if Ignition config is provided
-After=coreos-ignition-firstboot-complete.service
 Before=systemd-user-sessions.service
-RequiresMountsFor=/var/lib/coreos
-ConditionPathExists=|/var/lib/coreos/ignition.info.json
-# See coreos-ignition-firstboot-complete
-ConditionPathExists=|/run/ignition.info.json
+RequiresMountsFor=/var/lib/ignition
+ConditionPathExists=/var/lib/ignition/result.json
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
index 851999f7e8..bae66d1206 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
@@ -1,25 +1,17 @@
 #!/usr/bin/bash
 set -euo pipefail
 
-IGNITION_INFO=/var/lib/coreos/ignition.info.json
-IGNITION_FIRSTBOOT_INFO=/run/ignition.info.json
+IGNITION_RESULT=/var/lib/ignition/result.json
 
 WARN='\033[0;33m' # yellow
 RESET='\033[0m' # reset
 
-# See coreos-ignition-firstboot-complete
-is_firstboot=0
-if [ -e "${IGNITION_FIRSTBOOT_INFO}" ]; then
-    is_firstboot=1
-    mkdir -p "$(dirname "${IGNITION_INFO}")"
-    mv "${IGNITION_FIRSTBOOT_INFO}" "${IGNITION_INFO}"
-fi
-
 mkdir -p /run/issue.d
 touch /run/issue.d/30_coreos_ignition_provisioning.issue
 
-d=$(date --date "@$(jq .date "${IGNITION_INFO}")" +"%Y/%m/%d %H:%M:%S %Z")
-if [ "${is_firstboot}" == 1 ]; then
+d=$(date --date "$(jq -r .provisioningDate "${IGNITION_RESULT}")" +"%Y/%m/%d %H:%M:%S %Z")
+ignitionBoot=$(jq -r .provisioningBootID "${IGNITION_RESULT}")
+if [ $(cat /proc/sys/kernel/random/boot_id) = "${ignitionBoot}" ]; then
     echo "Ignition: ran on ${d} (this boot)" \
         > /run/issue.d/30_coreos_ignition_provisioning.issue
 else
@@ -29,7 +21,7 @@ else
         > /run/issue.d/30_coreos_ignition_provisioning.issue
 fi
 
-if jq -e .usercfg "${IGNITION_INFO}" &>/dev/null; then
+if jq -e .userConfigProvided "${IGNITION_RESULT}" &>/dev/null; then
     echo "Ignition: user-provided config was applied" \
         >> /run/issue.d/30_coreos_ignition_provisioning.issue
 else

From 7926b9c9ccb94017e3e59a62c9beb62683ffc516 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 6 Aug 2021 12:33:25 -0400
Subject: [PATCH 0399/2157] overrides: fast-track
 coreos-installer-0.10.0-1.fc34

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2a6acc05ac..dbaeee55be 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,16 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  coreos-installer:
+    evr: 0.10.0-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-23c125b007
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.10.0-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-23c125b007
+      type: fast-track
   ignition:
     evr: 2.12.0-1.fc34
     metadata:

From 52b80c7186ea098590987e00fd3932f388a2401c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 6 Aug 2021 14:10:32 -0400
Subject: [PATCH 0400/2157] image-base: drop useless `sysroot-readonly: true`

It's not read by coreos-assembler, which has been turning on read-only
`/sysroot` unconditionally for a while now:

https://github.com/coreos/coreos-assembler/pull/736
---
 image-base.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index 3d9e1d5d1b..c69c6cf9bf 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -17,10 +17,6 @@ ignition-network-kcmdline: []
 # Optional remote by which to prefix the deployed OSTree ref
 ostree-remote: fedora
 
-# We want read-only /sysroot to protect from unintentional damage.
-# https://github.com/ostreedev/ostree/issues/1265
-sysroot-readonly: true
-
 # opt in to using the `metadata_csum_seed` feature of the ext4 filesystem
 # for the /boot filesystem. Support for this was only recently added to grub
 # and isn't available everywhere yet so we'll gate it behind this image.yaml

From d4297952573d331855710f2b2a27e276b183159b Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Mon, 2 Aug 2021 16:18:00 -0400
Subject: [PATCH 0401/2157] 15fcos: print warning If Ignition is run more than
 once

This change adds a warning on the serial console if Ignition
is run more than once. This is related to https://github.com/coreos/ignition/issues/1214
---
 .../15fcos/usr/libexec/coreos-check-ignition-config | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
index bae66d1206..8992128cb9 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
@@ -14,6 +14,19 @@ ignitionBoot=$(jq -r .provisioningBootID "${IGNITION_RESULT}")
 if [ $(cat /proc/sys/kernel/random/boot_id) = "${ignitionBoot}" ]; then
     echo "Ignition: ran on ${d} (this boot)" \
         > /run/issue.d/30_coreos_ignition_provisioning.issue
+
+    # checking for /run/ostree-live as the live system with persistent storage can run Ignition more than once
+    if ! test -f /run/ostree-live && jq -e .previousReport.provisioningDate "${IGNITION_RESULT}" &>/dev/null; then
+        prevdate=$(date --date "$(jq -r .previousReport.provisioningDate "${IGNITION_RESULT}")" +"%Y/%m/%d %H:%M:%S %Z")
+        cat << EOF > /etc/issue.d/30_coreos_ignition_run_more_than_once.issue
+${WARN}
+############################################################################
+WARNING: Ignition previously ran on ${prevdate}. Unexpected 
+behavior may occur. Ignition is not designed to run more than once per system.
+############################################################################
+${RESET}
+EOF
+    fi
 else
     nreboots=$(($(journalctl --list-boots | wc -l) - 1))
     [ "${nreboots}" -eq 1 ] && boot="boot" || boot="boots"

From 2b71a5b10b44a16764981eb0c0b3c6462746f54f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 7 Aug 2021 21:22:55 +0000
Subject: [PATCH 0402/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/401/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 2 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1673cad333..de9c196397 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -40,7 +40,7 @@
       "evra": "3.0.3-1.fc34.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-9.fc34.aarch64"
+      "evra": "0.8-14.fc34.aarch64"
     },
     "basesystem": {
       "evra": "11-11.fc34.noarch"
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.9.1-2.fc34.aarch64"
+      "evra": "0.10.0-1.fc34.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.9.1-2.fc34.aarch64"
+      "evra": "0.10.0-1.fc34.aarch64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.aarch64"
@@ -322,7 +322,7 @@
       "evra": "2.9.9-11.fc34.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.5.0-1.fc34.aarch64"
+      "evra": "1.7.0-1.fc34.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.aarch64"
@@ -334,7 +334,7 @@
       "evra": "3.10.4-1.fc34.aarch64"
     },
     "fwupd": {
-      "evra": "1.5.10-1.fc34.aarch64"
+      "evra": "1.5.12-1.fc34.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-3.fc34.aarch64"
@@ -352,7 +352,7 @@
       "evra": "2.31.1-3.fc34.aarch64"
     },
     "glib2": {
-      "evra": "2.68.2-1.fc34.aarch64"
+      "evra": "2.68.3-1.fc34.aarch64"
     },
     "glibc": {
       "evra": "2.33-20.fc34.aarch64"
@@ -397,7 +397,7 @@
       "evra": "3.23-4.fc34.aarch64"
     },
     "ignition": {
-      "evra": "2.11.0-2.fc34.aarch64"
+      "evra": "2.12.0-1.fc34.aarch64"
     },
     "inih": {
       "evra": "49-3.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.6-200.fc34.aarch64"
+      "evra": "5.13.7-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.6-200.fc34.aarch64"
+      "evra": "5.13.7-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.6-200.fc34.aarch64"
+      "evra": "5.13.7-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -790,7 +790,7 @@
       "evra": "2:4.14.6-0.fc34.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.23-1.fc34.aarch64"
+      "evra": "4.4.24-1.fc34.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-04T21:01:19Z",
+    "generated": "2021-08-07T20:54:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-02T21:45:52Z"
+        "generated": "2021-08-06T17:52:16Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-04T03:30:44Z"
+        "generated": "2021-08-07T00:56:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 28f532766d..0419ffede6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -40,7 +40,7 @@
       "evra": "3.0.3-1.fc34.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-9.fc34.x86_64"
+      "evra": "0.8-14.fc34.x86_64"
     },
     "basesystem": {
       "evra": "11-11.fc34.noarch"
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.9.1-2.fc34.x86_64"
+      "evra": "0.10.0-1.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.9.1-2.fc34.x86_64"
+      "evra": "0.10.0-1.fc34.x86_64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.x86_64"
@@ -322,7 +322,7 @@
       "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.5.0-1.fc34.x86_64"
+      "evra": "1.7.0-1.fc34.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.x86_64"
@@ -334,7 +334,7 @@
       "evra": "3.10.4-1.fc34.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.10-1.fc34.x86_64"
+      "evra": "1.5.12-1.fc34.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-3.fc34.x86_64"
@@ -352,7 +352,7 @@
       "evra": "2.31.1-3.fc34.x86_64"
     },
     "glib2": {
-      "evra": "2.68.2-1.fc34.x86_64"
+      "evra": "2.68.3-1.fc34.x86_64"
     },
     "glibc": {
       "evra": "2.33-20.fc34.x86_64"
@@ -403,7 +403,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.11.0-2.fc34.x86_64"
+      "evra": "2.12.0-1.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.6-200.fc34.x86_64"
+      "evra": "5.13.7-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.6-200.fc34.x86_64"
+      "evra": "5.13.7-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.6-200.fc34.x86_64"
+      "evra": "5.13.7-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -799,7 +799,7 @@
       "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.23-1.fc34.x86_64"
+      "evra": "4.4.24-1.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-04T21:01:26Z",
+    "generated": "2021-08-07T20:54:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-02T21:48:02Z"
+        "generated": "2021-08-06T17:52:21Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-04T03:31:20Z"
+        "generated": "2021-08-07T00:56:26Z"
       }
     }
   }

From 12f4f24bc022b848b945a90c2ad24b8f806e8008 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 8 Aug 2021 21:19:10 +0000
Subject: [PATCH 0403/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/402/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index de9c196397..78f01465ef 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -223,7 +223,7 @@
       "evra": "3.7-8.fc34.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.85-1.fc34.aarch64"
+      "evra": "2.85-3.fc34.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.aarch64"
@@ -1102,22 +1102,22 @@
       "evra": "1.9.5p2-1.fc34.aarch64"
     },
     "systemd": {
-      "evra": "248.6-1.fc34.aarch64"
+      "evra": "248.7-1.fc34.aarch64"
     },
     "systemd-container": {
-      "evra": "248.6-1.fc34.aarch64"
+      "evra": "248.7-1.fc34.aarch64"
     },
     "systemd-libs": {
-      "evra": "248.6-1.fc34.aarch64"
+      "evra": "248.7-1.fc34.aarch64"
     },
     "systemd-pam": {
-      "evra": "248.6-1.fc34.aarch64"
+      "evra": "248.7-1.fc34.aarch64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.6-1.fc34.noarch"
+      "evra": "248.7-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.6-1.fc34.aarch64"
+      "evra": "248.7-1.fc34.aarch64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.aarch64"
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3273-1.fc34.aarch64"
+      "evra": "2:8.2.3290-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1168,7 +1168,7 @@
       "evra": "1.1.15-1.fc34.aarch64"
     },
     "zincati": {
-      "evra": "0.0.22-1.fc34.aarch64"
+      "evra": "0.0.23-1.fc34.aarch64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-07T20:54:39Z",
+    "generated": "2021-08-08T20:53:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-06T17:52:16Z"
+        "generated": "2021-08-07T21:30:57Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-07T00:56:03Z"
+        "generated": "2021-08-08T00:54:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0419ffede6..2f29fa1ef2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -223,7 +223,7 @@
       "evra": "3.7-8.fc34.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.85-1.fc34.x86_64"
+      "evra": "2.85-3.fc34.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.x86_64"
@@ -1114,22 +1114,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.6-1.fc34.x86_64"
+      "evra": "248.7-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.6-1.fc34.x86_64"
+      "evra": "248.7-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.6-1.fc34.x86_64"
+      "evra": "248.7-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.6-1.fc34.x86_64"
+      "evra": "248.7-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.6-1.fc34.noarch"
+      "evra": "248.7-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.6-1.fc34.x86_64"
+      "evra": "248.7-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3273-1.fc34.x86_64"
+      "evra": "2:8.2.3290-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1180,7 +1180,7 @@
       "evra": "1.1.15-1.fc34.x86_64"
     },
     "zincati": {
-      "evra": "0.0.22-1.fc34.x86_64"
+      "evra": "0.0.23-1.fc34.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-26.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-07T20:54:22Z",
+    "generated": "2021-08-08T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-06T17:52:21Z"
+        "generated": "2021-08-07T21:36:33Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-07T00:56:26Z"
+        "generated": "2021-08-08T00:54:56Z"
       }
     }
   }

From 9aa46013358517b519155bbb187e2c973ef91117 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 10 Aug 2021 02:01:37 +0000
Subject: [PATCH 0404/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/404/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 78f01465ef..ab8fb7581f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.7-200.fc34.aarch64"
+      "evra": "5.13.8-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.7-200.fc34.aarch64"
+      "evra": "5.13.8-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.7-200.fc34.aarch64"
+      "evra": "5.13.8-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-08T20:53:31Z",
+    "generated": "2021-08-10T01:30:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-07T21:30:57Z"
+        "generated": "2021-08-08T21:26:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-08T00:54:33Z"
+        "generated": "2021-08-10T01:14:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2f29fa1ef2..e77184c761 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.7-200.fc34.x86_64"
+      "evra": "5.13.8-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.7-200.fc34.x86_64"
+      "evra": "5.13.8-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.7-200.fc34.x86_64"
+      "evra": "5.13.8-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-08T20:53:11Z",
+    "generated": "2021-08-10T01:30:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-07T21:36:33Z"
+        "generated": "2021-08-08T21:31:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-08T00:54:56Z"
+        "generated": "2021-08-10T01:14:33Z"
       }
     }
   }

From 3cffd98b2984ca957123075b118d2fa99d74dac5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 11 Aug 2021 14:44:02 +0000
Subject: [PATCH 0405/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/406/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ab8fb7581f..e357af2cd6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -133,7 +133,7 @@
       "evra": "1.5.3-1.fc34.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-0.2.rc1.fc34.aarch64"
+      "evra": "1.0.0-0.3.rc1.fc34.aarch64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-10T01:30:46Z",
+    "generated": "2021-08-11T14:14:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-08T21:26:42Z"
+        "generated": "2021-08-10T02:09:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-10T01:14:08Z"
+        "generated": "2021-08-11T00:56:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e77184c761..808d905960 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,7 +133,7 @@
       "evra": "1.5.3-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-0.2.rc1.fc34.x86_64"
+      "evra": "1.0.0-0.3.rc1.fc34.x86_64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-10T01:30:30Z",
+    "generated": "2021-08-11T14:15:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-08T21:31:37Z"
+        "generated": "2021-08-10T02:12:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-10T01:14:33Z"
+        "generated": "2021-08-11T00:57:11Z"
       }
     }
   }

From 2913472e6e17d98659a4da2391747f270130723f Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Tue, 10 Aug 2021 11:29:44 -0400
Subject: [PATCH 0406/2157] misc-ign-ro: change message from kube-watch to be
 more unique

We observed that the `kube-watch` test was occasionally failing
because the message from the service was being identified from `echo`
rather than the service name.  Change the service to emit a UUID that
we can check for instead of a generic log message.
---
 tests/kola/misc-ign-ro/config.fcc | 5 ++++-
 tests/kola/misc-ign-ro/test.sh    | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/tests/kola/misc-ign-ro/config.fcc b/tests/kola/misc-ign-ro/config.fcc
index 2895e7e8c1..dc218a3959 100644
--- a/tests/kola/misc-ign-ro/config.fcc
+++ b/tests/kola/misc-ign-ro/config.fcc
@@ -44,11 +44,14 @@ systemd:
     - name: kube-watch.service
       # This is for verifying that `kubernetes_file_t` labeled files can be
       # watched by systemd
+      # NOTE: we've observed a race where the journal message shows up as
+      # coming from `echo` rather than `kube-watch`, so we're embedding
+      # a UUID in the message to make it easier to find.
       # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
       # See: https://github.com/containers/container-selinux/issues/135
       contents: |
         [Service]
-        ExecStart=/usr/bin/echo "Found it"
+        ExecStart=/usr/bin/echo "This is the kube-watch unique id: 27a259a8-7f2d-4144-8b8f-23dd201b630c"
         RemainAfterExit=yes
         Type=oneshot
         [Install]
diff --git a/tests/kola/misc-ign-ro/test.sh b/tests/kola/misc-ign-ro/test.sh
index 525e5ba2eb..24728c720c 100755
--- a/tests/kola/misc-ign-ro/test.sh
+++ b/tests/kola/misc-ign-ro/test.sh
@@ -54,7 +54,10 @@ if [ "$(systemctl is-active kube-watch.service)" != "active" ]; then
 fi
 ok "kube-watch.service activated successfully"
 
-if [ "$(journalctl -o cat -u kube-watch.service | sed -n 2p)" != "Found it" ]; then
+# NOTE: we've observed a race where the journal message shows up as
+# coming from `echo` rather than `kube-watch`, so we're embedding
+# a UUID in the message to make it easier to find.
+if ! journalctl -o cat -b | grep 27a259a8-7f2d-4144-8b8f-23dd201b630c; then
     fatal "kube-watch.service did not print message to journal"
 fi
 ok "Found message from kube-watch.service in journal"

From ea98ed8c24fc52abb421828ee1e1e442c98cdbc4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 Aug 2021 21:05:38 +0000
Subject: [PATCH 0407/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/407/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e357af2cd6..4c9269dc9f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.3-1.fc34.aarch64"
+      "evra": "3.0.4-1.fc34.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.aarch64"
@@ -790,7 +790,7 @@
       "evra": "2:4.14.6-0.fc34.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.24-1.fc34.aarch64"
+      "evra": "4.4.25-1.fc34.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.aarch64"
@@ -1027,10 +1027,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.14-1.fc34.noarch"
+      "evra": "34.15-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.14-1.fc34.noarch"
+      "evra": "34.15-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3290-1.fc34.aarch64"
+      "evra": "2:8.2.3318-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-11T14:14:54Z",
+    "generated": "2021-08-12T20:27:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-10T02:09:07Z"
+        "generated": "2021-08-11T14:51:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-11T00:56:48Z"
+        "generated": "2021-08-12T00:54:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 808d905960..37b032451b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.3-1.fc34.x86_64"
+      "evra": "3.0.4-1.fc34.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.x86_64"
@@ -799,7 +799,7 @@
       "evra": "2:4.14.6-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.24-1.fc34.x86_64"
+      "evra": "4.4.25-1.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.14-1.fc34.noarch"
+      "evra": "34.15-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.14-1.fc34.noarch"
+      "evra": "34.15-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3290-1.fc34.x86_64"
+      "evra": "2:8.2.3318-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-11T14:15:02Z",
+    "generated": "2021-08-12T20:27:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-10T02:12:12Z"
+        "generated": "2021-08-11T14:55:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-11T00:57:11Z"
+        "generated": "2021-08-12T00:54:40Z"
       }
     }
   }

From 015876fe529cd011e9867a35ba6c66a277216ef5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 13 Aug 2021 17:40:32 +0000
Subject: [PATCH 0408/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/408/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4c9269dc9f..019b2aa7f5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.8-200.fc34.aarch64"
+      "evra": "5.13.9-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.8-200.fc34.aarch64"
+      "evra": "5.13.9-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.8-200.fc34.aarch64"
+      "evra": "5.13.9-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-12T20:27:25Z",
+    "generated": "2021-08-13T17:12:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-11T14:51:40Z"
+        "generated": "2021-08-12T21:14:49Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-12T00:54:16Z"
+        "generated": "2021-08-13T00:56:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 37b032451b..97fe6b2c97 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.8-200.fc34.x86_64"
+      "evra": "5.13.9-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.8-200.fc34.x86_64"
+      "evra": "5.13.9-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.8-200.fc34.x86_64"
+      "evra": "5.13.9-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-12T20:27:02Z",
+    "generated": "2021-08-13T17:12:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-11T14:55:27Z"
+        "generated": "2021-08-12T21:18:14Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-12T00:54:40Z"
+        "generated": "2021-08-13T00:56:37Z"
       }
     }
   }

From 65826d9751d1df1010af93d56e9966695c3f47ff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 15 Aug 2021 06:17:41 +0000
Subject: [PATCH 0409/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 +-----------------
 1 file changed, 1 insertion(+), 17 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index dbaeee55be..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,20 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.10.0-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-23c125b007
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.10.0-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-23c125b007
-      type: fast-track
-  ignition:
-    evr: 2.12.0-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-429119296e
-      reason: https://github.com/coreos/ignition/issues/1255
-      type: fast-track
+packages: {}

From bc4f75b6ac0a08eb0a93d2b59fe15cf31723ca95 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 16 Aug 2021 14:17:22 +0000
Subject: [PATCH 0410/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/409/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 019b2aa7f5..3bb37b8ecc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.4-1.fc34.aarch64"
+      "evra": "3.0.5-1.fc34.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.aarch64"
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.164.1-1.git563ba3f.fc34.noarch"
+      "evra": "2:2.164.2-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.3-1.fc34.aarch64"
@@ -850,7 +850,7 @@
       "evra": "2:0.4.0-4.fc34.aarch64"
     },
     "mozjs78": {
-      "evra": "78.12.0-1.fc34.aarch64"
+      "evra": "78.13.0-1.fc34.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.aarch64"
@@ -1042,7 +1042,7 @@
       "evra": "1.45-4.fc34.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.8.1-8.fc34.aarch64"
+      "evra": "2:4.8.1-9.fc34.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-2.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-13T17:12:43Z",
+    "generated": "2021-08-16T13:26:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-12T21:14:49Z"
+        "generated": "2021-08-13T17:46:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-13T00:56:12Z"
+        "generated": "2021-08-16T00:58:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 97fe6b2c97..14ef44dde2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.4-1.fc34.x86_64"
+      "evra": "3.0.5-1.fc34.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.x86_64"
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.164.1-1.git563ba3f.fc34.noarch"
+      "evra": "2:2.164.2-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.3-1.fc34.x86_64"
@@ -862,7 +862,7 @@
       "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.12.0-1.fc34.x86_64"
+      "evra": "78.13.0-1.fc34.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.x86_64"
@@ -1054,7 +1054,7 @@
       "evra": "1.45-4.fc34.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.8.1-8.fc34.x86_64"
+      "evra": "2:4.8.1-9.fc34.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-2.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-13T17:12:14Z",
+    "generated": "2021-08-16T13:26:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-12T21:18:14Z"
+        "generated": "2021-08-13T17:47:33Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-13T00:56:37Z"
+        "generated": "2021-08-16T00:58:58Z"
       }
     }
   }

From df0c12dd35cb05ea081d38e8c73e667c94aaed65 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 16 Aug 2021 16:36:30 -0400
Subject: [PATCH 0411/2157] manifests: workaround F37 GPG key issue for rawhide

We'll workaround the issue by removing the F37 key from the list of
gpgkeys to load. We'll also add a test that fails if the f37 entry
isn't put back in place and we'll snooze that test. This gives us
a reminder to followup on this issue if we don't get it resolved
in upstream libdnf/rpm in the immediate future.

https://github.com/coreos/fedora-coreos-tracker/issues/925
---
 kola-denylist.yaml                |  3 +++
 manifests/fedora-coreos-base.yaml | 11 +++++++++++
 tests/kola/yum-repos/test.sh      | 25 +++++++++++++++++++++++++
 3 files changed, 39 insertions(+)
 create mode 100755 tests/kola/yum-repos/test.sh

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 05d61c6722..0ed8584f0f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,3 +10,6 @@
   snooze: 2021-09-01
   platforms:
     - openstack
+- pattern: ext.config.yum-repos
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/925
+  snooze: 2021-09-01
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 581845dfa5..4750b1d2ad 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -117,6 +117,17 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
+
+  # Workaround issue in rawhide parsing the F37 GPG key
+  # by removing it from the list of gpgkeys to load.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/925
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    source /etc/os-release
+    [ ${VERSION_ID} -eq 36 ] || exit 0
+    sed -i 's|gpgkey=.*$|gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-$basearch|' /etc/yum.repos.d/fedora-rawhide.repo
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/tests/kola/yum-repos/test.sh b/tests/kola/yum-repos/test.sh
new file mode 100755
index 0000000000..ee6bc60ecf
--- /dev/null
+++ b/tests/kola/yum-repos/test.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# No need to run an other platforms than QEMU.
+# kola: { "platforms": "qemu-unpriv" }
+
+# We can delete this test when the following issue is resolved:
+# https://github.com/coreos/fedora-coreos-tracker/issues/925
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+source /etc/os-release
+if [ "$VERSION_ID" -eq "36" ]; then
+    if ! grep 'RPM-GPG-KEY-fedora-37' /etc/yum.repos.d/fedora-rawhide.repo; then
+        fatal "Fedora 37 gpg key should be in rawhide repo"
+    fi
+fi
+ok rawhiderepo

From 1365f000c61ff2f774a8170aeefb7900899033e6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 16 Aug 2021 16:40:51 -0400
Subject: [PATCH 0412/2157] kola-denylist: snooze the toolbox test

There is currently no registry.fedoraproject.org/fedora-toolbox:36
container. Let's snooze for a few weeks in the rawhide stream and
hopefully it will be in the registry by then.

https://github.com/coreos/fedora-coreos-tracker/issues/926
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0ed8584f0f..6d80164af5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,3 +13,7 @@
 - pattern: ext.config.yum-repos
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/925
   snooze: 2021-09-01
+- pattern: ext.config.toolbox
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/926
+  stream: rawhide
+  snooze: 2021-09-01

From a4652f3ea84110e0d0d6497ee4677ff0369f0d8d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 17 Aug 2021 19:41:37 +0000
Subject: [PATCH 0413/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/410/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 17 ++++++++++-------
 manifest-lock.x86_64.json  | 17 ++++++++++-------
 2 files changed, 20 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3bb37b8ecc..10eea4cc40 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -156,6 +156,9 @@
     "cracklib": {
       "evra": "2.9.6-25.fc34.aarch64"
     },
+    "cracklib-dicts": {
+      "evra": "2.9.6-25.fc34.aarch64"
+    },
     "criu": {
       "evra": "3.15-3.fc34.aarch64"
     },
@@ -322,7 +325,7 @@
       "evra": "2.9.9-11.fc34.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.0-1.fc34.aarch64"
+      "evra": "1.7.1-1.fc34.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.aarch64"
@@ -676,7 +679,7 @@
       "evra": "0.21.1-3.fc34.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.4-2.fc34.aarch64"
+      "evra": "1.4.4-6.fc34.aarch64"
     },
     "libref_array": {
       "evra": "0.1.5-47.fc34.aarch64"
@@ -1027,10 +1030,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.15-1.fc34.noarch"
+      "evra": "34.16-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.15-1.fc34.noarch"
+      "evra": "34.16-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1178,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-16T13:26:41Z",
+    "generated": "2021-08-17T19:12:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-13T17:46:34Z"
+        "generated": "2021-08-16T14:32:41Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-16T00:58:32Z"
+        "generated": "2021-08-17T00:59:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 14ef44dde2..5d5c836b57 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -156,6 +156,9 @@
     "cracklib": {
       "evra": "2.9.6-25.fc34.x86_64"
     },
+    "cracklib-dicts": {
+      "evra": "2.9.6-25.fc34.x86_64"
+    },
     "criu": {
       "evra": "3.15-3.fc34.x86_64"
     },
@@ -322,7 +325,7 @@
       "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.0-1.fc34.x86_64"
+      "evra": "1.7.1-1.fc34.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.x86_64"
@@ -682,7 +685,7 @@
       "evra": "0.21.1-3.fc34.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-2.fc34.x86_64"
+      "evra": "1.4.4-6.fc34.x86_64"
     },
     "libref_array": {
       "evra": "0.1.5-47.fc34.x86_64"
@@ -1039,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.15-1.fc34.noarch"
+      "evra": "34.16-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.15-1.fc34.noarch"
+      "evra": "34.16-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1190,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-16T13:26:27Z",
+    "generated": "2021-08-17T19:12:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-13T17:47:33Z"
+        "generated": "2021-08-16T14:35:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-16T00:58:58Z"
+        "generated": "2021-08-17T00:59:25Z"
       }
     }
   }

From 12ba5c2922d59fb2451ff3fbbb033913538b9460 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Wed, 18 Aug 2021 13:21:19 +0200
Subject: [PATCH 0414/2157] overaly/preset: Enable Count Me by default

Enable rpm-ostree Count Me timer by default for existing and new
installs.

See: https://github.com/coreos/fedora-coreos-tracker/issues/717
---
 overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index ad40cb9d2c..c007234c9d 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -8,3 +8,6 @@ enable coreos-check-cgroups.service
 # Clean up injected Ignition config in /boot on upgrade
 # https://github.com/coreos/fedora-coreos-tracker/issues/889
 enable coreos-cleanup-ignition-config.service
+# Temporary fast track for rpm-ostree count me enablement
+# https://github.com/coreos/fedora-coreos-tracker/issues/717
+enable rpm-ostree-countme.timer

From b654d7dad896a721235610e6653cfe46084b31f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Wed, 18 Aug 2021 17:47:37 +0200
Subject: [PATCH 0415/2157] tests/rpm-ostree-countme: Remove now uneeded custom
 Butane config

rpm-ostree count me timer is now enabled by default.

See: https://github.com/coreos/fedora-coreos-tracker/issues/717
---
 tests/kola/rpm-ostree-countme/config.fcc | 7 -------
 1 file changed, 7 deletions(-)
 delete mode 100644 tests/kola/rpm-ostree-countme/config.fcc

diff --git a/tests/kola/rpm-ostree-countme/config.fcc b/tests/kola/rpm-ostree-countme/config.fcc
deleted file mode 100644
index 002cc59a7a..0000000000
--- a/tests/kola/rpm-ostree-countme/config.fcc
+++ /dev/null
@@ -1,7 +0,0 @@
-variant: fcos
-version: 1.3.0
-systemd:
-  units:
-    - name: rpm-ostree-countme.timer
-      mask: false
-      enabled: true

From 2357ffd0a50e38a8d9be06b6f3980e9d4b0c60af Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 18 Aug 2021 21:31:22 +0000
Subject: [PATCH 0416/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/414/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 50 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 50 +++++++++++++++++++-------------------
 2 files changed, 50 insertions(+), 50 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 10eea4cc40..7b2f2bd2a4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "1.0.8-6.fc34.aarch64"
     },
     "c-ares": {
-      "evra": "1.17.1-2.fc34.aarch64"
+      "evra": "1.17.2-1.fc34.aarch64"
     },
     "ca-certificates": {
       "evra": "2021.2.50-1.0.fc34.noarch"
@@ -274,13 +274,13 @@
       "evra": "34-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-repos": {
       "evra": "34-2.noarch"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.9-200.fc34.aarch64"
+      "evra": "5.13.10-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.9-200.fc34.aarch64"
+      "evra": "5.13.10-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.9-200.fc34.aarch64"
+      "evra": "5.13.10-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -601,7 +601,7 @@
       "evra": "1.3.1-47.fc34.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.aarch64"
@@ -730,16 +730,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc34.aarch64"
@@ -1054,7 +1054,7 @@
       "evra": "15.4-4.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.3.1-1.fc34.aarch64"
+      "evra": "1:1.4.0-2.fc34.aarch64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.aarch64"
@@ -1075,28 +1075,28 @@
       "evra": "0.1.2-7.fc34.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-client": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-common": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-1.fc34.aarch64"
+      "evra": "2.5.2-2.fc34.aarch64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc34.aarch64"
@@ -1147,7 +1147,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3318-1.fc34.aarch64"
+      "evra": "2:8.2.3354-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-17T19:12:33Z",
+    "generated": "2021-08-18T20:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-16T14:32:41Z"
+        "generated": "2021-08-17T19:49:11Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-17T00:59:00Z"
+        "generated": "2021-08-18T01:04:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5d5c836b57..25ca837d8d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "1.0.8-6.fc34.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.1-2.fc34.x86_64"
+      "evra": "1.17.2-1.fc34.x86_64"
     },
     "ca-certificates": {
       "evra": "2021.2.50-1.0.fc34.noarch"
@@ -274,13 +274,13 @@
       "evra": "34-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-1.noarch"
+      "evra": "34-36.noarch"
     },
     "fedora-repos": {
       "evra": "34-2.noarch"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.9-200.fc34.x86_64"
+      "evra": "5.13.10-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.9-200.fc34.x86_64"
+      "evra": "5.13.10-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.9-200.fc34.x86_64"
+      "evra": "5.13.10-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -607,7 +607,7 @@
       "evra": "1.3.1-47.fc34.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "libjcat": {
       "evra": "0.1.6-1.fc34.x86_64"
@@ -739,16 +739,16 @@
       "evra": "0.9.5-2.fc34.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc34.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.3.1-1.fc34.x86_64"
+      "evra": "1:1.4.0-2.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1087,28 +1087,28 @@
       "evra": "0.1.2-7.fc34.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-1.fc34.x86_64"
+      "evra": "2.5.2-2.fc34.x86_64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc34.x86_64"
@@ -1159,7 +1159,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3318-1.fc34.x86_64"
+      "evra": "2:8.2.3354-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-17T19:12:14Z",
+    "generated": "2021-08-18T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-16T14:35:46Z"
+        "generated": "2021-08-17T19:52:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-17T00:59:25Z"
+        "generated": "2021-08-18T01:05:10Z"
       }
     }
   }

From 837c91fad5409bfae59aacb22bd729fe951d0049 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 18 Aug 2021 16:11:36 -0400
Subject: [PATCH 0417/2157] tests/misc-ign-ro: wait while kube-watch is
 activating

We've hit a race a few times where:

```
kola-runext-test.sh[2023]: ++ systemctl is-active kube-watch.service
kola-runext-test.sh[2015]: + '[' activating '!=' active ']'
kola-runext-test.sh[2015]: + fatal 'kube-watch.service did not successfully activate'
kola-runext-test.sh[2015]: + echo 'kube-watch.service did not successfully activate'
kola-runext-test.sh[2015]: kube-watch.service did not successfully activate
```

Basically it's activating but not yet active. Let's loop while it
activates before we check the final state.
---
 tests/kola/misc-ign-ro/test.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/kola/misc-ign-ro/test.sh b/tests/kola/misc-ign-ro/test.sh
index 24728c720c..3713c864ea 100755
--- a/tests/kola/misc-ign-ro/test.sh
+++ b/tests/kola/misc-ign-ro/test.sh
@@ -49,6 +49,12 @@ ok "kube-watch.path successfully activated"
 touch /etc/kubernetes/kubeconfig
 ok "successfully created /etc/kubernetes/kubeconfig"
 
+# If we check the status too soon it could still be activating..
+# Sleep in a loop until it's done "activating"
+while [ "$(systemctl is-active kube-watch.service)" == "activating" ]; do
+    echo "kube-watch is activating. sleeping for 1 second"
+    sleep 1
+done
 if [ "$(systemctl is-active kube-watch.service)" != "active" ]; then
     fatal "kube-watch.service did not successfully activate"
 fi

From 9c76125fded9ca0b80dac08085f48f2b5a7c3701 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 19 Aug 2021 10:52:53 -0400
Subject: [PATCH 0418/2157] ci/remove-graduated-overrides: enable for branched
 and rawhide

In rare situations, we sometimes need to fast-track packages to these
mechanical streams, e.g. if pungi composes are failing and not updating
the repos. It's trivial to check those branches too for when the repos
are finally updated using the same GitHub Action, so let's do that.

Closes: #1170
---
 .github/workflows/remove-graduated-overrides.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 01db0b7f6b..1b78215462 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -19,6 +19,8 @@ jobs:
         branch:
           - testing-devel
           - next-devel
+          - branched
+          - rawhide
       fail-fast: false
     steps:
       - run: dnf install -y rpm-ostree # see related TODO above

From 073d0bf4148cc19b56408d0c62e45811e3fd0323 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 19 Aug 2021 16:04:47 -0400
Subject: [PATCH 0419/2157] Revert "manifests: workaround F37 GPG key issue for
 rawhide"

This reverts commit df0c12dd35cb05ea081d38e8c73e667c94aaed65.

It's no longer needed since the format of the gpgkey in fedora-repos
was updated.

https://github.com/coreos/fedora-coreos-tracker/issues/925
---
 kola-denylist.yaml                |  3 ---
 manifests/fedora-coreos-base.yaml | 11 -----------
 tests/kola/yum-repos/test.sh      | 25 -------------------------
 3 files changed, 39 deletions(-)
 delete mode 100755 tests/kola/yum-repos/test.sh

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6d80164af5..88680d7111 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,9 +10,6 @@
   snooze: 2021-09-01
   platforms:
     - openstack
-- pattern: ext.config.yum-repos
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/925
-  snooze: 2021-09-01
 - pattern: ext.config.toolbox
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/926
   stream: rawhide
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 4750b1d2ad..581845dfa5 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -117,17 +117,6 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
-
-  # Workaround issue in rawhide parsing the F37 GPG key
-  # by removing it from the list of gpgkeys to load.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/925
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    source /etc/os-release
-    [ ${VERSION_ID} -eq 36 ] || exit 0
-    sed -i 's|gpgkey=.*$|gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-$basearch|' /etc/yum.repos.d/fedora-rawhide.repo
-
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/tests/kola/yum-repos/test.sh b/tests/kola/yum-repos/test.sh
deleted file mode 100755
index ee6bc60ecf..0000000000
--- a/tests/kola/yum-repos/test.sh
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-# No need to run an other platforms than QEMU.
-# kola: { "platforms": "qemu-unpriv" }
-
-# We can delete this test when the following issue is resolved:
-# https://github.com/coreos/fedora-coreos-tracker/issues/925
-
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
-source /etc/os-release
-if [ "$VERSION_ID" -eq "36" ]; then
-    if ! grep 'RPM-GPG-KEY-fedora-37' /etc/yum.repos.d/fedora-rawhide.repo; then
-        fatal "Fedora 37 gpg key should be in rawhide repo"
-    fi
-fi
-ok rawhiderepo

From 27cb31d51e1ef4e56cd3851a0ff09d9add27e9f7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 Aug 2021 21:22:48 +0000
Subject: [PATCH 0420/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/415/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7b2f2bd2a4..e13f04a30f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -166,7 +166,7 @@
       "evra": "3.15-3.fc34.aarch64"
     },
     "crun": {
-      "evra": "0.20.1-1.fc34.aarch64"
+      "evra": "0.21-1.fc34.aarch64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-18T20:53:36Z",
+    "generated": "2021-08-19T20:53:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-17T19:49:11Z"
+        "generated": "2021-08-19T19:44:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-18T01:04:15Z"
+        "generated": "2021-08-19T00:55:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 25ca837d8d..38e8e69bf5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -166,7 +166,7 @@
       "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.20.1-1.fc34.x86_64"
+      "evra": "0.21-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-18T20:53:20Z",
+    "generated": "2021-08-19T20:53:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-17T19:52:46Z"
+        "generated": "2021-08-19T19:44:11Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-18T01:05:10Z"
+        "generated": "2021-08-19T00:56:16Z"
       }
     }
   }

From 68c74923880621e9b5fd9556233b717963000d5c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <travier@redhat.com>
Date: Tue, 10 Aug 2021 17:19:44 +0200
Subject: [PATCH 0421/2157] tests/countme: Retry five times to avoid flakes

We don't want to fail on partial count me reporting in pratice but the
current test was designed to fail in that case to make sure that we
don't miss an error in CI. This behavior becomes an issue in case of
Fedora infra flakes so retry five times in case of partial reporting to
avoid a costly CI failure as count me reporting is cheap.
---
 tests/kola/rpm-ostree-countme/test.sh | 72 +++++++++++++++++++--------
 1 file changed, 51 insertions(+), 21 deletions(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index a8a83aeded..4c26a8f7a5 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# No need to run an other platforms than QEMU.
+# No need to run on any other platform than QEMU.
 # kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
 ok() {
@@ -13,28 +13,58 @@ fatal() {
     exit 1
 }
 
-# Check that the timer got pulled when rpm-ostreed got started
-if [[ $(systemctl show -p ActiveState rpm-ostree-countme.timer) != "ActiveState=active" ]] \
-	&& [[ $(systemctl show -p SubState rpm-ostree-countme.timer) != "SubState=waiting" ]]; then
+journal_cursor() {
+	journalctl --output json --lines 1 \
+		| jq --raw-output '.["__CURSOR"]' > /tmp/countme.cursor
+}
+
+journal_after_cursor() {
+	journalctl --output=json \
+		--after-cursor "$(cat /tmp/countme.cursor)" \
+		--output=json --unit=rpm-ostree-countme.service \
+		--grep "Successful requests:" \
+		| jq --raw-output '.MESSAGE'
+}
+
+# Check that the timer has been enabled
+if [[ $(systemctl show -p ActiveState rpm-ostree-countme.timer) != "ActiveState=active" ]] && \
+   [[ $(systemctl show -p SubState rpm-ostree-countme.timer) != "SubState=waiting" ]]; then
 	fatal "rpm-ostree-countme timer has not been started"
 fi
 
-# Check that running the service manually is successful
-systemctl start rpm-ostree-countme.service
-if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveState=inactive" ]] \
-	&& [[ $(systemctl show -p SubState rpm-ostree-countme.service) != "SubState=dead" ]] \
-	&& [[ $(systemctl show -p Result rpm-ostree-countme.service) != "Result=success" ]] \
-	&& [[ $(systemctl show -p ExecMainStatus rpm-ostree-countme.service) != "ExecMainStatus=0" ]]; then
-	fatal "rpm-ostree-countme exited with an error"
-fi
+# Try five times to avoid Fedora infra flakes
+for i in $(seq 1 5); do
+	# Remove status file so that we retry every time we flake
+	rm -f /var/lib/private/rpm-ostree-countme/countme
+	# Update the journal cursor
+	journal_cursor
 
-# Check rpm-ostree count me output
-output="$(journalctl --output=json --boot --unit=rpm-ostree-countme.service --grep "Successful requests:" | jq --raw-output '.MESSAGE')"
-# depending on the stream, we expect different numbers of countme-enabled repos
-if [[ "${output}" != "Successful requests: 1/1" ]] && \
-   [[ "${output}" != "Successful requests: 2/2" ]] && \
-   [[ "${output}" != "Successful requests: 3/3" ]]; then
-	fatal "rpm-ostree-countme service ouput does not match expected sucess output"
-fi
+	# Check that running the service manually is successful
+	systemctl start rpm-ostree-countme.service
+	if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveState=inactive" ]] && \
+	   [[ $(systemctl show -p SubState rpm-ostree-countme.service) != "SubState=dead" ]] && \
+	   [[ $(systemctl show -p Result rpm-ostree-countme.service) != "Result=success" ]] && \
+	   [[ $(systemctl show -p ExecMainStatus rpm-ostree-countme.service) != "ExecMainStatus=0" ]]; then
+		echo "rpm-ostree-countme exited with an error (try: $i):"
+		systemctl status rpm-ostree-countme.service
+		sleep 10
+		continue
+	fi
+
+	# Check rpm-ostree count me output
+	output="$(journal_after_cursor)"
+	# Depending on the stream, we expect different numbers of countme-enabled repos
+	if [[ "${output}" != "Successful requests: 1/1" ]] && \
+	   [[ "${output}" != "Successful requests: 2/2" ]] && \
+	   [[ "${output}" != "Successful requests: 3/3" ]]; then
+		echo "rpm-ostree-countme service ouput does not match expected sucess output (try: $i):"
+		echo "${output}"
+		sleep 10
+		continue
+	fi
+
+	ok countme
+	exit 0
+done
 
-ok countme
+fatal "rpm-ostree-countme service failed or only partially completed five times"

From 5eaefd7b41a8ee802f616fa4741f244b05fa14b2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 21 Aug 2021 21:24:34 +0000
Subject: [PATCH 0422/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/417/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e13f04a30f..491832ecb3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.19-1.fc34.aarch64"
+      "evra": "32:9.16.20-2.fc34.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.19-1.fc34.noarch"
+      "evra": "32:9.16.20-2.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.19-1.fc34.aarch64"
+      "evra": "32:9.16.20-2.fc34.aarch64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.aarch64"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.10-200.fc34.aarch64"
+      "evra": "5.13.12-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.10-200.fc34.aarch64"
+      "evra": "5.13.12-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.10-200.fc34.aarch64"
+      "evra": "5.13.12-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -487,7 +487,7 @@
       "evra": "0.8.5-4.fc34.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.1-14.fc34.aarch64"
+      "evra": "1.19.2-2.fc34.aarch64"
     },
     "less": {
       "evra": "581.2-1.fc34.aarch64"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-19T20:53:58Z",
+    "generated": "2021-08-21T20:53:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-19T19:44:25Z"
+        "generated": "2021-08-19T21:30:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-19T00:55:33Z"
+        "generated": "2021-08-21T00:57:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 38e8e69bf5..fd146fbc6f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.19-1.fc34.x86_64"
+      "evra": "32:9.16.20-2.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.19-1.fc34.noarch"
+      "evra": "32:9.16.20-2.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.19-1.fc34.x86_64"
+      "evra": "32:9.16.20-2.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.10-200.fc34.x86_64"
+      "evra": "5.13.12-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.10-200.fc34.x86_64"
+      "evra": "5.13.12-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.10-200.fc34.x86_64"
+      "evra": "5.13.12-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -493,7 +493,7 @@
       "evra": "0.8.5-4.fc34.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.1-14.fc34.x86_64"
+      "evra": "1.19.2-2.fc34.x86_64"
     },
     "less": {
       "evra": "581.2-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-19T20:53:38Z",
+    "generated": "2021-08-21T20:53:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-19T19:44:11Z"
+        "generated": "2021-08-19T21:31:41Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-19T00:56:16Z"
+        "generated": "2021-08-21T00:58:13Z"
       }
     }
   }

From ab2ff09e8c18f54594ab1d7bec8acfe96fb0a013 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 23 Aug 2021 12:04:17 -0400
Subject: [PATCH 0423/2157] denylist: fix snooze definition for
 ext.config.toolbox

It was improperly matching all streams because I had specified
`stream: rawhide` instead of `streams: [rawhide]`. Fix that now.
---
 kola-denylist.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 88680d7111..7a50c134f8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,5 +12,6 @@
     - openstack
 - pattern: ext.config.toolbox
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/926
-  stream: rawhide
   snooze: 2021-09-01
+  streams:
+    - rawhide

From 28e9d2c8acf370dd3d7d244246b4a3d4a6bd1d4a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 23 Aug 2021 12:05:06 -0400
Subject: [PATCH 0424/2157] overrides: fast-track podman-3.3.0-1.fc34

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/923
---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..c13f2a9ae5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  podman:
+    evr: 3:3.3.0-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ce1dbeb75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/923
+      type: fast-track
+  podman-plugins:
+    evr: 3:3.3.0-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ce1dbeb75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/923
+      type: fast-track

From c19d2ad742b172245a24d40c691db194e9cb9a60 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 23 Aug 2021 21:31:20 +0000
Subject: [PATCH 0425/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/419/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 491832ecb3..43a544bcb4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -355,7 +355,7 @@
       "evra": "2.31.1-3.fc34.aarch64"
     },
     "glib2": {
-      "evra": "2.68.3-1.fc34.aarch64"
+      "evra": "2.68.4-1.fc34.aarch64"
     },
     "glibc": {
       "evra": "2.33-20.fc34.aarch64"
@@ -958,10 +958,10 @@
       "evra": "1.7.3-6.fc34.aarch64"
     },
     "podman": {
-      "evra": "3:3.2.3-2.fc34.aarch64"
+      "evra": "3:3.3.0-1.fc34.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.3-2.fc34.aarch64"
+      "evra": "3:3.3.0-1.fc34.aarch64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.aarch64"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-21T20:53:51Z",
+    "generated": "2021-08-23T20:55:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-19T21:30:48Z"
+        "generated": "2021-08-23T17:07:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-21T00:57:46Z"
+        "generated": "2021-08-23T01:10:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fd146fbc6f..410e5a8afb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,7 +355,7 @@
       "evra": "2.31.1-3.fc34.x86_64"
     },
     "glib2": {
-      "evra": "2.68.3-1.fc34.x86_64"
+      "evra": "2.68.4-1.fc34.x86_64"
     },
     "glibc": {
       "evra": "2.33-20.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.2.3-2.fc34.x86_64"
+      "evra": "3:3.3.0-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.2.3-2.fc34.x86_64"
+      "evra": "3:3.3.0-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-21T20:53:33Z",
+    "generated": "2021-08-23T20:55:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-19T21:31:41Z"
+        "generated": "2021-08-23T17:11:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-21T00:58:13Z"
+        "generated": "2021-08-23T01:10:44Z"
       }
     }
   }

From d0055cbc000b735d6ab71d196a05f67b2f2196b1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 24 Aug 2021 15:01:45 -0400
Subject: [PATCH 0426/2157] ci/remove-graduated-overrides: prefix PRs with
 branch name

Now that it's enabled for multiple branches, let's follow the convention
of including the branch in the PR title to make it easier to review.
---
 .github/workflows/remove-graduated-overrides.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 1b78215462..78e7736c61 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -45,7 +45,7 @@ jobs:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           branch: ${{ matrix.branch }}-graduation
           push-to-fork: coreosbot-releng/fedora-coreos-config
-          title: "lockfiles: drop graduated overrides 🎓"
+          title: "[${{ matrix.branch }}] lockfiles: drop graduated overrides 🎓"
           body: "Triggered by remove-graduated-overrides GitHub Action."
           committer: "CoreOS Bot <coreosbot@fedoraproject.org>"
           author: "CoreOS Bot <coreosbot@fedoraproject.org>"

From f9daf5900509e2823f653fe450e6d71355264876 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 24 Aug 2021 21:25:52 +0000
Subject: [PATCH 0427/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/420/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 43a544bcb4..dfdbdad9d7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -811,10 +811,10 @@
       "evra": "2.5.1-28.fc34.aarch64"
     },
     "linux-firmware": {
-      "evra": "20210716-121.fc34.noarch"
+      "evra": "20210818-122.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210716-121.fc34.noarch"
+      "evra": "20210818-122.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.aarch64"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-23T20:55:41Z",
+    "generated": "2021-08-24T20:54:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-23T17:07:26Z"
+        "generated": "2021-08-23T21:38:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-23T01:10:17Z"
+        "generated": "2021-08-24T03:24:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 410e5a8afb..ecc589b3f4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -820,10 +820,10 @@
       "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210716-121.fc34.noarch"
+      "evra": "20210818-122.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210716-121.fc34.noarch"
+      "evra": "20210818-122.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.x86_64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-23T20:55:17Z",
+    "generated": "2021-08-24T20:54:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-23T17:11:52Z"
+        "generated": "2021-08-23T21:45:32Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-23T01:10:44Z"
+        "generated": "2021-08-24T03:24:40Z"
       }
     }
   }

From 048b1ee32a3a3ab201926df43c366675de8ed2f4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 25 Aug 2021 21:26:05 +0000
Subject: [PATCH 0428/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/421/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 21 +++++++++------------
 manifest-lock.x86_64.json  | 21 +++++++++------------
 2 files changed, 18 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index dfdbdad9d7..10255a2770 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -130,10 +130,10 @@
       "evra": "2:2.164.2-1.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.5.3-1.fc34.aarch64"
+      "evra": "1.5.5-1.fc34.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-0.3.rc1.fc34.aarch64"
+      "evra": "1.0.0-1.fc34.aarch64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -306,9 +306,6 @@
     "findutils": {
       "evra": "1:4.8.0-2.fc34.aarch64"
     },
-    "firewalld-filesystem": {
-      "evra": "0.9.4-1.fc34.noarch"
-    },
     "flatpak-session-helper": {
       "evra": "1.10.2-4.fc34.aarch64"
     },
@@ -451,7 +448,7 @@
       "evra": "0.14-8.fc34.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.2-1.fc34.aarch64"
+      "evra": "1.6.4-1.fc34.aarch64"
     },
     "kbd": {
       "evra": "2.4.0-2.fc34.aarch64"
@@ -847,7 +844,7 @@
       "evra": "4.1-7.fc34.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.7-1.fc34.aarch64"
+      "evra": "20.10.8-1.fc34.aarch64"
     },
     "mokutil": {
       "evra": "2:0.4.0-4.fc34.aarch64"
@@ -1060,7 +1057,7 @@
       "evra": "2.3.2-9.fc34.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.1.9-1.fc34.aarch64"
+      "evra": "1.1.12-2.fc34.aarch64"
     },
     "snappy": {
       "evra": "1.1.8-5.fc34.aarch64"
@@ -1147,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3354-1.fc34.aarch64"
+      "evra": "2:8.2.3367-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1181,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-24T20:54:38Z",
+    "generated": "2021-08-25T20:56:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-23T21:38:34Z"
+        "generated": "2021-08-24T22:01:03Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-24T03:24:14Z"
+        "generated": "2021-08-25T19:37:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ecc589b3f4..d0cc362f05 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,10 +130,10 @@
       "evra": "2:2.164.2-1.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.5.3-1.fc34.x86_64"
+      "evra": "1.5.5-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-0.3.rc1.fc34.x86_64"
+      "evra": "1.0.0-1.fc34.x86_64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -306,9 +306,6 @@
     "findutils": {
       "evra": "1:4.8.0-2.fc34.x86_64"
     },
-    "firewalld-filesystem": {
-      "evra": "0.9.4-1.fc34.noarch"
-    },
     "flatpak-session-helper": {
       "evra": "1.10.2-4.fc34.x86_64"
     },
@@ -457,7 +454,7 @@
       "evra": "0.14-8.fc34.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.2-1.fc34.x86_64"
+      "evra": "1.6.4-1.fc34.x86_64"
     },
     "kbd": {
       "evra": "2.4.0-2.fc34.x86_64"
@@ -859,7 +856,7 @@
       "evra": "2:2.1-46.fc34.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.7-1.fc34.x86_64"
+      "evra": "20.10.8-1.fc34.x86_64"
     },
     "mokutil": {
       "evra": "2:0.4.0-4.fc34.x86_64"
@@ -1072,7 +1069,7 @@
       "evra": "2.3.2-9.fc34.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.1.9-1.fc34.x86_64"
+      "evra": "1.1.12-2.fc34.x86_64"
     },
     "snappy": {
       "evra": "1.1.8-5.fc34.x86_64"
@@ -1159,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3354-1.fc34.x86_64"
+      "evra": "2:8.2.3367-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1193,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-24T20:54:11Z",
+    "generated": "2021-08-25T20:56:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-23T21:45:32Z"
+        "generated": "2021-08-24T22:01:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-24T03:24:40Z"
+        "generated": "2021-08-25T19:37:45Z"
       }
     }
   }

From 56386b2ea18966e5ade51d34a88b2eceb24bd569 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 25 Aug 2021 20:49:52 +0000
Subject: [PATCH 0429/2157] tests/kola/authentication/passwd: Added tests for
 password authentication Tested user password provisioned by ignition works
 and tested that passwd created yescrypt password hash for fedora version
 greater than FedoraCoreOS 35

---
 tests/kola/authentication/passwd/config.fcc |  7 +++++
 tests/kola/authentication/passwd/test.sh    | 31 +++++++++++++++++++++
 2 files changed, 38 insertions(+)
 create mode 100644 tests/kola/authentication/passwd/config.fcc
 create mode 100755 tests/kola/authentication/passwd/test.sh

diff --git a/tests/kola/authentication/passwd/config.fcc b/tests/kola/authentication/passwd/config.fcc
new file mode 100644
index 0000000000..2ce8f6f1ea
--- /dev/null
+++ b/tests/kola/authentication/passwd/config.fcc
@@ -0,0 +1,7 @@
+variant: fcos
+version: 1.4.0
+passwd:
+  users:
+    - name: tester 
+      # encrypted version of 'foobar'. generated with `mkpasswd --method=yescrypt`
+      password_hash: $y$j9T$0HA8ReLTqRTccLKT0gzVY.$/e.OCrjePrh2tOm8CAoLqCMlZWS9q/WSAPBaZuopRs4
\ No newline at end of file
diff --git a/tests/kola/authentication/passwd/test.sh b/tests/kola/authentication/passwd/test.sh
new file mode 100755
index 0000000000..f379a22e71
--- /dev/null
+++ b/tests/kola/authentication/passwd/test.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+#Testing that a user password provisioned by ignition works
+OUTPUT=$(echo 'foobar' | setsid su - tester -c id)
+
+if [[ $OUTPUT != "uid=1001(tester) gid=1001(tester) groups=1001(tester) context=system_u:system_r:unconfined_service_t:s0" ]]; then
+    fatal "Failure when checking command output running with specified username and password"
+fi
+# yescrypt was changed to the default in Fedora 35
+# https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow
+# Testing that passwd command creates a yescrypt password hash(starting with '$y$')
+source /etc/os-release 
+if [ "$VERSION_ID" -ge "35" ]; then
+    sudo useradd tester2
+    echo "42abcdef" | sudo passwd tester2 --stdin
+    PASSWD_CONFIRMATION=$(sudo grep tester2 /etc/shadow)
+    if [[ ${PASSWD_CONFIRMATION:0:11} != 'tester2:$y$' ]]; then
+        fatal "passwd did not create a yescrypt password hash"
+    fi
+fi
+ok "User-password provisioned and passwd command successfully tested"
\ No newline at end of file

From d571b5c1067f688033ebea9421801ef1147c95c1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 Aug 2021 18:16:48 +0000
Subject: [PATCH 0430/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index c13f2a9ae5..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  podman:
-    evr: 3:3.3.0-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ce1dbeb75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/923
-      type: fast-track
-  podman-plugins:
-    evr: 3:3.3.0-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ce1dbeb75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/923
-      type: fast-track
+packages: {}

From d2cfc531ff17e2b20b73783e5e12081964f3d067 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 Aug 2021 21:44:46 +0000
Subject: [PATCH 0431/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/424/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 10255a2770..ecac2b6206 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.0-1.fc34.aarch64"
+      "evra": "0.10.0-2.fc34.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.0-1.fc34.aarch64"
+      "evra": "0.10.0-2.fc34.aarch64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-25T20:56:26Z",
+    "generated": "2021-08-27T21:00:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-24T22:01:03Z"
+        "generated": "2021-08-26T14:58:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-25T19:37:17Z"
+        "generated": "2021-08-27T18:45:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d0cc362f05..d013cfc0fe 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.0-1.fc34.x86_64"
+      "evra": "0.10.0-2.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.0-1.fc34.x86_64"
+      "evra": "0.10.0-2.fc34.x86_64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-25T20:56:09Z",
+    "generated": "2021-08-27T20:59:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-24T22:01:40Z"
+        "generated": "2021-08-26T15:08:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-25T19:37:45Z"
+        "generated": "2021-08-27T18:47:05Z"
       }
     }
   }

From 46a90f1a4f8847f68f4472825b9f1e3f2ee064a3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 30 Aug 2021 18:15:14 +0000
Subject: [PATCH 0432/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/427/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 4 ++--
 manifest-lock.x86_64.json  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ecac2b6206..2ed2a48011 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-27T21:00:26Z",
+    "generated": "2021-08-30T18:14:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-08-26T14:58:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-27T18:45:50Z"
+        "generated": "2021-08-29T18:26:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d013cfc0fe..27ffa77a91 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-27T20:59:53Z",
+    "generated": "2021-08-30T18:14:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-08-26T15:08:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-27T18:47:05Z"
+        "generated": "2021-08-29T18:27:09Z"
       }
     }
   }

From d14289a16b296eb4f04cdc91444c5f851c136c84 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 30 Aug 2021 21:41:51 +0000
Subject: [PATCH 0433/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/428/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2ed2a48011..e2e6bf2f77 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.20-2.fc34.aarch64"
+      "evra": "32:9.16.20-3.fc34.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.20-2.fc34.noarch"
+      "evra": "32:9.16.20-3.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.20-2.fc34.aarch64"
+      "evra": "32:9.16.20-3.fc34.aarch64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.aarch64"
@@ -712,7 +712,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.6-0.fc34.aarch64"
+      "evra": "2:4.14.7-0.fc34.aarch64"
     },
     "libsolv": {
       "evra": "0.7.17-3.fc34.aarch64"
@@ -787,7 +787,7 @@
       "evra": "0.3.2-1.fc34.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.14.6-0.fc34.aarch64"
+      "evra": "2:4.14.7-0.fc34.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.25-1.fc34.aarch64"
@@ -1015,13 +1015,13 @@
       "evra": "2:1.0.1-1.fc34.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.6-0.fc34.aarch64"
+      "evra": "2:4.14.7-0.fc34.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.14.6-0.fc34.noarch"
+      "evra": "2:4.14.7-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.6-0.fc34.aarch64"
+      "evra": "2:4.14.7-0.fc34.aarch64"
     },
     "sed": {
       "evra": "4.8-7.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-30T18:14:25Z",
+    "generated": "2021-08-30T20:54:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-26T14:58:59Z"
+        "generated": "2021-08-30T20:31:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-29T18:26:37Z"
+        "generated": "2021-08-30T20:29:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 27ffa77a91..de7b354722 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.20-2.fc34.x86_64"
+      "evra": "32:9.16.20-3.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.20-2.fc34.noarch"
+      "evra": "32:9.16.20-3.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.20-2.fc34.x86_64"
+      "evra": "32:9.16.20-3.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.5-3.fc34.x86_64"
@@ -718,7 +718,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.6-0.fc34.x86_64"
+      "evra": "2:4.14.7-0.fc34.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-2.fc34.x86_64"
@@ -796,7 +796,7 @@
       "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.6-0.fc34.x86_64"
+      "evra": "2:4.14.7-0.fc34.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.25-1.fc34.x86_64"
@@ -1027,13 +1027,13 @@
       "evra": "2:1.0.1-1.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.6-0.fc34.x86_64"
+      "evra": "2:4.14.7-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.6-0.fc34.noarch"
+      "evra": "2:4.14.7-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.6-0.fc34.x86_64"
+      "evra": "2:4.14.7-0.fc34.x86_64"
     },
     "sed": {
       "evra": "4.8-7.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-30T18:14:07Z",
+    "generated": "2021-08-30T20:54:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-26T15:08:23Z"
+        "generated": "2021-08-30T20:35:33Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-29T18:27:09Z"
+        "generated": "2021-08-30T20:30:17Z"
       }
     }
   }

From 087a0fd5b2f43f04f737b9ea5b235a6ea139d660 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 31 Aug 2021 13:41:53 -0400
Subject: [PATCH 0434/2157] kola-denylist: extend snooze for the toolbox test

registry.fedoraproject.org/fedora-toolbox:36 still doesn't exist.
See https://github.com/coreos/fedora-coreos-tracker/issues/926
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7a50c134f8..612265c6f1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,6 +12,6 @@
     - openstack
 - pattern: ext.config.toolbox
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/926
-  snooze: 2021-09-01
+  snooze: 2021-09-15
   streams:
     - rawhide

From f009374426384e45ed20633b258c26bc2b6a5695 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Thu, 26 Aug 2021 10:41:43 -0400
Subject: [PATCH 0435/2157] tests: Split up some ro tests and mark tests as
 non-exclusive

Moved 'z-ram is off by default' test from misc-ro and 'setup swap on zram device'
from misc-ign-ro into new files under kola/swap. Now misc-ro and misc-ign-ro
do not conflict and can be run in one VM after
https://github.com/coreos/coreos-assembler/pull/2356 lands.
---
 tests/kola/misc-ign-ro/config.fcc             |  6 -----
 tests/kola/misc-ign-ro/test.sh                | 10 +--------
 tests/kola/misc-ro                            |  9 +-------
 .../test.sh                                   |  1 +
 tests/kola/swap/zram-default                  | 20 +++++++++++++++++
 tests/kola/swap/zram-generator/config.fcc     | 10 +++++++++
 tests/kola/swap/zram-generator/test.sh        | 22 +++++++++++++++++++
 7 files changed, 55 insertions(+), 23 deletions(-)
 create mode 100755 tests/kola/swap/zram-default
 create mode 100644 tests/kola/swap/zram-generator/config.fcc
 create mode 100755 tests/kola/swap/zram-generator/test.sh

diff --git a/tests/kola/misc-ign-ro/config.fcc b/tests/kola/misc-ign-ro/config.fcc
index dc218a3959..38fc593655 100644
--- a/tests/kola/misc-ign-ro/config.fcc
+++ b/tests/kola/misc-ign-ro/config.fcc
@@ -8,12 +8,6 @@ storage:
     # See: https://github.com/containers/container-selinux/issues/135
     - path: /etc/kubernetes
   files:
-    - path: /etc/systemd/zram-generator.conf
-      mode: 0644
-      contents:
-        inline: |
-          # This config file enables a /dev/zram0 device with the default settings
-          [zram0]
     - path: /etc/pki/ca-trust/source/anchors/coreos.crt
       mode: 0644
       contents:
diff --git a/tests/kola/misc-ign-ro/test.sh b/tests/kola/misc-ign-ro/test.sh
index 3713c864ea..010977181e 100755
--- a/tests/kola/misc-ign-ro/test.sh
+++ b/tests/kola/misc-ign-ro/test.sh
@@ -1,4 +1,5 @@
 #!/bin/bash
+# kola: { "exclusive": false }
 set -xeuo pipefail
 
 ok() {
@@ -10,15 +11,6 @@ fatal() {
             exit 1
         }
 
-# This test makes sure that swap on zram devices can be set up
-# using the zram-generator as defined in the docs at
-# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
-
-if ! grep -q 'zram0' /proc/swaps; then
-    fatal "expected zram0 to be set up"
-fi
-ok "swap on zram was set up correctly"
-
 # Make sure that coreos-update-ca-trust kicked in and observe the result.
 if ! systemctl show coreos-update-ca-trust.service -p ActiveState | grep ActiveState=active; then
     fatal "coreos-update-ca-trust.service not active"
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index a900d63e72..0ada885cef 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -1,4 +1,5 @@
 #!/bin/bash
+# kola: { "exclusive": false }
 # This is a place to put random quick read-only tests.
 set -xeuo pipefail
 
@@ -134,14 +135,6 @@ if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then
 fi
 ok rpmdb is sqlite
 
-# make sure we don't default to having swap on zram
-# https://github.com/coreos/fedora-coreos-tracker/issues/509
-# https://github.com/coreos/fedora-coreos-config/pull/687
-if [ -e /dev/zram0 ]; then
-    fatal "zram0 swap device set up on default install"
-fi
-ok no zram swap by default
-
 # make sure dnsmasq is masked
 # https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
 if [ $(systemctl is-enabled dnsmasq.service) != 'masked' ]; then
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
index 4a44f2e729..bee179a59f 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
@@ -1,4 +1,5 @@
 #!/bin/bash
+# kola: { "exclusive": false }
 set -xeuo pipefail
 
 # With pure network defaults no networking should have been propagated
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
new file mode 100755
index 0000000000..c380b4dacf
--- /dev/null
+++ b/tests/kola/swap/zram-default
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure we don't default to having swap on zram
+# https://github.com/coreos/fedora-coreos-tracker/issues/509
+# https://github.com/coreos/fedora-coreos-config/pull/687
+if [ -e /dev/zram0 ]; then
+    fatal "zram0 swap device set up on default install"
+fi
+ok no zram swap by default
diff --git a/tests/kola/swap/zram-generator/config.fcc b/tests/kola/swap/zram-generator/config.fcc
new file mode 100644
index 0000000000..244d4a159c
--- /dev/null
+++ b/tests/kola/swap/zram-generator/config.fcc
@@ -0,0 +1,10 @@
+variant: fcos
+version: 1.2.0
+storage:
+  files:
+    - path: /etc/systemd/zram-generator.conf
+      mode: 0644
+      contents:
+        inline: |
+          # This config file enables a /dev/zram0 device with the default settings
+          [zram0]
\ No newline at end of file
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
new file mode 100755
index 0000000000..e356b98fdb
--- /dev/null
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# This test conflicts with swap/zram-default so we cannot set this to non-exclusive
+# kola: { "exclusive": true}
+set -xeuo pipefail
+
+ok() {
+        echo "ok" "$@"
+    }
+
+fatal() {
+        echo "$@" >&2
+            exit 1
+        }
+
+# This test makes sure that swap on zram devices can be set up
+# using the zram-generator as defined in the docs at
+# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
+
+if ! grep -q 'zram0' /proc/swaps; then
+    fatal "expected zram0 to be set up"
+fi
+ok "swap on zram was set up correctly"
\ No newline at end of file

From 6e670ac4ec11d8a7bb95a79399aaf17c766e7fc5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Sep 2021 21:27:20 +0000
Subject: [PATCH 0436/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/430/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e2e6bf2f77..3988f0aa55 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -64,7 +64,7 @@
       "evra": "0.2.5-3.fc34.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.1-2.fc34.aarch64"
+      "evra": "3.5.2-2.fc34.aarch64"
     },
     "btrfs-progs": {
       "evra": "5.13.1-1.fc34.aarch64"
@@ -448,7 +448,7 @@
       "evra": "0.14-8.fc34.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.4-1.fc34.aarch64"
+      "evra": "1.6.6-1.fc34.aarch64"
     },
     "kbd": {
       "evra": "2.4.0-2.fc34.aarch64"
@@ -496,7 +496,7 @@
       "evra": "0.3.111-11.fc34.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.1-2.fc34.aarch64"
+      "evra": "3.5.2-2.fc34.aarch64"
     },
     "libargon2": {
       "evra": "20171227-6.fc34.aarch64"
@@ -877,7 +877,7 @@
       "evra": "1:2.5.4-0.fc34.aarch64"
     },
     "nftables": {
-      "evra": "1:0.9.8-2.fc34.aarch64"
+      "evra": "1:0.9.8-3.fc34.aarch64"
     },
     "npth": {
       "evra": "1.6-6.fc34.aarch64"
@@ -907,10 +907,10 @@
       "evra": "8.6p1-3.fc34.aarch64"
     },
     "openssl": {
-      "evra": "1:1.1.1k-1.fc34.aarch64"
+      "evra": "1:1.1.1l-1.fc34.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1k-1.fc34.aarch64"
+      "evra": "1:1.1.1l-1.fc34.aarch64"
     },
     "os-prober": {
       "evra": "1.77-7.fc34.aarch64"
@@ -955,10 +955,10 @@
       "evra": "1.7.3-6.fc34.aarch64"
     },
     "podman": {
-      "evra": "3:3.3.0-1.fc34.aarch64"
+      "evra": "3:3.3.1-1.fc34.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.3.0-1.fc34.aarch64"
+      "evra": "3:3.3.1-1.fc34.aarch64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-30T20:54:58Z",
+    "generated": "2021-09-01T20:54:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-30T20:31:42Z"
+        "generated": "2021-08-31T20:05:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-30T20:29:47Z"
+        "generated": "2021-09-01T20:13:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index de7b354722..9bbbd0797f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,7 +64,7 @@
       "evra": "0.2.5-3.fc34.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.1-2.fc34.x86_64"
+      "evra": "3.5.2-2.fc34.x86_64"
     },
     "btrfs-progs": {
       "evra": "5.13.1-1.fc34.x86_64"
@@ -454,7 +454,7 @@
       "evra": "0.14-8.fc34.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.4-1.fc34.x86_64"
+      "evra": "1.6.6-1.fc34.x86_64"
     },
     "kbd": {
       "evra": "2.4.0-2.fc34.x86_64"
@@ -502,7 +502,7 @@
       "evra": "0.3.111-11.fc34.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.1-2.fc34.x86_64"
+      "evra": "3.5.2-2.fc34.x86_64"
     },
     "libargon2": {
       "evra": "20171227-6.fc34.x86_64"
@@ -889,7 +889,7 @@
       "evra": "1:2.5.4-0.fc34.x86_64"
     },
     "nftables": {
-      "evra": "1:0.9.8-2.fc34.x86_64"
+      "evra": "1:0.9.8-3.fc34.x86_64"
     },
     "npth": {
       "evra": "1.6-6.fc34.x86_64"
@@ -919,10 +919,10 @@
       "evra": "8.6p1-3.fc34.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1k-1.fc34.x86_64"
+      "evra": "1:1.1.1l-1.fc34.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1k-1.fc34.x86_64"
+      "evra": "1:1.1.1l-1.fc34.x86_64"
     },
     "os-prober": {
       "evra": "1.77-7.fc34.x86_64"
@@ -967,10 +967,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.3.0-1.fc34.x86_64"
+      "evra": "3:3.3.1-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.3.0-1.fc34.x86_64"
+      "evra": "3:3.3.1-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-08-30T20:54:55Z",
+    "generated": "2021-09-01T20:54:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-30T20:35:33Z"
+        "generated": "2021-08-31T20:05:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-08-30T20:30:17Z"
+        "generated": "2021-09-01T20:13:47Z"
       }
     }
   }

From f812f64a40a0b86671172e42a747bce69cef880a Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 1 Sep 2021 06:18:02 +0000
Subject: [PATCH 0437/2157] tests/kola/podman/dns: Added test for DNS in
 rootless podman network

Original Issue: https://github.com/coreos/fedora-coreos-tracker/issues/923
Fixes: https://github.com/coreos/fedora-coreos-config/issues/1180
---
 tests/kola/podman/dns/test.sh | 42 +++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100755 tests/kola/podman/dns/test.sh

diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
new file mode 100755
index 0000000000..52087c951f
--- /dev/null
+++ b/tests/kola/podman/dns/test.sh
@@ -0,0 +1,42 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# Tests that rootless podman containers can DNS resolve external domains.
+# https://github.com/coreos/fedora-coreos-tracker/issues/923
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "exclusive": false}
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+runascoreuserscript='
+#!/bin/bash
+set -euxo pipefail
+
+podman network create testnetwork
+podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:34 getent hosts google.com
+podman network rm testnetwork
+'
+
+runascoreuser() {
+    # NOTE: If we don't use `| cat` the output won't get copied
+    # and won't show up in the output of the ext test.
+    sudo -u core "$@" | cat
+}
+
+main() {
+    echo "$runascoreuserscript" > /tmp/runascoreuserscript
+    chmod +x /tmp/runascoreuserscript
+    if ! runascoreuser /tmp/runascoreuserscript ; then 
+        fatal "DNS in rootless podman testnetwork failed. Test Fails" 
+    else 
+        ok "DNS in rootless podman testnetwork Suceeded. Test Passes" 
+    fi
+}
+
+main
\ No newline at end of file

From b937219c697f41c934cff0abff02c56cee36fd02 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 Sep 2021 21:24:39 +0000
Subject: [PATCH 0438/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/432/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3988f0aa55..030ed57187 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -166,7 +166,7 @@
       "evra": "3.15-3.fc34.aarch64"
     },
     "crun": {
-      "evra": "0.21-1.fc34.aarch64"
+      "evra": "1.0-1.fc34.aarch64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.12-200.fc34.aarch64"
+      "evra": "5.13.13-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.12-200.fc34.aarch64"
+      "evra": "5.13.13-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.12-200.fc34.aarch64"
+      "evra": "5.13.13-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1051,7 +1051,7 @@
       "evra": "15.4-4.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.4.0-2.fc34.aarch64"
+      "evra": "1:1.4.1-1.fc34.aarch64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.aarch64"
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3367-1.fc34.aarch64"
+      "evra": "2:8.2.3391-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-01T20:54:47Z",
+    "generated": "2021-09-03T20:54:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-08-31T20:05:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-01T20:13:17Z"
+        "generated": "2021-09-02T23:33:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9bbbd0797f..4a2f63c9e6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -166,7 +166,7 @@
       "evra": "3.15-3.fc34.x86_64"
     },
     "crun": {
-      "evra": "0.21-1.fc34.x86_64"
+      "evra": "1.0-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.12-200.fc34.x86_64"
+      "evra": "5.13.13-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.12-200.fc34.x86_64"
+      "evra": "5.13.13-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.12-200.fc34.x86_64"
+      "evra": "5.13.13-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1063,7 +1063,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.4.0-2.fc34.x86_64"
+      "evra": "1:1.4.1-1.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3367-1.fc34.x86_64"
+      "evra": "2:8.2.3391-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-01T20:54:51Z",
+    "generated": "2021-09-03T20:53:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-08-31T20:05:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-01T20:13:47Z"
+        "generated": "2021-09-02T23:33:42Z"
       }
     }
   }

From 4076b2bdfc7efe30df166cfd231952edd294b7e1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 4 Sep 2021 21:23:59 +0000
Subject: [PATCH 0439/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/433/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 030ed57187..3d2577c634 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.164.2-1.fc34.noarch"
+      "evra": "2:2.167.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "4.16.1.3-1.fc34.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.7-1.fc34.aarch64"
+      "evra": "2021.10-2.fc34.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.7-1.fc34.aarch64"
+      "evra": "2021.10-2.fc34.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.aarch64"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-03T20:54:17Z",
+    "generated": "2021-09-04T20:53:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-08-31T20:05:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-02T23:33:12Z"
+        "generated": "2021-09-04T19:25:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4a2f63c9e6..9fb0804e93 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.164.2-1.fc34.noarch"
+      "evra": "2:2.167.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.7-1.fc34.x86_64"
+      "evra": "2021.10-2.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.7-1.fc34.x86_64"
+      "evra": "2021.10-2.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-03T20:53:58Z",
+    "generated": "2021-09-04T20:53:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-08-31T20:05:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-02T23:33:42Z"
+        "generated": "2021-09-04T19:26:13Z"
       }
     }
   }

From 907ed41048455ce31af23617272e767ae880c537 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 6 Sep 2021 20:54:50 +0000
Subject: [PATCH 0440/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/438/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3d2577c634..1d29b7fbf0 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-04T20:53:53Z",
+    "generated": "2021-09-06T20:54:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-31T20:05:25Z"
+        "generated": "2021-09-06T17:41:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-04T19:25:44Z"
+        "generated": "2021-09-05T21:01:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9fb0804e93..38a8d4ffd1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-04T20:53:47Z",
+    "generated": "2021-09-06T20:54:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-08-31T20:05:07Z"
+        "generated": "2021-09-06T17:46:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-04T19:26:13Z"
+        "generated": "2021-09-05T21:01:31Z"
       }
     }
   }

From 3118627099ea056c93c3e8d204c8971bf94eb473 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Sep 2021 21:44:23 +0000
Subject: [PATCH 0441/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/439/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1d29b7fbf0..930a76b12b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1144,7 +1144,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3391-1.fc34.aarch64"
+      "evra": "2:8.2.3404-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-06T20:54:30Z",
+    "generated": "2021-09-07T20:54:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-09-06T17:41:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-05T21:01:01Z"
+        "generated": "2021-09-07T16:18:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 38a8d4ffd1..2288804ff8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1156,7 +1156,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3391-1.fc34.x86_64"
+      "evra": "2:8.2.3404-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-06T20:54:07Z",
+    "generated": "2021-09-07T20:54:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-09-06T17:46:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-05T21:01:31Z"
+        "generated": "2021-09-07T16:18:54Z"
       }
     }
   }

From cf80842315397472e53149fb0d527a01709449be Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 7 Sep 2021 14:59:00 -0400
Subject: [PATCH 0442/2157] ci: use coreos-ci-lib wrapper for kola testiso

This adds iso-live-login and iso-as-disk scenarios, plus tests on metal4k,
multipath, and UEFI.  It also drops the iso-install scenario, which isn't
a typical use case for FCOS.
---
 .cci.jenkinsfile | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index ec9517e6c3..911e1936f3 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -45,13 +45,7 @@ cosaPod {
 
     stage("Test ISO") {
         shwrap("cd /srv/fcos && cosa buildextend-live")
-        try {
-            shwrap("cd /srv/fcos && kola testiso -S --scenarios pxe-install,pxe-offline-install,iso-install --output-dir tmp/kola-testiso")
-            shwrap("cd /srv/fcos && kola testiso -S --scenarios iso-offline-install --qemu-multipath --output-dir tmp/kola-testiso-mpath")
-        } finally {
-            shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso/ tmp/kola-testiso-mpath/ | xz -c9 > ${env.WORKSPACE}/kola-testiso.tar.xz")
-            archiveArtifacts allowEmptyArchive: true, artifacts: 'kola-testiso.tar.xz'
-        }
+        fcosKolaTestIso(cosaDir: "/srv/fcos", extraArgs4k: "--no-pxe")
     }
 
     // also print the pkgdiff as a separate stage to make it more visible

From 82859cbc47bdd0b13d61583431f82fb9456dfb49 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 7 Sep 2021 15:02:49 -0400
Subject: [PATCH 0443/2157] ci: run kola basic scenarios

This gets us UEFI boot testing with the bare-metal image (not just the
ISO), plus an NVMe boot test.
---
 .cci.jenkinsfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 911e1936f3..420ca37951 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -35,7 +35,8 @@ cosaPod {
     if (env.CHANGE_TARGET in mechanical_streams) {
         no_strict_build = true
     }
-    fcosBuild(skipInit: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
+    fcosBuild(skipInit: true, skipKola: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
+    fcosKola(basicScenarios: true)
 
     parallel metal: {
         shwrap("cd /srv/fcos && cosa buildextend-metal")

From 259e71b2ef7d39d78396d6f8d4ae24fffe844339 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 8 Sep 2021 21:25:19 +0000
Subject: [PATCH 0444/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/440/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 930a76b12b..230263edd8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -154,10 +154,10 @@
       "evra": "2.13-10.fc34.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.6-25.fc34.aarch64"
+      "evra": "2.9.6-27.fc34.aarch64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-25.fc34.aarch64"
+      "evra": "2.9.6-27.fc34.aarch64"
     },
     "criu": {
       "evra": "3.15-3.fc34.aarch64"
@@ -244,7 +244,7 @@
       "evra": "1.45.6-5.fc34.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-2.fc34.noarch"
+      "evra": "5-4.fc34.noarch"
     },
     "efibootmgr": {
       "evra": "16-10.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.13-200.fc34.aarch64"
+      "evra": "5.13.14-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.13-200.fc34.aarch64"
+      "evra": "5.13.14-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.13-200.fc34.aarch64"
+      "evra": "5.13.14-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-07T20:54:56Z",
+    "generated": "2021-09-08T20:54:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-06T17:41:54Z"
+        "generated": "2021-09-07T21:50:41Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-07T16:18:25Z"
+        "generated": "2021-09-08T14:54:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2288804ff8..3500a53336 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -154,10 +154,10 @@
       "evra": "2.13-10.fc34.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.6-25.fc34.x86_64"
+      "evra": "2.9.6-27.fc34.x86_64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-25.fc34.x86_64"
+      "evra": "2.9.6-27.fc34.x86_64"
     },
     "criu": {
       "evra": "3.15-3.fc34.x86_64"
@@ -244,7 +244,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-2.fc34.noarch"
+      "evra": "5-4.fc34.noarch"
     },
     "efibootmgr": {
       "evra": "16-10.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.13-200.fc34.x86_64"
+      "evra": "5.13.14-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.13-200.fc34.x86_64"
+      "evra": "5.13.14-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.13-200.fc34.x86_64"
+      "evra": "5.13.14-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-07T20:54:47Z",
+    "generated": "2021-09-08T20:54:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-06T17:46:59Z"
+        "generated": "2021-09-07T21:53:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-07T16:18:54Z"
+        "generated": "2021-09-08T14:54:37Z"
       }
     }
   }

From 3dafafcc3d1f2afdb8672962b7d1dabbb3b374e7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 8 Sep 2021 14:04:04 -0400
Subject: [PATCH 0445/2157] tests/misc-ro: check initrd for non-executable
 scripts

If a script is committed to Git without +x, Dracut will happily install
it into the initrd without +x.  Add a simple check for this.
---
 tests/kola/misc-ro | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 0ada885cef..05d91c2927 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -189,3 +189,12 @@ if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=i
     fatal "Unit network-online.target shouldn't be active"
 fi
 ok "unit network-online.target inactive"
+
+# It's easy for dracut modules to accidentally ship scripts without +x set
+tmpd=$(mktemp -d)
+( cd ${tmpd} && lsinitrd --unpack /boot/ostree/*/init* )
+if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
+    fatal "Found non-executable scripts in initrd"
+fi
+rm -r ${tmpd}
+ok "All initrd scripts are executable"

From eb9390f5abf295ed3970262307dd8194f05a36f2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Sep 2021 21:25:29 +0000
Subject: [PATCH 0446/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/441/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 230263edd8..9adfc498c9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1027,10 +1027,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.16-1.fc34.noarch"
+      "evra": "34.18-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.16-1.fc34.noarch"
+      "evra": "34.18-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-08T20:54:41Z",
+    "generated": "2021-09-09T20:53:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-07T21:50:41Z"
+        "generated": "2021-09-08T21:34:22Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-08T14:54:07Z"
+        "generated": "2021-09-09T17:25:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3500a53336..90dba19d61 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1039,10 +1039,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.16-1.fc34.noarch"
+      "evra": "34.18-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.16-1.fc34.noarch"
+      "evra": "34.18-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-08T20:54:33Z",
+    "generated": "2021-09-09T20:53:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-07T21:53:50Z"
+        "generated": "2021-09-08T21:37:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-08T14:54:37Z"
+        "generated": "2021-09-09T17:26:22Z"
       }
     }
   }

From a2aef3ee6194dcba0d9c507a3479a393d7787844 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 10 Sep 2021 04:16:07 -0400
Subject: [PATCH 0447/2157] 05core/coreos-liveiso-success: fix hang with
 systemd 239

RHEL 8 has systemd 239, which has
https://github.com/systemd/systemd/issues/9374.  As a result,
"journalctl -f ... | head -1" hangs because journalctl doesn't properly
exit.  Rewrite the check to call loginctl once per second until it finds
a session.  This approach is uglier, but the service only runs in the live
ISO, on QEMU, when there's no Ignition config, and when kola's virtio port
is open, so the minimal extra overhead shouldn't affect production
systems.

Fixes the kola testiso iso-live-login scenario in RHCOS.
---
 .../systemd/system/coreos-liveiso-success.service | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-liveiso-success.service b/overlay.d/05core/usr/lib/systemd/system/coreos-liveiso-success.service
index a3db8673a6..d148d12cb2 100644
--- a/overlay.d/05core/usr/lib/systemd/system/coreos-liveiso-success.service
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-liveiso-success.service
@@ -15,15 +15,12 @@ ConditionPathExists=/dev/virtio-ports/coreos.liveiso-success
 
 [Service]
 Type=simple
-# https://stackoverflow.com/questions/44358723/systemd-unit-file-problems-with-tr
-IgnoreSIGPIPE=false
-# See https://cgit.freedesktop.org/systemd/systemd/plain/src/systemd/sd-messages.h for the MESSAGE_ID source.
-# The logic here is that we're doing a streaming journalctl query (-f to follow)
-# and the `| head` bit will cause the pipeline to wait until at least one line is
-# emitted, which will happen when a user login starts.  We then just write a static
-# message to the virtio channel, which https://github.com/coreos/coreos-assembler/pull/1330
-# knows how to read.
-ExecStart=/bin/sh -c 'journalctl -b -q -f --no-tail -o cat -u systemd-logind.service MESSAGE_ID=8d45620c1a4348dbb17410da57c60c66 | head -1; echo coreos-liveiso-success > /dev/virtio-ports/coreos.liveiso-success'
+# Wait for a user session to start, then write a static message to the
+# virtio channel, which https://github.com/coreos/coreos-assembler/pull/1330
+# knows how to read.  We previously did "journalctl -f ... | head -1" here,
+# but RHEL 8 has systemd 239, which has
+# https://github.com/systemd/systemd/issues/9374.
+ExecStart=/bin/sh -c 'while [ -z "$(loginctl list-sessions --no-legend)" ]; do sleep 1; done; echo coreos-liveiso-success > /dev/virtio-ports/coreos.liveiso-success'
 
 [Install]
 WantedBy=multi-user.target

From 79db27dc8f39e8933d243d6d66678ce951a586e8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 3 Aug 2021 14:26:03 -0400
Subject: [PATCH 0448/2157] manifests/fedora-coreos-base: stop disabling
 modular repos

The latest rpm-ostree release now has proper support for modules. It
will not layer modular packages unless explicitly enabled. So let's stop
disabling the repos so e.g. `rpm-ostree ex module install cri-o:1.20`
alone just works.
---
 manifests/fedora-coreos-base.yaml | 10 ----------
 tests/kola/misc-ro                |  3 +++
 2 files changed, 3 insertions(+), 10 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 581845dfa5..2b1690050b 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -49,16 +49,6 @@ rpmdb: sqlite
 # ⚠⚠⚠ ONLY TEMPORARY HACKS ALLOWED HERE; ALL ENTRIES NEED TRACKER LINKS ⚠⚠⚠
 # See also the version of this in fedora-coreos.yaml
 postprocess:
-  # This will be dropped once rpm-ostree because module-aware.
-  # https://github.com/projectatomic/rpm-ostree/issues/1542#issuecomment-419684977
-  # https://github.com/projectatomic/rpm-ostree/issues/1435
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    for x in /etc/yum.repos.d/*modular.repo; do
-      sed -i -e 's,enabled=[01],enabled=0,' ${x}
-    done
-
   # Enable SELinux booleans used by OpenShift
   # https://github.com/coreos/fedora-coreos-tracker/issues/284
   - |
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 05d91c2927..bdfec9bbb7 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,3 +198,6 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
+
+rpm-ostree ex module install cri-o:1.20/default --dry-run
+ok "basic modularity support"

From e5afac98b251aa32632116c13204bee888eca09d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 30 Aug 2021 18:03:24 -0400
Subject: [PATCH 0449/2157] tests/countme: add support for 4/4 successful
 requests

Now that we have the modular repos enabled we need to handle this case.
---
 tests/kola/rpm-ostree-countme/test.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 4c26a8f7a5..e90d8274a8 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -56,7 +56,8 @@ for i in $(seq 1 5); do
 	# Depending on the stream, we expect different numbers of countme-enabled repos
 	if [[ "${output}" != "Successful requests: 1/1" ]] && \
 	   [[ "${output}" != "Successful requests: 2/2" ]] && \
-	   [[ "${output}" != "Successful requests: 3/3" ]]; then
+	   [[ "${output}" != "Successful requests: 3/3" ]] && \
+	   [[ "${output}" != "Successful requests: 4/4" ]]; then
 		echo "rpm-ostree-countme service ouput does not match expected sucess output (try: $i):"
 		echo "${output}"
 		sleep 10

From 20c6a46f07388c1bfe03ef6aed00f4a4001d0422 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 10 Sep 2021 13:06:04 -0400
Subject: [PATCH 0450/2157] Revert "ci: run kola basic scenarios"

coreos-ci-lib does this by default as of
https://github.com/coreos/coreos-ci-lib/pull/91.

This reverts commit 82859cbc47bdd0b13d61583431f82fb9456dfb49.
---
 .cci.jenkinsfile | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 420ca37951..911e1936f3 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -35,8 +35,7 @@ cosaPod {
     if (env.CHANGE_TARGET in mechanical_streams) {
         no_strict_build = true
     }
-    fcosBuild(skipInit: true, skipKola: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
-    fcosKola(basicScenarios: true)
+    fcosBuild(skipInit: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
 
     parallel metal: {
         shwrap("cd /srv/fcos && cosa buildextend-metal")

From 7a952a50baf46757b69ef43f4189370ef0f77863 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 10 Sep 2021 15:14:42 -0400
Subject: [PATCH 0451/2157] tests: enhance ext.config.rpm-ostree-countme test

Instead of hardcoding a list of the same string for different values of
N, just teach it to look for N/N for any value.
---
 tests/kola/rpm-ostree-countme/test.sh | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index e90d8274a8..90d3f70950 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -53,12 +53,17 @@ for i in $(seq 1 5); do
 
 	# Check rpm-ostree count me output
 	output="$(journal_after_cursor)"
-	# Depending on the stream, we expect different numbers of countme-enabled repos
-	if [[ "${output}" != "Successful requests: 1/1" ]] && \
-	   [[ "${output}" != "Successful requests: 2/2" ]] && \
-	   [[ "${output}" != "Successful requests: 3/3" ]] && \
-	   [[ "${output}" != "Successful requests: 4/4" ]]; then
-		echo "rpm-ostree-countme service ouput does not match expected sucess output (try: $i):"
+	trimmed=${output##Successful requests: }
+	if [[ ! $trimmed =~ ^[0-9]+/[0-9]+$ ]]; then
+		echo "rpm-ostree-countme service output does not match expected success output (try: $i):"
+		echo "${output}"
+		sleep 10
+		continue
+	fi
+	tries=${trimmed%%/*}
+	total=${trimmed##*/}
+	if [ "${tries}" != "${total}" ]; then
+		echo "rpm-ostree-countme service output shows failed requests (try: $i):"
 		echo "${output}"
 		sleep 10
 		continue

From 00dc7ae413e95905c4c39c9bc00e30970a2cbbed Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 10 Sep 2021 16:02:30 -0400
Subject: [PATCH 0452/2157] tests/misc-ro: drop `rpm-ostree ex module install`
 test

Thought this was cool to have here, but first it needs Internet, which
the rest of `misc-ro` doesn't so far which is nice. And second each
Fedora version has different stream versions so the matrix is slightly
trickier.

I think I'll put it in the rpm-ostree testsuite instead. Anyway if we
really go the modularity route for cri-o, ideally we'd have some k8s
testing going on in CI here on top of OKD or Typhoon, and then this will
implicitly be tested.
---
 tests/kola/misc-ro | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index bdfec9bbb7..05d91c2927 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,6 +198,3 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
-
-rpm-ostree ex module install cri-o:1.20/default --dry-run
-ok "basic modularity support"

From 9010346229befadbe8a64196e09b3d5d514f3670 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 11 Sep 2021 21:29:53 +0000
Subject: [PATCH 0453/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/443/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9adfc498c9..7351d9fa4a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1126,7 +1126,7 @@
       "evra": "1.31-3.fc34.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.2-1.fc34.aarch64"
+      "evra": "0.0.99.2-7.fc34.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.1.1-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-09T20:53:52Z",
+    "generated": "2021-09-11T20:54:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-08T21:34:22Z"
+        "generated": "2021-09-10T16:10:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-09T17:25:41Z"
+        "generated": "2021-09-10T15:52:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 90dba19d61..2049fc5ef4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1138,7 +1138,7 @@
       "evra": "1.31-3.fc34.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.2-1.fc34.x86_64"
+      "evra": "0.0.99.2-7.fc34.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.1.1-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-09T20:53:46Z",
+    "generated": "2021-09-11T20:54:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-08T21:37:25Z"
+        "generated": "2021-09-10T16:12:00Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-09T17:26:22Z"
+        "generated": "2021-09-10T15:53:14Z"
       }
     }
   }

From 5e5ae5f4e2508958d5a10da8b1926ca591011fb3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Sep 2021 21:47:15 +0000
Subject: [PATCH 0454/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/448/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7351d9fa4a..cfaf02a64d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1027,10 +1027,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.18-1.fc34.noarch"
+      "evra": "34.19-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.18-1.fc34.noarch"
+      "evra": "34.19-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-11T20:54:38Z",
+    "generated": "2021-09-13T20:54:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-10T16:10:28Z"
+        "generated": "2021-09-11T21:37:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-10T15:52:45Z"
+        "generated": "2021-09-13T14:28:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2049fc5ef4..ffe4ba411b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1039,10 +1039,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.18-1.fc34.noarch"
+      "evra": "34.19-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.18-1.fc34.noarch"
+      "evra": "34.19-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-11T20:54:24Z",
+    "generated": "2021-09-13T20:54:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-10T16:12:00Z"
+        "generated": "2021-09-11T21:38:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-10T15:53:14Z"
+        "generated": "2021-09-13T14:29:16Z"
       }
     }
   }

From 3aeb748db32cc090f6190d4a5acc3e46f569668b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Sep 2021 16:03:31 +0000
Subject: [PATCH 0455/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/450/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cfaf02a64d..30bda6663e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.14-200.fc34.aarch64"
+      "evra": "5.13.15-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.14-200.fc34.aarch64"
+      "evra": "5.13.15-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.14-200.fc34.aarch64"
+      "evra": "5.13.15-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-13T20:54:24Z",
+    "generated": "2021-09-14T15:01:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-11T21:37:55Z"
+        "generated": "2021-09-13T21:55:30Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-13T14:28:47Z"
+        "generated": "2021-09-14T14:49:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ffe4ba411b..432b53b60c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.14-200.fc34.x86_64"
+      "evra": "5.13.15-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.14-200.fc34.x86_64"
+      "evra": "5.13.15-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.14-200.fc34.x86_64"
+      "evra": "5.13.15-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-13T20:54:14Z",
+    "generated": "2021-09-14T15:02:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-11T21:38:59Z"
+        "generated": "2021-09-13T22:00:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-13T14:29:16Z"
+        "generated": "2021-09-14T14:50:23Z"
       }
     }
   }

From 456338800dd46a02b53de91f36294024f44a0c91 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 15 Sep 2021 10:07:41 -0400
Subject: [PATCH 0456/2157] denylist: remove ext.config.toolbox from denylist

The toolbox containers for f35 and f36 are now in the registry.

Resolves https://github.com/coreos/fedora-coreos-tracker/issues/926
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 612265c6f1..05d61c6722 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,8 +10,3 @@
   snooze: 2021-09-01
   platforms:
     - openstack
-- pattern: ext.config.toolbox
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/926
-  snooze: 2021-09-15
-  streams:
-    - rawhide

From 60354c286f9cf9fcd0708afaab66d82f3bf53a19 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 15 Sep 2021 10:09:57 -0400
Subject: [PATCH 0457/2157] denylist: remove snooze on podman.network-single
 for openstack

It started running again on 2021-09-01 and is passing so let's remove
it from the list.

Resolves https://github.com/coreos/fedora-coreos-tracker/issues/901
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 05d61c6722..cf3a3d8c88 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,8 +5,3 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: podman.network-single
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/901
-  snooze: 2021-09-01
-  platforms:
-    - openstack

From 83f5e120101b125ad399acfc87fbf9d2744108c3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Sep 2021 21:35:14 +0000
Subject: [PATCH 0458/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/454/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 2 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 30bda6663e..574af366b2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.13.1-1.fc34.aarch64"
+      "evra": "5.14-2.fc34.aarch64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.aarch64"
@@ -226,7 +226,7 @@
       "evra": "3.7-8.fc34.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.85-3.fc34.aarch64"
+      "evra": "2.86-1.fc34.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.aarch64"
@@ -262,7 +262,7 @@
       "evra": "0.185-2.fc34.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.13-1.fc34.aarch64"
+      "evra": "2:5.14-1.fc34.aarch64"
     },
     "expat": {
       "evra": "2.4.1-1.fc34.aarch64"
@@ -274,13 +274,13 @@
       "evra": "34-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-repos": {
       "evra": "34-2.noarch"
@@ -628,7 +628,7 @@
       "evra": "1.0.4-13.fc34.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-1.fc34.aarch64"
+      "evra": "2.13.0-2.fc34.aarch64"
     },
     "libmount": {
       "evra": "2.36.2-1.fc34.aarch64"
@@ -778,7 +778,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "libuv": {
-      "evra": "1:1.41.0-1.fc34.aarch64"
+      "evra": "1:1.42.0-2.fc34.aarch64"
     },
     "libvarlink-util": {
       "evra": "22-2.fc34.aarch64"
@@ -916,10 +916,10 @@
       "evra": "1.77-7.fc34.aarch64"
     },
     "ostree": {
-      "evra": "2021.3-1.fc34.aarch64"
+      "evra": "2021.4-2.fc34.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.3-1.fc34.aarch64"
+      "evra": "2021.4-2.fc34.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-3.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-14T15:01:51Z",
+    "generated": "2021-09-15T20:54:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-13T21:55:30Z"
+        "generated": "2021-09-14T16:10:51Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-14T14:49:53Z"
+        "generated": "2021-09-15T18:06:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 432b53b60c..4e209406f7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.13.1-1.fc34.x86_64"
+      "evra": "5.14-2.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -226,7 +226,7 @@
       "evra": "3.7-8.fc34.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.85-3.fc34.x86_64"
+      "evra": "2.86-1.fc34.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.x86_64"
@@ -262,7 +262,7 @@
       "evra": "0.185-2.fc34.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.13-1.fc34.x86_64"
+      "evra": "2:5.14-1.fc34.x86_64"
     },
     "expat": {
       "evra": "2.4.1-1.fc34.x86_64"
@@ -274,13 +274,13 @@
       "evra": "34-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-36.noarch"
+      "evra": "34-37.noarch"
     },
     "fedora-repos": {
       "evra": "34-2.noarch"
@@ -634,7 +634,7 @@
       "evra": "1.0.4-13.fc34.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-1.fc34.x86_64"
+      "evra": "2.13.0-2.fc34.x86_64"
     },
     "libmount": {
       "evra": "2.36.2-1.fc34.x86_64"
@@ -787,7 +787,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libuv": {
-      "evra": "1:1.41.0-1.fc34.x86_64"
+      "evra": "1:1.42.0-2.fc34.x86_64"
     },
     "libvarlink-util": {
       "evra": "22-2.fc34.x86_64"
@@ -928,10 +928,10 @@
       "evra": "1.77-7.fc34.x86_64"
     },
     "ostree": {
-      "evra": "2021.3-1.fc34.x86_64"
+      "evra": "2021.4-2.fc34.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.3-1.fc34.x86_64"
+      "evra": "2021.4-2.fc34.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-3.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-14T15:02:43Z",
+    "generated": "2021-09-15T20:54:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-13T22:00:15Z"
+        "generated": "2021-09-14T16:12:39Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-14T14:50:23Z"
+        "generated": "2021-09-15T18:07:28Z"
       }
     }
   }

From 196c0f02050e513cf118bd05313702f527ef0384 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 16 Sep 2021 08:21:11 -0400
Subject: [PATCH 0459/2157] ci/buildroot: Blow out quay.io cache

Again.
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 135644f473..8d086c1330 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -7,4 +7,4 @@
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:34
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210706
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210916

From 38e5f0c7165d42fded8aabace27aa2a35856ac5a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 16 Sep 2021 00:33:30 -0400
Subject: [PATCH 0460/2157] live/grub.cfg: update incorrect comment

This file is shipped in the ISO itself, and efiboot.img contains a stub
config that points to it.
---
 live/EFI/fedora/grub.cfg | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/live/EFI/fedora/grub.cfg b/live/EFI/fedora/grub.cfg
index c833dc2171..6f881fef62 100644
--- a/live/EFI/fedora/grub.cfg
+++ b/live/EFI/fedora/grub.cfg
@@ -4,9 +4,11 @@
 #
 # One diff to note is we use linux and initrd instead of linuxefi and
 # initrdefi. We do this because it works and allows us to use this same
-# file on other architecutres. https://github.com/coreos/fedora-coreos-config/issues/63
+# file on other architectures. https://github.com/coreos/fedora-coreos-config/issues/63
 #
-# This file gets embedded into the efiboot.img on our Fedora CoreOS ISO.
+# This file is loaded directly when booting via El Torito, and indirectly
+# from a stub config in efiboot.img when booting via the hybrid ESP.
+
 set default="1"
 
 function load_video {

From b9229f23b559cab5ae64520f1a8c702bb05abc32 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 17 Sep 2021 01:52:28 +0000
Subject: [PATCH 0461/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/458/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 574af366b2..66101d1a00 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -322,7 +322,7 @@
       "evra": "2.9.9-11.fc34.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-1.fc34.aarch64"
+      "evra": "1.7.1-2.fc34.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.15-200.fc34.aarch64"
+      "evra": "5.13.16-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.15-200.fc34.aarch64"
+      "evra": "5.13.16-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.15-200.fc34.aarch64"
+      "evra": "5.13.16-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-15T20:54:20Z",
+    "generated": "2021-09-17T01:13:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-14T16:10:51Z"
+        "generated": "2021-09-15T21:42:30Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-15T18:06:59Z"
+        "generated": "2021-09-16T18:52:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4e209406f7..67f38cffca 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -322,7 +322,7 @@
       "evra": "2.9.9-11.fc34.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-1.fc34.x86_64"
+      "evra": "1.7.1-2.fc34.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.2-1.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.15-200.fc34.x86_64"
+      "evra": "5.13.16-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.15-200.fc34.x86_64"
+      "evra": "5.13.16-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.15-200.fc34.x86_64"
+      "evra": "5.13.16-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-15T20:54:05Z",
+    "generated": "2021-09-17T01:13:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-14T16:12:39Z"
+        "generated": "2021-09-15T21:49:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-15T18:07:28Z"
+        "generated": "2021-09-16T18:52:53Z"
       }
     }
   }

From c095fba69cd3efa683a6050097daaf2c165b763c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 19 Sep 2021 20:54:57 +0000
Subject: [PATCH 0462/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/464/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 66101d1a00..a21523b231 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-17T01:13:57Z",
+    "generated": "2021-09-19T20:54:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-15T21:42:30Z"
+        "generated": "2021-09-18T21:35:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-16T18:52:23Z"
+        "generated": "2021-09-19T04:39:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 67f38cffca..bd478bfba4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-17T01:13:49Z",
+    "generated": "2021-09-19T20:54:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-15T21:49:13Z"
+        "generated": "2021-09-18T21:37:41Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-16T18:52:53Z"
+        "generated": "2021-09-19T04:39:30Z"
       }
     }
   }

From f743a1d7aad2b43dc3ecf545179955416c7e552b Mon Sep 17 00:00:00 2001
From: Julian Wiedmann <jwi@linux.ibm.com>
Date: Mon, 20 Sep 2021 13:38:05 +0300
Subject: [PATCH 0463/2157] tests/kola/var-mount: add a TPM-less variant for
 s390x

The var-mount test currently only fails on s390x because it uses LUKS
and requires a TPM. Thus add a simple test without TPM, and restrict
the LUKS version to non-s390x.

Also see 51ee72c2b0f2 ("tests: Enable TPM test for all arches except
s390x")

Signed-off-by: Julian Wiedmann <jwi@linux.ibm.com>
---
 tests/kola/var-mount/{ => luks}/config.fcc |  0
 tests/kola/var-mount/{ => luks}/test.sh    |  2 +-
 tests/kola/var-mount/simple/config.fcc     | 20 ++++++++++
 tests/kola/var-mount/simple/test.sh        | 44 ++++++++++++++++++++++
 4 files changed, 65 insertions(+), 1 deletion(-)
 rename tests/kola/var-mount/{ => luks}/config.fcc (100%)
 rename tests/kola/var-mount/{ => luks}/test.sh (94%)
 create mode 100644 tests/kola/var-mount/simple/config.fcc
 create mode 100755 tests/kola/var-mount/simple/test.sh

diff --git a/tests/kola/var-mount/config.fcc b/tests/kola/var-mount/luks/config.fcc
similarity index 100%
rename from tests/kola/var-mount/config.fcc
rename to tests/kola/var-mount/luks/config.fcc
diff --git a/tests/kola/var-mount/test.sh b/tests/kola/var-mount/luks/test.sh
similarity index 94%
rename from tests/kola/var-mount/test.sh
rename to tests/kola/var-mount/luks/test.sh
index ba6565e80b..172fd62122 100755
--- a/tests/kola/var-mount/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -2,7 +2,7 @@
 set -xeuo pipefail
 
 # restrict to qemu for now because the primary disk path is platform-dependent
-# kola: {"platforms": "qemu"}
+# kola: {"platforms": "qemu", "architectures": "!s390x"}
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/var-mount/simple/config.fcc b/tests/kola/var-mount/simple/config.fcc
new file mode 100644
index 0000000000..b32fd3611d
--- /dev/null
+++ b/tests/kola/var-mount/simple/config.fcc
@@ -0,0 +1,20 @@
+variant: fcos
+version: 1.3.0
+storage:
+  disks:
+    - device: /dev/vda
+      partitions:
+        - label: var
+          size_mib: 1000
+          start_mib: 5000
+        - label: varlog
+      wipe_table: false
+  filesystems:
+    - device: /dev/disk/by-partlabel/var
+      format: xfs
+      path: /var
+      with_mount_unit: true
+    - device: /dev/disk/by-partlabel/varlog
+      format: ext4
+      path: /var/log
+      with_mount_unit: true
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
new file mode 100755
index 0000000000..8bfcae589f
--- /dev/null
+++ b/tests/kola/var-mount/simple/test.sh
@@ -0,0 +1,44 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# restrict to qemu for now because the primary disk path is platform-dependent
+# kola: {"platforms": "qemu"}
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# /var
+
+src=$(findmnt -nvr /var -o SOURCE)
+[[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/var) ]]
+
+fstype=$(findmnt -nvr /var -o FSTYPE)
+[[ $fstype == xfs ]]
+
+# /var/log
+
+src=$(findmnt -nvr /var/log -o SOURCE)
+[[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/varlog) ]]
+
+fstype=$(findmnt -nvr /var/log -o FSTYPE)
+[[ $fstype == ext4 ]]
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      ok "mounted on first boot"
+
+      # reboot once to sanity-check we can mount on second boot
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      ok "mounted on reboot"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From e499c8de3c2603d3b7ad8c5f48943251aac53faf Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Sep 2021 16:11:24 +0000
Subject: [PATCH 0464/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/472/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a21523b231..dde761791b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1012,7 +1012,7 @@
       "evra": "3.2.3-5.fc34.aarch64"
     },
     "runc": {
-      "evra": "2:1.0.1-1.fc34.aarch64"
+      "evra": "2:1.0.2-2.fc34.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.14.7-0.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-19T20:54:30Z",
+    "generated": "2021-09-21T15:19:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-18T21:35:36Z"
+        "generated": "2021-09-20T18:29:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-19T04:39:00Z"
+        "generated": "2021-09-20T13:37:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bd478bfba4..966175350f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1024,7 +1024,7 @@
       "evra": "3.2.3-5.fc34.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.1-1.fc34.x86_64"
+      "evra": "2:1.0.2-2.fc34.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.14.7-0.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-19T20:54:14Z",
+    "generated": "2021-09-21T15:18:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-18T21:37:41Z"
+        "generated": "2021-09-20T18:32:47Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-19T04:39:30Z"
+        "generated": "2021-09-20T13:37:34Z"
       }
     }
   }

From 5c6bd4c75b9f34a9f2d5719e0e2e4232ff44d1cf Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 Sep 2021 21:34:42 -0400
Subject: [PATCH 0465/2157] tests: use F34 container in podman.rootless-systemd
 test

Fedora Linux 33 is old. Let's use Fedora Linux 34.
---
 tests/kola/podman/rootless-systemd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index e41df869c0..d64784dc1c 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -25,7 +25,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:33
+FROM registry.fedoraproject.org/fedora:34
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \

From 9eab16244f2493c5ae21535315621e3104c550fd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Sep 2021 21:06:33 +0000
Subject: [PATCH 0466/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/475/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index dde761791b..7d4d81bea6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.14-2.fc34.aarch64"
+      "evra": "5.14.1-1.fc34.aarch64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.aarch64"
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.167.0-1.fc34.noarch"
+      "evra": "2:2.168.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.aarch64"
@@ -181,7 +181,7 @@
       "evra": "1:2.3.3op2-7.fc34.aarch64"
     },
     "curl": {
-      "evra": "7.76.1-7.fc34.aarch64"
+      "evra": "7.76.1-12.fc34.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.aarch64"
@@ -535,7 +535,7 @@
       "evra": "1.45.6-5.fc34.aarch64"
     },
     "libcurl": {
-      "evra": "7.76.1-7.fc34.aarch64"
+      "evra": "7.76.1-12.fc34.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.aarch64"
@@ -790,7 +790,7 @@
       "evra": "2:4.14.7-0.fc34.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.25-1.fc34.aarch64"
+      "evra": "4.4.26-2.fc34.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.aarch64"
@@ -907,10 +907,10 @@
       "evra": "8.6p1-3.fc34.aarch64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-1.fc34.aarch64"
+      "evra": "1:1.1.1l-2.fc34.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-1.fc34.aarch64"
+      "evra": "1:1.1.1l-2.fc34.aarch64"
     },
     "os-prober": {
       "evra": "1.77-7.fc34.aarch64"
@@ -1027,10 +1027,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.19-1.fc34.noarch"
+      "evra": "34.20-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.19-1.fc34.noarch"
+      "evra": "34.20-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-21T15:19:01Z",
+    "generated": "2021-09-22T19:58:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-20T18:29:26Z"
+        "generated": "2021-09-21T16:17:35Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-20T13:37:03Z"
+        "generated": "2021-09-22T16:18:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 966175350f..4484f9676d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.14-2.fc34.x86_64"
+      "evra": "5.14.1-1.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.167.0-1.fc34.noarch"
+      "evra": "2:2.168.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.x86_64"
@@ -181,7 +181,7 @@
       "evra": "1:2.3.3op2-7.fc34.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-7.fc34.x86_64"
+      "evra": "7.76.1-12.fc34.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-8.fc34.x86_64"
@@ -541,7 +541,7 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-7.fc34.x86_64"
+      "evra": "7.76.1-12.fc34.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-21.fc34.x86_64"
@@ -799,7 +799,7 @@
       "evra": "2:4.14.7-0.fc34.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.25-1.fc34.x86_64"
+      "evra": "4.4.26-2.fc34.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-4.fc34.x86_64"
@@ -919,10 +919,10 @@
       "evra": "8.6p1-3.fc34.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-1.fc34.x86_64"
+      "evra": "1:1.1.1l-2.fc34.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-1.fc34.x86_64"
+      "evra": "1:1.1.1l-2.fc34.x86_64"
     },
     "os-prober": {
       "evra": "1.77-7.fc34.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.19-1.fc34.noarch"
+      "evra": "34.20-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.19-1.fc34.noarch"
+      "evra": "34.20-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-21T15:18:58Z",
+    "generated": "2021-09-22T19:58:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-20T18:32:47Z"
+        "generated": "2021-09-21T16:22:30Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-20T13:37:34Z"
+        "generated": "2021-09-22T16:18:49Z"
       }
     }
   }

From 7d524f1a0c2b5ce8345ddd1e9ab10fcc0e7e0664 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 22 Sep 2021 13:31:36 +0800
Subject: [PATCH 0467/2157] Add tests/kola/ignition/remote/remote.ign The
 remote ignition file will be used to verify BZ1980679, including inject
 kernel arguments and write something to /etc/testfile

---
 tests/kola/ignition/remote/remote.ign | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 tests/kola/ignition/remote/remote.ign

diff --git a/tests/kola/ignition/remote/remote.ign b/tests/kola/ignition/remote/remote.ign
new file mode 100644
index 0000000000..1323ca2b40
--- /dev/null
+++ b/tests/kola/ignition/remote/remote.ign
@@ -0,0 +1,21 @@
+{
+  "ignition": {
+    "version": "3.3.0"
+  },
+  "kernelArguments": {
+    "shouldExist": [
+      "foobar"
+    ]
+  },
+  "storage": {
+    "files": [
+      {
+        "path": "/etc/testfile",
+        "contents": {
+          "source": "data:,test"
+        },
+        "mode": 420
+      }
+    ]
+  }
+}

From c7f95e43f1786ebf7a1cc904551af3ed54bbd48c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 Sep 2021 21:33:49 +0000
Subject: [PATCH 0468/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/478/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7d4d81bea6..1b40efde45 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.16-200.fc34.aarch64"
+      "evra": "5.13.19-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.16-200.fc34.aarch64"
+      "evra": "5.13.19-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.16-200.fc34.aarch64"
+      "evra": "5.13.19-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-22T19:58:16Z",
+    "generated": "2021-09-23T20:53:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-21T16:17:35Z"
+        "generated": "2021-09-22T22:19:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-22T16:18:21Z"
+        "generated": "2021-09-23T19:14:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4484f9676d..e025090b9f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.16-200.fc34.x86_64"
+      "evra": "5.13.19-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.16-200.fc34.x86_64"
+      "evra": "5.13.19-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.16-200.fc34.x86_64"
+      "evra": "5.13.19-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-22T19:58:30Z",
+    "generated": "2021-09-23T20:54:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-21T16:22:30Z"
+        "generated": "2021-09-22T22:21:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-22T16:18:49Z"
+        "generated": "2021-09-23T19:14:52Z"
       }
     }
   }

From 76a10fab07879cd0754ade6709197b273faa9797 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 24 Sep 2021 10:13:05 +0800
Subject: [PATCH 0469/2157] Add test script for verify BZ1980679 config.bu to
 include remote.ign verify kernel arg and exists /etc/testfile

---
 tests/kola/ignition/remote/config.bu |  8 ++++++++
 tests/kola/ignition/remote/test.sh   | 29 ++++++++++++++++++++++++++++
 2 files changed, 37 insertions(+)
 create mode 100644 tests/kola/ignition/remote/config.bu
 create mode 100755 tests/kola/ignition/remote/test.sh

diff --git a/tests/kola/ignition/remote/config.bu b/tests/kola/ignition/remote/config.bu
new file mode 100644
index 0000000000..9750fddd77
--- /dev/null
+++ b/tests/kola/ignition/remote/config.bu
@@ -0,0 +1,8 @@
+variant: fcos
+version: 1.4.0
+ignition:
+  config:
+    merge:
+      - source: https://raw.githubusercontent.com/coreos/fedora-coreos-config/testing-devel/tests/kola/ignition/remote/remote.ign
+        verification:
+          hash: sha512-1c840823419a2eae431356b58d0c498f4ec84ef3d2b9a4fa42f75749a89fe1f413a848d9082d5dc6c243324b57fa7a76b4ef6dde5d023f9bba549b7755836170
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
new file mode 100755
index 0000000000..dc01bc0b42
--- /dev/null
+++ b/tests/kola/ignition/remote/test.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# To test https://bugzilla.redhat.com/show_bug.cgi?id=1980679
+# remote.ign on github: inject kernelArguments and write something to /etc/testfile
+# config.ign to include remote kargsfile.ign
+
+# kola: { "tags": "needs-internet" }
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! grep -q foobar /proc/cmdline; then
+    fatal "missing foobar in kernel cmdline"
+else
+    ok "find foobar in kernel cmdline"
+fi
+if ! test -e /etc/testfile; then
+    fatal "not found /etc/testfile"
+else
+    ok "find expected file /etc/testfile"
+fi
+ok "Ignition remote config test"

From bdb1f57b5b20f3af23cd67fe3f7972f1e7838958 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 24 Sep 2021 14:06:17 +0000
Subject: [PATCH 0470/2157] overlay/dracut/multipath: remove problematic stop
 command

This is a temporary workaround to remove a problematic stop command
from `multipathd.service`, until the already-merged proper fix gets
released in dracut.
---
 .../35coreos-multipath/90-multipathd-remove-execstop.conf    | 3 +++
 .../lib/dracut/modules.d/35coreos-multipath/module-setup.sh  | 5 +++++
 2 files changed, 8 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf
new file mode 100644
index 0000000000..ec9e14e7ca
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf
@@ -0,0 +1,3 @@
+# Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+[Service]
+ExecStop=
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
index 4ab4bc4006..bcd530b678 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
@@ -12,6 +12,11 @@ install_ignition_unit() {
 }
 
 install() {
+    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+    mkdir -p "$systemdsystemunitdir/multipathd.service.d"
+    inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
+        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
+
     inst_script "$moddir/coreos-propagate-multipath-conf.sh" \
         "/usr/sbin/coreos-propagate-multipath-conf"
 

From de62fb029748440ff04476aa40882f9e4b98d271 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 24 Sep 2021 14:43:19 +0000
Subject: [PATCH 0471/2157] kola: check for fixed dracut multipath XOR quickfix
 in overlay

---
 tests/kola/misc-ro | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 05d91c2927..9002bc3a86 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,3 +198,16 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
+
+# We need either a fixed dracut or temporary workaround, no need for both.
+# See https://github.com/coreos/fedora-coreos-tracker/issues/803.
+has_fixed_dracut=$(grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service; echo $?)
+has_overlay_quickfix=$(test ! -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf; echo $?)
+if test "${has_fixed_dracut}" -eq "${has_overlay_quickfix}"; then
+    if test "${has_fixed_dracut}" -eq 1; then
+        fatal "Found fixed dracut multipath module but quickfix is present too"
+    else
+        fatal "Found buggy dracut multipath module but quickfix is missing too"
+    fi
+fi
+ok "either dracut multipath module fixed or quickfix present"

From f4a0a484adf843ef64d05a6c493cc7cb4aa85c8b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 24 Sep 2021 21:53:30 +0000
Subject: [PATCH 0472/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/481/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1b40efde45..9ae075cfff 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -61,7 +61,7 @@
       "evra": "32:9.16.20-3.fc34.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.5-3.fc34.aarch64"
+      "evra": "0.2.6-1.fc34.aarch64"
     },
     "bsdtar": {
       "evra": "3.5.2-2.fc34.aarch64"
@@ -85,7 +85,7 @@
       "evra": "2021.2.50-1.0.fc34.noarch"
     },
     "catatonit": {
-      "evra": "0.1.5-4.fc34.aarch64"
+      "evra": "0.1.6-1.fc34.aarch64"
     },
     "chrony": {
       "evra": "4.1-1.fc34.aarch64"
@@ -646,7 +646,7 @@
       "evra": "1.0.1-19.fc34.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-0.fc34.aarch64"
+      "evra": "1:2.5.4-2.rc3.fc34.aarch64"
     },
     "libnftnl": {
       "evra": "1.1.9-2.fc34.aarch64"
@@ -682,7 +682,7 @@
       "evra": "0.1.5-47.fc34.aarch64"
     },
     "librepo": {
-      "evra": "1.14.1-1.fc34.aarch64"
+      "evra": "1.14.2-1.fc34.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.15.2-2.fc34.noarch"
@@ -874,7 +874,7 @@
       "evra": "0.52.21-9.fc34.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-0.fc34.aarch64"
+      "evra": "1:2.5.4-2.rc3.fc34.aarch64"
     },
     "nftables": {
       "evra": "1:0.9.8-3.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-23T20:53:57Z",
+    "generated": "2021-09-24T20:54:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-22T22:19:13Z"
+        "generated": "2021-09-24T18:50:21Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-23T19:14:22Z"
+        "generated": "2021-09-24T20:25:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e025090b9f..c473f79ba4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -61,7 +61,7 @@
       "evra": "32:9.16.20-3.fc34.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.5-3.fc34.x86_64"
+      "evra": "0.2.6-1.fc34.x86_64"
     },
     "bsdtar": {
       "evra": "3.5.2-2.fc34.x86_64"
@@ -85,7 +85,7 @@
       "evra": "2021.2.50-1.0.fc34.noarch"
     },
     "catatonit": {
-      "evra": "0.1.5-4.fc34.x86_64"
+      "evra": "0.1.6-1.fc34.x86_64"
     },
     "chrony": {
       "evra": "4.1-1.fc34.x86_64"
@@ -652,7 +652,7 @@
       "evra": "1.0.1-19.fc34.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-0.fc34.x86_64"
+      "evra": "1:2.5.4-2.rc3.fc34.x86_64"
     },
     "libnftnl": {
       "evra": "1.1.9-2.fc34.x86_64"
@@ -688,7 +688,7 @@
       "evra": "0.1.5-47.fc34.x86_64"
     },
     "librepo": {
-      "evra": "1.14.1-1.fc34.x86_64"
+      "evra": "1.14.2-1.fc34.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.15.2-2.fc34.noarch"
@@ -886,7 +886,7 @@
       "evra": "0.52.21-9.fc34.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-0.fc34.x86_64"
+      "evra": "1:2.5.4-2.rc3.fc34.x86_64"
     },
     "nftables": {
       "evra": "1:0.9.8-3.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-23T20:54:13Z",
+    "generated": "2021-09-24T20:54:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-22T22:21:56Z"
+        "generated": "2021-09-24T18:54:17Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-23T19:14:52Z"
+        "generated": "2021-09-24T20:26:31Z"
       }
     }
   }

From 7b09ca9ecb412352e12858148152dbb7bdadc500 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Sep 2021 21:07:06 +0000
Subject: [PATCH 0473/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/485/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 4 ++--
 manifest-lock.x86_64.json  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9ae075cfff..01d18cd48b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1178,13 +1178,13 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-24T20:54:37Z",
+    "generated": "2021-09-26T20:55:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-24T18:50:21Z"
+        "generated": "2021-09-24T22:17:24Z"
       },
       "fedora-updates": {
         "generated": "2021-09-24T20:25:30Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c473f79ba4..e41ddfcd19 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1190,13 +1190,13 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-24T20:54:56Z",
+    "generated": "2021-09-26T20:55:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-24T18:54:17Z"
+        "generated": "2021-09-24T22:18:16Z"
       },
       "fedora-updates": {
         "generated": "2021-09-24T20:26:31Z"

From 0cb7934f9cf57c0368c6a36a483310146972b2a5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 27 Sep 2021 13:10:49 -0400
Subject: [PATCH 0474/2157] tests: add ext.config.firewall.iptables-legacy test

Let's confirm for now that we're using iptables-legacy by default
until we switch to defaulting to iptables-nft.

See https://github.com/coreos/fedora-coreos-tracker/issues/676
---
 tests/kola/firewall/iptables-legacy | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100755 tests/kola/firewall/iptables-legacy

diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
new file mode 100755
index 0000000000..c21373026e
--- /dev/null
+++ b/tests/kola/firewall/iptables-legacy
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure we're still on legacy iptables for now
+# https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
+if ! iptables --version | grep legacy; then
+    iptables --version # output for logs
+    fatal "iptables version is not legacy"
+fi
+ok "iptables still in legacy mode"

From 02302b97c9e5aadc38a1186fcf7ac4fada35c705 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 20 Sep 2021 09:34:42 +0200
Subject: [PATCH 0475/2157] Revert "overaly/preset: Enable Count Me by default"

This is now enabled via the `90-default.preset` from fedora-release
(included since commit 83f5e120101b125ad399acfc87fbf9d2744108c3).

See:
  - https://src.fedoraproject.org/rpms/fedora-release/pull-request/203
  - https://bugzilla.redhat.com/show_bug.cgi?id=1995495

This reverts commit 12ba5c2922d59fb2451ff3fbbb033913538b9460.
---
 overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index c007234c9d..ad40cb9d2c 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -8,6 +8,3 @@ enable coreos-check-cgroups.service
 # Clean up injected Ignition config in /boot on upgrade
 # https://github.com/coreos/fedora-coreos-tracker/issues/889
 enable coreos-cleanup-ignition-config.service
-# Temporary fast track for rpm-ostree count me enablement
-# https://github.com/coreos/fedora-coreos-tracker/issues/717
-enable rpm-ostree-countme.timer

From fd1e43fb1ca8bbdb216042960bc3773bf2f85842 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 27 Sep 2021 15:55:44 -0400
Subject: [PATCH 0476/2157] denylist: snooze podman.base test on aws/gcp

See https://github.com/coreos/fedora-coreos-tracker/issues/966

There is a fix upstream but we need to wait for it to propagate
down into FCOS.
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index cf3a3d8c88..9bccb8bea5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,3 +5,9 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
+- pattern: podman.base
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/966
+  snooze: 2021-10-20
+  platforms:
+    - aws
+    - gcp

From 89fd06cf8ec2cfb312662c475edc0a8259925285 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 28 Sep 2021 02:27:55 +0000
Subject: [PATCH 0477/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/489/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 01d18cd48b..7c2893a1e3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.20-3.fc34.aarch64"
+      "evra": "32:9.16.21-1.fc34.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.20-3.fc34.noarch"
+      "evra": "32:9.16.21-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.20-3.fc34.aarch64"
+      "evra": "32:9.16.21-1.fc34.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc34.aarch64"
@@ -133,7 +133,7 @@
       "evra": "1.5.5-1.fc34.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-1.fc34.aarch64"
+      "evra": "1.0.1-1.fc34.aarch64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-26T20:55:05Z",
+    "generated": "2021-09-28T01:49:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-24T22:17:24Z"
+        "generated": "2021-09-27T18:08:44Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-24T20:25:30Z"
+        "generated": "2021-09-27T01:00:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e41ddfcd19..501eed7fc2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-2.fc34.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.20-3.fc34.x86_64"
+      "evra": "32:9.16.21-1.fc34.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.20-3.fc34.noarch"
+      "evra": "32:9.16.21-1.fc34.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.20-3.fc34.x86_64"
+      "evra": "32:9.16.21-1.fc34.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc34.x86_64"
@@ -133,7 +133,7 @@
       "evra": "1.5.5-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.0-1.fc34.x86_64"
+      "evra": "1.0.1-1.fc34.x86_64"
     },
     "containers-common": {
       "evra": "4:1-21.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-26T20:55:43Z",
+    "generated": "2021-09-28T01:49:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-24T22:18:16Z"
+        "generated": "2021-09-27T18:13:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-24T20:26:31Z"
+        "generated": "2021-09-27T01:00:51Z"
       }
     }
   }

From 94df078060504a99caa7e95cb37ee9348c92a40e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 27 Sep 2021 22:12:44 -0400
Subject: [PATCH 0478/2157] denylist: switch podman.base snooze to gce

`gce` is the proper platform name, though we should consider
renaming it.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9bccb8bea5..1d59ef44e4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,4 +10,4 @@
   snooze: 2021-10-20
   platforms:
     - aws
-    - gcp
+    - gce

From 7ab896f650e65c1eb10f045ae161a6117494426f Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 28 Sep 2021 10:09:24 +0000
Subject: [PATCH 0479/2157] kola/misc-ro: rework test conditions

This rework test logic following review feedback, in order to be
easier to read.
---
 tests/kola/misc-ro | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 9002bc3a86..c731a16038 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -201,10 +201,12 @@ ok "All initrd scripts are executable"
 
 # We need either a fixed dracut or temporary workaround, no need for both.
 # See https://github.com/coreos/fedora-coreos-tracker/issues/803.
-has_fixed_dracut=$(grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service; echo $?)
-has_overlay_quickfix=$(test ! -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf; echo $?)
-if test "${has_fixed_dracut}" -eq "${has_overlay_quickfix}"; then
-    if test "${has_fixed_dracut}" -eq 1; then
+has_fixed_dracut_multipathd_service=0
+grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service || has_fixed_dracut_multipathd_service=1
+has_overlay_multipathd_service_quickfix=1
+test -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
+if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_service_quickfix}"; then
+    if test "${has_fixed_dracut_multipathd_service}" -eq 1; then
         fatal "Found fixed dracut multipath module but quickfix is present too"
     else
         fatal "Found buggy dracut multipath module but quickfix is missing too"

From 2063c864e2e53d966e1503111cc4da8941a9da4b Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 28 Sep 2021 10:11:27 +0000
Subject: [PATCH 0480/2157] multipathd.socket: add start conditions via dropin

This adds a dropin for 'multipathd.socket' adding the same start
conditions that are present on the service unit. It is a temporary
workaround that can be removed once the packaged one is fixed.

Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2008098
---
 .../system/multipathd.socket.d/50-start-conditions.conf     | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf

diff --git a/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf b/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf
new file mode 100644
index 0000000000..8b7f585550
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf
@@ -0,0 +1,6 @@
+# Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
+[Unit]
+ConditionKernelCommandLine=!multipath=off
+ConditionKernelCommandLine=!nompath
+ConditionPathExists=/etc/multipath.conf
+ConditionVirtualization=!container

From 28d5409999ff20eac4cd42832f12f038e029b94d Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 28 Sep 2021 10:11:39 +0000
Subject: [PATCH 0481/2157] kola/misc-ro: test for fixed multipathd.socket XOR
 quickfix

---
 tests/kola/misc-ro | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index c731a16038..9dfa024ce1 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -213,3 +213,18 @@ if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_s
     fi
 fi
 ok "either dracut multipath module fixed or quickfix present"
+
+# We need either a fixed multipathd.socket or temporary workaround, no need for both.
+# See https://bugzilla.redhat.com/show_bug.cgi?id=2008098.
+has_fixed_multipathd_socket=1
+grep -q 'ConditionPathExists=/etc/multipath.conf' /usr/lib/systemd/system/multipathd.socket || has_fixed_multipathd_socket=0
+has_overlay_multipathd_socket_quickfix=1
+test -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf || has_overlay_multipathd_socket_quickfix=0
+if test "${has_fixed_multipathd_socket}" -eq "${has_overlay_multipathd_socket_quickfix}"; then
+    if test "${has_fixed_multipathd_socket}" -eq 1; then
+        fatal "Found fixed multipathd.socket but quickfix is present too"
+    else
+        fatal "Found buggy multipathd.socket but quickfix is missing too"
+    fi
+fi
+ok "either multipathd.socket fixed or quickfix present"

From 904141f8f599971aca306a98070f46152530c6b6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 29 Sep 2021 21:29:17 +0000
Subject: [PATCH 0482/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/493/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7c2893a1e3..9f8064f350 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -589,7 +589,7 @@
       "evra": "36.0-1.fc34.aarch64"
     },
     "libicu": {
-      "evra": "67.1-6.fc34.aarch64"
+      "evra": "67.1-7.fc34.aarch64"
     },
     "libidn2": {
       "evra": "2.3.2-1.fc34.aarch64"
@@ -721,10 +721,10 @@
       "evra": "1.45.6-5.fc34.aarch64"
     },
     "libssh": {
-      "evra": "0.9.5-2.fc34.aarch64"
+      "evra": "0.9.6-1.fc34.aarch64"
     },
     "libssh-config": {
-      "evra": "0.9.5-2.fc34.noarch"
+      "evra": "0.9.6-1.fc34.noarch"
     },
     "libsss_certmap": {
       "evra": "2.5.2-2.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-28T01:49:24Z",
+    "generated": "2021-09-29T20:53:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-27T18:08:44Z"
+        "generated": "2021-09-28T22:40:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-27T01:00:19Z"
+        "generated": "2021-09-29T00:55:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 501eed7fc2..1af239fd72 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -595,7 +595,7 @@
       "evra": "36.0-1.fc34.x86_64"
     },
     "libicu": {
-      "evra": "67.1-6.fc34.x86_64"
+      "evra": "67.1-7.fc34.x86_64"
     },
     "libidn2": {
       "evra": "2.3.2-1.fc34.x86_64"
@@ -730,10 +730,10 @@
       "evra": "1.45.6-5.fc34.x86_64"
     },
     "libssh": {
-      "evra": "0.9.5-2.fc34.x86_64"
+      "evra": "0.9.6-1.fc34.x86_64"
     },
     "libssh-config": {
-      "evra": "0.9.5-2.fc34.noarch"
+      "evra": "0.9.6-1.fc34.noarch"
     },
     "libsss_certmap": {
       "evra": "2.5.2-2.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-28T01:49:16Z",
+    "generated": "2021-09-29T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-27T18:13:12Z"
+        "generated": "2021-09-28T22:45:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-27T01:00:51Z"
+        "generated": "2021-09-29T00:56:02Z"
       }
     }
   }

From 384d8d11a6968ca21ebc23d2d216ce1d1ebbb53a Mon Sep 17 00:00:00 2001
From: gursewak <gurssing@redhat.com>
Date: Wed, 29 Sep 2021 12:56:32 -0700
Subject: [PATCH 0483/2157] tests/kola: Rename config files from .fcc to .bu

---
 tests/kola/authentication/passwd/{config.fcc => config.bu}        | 0
 .../systemd-enable-instance-unit/{config.fcc => config.bu}        | 0
 tests/kola/ignition/systemd-unmasking/{config.fcc => config.bu}   | 0
 tests/kola/misc-ign-ro/{config.fcc => config.bu}                  | 0
 tests/kola/swap/zram-generator/{config.fcc => config.bu}          | 0
 tests/kola/var-mount/luks/{config.fcc => config.bu}               | 0
 tests/kola/var-mount/simple/{config.fcc => config.bu}             | 0
 7 files changed, 0 insertions(+), 0 deletions(-)
 rename tests/kola/authentication/passwd/{config.fcc => config.bu} (100%)
 rename tests/kola/ignition/systemd-enable-instance-unit/{config.fcc => config.bu} (100%)
 rename tests/kola/ignition/systemd-unmasking/{config.fcc => config.bu} (100%)
 rename tests/kola/misc-ign-ro/{config.fcc => config.bu} (100%)
 rename tests/kola/swap/zram-generator/{config.fcc => config.bu} (100%)
 rename tests/kola/var-mount/luks/{config.fcc => config.bu} (100%)
 rename tests/kola/var-mount/simple/{config.fcc => config.bu} (100%)

diff --git a/tests/kola/authentication/passwd/config.fcc b/tests/kola/authentication/passwd/config.bu
similarity index 100%
rename from tests/kola/authentication/passwd/config.fcc
rename to tests/kola/authentication/passwd/config.bu
diff --git a/tests/kola/ignition/systemd-enable-instance-unit/config.fcc b/tests/kola/ignition/systemd-enable-instance-unit/config.bu
similarity index 100%
rename from tests/kola/ignition/systemd-enable-instance-unit/config.fcc
rename to tests/kola/ignition/systemd-enable-instance-unit/config.bu
diff --git a/tests/kola/ignition/systemd-unmasking/config.fcc b/tests/kola/ignition/systemd-unmasking/config.bu
similarity index 100%
rename from tests/kola/ignition/systemd-unmasking/config.fcc
rename to tests/kola/ignition/systemd-unmasking/config.bu
diff --git a/tests/kola/misc-ign-ro/config.fcc b/tests/kola/misc-ign-ro/config.bu
similarity index 100%
rename from tests/kola/misc-ign-ro/config.fcc
rename to tests/kola/misc-ign-ro/config.bu
diff --git a/tests/kola/swap/zram-generator/config.fcc b/tests/kola/swap/zram-generator/config.bu
similarity index 100%
rename from tests/kola/swap/zram-generator/config.fcc
rename to tests/kola/swap/zram-generator/config.bu
diff --git a/tests/kola/var-mount/luks/config.fcc b/tests/kola/var-mount/luks/config.bu
similarity index 100%
rename from tests/kola/var-mount/luks/config.fcc
rename to tests/kola/var-mount/luks/config.bu
diff --git a/tests/kola/var-mount/simple/config.fcc b/tests/kola/var-mount/simple/config.bu
similarity index 100%
rename from tests/kola/var-mount/simple/config.fcc
rename to tests/kola/var-mount/simple/config.bu

From 6a41390efd99a446162a9bc449171ca1c818c7c7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 30 Sep 2021 21:42:43 +0000
Subject: [PATCH 0484/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/495/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9f8064f350..659cd2ee9a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1027,10 +1027,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.20-1.fc34.noarch"
+      "evra": "34.21-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.20-1.fc34.noarch"
+      "evra": "34.21-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1135,7 +1135,7 @@
       "evra": "3.1.0-1.fc34.aarch64"
     },
     "tzdata": {
-      "evra": "2021a-1.fc34.noarch"
+      "evra": "2021b-1.fc34.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-3.fc34.aarch64"
@@ -1150,7 +1150,7 @@
       "evra": "2.21-26.fc34.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210424-1.fc34.aarch64"
+      "evra": "1.0.20210914-1.fc34.aarch64"
     },
     "xfsprogs": {
       "evra": "5.10.0-2.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-29T20:53:19Z",
+    "generated": "2021-09-30T20:53:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-28T22:40:50Z"
+        "generated": "2021-09-29T21:37:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-29T00:55:29Z"
+        "generated": "2021-09-30T00:57:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1af239fd72..e80f517310 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1039,10 +1039,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.20-1.fc34.noarch"
+      "evra": "34.21-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.20-1.fc34.noarch"
+      "evra": "34.21-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1147,7 +1147,7 @@
       "evra": "3.1.0-1.fc34.x86_64"
     },
     "tzdata": {
-      "evra": "2021a-1.fc34.noarch"
+      "evra": "2021b-1.fc34.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-3.fc34.x86_64"
@@ -1162,7 +1162,7 @@
       "evra": "2.21-26.fc34.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210424-1.fc34.x86_64"
+      "evra": "1.0.20210914-1.fc34.x86_64"
     },
     "xfsprogs": {
       "evra": "5.10.0-2.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-29T20:53:16Z",
+    "generated": "2021-09-30T20:53:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-28T22:45:28Z"
+        "generated": "2021-09-29T21:45:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-29T00:56:02Z"
+        "generated": "2021-09-30T00:58:25Z"
       }
     }
   }

From 182dba500ca5b626ead275ad579daf904c6d1dfa Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 30 Sep 2021 17:27:26 -0400
Subject: [PATCH 0485/2157] overrides: fast-track rpm-ostree-2021.11-2.fc34

It's just sitting there in Bodhi.

We want it for its own sake, but also for
https://github.com/coreos/rpm-ostree/pull/3103 because of
https://github.com/fedora-silverblue/issue-tracker/issues/210 which can
also apply to FCOS, even if having it as a layer is likely rarer here.
---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..29eb489d5d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  rpm-ostree:
+    evr: 2021.11-2.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-03a5539124
+      type: fast-track
+  rpm-ostree-libs:
+    evr: 2021.11-2.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-03a5539124
+      type: fast-track

From 51194e0aacb3deda7fba24418298a788817ba38e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 10:08:02 -0400
Subject: [PATCH 0486/2157] initramfs: ignore `udevadm settle` errors

We do `udevadm settle` in a few places to e.g. wait for symlinks to
update based on whatever operation we just did. But if `udevadm settle`
fails, we shouldn't fail the boot for it. It could be failing on some
completely unrelated thing (since it waits for all events).

Ideally in those scripts, we'd wait only for the specific events that we
care about. But even so, we should just opportunistically keep booting.
As a plus, even if we end up failing further down, we'll get a clearer
error.

Related: https://bugzilla.redhat.com/show_bug.cgi?id=2009662
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh  | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid  | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.sh       | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index ee2fc4f4c0..dc55409429 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -39,4 +39,4 @@ fi
 
 echo "Randomizing disk GUID"
 sgdisk --disk-guid=R --move-second-header "$PKNAME"
-udevadm settle
+udevadm settle || :
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 0318471354..b2177352e8 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -61,7 +61,7 @@ if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
     xfs) xfs_admin -U generate "${target}" ;;
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac
-  udevadm settle
+  udevadm settle || :
   echo "Regenerated UUID for ${target}"
 else
   echo "No changes required for ${target} TYPE=${TYPE} UUID=${UUID}"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 2dfaf13d00..d20b6a08d9 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -72,7 +72,7 @@ while true; do
             if [ -n "${DM_MPATH:-}" ]; then
                 # Since growpart does not understand device mapper, we have to use sfdisk.
                 echo ", +" | sfdisk --no-reread --no-tell-kernel --force -N "${DM_PART}" "/dev/mapper/${DM_MPATH}"
-                udevadm settle # Wait for udev-triggered kpartx to update mappings
+                udevadm settle || : # Wait for udev-triggered kpartx to update mappings
             else
                 partnum=$(cat "/sys/dev/block/${MAJMIN}/partition")
                 # XXX: ideally this'd be idempotent and we wouldn't `|| :`

From 9e3a63119b910e189499c6c248cb2edef4ffcf5c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Oct 2021 21:29:26 +0000
Subject: [PATCH 0487/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/499/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 2 files changed, 34 insertions(+), 34 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 659cd2ee9a..d108856a8a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "4.1-1.fc34.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.11-3.fc34.aarch64"
+      "evra": "6.13-3.fc34.aarch64"
     },
     "clevis": {
       "evra": "18-1.fc34.aarch64"
@@ -160,10 +160,10 @@
       "evra": "2.9.6-27.fc34.aarch64"
     },
     "criu": {
-      "evra": "3.15-3.fc34.aarch64"
+      "evra": "3.16-2.fc34.aarch64"
     },
     "criu-libs": {
-      "evra": "3.15-3.fc34.aarch64"
+      "evra": "3.16-2.fc34.aarch64"
     },
     "crun": {
       "evra": "1.0-1.fc34.aarch64"
@@ -295,10 +295,10 @@
       "evra": "34-2.noarch"
     },
     "file": {
-      "evra": "5.39-6.fc34.aarch64"
+      "evra": "5.39-7.fc34.aarch64"
     },
     "file-libs": {
-      "evra": "5.39-6.fc34.aarch64"
+      "evra": "5.39-7.fc34.aarch64"
     },
     "filesystem": {
       "evra": "3.14-5.fc34.aarch64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-2.fc34.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-4.fc34.aarch64"
+      "evra": "1.10.3-1.fc34.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-2.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.19-200.fc34.aarch64"
+      "evra": "5.14.9-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.13.19-200.fc34.aarch64"
+      "evra": "5.14.9-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.13.19-200.fc34.aarch64"
+      "evra": "5.14.9-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -898,13 +898,13 @@
       "evra": "2.4.57-5.fc34.aarch64"
     },
     "openssh": {
-      "evra": "8.6p1-3.fc34.aarch64"
+      "evra": "8.6p1-5.fc34.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.6p1-3.fc34.aarch64"
+      "evra": "8.6p1-5.fc34.aarch64"
     },
     "openssh-server": {
-      "evra": "8.6p1-3.fc34.aarch64"
+      "evra": "8.6p1-5.fc34.aarch64"
     },
     "openssl": {
       "evra": "1:1.1.1l-2.fc34.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "4.16.1.3-1.fc34.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.10-2.fc34.aarch64"
+      "evra": "2021.11-2.fc34.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.10-2.fc34.aarch64"
+      "evra": "2021.11-2.fc34.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-30T20:53:46Z",
+    "generated": "2021-10-02T20:54:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-29T21:37:56Z"
+        "generated": "2021-10-01T21:33:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-30T00:57:54Z"
+        "generated": "2021-10-02T00:58:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e80f517310..0aef2e88ca 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -91,7 +91,7 @@
       "evra": "4.1-1.fc34.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.11-3.fc34.x86_64"
+      "evra": "6.13-3.fc34.x86_64"
     },
     "clevis": {
       "evra": "18-1.fc34.x86_64"
@@ -160,10 +160,10 @@
       "evra": "2.9.6-27.fc34.x86_64"
     },
     "criu": {
-      "evra": "3.15-3.fc34.x86_64"
+      "evra": "3.16-2.fc34.x86_64"
     },
     "criu-libs": {
-      "evra": "3.15-3.fc34.x86_64"
+      "evra": "3.16-2.fc34.x86_64"
     },
     "crun": {
       "evra": "1.0-1.fc34.x86_64"
@@ -295,10 +295,10 @@
       "evra": "34-2.noarch"
     },
     "file": {
-      "evra": "5.39-6.fc34.x86_64"
+      "evra": "5.39-7.fc34.x86_64"
     },
     "file-libs": {
-      "evra": "5.39-6.fc34.x86_64"
+      "evra": "5.39-7.fc34.x86_64"
     },
     "filesystem": {
       "evra": "3.14-5.fc34.x86_64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-2.fc34.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.2-4.fc34.x86_64"
+      "evra": "1.10.3-1.fc34.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-2.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.13.19-200.fc34.x86_64"
+      "evra": "5.14.9-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.13.19-200.fc34.x86_64"
+      "evra": "5.14.9-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.13.19-200.fc34.x86_64"
+      "evra": "5.14.9-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -910,13 +910,13 @@
       "evra": "2.4.57-5.fc34.x86_64"
     },
     "openssh": {
-      "evra": "8.6p1-3.fc34.x86_64"
+      "evra": "8.6p1-5.fc34.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.6p1-3.fc34.x86_64"
+      "evra": "8.6p1-5.fc34.x86_64"
     },
     "openssh-server": {
-      "evra": "8.6p1-3.fc34.x86_64"
+      "evra": "8.6p1-5.fc34.x86_64"
     },
     "openssl": {
       "evra": "1:1.1.1l-2.fc34.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.10-2.fc34.x86_64"
+      "evra": "2021.11-2.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.10-2.fc34.x86_64"
+      "evra": "2021.11-2.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-09-30T20:53:41Z",
+    "generated": "2021-10-02T20:55:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-09-29T21:45:52Z"
+        "generated": "2021-10-01T21:38:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-09-30T00:58:25Z"
+        "generated": "2021-10-02T00:58:54Z"
       }
     }
   }

From 08954efa915abd3e52240935d7e27235388f5533 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 4 Oct 2021 13:27:02 +0000
Subject: [PATCH 0488/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/503/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d108856a8a..3de5d22310 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.5-1.fc34.aarch64"
+      "evra": "3.0.6-1.fc34.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.aarch64"
@@ -379,16 +379,16 @@
       "evra": "3.6-2.fc34.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-2.fc34.noarch"
+      "evra": "1:2.06-6.fc34b.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-2.fc34.aarch64"
+      "evra": "1:2.06-6.fc34b.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-2.fc34.aarch64"
+      "evra": "1:2.06-6.fc34b.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-2.fc34.aarch64"
+      "evra": "1:2.06-6.fc34b.aarch64"
     },
     "gzip": {
       "evra": "1.10-4.fc34.aarch64"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-02T20:54:36Z",
+    "generated": "2021-10-04T12:35:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1187,7 +1187,7 @@
         "generated": "2021-10-01T21:33:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-02T00:58:24Z"
+        "generated": "2021-10-04T00:54:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0aef2e88ca..44ecd00425 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-1.fc34.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.5-1.fc34.x86_64"
+      "evra": "3.0.6-1.fc34.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc34.x86_64"
@@ -379,22 +379,22 @@
       "evra": "3.6-2.fc34.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-2.fc34.noarch"
+      "evra": "1:2.06-6.fc34b.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-2.fc34.x86_64"
+      "evra": "1:2.06-6.fc34b.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-2.fc34.x86_64"
+      "evra": "1:2.06-6.fc34b.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-2.fc34.noarch"
+      "evra": "1:2.06-6.fc34b.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-2.fc34.x86_64"
+      "evra": "1:2.06-6.fc34b.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-2.fc34.x86_64"
+      "evra": "1:2.06-6.fc34b.x86_64"
     },
     "gzip": {
       "evra": "1.10-4.fc34.x86_64"
@@ -1190,7 +1190,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-02T20:55:00Z",
+    "generated": "2021-10-04T12:35:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1199,7 +1199,7 @@
         "generated": "2021-10-01T21:38:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-02T00:58:54Z"
+        "generated": "2021-10-04T00:55:48Z"
       }
     }
   }

From 94e0daa567a658f023d48ac5929c72ed910792bd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Oct 2021 14:13:19 +0000
Subject: [PATCH 0489/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/507/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3de5d22310..fa08589589 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -850,7 +850,7 @@
       "evra": "2:0.4.0-4.fc34.aarch64"
     },
     "mozjs78": {
-      "evra": "78.13.0-1.fc34.aarch64"
+      "evra": "78.14.0-1.fc34.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-04T12:35:32Z",
+    "generated": "2021-10-05T13:24:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-01T21:33:42Z"
+        "generated": "2021-10-04T15:57:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-04T00:54:42Z"
+        "generated": "2021-10-05T01:31:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 44ecd00425..d831019ddf 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -862,7 +862,7 @@
       "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.13.0-1.fc34.x86_64"
+      "evra": "78.14.0-1.fc34.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-04T12:35:35Z",
+    "generated": "2021-10-05T13:24:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-01T21:38:29Z"
+        "generated": "2021-10-04T15:54:56Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-04T00:55:48Z"
+        "generated": "2021-10-05T01:32:15Z"
       }
     }
   }

From 8d3f2bc20433b835cc3a55faae3f5e651e109d10 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Oct 2021 21:29:35 +0000
Subject: [PATCH 0490/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/514/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fa08589589..31c92ed6f1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -112,7 +112,7 @@
       "evra": "5.2-39.fc34.aarch64"
     },
     "conmon": {
-      "evra": "2:2.0.29-2.fc34.aarch64"
+      "evra": "2:2.0.30-2.fc34.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-1.fc34.noarch"
@@ -166,7 +166,7 @@
       "evra": "3.16-2.fc34.aarch64"
     },
     "crun": {
-      "evra": "1.0-1.fc34.aarch64"
+      "evra": "1.1-1.fc34.aarch64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -541,7 +541,7 @@
       "evra": "0.14-21.fc34.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-46.fc34.aarch64"
+      "evra": "5.3.28-49.fc34.aarch64"
     },
     "libdhash": {
       "evra": "0.5.0-47.fc34.aarch64"
@@ -850,7 +850,7 @@
       "evra": "2:0.4.0-4.fc34.aarch64"
     },
     "mozjs78": {
-      "evra": "78.14.0-1.fc34.aarch64"
+      "evra": "78.15.0-1.fc34.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.aarch64"
@@ -955,10 +955,10 @@
       "evra": "1.7.3-6.fc34.aarch64"
     },
     "podman": {
-      "evra": "3:3.3.1-1.fc34.aarch64"
+      "evra": "3:3.4.0-1.fc34.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.3.1-1.fc34.aarch64"
+      "evra": "3:3.4.0-1.fc34.aarch64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-05T13:24:27Z",
+    "generated": "2021-10-07T20:53:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-04T15:57:15Z"
+        "generated": "2021-10-07T18:07:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-05T01:31:44Z"
+        "generated": "2021-10-07T17:02:39Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d831019ddf..94f71607ad 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -112,7 +112,7 @@
       "evra": "5.2-39.fc34.x86_64"
     },
     "conmon": {
-      "evra": "2:2.0.29-2.fc34.x86_64"
+      "evra": "2:2.0.30-2.fc34.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-1.fc34.noarch"
@@ -166,7 +166,7 @@
       "evra": "3.16-2.fc34.x86_64"
     },
     "crun": {
-      "evra": "1.0-1.fc34.x86_64"
+      "evra": "1.1-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -547,7 +547,7 @@
       "evra": "0.14-21.fc34.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-46.fc34.x86_64"
+      "evra": "5.3.28-49.fc34.x86_64"
     },
     "libdhash": {
       "evra": "0.5.0-47.fc34.x86_64"
@@ -862,7 +862,7 @@
       "evra": "2:0.4.0-4.fc34.x86_64"
     },
     "mozjs78": {
-      "evra": "78.14.0-1.fc34.x86_64"
+      "evra": "78.15.0-1.fc34.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-7.fc34.x86_64"
@@ -967,10 +967,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.3.1-1.fc34.x86_64"
+      "evra": "3:3.4.0-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.3.1-1.fc34.x86_64"
+      "evra": "3:3.4.0-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-05T13:24:30Z",
+    "generated": "2021-10-07T20:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-04T15:54:56Z"
+        "generated": "2021-10-07T18:14:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-05T01:32:15Z"
+        "generated": "2021-10-07T17:03:26Z"
       }
     }
   }

From bafa1e893cc7264aca9ce8b0c79e7505456b361c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Oct 2021 21:32:38 +0000
Subject: [PATCH 0491/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/518/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 31c92ed6f1..690a182db5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -226,7 +226,7 @@
       "evra": "3.7-8.fc34.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-1.fc34.aarch64"
+      "evra": "2.86-2.fc34.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-07T20:53:34Z",
+    "generated": "2021-10-09T20:53:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-07T18:07:38Z"
+        "generated": "2021-10-08T21:44:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-07T17:02:39Z"
+        "generated": "2021-10-09T00:13:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 94f71607ad..db0bfce648 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -226,7 +226,7 @@
       "evra": "3.7-8.fc34.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-1.fc34.x86_64"
+      "evra": "2.86-2.fc34.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-07T20:53:36Z",
+    "generated": "2021-10-09T20:53:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-07T18:14:26Z"
+        "generated": "2021-10-08T21:45:02Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-07T17:03:26Z"
+        "generated": "2021-10-09T00:13:41Z"
       }
     }
   }

From b23a9a322ea128cc505eb97f922130654802cb3b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 11 Oct 2021 21:34:26 +0000
Subject: [PATCH 0492/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/522/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 690a182db5..e9cf3c4623 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.14.1-1.fc34.aarch64"
+      "evra": "5.14.2-1.fc34.aarch64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.aarch64"
@@ -166,7 +166,7 @@
       "evra": "3.16-2.fc34.aarch64"
     },
     "crun": {
-      "evra": "1.1-1.fc34.aarch64"
+      "evra": "1.2-1.fc34.aarch64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-09T20:53:19Z",
+    "generated": "2021-10-11T20:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-08T21:44:59Z"
+        "generated": "2021-10-10T21:35:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-09T00:13:10Z"
+        "generated": "2021-10-10T23:29:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index db0bfce648..27c7797bc2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc34.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.14.1-1.fc34.x86_64"
+      "evra": "5.14.2-1.fc34.x86_64"
     },
     "bubblewrap": {
       "evra": "0.4.1-3.fc34.x86_64"
@@ -166,7 +166,7 @@
       "evra": "3.16-2.fc34.x86_64"
     },
     "crun": {
-      "evra": "1.1-1.fc34.x86_64"
+      "evra": "1.2-1.fc34.x86_64"
     },
     "crypto-policies": {
       "evra": "20210213-1.git5c710c0.fc34.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-09T20:53:14Z",
+    "generated": "2021-10-11T20:53:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-08T21:45:02Z"
+        "generated": "2021-10-10T21:37:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-09T00:13:41Z"
+        "generated": "2021-10-10T23:30:23Z"
       }
     }
   }

From 8bed69d1074a8848e8cae73bedf7e7c57a418808 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 12 Oct 2021 00:53:00 +0000
Subject: [PATCH 0493/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 29eb489d5d..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,14 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  rpm-ostree:
-    evr: 2021.11-2.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-03a5539124
-      type: fast-track
-  rpm-ostree-libs:
-    evr: 2021.11-2.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-03a5539124
-      type: fast-track
+packages: {}

From a08de30c100ddc1bd19faf7dde6e2a97c157d845 Mon Sep 17 00:00:00 2001
From: Prashanth Sundararaman <psundara@redhat.com>
Date: Tue, 12 Oct 2021 07:50:33 -0700
Subject: [PATCH 0494/2157] kola/var-mount: change to use by-partuuid to
 accomodate s390x

by-partlabel doesn't work for s390x because of https://bugzilla.redhat.com/show_bug.cgi?id=1899990.This addresses https://github.com/openshift/os/issues/648
---
 tests/kola/var-mount/simple/config.bu | 6 ++++--
 tests/kola/var-mount/simple/test.sh   | 4 ++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/tests/kola/var-mount/simple/config.bu b/tests/kola/var-mount/simple/config.bu
index b32fd3611d..424b7e7d5c 100644
--- a/tests/kola/var-mount/simple/config.bu
+++ b/tests/kola/var-mount/simple/config.bu
@@ -5,16 +5,18 @@ storage:
     - device: /dev/vda
       partitions:
         - label: var
+          guid: 63194b49-e4b7-43f9-9a8b-df0fd8279bb7
           size_mib: 1000
           start_mib: 5000
         - label: varlog
+          guid: 6385b84e-2c7b-4488-a870-667c565e01a8
       wipe_table: false
   filesystems:
-    - device: /dev/disk/by-partlabel/var
+    - device: /dev/disk/by-partuuid/63194b49-e4b7-43f9-9a8b-df0fd8279bb7
       format: xfs
       path: /var
       with_mount_unit: true
-    - device: /dev/disk/by-partlabel/varlog
+    - device: /dev/disk/by-partuuid/6385b84e-2c7b-4488-a870-667c565e01a8
       format: ext4
       path: /var/log
       with_mount_unit: true
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index 8bfcae589f..cdd5636dcb 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -16,7 +16,7 @@ fatal() {
 # /var
 
 src=$(findmnt -nvr /var -o SOURCE)
-[[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/var) ]]
+[[ $(realpath "$src") == $(realpath /dev/disk/by-partuuid/63194b49-e4b7-43f9-9a8b-df0fd8279bb7) ]]
 
 fstype=$(findmnt -nvr /var -o FSTYPE)
 [[ $fstype == xfs ]]
@@ -24,7 +24,7 @@ fstype=$(findmnt -nvr /var -o FSTYPE)
 # /var/log
 
 src=$(findmnt -nvr /var/log -o SOURCE)
-[[ $(realpath "$src") == $(realpath /dev/disk/by-partlabel/varlog) ]]
+[[ $(realpath "$src") == $(realpath /dev/disk/by-partuuid/6385b84e-2c7b-4488-a870-667c565e01a8) ]]
 
 fstype=$(findmnt -nvr /var/log -o FSTYPE)
 [[ $fstype == ext4 ]]

From 34890fbbe6fb1a8d2dc34c0adae7bc95598da553 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 12 Oct 2021 12:48:44 -0400
Subject: [PATCH 0495/2157] overrides: fast-track coreos-installer
 0.10.1-1.fc34 for CVE-2021-20319

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..4942704cea 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.10.1-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d52eb54ca
+      reason: https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.10.1-1.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d52eb54ca
+      reason: https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593
+      type: fast-track

From cfbfc5dede1f38ec15988e97df8ac2726867d879 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 12 Oct 2021 09:36:21 -0400
Subject: [PATCH 0496/2157] tests: fix mulipathd.socket test

I believe it should be testing for the existence of
/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf.

Fixup for 28d5409
---
 tests/kola/misc-ro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 9dfa024ce1..3b672b144d 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -219,7 +219,7 @@ ok "either dracut multipath module fixed or quickfix present"
 has_fixed_multipathd_socket=1
 grep -q 'ConditionPathExists=/etc/multipath.conf' /usr/lib/systemd/system/multipathd.socket || has_fixed_multipathd_socket=0
 has_overlay_multipathd_socket_quickfix=1
-test -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf || has_overlay_multipathd_socket_quickfix=0
+test -f /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf || has_overlay_multipathd_socket_quickfix=0
 if test "${has_fixed_multipathd_socket}" -eq "${has_overlay_multipathd_socket_quickfix}"; then
     if test "${has_fixed_multipathd_socket}" -eq 1; then
         fatal "Found fixed multipathd.socket but quickfix is present too"

From 65c9ccc46fd53826c2369f7d666571d2fa88b597 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 12 Oct 2021 09:55:40 -0400
Subject: [PATCH 0497/2157] move multipathd.socket workaround from overlay to
 manifest postprocess

This will allow us to conditionalize it based on the major Fedora
version. The fix has currently landed in rawhide but not F35 and
we want to continue to execute the check everywhere.
---
 manifests/fedora-coreos-base.yaml             | 20 +++++++++++++++++++
 .../50-start-conditions.conf                  |  6 ------
 2 files changed, 20 insertions(+), 6 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2b1690050b..b3657cf3b5 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -107,6 +107,26 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
+  # Put in the fix for multipathd.socket on releases that haven't been fixed yet.
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2008098
+  # https://github.com/coreos/fedora-coreos-config/pull/1246
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    # Only operate on releases before F36. The fix has landed in F36+ and there is no
+    # need for a workaround.
+    source /etc/os-release
+    [ ${VERSION_ID} -le 35 ] || exit 0
+    mkdir /usr/lib/systemd/system/multipathd.socket.d
+    cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'
+    # Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
+    [Unit]
+    ConditionKernelCommandLine=!multipath=off
+    ConditionKernelCommandLine=!nompath
+    ConditionPathExists=/etc/multipath.conf
+    ConditionVirtualization=!container
+    EOF
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf b/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf
deleted file mode 100644
index 8b7f585550..0000000000
--- a/overlay.d/05core/usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf
+++ /dev/null
@@ -1,6 +0,0 @@
-# Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
-[Unit]
-ConditionKernelCommandLine=!multipath=off
-ConditionKernelCommandLine=!nompath
-ConditionPathExists=/etc/multipath.conf
-ConditionVirtualization=!container

From f8be4030d422d92b72e4a03211c70117a46ea22c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 12 Oct 2021 10:03:13 -0400
Subject: [PATCH 0498/2157] move multipathd.service workaround from overlay to
 manifest postprocess

This will allow us to conditionalize it based on the major Fedora
version when the fix starts landing in Fedora Linux (starting with
Rawhide). This also moves the workaround into a new dracut module
(36coreos-multipath-fix) and out of the old module (35coreos-multipath)
to make it easier to add from postprocess.
---
 manifests/fedora-coreos-base.yaml             | 29 +++++++++++++++++++
 .../90-multipathd-remove-execstop.conf        |  3 --
 .../35coreos-multipath/module-setup.sh        |  5 ----
 tests/kola/misc-ro                            |  2 +-
 4 files changed, 30 insertions(+), 9 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index b3657cf3b5..8db63ff651 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -127,6 +127,35 @@ postprocess:
     ConditionVirtualization=!container
     EOF
 
+  # Put in the fix for multipathd.service in dracut on releases that haven't
+  # been fixed yet.
+  # https://github.com/dracutdevs/dracut/pull/1606
+  # https://github.com/coreos/fedora-coreos-config/pull/1233
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    # This fix hasn't landed in rawhide (F36) yet, but hopefully will soon.
+    source /etc/os-release
+    [ ${VERSION_ID} -le 36 ] || exit 0
+    mkdir /usr/lib/dracut/modules.d/36coreos-multipath-fix
+    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf <<'EOF'
+    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+    [Service]
+    ExecStop=
+    EOF
+    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh <<'EOF'
+    #!/bin/bash
+    # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+    # ex: ts=8 sw=4 sts=4 et filetype=sh
+    install() {
+        # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+        mkdir -p "$systemdsystemunitdir/multipathd.service.d"
+        inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
+        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
+    }
+    EOF
+    chmod +x /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf
deleted file mode 100644
index ec9e14e7ca..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf
+++ /dev/null
@@ -1,3 +0,0 @@
-# Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-[Service]
-ExecStop=
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
index bcd530b678..4ab4bc4006 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
@@ -12,11 +12,6 @@ install_ignition_unit() {
 }
 
 install() {
-    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-    mkdir -p "$systemdsystemunitdir/multipathd.service.d"
-    inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
-        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
-
     inst_script "$moddir/coreos-propagate-multipath-conf.sh" \
         "/usr/sbin/coreos-propagate-multipath-conf"
 
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 3b672b144d..b22b8bf410 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -204,7 +204,7 @@ ok "All initrd scripts are executable"
 has_fixed_dracut_multipathd_service=0
 grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service || has_fixed_dracut_multipathd_service=1
 has_overlay_multipathd_service_quickfix=1
-test -f /usr/lib/dracut/modules.d/35coreos-multipath/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
+test -f /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
 if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_service_quickfix}"; then
     if test "${has_fixed_dracut_multipathd_service}" -eq 1; then
         fatal "Found fixed dracut multipath module but quickfix is present too"

From 40c46a5232af5536bddd00c4395aabc71e43ade0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 12 Oct 2021 14:54:44 -0400
Subject: [PATCH 0499/2157] add shared-workarounds.yaml manifest

This will allow us to share postprocess workarounds with downstream
distributions (i.e. RHCOS). In this initial run copy over the fixes
for multipathd that were previously hoisted up in to fedora-coreos-base.yaml.
---
 manifests/fedora-coreos-base.yaml | 50 +-----------------------
 manifests/shared-workarounds.yaml | 64 +++++++++++++++++++++++++++++++
 2 files changed, 65 insertions(+), 49 deletions(-)
 create mode 100644 manifests/shared-workarounds.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 8db63ff651..8ffa894673 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -8,6 +8,7 @@ include:
   - networking-tools.yaml
   - system-configuration.yaml
   - user-experience.yaml
+  - shared-workarounds.yaml
 
 initramfs-args:
   - --no-hostonly
@@ -107,55 +108,6 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
-  # Put in the fix for multipathd.socket on releases that haven't been fixed yet.
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2008098
-  # https://github.com/coreos/fedora-coreos-config/pull/1246
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    # Only operate on releases before F36. The fix has landed in F36+ and there is no
-    # need for a workaround.
-    source /etc/os-release
-    [ ${VERSION_ID} -le 35 ] || exit 0
-    mkdir /usr/lib/systemd/system/multipathd.socket.d
-    cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'
-    # Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
-    [Unit]
-    ConditionKernelCommandLine=!multipath=off
-    ConditionKernelCommandLine=!nompath
-    ConditionPathExists=/etc/multipath.conf
-    ConditionVirtualization=!container
-    EOF
-
-  # Put in the fix for multipathd.service in dracut on releases that haven't
-  # been fixed yet.
-  # https://github.com/dracutdevs/dracut/pull/1606
-  # https://github.com/coreos/fedora-coreos-config/pull/1233
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    # This fix hasn't landed in rawhide (F36) yet, but hopefully will soon.
-    source /etc/os-release
-    [ ${VERSION_ID} -le 36 ] || exit 0
-    mkdir /usr/lib/dracut/modules.d/36coreos-multipath-fix
-    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf <<'EOF'
-    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-    [Service]
-    ExecStop=
-    EOF
-    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh <<'EOF'
-    #!/bin/bash
-    # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
-    # ex: ts=8 sw=4 sts=4 et filetype=sh
-    install() {
-        # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-        mkdir -p "$systemdsystemunitdir/multipathd.service.d"
-        inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
-        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
-    }
-    EOF
-    chmod +x /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh
-
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
new file mode 100644
index 0000000000..29ff05a0b5
--- /dev/null
+++ b/manifests/shared-workarounds.yaml
@@ -0,0 +1,64 @@
+# This manifest is a list of shared workarounds that are needed in both Fedora CoreOS
+# and downstreams (i.e. Red Hat CoreOS).
+
+postprocess:
+  # Put in the fix for multipathd.socket on releases that haven't been fixed yet.
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2008098
+  # https://github.com/coreos/fedora-coreos-config/pull/1246
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    # Operate on RHCOS and FCOS. 
+    source /etc/os-release
+    if [[ ${NAME} =~ "Fedora" ]]; then
+        # FCOS: Only operate on releases before F36. The fix has landed
+        # in F36+ and there is no need for a workaround.
+        [ ${VERSION_ID} -le 35 ] || exit 0
+    else 
+        # RHCOS: The fix hasn't landed in any version of RHEL yet
+        true
+    fi
+    mkdir /usr/lib/systemd/system/multipathd.socket.d
+    cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'
+    # Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
+    [Unit]
+    ConditionKernelCommandLine=!multipath=off
+    ConditionKernelCommandLine=!nompath
+    ConditionPathExists=/etc/multipath.conf
+    ConditionVirtualization=!container
+    EOF
+
+  # Put in the fix for multipathd.service in dracut on releases that haven't
+  # been fixed yet.
+  # https://github.com/dracutdevs/dracut/pull/1606
+  # https://github.com/coreos/fedora-coreos-config/pull/1233
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    source /etc/os-release
+    if [[ ${NAME} =~ "Fedora" ]]; then
+        # FCOS: This fix hasn't landed in rawhide (F36) yet,
+        # but hopefully will soon.
+        [ ${VERSION_ID} -le 36 ] || exit 0
+    else 
+        # RHCOS: The fix hasn't landed in any version of RHEL yet
+        true
+    fi
+    mkdir /usr/lib/dracut/modules.d/36coreos-multipath-fix
+    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf <<'EOF'
+    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+    [Service]
+    ExecStop=
+    EOF
+    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh <<'EOF'
+    #!/bin/bash
+    # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+    # ex: ts=8 sw=4 sts=4 et filetype=sh
+    install() {
+        # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
+        mkdir -p "$systemdsystemunitdir/multipathd.service.d"
+        inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
+        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
+    }
+    EOF
+    chmod +x /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh

From 21b18cf06c5e63a80a0e4b9ff62aaf7c2207d03e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 12 Oct 2021 15:16:26 -0400
Subject: [PATCH 0500/2157] tests: break out multipath fix tests from misc-ro

If they are their own separate tests we can symlink them in the
openshift/os repo and re-use them there.
---
 tests/kola/misc-ro                          | 30 ---------------------
 tests/kola/multipath/multipathd-service-fix | 28 +++++++++++++++++++
 tests/kola/multipath/multipathd-socket-fix  | 28 +++++++++++++++++++
 3 files changed, 56 insertions(+), 30 deletions(-)
 create mode 100755 tests/kola/multipath/multipathd-service-fix
 create mode 100755 tests/kola/multipath/multipathd-socket-fix

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index b22b8bf410..05d91c2927 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,33 +198,3 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
-
-# We need either a fixed dracut or temporary workaround, no need for both.
-# See https://github.com/coreos/fedora-coreos-tracker/issues/803.
-has_fixed_dracut_multipathd_service=0
-grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service || has_fixed_dracut_multipathd_service=1
-has_overlay_multipathd_service_quickfix=1
-test -f /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
-if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_service_quickfix}"; then
-    if test "${has_fixed_dracut_multipathd_service}" -eq 1; then
-        fatal "Found fixed dracut multipath module but quickfix is present too"
-    else
-        fatal "Found buggy dracut multipath module but quickfix is missing too"
-    fi
-fi
-ok "either dracut multipath module fixed or quickfix present"
-
-# We need either a fixed multipathd.socket or temporary workaround, no need for both.
-# See https://bugzilla.redhat.com/show_bug.cgi?id=2008098.
-has_fixed_multipathd_socket=1
-grep -q 'ConditionPathExists=/etc/multipath.conf' /usr/lib/systemd/system/multipathd.socket || has_fixed_multipathd_socket=0
-has_overlay_multipathd_socket_quickfix=1
-test -f /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf || has_overlay_multipathd_socket_quickfix=0
-if test "${has_fixed_multipathd_socket}" -eq "${has_overlay_multipathd_socket_quickfix}"; then
-    if test "${has_fixed_multipathd_socket}" -eq 1; then
-        fatal "Found fixed multipathd.socket but quickfix is present too"
-    else
-        fatal "Found buggy multipathd.socket but quickfix is missing too"
-    fi
-fi
-ok "either multipathd.socket fixed or quickfix present"
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
new file mode 100755
index 0000000000..8fc4143df1
--- /dev/null
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -0,0 +1,28 @@
+#!/bin/bash
+# Just run on qemu since the answer is the same everywhere
+# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# We need either a fixed dracut or temporary workaround, no need for both.
+# See https://github.com/coreos/fedora-coreos-tracker/issues/803.
+has_fixed_dracut_multipathd_service=0
+grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service || has_fixed_dracut_multipathd_service=1
+has_overlay_multipathd_service_quickfix=1
+test -f /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
+if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_service_quickfix}"; then
+    if test "${has_fixed_dracut_multipathd_service}" -eq 1; then
+        fatal "Found fixed dracut multipath module but quickfix is present too"
+    else
+        fatal "Found buggy dracut multipath module but quickfix is missing too"
+    fi
+fi
+ok "either dracut multipath module fixed or quickfix present"
diff --git a/tests/kola/multipath/multipathd-socket-fix b/tests/kola/multipath/multipathd-socket-fix
new file mode 100755
index 0000000000..e961fe89cf
--- /dev/null
+++ b/tests/kola/multipath/multipathd-socket-fix
@@ -0,0 +1,28 @@
+#!/bin/bash
+# Just run on qemu since the answer is the same everywhere
+# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# We need either a fixed multipathd.socket or temporary workaround, no need for both.
+# See https://bugzilla.redhat.com/show_bug.cgi?id=2008098.
+has_fixed_multipathd_socket=1
+grep -q 'ConditionPathExists=/etc/multipath.conf' /usr/lib/systemd/system/multipathd.socket || has_fixed_multipathd_socket=0
+has_overlay_multipathd_socket_quickfix=1
+test -f /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf || has_overlay_multipathd_socket_quickfix=0
+if test "${has_fixed_multipathd_socket}" -eq "${has_overlay_multipathd_socket_quickfix}"; then
+    if test "${has_fixed_multipathd_socket}" -eq 1; then
+        fatal "Found fixed multipathd.socket but quickfix is present too"
+    else
+        fatal "Found buggy multipathd.socket but quickfix is missing too"
+    fi
+fi
+ok "either multipathd.socket fixed or quickfix present"

From bfaf097a94a44620986fff30f726a46f84512a30 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 12 Oct 2021 22:12:59 +0000
Subject: [PATCH 0501/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/524/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e9cf3c4623..d25b95524b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.0-2.fc34.aarch64"
+      "evra": "0.10.1-1.fc34.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.0-2.fc34.aarch64"
+      "evra": "0.10.1-1.fc34.aarch64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.aarch64"
@@ -457,13 +457,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.9-200.fc34.aarch64"
+      "evra": "5.14.10-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.9-200.fc34.aarch64"
+      "evra": "5.14.10-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.9-200.fc34.aarch64"
+      "evra": "5.14.10-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "4.16.1.3-1.fc34.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.11-2.fc34.aarch64"
+      "evra": "2021.11-3.fc34.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.11-2.fc34.aarch64"
+      "evra": "2021.11-3.fc34.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.aarch64"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-11T20:53:36Z",
+    "generated": "2021-10-12T20:53:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-10T21:35:12Z"
+        "generated": "2021-10-12T20:18:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-10T23:29:52Z"
+        "generated": "2021-10-11T21:19:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 27c7797bc2..c00a0215db 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,10 +139,10 @@
       "evra": "4:1-21.fc34.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.0-2.fc34.x86_64"
+      "evra": "0.10.1-1.fc34.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.0-2.fc34.x86_64"
+      "evra": "0.10.1-1.fc34.x86_64"
     },
     "coreutils": {
       "evra": "8.32-30.fc34.x86_64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.9-200.fc34.x86_64"
+      "evra": "5.14.10-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.9-200.fc34.x86_64"
+      "evra": "5.14.10-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.9-200.fc34.x86_64"
+      "evra": "5.14.10-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.21-5.fc34.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.11-2.fc34.x86_64"
+      "evra": "2021.11-3.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.11-2.fc34.x86_64"
+      "evra": "2021.11-3.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-11T20:53:33Z",
+    "generated": "2021-10-12T20:53:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-10T21:37:29Z"
+        "generated": "2021-10-12T20:21:52Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-10T23:30:23Z"
+        "generated": "2021-10-11T21:20:26Z"
       }
     }
   }

From 6cde71e15ec923884d6cbfa83b32ff213d64b124 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Oct 2021 21:42:30 +0000
Subject: [PATCH 0502/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/526/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 +++++++++++++++++++++---------------
 manifest-lock.x86_64.json  | 36 +++++++++++++++++++++---------------
 2 files changed, 42 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d25b95524b..ea56f347dd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.168.0-1.fc34.noarch"
+      "evra": "2:2.170.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.aarch64"
@@ -237,6 +237,9 @@
     "dracut-network": {
       "evra": "055-3.fc34.aarch64"
     },
+    "dracut-squash": {
+      "evra": "055-3.fc34.aarch64"
+    },
     "e2fsprogs": {
       "evra": "1.45.6-5.fc34.aarch64"
     },
@@ -307,7 +310,7 @@
       "evra": "1:4.8.0-2.fc34.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.3-1.fc34.aarch64"
+      "evra": "1.10.5-1.fc34.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-2.fc34.aarch64"
@@ -457,16 +460,16 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.10-200.fc34.aarch64"
+      "evra": "5.14.11-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.10-200.fc34.aarch64"
+      "evra": "5.14.11-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.10-200.fc34.aarch64"
+      "evra": "5.14.11-200.fc34.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.21-5.fc34.aarch64"
+      "evra": "2.0.22-4.fc34.aarch64"
     },
     "keyutils": {
       "evra": "1.6.1-2.fc34.aarch64"
@@ -586,7 +589,7 @@
       "evra": "0.3.7-1.fc34.aarch64"
     },
     "libibverbs": {
-      "evra": "36.0-1.fc34.aarch64"
+      "evra": "37.0-1.fc34.aarch64"
     },
     "libicu": {
       "evra": "67.1-7.fc34.aarch64"
@@ -712,7 +715,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.7-0.fc34.aarch64"
+      "evra": "2:4.14.8-0.fc34.aarch64"
     },
     "libsolv": {
       "evra": "0.7.17-3.fc34.aarch64"
@@ -787,7 +790,7 @@
       "evra": "0.3.2-1.fc34.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.14.7-0.fc34.aarch64"
+      "evra": "2:4.14.8-0.fc34.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.26-2.fc34.aarch64"
@@ -1015,13 +1018,13 @@
       "evra": "2:1.0.2-2.fc34.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.7-0.fc34.aarch64"
+      "evra": "2:4.14.8-0.fc34.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.14.7-0.fc34.noarch"
+      "evra": "2:4.14.8-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.7-0.fc34.aarch64"
+      "evra": "2:4.14.8-0.fc34.aarch64"
     },
     "sed": {
       "evra": "4.8-7.fc34.aarch64"
@@ -1068,6 +1071,9 @@
     "sqlite-libs": {
       "evra": "3.34.1-2.fc34.aarch64"
     },
+    "squashfs-tools": {
+      "evra": "4.5-3.20210913gite048580.fc34.aarch64"
+    },
     "ssh-key-dir": {
       "evra": "0.1.2-7.fc34.aarch64"
     },
@@ -1178,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-12T20:53:41Z",
+    "generated": "2021-10-13T20:53:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-12T20:18:15Z"
+        "generated": "2021-10-12T22:35:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-11T21:19:43Z"
+        "generated": "2021-10-13T20:16:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c00a0215db..0ffe67f3a9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.168.0-1.fc34.noarch"
+      "evra": "2:2.170.0-1.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.5-1.fc34.x86_64"
@@ -237,6 +237,9 @@
     "dracut-network": {
       "evra": "055-3.fc34.x86_64"
     },
+    "dracut-squash": {
+      "evra": "055-3.fc34.x86_64"
+    },
     "e2fsprogs": {
       "evra": "1.45.6-5.fc34.x86_64"
     },
@@ -307,7 +310,7 @@
       "evra": "1:4.8.0-2.fc34.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.3-1.fc34.x86_64"
+      "evra": "1.10.5-1.fc34.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-2.fc34.x86_64"
@@ -463,16 +466,16 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.10-200.fc34.x86_64"
+      "evra": "5.14.11-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.10-200.fc34.x86_64"
+      "evra": "5.14.11-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.10-200.fc34.x86_64"
+      "evra": "5.14.11-200.fc34.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.21-5.fc34.x86_64"
+      "evra": "2.0.22-4.fc34.x86_64"
     },
     "keyutils": {
       "evra": "1.6.1-2.fc34.x86_64"
@@ -592,7 +595,7 @@
       "evra": "0.3.7-1.fc34.x86_64"
     },
     "libibverbs": {
-      "evra": "36.0-1.fc34.x86_64"
+      "evra": "37.0-1.fc34.x86_64"
     },
     "libicu": {
       "evra": "67.1-7.fc34.x86_64"
@@ -718,7 +721,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.7-0.fc34.x86_64"
+      "evra": "2:4.14.8-0.fc34.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-2.fc34.x86_64"
@@ -796,7 +799,7 @@
       "evra": "0.3.2-1.fc34.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.7-0.fc34.x86_64"
+      "evra": "2:4.14.8-0.fc34.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.26-2.fc34.x86_64"
@@ -1027,13 +1030,13 @@
       "evra": "2:1.0.2-2.fc34.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.7-0.fc34.x86_64"
+      "evra": "2:4.14.8-0.fc34.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.7-0.fc34.noarch"
+      "evra": "2:4.14.8-0.fc34.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.7-0.fc34.x86_64"
+      "evra": "2:4.14.8-0.fc34.x86_64"
     },
     "sed": {
       "evra": "4.8-7.fc34.x86_64"
@@ -1080,6 +1083,9 @@
     "sqlite-libs": {
       "evra": "3.34.1-2.fc34.x86_64"
     },
+    "squashfs-tools": {
+      "evra": "4.5-3.20210913gite048580.fc34.x86_64"
+    },
     "ssh-key-dir": {
       "evra": "0.1.2-7.fc34.x86_64"
     },
@@ -1190,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-12T20:53:42Z",
+    "generated": "2021-10-13T20:53:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-12T20:21:52Z"
+        "generated": "2021-10-12T22:36:05Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-11T21:20:26Z"
+        "generated": "2021-10-13T20:17:30Z"
       }
     }
   }

From 120cea7a6dac125856857fd8701bc6c30d991134 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Wed, 13 Oct 2021 16:24:45 -0400
Subject: [PATCH 0503/2157] lockfiles: fast-track Ignition v2.12.0-3

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 4942704cea..4a947736f0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -21,3 +21,9 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d52eb54ca
       reason: https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593
       type: fast-track
+  ignition:
+    evr: 2.12.0-3.fc34
+    metadata:
+      bodhi:  https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb8c91b157
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/977
+      type: fast-track

From 0090bc60904e22f09134b8c46bb77e4ce4adcb90 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Thu, 7 Oct 2021 09:52:42 -0400
Subject: [PATCH 0504/2157] 15fcos: change the location of Ignition report

Fixes coreos/fedora-coreos-tracker#977

This change helps to address the problem of displaying a warning
about running Ignition twice while reprovisioning a bare metal
CoreOS instance with a persistent /var partition.
---
 .../system-generators/coreos-liveiso-autologin-generator       | 2 +-
 .../lib/systemd/system/coreos-check-ignition-config.service    | 3 +--
 overlay.d/15fcos/usr/libexec/coreos-check-ignition-config      | 2 +-
 3 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
index 7fe8a66332..c794f32066 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
@@ -85,7 +85,7 @@ fi
 # If the user supplied an Ignition config, they have the ability to enable
 # autologin themselves.  Don't automatically render them insecure, since
 # they might be running in production and booting via e.g. IPMI.
-if jq -e .userConfigProvided /var/lib/ignition/result.json &>/dev/null; then
+if jq -e .userConfigProvided /etc/.ignition-result.json &>/dev/null; then
     exit 0
 fi
 
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
index 93ece5adfd..569de69eee 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
@@ -3,8 +3,7 @@
 [Unit]
 Description=Check if Ignition config is provided
 Before=systemd-user-sessions.service
-RequiresMountsFor=/var/lib/ignition
-ConditionPathExists=/var/lib/ignition/result.json
+ConditionPathExists=/etc/.ignition-result.json
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
index 8992128cb9..794efe974e 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
@@ -1,7 +1,7 @@
 #!/usr/bin/bash
 set -euo pipefail
 
-IGNITION_RESULT=/var/lib/ignition/result.json
+IGNITION_RESULT=/etc/.ignition-result.json
 
 WARN='\033[0;33m' # yellow
 RESET='\033[0m' # reset

From d3191e1c19c2245cb024928af3e6b0a3938d0bb5 Mon Sep 17 00:00:00 2001
From: John Allberg <john@ayoy.se>
Date: Mon, 4 Oct 2021 22:37:58 +0200
Subject: [PATCH 0505/2157] #975: bootup: ostree-remount may race with
 systemd-backlight and fail

---
 .../systemd-backlight@.service.d/45-after-ostree-remount.conf | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/systemd-backlight@.service.d/45-after-ostree-remount.conf

diff --git a/overlay.d/05core/usr/lib/systemd/system/systemd-backlight@.service.d/45-after-ostree-remount.conf b/overlay.d/05core/usr/lib/systemd/system/systemd-backlight@.service.d/45-after-ostree-remount.conf
new file mode 100644
index 0000000000..fc1c8218a4
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/systemd-backlight@.service.d/45-after-ostree-remount.conf
@@ -0,0 +1,4 @@
+# Temporary fix for https://github.com/coreos/fedora-coreos-tracker/issues/975
+# until https://github.com/ostreedev/ostree/issues/2115 is fixed.
+[Unit]
+After=ostree-remount.service

From c6e142a19c796f2ac4a99591f1112529d66d618a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 14 Oct 2021 21:38:19 +0000
Subject: [PATCH 0506/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/528/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ea56f347dd..54bb11db5f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -400,7 +400,7 @@
       "evra": "3.23-4.fc34.aarch64"
     },
     "ignition": {
-      "evra": "2.12.0-1.fc34.aarch64"
+      "evra": "2.12.0-3.fc34.aarch64"
     },
     "inih": {
       "evra": "49-3.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-13T20:53:42Z",
+    "generated": "2021-10-14T20:53:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-12T22:35:37Z"
+        "generated": "2021-10-13T22:40:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-13T20:16:58Z"
+        "generated": "2021-10-14T16:14:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0ffe67f3a9..9bc9150c7d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,7 +406,7 @@
       "evra": "3.23-4.fc34.x86_64"
     },
     "ignition": {
-      "evra": "2.12.0-1.fc34.x86_64"
+      "evra": "2.12.0-3.fc34.x86_64"
     },
     "inih": {
       "evra": "49-3.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-13T20:53:34Z",
+    "generated": "2021-10-14T20:54:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-12T22:36:05Z"
+        "generated": "2021-10-13T22:38:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-13T20:17:30Z"
+        "generated": "2021-10-14T16:15:13Z"
       }
     }
   }

From 146b8d013b54e269464b82f80fe4997bfde7e1e3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 15 Oct 2021 09:05:46 -0400
Subject: [PATCH 0507/2157] denylist: snooze rpmostree.install-uninstall for
 F35/F36 streams

One of the remote yum repositories has an infra issue and is causing
the test to fail.

See https://github.com/coreos/fedora-coreos-tracker/issues/996
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1d59ef44e4..e785ff24f3 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -11,3 +11,9 @@
   platforms:
     - aws
     - gce
+- pattern: rpmostree.install-uninstall
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/996
+  snooze: 2021-10-17
+  streams:
+    - rawhide
+    - next-devel

From 8706b8b90b54c218a14766f2723e9a1f34e3b4e4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 15 Oct 2021 10:15:23 -0400
Subject: [PATCH 0508/2157] Move coreos-check-ignition-config from 15fcos to
 05core

There's nothing FCOS specific and we want this functionality in RHCOS
too (see https://bugzilla.redhat.com/show_bug.cgi?id=1977949).
---
 overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset | 2 ++
 .../usr/lib/systemd/system/coreos-check-ignition-config.service | 0
 .../{15fcos => 05core}/usr/libexec/coreos-check-ignition-config | 0
 overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset   | 2 --
 4 files changed, 2 insertions(+), 2 deletions(-)
 rename overlay.d/{15fcos => 05core}/usr/lib/systemd/system/coreos-check-ignition-config.service (100%)
 rename overlay.d/{15fcos => 05core}/usr/libexec/coreos-check-ignition-config (100%)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index a3ea8b5485..13963ef789 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -23,3 +23,5 @@ enable bootupd.socket
 # Ideally it should have been added as part of base Fedora - but since it was arch specific, it was not added: https://bugzilla.redhat.com/show_bug.cgi?id=1433859
 enable rtas_errd.service
 enable clevis-luks-askpass.path
+# Provide information if no ignition is provided
+enable coreos-check-ignition-config.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service
similarity index 100%
rename from overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ignition-config.service
rename to overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ignition-config b/overlay.d/05core/usr/libexec/coreos-check-ignition-config
similarity index 100%
rename from overlay.d/15fcos/usr/libexec/coreos-check-ignition-config
rename to overlay.d/05core/usr/libexec/coreos-check-ignition-config
diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index ad40cb9d2c..ad082ac367 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,7 +1,5 @@
 # User metrics client
 enable fedora-coreos-pinger.service
-# Provide information if no ignition is provided
-enable coreos-check-ignition-config.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service

From daf98c4839d72154032f47fce79ddf1f200e15c1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 15 Oct 2021 15:16:06 -0400
Subject: [PATCH 0509/2157] denylist: snooze ostree.hotfix in rawhide on
 aarch64

See https://github.com/coreos/fedora-coreos-tracker/issues/942
We need someone to dig into why.
---
 kola-denylist.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e785ff24f3..19810184e1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,3 +17,10 @@
   streams:
     - rawhide
     - next-devel
+- pattern: ostree.hotfix
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
+  snooze: 2021-10-25
+  streams:
+    - rawhide
+  arches:
+    - aarch64

From c7a822637d16f23ae6adb16e10082a19737b99d1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Oct 2021 21:26:39 +0000
Subject: [PATCH 0510/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/532/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 54bb11db5f..e6e4c4231c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -445,7 +445,7 @@
       "evra": "11-1.fc34.aarch64"
     },
     "jq": {
-      "evra": "1.6-7.fc34.aarch64"
+      "evra": "1.6-10.fc34.aarch64"
     },
     "json-c": {
       "evra": "0.14-8.fc34.aarch64"
@@ -1054,7 +1054,7 @@
       "evra": "15.4-4.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.4.1-1.fc34.aarch64"
+      "evra": "1:1.5.0-2.fc34.aarch64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.aarch64"
@@ -1184,7 +1184,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-14T20:53:49Z",
+    "generated": "2021-10-15T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
@@ -1193,7 +1193,7 @@
         "generated": "2021-10-13T22:40:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-14T16:14:43Z"
+        "generated": "2021-10-15T19:10:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9bc9150c7d..f554df54f0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -451,7 +451,7 @@
       "evra": "11-1.fc34.x86_64"
     },
     "jq": {
-      "evra": "1.6-7.fc34.x86_64"
+      "evra": "1.6-10.fc34.x86_64"
     },
     "json-c": {
       "evra": "0.14-8.fc34.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "15.4-4.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.4.1-1.fc34.x86_64"
+      "evra": "1:1.5.0-2.fc34.x86_64"
     },
     "slang": {
       "evra": "2.3.2-9.fc34.x86_64"
@@ -1196,7 +1196,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-14T20:54:00Z",
+    "generated": "2021-10-15T20:53:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
@@ -1205,7 +1205,7 @@
         "generated": "2021-10-13T22:38:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-14T16:15:13Z"
+        "generated": "2021-10-15T19:10:48Z"
       }
     }
   }

From ddbf20d775f93afe92f2d92a007e13e42b0e3fe8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 16 Oct 2021 21:23:55 +0000
Subject: [PATCH 0511/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/534/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e6e4c4231c..3cce723125 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -898,7 +898,7 @@
       "evra": "6.9.7.1-1.fc34.aarch64"
     },
     "openldap": {
-      "evra": "2.4.57-5.fc34.aarch64"
+      "evra": "2.4.57-6.fc34.aarch64"
     },
     "openssh": {
       "evra": "8.6p1-5.fc34.aarch64"
@@ -1150,7 +1150,7 @@
       "evra": "2.36.2-1.fc34.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3404-1.fc34.aarch64"
+      "evra": "2:8.2.3512-1.fc34.aarch64"
     },
     "which": {
       "evra": "2.21-26.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-15T20:53:20Z",
+    "generated": "2021-10-16T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-13T22:40:12Z"
+        "generated": "2021-10-15T21:35:12Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-15T19:10:17Z"
+        "generated": "2021-10-16T20:37:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f554df54f0..748d170fd8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -910,7 +910,7 @@
       "evra": "6.9.7.1-1.fc34.x86_64"
     },
     "openldap": {
-      "evra": "2.4.57-5.fc34.x86_64"
+      "evra": "2.4.57-6.fc34.x86_64"
     },
     "openssh": {
       "evra": "8.6p1-5.fc34.x86_64"
@@ -1162,7 +1162,7 @@
       "evra": "2.36.2-1.fc34.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3404-1.fc34.x86_64"
+      "evra": "2:8.2.3512-1.fc34.x86_64"
     },
     "which": {
       "evra": "2.21-26.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-15T20:53:27Z",
+    "generated": "2021-10-16T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-13T22:38:25Z"
+        "generated": "2021-10-15T21:36:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-15T19:10:48Z"
+        "generated": "2021-10-16T20:37:51Z"
       }
     }
   }

From bbd51c001c69ca7b9589f0be24f799844850e5ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 13 Sep 2021 15:19:35 +0200
Subject: [PATCH 0512/2157] overlay: Remove workaround keeping /boot RW for
 kdump

kdump now writes the temporary initrd in `/var/lib/kdump` and the
SELinux policy changes have landed in Fedora 34. Thus remove the
workaround keeping `/boot` read write when kdump support is requested.

This reverts commit 3167d834e18ab5bbf106cef91d5eaf1e155a4786.
---
 overlay.d/12kdump/statoverride                           | 2 --
 .../lib/systemd/system/kdump.service.d/remount-boot.conf | 9 ---------
 .../system/coreos-cleanup-ignition-config.service        | 2 --
 3 files changed, 13 deletions(-)
 delete mode 100644 overlay.d/12kdump/statoverride
 delete mode 100644 overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf

diff --git a/overlay.d/12kdump/statoverride b/overlay.d/12kdump/statoverride
deleted file mode 100644
index 27a95affe2..0000000000
--- a/overlay.d/12kdump/statoverride
+++ /dev/null
@@ -1,2 +0,0 @@
-# Config file for overriding permission bits on overlay files/dirs
-# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf b/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf
deleted file mode 100644
index 2b4d940847..0000000000
--- a/overlay.d/12kdump/usr/lib/systemd/system/kdump.service.d/remount-boot.conf
+++ /dev/null
@@ -1,9 +0,0 @@
-# https://bugzilla.redhat.com/show_bug.cgi?id=1918493
-# `/boot` is read-only, but `kdump.service` wants to 
-# places its generated initramfs alongside the default
-# initramfs under `/boot/ostree`.
-# Until `kdump` gains the ability to place its initramfs
-# elsewhere, temporarily remount `/boot` read-write before
-# the `kdump` initramfs is generated.
-[Service]
-ExecStartPre=/usr/bin/mount -o remount,rw /boot
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
index 2df7e2db1a..bb923418dd 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
@@ -6,8 +6,6 @@ Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/889
 ConditionKernelCommandLine=!ignition.firstboot
 RequiresMountsFor=/boot
 ConditionPathExists=/boot/ignition
-# We ship a kdump.service dropin that remounts /boot rw; avoid conflicts
-Before=kdump.service
 
 [Service]
 Type=oneshot

From 4a1c23936f9e2983df3776cd0b1d2338899d1bc4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 13 Sep 2021 16:55:57 +0200
Subject: [PATCH 0513/2157] Re-enable kdump test on QEMU, x86_64 & aarch64 only

This is currently broken on cloud platforms but should work in QEMU in
CI on x86_64 & aarch64.

See https://github.com/coreos/fedora-coreos-tracker/issues/860

This reverts commit 1e707cd85761a81f022f437de4dc0938732c1fc3.
---
 tests/kola/kdump/test.sh | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
index f6ece82706..f086b9de80 100755
--- a/tests/kola/kdump/test.sh
+++ b/tests/kola/kdump/test.sh
@@ -1,12 +1,9 @@
 #!/bin/bash
 set -xeuo pipefail
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# kola: {"minMemory": 4096, "tags": "skip-base-checks"}
-
-# ===== FIXME: Disabled due to broken CI
-echo "Test disabled"
-exit 0
-# =====
+# Only run on QEMU and x86_64 & aarch64 for now:
+# https://github.com/coreos/fedora-coreos-tracker/issues/860
+# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64 aarch64"}
 
 fatal() {
     echo "$@" >&2

From b8d254998767df0b60446aff21536446f9689c13 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 18 Oct 2021 12:55:44 -0400
Subject: [PATCH 0514/2157] Revert "denylist: snooze
 rpmostree.install-uninstall for F35/F36 streams"

This reverts commit 146b8d013b54e269464b82f80fe4997bfde7e1e3.
The underlying issue is now fixed. See
https://bugzilla.redhat.com/show_bug.cgi?id=2014514

Closes https://github.com/coreos/fedora-coreos-tracker/issues/996
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 19810184e1..8c0f5c988f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -11,12 +11,6 @@
   platforms:
     - aws
     - gce
-- pattern: rpmostree.install-uninstall
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/996
-  snooze: 2021-10-17
-  streams:
-    - rawhide
-    - next-devel
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
   snooze: 2021-10-25

From f960d0c053e39b3581cd51100b4a1b338a0aefb7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 18 Oct 2021 13:14:07 -0400
Subject: [PATCH 0515/2157] denylist: remove snooze on podman.base

The fix landed in podman v3.4.0.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/966
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8c0f5c988f..c436860a70 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,12 +5,6 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: podman.base
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/966
-  snooze: 2021-10-20
-  platforms:
-    - aws
-    - gce
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
   snooze: 2021-10-25

From 11b9f0bd1bc715972b3a70f6b2d506270788af41 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 18 Oct 2021 15:55:15 -0400
Subject: [PATCH 0516/2157] manifests/fedora-coreos-base: explicitly add
 xen-blkfront to initrd

Dracut currently fails to do this for 5.14 kernels, breaking boot on
Xen-based EC2 instances.

Addresses https://github.com/coreos/fedora-coreos-tracker/issues/997.
---
 manifests/fedora-coreos-base.yaml         |  4 ++++
 tests/kola/storage/tracker-997-workaround | 18 ++++++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100755 tests/kola/storage/tracker-997-workaround

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 8ffa894673..593c3141cd 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -21,6 +21,10 @@ initramfs-args:
   # Omit these since we don't use them
   - --omit=lvm
   - --omit=iscsi
+  # Dracut currently fails to add xen-blkfront driver on 5.14 kernels
+  # https://github.com/coreos/fedora-coreos-tracker/issues/997
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2010058
+  - --add-drivers=xen-blkfront
 
 # Be minimal
 recommends: false
diff --git a/tests/kola/storage/tracker-997-workaround b/tests/kola/storage/tracker-997-workaround
new file mode 100755
index 0000000000..6112248c52
--- /dev/null
+++ b/tests/kola/storage/tracker-997-workaround
@@ -0,0 +1,18 @@
+#!/bin/bash
+# kola: { "exclusive": false, "architectures": "x86_64" }
+
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if grep -q blk_mq_alloc_disk /usr/lib/dracut/modules.d/90kernel-modules/module-setup.sh; then
+    fatal "BZ 2010058 fixed; revert coreos/fedora-coreos-config#1289"
+fi
+ok "BZ 2010058 unfixed"

From e79dac32f69b519efa7271bc6dfe783eaa4cda2b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 19 Oct 2021 02:46:32 +0000
Subject: [PATCH 0517/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/540/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3cce723125..0ff9e860d7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -130,7 +130,7 @@
       "evra": "2:2.170.0-1.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.5.5-1.fc34.aarch64"
+      "evra": "1.5.7-1.fc34.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-1.fc34.aarch64"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.11-200.fc34.aarch64"
+      "evra": "5.14.12-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.11-200.fc34.aarch64"
+      "evra": "5.14.12-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.11-200.fc34.aarch64"
+      "evra": "5.14.12-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.aarch64"
@@ -811,10 +811,10 @@
       "evra": "2.5.1-28.fc34.aarch64"
     },
     "linux-firmware": {
-      "evra": "20210818-122.fc34.noarch"
+      "evra": "20210919-125.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210818-122.fc34.noarch"
+      "evra": "20210919-125.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.aarch64"
@@ -847,7 +847,7 @@
       "evra": "4.1-7.fc34.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.8-1.fc34.aarch64"
+      "evra": "20.10.9-1.fc34.aarch64"
     },
     "mokutil": {
       "evra": "2:0.4.0-4.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-16T20:53:23Z",
+    "generated": "2021-10-19T02:09:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-15T21:35:12Z"
+        "generated": "2021-10-17T21:32:58Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-16T20:37:18Z"
+        "generated": "2021-10-19T00:31:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 748d170fd8..a9afd8f185 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,7 +130,7 @@
       "evra": "2:2.170.0-1.fc34.noarch"
     },
     "containerd": {
-      "evra": "1.5.5-1.fc34.x86_64"
+      "evra": "1.5.7-1.fc34.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-1.fc34.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.11-200.fc34.x86_64"
+      "evra": "5.14.12-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.11-200.fc34.x86_64"
+      "evra": "5.14.12-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.11-200.fc34.x86_64"
+      "evra": "5.14.12-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210818-122.fc34.noarch"
+      "evra": "20210919-125.fc34.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210818-122.fc34.noarch"
+      "evra": "20210919-125.fc34.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-1.fc34.x86_64"
@@ -859,7 +859,7 @@
       "evra": "2:2.1-46.fc34.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.8-1.fc34.x86_64"
+      "evra": "20.10.9-1.fc34.x86_64"
     },
     "mokutil": {
       "evra": "2:0.4.0-4.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-16T20:53:20Z",
+    "generated": "2021-10-19T02:09:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-15T21:36:07Z"
+        "generated": "2021-10-17T21:37:18Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-16T20:37:51Z"
+        "generated": "2021-10-19T00:31:47Z"
       }
     }
   }

From d05e2ba1d7ca458862039dd34b1e8cb0e7354be9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 19 Oct 2021 15:15:55 +0200
Subject: [PATCH 0518/2157] tests/kdump: Only run on x86_64 for now

---
 tests/kola/kdump/test.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
index f086b9de80..747677b1e5 100755
--- a/tests/kola/kdump/test.sh
+++ b/tests/kola/kdump/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
 set -xeuo pipefail
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# Only run on QEMU and x86_64 & aarch64 for now:
+# Only run on QEMU x86_64 for now:
 # https://github.com/coreos/fedora-coreos-tracker/issues/860
-# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64 aarch64"}
+# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64"}
 
 fatal() {
     echo "$@" >&2

From 131d9bda82b64fd913e85e01a8d11241a9790c65 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 19 Oct 2021 15:49:05 -0400
Subject: [PATCH 0519/2157] denylist: don't run tracker #997 workaround test on
 rawhide/next-devel/next

The fix has already made it to rawhide. Instead of shuffling the
denylist every time it hits a new stream deny them all until it reaches
`testing-devel` at which point we can just remove the test entirely.
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c436860a70..04df9f6647 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,3 +12,9 @@
     - rawhide
   arches:
     - aarch64
+- pattern: ext.config.storage.tracker-997-workaround
+  tracker: https://github.com/coreos/fedora-coreos-config/pull/1289#issuecomment-947052725
+  streams:
+    - rawhide
+    - next-devel
+    - next

From a1f89fa997e9ff7324017fedb8ba18af4165e64f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Oct 2021 03:38:04 +0000
Subject: [PATCH 0520/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/543/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0ff9e860d7..014f2cc0a9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1108,22 +1108,22 @@
       "evra": "1.9.5p2-1.fc34.aarch64"
     },
     "systemd": {
-      "evra": "248.7-1.fc34.aarch64"
+      "evra": "248.9-1.fc34.aarch64"
     },
     "systemd-container": {
-      "evra": "248.7-1.fc34.aarch64"
+      "evra": "248.9-1.fc34.aarch64"
     },
     "systemd-libs": {
-      "evra": "248.7-1.fc34.aarch64"
+      "evra": "248.9-1.fc34.aarch64"
     },
     "systemd-pam": {
-      "evra": "248.7-1.fc34.aarch64"
+      "evra": "248.9-1.fc34.aarch64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.7-1.fc34.noarch"
+      "evra": "248.9-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.7-1.fc34.aarch64"
+      "evra": "248.9-1.fc34.aarch64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.aarch64"
@@ -1141,7 +1141,7 @@
       "evra": "3.1.0-1.fc34.aarch64"
     },
     "tzdata": {
-      "evra": "2021b-1.fc34.noarch"
+      "evra": "2021c-1.fc34.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-3.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-19T02:09:43Z",
+    "generated": "2021-10-20T03:00:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-17T21:32:58Z"
+        "generated": "2021-10-19T16:04:02Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-19T00:31:15Z"
+        "generated": "2021-10-19T15:53:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a9afd8f185..e768d7c9f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1120,22 +1120,22 @@
       "evra": "1.9.5p2-1.fc34.x86_64"
     },
     "systemd": {
-      "evra": "248.7-1.fc34.x86_64"
+      "evra": "248.9-1.fc34.x86_64"
     },
     "systemd-container": {
-      "evra": "248.7-1.fc34.x86_64"
+      "evra": "248.9-1.fc34.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.7-1.fc34.x86_64"
+      "evra": "248.9-1.fc34.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.7-1.fc34.x86_64"
+      "evra": "248.9-1.fc34.x86_64"
     },
     "systemd-rpm-macros": {
-      "evra": "248.7-1.fc34.noarch"
+      "evra": "248.9-1.fc34.noarch"
     },
     "systemd-udev": {
-      "evra": "248.7-1.fc34.x86_64"
+      "evra": "248.9-1.fc34.x86_64"
     },
     "tar": {
       "evra": "2:1.34-1.fc34.x86_64"
@@ -1153,7 +1153,7 @@
       "evra": "3.1.0-1.fc34.x86_64"
     },
     "tzdata": {
-      "evra": "2021b-1.fc34.noarch"
+      "evra": "2021c-1.fc34.noarch"
     },
     "userspace-rcu": {
       "evra": "0.12.1-3.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-19T02:09:52Z",
+    "generated": "2021-10-20T03:00:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-17T21:37:18Z"
+        "generated": "2021-10-19T16:09:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-19T00:31:47Z"
+        "generated": "2021-10-19T15:53:44Z"
       }
     }
   }

From 8770ae45d713a956b829c2ca74f255fa5a64968f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 20 Oct 2021 18:04:56 +0200
Subject: [PATCH 0521/2157] tests/kdump: Remove workraound keeping /boot RW

This workaround is no longer needed and this was forgotten from the
previous PR.

See https://github.com/coreos/fedora-coreos-config/pull/1212
---
 tests/kola/kdump/test.sh | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
index 747677b1e5..e2b7ad81c7 100755
--- a/tests/kola/kdump/test.sh
+++ b/tests/kola/kdump/test.sh
@@ -12,17 +12,6 @@ fatal() {
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      rhelver=$(. /etc/os-release && echo ${RHEL_VERSION:-})
-      if test -n "${rhelver}"; then
-        rhelminor=$(echo "${rhelver}" | cut -f 2 -d '.')
-        if test '!' -w /boot && test "${rhelminor}" -lt "5"; then
-          mkdir -p /etc/systemd/system/kdump.service.d
-          cat > /etc/systemd/system/kdump.service.d/rw.conf << 'EOF'
-[Service]
-ExecStartPre=mount -o remount,rw /boot
-EOF
-        fi
-      fi
       rpm-ostree kargs --append='crashkernel=300M'
       systemctl enable kdump.service
       /tmp/autopkgtest-reboot setcrashkernel

From c2a5d823d3d859bcf1c1778a65f540149b7ec441 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 20 Oct 2021 18:07:35 +0200
Subject: [PATCH 0522/2157] tests/kdump: Use crashkernel=256M

---
 tests/kola/kdump/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/test.sh
index e2b7ad81c7..ac36128e4b 100755
--- a/tests/kola/kdump/test.sh
+++ b/tests/kola/kdump/test.sh
@@ -12,7 +12,7 @@ fatal() {
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      rpm-ostree kargs --append='crashkernel=300M'
+      rpm-ostree kargs --append='crashkernel=256M'
       systemctl enable kdump.service
       /tmp/autopkgtest-reboot setcrashkernel
       ;;

From 572bbffeed8cc94fa49b34313af9b74d0a1375a6 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Tue, 19 Oct 2021 17:54:10 -0300
Subject: [PATCH 0523/2157] Bug 1990506: Add dracut module for scsi rules

These rules will create the /dev/disk/by-id/scsi-* symlinks in the initramfs.

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 .../dracut/modules.d/01scsi-rules/module-setup.sh   | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/01scsi-rules/module-setup.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/01scsi-rules/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/01scsi-rules/module-setup.sh
new file mode 100644
index 0000000000..d874dc8b27
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/01scsi-rules/module-setup.sh
@@ -0,0 +1,13 @@
+# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
+# ex: ts=8 sw=4 sts=4 et filetype=sh
+
+# 1) Fix for https://bugzilla.redhat.com/show_bug.cgi?id=1918244
+# On s390x systems with IBM 2810XIV discs multipath couldn't be configured
+# because SCSI_IDENT_* udev properties are not set at boot time
+# 2-) Fix for https://bugzilla.redhat.com/show_bug.cgi?id=1990506
+# Missing symlinks to disk install
+install() {
+    inst_simple sg_inq
+    inst_rules 61-scsi-sg3_id.rules
+    inst_rules 63-scsi-sg3_symlink.rules
+}

From e558ccd82e2427a14bc7c802a73475bfecea3794 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Oct 2021 21:36:09 +0000
Subject: [PATCH 0524/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/545/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 014f2cc0a9..c1e795be41 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -586,7 +586,7 @@
       "evra": "236-1.fc34.aarch64"
     },
     "libgusb": {
-      "evra": "0.3.7-1.fc34.aarch64"
+      "evra": "0.3.8-1.fc34.aarch64"
     },
     "libibverbs": {
       "evra": "37.0-1.fc34.aarch64"
@@ -799,7 +799,7 @@
       "evra": "2.9.12-4.fc34.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.2-1.fc34.aarch64"
+      "evra": "0.3.3-1.fc34.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-5.fc34.aarch64"
@@ -919,10 +919,10 @@
       "evra": "1.77-7.fc34.aarch64"
     },
     "ostree": {
-      "evra": "2021.4-2.fc34.aarch64"
+      "evra": "2021.5-2.fc34.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.4-2.fc34.aarch64"
+      "evra": "2021.5-2.fc34.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-3.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-20T03:00:43Z",
+    "generated": "2021-10-20T20:54:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-19T16:04:02Z"
+        "generated": "2021-10-20T03:44:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-19T15:53:11Z"
+        "generated": "2021-10-20T19:16:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e768d7c9f9..ca6930e7d6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -592,7 +592,7 @@
       "evra": "236-1.fc34.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.7-1.fc34.x86_64"
+      "evra": "0.3.8-1.fc34.x86_64"
     },
     "libibverbs": {
       "evra": "37.0-1.fc34.x86_64"
@@ -808,7 +808,7 @@
       "evra": "2.9.12-4.fc34.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.2-1.fc34.x86_64"
+      "evra": "0.3.3-1.fc34.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-5.fc34.x86_64"
@@ -931,10 +931,10 @@
       "evra": "1.77-7.fc34.x86_64"
     },
     "ostree": {
-      "evra": "2021.4-2.fc34.x86_64"
+      "evra": "2021.5-2.fc34.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.4-2.fc34.x86_64"
+      "evra": "2021.5-2.fc34.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-3.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-20T03:00:41Z",
+    "generated": "2021-10-20T20:54:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-19T16:09:04Z"
+        "generated": "2021-10-20T03:48:41Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-19T15:53:44Z"
+        "generated": "2021-10-20T19:17:06Z"
       }
     }
   }

From b05f8050bdb6d3399549cc16ab65cdc435eb8c71 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 21 Oct 2021 00:54:10 +0000
Subject: [PATCH 0525/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 4a947736f0..f52024f236 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,21 +9,9 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  coreos-installer:
-    evr: 0.10.1-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d52eb54ca
-      reason: https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.10.1-1.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d52eb54ca
-      reason: https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593
-      type: fast-track
   ignition:
     evr: 2.12.0-3.fc34
     metadata:
-      bodhi:  https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb8c91b157
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb8c91b157
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/977
       type: fast-track

From d53f7c263bcff49962d2b5fe4002119327d747d1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 21 Oct 2021 13:03:36 -0400
Subject: [PATCH 0526/2157] .cci.jenkinsfile: use buildfetch instead of
 buildprep

It's what all the cool kids are doing these days. See
https://github.com/coreos/coreos-assembler/pull/2495
---
 .cci.jenkinsfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 911e1936f3..2cca3b95b6 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -14,7 +14,7 @@ cosaPod {
         curl -LO https://raw.githubusercontent.com/coreos/fedora-coreos-releng-automation/main/scripts/download-overrides.py
         python3 download-overrides.py
         # prep from the latest builds so that we generate a diff on PRs that add packages
-        cosa buildprep https://builds.coreos.fedoraproject.org/prod/streams/${env.CHANGE_TARGET}/builds
+        cosa buildfetch --stream=${env.CHANGE_TARGET}
     """)
 
     // use a --parent-build arg so we can diff later and it matches prod

From c5b299ac67dc1e8791bb41ce4accfaa95c304da2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 21 Oct 2021 21:52:50 +0000
Subject: [PATCH 0527/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/548/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c1e795be41..e390da2f32 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -460,13 +460,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.12-200.fc34.aarch64"
+      "evra": "5.14.13-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.12-200.fc34.aarch64"
+      "evra": "5.14.13-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.12-200.fc34.aarch64"
+      "evra": "5.14.13-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-20T20:54:09Z",
+    "generated": "2021-10-21T20:53:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-20T03:44:55Z"
+        "generated": "2021-10-20T21:44:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-20T19:16:34Z"
+        "generated": "2021-10-21T16:44:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ca6930e7d6..d41c66ec85 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.12-200.fc34.x86_64"
+      "evra": "5.14.13-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.12-200.fc34.x86_64"
+      "evra": "5.14.13-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.12-200.fc34.x86_64"
+      "evra": "5.14.13-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-20T20:54:12Z",
+    "generated": "2021-10-21T20:53:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-20T03:48:41Z"
+        "generated": "2021-10-20T21:51:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-20T19:17:06Z"
+        "generated": "2021-10-21T16:44:55Z"
       }
     }
   }

From 7ee661b33a9ba8729150b42509a86acb4eb716e8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 23 Oct 2021 21:25:04 +0000
Subject: [PATCH 0528/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/551/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e390da2f32..daf030f071 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -931,7 +931,7 @@
       "evra": "0.23.22-3.fc34.aarch64"
     },
     "pam": {
-      "evra": "1.5.1-6.fc34.aarch64"
+      "evra": "1.5.1-7.fc34.aarch64"
     },
     "passwd": {
       "evra": "0.80-10.fc34.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "4.16.1.3-1.fc34.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.11-3.fc34.aarch64"
+      "evra": "2021.12-2.fc34.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.11-3.fc34.aarch64"
+      "evra": "2021.12-2.fc34.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-21T20:53:45Z",
+    "generated": "2021-10-23T20:53:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-20T21:44:28Z"
+        "generated": "2021-10-22T21:36:20Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-21T16:44:23Z"
+        "generated": "2021-10-23T03:15:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d41c66ec85..2010eb7ad4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -943,7 +943,7 @@
       "evra": "0.23.22-3.fc34.x86_64"
     },
     "pam": {
-      "evra": "1.5.1-6.fc34.x86_64"
+      "evra": "1.5.1-7.fc34.x86_64"
     },
     "passwd": {
       "evra": "0.80-10.fc34.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "4.16.1.3-1.fc34.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.11-3.fc34.x86_64"
+      "evra": "2021.12-2.fc34.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.11-3.fc34.x86_64"
+      "evra": "2021.12-2.fc34.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.16.1.3-1.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-21T20:53:48Z",
+    "generated": "2021-10-23T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-20T21:51:34Z"
+        "generated": "2021-10-22T21:40:43Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-21T16:44:55Z"
+        "generated": "2021-10-23T03:15:57Z"
       }
     }
   }

From 2380e88f37fe747814e8ab51093e6afc66920680 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 24 Oct 2021 00:49:59 +0000
Subject: [PATCH 0529/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f52024f236..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ignition:
-    evr: 2.12.0-3.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb8c91b157
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/977
-      type: fast-track
+packages: {}

From 06ae4e521cc5d7ce152f65ca3f57c47b7ca386ba Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Thu, 21 Oct 2021 12:41:10 -0400
Subject: [PATCH 0530/2157] Fix: coreos-livepxe-rootfs to print rootfs_url

---
 .../35coreos-live/coreos-livepxe-rootfs.sh          | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index 483587efa5..9f59a8dbd7 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -26,8 +26,9 @@ elif [[ -n "${rootfs_url}" ]]; then
     if [[ ${rootfs_url} != http:* && ${rootfs_url} != https:* ]]; then
         # Don't commit to supporting protocols we might not want to expose in
         # the long term.
-        echo "coreos.live.rootfs_url= supports HTTP and HTTPS only." >&2
-        echo "Please fix your PXE configuration." >&2
+        echo "Unsupported scheme for image specified by:" >&2
+        echo "coreos.live.rootfs_url=${rootfs_url}" >&2
+        echo "Only HTTP and HTTPS are supported. Please fix your PXE configuration." >&2
         exit 1
     fi
 
@@ -39,7 +40,8 @@ elif [[ -n "${rootfs_url}" ]]; then
     # We retry forever, matching Ignition's semantics.
     curl_common_args="--silent --show-error --insecure --location"
     while ! curl --head $curl_common_args "${rootfs_url}" >/dev/null; do
-        echo "Couldn't establish connectivity with the server specified by coreos.live.rootfs_url=" >&2
+        echo "Couldn't establish connectivity with the server specified by:" >&2
+        echo "coreos.live.rootfs_url=${rootfs_url}" >&2
         echo "Retrying in 5s..." >&2
         sleep 5
     done
@@ -54,14 +56,15 @@ elif [[ -n "${rootfs_url}" ]]; then
     if ! curl $curl_common_args --retry 5 "${rootfs_url}" | \
             rdcore stream-hash /etc/coreos-live-want-rootfs | \
             bsdtar -xf - -C / ; then
-        echo "Couldn't fetch, verify, and unpack image specified by coreos.live.rootfs_url=" >&2
+        echo "Couldn't fetch, verify, and unpack image specified by:" >&2
+        echo "coreos.live.rootfs_url=${rootfs_url}" >&2
         echo "Check that the URL is correct and that the rootfs version matches the initramfs." >&2
         exit 1
     fi
 else
     # Nothing.  Fail.
     echo "No rootfs image found.  Modify your PXE configuration to add the rootfs" >&2
-    echo "image as a second initrd, or use the coreos.live.rootfs_url= kernel parameter" >&2
+    echo "image as a second initrd, or use the coreos.live.rootfs_url kernel parameter" >&2
     echo "to specify an HTTP or HTTPS URL to the rootfs." >&2
     exit 1
 fi

From 4456637b5dec49615a08a54c85bc9c7db285508a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 25 Oct 2021 21:46:29 +0000
Subject: [PATCH 0531/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/555/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index daf030f071..31ffe5d4b1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-1.fc34.noarch"
+      "evra": "2:2.170.0-2.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.7-1.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-23T20:53:22Z",
+    "generated": "2021-10-25T20:53:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-22T21:36:20Z"
+        "generated": "2021-10-23T21:34:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-23T03:15:24Z"
+        "generated": "2021-10-25T15:02:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2010eb7ad4..893ccc4e5e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "0.21.2-1.fc34.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-1.fc34.noarch"
+      "evra": "2:2.170.0-2.fc34.noarch"
     },
     "containerd": {
       "evra": "1.5.7-1.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-23T20:53:20Z",
+    "generated": "2021-10-25T20:53:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-22T21:40:43Z"
+        "generated": "2021-10-23T21:37:49Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-23T03:15:57Z"
+        "generated": "2021-10-25T15:02:40Z"
       }
     }
   }

From d42e52eb339dfb7182cd39266706eb67b0024ef4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:02:23 -0400
Subject: [PATCH 0532/2157] generator-lib.sh: add `karg` helper

Lifted from `coreos-boot-edit.sh`.

Prep for future patch.
---
 overlay.d/05core/usr/lib/coreos/generator-lib.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/overlay.d/05core/usr/lib/coreos/generator-lib.sh b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
index b133e5ac67..dd19ad813d 100644
--- a/overlay.d/05core/usr/lib/coreos/generator-lib.sh
+++ b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
@@ -17,3 +17,14 @@ have_karg() {
     done
     return 1
 }
+
+karg() {
+    local name="$1" value="${2:-}"
+    local cmdline=( $(</proc/cmdline) )
+    for arg in "${cmdline[@]}"; do
+        if [[ "${arg%%=*}" == "${name}" ]]; then
+            value="${arg#*=}"
+        fi
+    done
+    echo "${value}"
+}

From 1a4cec57679f32aec951b22b7337a1319e5343a5 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:02:39 -0400
Subject: [PATCH 0533/2157] coreos-boot-mount-generator: handle rd.multipath=0

With the new `karg` helper, this is trivial to do now.
---
 .../lib/systemd/system-generators/coreos-boot-mount-generator | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index a742ff7751..58802cdca9 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -67,8 +67,8 @@ EOF
 # Otherwise, use the usual by-label symlink.
 # See discussion in https://github.com/coreos/fedora-coreos-config/pull/1022
 bootdev=/dev/disk/by-label/boot
-# TODO add equivalent of getargbool() so we handle rd.multipath=0
-if have_karg rd.multipath; then
+mpath=$(karg rd.multipath)
+if [ -n "${mpath}" ] && [ "${mpath}" != 0 ]; then
     bootdev=/dev/disk/by-label/dm-mpath-boot
 fi
 

From 117429c9ed77da167a5e765d9399ca55a3ebf299 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:14:45 -0400
Subject: [PATCH 0534/2157] coreos-boot-edit: assume `rdcore` is in PATH

There are already other places which assume that `rdcore` is in `PATH`
so drop the full path to be more generic.
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index 3b16813b46..8fca954497 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -31,5 +31,5 @@ rm -vrf ${initramfs_firstboot_network_dir}
 # append rootmap kargs to the BLS configs.
 root=$(karg root)
 if [ -z "${root}" ]; then
-    /usr/bin/rdcore rootmap /sysroot --boot-mount ${bootmnt}
+    rdcore rootmap /sysroot --boot-mount ${bootmnt}
 fi

From c9b543878198f99a4e4de9429fa2398d26839f7e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:31:33 -0400
Subject: [PATCH 0535/2157] coreos-boot-mount-generator: support boot= karg

This is analogous to `systemd-fstab-generator` parsing `root=` kargs.
There is a precedent for this in the FIPS module. In fact, we lift code
from there to make sure we're API compatible.

The goal of supporting a `boot` karg is to eliminate possible races for
the `by-label/boot` symlink in the real root if multiple exist.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/976
---
 .../coreos-boot-mount-generator               | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index 58802cdca9..43dfcd087d 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -61,15 +61,47 @@ EOF
     add_wants "${unit_name}"
 }
 
+# Copied from
+# https://github.com/dracutdevs/dracut/blob/9491e599282d0d6bb12063eddbd192c0d2ce8acf/modules.d/99base/dracut-lib.sh#L586
+# rather than sourcing it.
+label_uuid_to_dev() {
+    local _dev
+    _dev="${1#block:}"
+    case "$_dev" in
+        LABEL=*)
+            echo "/dev/disk/by-label/$(echo "${_dev#LABEL=}" | sed 's,/,\\x2f,g;s, ,\\x20,g')"
+            ;;
+        PARTLABEL=*)
+            echo "/dev/disk/by-partlabel/$(echo "${_dev#PARTLABEL=}" | sed 's,/,\\x2f,g;s, ,\\x20,g')"
+            ;;
+        UUID=*)
+            echo "/dev/disk/by-uuid/$(echo "${_dev#UUID=}" | tr "[:upper:]" "[:lower:]")"
+            ;;
+        PARTUUID=*)
+            echo "/dev/disk/by-partuuid/$(echo "${_dev#PARTUUID=}" | tr "[:upper:]" "[:lower:]")"
+            ;;
+    esac
+}
+
 # If the root device is multipath, hook up /boot to use that too,
 # based on our custom udev rules in 90-coreos-device-mapper.rules
 # that creates "label found on mpath" links.
 # Otherwise, use the usual by-label symlink.
 # See discussion in https://github.com/coreos/fedora-coreos-config/pull/1022
 bootdev=/dev/disk/by-label/boot
+bootkarg=$(karg boot)
 mpath=$(karg rd.multipath)
 if [ -n "${mpath}" ] && [ "${mpath}" != 0 ]; then
     bootdev=/dev/disk/by-label/dm-mpath-boot
+# Newer nodes inject boot=UUID=..., but we support a larger subset of the dracut/fips API
+elif [ -n "${bootkarg}" ]; then
+    # Adapted from https://github.com/dracutdevs/dracut/blob/9491e599282d0d6bb12063eddbd192c0d2ce8acf/modules.d/01fips/fips.sh#L17
+    case "$bootkarg" in
+        LABEL=* | UUID=* | PARTUUID=* | PARTLABEL=*)
+            bootdev="$(label_uuid_to_dev "$bootkarg")";;
+        /dev/*) bootdev=$bootkarg;;
+        *) echo "Unknown boot karg '${bootkarg}'; falling back to ${bootdev}";;
+    esac
 fi
 
 # We mount read-only by default mostly to protect

From 13fa14b3603dcabb4576df77984b3dae2f79037e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:34:40 -0400
Subject: [PATCH 0536/2157] coreos-boot-edit: inject `boot=` karg on first boot

This ensures that the rootfs will always mount the correct boot
filesystem in the future (see previous patch).

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/976
---
 .../modules.d/35coreos-ignition/coreos-boot-edit.sh | 13 +++++++++++++
 tests/kola/root-reprovision/luks/test.sh            |  4 ++++
 2 files changed, 17 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index 8fca954497..1f759b4599 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -33,3 +33,16 @@ root=$(karg root)
 if [ -z "${root}" ]; then
     rdcore rootmap /sysroot --boot-mount ${bootmnt}
 fi
+
+# And similarly, only inject boot= if it's not already present.
+boot=$(karg boot)
+if [ -z "${boot}" ]; then
+    # XXX: `rdcore rootmap --inject-boot-karg` or maybe `rdcore bootmap`
+    eval $(blkid -o export "${bootdev}")
+    if [ -z "${UUID}" ]; then
+        # This should never happen
+        echo "Boot filesystem ${bootdev} has no UUID" >&2
+        exit 1
+    fi
+    rdcore kargs --boot-mount ${bootmnt} --append boot=UUID=${UUID}
+fi
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 656b6feee6..0fbde10329 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -42,6 +42,10 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       grep root=UUID= /proc/cmdline
       grep rd.luks.name= /proc/cmdline
       ok "found root kargs"
+
+      # while we're here, sanity-check that we have a boot=UUID karg too
+      grep boot=UUID= /proc/cmdline
+      ok "found boot karg"
       ;;
   *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
 esac

From 6b385ce2879d250028641f6d81254f39da03ec33 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 1 Oct 2021 17:37:54 -0400
Subject: [PATCH 0537/2157] coreos-boot-edit: persist boot UUID in /run

The new `boot` karg will only show up on the second boot and onwards. So
for the first boot, let's persist it in `/run` to tell
`coreos-boot-mount-generator` the UUID to use.
---
 .../dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh | 3 +++
 .../systemd/system-generators/coreos-boot-mount-generator  | 3 +++
 tests/kola/misc-ro                                         | 7 +++++++
 tests/kola/root-reprovision/luks/test.sh                   | 7 +++++++
 4 files changed, 20 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index 1f759b4599..4116f03217 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -45,4 +45,7 @@ if [ -z "${boot}" ]; then
         exit 1
     fi
     rdcore kargs --boot-mount ${bootmnt} --append boot=UUID=${UUID}
+    # but also put it in /run for the first boot real root mount
+    mkdir -p /run/coreos
+    echo "${UUID}" > /run/coreos/bootfs_uuid
 fi
diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
index 43dfcd087d..5724fdcb26 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-boot-mount-generator
@@ -102,6 +102,9 @@ elif [ -n "${bootkarg}" ]; then
         /dev/*) bootdev=$bootkarg;;
         *) echo "Unknown boot karg '${bootkarg}'; falling back to ${bootdev}";;
     esac
+# This is used for the first boot only
+elif [ -f /run/coreos/bootfs_uuid ]; then
+    bootdev=/dev/disk/by-uuid/$(cat /run/coreos/bootfs_uuid)
 fi
 
 # We mount read-only by default mostly to protect
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 05d91c2927..82a2e55c0c 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,3 +198,10 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
+
+# Sanity-check that boot is mounted by UUID
+if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
+  systemctl cat boot.mount
+  fatal "boot mounted not by UUID"
+fi
+ok "boot mounted by UUID"
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 0fbde10329..86f9622d16 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -27,6 +27,13 @@ if ! grep prjquota <<< "${rootflags}"; then
 fi
 ok "root mounted with prjquota"
 
+# while we're here, sanity-check that boot is mounted by UUID
+if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
+  systemctl cat boot.mount
+  fatal "boot mounted not by UUID"
+fi
+ok "boot mounted by UUID"
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       # check that ignition-ostree-growfs ran

From 64c97fa3ae7234fd35db4d32115085ec151beee0 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 26 Oct 2021 13:31:03 -0400
Subject: [PATCH 0538/2157] tests: add a simple reboot test

All our reboot tests currently target some special feature which
significantly modifies the system. But we should also have a reboot test
which is just using the defaults. This patch adds such a test.
---
 tests/kola/misc-ro        |  7 ------
 tests/kola/reboot/test.sh | 47 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 47 insertions(+), 7 deletions(-)
 create mode 100755 tests/kola/reboot/test.sh

diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
index 82a2e55c0c..05d91c2927 100755
--- a/tests/kola/misc-ro
+++ b/tests/kola/misc-ro
@@ -198,10 +198,3 @@ if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-commo
 fi
 rm -r ${tmpd}
 ok "All initrd scripts are executable"
-
-# Sanity-check that boot is mounted by UUID
-if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
-  systemctl cat boot.mount
-  fatal "boot mounted not by UUID"
-fi
-ok "boot mounted by UUID"
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
new file mode 100755
index 0000000000..06d3e12c03
--- /dev/null
+++ b/tests/kola/reboot/test.sh
@@ -0,0 +1,47 @@
+#!/bin/bash
+set -xeuo pipefail
+# kola: {"platforms": "qemu"}
+
+# These are read-only not-necessarily-related checks that verify default system
+# configuration both on first and subsequent boots.
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# /var
+varsrc=$(findmnt -nvr /var -o SOURCE)
+rootsrc=$(findmnt -nvr / -o SOURCE)
+[[ $(realpath "$varsrc") == $(realpath "$rootsrc") ]]
+ok "/var is backed by rootfs"
+
+# sanity-check that boot is mounted by UUID
+if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
+  systemctl cat boot.mount
+  fatal "boot mounted not by UUID"
+fi
+ok "boot mounted by UUID"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      ok "first boot"
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      # check for expected default kargs
+      grep root=UUID= /proc/cmdline
+      ok "found root karg"
+
+      grep boot=UUID= /proc/cmdline
+      ok "found boot karg"
+
+      ok "second boot"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From c80220bd568a5f53000104f01edf6530dc303896 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 27 Oct 2021 21:38:35 +0000
Subject: [PATCH 0539/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/559/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 31ffe5d4b1..f770420aef 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -160,10 +160,10 @@
       "evra": "2.9.6-27.fc34.aarch64"
     },
     "criu": {
-      "evra": "3.16-2.fc34.aarch64"
+      "evra": "3.16.1-2.fc34.aarch64"
     },
     "criu-libs": {
-      "evra": "3.16-2.fc34.aarch64"
+      "evra": "3.16.1-2.fc34.aarch64"
     },
     "crun": {
       "evra": "1.2-1.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-25T20:53:55Z",
+    "generated": "2021-10-27T20:54:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-23T21:34:13Z"
+        "generated": "2021-10-26T12:27:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-25T15:02:07Z"
+        "generated": "2021-10-27T14:59:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 893ccc4e5e..feabac7b90 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -160,10 +160,10 @@
       "evra": "2.9.6-27.fc34.x86_64"
     },
     "criu": {
-      "evra": "3.16-2.fc34.x86_64"
+      "evra": "3.16.1-2.fc34.x86_64"
     },
     "criu-libs": {
-      "evra": "3.16-2.fc34.x86_64"
+      "evra": "3.16.1-2.fc34.x86_64"
     },
     "crun": {
       "evra": "1.2-1.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-25T20:53:57Z",
+    "generated": "2021-10-27T20:54:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-23T21:37:49Z"
+        "generated": "2021-10-26T12:35:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-25T15:02:40Z"
+        "generated": "2021-10-27T15:00:28Z"
       }
     }
   }

From 31d3ff49b8ca02e7d8225b7f271bbda7c4511254 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 28 Oct 2021 20:43:01 -0400
Subject: [PATCH 0540/2157] Revert "manifests/fedora-coreos-base: explicitly
 add xen-blkfront to initrd"

This reverts commit 11b9f0bd1bc715972b3a70f6b2d506270788af41.

The fix has landed in all active releases of Fedora now.
---
 manifests/fedora-coreos-base.yaml         |  4 ----
 tests/kola/storage/tracker-997-workaround | 18 ------------------
 2 files changed, 22 deletions(-)
 delete mode 100755 tests/kola/storage/tracker-997-workaround

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 593c3141cd..8ffa894673 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -21,10 +21,6 @@ initramfs-args:
   # Omit these since we don't use them
   - --omit=lvm
   - --omit=iscsi
-  # Dracut currently fails to add xen-blkfront driver on 5.14 kernels
-  # https://github.com/coreos/fedora-coreos-tracker/issues/997
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2010058
-  - --add-drivers=xen-blkfront
 
 # Be minimal
 recommends: false
diff --git a/tests/kola/storage/tracker-997-workaround b/tests/kola/storage/tracker-997-workaround
deleted file mode 100755
index 6112248c52..0000000000
--- a/tests/kola/storage/tracker-997-workaround
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false, "architectures": "x86_64" }
-
-set -xeuo pipefail
-
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
-if grep -q blk_mq_alloc_disk /usr/lib/dracut/modules.d/90kernel-modules/module-setup.sh; then
-    fatal "BZ 2010058 fixed; revert coreos/fedora-coreos-config#1289"
-fi
-ok "BZ 2010058 unfixed"

From 05b7871593592e12bc6b77c91a13bcf0830f7c0a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 28 Oct 2021 20:45:51 -0400
Subject: [PATCH 0541/2157] Revert "denylist: don't run tracker #997 workaround
 test on rawhide/next-devel/next"

Now that we've removed the test we don't need to denylist it on certain
streams.

This reverts commit 131d9bda82b64fd913e85e01a8d11241a9790c65.
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 04df9f6647..c436860a70 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,9 +12,3 @@
     - rawhide
   arches:
     - aarch64
-- pattern: ext.config.storage.tracker-997-workaround
-  tracker: https://github.com/coreos/fedora-coreos-config/pull/1289#issuecomment-947052725
-  streams:
-    - rawhide
-    - next-devel
-    - next

From f390743bf74d6cfcd336864b57b8deeb10d8f6d3 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Thu, 28 Oct 2021 16:43:28 -0400
Subject: [PATCH 0542/2157] [testing-devel] overrides: Fast-track
 dracut-055-6.fc34

---
 manifest-lock.overrides.yaml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..5ee2096a90 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,22 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  dracut:
+    evr: 055-6.fc34
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943
+      type: fast-track
+  dracut-network:                                                                       
+    evr: 055-6.fc34                                                             
+    metadata:                                                                   
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1     
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943        
+      type: fast-track
+  dracut-squash:
+    evr: 055-6.fc34                                                             
+    metadata:                                                                   
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1     
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943        
+      type: fast-track

From 611d6d198605963090862e33bc1da2d463210e6a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Oct 2021 14:42:33 +0000
Subject: [PATCH 0543/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/565/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f770420aef..fa76f21dd7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -232,13 +232,13 @@
       "evra": "4.2-1.fc34.aarch64"
     },
     "dracut": {
-      "evra": "055-3.fc34.aarch64"
+      "evra": "055-6.fc34.aarch64"
     },
     "dracut-network": {
-      "evra": "055-3.fc34.aarch64"
+      "evra": "055-6.fc34.aarch64"
     },
     "dracut-squash": {
-      "evra": "055-3.fc34.aarch64"
+      "evra": "055-6.fc34.aarch64"
     },
     "e2fsprogs": {
       "evra": "1.45.6-5.fc34.aarch64"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.13-200.fc34.aarch64"
+      "evra": "5.14.14-200.fc34.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.13-200.fc34.aarch64"
+      "evra": "5.14.14-200.fc34.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.13-200.fc34.aarch64"
+      "evra": "5.14.14-200.fc34.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.aarch64"
@@ -958,10 +958,10 @@
       "evra": "1.7.3-6.fc34.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.0-1.fc34.aarch64"
+      "evra": "3:3.4.1-1.fc34.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.0-1.fc34.aarch64"
+      "evra": "3:3.4.1-1.fc34.aarch64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.aarch64"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-27T20:54:19Z",
+    "generated": "2021-10-29T14:03:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-26T12:27:59Z"
+        "generated": "2021-10-29T03:29:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-27T14:59:55Z"
+        "generated": "2021-10-28T19:18:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index feabac7b90..2c55ba322c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -232,13 +232,13 @@
       "evra": "4.2-1.fc34.x86_64"
     },
     "dracut": {
-      "evra": "055-3.fc34.x86_64"
+      "evra": "055-6.fc34.x86_64"
     },
     "dracut-network": {
-      "evra": "055-3.fc34.x86_64"
+      "evra": "055-6.fc34.x86_64"
     },
     "dracut-squash": {
-      "evra": "055-3.fc34.x86_64"
+      "evra": "055-6.fc34.x86_64"
     },
     "e2fsprogs": {
       "evra": "1.45.6-5.fc34.x86_64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-2.fc34.noarch"
     },
     "kernel": {
-      "evra": "5.14.13-200.fc34.x86_64"
+      "evra": "5.14.14-200.fc34.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.13-200.fc34.x86_64"
+      "evra": "5.14.14-200.fc34.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.13-200.fc34.x86_64"
+      "evra": "5.14.14-200.fc34.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-4.fc34.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.7.3-6.fc34.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.0-1.fc34.x86_64"
+      "evra": "3:3.4.1-1.fc34.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.0-1.fc34.x86_64"
+      "evra": "3:3.4.1-1.fc34.x86_64"
     },
     "policycoreutils": {
       "evra": "3.2-1.fc34.x86_64"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-27T20:54:19Z",
+    "generated": "2021-10-29T14:03:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-26T12:35:29Z"
+        "generated": "2021-10-29T03:30:48Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-27T15:00:28Z"
+        "generated": "2021-10-28T19:18:59Z"
       }
     }
   }

From 866164900970e5fc1fd5012758b1b5583782a38f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 29 Oct 2021 17:29:28 +0200
Subject: [PATCH 0544/2157] kola-denylist: Disable ext.config.kdump

See https://github.com/coreos/fedora-coreos-tracker/issues/860
---
 kola-denylist.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c436860a70..eb6d3e25d5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,3 +12,5 @@
     - rawhide
   arches:
     - aarch64
+- pattern: ext.config.kdump
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/860

From 666a15b5ec2c7ebcd65ce9b357067c27de5dc832 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 31 Oct 2021 21:31:18 +0000
Subject: [PATCH 0545/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/572/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fa76f21dd7..fd6eba321e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1030,10 +1030,10 @@
       "evra": "4.8-7.fc34.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.21-1.fc34.noarch"
+      "evra": "34.22-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.21-1.fc34.noarch"
+      "evra": "34.22-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-29T14:03:08Z",
+    "generated": "2021-10-31T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-29T03:29:13Z"
+        "generated": "2021-10-30T02:33:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-28T19:18:03Z"
+        "generated": "2021-10-31T00:58:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2c55ba322c..19de7312fe 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1042,10 +1042,10 @@
       "evra": "4.8-7.fc34.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.21-1.fc34.noarch"
+      "evra": "34.22-1.fc34.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.21-1.fc34.noarch"
+      "evra": "34.22-1.fc34.noarch"
     },
     "setup": {
       "evra": "2.13.7-3.fc34.noarch"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-29T14:03:06Z",
+    "generated": "2021-10-31T20:53:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-29T03:30:48Z"
+        "generated": "2021-10-30T02:40:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-28T19:18:59Z"
+        "generated": "2021-10-31T00:59:22Z"
       }
     }
   }

From cae54819184566329b62316da736167d33cf2480 Mon Sep 17 00:00:00 2001
From: sedlund <sedlund@users.noreply.github.com>
Date: Fri, 29 Oct 2021 15:21:31 -0500
Subject: [PATCH 0546/2157] tests/kola: provision swap before root and resize
 to fill

This tests creating a defined sized partition before the root
filesystem, moving the default root partition from number 4 to 5
and allowing it to fill the rest of the device.  It also tests the
creation and mounting of swap.
---
 .../swap-before-root/config.bu                | 23 +++++++++++++
 .../root-reprovision/swap-before-root/test.sh | 33 +++++++++++++++++++
 2 files changed, 56 insertions(+)
 create mode 100644 tests/kola/root-reprovision/swap-before-root/config.bu
 create mode 100755 tests/kola/root-reprovision/swap-before-root/test.sh

diff --git a/tests/kola/root-reprovision/swap-before-root/config.bu b/tests/kola/root-reprovision/swap-before-root/config.bu
new file mode 100644
index 0000000000..63fa6d2e9c
--- /dev/null
+++ b/tests/kola/root-reprovision/swap-before-root/config.bu
@@ -0,0 +1,23 @@
+variant: fcos
+version: 1.4.0
+
+storage:
+  disks:
+    - device: /dev/vda
+      partitions:
+        - number: 4
+          label: swap
+          size_mib: 512
+          wipe_partition_entry: true
+        - number: 5
+          label: root
+  filesystems:
+    - device: /dev/disk/by-partlabel/swap
+      label: swap
+      format: swap
+      wipe_filesystem: true
+      with_mount_unit: true
+    - device: /dev/disk/by-partlabel/root
+      label: root
+      format: xfs
+      wipe_filesystem: true
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
new file mode 100755
index 0000000000..33ba89850d
--- /dev/null
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+# kola: {"platforms": "qemu", "minMemory": 4096}
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+swapstatus=$(systemctl is-active dev-disk-by\\x2dpartlabel-swap.swap)
+[[ ${swapstatus} == active ]]
+ok "swap is active"
+
+fstype=$(findmnt -nvr / -o FSTYPE)
+[[ ${fstype} == xfs ]]
+ok "source is xfs"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      # reboot once to sanity-check we can find root on second boot
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      grep root=UUID= /proc/cmdline
+      ok "found root karg"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From f04d50e4776c9141a30a7f5f0bd07ceb6aec25a4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 Nov 2021 21:11:22 +0000
Subject: [PATCH 0547/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/576/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fd6eba321e..0b2cdd440d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-31T20:53:20Z",
+    "generated": "2021-11-02T21:10:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:46Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-30T02:33:42Z"
+        "generated": "2021-11-01T21:45:54Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-31T00:58:49Z"
+        "generated": "2021-11-02T00:59:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 19de7312fe..16e146cb70 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-10-31T20:53:14Z",
+    "generated": "2021-11-02T21:11:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-04-23T10:47:57Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-10-30T02:40:25Z"
+        "generated": "2021-11-01T21:44:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-10-31T00:59:22Z"
+        "generated": "2021-11-02T00:59:44Z"
       }
     }
   }

From f2df7208b3485b3fb27c7cd49edb538e32dac13c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 2 Nov 2021 14:31:40 -0400
Subject: [PATCH 0548/2157] tests: add test for default networking
 configuration

Since we depend so much on the default networking configurations let's
alert ourselves when any default networking configuration changes in
NetworkManager. This allows us to react and adjust to the changes
(if needed) instead of finding out later that problems were introduced.
some context in: https://github.com/coreos/fedora-coreos-tracker/issues/1000
---
 .../default-network-behavior-change/test.sh   | 166 ++++++++++++++++++
 1 file changed, 166 insertions(+)
 create mode 100755 tests/kola/networking/default-network-behavior-change/test.sh

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
new file mode 100755
index 0000000000..a7fb0d05e4
--- /dev/null
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -0,0 +1,166 @@
+#!/bin/bash
+# No need to run on any other platform than QEMU.
+# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+set -xeuo pipefail
+
+# Since we depend so much on the default networking configurations let's
+# alert ourselves when any default networking configuration changes in
+# NetworkManager. This allows us to react and adjust to the changes
+# (if needed) instead of finding out later that problems were introduced.
+# some context in: https://github.com/coreos/fedora-coreos-tracker/issues/1000
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# EXPECTED_INITRD_NETWORK_CFG1
+#   - used on FCOS 35+ releases
+EXPECTED_INITRD_NETWORK_CFG1="[connection]
+id=Wired Connection
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-retries=1
+multi-connect=3
+permissions=
+
+[ethernet]
+mac-address-blacklist=
+
+[ipv4]
+dhcp-timeout=90
+dns-search=
+method=auto
+required-timeout=20000
+
+[ipv6]
+addr-gen-mode=eui64
+dhcp-timeout=90
+dns-search=
+method=auto
+
+[proxy]
+
+[user]
+org.freedesktop.NetworkManager.origin=nm-initrd-generator"
+# EXPECTED_INITRD_NETWORK_CFG2
+#   - used on all RHCOS releases
+#   - used on FCOS F34
+EXPECTED_INITRD_NETWORK_CFG2="[connection]
+id=Wired Connection
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-retries=1
+multi-connect=3
+permissions=
+
+[ethernet]
+mac-address-blacklist=
+
+[ipv4]
+dhcp-timeout=90
+dns-search=
+method=auto
+
+[ipv6]
+addr-gen-mode=eui64
+dhcp-timeout=90
+dns-search=
+method=auto
+
+[proxy]"
+
+# EXPECTED_REALROOT_NETWORK_CFG1:
+#   - used on all FCOS/RHCOS releases
+EXPECTED_REALROOT_NETWORK_CFG1="[connection]
+id=Wired connection 1
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-priority=-999
+interface-name=xxxx
+permissions=
+timestamp=xxxxxxxxxx
+
+[ethernet]
+mac-address-blacklist=
+
+[ipv4]
+dns-search=
+method=auto
+
+[ipv6]
+addr-gen-mode=stable-privacy
+dns-search=
+method=auto
+
+[proxy]
+
+[.nmmeta]
+nm-generated=true"
+
+# Function that will remove unique (per-run) data from a connection file
+normalize_connection_file() {
+    sed -e s/^uuid=.*$/uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/ \
+        -e s/^timestamp=.*$/timestamp=xxxxxxxxxx/                 \
+        -e s/^interface-name=.*$/interface-name=xxxx/             \
+        $1
+}
+
+source /etc/os-release
+# All current FCOS releases use the same config
+if [ "$ID" == "fedora" ]; then
+    if [ "$VERSION_ID" -eq "34" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
+    elif [ "$VERSION_ID" -ge "35" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
+    else
+        fatal "fail: not operating on expected OS version"
+    fi
+elif [ "$ID" == "rhcos" ]; then
+    # For the version comparison use string substitution to remove the
+    # '.` from the version so we can use integer comparison
+    RHCOS_MINIMUM_VERSION="4.9"
+    if [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
+    else
+        fatal "fail: not operating on expected OS version"
+    fi
+else
+    fatal "fail: not operating on expected OS"
+fi
+
+
+# Execute nm-initrd-generator against our default kargs (defined by
+# afterburn drop in) to get the generated initrd network config.
+DEFAULT_KARGS_FILE=/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf 
+source <(grep -o 'AFTERBURN_NETWORK_KARGS_DEFAULT=.*' $DEFAULT_KARGS_FILE)
+tmpdir=$(mktemp -d)
+/usr/libexec/nm-initrd-generator \
+    -c "${tmpdir}/connections" \
+    -i "${tmpdir}/initrd-data-dir" \
+    -r "${tmpdir}/conf.d" \
+    -- $AFTERBURN_NETWORK_KARGS_DEFAULT
+GENERATED_INITRD_NETWORK_CFG=$(normalize_connection_file \
+                               "${tmpdir}/connections/default_connection.nmconnection")
+
+# Diff the outputs and fail if the expected doesn't match the generated.
+if ! diff -u <(echo "$EXPECTED_INITRD_NETWORK_CFG") <(echo "$GENERATED_INITRD_NETWORK_CFG"); then
+    fatal "fail: the expected initrd network config is not given by the kargs"
+fi
+
+# Check the default NetworkManager runtime generated connection profile in
+# the real root to make sure it matches what we expect.
+GENERATED_REALROOT_NETWORK_CFG=$(normalize_connection_file \
+                                 <(sudo cat "/run/NetworkManager/system-connections/Wired connection 1.nmconnection"))
+if ! diff -u <(echo "$EXPECTED_REALROOT_NETWORK_CFG") <(echo "$GENERATED_REALROOT_NETWORK_CFG"); then
+    fatal "fail: the expected realroot network config is not given by the kargs"
+fi
+
+ok "success: expected network configs were generated"

From 59ebaba9a9a96daa79a39dac46bc737c16e2873d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 2 Nov 2021 14:51:36 -0400
Subject: [PATCH 0549/2157] switch default networking config to ip=auto

Upstream NM changed the behavior of `ip=dhcp,dhcp6` to also wait
20 seconds for DHCPv6. We don't want to require all users by default
to wait for DHCPv6 especially when it's doubtful most users even have
a ipv6 DHCP server. We can stick with our current behavior by utilizing
`ip=auto` instead.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1000
---
 image-base.yaml                                                 | 2 +-
 .../modules.d/35coreos-ignition/coreos-teardown-initramfs.sh    | 2 +-
 .../35coreos-network/50-afterburn-network-kargs-default.conf    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index c69c6cf9bf..c3ad9adb8f 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -11,7 +11,7 @@ extra-kargs:
     - mitigations=auto,nosmt
 
 # Disable networking by default on firstboot. We can drop this once cosa stops
-# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
+# defaulting to `ip=auto rd.neednet=1` when it doesn't see this key.
 ignition-network-kcmdline: []
 
 # Optional remote by which to prefix the deployed OSTree ref
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 8fea202022..c5d0285621 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -40,7 +40,7 @@ are_default_NM_configs() {
     # Do a new run with the default input
     /usr/libexec/nm-initrd-generator \
         -c /run/coreos-teardown-initramfs/connections-compare-2 \
-        -i /run/coreos-teardown-initramfs/initrd-data-dir -- ip=dhcp,dhcp6
+        -i /run/coreos-teardown-initramfs/initrd-data-dir -- ip=auto
     # remove unique identifiers from the files (so our diff can work)
     sed -i '/^uuid=/d' /run/coreos-teardown-initramfs/connections-compare-{1,2}/*
     # currently the output will differ based on whether rd.neednet=1
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
index bad6d14047..8c411e5add 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
@@ -4,4 +4,4 @@
 # https://github.com/coreos/fedora-coreos-tracker/issues/460
 
 [Service]
-Environment=AFTERBURN_NETWORK_KARGS_DEFAULT='ip=dhcp,dhcp6'
+Environment=AFTERBURN_NETWORK_KARGS_DEFAULT='ip=auto'

From 05cc793162f52a79f8490bd339c22b9dab9e22f0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 4 Nov 2021 14:46:15 -0400
Subject: [PATCH 0550/2157] coreos-teardown-initramfs: pick up default net cfg
 from afterburn dropin

This way we can only define it in one place.
---
 .../modules.d/35coreos-ignition/coreos-teardown-initramfs.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index c5d0285621..7f8135ace7 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -30,6 +30,9 @@ dracut_func() {
 # If it matches then it was the default, if not then the user provided
 # something extra.
 are_default_NM_configs() {
+    # pick up our CoreOS default networking kargs from the afterburn dropin
+    DEFAULT_KARGS_FILE=/usr/lib/systemd/system/afterburn-network-kargs.service.d/50-afterburn-network-kargs-default.conf
+    source <(grep -o 'AFTERBURN_NETWORK_KARGS_DEFAULT=.*' $DEFAULT_KARGS_FILE)
     # Make two dirs for storing files to use in the comparison
     mkdir -p /run/coreos-teardown-initramfs/connections-compare-{1,2}
     # Make another that's just a throwaway for the initrd-data-dir
@@ -40,7 +43,7 @@ are_default_NM_configs() {
     # Do a new run with the default input
     /usr/libexec/nm-initrd-generator \
         -c /run/coreos-teardown-initramfs/connections-compare-2 \
-        -i /run/coreos-teardown-initramfs/initrd-data-dir -- ip=auto
+        -i /run/coreos-teardown-initramfs/initrd-data-dir -- $AFTERBURN_NETWORK_KARGS_DEFAULT
     # remove unique identifiers from the files (so our diff can work)
     sed -i '/^uuid=/d' /run/coreos-teardown-initramfs/connections-compare-{1,2}/*
     # currently the output will differ based on whether rd.neednet=1

From 73c124a206bc23f61d4c3d4f3a75c999c611de02 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 4 Nov 2021 16:46:07 -0400
Subject: [PATCH 0551/2157] Move to F35

---
 manifest-lock.aarch64.json        | 820 ++++++++++++++---------------
 manifest-lock.overrides.yaml      |  20 +-
 manifest-lock.x86_64.json         | 828 +++++++++++++++---------------
 manifest.yaml                     |   2 +-
 manifests/fedora-coreos-base.yaml |  12 +
 5 files changed, 844 insertions(+), 838 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0b2cdd440d..8c58f41682 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1199 +1,1205 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.30.6-1.fc34.aarch64"
+      "evra": "1:1.32.12-2.fc35.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.30.6-1.fc34.aarch64"
+      "evra": "1:1.32.12-2.fc35.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.30.6-1.fc34.aarch64"
+      "evra": "1:1.32.12-2.fc35.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.30.6-1.fc34.aarch64"
+      "evra": "1:1.32.12-2.fc35.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.30.6-1.fc34.aarch64"
+      "evra": "1:1.32.12-2.fc35.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.1.1-1.fc34.noarch"
+      "evra": "2.3.1.1-2.fc35.noarch"
     },
     "acl": {
-      "evra": "2.3.1-1.fc34.aarch64"
+      "evra": "2.3.1-2.fc35.aarch64"
     },
     "adcli": {
-      "evra": "0.9.1-3.fc34.aarch64"
+      "evra": "0.9.1-9.fc35.aarch64"
     },
     "afterburn": {
-      "evra": "5.0.0-1.fc34.aarch64"
+      "evra": "5.1.0-1.fc35.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.0.0-1.fc34.aarch64"
+      "evra": "5.1.0-1.fc35.aarch64"
     },
     "alternatives": {
-      "evra": "1.15-2.fc34.aarch64"
+      "evra": "1.19-1.fc35.aarch64"
     },
     "attr": {
-      "evra": "2.5.1-1.fc34.aarch64"
+      "evra": "2.5.1-3.fc35.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.6-1.fc34.aarch64"
+      "evra": "3.0.6-1.fc35.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-14.fc34.aarch64"
+      "evra": "0.8-14.fc35.aarch64"
     },
     "basesystem": {
-      "evra": "11-11.fc34.noarch"
+      "evra": "11-12.fc35.noarch"
     },
     "bash": {
-      "evra": "5.1.0-2.fc34.aarch64"
+      "evra": "5.1.8-2.fc35.aarch64"
     },
     "bash-completion": {
-      "evra": "1:2.11-2.fc34.noarch"
+      "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.21-1.fc34.aarch64"
+      "evra": "32:9.16.22-1.fc35.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.21-1.fc34.noarch"
+      "evra": "32:9.16.22-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.21-1.fc34.aarch64"
+      "evra": "32:9.16.22-1.fc35.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.6-1.fc34.aarch64"
+      "evra": "0.2.6-1.fc35.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.2-2.fc34.aarch64"
+      "evra": "3.5.2-2.fc35.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.14.2-1.fc34.aarch64"
+      "evra": "5.14.2-1.fc35.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.4.1-3.fc34.aarch64"
+      "evra": "0.5.0-1.fc35.aarch64"
     },
     "bzip2": {
-      "evra": "1.0.8-6.fc34.aarch64"
+      "evra": "1.0.8-9.fc35.aarch64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-6.fc34.aarch64"
+      "evra": "1.0.8-9.fc35.aarch64"
     },
     "c-ares": {
-      "evra": "1.17.2-1.fc34.aarch64"
+      "evra": "1.17.2-1.fc35.aarch64"
     },
     "ca-certificates": {
-      "evra": "2021.2.50-1.0.fc34.noarch"
+      "evra": "2021.2.50-3.fc35.noarch"
     },
     "catatonit": {
-      "evra": "0.1.6-1.fc34.aarch64"
+      "evra": "0.1.6-1.fc35.aarch64"
     },
     "chrony": {
-      "evra": "4.1-1.fc34.aarch64"
+      "evra": "4.1-3.fc35.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.13-3.fc34.aarch64"
+      "evra": "6.13-3.fc35.aarch64"
     },
     "clevis": {
-      "evra": "18-1.fc34.aarch64"
+      "evra": "18-3.fc35.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-1.fc34.aarch64"
+      "evra": "18-3.fc35.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-1.fc34.aarch64"
+      "evra": "18-3.fc35.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-1.fc34.aarch64"
+      "evra": "18-3.fc35.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-8.fc34.noarch"
-    },
-    "compat-readline5": {
-      "evra": "5.2-39.fc34.aarch64"
+      "evra": "0.31-9.fc35.noarch"
     },
     "conmon": {
-      "evra": "2:2.0.30-2.fc34.aarch64"
+      "evra": "2:2.0.30-2.fc35.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-2.fc34.noarch"
+      "evra": "2:2.170.0-2.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.7-1.fc34.aarch64"
+      "evra": "1.5.7-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-1.fc34.aarch64"
+      "evra": "1.0.1-1.fc35.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-21.fc34.noarch"
+      "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.1-1.fc34.aarch64"
+      "evra": "0.10.1-1.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.1-1.fc34.aarch64"
+      "evra": "0.10.1-1.fc35.aarch64"
     },
     "coreutils": {
-      "evra": "8.32-30.fc34.aarch64"
+      "evra": "8.32-31.fc35.aarch64"
     },
     "coreutils-common": {
-      "evra": "8.32-30.fc34.aarch64"
+      "evra": "8.32-31.fc35.aarch64"
     },
     "cpio": {
-      "evra": "2.13-10.fc34.aarch64"
+      "evra": "2.13-11.fc35.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.6-27.fc34.aarch64"
+      "evra": "2.9.6-27.fc35.aarch64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-27.fc34.aarch64"
+      "evra": "2.9.6-27.fc35.aarch64"
     },
     "criu": {
-      "evra": "3.16.1-2.fc34.aarch64"
+      "evra": "3.16.1-2.fc35.aarch64"
     },
     "criu-libs": {
-      "evra": "3.16.1-2.fc34.aarch64"
+      "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.2-1.fc34.aarch64"
+      "evra": "1.2-1.fc35.aarch64"
     },
     "crypto-policies": {
-      "evra": "20210213-1.git5c710c0.fc34.noarch"
+      "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.3.6-1.fc34.aarch64"
+      "evra": "2.4.1-1.fc35.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.3.6-1.fc34.aarch64"
+      "evra": "2.4.1-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-7.fc34.aarch64"
+      "evra": "1:2.3.3op2-8.fc35.aarch64"
     },
     "curl": {
-      "evra": "7.76.1-12.fc34.aarch64"
+      "evra": "7.79.1-1.fc35.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-8.fc34.aarch64"
+      "evra": "2.1.27-13.fc35.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-8.fc34.aarch64"
+      "evra": "2.1.27-13.fc35.aarch64"
     },
     "dbus": {
-      "evra": "1:1.12.20-3.fc34.aarch64"
+      "evra": "1:1.12.20-5.fc35.aarch64"
     },
     "dbus-broker": {
-      "evra": "29-2.fc34.aarch64"
+      "evra": "29-4.fc35.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.12.20-3.fc34.noarch"
+      "evra": "1:1.12.20-5.fc35.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.20-3.fc34.aarch64"
+      "evra": "1:1.12.20-5.fc35.aarch64"
     },
     "device-mapper": {
-      "evra": "1.02.175-1.fc34.aarch64"
+      "evra": "1.02.175-6.fc35.aarch64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-1.fc34.aarch64"
+      "evra": "1.02.175-6.fc35.aarch64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-1.fc34.aarch64"
+      "evra": "1.02.175-6.fc35.aarch64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-1.fc34.aarch64"
+      "evra": "1.02.175-6.fc35.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.5-4.fc34.aarch64"
+      "evra": "0.8.6-5.fc35.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.5-4.fc34.aarch64"
+      "evra": "0.8.6-5.fc35.aarch64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-3.fc34.aarch64"
+      "evra": "0.9.0-6.fc35.aarch64"
     },
     "diffutils": {
-      "evra": "3.7-8.fc34.aarch64"
+      "evra": "3.8-1.fc35.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-2.fc34.aarch64"
+      "evra": "2.86-3.fc35.aarch64"
     },
     "dosfstools": {
-      "evra": "4.2-1.fc34.aarch64"
+      "evra": "4.2-2.fc35.aarch64"
     },
     "dracut": {
-      "evra": "055-6.fc34.aarch64"
+      "evra": "055-6.fc35.aarch64"
     },
     "dracut-network": {
-      "evra": "055-6.fc34.aarch64"
+      "evra": "055-6.fc35.aarch64"
     },
     "dracut-squash": {
-      "evra": "055-6.fc34.aarch64"
+      "evra": "055-6.fc35.aarch64"
     },
     "e2fsprogs": {
-      "evra": "1.45.6-5.fc34.aarch64"
+      "evra": "1.46.3-1.fc35.aarch64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.45.6-5.fc34.aarch64"
+      "evra": "1.46.3-1.fc35.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-4.fc34.noarch"
+      "evra": "5-4.fc35.noarch"
     },
     "efibootmgr": {
-      "evra": "16-10.fc34.aarch64"
+      "evra": "16-11.fc35.aarch64"
     },
     "efivar-libs": {
-      "evra": "37-15.fc34.aarch64"
+      "evra": "37-17.fc35.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.185-2.fc34.noarch"
+      "evra": "0.185-5.fc35.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.185-2.fc34.aarch64"
+      "evra": "0.185-5.fc35.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.185-2.fc34.aarch64"
+      "evra": "0.185-5.fc35.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.14-1.fc34.aarch64"
+      "evra": "2:5.14-1.fc35.aarch64"
     },
     "expat": {
-      "evra": "2.4.1-1.fc34.aarch64"
+      "evra": "2.4.1-2.fc35.aarch64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-11.fc34.aarch64"
+      "evra": "0.0.4-12.fc35.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-repos": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "file": {
-      "evra": "5.39-7.fc34.aarch64"
+      "evra": "5.40-9.fc35.aarch64"
     },
     "file-libs": {
-      "evra": "5.39-7.fc34.aarch64"
+      "evra": "5.40-9.fc35.aarch64"
     },
     "filesystem": {
-      "evra": "3.14-5.fc34.aarch64"
+      "evra": "3.14-7.fc35.aarch64"
     },
     "findutils": {
-      "evra": "1:4.8.0-2.fc34.aarch64"
+      "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.5-1.fc34.aarch64"
+      "evra": "1.12.2-1.fc35.aarch64"
     },
     "fstrm": {
-      "evra": "0.6.1-2.fc34.aarch64"
+      "evra": "0.6.1-3.fc35.aarch64"
     },
     "fuse": {
-      "evra": "2.9.9-11.fc34.aarch64"
+      "evra": "2.9.9-13.fc35.aarch64"
     },
     "fuse-common": {
-      "evra": "3.10.4-1.fc34.aarch64"
+      "evra": "3.10.5-1.fc35.aarch64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-11.fc34.aarch64"
+      "evra": "2.9.9-13.fc35.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-2.fc34.aarch64"
+      "evra": "1.7.1-2.fc35.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-1.fc34.aarch64"
+      "evra": "3.7.2-2.fc35.aarch64"
     },
     "fuse3": {
-      "evra": "3.10.4-1.fc34.aarch64"
+      "evra": "3.10.5-1.fc35.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.10.4-1.fc34.aarch64"
+      "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.5.12-1.fc34.aarch64"
+      "evra": "1.7.0-1.fc35.aarch64"
     },
     "gawk": {
-      "evra": "5.1.0-3.fc34.aarch64"
+      "evra": "5.1.0-4.fc35.aarch64"
+    },
+    "gdbm-libs": {
+      "evra": "1:1.22-1.fc35.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.8-1.fc34.aarch64"
+      "evra": "1.0.8-2.fc35.aarch64"
     },
     "gettext": {
-      "evra": "0.21-4.fc34.aarch64"
+      "evra": "0.21-8.fc35.aarch64"
     },
     "gettext-libs": {
-      "evra": "0.21-4.fc34.aarch64"
+      "evra": "0.21-8.fc35.aarch64"
     },
     "git-core": {
-      "evra": "2.31.1-3.fc34.aarch64"
+      "evra": "2.33.1-1.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.68.4-1.fc34.aarch64"
+      "evra": "2.70.1-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.33-20.fc34.aarch64"
+      "evra": "2.34-7.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.33-20.fc34.aarch64"
+      "evra": "2.34-7.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-20.fc34.aarch64"
+      "evra": "2.34-7.fc35.aarch64"
     },
     "gmp": {
-      "evra": "1:6.2.0-6.fc34.aarch64"
+      "evra": "1:6.2.0-7.fc35.aarch64"
     },
     "gnupg2": {
-      "evra": "2.2.27-4.fc34.aarch64"
+      "evra": "2.3.3-1.fc35.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.2-1.fc34.aarch64"
+      "evra": "3.7.2-2.fc35.aarch64"
     },
     "gpgme": {
-      "evra": "1.15.1-2.fc34.aarch64"
+      "evra": "1.15.1-6.fc35.aarch64"
     },
     "grep": {
-      "evra": "3.6-2.fc34.aarch64"
+      "evra": "3.6-4.fc35.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-6.fc34b.noarch"
+      "evra": "1:2.06-6.fc35.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-6.fc34b.aarch64"
+      "evra": "1:2.06-6.fc35.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-6.fc34b.aarch64"
+      "evra": "1:2.06-6.fc35.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-6.fc34b.aarch64"
+      "evra": "1:2.06-6.fc35.aarch64"
     },
     "gzip": {
-      "evra": "1.10-4.fc34.aarch64"
+      "evra": "1.10-5.fc35.aarch64"
     },
     "hostname": {
-      "evra": "3.23-4.fc34.aarch64"
+      "evra": "3.23-5.fc35.aarch64"
     },
     "ignition": {
-      "evra": "2.12.0-3.fc34.aarch64"
+      "evra": "2.12.0-3.fc35.aarch64"
     },
     "inih": {
-      "evra": "49-3.fc34.aarch64"
+      "evra": "49-4.fc35.aarch64"
     },
     "iproute": {
-      "evra": "5.10.0-2.fc34.aarch64"
+      "evra": "5.13.0-2.fc35.aarch64"
     },
     "iproute-tc": {
-      "evra": "5.10.0-2.fc34.aarch64"
+      "evra": "5.13.0-2.fc35.aarch64"
     },
-    "iptables": {
-      "evra": "1.8.7-3.fc34.aarch64"
+    "iptables-legacy": {
+      "evra": "1.8.7-13.fc35.aarch64"
+    },
+    "iptables-legacy-libs": {
+      "evra": "1.8.7-13.fc35.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-3.fc34.aarch64"
+      "evra": "1.8.7-13.fc35.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-3.fc34.aarch64"
+      "evra": "1.8.7-13.fc35.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.7-8.fc34.aarch64"
+      "evra": "1.8.7-13.fc35.noarch"
     },
     "iputils": {
-      "evra": "20210202-2.fc34.aarch64"
+      "evra": "20210722-1.fc35.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-5.fc34.aarch64"
+      "evra": "2:1.7.0-8.fc35.aarch64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.2-5.gita8fcb37.fc34.aarch64"
+      "evra": "6.2.1.4-0.git095f59c.fc35.2.aarch64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.2-5.gita8fcb37.fc34.aarch64"
+      "evra": "6.2.1.4-0.git095f59c.fc35.2.aarch64"
     },
     "isns-utils-libs": {
-      "evra": "0.100-1.fc34.aarch64"
+      "evra": "0.101-2.fc35.aarch64"
     },
     "jansson": {
-      "evra": "2.13.1-2.fc34.aarch64"
+      "evra": "2.13.1-3.fc35.aarch64"
     },
     "jose": {
-      "evra": "11-1.fc34.aarch64"
+      "evra": "11-3.fc35.aarch64"
     },
     "jq": {
-      "evra": "1.6-10.fc34.aarch64"
+      "evra": "1.6-10.fc35.aarch64"
     },
     "json-c": {
-      "evra": "0.14-8.fc34.aarch64"
+      "evra": "0.15-2.fc35.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.6-1.fc34.aarch64"
+      "evra": "1.6.6-1.fc35.aarch64"
     },
     "kbd": {
-      "evra": "2.4.0-2.fc34.aarch64"
+      "evra": "2.4.0-8.fc35.aarch64"
     },
     "kbd-misc": {
-      "evra": "2.4.0-2.fc34.noarch"
+      "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.14-200.fc34.aarch64"
+      "evra": "5.14.13-300.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.14-200.fc34.aarch64"
+      "evra": "5.14.13-300.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.14-200.fc34.aarch64"
+      "evra": "5.14.13-300.fc35.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.22-4.fc34.aarch64"
+      "evra": "2.0.22-7.fc35.aarch64"
     },
     "keyutils": {
-      "evra": "1.6.1-2.fc34.aarch64"
+      "evra": "1.6.1-3.fc35.aarch64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-2.fc34.aarch64"
+      "evra": "1.6.1-3.fc35.aarch64"
     },
     "kmod": {
-      "evra": "29-2.fc34.aarch64"
+      "evra": "29-4.fc35.aarch64"
     },
     "kmod-libs": {
-      "evra": "29-2.fc34.aarch64"
+      "evra": "29-4.fc35.aarch64"
     },
     "kpartx": {
-      "evra": "0.8.5-4.fc34.aarch64"
+      "evra": "0.8.6-5.fc35.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-2.fc34.aarch64"
+      "evra": "1.19.2-2.fc35.aarch64"
     },
     "less": {
-      "evra": "581.2-1.fc34.aarch64"
+      "evra": "590-2.fc35.aarch64"
     },
     "libacl": {
-      "evra": "2.3.1-1.fc34.aarch64"
+      "evra": "2.3.1-2.fc35.aarch64"
     },
     "libaio": {
-      "evra": "0.3.111-11.fc34.aarch64"
+      "evra": "0.3.111-12.fc35.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.2-2.fc34.aarch64"
+      "evra": "3.5.2-2.fc35.aarch64"
     },
     "libargon2": {
-      "evra": "20171227-6.fc34.aarch64"
+      "evra": "20171227-7.fc35.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.5-1.fc34.aarch64"
+      "evra": "2.5.5-3.fc35.aarch64"
     },
     "libattr": {
-      "evra": "2.5.1-1.fc34.aarch64"
+      "evra": "2.5.1-3.fc35.aarch64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-47.fc34.aarch64"
+      "evra": "0.1.1-48.fc35.aarch64"
     },
     "libblkid": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libbrotli": {
-      "evra": "1.0.9-4.fc34.aarch64"
+      "evra": "1.0.9-6.fc35.aarch64"
     },
     "libbsd": {
-      "evra": "0.10.0-7.fc34.aarch64"
+      "evra": "0.10.0-8.fc35.aarch64"
     },
     "libcap": {
-      "evra": "2.48-2.fc34.aarch64"
+      "evra": "2.48-3.fc35.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-4.fc34.aarch64"
+      "evra": "0.8.2-6.fc35.aarch64"
     },
     "libcbor": {
-      "evra": "0.7.0-3.fc34.aarch64"
+      "evra": "0.7.0-4.fc35.aarch64"
     },
     "libcollection": {
-      "evra": "0.7.0-47.fc34.aarch64"
+      "evra": "0.7.0-48.fc35.aarch64"
     },
     "libcom_err": {
-      "evra": "1.45.6-5.fc34.aarch64"
+      "evra": "1.46.3-1.fc35.aarch64"
     },
     "libcurl": {
-      "evra": "7.76.1-12.fc34.aarch64"
+      "evra": "7.79.1-1.fc35.aarch64"
     },
     "libdaemon": {
-      "evra": "0.14-21.fc34.aarch64"
+      "evra": "0.14-22.fc35.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-49.fc34.aarch64"
+      "evra": "5.3.28-50.fc35.aarch64"
     },
     "libdhash": {
-      "evra": "0.5.0-47.fc34.aarch64"
+      "evra": "0.5.0-48.fc35.aarch64"
     },
     "libeconf": {
-      "evra": "0.4.0-1.fc34.aarch64"
+      "evra": "0.4.0-2.fc35.aarch64"
     },
     "libedit": {
-      "evra": "3.1-38.20210714cvs.fc34.aarch64"
+      "evra": "3.1-40.20210910cvs.fc35.aarch64"
     },
     "libevent": {
-      "evra": "2.1.12-3.fc34.aarch64"
+      "evra": "2.1.12-4.fc35.aarch64"
     },
     "libfdisk": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libffi": {
-      "evra": "3.1-28.fc34.aarch64"
+      "evra": "3.1-29.fc35.aarch64"
     },
     "libfido2": {
-      "evra": "1.6.0-2.fc34.aarch64"
+      "evra": "1.8.0-1.fc35.aarch64"
     },
     "libgcab1": {
-      "evra": "1.4-4.fc34.aarch64"
+      "evra": "1.4-5.fc35.aarch64"
     },
     "libgcc": {
-      "evra": "11.2.1-1.fc34.aarch64"
+      "evra": "11.2.1-1.fc35.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.9.3-3.fc34.aarch64"
+      "evra": "1.9.4-1.fc35.aarch64"
     },
     "libgomp": {
-      "evra": "11.2.1-1.fc34.aarch64"
+      "evra": "11.2.1-1.fc35.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.42-1.fc34.aarch64"
+      "evra": "1.42-3.fc35.aarch64"
     },
     "libgudev": {
-      "evra": "236-1.fc34.aarch64"
+      "evra": "237-1.fc35.aarch64"
     },
     "libgusb": {
-      "evra": "0.3.8-1.fc34.aarch64"
+      "evra": "0.3.8-1.fc35.aarch64"
     },
     "libibverbs": {
-      "evra": "37.0-1.fc34.aarch64"
+      "evra": "37.0-1.fc35.aarch64"
     },
     "libicu": {
-      "evra": "67.1-7.fc34.aarch64"
+      "evra": "69.1-2.fc35.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.2-1.fc34.aarch64"
+      "evra": "2.3.2-3.fc35.aarch64"
     },
     "libini_config": {
-      "evra": "1.3.1-47.fc34.aarch64"
+      "evra": "1.3.1-48.fc35.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.6-1.fc34.aarch64"
+      "evra": "0.1.8-2.fc35.aarch64"
     },
     "libjose": {
-      "evra": "11-1.fc34.aarch64"
+      "evra": "11-3.fc35.aarch64"
     },
     "libkcapi": {
-      "evra": "1.2.1-1.fc34.aarch64"
+      "evra": "1.3.1-3.fc35.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.2.1-1.fc34.aarch64"
+      "evra": "1.3.1-3.fc35.aarch64"
     },
     "libksba": {
-      "evra": "1.5.0-2.fc34.aarch64"
+      "evra": "1.6.0-2.fc35.aarch64"
     },
     "libldb": {
-      "evra": "2.3.0-2.fc34.aarch64"
+      "evra": "2.4.0-2.fc35.aarch64"
     },
     "libluksmeta": {
-      "evra": "9-10.fc34.aarch64"
+      "evra": "9-12.fc35.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.5.2-1.fc34.aarch64"
+      "evra": "1.5.2-2.fc35.aarch64"
     },
     "libmnl": {
-      "evra": "1.0.4-13.fc34.aarch64"
+      "evra": "1.0.4-14.fc35.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-2.fc34.aarch64"
+      "evra": "2.13.0-3.fc35.aarch64"
     },
     "libmount": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libndp": {
-      "evra": "1.7-7.fc34.aarch64"
+      "evra": "1.8-2.fc35.aarch64"
     },
     "libnet": {
-      "evra": "1.2-2.fc34.aarch64"
+      "evra": "1.2-4.fc35.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-2.fc34.aarch64"
+      "evra": "1.0.8-3.fc35.aarch64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-19.fc34.aarch64"
+      "evra": "1.0.1-20.fc35.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-2.rc3.fc34.aarch64"
+      "evra": "1:2.5.4-2.rc3.fc35.aarch64"
     },
     "libnftnl": {
-      "evra": "1.1.9-2.fc34.aarch64"
+      "evra": "1.2.0-2.fc35.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.43.0-2.fc34.aarch64"
+      "evra": "1.45.1-1.fc35.aarch64"
     },
     "libnl3": {
-      "evra": "3.5.0-6.fc34.aarch64"
+      "evra": "3.5.0-8.fc35.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-6.fc34.aarch64"
+      "evra": "3.5.0-8.fc35.aarch64"
     },
     "libnsl2": {
-      "evra": "1.3.0-2.fc34.aarch64"
+      "evra": "1.3.0-4.fc35.aarch64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-47.fc34.aarch64"
+      "evra": "0.2.1-48.fc35.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-1.fc34.aarch64"
+      "evra": "14:1.10.1-2.fc35.aarch64"
     },
     "libpkgconf": {
-      "evra": "1.7.3-6.fc34.aarch64"
+      "evra": "1.8.0-1.fc35.aarch64"
     },
     "libpsl": {
-      "evra": "0.21.1-3.fc34.aarch64"
+      "evra": "0.21.1-4.fc35.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.4-6.fc34.aarch64"
+      "evra": "1.4.4-6.fc35.aarch64"
     },
     "libref_array": {
-      "evra": "0.1.5-47.fc34.aarch64"
+      "evra": "0.1.5-48.fc35.aarch64"
     },
     "librepo": {
-      "evra": "1.14.2-1.fc34.aarch64"
+      "evra": "1.14.2-1.fc35.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-2.fc34.noarch"
+      "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.0-4.fc34.aarch64"
+      "evra": "2.5.0-5.fc35.aarch64"
     },
     "libselinux": {
-      "evra": "3.2-1.fc34.aarch64"
+      "evra": "3.3-1.fc35.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.2-1.fc34.aarch64"
+      "evra": "3.3-1.fc35.aarch64"
     },
     "libsemanage": {
-      "evra": "3.2-1.fc34.aarch64"
+      "evra": "3.3-1.fc35.aarch64"
     },
     "libsepol": {
-      "evra": "3.2-1.fc34.aarch64"
+      "evra": "3.3-1.fc35.aarch64"
     },
     "libsigsegv": {
-      "evra": "2.13-2.fc34.aarch64"
+      "evra": "2.13-3.fc35.aarch64"
     },
     "libslirp": {
-      "evra": "4.4.0-4.fc34.aarch64"
+      "evra": "4.6.1-2.fc35.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.8-0.fc34.aarch64"
+      "evra": "2:4.15.0-13.fc35.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.17-3.fc34.aarch64"
+      "evra": "0.7.19-3.fc35.aarch64"
     },
     "libss": {
-      "evra": "1.45.6-5.fc34.aarch64"
+      "evra": "1.46.3-1.fc35.aarch64"
     },
     "libssh": {
-      "evra": "0.9.6-1.fc34.aarch64"
+      "evra": "0.9.6-1.fc35.aarch64"
     },
     "libssh-config": {
-      "evra": "0.9.6-1.fc34.noarch"
+      "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "libstdc++": {
-      "evra": "11.2.1-1.fc34.aarch64"
+      "evra": "11.2.1-1.fc35.aarch64"
     },
     "libtalloc": {
-      "evra": "2.3.2-2.fc34.aarch64"
+      "evra": "2.3.3-2.fc35.aarch64"
     },
     "libtasn1": {
-      "evra": "4.16.0-4.fc34.aarch64"
+      "evra": "4.16.0-6.fc35.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.3-6.fc34.aarch64"
+      "evra": "1.4.4-3.fc35.aarch64"
     },
     "libteam": {
-      "evra": "1.31-3.fc34.aarch64"
+      "evra": "1.31-4.fc35.aarch64"
     },
     "libtevent": {
-      "evra": "0.11.0-0.fc34.aarch64"
-    },
-    "libtextstyle": {
-      "evra": "0.21-4.fc34.aarch64"
+      "evra": "0.11.0-1.fc35.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.2-0.fc34.aarch64"
+      "evra": "1.3.2-1.fc35.aarch64"
     },
     "libunistring": {
-      "evra": "0.9.10-10.fc34.aarch64"
+      "evra": "0.9.10-14.fc35.aarch64"
     },
-    "libusbx": {
-      "evra": "1.0.24-2.fc34.aarch64"
+    "libusb1": {
+      "evra": "1.0.24-4.fc35.aarch64"
     },
     "libuser": {
-      "evra": "0.63-4.fc34.aarch64"
+      "evra": "0.63-7.fc35.aarch64"
     },
     "libutempter": {
-      "evra": "1.2.1-4.fc34.aarch64"
+      "evra": "1.2.1-5.fc35.aarch64"
     },
     "libuuid": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libuv": {
-      "evra": "1:1.42.0-2.fc34.aarch64"
+      "evra": "1:1.42.0-2.fc35.aarch64"
     },
     "libvarlink-util": {
-      "evra": "22-2.fc34.aarch64"
+      "evra": "22-3.fc35.aarch64"
     },
     "libverto": {
-      "evra": "0.3.2-1.fc34.aarch64"
+      "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.14.8-0.fc34.aarch64"
+      "evra": "2:4.15.0-13.fc35.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.26-2.fc34.aarch64"
+      "evra": "4.4.26-4.fc35.aarch64"
     },
     "libxml2": {
-      "evra": "2.9.12-4.fc34.aarch64"
+      "evra": "2.9.12-6.fc35.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.3-1.fc34.aarch64"
+      "evra": "0.3.3-1.fc35.aarch64"
     },
     "libyaml": {
-      "evra": "0.2.5-5.fc34.aarch64"
+      "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.0-1.fc34.aarch64"
+      "evra": "1.5.0-2.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-28.fc34.aarch64"
     },
     "linux-firmware": {
-      "evra": "20210919-125.fc34.noarch"
+      "evra": "20211027-126.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210919-125.fc34.noarch"
+      "evra": "20211027-126.fc35.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-1.fc34.aarch64"
+      "evra": "0.9.29-2.fc35.aarch64"
     },
     "logrotate": {
-      "evra": "3.18.0-3.fc34.aarch64"
+      "evra": "3.18.1-2.fc35.aarch64"
     },
     "lsof": {
-      "evra": "4.94.0-1.fc34.aarch64"
+      "evra": "4.94.0-2.fc35.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.3-1.fc34.aarch64"
+      "evra": "5.4.3-2.fc35.aarch64"
     },
     "luksmeta": {
-      "evra": "9-10.fc34.aarch64"
+      "evra": "9-12.fc35.aarch64"
     },
     "lvm2": {
-      "evra": "2.03.11-1.fc34.aarch64"
+      "evra": "2.03.11-6.fc35.aarch64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-1.fc34.aarch64"
+      "evra": "2.03.11-6.fc35.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-2.fc34.aarch64"
+      "evra": "1.9.3-3.fc35.aarch64"
     },
     "lzo": {
-      "evra": "2.10-4.fc34.aarch64"
+      "evra": "2.10-5.fc35.aarch64"
     },
     "mdadm": {
-      "evra": "4.1-7.fc34.aarch64"
+      "evra": "4.2-rc2.fc35.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.9-1.fc34.aarch64"
+      "evra": "20.10.9-1.fc35.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.4.0-4.fc34.aarch64"
+      "evra": "2:0.4.0-6.fc35.aarch64"
     },
     "mozjs78": {
-      "evra": "78.15.0-1.fc34.aarch64"
+      "evra": "78.15.0-1.fc35.aarch64"
     },
     "mpfr": {
-      "evra": "4.1.0-7.fc34.aarch64"
+      "evra": "4.1.0-8.fc35.aarch64"
     },
     "ncurses": {
-      "evra": "6.2-4.20200222.fc34.aarch64"
+      "evra": "6.2-8.20210508.fc35.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.2-4.20200222.fc34.noarch"
+      "evra": "6.2-8.20210508.fc35.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-4.20200222.fc34.aarch64"
+      "evra": "6.2-8.20210508.fc35.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.59.20160912git.fc34.aarch64"
+      "evra": "2.0-0.60.20160912git.fc35.aarch64"
     },
     "nettle": {
-      "evra": "3.7.3-1.fc34.aarch64"
+      "evra": "3.7.3-2.fc35.aarch64"
     },
     "newt": {
-      "evra": "0.52.21-9.fc34.aarch64"
+      "evra": "0.52.21-11.fc35.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-2.rc3.fc34.aarch64"
+      "evra": "1:2.5.4-2.rc3.fc35.aarch64"
     },
     "nftables": {
-      "evra": "1:0.9.8-3.fc34.aarch64"
+      "evra": "1:1.0.0-1.fc35.aarch64"
     },
     "npth": {
-      "evra": "1.6-6.fc34.aarch64"
+      "evra": "1.6-7.fc35.aarch64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-18.fc34.aarch64"
+      "evra": "2.18.1-19.fc35.aarch64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-3.fc34.aarch64"
+      "evra": "2.0.14-4.fc35.aarch64"
     },
     "nvme-cli": {
-      "evra": "1.11.1-3.fc34.aarch64"
+      "evra": "1.11.1-4.fc35.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.7.1-1.fc34.aarch64"
+      "evra": "6.9.7.1-1.fc35.1.aarch64"
     },
     "openldap": {
-      "evra": "2.4.57-6.fc34.aarch64"
+      "evra": "2.4.59-3.fc35.aarch64"
     },
     "openssh": {
-      "evra": "8.6p1-5.fc34.aarch64"
+      "evra": "8.7p1-2.fc35.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.6p1-5.fc34.aarch64"
+      "evra": "8.7p1-2.fc35.aarch64"
     },
     "openssh-server": {
-      "evra": "8.6p1-5.fc34.aarch64"
+      "evra": "8.7p1-2.fc35.aarch64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-2.fc34.aarch64"
+      "evra": "1:1.1.1l-2.fc35.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-2.fc34.aarch64"
+      "evra": "1:1.1.1l-2.fc35.aarch64"
     },
     "os-prober": {
-      "evra": "1.77-7.fc34.aarch64"
+      "evra": "1.77-8.fc35.aarch64"
     },
     "ostree": {
-      "evra": "2021.5-2.fc34.aarch64"
+      "evra": "2021.5-2.fc35.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.5-2.fc34.aarch64"
+      "evra": "2021.5-2.fc35.aarch64"
     },
     "p11-kit": {
-      "evra": "0.23.22-3.fc34.aarch64"
+      "evra": "0.23.22-4.fc35.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-3.fc34.aarch64"
+      "evra": "0.23.22-4.fc35.aarch64"
     },
     "pam": {
-      "evra": "1.5.1-7.fc34.aarch64"
+      "evra": "1.5.2-5.fc35.aarch64"
     },
     "passwd": {
-      "evra": "0.80-10.fc34.aarch64"
+      "evra": "0.80-11.fc35.aarch64"
     },
     "pcre": {
-      "evra": "8.44-3.fc34.1.aarch64"
+      "evra": "8.45-1.fc35.aarch64"
     },
     "pcre2": {
-      "evra": "10.36-4.fc34.aarch64"
+      "evra": "10.37-4.fc35.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.36-4.fc34.noarch"
+      "evra": "10.37-4.fc35.noarch"
     },
     "pigz": {
-      "evra": "2.5-1.fc34.aarch64"
+      "evra": "2.5-2.fc35.aarch64"
     },
     "pkgconf": {
-      "evra": "1.7.3-6.fc34.aarch64"
+      "evra": "1.8.0-1.fc35.aarch64"
     },
     "pkgconf-m4": {
-      "evra": "1.7.3-6.fc34.noarch"
+      "evra": "1.8.0-1.fc35.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.7.3-6.fc34.aarch64"
+      "evra": "1.8.0-1.fc35.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.1-1.fc34.aarch64"
+      "evra": "3:3.4.1-1.fc35.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.1-1.fc34.aarch64"
+      "evra": "3:3.4.1-1.fc35.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.2-1.fc34.aarch64"
+      "evra": "3.3-1.fc35.aarch64"
     },
     "polkit": {
-      "evra": "0.117-3.fc34.1.aarch64"
+      "evra": "0.120-1.fc35.aarch64"
     },
     "polkit-libs": {
-      "evra": "0.117-3.fc34.1.aarch64"
+      "evra": "0.120-1.fc35.aarch64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-19.fc34.aarch64"
+      "evra": "0.1-20.fc35.aarch64"
     },
     "popt": {
-      "evra": "1.18-4.fc34.aarch64"
+      "evra": "1.18-6.fc35.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-1.fc34.1.aarch64"
+      "evra": "3.3.17-3.fc35.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.3.3-7.fc34.aarch64"
+      "evra": "1.4.0-1.fc35.aarch64"
     },
     "psmisc": {
-      "evra": "23.4-1.fc34.aarch64"
+      "evra": "23.4-2.fc35.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20190417-5.fc34.noarch"
+      "evra": "20210518-2.fc35.noarch"
     },
     "readline": {
-      "evra": "8.1-2.fc34.aarch64"
+      "evra": "8.1-3.fc35.aarch64"
     },
     "rpcbind": {
-      "evra": "1.2.6-0.fc34.aarch64"
+      "evra": "1.2.6-1.fc35.aarch64"
     },
     "rpm": {
-      "evra": "4.16.1.3-1.fc34.aarch64"
+      "evra": "4.17.0-1.fc35.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.16.1.3-1.fc34.aarch64"
+      "evra": "4.17.0-1.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.12-2.fc34.aarch64"
+      "evra": "2021.12-2.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.12-2.fc34.aarch64"
+      "evra": "2021.12-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.16.1.3-1.fc34.aarch64"
+      "evra": "4.17.0-1.fc35.aarch64"
     },
     "rsync": {
-      "evra": "3.2.3-5.fc34.aarch64"
+      "evra": "3.2.3-8.fc35.aarch64"
     },
     "runc": {
-      "evra": "2:1.0.2-2.fc34.aarch64"
+      "evra": "2:1.0.2-2.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.8-0.fc34.aarch64"
+      "evra": "2:4.15.0-13.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.14.8-0.fc34.noarch"
+      "evra": "2:4.15.0-13.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.8-0.fc34.aarch64"
+      "evra": "2:4.15.0-13.fc35.aarch64"
     },
     "sed": {
-      "evra": "4.8-7.fc34.aarch64"
+      "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "34.22-1.fc34.noarch"
+      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.22-1.fc34.noarch"
+      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
     },
     "setup": {
-      "evra": "2.13.7-3.fc34.noarch"
+      "evra": "2.13.9.1-2.fc35.noarch"
     },
     "sg3_utils": {
-      "evra": "1.45-4.fc34.aarch64"
+      "evra": "1.46-2.fc35.aarch64"
     },
     "sg3_utils-libs": {
-      "evra": "1.45-4.fc34.aarch64"
+      "evra": "1.46-2.fc35.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.8.1-9.fc34.aarch64"
+      "evra": "2:4.9-3.fc35.aarch64"
+    },
+    "shadow-utils-subid": {
+      "evra": "2:4.9-3.fc35.aarch64"
     },
     "shared-mime-info": {
-      "evra": "2.1-2.fc34.aarch64"
+      "evra": "2.1-3.fc35.aarch64"
     },
     "shim-aa64": {
-      "evra": "15.4-4.aarch64"
+      "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.5.0-2.fc34.aarch64"
+      "evra": "1:1.5.0-2.fc35.aarch64"
     },
     "slang": {
-      "evra": "2.3.2-9.fc34.aarch64"
+      "evra": "2.3.2-10.fc35.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.1.12-2.fc34.aarch64"
+      "evra": "1.1.12-2.fc35.aarch64"
     },
     "snappy": {
-      "evra": "1.1.8-5.fc34.aarch64"
+      "evra": "1.1.9-3.fc35.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.1-2.fc34.aarch64"
+      "evra": "1.7.4.1-3.fc35.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.34.1-2.fc34.aarch64"
+      "evra": "3.36.0-3.fc35.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5-3.20210913gite048580.fc34.aarch64"
+      "evra": "4.5-3.20210913gite048580.fc35.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.2-7.fc34.aarch64"
+      "evra": "0.1.2-8.fc35.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-client": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-common": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-2.fc34.aarch64"
+      "evra": "2.5.2-5.fc35.aarch64"
     },
     "stalld": {
-      "evra": "1.14.1-1.fc34.aarch64"
+      "evra": "1.14.1-1.fc35.aarch64"
     },
     "sudo": {
-      "evra": "1.9.5p2-1.fc34.aarch64"
+      "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "248.9-1.fc34.aarch64"
+      "evra": "249.4-2.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "248.9-1.fc34.aarch64"
+      "evra": "249.4-2.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "248.9-1.fc34.aarch64"
+      "evra": "249.4-2.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "248.9-1.fc34.aarch64"
+      "evra": "249.4-2.fc35.aarch64"
     },
-    "systemd-rpm-macros": {
-      "evra": "248.9-1.fc34.noarch"
+    "systemd-resolved": {
+      "evra": "249.4-2.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "248.9-1.fc34.aarch64"
+      "evra": "249.4-2.fc35.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-1.fc34.aarch64"
+      "evra": "2:1.34-2.fc35.aarch64"
     },
     "teamd": {
-      "evra": "1.31-3.fc34.aarch64"
+      "evra": "1.31-4.fc35.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.2-7.fc34.aarch64"
+      "evra": "0.0.99.2^3.git075b9a8d2779-4.fc35.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.1.1-1.fc34.aarch64"
+      "evra": "5.2-1.fc35.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.1.0-1.fc34.aarch64"
+      "evra": "3.1.0-3.fc35.aarch64"
     },
     "tzdata": {
-      "evra": "2021c-1.fc34.noarch"
+      "evra": "2021e-1.fc35.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.12.1-3.fc34.aarch64"
+      "evra": "0.13.0-3.fc35.aarch64"
     },
     "util-linux": {
-      "evra": "2.36.2-1.fc34.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
+    },
+    "util-linux-core": {
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3512-1.fc34.aarch64"
+      "evra": "2:8.2.3568-1.fc35.aarch64"
     },
     "which": {
-      "evra": "2.21-26.fc34.aarch64"
+      "evra": "2.21-27.fc35.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-1.fc34.aarch64"
+      "evra": "1.0.20210914-1.fc35.aarch64"
     },
     "xfsprogs": {
-      "evra": "5.10.0-2.fc34.aarch64"
+      "evra": "5.12.0-2.fc35.aarch64"
     },
     "xz": {
-      "evra": "5.2.5-5.fc34.aarch64"
+      "evra": "5.2.5-7.fc35.aarch64"
     },
     "xz-libs": {
-      "evra": "5.2.5-5.fc34.aarch64"
+      "evra": "5.2.5-7.fc35.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-16.fc34.aarch64"
+      "evra": "2.1.0-17.fc35.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.1.15-1.fc34.aarch64"
+      "evra": "1.1.15-2.fc35.aarch64"
     },
     "zincati": {
-      "evra": "0.0.23-1.fc34.aarch64"
+      "evra": "0.0.23-1.fc35.aarch64"
     },
     "zlib": {
-      "evra": "1.2.11-26.fc34.aarch64"
+      "evra": "1.2.11-30.fc35.aarch64"
     },
     "zram-generator": {
-      "evra": "0.3.2-4.fc34.aarch64"
+      "evra": "1.0.1-3.fc35.aarch64"
     }
   },
   "metadata": {
-    "generated": "2021-11-02T21:10:37Z",
+    "generated": "2021-11-04T17:40:53Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2021-04-23T10:47:46Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2021-11-01T21:45:54Z"
+        "generated": "2021-11-03T21:54:52Z"
+      },
+      "fedora-next": {
+        "generated": "2021-10-29T10:17:31Z"
       },
-      "fedora-updates": {
-        "generated": "2021-11-02T00:59:12Z"
+      "fedora-next-updates": {
+        "generated": "2021-11-04T01:31:56Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5ee2096a90..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,22 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  dracut:
-    evr: 055-6.fc34
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943
-      type: fast-track
-  dracut-network:                                                                       
-    evr: 055-6.fc34                                                             
-    metadata:                                                                   
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1     
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943        
-      type: fast-track
-  dracut-squash:
-    evr: 055-6.fc34                                                             
-    metadata:                                                                   
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-854826abc1     
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/943        
-      type: fast-track
+packages: {}
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 16e146cb70..55359c0a0e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1211 +1,1217 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.30.6-1.fc34.x86_64"
+      "evra": "1:1.32.12-2.fc35.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.30.6-1.fc34.x86_64"
+      "evra": "1:1.32.12-2.fc35.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.30.6-1.fc34.x86_64"
+      "evra": "1:1.32.12-2.fc35.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.30.6-1.fc34.x86_64"
+      "evra": "1:1.32.12-2.fc35.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.30.6-1.fc34.x86_64"
+      "evra": "1:1.32.12-2.fc35.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.1.1-1.fc34.noarch"
+      "evra": "2.3.1.1-2.fc35.noarch"
     },
     "acl": {
-      "evra": "2.3.1-1.fc34.x86_64"
+      "evra": "2.3.1-2.fc35.x86_64"
     },
     "adcli": {
-      "evra": "0.9.1-3.fc34.x86_64"
+      "evra": "0.9.1-9.fc35.x86_64"
     },
     "afterburn": {
-      "evra": "5.0.0-1.fc34.x86_64"
+      "evra": "5.1.0-1.fc35.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.0.0-1.fc34.x86_64"
+      "evra": "5.1.0-1.fc35.x86_64"
     },
     "alternatives": {
-      "evra": "1.15-2.fc34.x86_64"
+      "evra": "1.19-1.fc35.x86_64"
     },
     "attr": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-3.fc35.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.6-1.fc34.x86_64"
+      "evra": "3.0.6-1.fc35.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-14.fc34.x86_64"
+      "evra": "0.8-14.fc35.x86_64"
     },
     "basesystem": {
-      "evra": "11-11.fc34.noarch"
+      "evra": "11-12.fc35.noarch"
     },
     "bash": {
-      "evra": "5.1.0-2.fc34.x86_64"
+      "evra": "5.1.8-2.fc35.x86_64"
     },
     "bash-completion": {
-      "evra": "1:2.11-2.fc34.noarch"
+      "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.21-1.fc34.x86_64"
+      "evra": "32:9.16.22-1.fc35.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.21-1.fc34.noarch"
+      "evra": "32:9.16.22-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.21-1.fc34.x86_64"
+      "evra": "32:9.16.22-1.fc35.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.6-1.fc34.x86_64"
+      "evra": "0.2.6-1.fc35.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.2-2.fc34.x86_64"
+      "evra": "3.5.2-2.fc35.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.14.2-1.fc34.x86_64"
+      "evra": "5.14.2-1.fc35.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.4.1-3.fc34.x86_64"
+      "evra": "0.5.0-1.fc35.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-6.fc34.x86_64"
+      "evra": "1.0.8-9.fc35.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-6.fc34.x86_64"
+      "evra": "1.0.8-9.fc35.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.2-1.fc34.x86_64"
+      "evra": "1.17.2-1.fc35.x86_64"
     },
     "ca-certificates": {
-      "evra": "2021.2.50-1.0.fc34.noarch"
+      "evra": "2021.2.50-3.fc35.noarch"
     },
     "catatonit": {
-      "evra": "0.1.6-1.fc34.x86_64"
+      "evra": "0.1.6-1.fc35.x86_64"
     },
     "chrony": {
-      "evra": "4.1-1.fc34.x86_64"
+      "evra": "4.1-3.fc35.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.13-3.fc34.x86_64"
+      "evra": "6.13-3.fc35.x86_64"
     },
     "clevis": {
-      "evra": "18-1.fc34.x86_64"
+      "evra": "18-3.fc35.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-1.fc34.x86_64"
+      "evra": "18-3.fc35.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-1.fc34.x86_64"
+      "evra": "18-3.fc35.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-1.fc34.x86_64"
+      "evra": "18-3.fc35.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-8.fc34.noarch"
-    },
-    "compat-readline5": {
-      "evra": "5.2-39.fc34.x86_64"
+      "evra": "0.31-9.fc35.noarch"
     },
     "conmon": {
-      "evra": "2:2.0.30-2.fc34.x86_64"
+      "evra": "2:2.0.30-2.fc35.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-1.fc34.noarch"
+      "evra": "0.21.2-2.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-2.fc34.noarch"
+      "evra": "2:2.170.0-2.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.7-1.fc34.x86_64"
+      "evra": "1.5.7-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-1.fc34.x86_64"
+      "evra": "1.0.1-1.fc35.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-21.fc34.noarch"
+      "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.1-1.fc34.x86_64"
+      "evra": "0.10.1-1.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.1-1.fc34.x86_64"
+      "evra": "0.10.1-1.fc35.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-30.fc34.x86_64"
+      "evra": "8.32-31.fc35.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-30.fc34.x86_64"
+      "evra": "8.32-31.fc35.x86_64"
     },
     "cpio": {
-      "evra": "2.13-10.fc34.x86_64"
+      "evra": "2.13-11.fc35.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.6-27.fc34.x86_64"
+      "evra": "2.9.6-27.fc35.x86_64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-27.fc34.x86_64"
+      "evra": "2.9.6-27.fc35.x86_64"
     },
     "criu": {
-      "evra": "3.16.1-2.fc34.x86_64"
+      "evra": "3.16.1-2.fc35.x86_64"
     },
     "criu-libs": {
-      "evra": "3.16.1-2.fc34.x86_64"
+      "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.2-1.fc34.x86_64"
+      "evra": "1.2-1.fc35.x86_64"
     },
     "crypto-policies": {
-      "evra": "20210213-1.git5c710c0.fc34.noarch"
+      "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.3.6-1.fc34.x86_64"
+      "evra": "2.4.1-1.fc35.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.3.6-1.fc34.x86_64"
+      "evra": "2.4.1-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-7.fc34.x86_64"
+      "evra": "1:2.3.3op2-8.fc35.x86_64"
     },
     "curl": {
-      "evra": "7.76.1-12.fc34.x86_64"
+      "evra": "7.79.1-1.fc35.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-8.fc34.x86_64"
+      "evra": "2.1.27-13.fc35.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-8.fc34.x86_64"
+      "evra": "2.1.27-13.fc35.x86_64"
     },
     "dbus": {
-      "evra": "1:1.12.20-3.fc34.x86_64"
+      "evra": "1:1.12.20-5.fc35.x86_64"
     },
     "dbus-broker": {
-      "evra": "29-2.fc34.x86_64"
+      "evra": "29-4.fc35.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.12.20-3.fc34.noarch"
+      "evra": "1:1.12.20-5.fc35.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.20-3.fc34.x86_64"
+      "evra": "1:1.12.20-5.fc35.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.175-1.fc34.x86_64"
+      "evra": "1.02.175-6.fc35.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-1.fc34.x86_64"
+      "evra": "1.02.175-6.fc35.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-1.fc34.x86_64"
+      "evra": "1.02.175-6.fc35.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-1.fc34.x86_64"
+      "evra": "1.02.175-6.fc35.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.5-4.fc34.x86_64"
+      "evra": "0.8.6-5.fc35.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.5-4.fc34.x86_64"
+      "evra": "0.8.6-5.fc35.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-3.fc34.x86_64"
+      "evra": "0.9.0-6.fc35.x86_64"
     },
     "diffutils": {
-      "evra": "3.7-8.fc34.x86_64"
+      "evra": "3.8-1.fc35.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-2.fc34.x86_64"
+      "evra": "2.86-3.fc35.x86_64"
     },
     "dosfstools": {
-      "evra": "4.2-1.fc34.x86_64"
+      "evra": "4.2-2.fc35.x86_64"
     },
     "dracut": {
-      "evra": "055-6.fc34.x86_64"
+      "evra": "055-6.fc35.x86_64"
     },
     "dracut-network": {
-      "evra": "055-6.fc34.x86_64"
+      "evra": "055-6.fc35.x86_64"
     },
     "dracut-squash": {
-      "evra": "055-6.fc34.x86_64"
+      "evra": "055-6.fc35.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.45.6-5.fc34.x86_64"
+      "evra": "1.46.3-1.fc35.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.45.6-5.fc34.x86_64"
+      "evra": "1.46.3-1.fc35.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-4.fc34.noarch"
+      "evra": "5-4.fc35.noarch"
     },
     "efibootmgr": {
-      "evra": "16-10.fc34.x86_64"
+      "evra": "16-11.fc35.x86_64"
     },
     "efivar-libs": {
-      "evra": "37-15.fc34.x86_64"
+      "evra": "37-17.fc35.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.185-2.fc34.noarch"
+      "evra": "0.185-5.fc35.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.185-2.fc34.x86_64"
+      "evra": "0.185-5.fc35.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.185-2.fc34.x86_64"
+      "evra": "0.185-5.fc35.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.14-1.fc34.x86_64"
+      "evra": "2:5.14-1.fc35.x86_64"
     },
     "expat": {
-      "evra": "2.4.1-1.fc34.x86_64"
+      "evra": "2.4.1-2.fc35.x86_64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-11.fc34.x86_64"
+      "evra": "0.0.4-12.fc35.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "34-37.noarch"
+      "evra": "35-33.noarch"
     },
     "fedora-repos": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "34-2.noarch"
+      "evra": "35-1.noarch"
     },
     "file": {
-      "evra": "5.39-7.fc34.x86_64"
+      "evra": "5.40-9.fc35.x86_64"
     },
     "file-libs": {
-      "evra": "5.39-7.fc34.x86_64"
+      "evra": "5.40-9.fc35.x86_64"
     },
     "filesystem": {
-      "evra": "3.14-5.fc34.x86_64"
+      "evra": "3.14-7.fc35.x86_64"
     },
     "findutils": {
-      "evra": "1:4.8.0-2.fc34.x86_64"
+      "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.10.5-1.fc34.x86_64"
+      "evra": "1.12.2-1.fc35.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-2.fc34.x86_64"
+      "evra": "0.6.1-3.fc35.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-11.fc34.x86_64"
+      "evra": "2.9.9-13.fc35.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.4-1.fc34.x86_64"
+      "evra": "3.10.5-1.fc35.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-11.fc34.x86_64"
+      "evra": "2.9.9-13.fc35.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-2.fc34.x86_64"
+      "evra": "1.7.1-2.fc35.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-1.fc34.x86_64"
+      "evra": "3.7.2-2.fc35.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.4-1.fc34.x86_64"
+      "evra": "3.10.5-1.fc35.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.4-1.fc34.x86_64"
+      "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.5.12-1.fc34.x86_64"
+      "evra": "1.7.0-1.fc35.x86_64"
     },
     "gawk": {
-      "evra": "5.1.0-3.fc34.x86_64"
+      "evra": "5.1.0-4.fc35.x86_64"
+    },
+    "gdbm-libs": {
+      "evra": "1:1.22-1.fc35.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.8-1.fc34.x86_64"
+      "evra": "1.0.8-2.fc35.x86_64"
     },
     "gettext": {
-      "evra": "0.21-4.fc34.x86_64"
+      "evra": "0.21-8.fc35.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21-4.fc34.x86_64"
+      "evra": "0.21-8.fc35.x86_64"
     },
     "git-core": {
-      "evra": "2.31.1-3.fc34.x86_64"
+      "evra": "2.33.1-1.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.68.4-1.fc34.x86_64"
+      "evra": "2.70.1-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.33-20.fc34.x86_64"
+      "evra": "2.34-7.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.33-20.fc34.x86_64"
+      "evra": "2.34-7.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.33-20.fc34.x86_64"
+      "evra": "2.34-7.fc35.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.0-6.fc34.x86_64"
+      "evra": "1:6.2.0-7.fc35.x86_64"
     },
     "gnupg2": {
-      "evra": "2.2.27-4.fc34.x86_64"
+      "evra": "2.3.3-1.fc35.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.2-1.fc34.x86_64"
+      "evra": "3.7.2-2.fc35.x86_64"
     },
     "gpgme": {
-      "evra": "1.15.1-2.fc34.x86_64"
+      "evra": "1.15.1-6.fc35.x86_64"
     },
     "grep": {
-      "evra": "3.6-2.fc34.x86_64"
+      "evra": "3.6-4.fc35.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-6.fc34b.noarch"
+      "evra": "1:2.06-6.fc35.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-6.fc34b.x86_64"
+      "evra": "1:2.06-6.fc35.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-6.fc34b.x86_64"
+      "evra": "1:2.06-6.fc35.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-6.fc34b.noarch"
+      "evra": "1:2.06-6.fc35.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-6.fc34b.x86_64"
+      "evra": "1:2.06-6.fc35.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-6.fc34b.x86_64"
+      "evra": "1:2.06-6.fc35.x86_64"
     },
     "gzip": {
-      "evra": "1.10-4.fc34.x86_64"
+      "evra": "1.10-5.fc35.x86_64"
     },
     "hostname": {
-      "evra": "3.23-4.fc34.x86_64"
+      "evra": "3.23-5.fc35.x86_64"
     },
     "ignition": {
-      "evra": "2.12.0-3.fc34.x86_64"
+      "evra": "2.12.0-3.fc35.x86_64"
     },
     "inih": {
-      "evra": "49-3.fc34.x86_64"
+      "evra": "49-4.fc35.x86_64"
     },
     "iproute": {
-      "evra": "5.10.0-2.fc34.x86_64"
+      "evra": "5.13.0-2.fc35.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.10.0-2.fc34.x86_64"
+      "evra": "5.13.0-2.fc35.x86_64"
     },
-    "iptables": {
-      "evra": "1.8.7-3.fc34.x86_64"
+    "iptables-legacy": {
+      "evra": "1.8.7-13.fc35.x86_64"
+    },
+    "iptables-legacy-libs": {
+      "evra": "1.8.7-13.fc35.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-3.fc34.x86_64"
+      "evra": "1.8.7-13.fc35.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-3.fc34.x86_64"
+      "evra": "1.8.7-13.fc35.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.7-8.fc34.x86_64"
+      "evra": "1.8.7-13.fc35.noarch"
     },
     "iputils": {
-      "evra": "20210202-2.fc34.x86_64"
+      "evra": "20210722-1.fc35.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-5.fc34.x86_64"
+      "evra": "2:1.7.0-8.fc35.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.2-5.gita8fcb37.fc34.x86_64"
+      "evra": "6.2.1.4-0.git095f59c.fc35.2.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.2-5.gita8fcb37.fc34.x86_64"
+      "evra": "6.2.1.4-0.git095f59c.fc35.2.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.100-1.fc34.x86_64"
+      "evra": "0.101-2.fc35.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-2.fc34.x86_64"
+      "evra": "2.13.1-3.fc35.x86_64"
     },
     "jose": {
-      "evra": "11-1.fc34.x86_64"
+      "evra": "11-3.fc35.x86_64"
     },
     "jq": {
-      "evra": "1.6-10.fc34.x86_64"
+      "evra": "1.6-10.fc35.x86_64"
     },
     "json-c": {
-      "evra": "0.14-8.fc34.x86_64"
+      "evra": "0.15-2.fc35.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.6-1.fc34.x86_64"
+      "evra": "1.6.6-1.fc35.x86_64"
     },
     "kbd": {
-      "evra": "2.4.0-2.fc34.x86_64"
+      "evra": "2.4.0-8.fc35.x86_64"
     },
     "kbd-misc": {
-      "evra": "2.4.0-2.fc34.noarch"
+      "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.14-200.fc34.x86_64"
+      "evra": "5.14.13-300.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.14-200.fc34.x86_64"
+      "evra": "5.14.13-300.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.14-200.fc34.x86_64"
+      "evra": "5.14.13-300.fc35.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.22-4.fc34.x86_64"
+      "evra": "2.0.22-7.fc35.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-2.fc34.x86_64"
+      "evra": "1.6.1-3.fc35.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-2.fc34.x86_64"
+      "evra": "1.6.1-3.fc35.x86_64"
     },
     "kmod": {
-      "evra": "29-2.fc34.x86_64"
+      "evra": "29-4.fc35.x86_64"
     },
     "kmod-libs": {
-      "evra": "29-2.fc34.x86_64"
+      "evra": "29-4.fc35.x86_64"
     },
     "kpartx": {
-      "evra": "0.8.5-4.fc34.x86_64"
+      "evra": "0.8.6-5.fc35.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-2.fc34.x86_64"
+      "evra": "1.19.2-2.fc35.x86_64"
     },
     "less": {
-      "evra": "581.2-1.fc34.x86_64"
+      "evra": "590-2.fc35.x86_64"
     },
     "libacl": {
-      "evra": "2.3.1-1.fc34.x86_64"
+      "evra": "2.3.1-2.fc35.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-11.fc34.x86_64"
+      "evra": "0.3.111-12.fc35.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.2-2.fc34.x86_64"
+      "evra": "3.5.2-2.fc35.x86_64"
     },
     "libargon2": {
-      "evra": "20171227-6.fc34.x86_64"
+      "evra": "20171227-7.fc35.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.5-1.fc34.x86_64"
+      "evra": "2.5.5-3.fc35.x86_64"
     },
     "libattr": {
-      "evra": "2.5.1-1.fc34.x86_64"
+      "evra": "2.5.1-3.fc35.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-47.fc34.x86_64"
+      "evra": "0.1.1-48.fc35.x86_64"
     },
     "libblkid": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libbrotli": {
-      "evra": "1.0.9-4.fc34.x86_64"
+      "evra": "1.0.9-6.fc35.x86_64"
     },
     "libbsd": {
-      "evra": "0.10.0-7.fc34.x86_64"
+      "evra": "0.10.0-8.fc35.x86_64"
     },
     "libcap": {
-      "evra": "2.48-2.fc34.x86_64"
+      "evra": "2.48-3.fc35.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-4.fc34.x86_64"
+      "evra": "0.8.2-6.fc35.x86_64"
     },
     "libcbor": {
-      "evra": "0.7.0-3.fc34.x86_64"
+      "evra": "0.7.0-4.fc35.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-47.fc34.x86_64"
+      "evra": "0.7.0-48.fc35.x86_64"
     },
     "libcom_err": {
-      "evra": "1.45.6-5.fc34.x86_64"
+      "evra": "1.46.3-1.fc35.x86_64"
     },
     "libcurl": {
-      "evra": "7.76.1-12.fc34.x86_64"
+      "evra": "7.79.1-1.fc35.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-21.fc34.x86_64"
+      "evra": "0.14-22.fc35.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-49.fc34.x86_64"
+      "evra": "5.3.28-50.fc35.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-47.fc34.x86_64"
+      "evra": "0.5.0-48.fc35.x86_64"
     },
     "libeconf": {
-      "evra": "0.4.0-1.fc34.x86_64"
+      "evra": "0.4.0-2.fc35.x86_64"
     },
     "libedit": {
-      "evra": "3.1-38.20210714cvs.fc34.x86_64"
+      "evra": "3.1-40.20210910cvs.fc35.x86_64"
     },
     "libevent": {
-      "evra": "2.1.12-3.fc34.x86_64"
+      "evra": "2.1.12-4.fc35.x86_64"
     },
     "libfdisk": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libffi": {
-      "evra": "3.1-28.fc34.x86_64"
+      "evra": "3.1-29.fc35.x86_64"
     },
     "libfido2": {
-      "evra": "1.6.0-2.fc34.x86_64"
+      "evra": "1.8.0-1.fc35.x86_64"
     },
     "libgcab1": {
-      "evra": "1.4-4.fc34.x86_64"
+      "evra": "1.4-5.fc35.x86_64"
     },
     "libgcc": {
-      "evra": "11.2.1-1.fc34.x86_64"
+      "evra": "11.2.1-1.fc35.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.9.3-3.fc34.x86_64"
+      "evra": "1.9.4-1.fc35.x86_64"
     },
     "libgomp": {
-      "evra": "11.2.1-1.fc34.x86_64"
+      "evra": "11.2.1-1.fc35.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.42-1.fc34.x86_64"
+      "evra": "1.42-3.fc35.x86_64"
     },
     "libgudev": {
-      "evra": "236-1.fc34.x86_64"
+      "evra": "237-1.fc35.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.8-1.fc34.x86_64"
+      "evra": "0.3.8-1.fc35.x86_64"
     },
     "libibverbs": {
-      "evra": "37.0-1.fc34.x86_64"
+      "evra": "37.0-1.fc35.x86_64"
     },
     "libicu": {
-      "evra": "67.1-7.fc34.x86_64"
+      "evra": "69.1-2.fc35.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.2-1.fc34.x86_64"
+      "evra": "2.3.2-3.fc35.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-47.fc34.x86_64"
+      "evra": "1.3.1-48.fc35.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.6-1.fc34.x86_64"
+      "evra": "0.1.8-2.fc35.x86_64"
     },
     "libjose": {
-      "evra": "11-1.fc34.x86_64"
+      "evra": "11-3.fc35.x86_64"
     },
     "libkcapi": {
-      "evra": "1.2.1-1.fc34.x86_64"
+      "evra": "1.3.1-3.fc35.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.2.1-1.fc34.x86_64"
+      "evra": "1.3.1-3.fc35.x86_64"
     },
     "libksba": {
-      "evra": "1.5.0-2.fc34.x86_64"
+      "evra": "1.6.0-2.fc35.x86_64"
     },
     "libldb": {
-      "evra": "2.3.0-2.fc34.x86_64"
+      "evra": "2.4.0-2.fc35.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-10.fc34.x86_64"
+      "evra": "9-12.fc35.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.5.2-1.fc34.x86_64"
+      "evra": "1.5.2-2.fc35.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.4-13.fc34.x86_64"
+      "evra": "1.0.4-14.fc35.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-2.fc34.x86_64"
+      "evra": "2.13.0-3.fc35.x86_64"
     },
     "libmount": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libndp": {
-      "evra": "1.7-7.fc34.x86_64"
+      "evra": "1.8-2.fc35.x86_64"
     },
     "libnet": {
-      "evra": "1.2-2.fc34.x86_64"
+      "evra": "1.2-4.fc35.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-2.fc34.x86_64"
+      "evra": "1.0.8-3.fc35.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-19.fc34.x86_64"
+      "evra": "1.0.1-20.fc35.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-2.rc3.fc34.x86_64"
+      "evra": "1:2.5.4-2.rc3.fc35.x86_64"
     },
     "libnftnl": {
-      "evra": "1.1.9-2.fc34.x86_64"
+      "evra": "1.2.0-2.fc35.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.43.0-2.fc34.x86_64"
+      "evra": "1.45.1-1.fc35.x86_64"
     },
     "libnl3": {
-      "evra": "3.5.0-6.fc34.x86_64"
+      "evra": "3.5.0-8.fc35.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-6.fc34.x86_64"
+      "evra": "3.5.0-8.fc35.x86_64"
     },
     "libnsl2": {
-      "evra": "1.3.0-2.fc34.x86_64"
+      "evra": "1.3.0-4.fc35.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-47.fc34.x86_64"
+      "evra": "0.2.1-48.fc35.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-1.fc34.x86_64"
+      "evra": "14:1.10.1-2.fc35.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.7.3-6.fc34.x86_64"
+      "evra": "1.8.0-1.fc35.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.1-3.fc34.x86_64"
+      "evra": "0.21.1-4.fc35.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-6.fc34.x86_64"
+      "evra": "1.4.4-6.fc35.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-47.fc34.x86_64"
+      "evra": "0.1.5-48.fc35.x86_64"
     },
     "librepo": {
-      "evra": "1.14.2-1.fc34.x86_64"
+      "evra": "1.14.2-1.fc35.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-2.fc34.noarch"
+      "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.0-4.fc34.x86_64"
+      "evra": "2.5.0-5.fc35.x86_64"
     },
     "libselinux": {
-      "evra": "3.2-1.fc34.x86_64"
+      "evra": "3.3-1.fc35.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.2-1.fc34.x86_64"
+      "evra": "3.3-1.fc35.x86_64"
     },
     "libsemanage": {
-      "evra": "3.2-1.fc34.x86_64"
+      "evra": "3.3-1.fc35.x86_64"
     },
     "libsepol": {
-      "evra": "3.2-1.fc34.x86_64"
+      "evra": "3.3-1.fc35.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.13-2.fc34.x86_64"
+      "evra": "2.13-3.fc35.x86_64"
     },
     "libslirp": {
-      "evra": "4.4.0-4.fc34.x86_64"
+      "evra": "4.6.1-2.fc35.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.14.8-0.fc34.x86_64"
+      "evra": "2:4.15.0-13.fc35.x86_64"
     },
     "libsmbios": {
-      "evra": "2.4.3-2.fc34.x86_64"
+      "evra": "2.4.3-4.fc35.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.17-3.fc34.x86_64"
+      "evra": "0.7.19-3.fc35.x86_64"
     },
     "libss": {
-      "evra": "1.45.6-5.fc34.x86_64"
+      "evra": "1.46.3-1.fc35.x86_64"
     },
     "libssh": {
-      "evra": "0.9.6-1.fc34.x86_64"
+      "evra": "0.9.6-1.fc35.x86_64"
     },
     "libssh-config": {
-      "evra": "0.9.6-1.fc34.noarch"
+      "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "libstdc++": {
-      "evra": "11.2.1-1.fc34.x86_64"
+      "evra": "11.2.1-1.fc35.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.2-2.fc34.x86_64"
+      "evra": "2.3.3-2.fc35.x86_64"
     },
     "libtasn1": {
-      "evra": "4.16.0-4.fc34.x86_64"
+      "evra": "4.16.0-6.fc35.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.3-6.fc34.x86_64"
+      "evra": "1.4.4-3.fc35.x86_64"
     },
     "libteam": {
-      "evra": "1.31-3.fc34.x86_64"
+      "evra": "1.31-4.fc35.x86_64"
     },
     "libtevent": {
-      "evra": "0.11.0-0.fc34.x86_64"
-    },
-    "libtextstyle": {
-      "evra": "0.21-4.fc34.x86_64"
+      "evra": "0.11.0-1.fc35.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.2-0.fc34.x86_64"
+      "evra": "1.3.2-1.fc35.x86_64"
     },
     "libunistring": {
-      "evra": "0.9.10-10.fc34.x86_64"
+      "evra": "0.9.10-14.fc35.x86_64"
     },
-    "libusbx": {
-      "evra": "1.0.24-2.fc34.x86_64"
+    "libusb1": {
+      "evra": "1.0.24-4.fc35.x86_64"
     },
     "libuser": {
-      "evra": "0.63-4.fc34.x86_64"
+      "evra": "0.63-7.fc35.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-4.fc34.x86_64"
+      "evra": "1.2.1-5.fc35.x86_64"
     },
     "libuuid": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libuv": {
-      "evra": "1:1.42.0-2.fc34.x86_64"
+      "evra": "1:1.42.0-2.fc35.x86_64"
     },
     "libvarlink-util": {
-      "evra": "22-2.fc34.x86_64"
+      "evra": "22-3.fc35.x86_64"
     },
     "libverto": {
-      "evra": "0.3.2-1.fc34.x86_64"
+      "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.14.8-0.fc34.x86_64"
+      "evra": "2:4.15.0-13.fc35.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.26-2.fc34.x86_64"
+      "evra": "4.4.26-4.fc35.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.12-4.fc34.x86_64"
+      "evra": "2.9.12-6.fc35.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.3-1.fc34.x86_64"
+      "evra": "0.3.3-1.fc35.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-5.fc34.x86_64"
+      "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.0-1.fc34.x86_64"
+      "evra": "1.5.0-2.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-28.fc34.x86_64"
     },
     "linux-firmware": {
-      "evra": "20210919-125.fc34.noarch"
+      "evra": "20211027-126.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20210919-125.fc34.noarch"
+      "evra": "20211027-126.fc35.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-1.fc34.x86_64"
+      "evra": "0.9.29-2.fc35.x86_64"
     },
     "logrotate": {
-      "evra": "3.18.0-3.fc34.x86_64"
+      "evra": "3.18.1-2.fc35.x86_64"
     },
     "lsof": {
-      "evra": "4.94.0-1.fc34.x86_64"
+      "evra": "4.94.0-2.fc35.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.3-1.fc34.x86_64"
+      "evra": "5.4.3-2.fc35.x86_64"
     },
     "luksmeta": {
-      "evra": "9-10.fc34.x86_64"
+      "evra": "9-12.fc35.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.11-1.fc34.x86_64"
+      "evra": "2.03.11-6.fc35.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-1.fc34.x86_64"
+      "evra": "2.03.11-6.fc35.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-2.fc34.x86_64"
+      "evra": "1.9.3-3.fc35.x86_64"
     },
     "lzo": {
-      "evra": "2.10-4.fc34.x86_64"
+      "evra": "2.10-5.fc35.x86_64"
     },
     "mdadm": {
-      "evra": "4.1-7.fc34.x86_64"
+      "evra": "4.2-rc2.fc35.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-46.fc34.x86_64"
+      "evra": "2:2.1-47.fc35.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.9-1.fc34.x86_64"
+      "evra": "20.10.9-1.fc35.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.4.0-4.fc34.x86_64"
+      "evra": "2:0.4.0-6.fc35.x86_64"
     },
     "mozjs78": {
-      "evra": "78.15.0-1.fc34.x86_64"
+      "evra": "78.15.0-1.fc35.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-7.fc34.x86_64"
+      "evra": "4.1.0-8.fc35.x86_64"
     },
     "ncurses": {
-      "evra": "6.2-4.20200222.fc34.x86_64"
+      "evra": "6.2-8.20210508.fc35.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.2-4.20200222.fc34.noarch"
+      "evra": "6.2-8.20210508.fc35.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-4.20200222.fc34.x86_64"
+      "evra": "6.2-8.20210508.fc35.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.59.20160912git.fc34.x86_64"
+      "evra": "2.0-0.60.20160912git.fc35.x86_64"
     },
     "nettle": {
-      "evra": "3.7.3-1.fc34.x86_64"
+      "evra": "3.7.3-2.fc35.x86_64"
     },
     "newt": {
-      "evra": "0.52.21-9.fc34.x86_64"
+      "evra": "0.52.21-11.fc35.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-2.rc3.fc34.x86_64"
+      "evra": "1:2.5.4-2.rc3.fc35.x86_64"
     },
     "nftables": {
-      "evra": "1:0.9.8-3.fc34.x86_64"
+      "evra": "1:1.0.0-1.fc35.x86_64"
     },
     "npth": {
-      "evra": "1.6-6.fc34.x86_64"
+      "evra": "1.6-7.fc35.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-18.fc34.x86_64"
+      "evra": "2.18.1-19.fc35.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-3.fc34.x86_64"
+      "evra": "2.0.14-4.fc35.x86_64"
     },
     "nvme-cli": {
-      "evra": "1.11.1-3.fc34.x86_64"
+      "evra": "1.11.1-4.fc35.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.7.1-1.fc34.x86_64"
+      "evra": "6.9.7.1-1.fc35.1.x86_64"
     },
     "openldap": {
-      "evra": "2.4.57-6.fc34.x86_64"
+      "evra": "2.4.59-3.fc35.x86_64"
     },
     "openssh": {
-      "evra": "8.6p1-5.fc34.x86_64"
+      "evra": "8.7p1-2.fc35.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.6p1-5.fc34.x86_64"
+      "evra": "8.7p1-2.fc35.x86_64"
     },
     "openssh-server": {
-      "evra": "8.6p1-5.fc34.x86_64"
+      "evra": "8.7p1-2.fc35.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-2.fc34.x86_64"
+      "evra": "1:1.1.1l-2.fc35.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-2.fc34.x86_64"
+      "evra": "1:1.1.1l-2.fc35.x86_64"
     },
     "os-prober": {
-      "evra": "1.77-7.fc34.x86_64"
+      "evra": "1.77-8.fc35.x86_64"
     },
     "ostree": {
-      "evra": "2021.5-2.fc34.x86_64"
+      "evra": "2021.5-2.fc35.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.5-2.fc34.x86_64"
+      "evra": "2021.5-2.fc35.x86_64"
     },
     "p11-kit": {
-      "evra": "0.23.22-3.fc34.x86_64"
+      "evra": "0.23.22-4.fc35.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-3.fc34.x86_64"
+      "evra": "0.23.22-4.fc35.x86_64"
     },
     "pam": {
-      "evra": "1.5.1-7.fc34.x86_64"
+      "evra": "1.5.2-5.fc35.x86_64"
     },
     "passwd": {
-      "evra": "0.80-10.fc34.x86_64"
+      "evra": "0.80-11.fc35.x86_64"
     },
     "pcre": {
-      "evra": "8.44-3.fc34.1.x86_64"
+      "evra": "8.45-1.fc35.x86_64"
     },
     "pcre2": {
-      "evra": "10.36-4.fc34.x86_64"
+      "evra": "10.37-4.fc35.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.36-4.fc34.noarch"
+      "evra": "10.37-4.fc35.noarch"
     },
     "pigz": {
-      "evra": "2.5-1.fc34.x86_64"
+      "evra": "2.5-2.fc35.x86_64"
     },
     "pkgconf": {
-      "evra": "1.7.3-6.fc34.x86_64"
+      "evra": "1.8.0-1.fc35.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.7.3-6.fc34.noarch"
+      "evra": "1.8.0-1.fc35.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.7.3-6.fc34.x86_64"
+      "evra": "1.8.0-1.fc35.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.1-1.fc34.x86_64"
+      "evra": "3:3.4.1-1.fc35.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.1-1.fc34.x86_64"
+      "evra": "3:3.4.1-1.fc35.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.2-1.fc34.x86_64"
+      "evra": "3.3-1.fc35.x86_64"
     },
     "polkit": {
-      "evra": "0.117-3.fc34.1.x86_64"
+      "evra": "0.120-1.fc35.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.117-3.fc34.1.x86_64"
+      "evra": "0.120-1.fc35.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-19.fc34.x86_64"
+      "evra": "0.1-20.fc35.x86_64"
     },
     "popt": {
-      "evra": "1.18-4.fc34.x86_64"
+      "evra": "1.18-6.fc35.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-1.fc34.1.x86_64"
+      "evra": "3.3.17-3.fc35.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.3.3-7.fc34.x86_64"
+      "evra": "1.4.0-1.fc35.x86_64"
     },
     "psmisc": {
-      "evra": "23.4-1.fc34.x86_64"
+      "evra": "23.4-2.fc35.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20190417-5.fc34.noarch"
+      "evra": "20210518-2.fc35.noarch"
     },
     "readline": {
-      "evra": "8.1-2.fc34.x86_64"
+      "evra": "8.1-3.fc35.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.6-0.fc34.x86_64"
+      "evra": "1.2.6-1.fc35.x86_64"
     },
     "rpm": {
-      "evra": "4.16.1.3-1.fc34.x86_64"
+      "evra": "4.17.0-1.fc35.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.16.1.3-1.fc34.x86_64"
+      "evra": "4.17.0-1.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.12-2.fc34.x86_64"
+      "evra": "2021.12-2.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.12-2.fc34.x86_64"
+      "evra": "2021.12-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.16.1.3-1.fc34.x86_64"
+      "evra": "4.17.0-1.fc35.x86_64"
     },
     "rsync": {
-      "evra": "3.2.3-5.fc34.x86_64"
+      "evra": "3.2.3-8.fc35.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.2-2.fc34.x86_64"
+      "evra": "2:1.0.2-2.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.14.8-0.fc34.x86_64"
+      "evra": "2:4.15.0-13.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.14.8-0.fc34.noarch"
+      "evra": "2:4.15.0-13.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.14.8-0.fc34.x86_64"
+      "evra": "2:4.15.0-13.fc35.x86_64"
     },
     "sed": {
-      "evra": "4.8-7.fc34.x86_64"
+      "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "34.22-1.fc34.noarch"
+      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "34.22-1.fc34.noarch"
+      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
     },
     "setup": {
-      "evra": "2.13.7-3.fc34.noarch"
+      "evra": "2.13.9.1-2.fc35.noarch"
     },
     "sg3_utils": {
-      "evra": "1.45-4.fc34.x86_64"
+      "evra": "1.46-2.fc35.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.45-4.fc34.x86_64"
+      "evra": "1.46-2.fc35.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.8.1-9.fc34.x86_64"
+      "evra": "2:4.9-3.fc35.x86_64"
+    },
+    "shadow-utils-subid": {
+      "evra": "2:4.9-3.fc35.x86_64"
     },
     "shared-mime-info": {
-      "evra": "2.1-2.fc34.x86_64"
+      "evra": "2.1-3.fc35.x86_64"
     },
     "shim-x64": {
-      "evra": "15.4-4.x86_64"
+      "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.5.0-2.fc34.x86_64"
+      "evra": "1:1.5.0-2.fc35.x86_64"
     },
     "slang": {
-      "evra": "2.3.2-9.fc34.x86_64"
+      "evra": "2.3.2-10.fc35.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.1.12-2.fc34.x86_64"
+      "evra": "1.1.12-2.fc35.x86_64"
     },
     "snappy": {
-      "evra": "1.1.8-5.fc34.x86_64"
+      "evra": "1.1.9-3.fc35.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.1-2.fc34.x86_64"
+      "evra": "1.7.4.1-3.fc35.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.34.1-2.fc34.x86_64"
+      "evra": "3.36.0-3.fc35.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5-3.20210913gite048580.fc34.x86_64"
+      "evra": "4.5-3.20210913gite048580.fc35.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.2-7.fc34.x86_64"
+      "evra": "0.1.2-8.fc35.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-2.fc34.x86_64"
+      "evra": "2.5.2-5.fc35.x86_64"
     },
     "stalld": {
-      "evra": "1.14.1-1.fc34.x86_64"
+      "evra": "1.14.1-1.fc35.x86_64"
     },
     "sudo": {
-      "evra": "1.9.5p2-1.fc34.x86_64"
+      "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "248.9-1.fc34.x86_64"
+      "evra": "249.4-2.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "248.9-1.fc34.x86_64"
+      "evra": "249.4-2.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "248.9-1.fc34.x86_64"
+      "evra": "249.4-2.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "248.9-1.fc34.x86_64"
+      "evra": "249.4-2.fc35.x86_64"
     },
-    "systemd-rpm-macros": {
-      "evra": "248.9-1.fc34.noarch"
+    "systemd-resolved": {
+      "evra": "249.4-2.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "248.9-1.fc34.x86_64"
+      "evra": "249.4-2.fc35.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-1.fc34.x86_64"
+      "evra": "2:1.34-2.fc35.x86_64"
     },
     "teamd": {
-      "evra": "1.31-3.fc34.x86_64"
+      "evra": "1.31-4.fc35.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.2-7.fc34.x86_64"
+      "evra": "0.0.99.2^3.git075b9a8d2779-4.fc35.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.1.1-1.fc34.x86_64"
+      "evra": "5.2-1.fc35.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.1.0-1.fc34.x86_64"
+      "evra": "3.1.0-3.fc35.x86_64"
     },
     "tzdata": {
-      "evra": "2021c-1.fc34.noarch"
+      "evra": "2021e-1.fc35.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.12.1-3.fc34.x86_64"
+      "evra": "0.13.0-3.fc35.x86_64"
     },
     "util-linux": {
-      "evra": "2.36.2-1.fc34.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
+    },
+    "util-linux-core": {
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3512-1.fc34.x86_64"
+      "evra": "2:8.2.3568-1.fc35.x86_64"
     },
     "which": {
-      "evra": "2.21-26.fc34.x86_64"
+      "evra": "2.21-27.fc35.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-1.fc34.x86_64"
+      "evra": "1.0.20210914-1.fc35.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.10.0-2.fc34.x86_64"
+      "evra": "5.12.0-2.fc35.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-5.fc34.x86_64"
+      "evra": "5.2.5-7.fc35.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-5.fc34.x86_64"
+      "evra": "5.2.5-7.fc35.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-16.fc34.x86_64"
+      "evra": "2.1.0-17.fc35.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.15-1.fc34.x86_64"
+      "evra": "1.1.15-2.fc35.x86_64"
     },
     "zincati": {
-      "evra": "0.0.23-1.fc34.x86_64"
+      "evra": "0.0.23-1.fc35.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-26.fc34.x86_64"
+      "evra": "1.2.11-30.fc35.x86_64"
     },
     "zram-generator": {
-      "evra": "0.3.2-4.fc34.x86_64"
+      "evra": "1.0.1-3.fc35.x86_64"
     }
   },
   "metadata": {
-    "generated": "2021-11-02T21:11:00Z",
+    "generated": "2021-11-04T17:40:55Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2021-04-23T10:47:57Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2021-11-01T21:44:26Z"
+        "generated": "2021-11-03T22:02:11Z"
+      },
+      "fedora-next": {
+        "generated": "2021-10-29T10:17:40Z"
       },
-      "fedora-updates": {
-        "generated": "2021-11-02T00:59:44Z"
+      "fedora-next-updates": {
+        "generated": "2021-11-04T01:32:06Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index 2acf1e4979..3d9d6abf6f 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -1,7 +1,7 @@
 ref: fedora/${basearch}/coreos/testing-devel
 include: manifests/fedora-coreos.yaml
 
-releasever: "34"
+releasever: "35"
 
 rojig:
   license: MIT
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 8ffa894673..2b35ce5ce8 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -164,6 +164,12 @@ packages:
   # zram-generator (but not zram-generator-defaults) for F33 change
   # https://github.com/coreos/fedora-coreos-tracker/issues/509
   - zram-generator
+  # resolved was broken out to its own package in rawhide/f35
+  - systemd-resolved
+  # In F35+ need `iptables-legacy` package
+  # See https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
+  - iptables-legacy
+
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened
 # yet.  Also we may want to add to rpm-ostree something like arch negation;
@@ -185,3 +191,9 @@ packages-aarch64:
 arch-include:
   x86_64: bootupd.yaml
   aarch64: bootupd.yaml
+
+remove-from-packages:
+  # Hopefully short-term hack -- see https://github.com/coreos/fedora-coreos-config/pull/1206#discussion_r705425869.
+  # This keeps the size down and ensures nothing tries to use it, preventing us
+  # from shedding the dep eventually.
+  - [cracklib-dicts, .*]

From e48ccdc4a9f8c631a60e0288c8ef0cef6d0fdfdc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Nov 2021 02:50:00 +0000
Subject: [PATCH 0552/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/585/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 60 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 60 +++++++++++++++++++-------------------
 2 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8c58f41682..698bcb6895 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.0-1.fc35.aarch64"
+      "evra": "1.7.1-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.13-300.fc35.aarch64"
+      "evra": "5.14.15-300.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.13-300.fc35.aarch64"
+      "evra": "5.14.15-300.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.13-300.fc35.aarch64"
+      "evra": "5.14.15-300.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-48.fc35.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "libjcat": {
       "evra": "0.1.8-2.fc35.aarch64"
@@ -622,7 +622,7 @@
       "evra": "1.6.0-2.fc35.aarch64"
     },
     "libldb": {
-      "evra": "2.4.0-2.fc35.aarch64"
+      "evra": "2.4.1-1.fc35.aarch64"
     },
     "libluksmeta": {
       "evra": "9-12.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.0-13.fc35.aarch64"
+      "evra": "2:4.15.1-0.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.19-3.fc35.aarch64"
@@ -733,16 +733,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc35.aarch64"
@@ -790,7 +790,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.0-13.fc35.aarch64"
+      "evra": "2:4.15.1-0.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.aarch64"
@@ -1018,13 +1018,13 @@
       "evra": "2:1.0.2-2.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.0-13.fc35.aarch64"
+      "evra": "2:4.15.1-0.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.0-13.fc35.noarch"
+      "evra": "2:4.15.1-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.0-13.fc35.aarch64"
+      "evra": "2:4.15.1-0.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1081,28 +1081,28 @@
       "evra": "0.1.2-8.fc35.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-client": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-common": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-5.fc35.aarch64"
+      "evra": "2.6.0-2.fc35.aarch64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-04T17:40:53Z",
+    "generated": "2021-11-05T01:28:22Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2021-11-03T21:54:52Z"
+      "fedora": {
+        "generated": "2021-10-26T05:31:21Z"
       },
-      "fedora-next": {
-        "generated": "2021-10-29T10:17:31Z"
+      "fedora-coreos-pool": {
+        "generated": "2021-11-04T18:48:55Z"
       },
-      "fedora-next-updates": {
-        "generated": "2021-11-04T01:31:56Z"
+      "fedora-updates": {
+        "generated": "2021-11-05T01:00:39Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 55359c0a0e..e79043e0b0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.0-1.fc35.x86_64"
+      "evra": "1.7.1-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.13-300.fc35.x86_64"
+      "evra": "5.14.15-300.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.13-300.fc35.x86_64"
+      "evra": "5.14.15-300.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.13-300.fc35.x86_64"
+      "evra": "5.14.15-300.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-48.fc35.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "libjcat": {
       "evra": "0.1.8-2.fc35.x86_64"
@@ -628,7 +628,7 @@
       "evra": "1.6.0-2.fc35.x86_64"
     },
     "libldb": {
-      "evra": "2.4.0-2.fc35.x86_64"
+      "evra": "2.4.1-1.fc35.x86_64"
     },
     "libluksmeta": {
       "evra": "9-12.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.0-13.fc35.x86_64"
+      "evra": "2:4.15.1-0.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc35.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.0-13.fc35.x86_64"
+      "evra": "2:4.15.1-0.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.x86_64"
@@ -1030,13 +1030,13 @@
       "evra": "2:1.0.2-2.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.0-13.fc35.x86_64"
+      "evra": "2:4.15.1-0.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.0-13.fc35.noarch"
+      "evra": "2:4.15.1-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.0-13.fc35.x86_64"
+      "evra": "2:4.15.1-0.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1093,28 +1093,28 @@
       "evra": "0.1.2-8.fc35.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-client": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-common": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.5.2-5.fc35.x86_64"
+      "evra": "2.6.0-2.fc35.x86_64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-04T17:40:55Z",
+    "generated": "2021-11-05T01:36:10Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2021-11-03T22:02:11Z"
+      "fedora": {
+        "generated": "2021-10-26T05:31:27Z"
       },
-      "fedora-next": {
-        "generated": "2021-10-29T10:17:40Z"
+      "fedora-coreos-pool": {
+        "generated": "2021-11-04T18:47:53Z"
       },
-      "fedora-next-updates": {
-        "generated": "2021-11-04T01:32:06Z"
+      "fedora-updates": {
+        "generated": "2021-11-05T01:00:48Z"
       }
     }
   }

From 71eb15a30d77407b58347bc3992a5d4e8839f405 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 Nov 2021 21:33:27 +0000
Subject: [PATCH 0553/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/589/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 2 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 698bcb6895..1c51e87bc1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -94,16 +94,16 @@
       "evra": "6.13-3.fc35.aarch64"
     },
     "clevis": {
-      "evra": "18-3.fc35.aarch64"
+      "evra": "18-4.fc35.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-3.fc35.aarch64"
+      "evra": "18-4.fc35.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-3.fc35.aarch64"
+      "evra": "18-4.fc35.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-3.fc35.aarch64"
+      "evra": "18-4.fc35.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-9.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.1-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-7.fc35.aarch64"
+      "evra": "2.34-8.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-7.fc35.aarch64"
+      "evra": "2.34-8.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-7.fc35.aarch64"
+      "evra": "2.34-8.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.15-300.fc35.aarch64"
+      "evra": "5.14.16-301.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.15-300.fc35.aarch64"
+      "evra": "5.14.16-301.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.15-300.fc35.aarch64"
+      "evra": "5.14.16-301.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -694,7 +694,7 @@
       "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.0-5.fc35.aarch64"
+      "evra": "2.5.2-1.fc35.aarch64"
     },
     "libselinux": {
       "evra": "3.3-1.fc35.aarch64"
@@ -1045,10 +1045,10 @@
       "evra": "1.46-2.fc35.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-3.fc35.aarch64"
+      "evra": "2:4.9-5.fc35.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-3.fc35.aarch64"
+      "evra": "2:4.9-5.fc35.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1111,22 +1111,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.4-2.fc35.aarch64"
+      "evra": "249.6-2.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-05T01:28:22Z",
+    "generated": "2021-11-06T20:53:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-04T18:48:55Z"
+        "generated": "2021-11-05T21:08:58Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-05T01:00:39Z"
+        "generated": "2021-11-06T01:05:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e79043e0b0..035064ce08 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -94,16 +94,16 @@
       "evra": "6.13-3.fc35.x86_64"
     },
     "clevis": {
-      "evra": "18-3.fc35.x86_64"
+      "evra": "18-4.fc35.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-3.fc35.x86_64"
+      "evra": "18-4.fc35.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-3.fc35.x86_64"
+      "evra": "18-4.fc35.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-3.fc35.x86_64"
+      "evra": "18-4.fc35.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-9.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.1-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-7.fc35.x86_64"
+      "evra": "2.34-8.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-7.fc35.x86_64"
+      "evra": "2.34-8.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-7.fc35.x86_64"
+      "evra": "2.34-8.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.15-300.fc35.x86_64"
+      "evra": "5.14.16-301.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.15-300.fc35.x86_64"
+      "evra": "5.14.16-301.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.15-300.fc35.x86_64"
+      "evra": "5.14.16-301.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -700,7 +700,7 @@
       "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.0-5.fc35.x86_64"
+      "evra": "2.5.2-1.fc35.x86_64"
     },
     "libselinux": {
       "evra": "3.3-1.fc35.x86_64"
@@ -1057,10 +1057,10 @@
       "evra": "1.46-2.fc35.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-3.fc35.x86_64"
+      "evra": "2:4.9-5.fc35.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-3.fc35.x86_64"
+      "evra": "2:4.9-5.fc35.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1123,22 +1123,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.4-2.fc35.x86_64"
+      "evra": "249.6-2.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-05T01:36:10Z",
+    "generated": "2021-11-06T20:53:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-04T18:47:53Z"
+        "generated": "2021-11-05T21:13:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-05T01:00:48Z"
+        "generated": "2021-11-06T01:05:53Z"
       }
     }
   }

From 28e1f50e596219e58b196e7f8be4f6214287339f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 7 Nov 2021 21:30:06 +0000
Subject: [PATCH 0554/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/591/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1c51e87bc1..c7c3da76ba 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -382,16 +382,16 @@
       "evra": "3.6-4.fc35.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-6.fc35.noarch"
+      "evra": "1:2.06-8.fc35.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-6.fc35.aarch64"
+      "evra": "1:2.06-8.fc35.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-6.fc35.aarch64"
+      "evra": "1:2.06-8.fc35.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-6.fc35.aarch64"
+      "evra": "1:2.06-8.fc35.aarch64"
     },
     "gzip": {
       "evra": "1.10-5.fc35.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
+      "evra": "35.5-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
+      "evra": "35.5-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-06T20:53:53Z",
+    "generated": "2021-11-07T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-05T21:08:58Z"
+        "generated": "2021-11-06T21:42:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-06T01:05:43Z"
+        "generated": "2021-11-07T01:20:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 035064ce08..35ab28d16a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -382,22 +382,22 @@
       "evra": "3.6-4.fc35.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-6.fc35.noarch"
+      "evra": "1:2.06-8.fc35.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-6.fc35.x86_64"
+      "evra": "1:2.06-8.fc35.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-6.fc35.x86_64"
+      "evra": "1:2.06-8.fc35.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-6.fc35.noarch"
+      "evra": "1:2.06-8.fc35.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-6.fc35.x86_64"
+      "evra": "1:2.06-8.fc35.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-6.fc35.x86_64"
+      "evra": "1:2.06-8.fc35.x86_64"
     },
     "gzip": {
       "evra": "1.10-5.fc35.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
+      "evra": "35.5-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.3-1.20211019git94970fc.fc35.noarch"
+      "evra": "35.5-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-06T20:53:48Z",
+    "generated": "2021-11-07T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-05T21:13:55Z"
+        "generated": "2021-11-06T21:51:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-06T01:05:53Z"
+        "generated": "2021-11-07T01:20:54Z"
       }
     }
   }

From 294f5563b7e0bad8fabd8d5734d3529af5dac742 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 8 Nov 2021 15:16:43 -0500
Subject: [PATCH 0555/2157] Fedora 35 is out!

Let's update all references to point to F35 now.
---
 ci/buildroot/Dockerfile            | 4 ++--
 tests/kola/chrony/dhcp-propagation | 2 +-
 tests/kola/podman/dns/test.sh      | 4 ++--
 tests/kola/podman/rootless-systemd | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 8d086c1330..1825bb37db 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:34
+FROM registry.fedoraproject.org/fedora:35
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20210916
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20211108
diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index a097364b0f..9bf862cb63 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -35,7 +35,7 @@ test_setup() {
     #NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     NTPHOSTIP='129.6.15.30'
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:34
+FROM registry.fedoraproject.org/fedora:35
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 52087c951f..5bde158506 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -19,7 +19,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:34 getent hosts google.com
+podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:35 getent hosts google.com
 podman network rm testnetwork
 '
 
@@ -39,4 +39,4 @@ main() {
     fi
 }
 
-main
\ No newline at end of file
+main
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index d64784dc1c..170307772d 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -25,7 +25,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:34
+FROM registry.fedoraproject.org/fedora:35
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \

From 662c10c8e5ac07837363dcc3a714e80db7b28f24 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 8 Nov 2021 15:18:44 -0500
Subject: [PATCH 0556/2157] Revert "tests/kola/chrony: hardcode NTP server
 address for now"

This reverts commit bed3837a49d8ddbf149f52bc8cb654796243e104.

The issue should be resolved now as I can properly resolve
time-c-g.nist.gov
---
 tests/kola/chrony/dhcp-propagation | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 9bf862cb63..497848d26b 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -30,10 +30,7 @@ test_setup() {
 
     # run podman commands to set up dnsmasq server
     pushd $(mktemp -d)
-    # XXX: hardcode IP for now until can resolve in CentOS CI again
-    #      https://pagure.io/centos-infra/issue/356
-    #NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
-    NTPHOSTIP='129.6.15.30'
+    NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     cat <<EOF >Dockerfile
 FROM registry.fedoraproject.org/fedora:35
 RUN dnf -y install systemd dnsmasq iproute iputils \

From 21d7eea25291a57dd7360693758b52de504aafd2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Nov 2021 21:42:48 +0000
Subject: [PATCH 0557/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/595/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c7c3da76ba..310c6489e4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1003,10 +1003,10 @@
       "evra": "4.17.0-1.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.12-2.fc35.aarch64"
+      "evra": "2021.13-2.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.12-2.fc35.aarch64"
+      "evra": "2021.13-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-07T20:53:23Z",
+    "generated": "2021-11-09T20:55:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-06T21:42:38Z"
+        "generated": "2021-11-07T21:44:22Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-07T01:20:44Z"
+        "generated": "2021-11-09T02:00:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 35ab28d16a..da1bd95e8d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1015,10 +1015,10 @@
       "evra": "4.17.0-1.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.12-2.fc35.x86_64"
+      "evra": "2021.13-2.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.12-2.fc35.x86_64"
+      "evra": "2021.13-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-07T20:53:20Z",
+    "generated": "2021-11-09T20:56:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-06T21:51:25Z"
+        "generated": "2021-11-07T21:43:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-07T01:20:54Z"
+        "generated": "2021-11-09T02:00:39Z"
       }
     }
   }

From 548312e7741cc0be276235fec6105f06455081ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 Nov 2021 22:02:32 +0000
Subject: [PATCH 0558/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/597/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 310c6489e4..b76f0786db 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -694,7 +694,7 @@
       "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.2-1.fc35.aarch64"
+      "evra": "2.5.3-1.fc35.aarch64"
     },
     "libselinux": {
       "evra": "3.3-1.fc35.aarch64"
@@ -1156,7 +1156,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3568-1.fc35.aarch64"
+      "evra": "2:8.2.3582-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1180,7 +1180,7 @@
       "evra": "1.1.15-2.fc35.aarch64"
     },
     "zincati": {
-      "evra": "0.0.23-1.fc35.aarch64"
+      "evra": "0.0.24-1.fc35.aarch64"
     },
     "zlib": {
       "evra": "1.2.11-30.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-09T20:55:13Z",
+    "generated": "2021-11-10T20:58:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-07T21:44:22Z"
+        "generated": "2021-11-09T21:49:06Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-09T02:00:29Z"
+        "generated": "2021-11-10T02:16:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index da1bd95e8d..3ad1efcdd9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -700,7 +700,7 @@
       "evra": "2.15.2-6.fc35.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.2-1.fc35.x86_64"
+      "evra": "2.5.3-1.fc35.x86_64"
     },
     "libselinux": {
       "evra": "3.3-1.fc35.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3568-1.fc35.x86_64"
+      "evra": "2:8.2.3582-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1192,7 +1192,7 @@
       "evra": "1.1.15-2.fc35.x86_64"
     },
     "zincati": {
-      "evra": "0.0.23-1.fc35.x86_64"
+      "evra": "0.0.24-1.fc35.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-30.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-09T20:56:30Z",
+    "generated": "2021-11-10T20:59:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-07T21:43:50Z"
+        "generated": "2021-11-09T21:51:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-09T02:00:39Z"
+        "generated": "2021-11-10T02:17:03Z"
       }
     }
   }

From 1e2e2a73aefc51ed4c2ac1a61e53fcef8a52f947 Mon Sep 17 00:00:00 2001
From: Michael Nguyen <mnguyen@redhat.com>
Date: Thu, 4 Nov 2021 13:10:28 -0400
Subject: [PATCH 0559/2157] tests: separate out misc-ro test

Break up misc-ro into individual tests now that kola supports combing
non-exclusive tests into a single VM.
---
 tests/kola/boot/bootupd                       |  23 ++
 ...reos-platform-chrony-generator-permissions |  19 ++
 tests/kola/containers/cgroups-v2              |  25 +++
 tests/kola/disks/root-boot-ro                 |  22 ++
 tests/kola/disks/root-prjquota                |  18 ++
 tests/kola/disks/systemd-repart-service       |  19 ++
 tests/kola/files/aleph-version                |  16 ++
 tests/kola/files/dracut-executable            |  21 ++
 tests/kola/files/etc-passwd-group-permissions |  21 ++
 tests/kola/files/file-directory-permissions   |  19 ++
 tests/kola/files/license                      |  17 ++
 tests/kola/files/logrotate-service            |  19 ++
 tests/kola/files/remove-manifest-files        |  17 ++
 tests/kola/files/root-immutable-bit           |  17 ++
 tests/kola/files/rpmdb-sqlite                 |  19 ++
 tests/kola/files/sudoers-permissions          |  20 ++
 tests/kola/files/unlabeled-contexts           |  21 ++
 tests/kola/kdump/kdump-service                |  18 ++
 tests/kola/misc-ro                            | 200 ------------------
 tests/kola/networking/dnsmasq-service         |  20 ++
 tests/kola/networking/network-online-service  |  21 ++
 tests/kola/networking/nic-naming              |  19 ++
 tests/kola/networking/nm-start                |  34 +++
 tests/kola/networking/resolv/resolv           |  21 ++
 .../resolv/systemd-resolved-service           |  17 ++
 25 files changed, 483 insertions(+), 200 deletions(-)
 create mode 100755 tests/kola/boot/bootupd
 create mode 100755 tests/kola/chrony/coreos-platform-chrony-generator-permissions
 create mode 100755 tests/kola/containers/cgroups-v2
 create mode 100755 tests/kola/disks/root-boot-ro
 create mode 100755 tests/kola/disks/root-prjquota
 create mode 100755 tests/kola/disks/systemd-repart-service
 create mode 100755 tests/kola/files/aleph-version
 create mode 100755 tests/kola/files/dracut-executable
 create mode 100755 tests/kola/files/etc-passwd-group-permissions
 create mode 100755 tests/kola/files/file-directory-permissions
 create mode 100755 tests/kola/files/license
 create mode 100755 tests/kola/files/logrotate-service
 create mode 100755 tests/kola/files/remove-manifest-files
 create mode 100755 tests/kola/files/root-immutable-bit
 create mode 100755 tests/kola/files/rpmdb-sqlite
 create mode 100755 tests/kola/files/sudoers-permissions
 create mode 100755 tests/kola/files/unlabeled-contexts
 create mode 100755 tests/kola/kdump/kdump-service
 delete mode 100755 tests/kola/misc-ro
 create mode 100755 tests/kola/networking/dnsmasq-service
 create mode 100755 tests/kola/networking/network-online-service
 create mode 100755 tests/kola/networking/nic-naming
 create mode 100755 tests/kola/networking/nm-start
 create mode 100755 tests/kola/networking/resolv/resolv
 create mode 100755 tests/kola/networking/resolv/systemd-resolved-service

diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
new file mode 100755
index 0000000000..50ad6b01eb
--- /dev/null
+++ b/tests/kola/boot/bootupd
@@ -0,0 +1,23 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+case "$(arch)" in
+    x86_64|aarch64)
+        # This is just a basic sanity check; at some point we
+        # will implement "project-owned tests run in the pipeline"
+        # and be able to run the existing bootupd tests:
+        # https://github.com/coreos/fedora-coreos-config/pull/677
+        bootupctl status
+        ok bootupctl
+        ;;
+esac
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
new file mode 100755
index 0000000000..bec9c316e3
--- /dev/null
+++ b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# See https://github.com/coreos/coreos-assembler/pull/1786
+path=/usr/lib/systemd/system-generators/coreos-platform-chrony
+mode=$(stat -c '%a' ${path})
+if test "${mode}" != 555; then
+    fatal "For path ${path} expected mode 555, found ${mode}"
+fi
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
new file mode 100755
index 0000000000..7deda8a23d
--- /dev/null
+++ b/tests/kola/containers/cgroups-v2
@@ -0,0 +1,25 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure the system is on cgroups v2
+has_cgroup_karg=1
+grep -q systemd.unified_cgroup_hierarchy /proc/cmdline || has_cgroup_karg=0
+sys_fs_cgroup_source=$(findmnt -no SOURCE /sys/fs/cgroup)
+stream=$(rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"
+]')
+if [ $has_cgroup_karg == 1 ]; then
+    fatal "found systemd.unified_cgroup_hierarchy=0"
+fi
+if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
+    fatal "/sys/fs/cgroup is not cgroup2"
+fi
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
new file mode 100755
index 0000000000..cc87625660
--- /dev/null
+++ b/tests/kola/disks/root-boot-ro
@@ -0,0 +1,22 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+for part in /sysroot /boot; do
+    if ! findmnt -n -o options ${part} | grep -q "ro,"; then
+        fatal "${part} is missing ro option"
+    fi
+    if test -w "${part}" || touch "${part}/somefile" 2>/dev/null; then
+        fatal "${part} is writable"
+    fi
+done
+ok read-only partitions
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
new file mode 100755
index 0000000000..63ec7cb337
--- /dev/null
+++ b/tests/kola/disks/root-prjquota
@@ -0,0 +1,18 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
new file mode 100755
index 0000000000..a73ab1b362
--- /dev/null
+++ b/tests/kola/disks/systemd-repart-service
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure systemd-repart is masked
+# https://github.com/coreos/fedora-coreos-config/pull/744
+if [ $(systemctl is-enabled systemd-repart.service) != 'masked' ]; then
+    fatal "systemd-repart.service systemd unit should be masked"
+fi
+ok "systemd-repart.service systemd unit is masked"
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
new file mode 100755
index 0000000000..93043faafe
--- /dev/null
+++ b/tests/kola/files/aleph-version
@@ -0,0 +1,16 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
+jq < /sysroot/.coreos-aleph-version.json >/dev/null
+ok aleph
diff --git a/tests/kola/files/dracut-executable b/tests/kola/files/dracut-executable
new file mode 100755
index 0000000000..a04035f8cb
--- /dev/null
+++ b/tests/kola/files/dracut-executable
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# It's easy for dracut modules to accidentally ship scripts without +x set
+tmpd=$(mktemp -d)
+( cd ${tmpd} && lsinitrd --unpack /boot/ostree/*/init* )
+if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
+    fatal "Found non-executable scripts in initrd"
+fi
+rm -r ${tmpd}
+ok "All initrd scripts are executable"
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
new file mode 100755
index 0000000000..108234769d
--- /dev/null
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+for f in '/etc/passwd' '/etc/group'; do
+    if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
+        ls -al "${f}"
+        fatal "found incorrect permissions for ${f}"
+    fi
+done
+ok "correct ownership and mode on /etc/passwd & /etc/group"
+
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
new file mode 100755
index 0000000000..452240dc32
--- /dev/null
+++ b/tests/kola/files/file-directory-permissions
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+list="$(find /etc -type f,d -perm /022)"
+if [[ -n "${list}" ]]; then
+    find /etc -type f,d -perm /022 -print0 | xargs -0 ls -al
+    fatal "found files or directories with 'g+w' or 'o+w' permission"
+fi
+ok "no files with 'g+w' or 'o+w' permission found in /etc"
diff --git a/tests/kola/files/license b/tests/kola/files/license
new file mode 100755
index 0000000000..920947f5ae
--- /dev/null
+++ b/tests/kola/files/license
@@ -0,0 +1,17 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
+    fatal missing LICENSE
+fi
+ok LICENSE
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
new file mode 100755
index 0000000000..e0e26582a3
--- /dev/null
+++ b/tests/kola/files/logrotate-service
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Test some services are enabled or disabled appropriately
+for unit in logrotate; do
+    if ! systemctl is-enabled ${unit} 1>/dev/null; then
+        fatal "Unit ${unit} should be enabled"
+    fi
+done
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
new file mode 100755
index 0000000000..ce01e1d7b4
--- /dev/null
+++ b/tests/kola/files/remove-manifest-files
@@ -0,0 +1,17 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# See remove-files in the manifest
+if test -d /usr/share/info; then
+    fatal "found /usr/share/info"
+fi
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
new file mode 100755
index 0000000000..00a90155ae
--- /dev/null
+++ b/tests/kola/files/root-immutable-bit
@@ -0,0 +1,17 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! lsattr -d / | grep -qe '--i--'; then
+    fatal "missing immutable bit on /"
+fi
+ok immutable bit
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
new file mode 100755
index 0000000000..0c20d22df2
--- /dev/null
+++ b/tests/kola/files/rpmdb-sqlite
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure we're using the sqlite rpmdb backend
+# https://github.com/coreos/fedora-coreos-tracker/issues/623
+if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then
+    fatal "Didn't find file /usr/share/rpm/rpmdb.sqlite"
+fi
+ok rpmdb is sqlite
diff --git a/tests/kola/files/sudoers-permissions b/tests/kola/files/sudoers-permissions
new file mode 100755
index 0000000000..75bf5876aa
--- /dev/null
+++ b/tests/kola/files/sudoers-permissions
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Security scanners complain about world-readable files in /etc/sudoers.d.
+# Check that there aren't any.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1981979
+sudoers_files="$(find /etc/sudoers.d -type f ! -perm 600 2>&1)"
+if [ -n "$sudoers_files" ]; then
+    fatal "Found files in /etc/sudoers.d with unexpected permissions: $sudoers_files"
+fi
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
new file mode 100755
index 0000000000..697c57c95f
--- /dev/null
+++ b/tests/kola/files/unlabeled-contexts
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# check that no files are unlabeled
+unlabeled=$(find /var /etc -context '*:unlabeled_t:*')
+if [ -n "${unlabeled}" ]; then
+    echo "Found unlabeled files:"
+    echo "${unlabeled}"
+    exit 1
+fi
+ok no files with unlabeled_t SELinux label
diff --git a/tests/kola/kdump/kdump-service b/tests/kola/kdump/kdump-service
new file mode 100755
index 0000000000..965281e9c0
--- /dev/null
+++ b/tests/kola/kdump/kdump-service
@@ -0,0 +1,18 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure that kdump didn't start (it's either disabled, or enabled but
+# conditional on crashkernel= karg, which we don't bake).
+if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive; then
+    fatal "Unit kdump.service shouldn't be active"
+fi
diff --git a/tests/kola/misc-ro b/tests/kola/misc-ro
deleted file mode 100755
index 05d91c2927..0000000000
--- a/tests/kola/misc-ro
+++ /dev/null
@@ -1,200 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false }
-# This is a place to put random quick read-only tests.
-set -xeuo pipefail
-
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
-on_platform() {
-    grep -q " ignition.platform.id=$1 " /proc/cmdline
-}
-
-get_journal_msg_timestamp() {
-    journalctl -o json -b 0 --grep "$1" \
-        | jq -r --slurp '.[0]["__MONOTONIC_TIMESTAMP"]'
-}
-
-# Test some services are enabled or disabled appropriately
-for unit in logrotate; do
-    if ! systemctl is-enabled ${unit} 1>/dev/null; then
-        fatal "Unit ${unit} should be enabled"
-    fi
-done
-# Make sure that kdump didn't start (it's either disabled, or enabled but
-# conditional on crashkernel= karg, which we don't bake).
-if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive; then
-    fatal "Unit kdump.service shouldn't be active"
-fi
-# systemd-resolved should be enabled
-if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
-    fatal "Unit systemd-resolved should be enabled"
-fi
-# systemd-resolved should be fully functional on f35+
-source /etc/os-release
-if [ "$VERSION_ID" -ge "35" ]; then
-    if ! grep 'nameserver 127.0.0.53' /etc/resolv.conf; then
-        fatal "systemd-resolved stub listener isn't enabled"
-    fi
-fi
-ok services
-
-# https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
-if ip link | grep -o -e " eth[0-9]:"; then
-    fatal "detected eth* NIC naming on node"
-fi
-ok nic naming
-
-for part in /sysroot /boot; do
-    if ! findmnt -n -o options ${part} | grep -q "ro,"; then
-        fatal "${part} is missing ro option"
-    fi
-    if test -w "${part}" || touch "${part}/somefile" 2>/dev/null; then
-        fatal "${part} is writable"
-    fi
-done
-ok read-only partitions
-
-if ! lsattr -d / | grep -qe '--i--'; then
-    fatal "missing immutable bit on /"
-fi
-ok immutable bit
-
-# See remove-files in the manifest
-if test -d /usr/share/info; then
-    fatal "found /usr/share/info"
-fi
-
-# Security scanners complain about world-readable files in /etc/sudoers.d.
-# Check that there aren't any.
-# https://bugzilla.redhat.com/show_bug.cgi?id=1981979
-sudoers_files="$(find /etc/sudoers.d -type f ! -perm 600 2>&1)"
-if [ -n "$sudoers_files" ]; then
-    fatal "Found files in /etc/sudoers.d with unexpected permissions: $sudoers_files"
-fi
-
-# See https://github.com/coreos/coreos-assembler/pull/1786
-path=/usr/lib/systemd/system-generators/coreos-platform-chrony
-mode=$(stat -c '%a' ${path})
-if test "${mode}" != 555; then
-    fatal "For path ${path} expected mode 555, found ${mode}"
-fi
-
-switchroot_ts=$(get_journal_msg_timestamp 'Switching root.')
-nm_ts=$(get_journal_msg_timestamp 'NetworkManager .* starting')
-# by default, kola on QEMU shouldn't need to bring up networking
-# https://github.com/coreos/fedora-coreos-config/pull/426
-if [[ $nm_ts -lt $switchroot_ts ]] && on_platform qemu; then
-    fatal "NetworkManager started in initramfs!"
-# and as a sanity-check that this test works, verify that on AWS
-# we did bring up networking in the initrd
-elif [[ $nm_ts -gt $switchroot_ts ]] && on_platform aws; then
-    fatal "NetworkManager not started in initramfs!"
-fi
-ok conditional initrd networking
-
-if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
-    fatal missing LICENSE
-fi
-ok LICENSE
-
-# Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
-jq < /sysroot/.coreos-aleph-version.json >/dev/null
-ok aleph
-
-case "$(arch)" in
-    x86_64|aarch64)
-        # This is just a basic sanity check; at some point we
-        # will implement "project-owned tests run in the pipeline"
-        # and be able to run the existing bootupd tests:
-        # https://github.com/coreos/fedora-coreos-config/pull/677
-        bootupctl status
-        ok bootupctl
-        ;;
-esac
-
-# check that no files are unlabeled
-unlabeled=$(find /var /etc -context '*:unlabeled_t:*')
-if [ -n "${unlabeled}" ]; then
-    echo "Found unlabeled files:"
-    echo "${unlabeled}"
-    exit 1
-fi
-ok no files with unlabeled_t SELinux label
-
-# make sure we're using the sqlite rpmdb backend
-# https://github.com/coreos/fedora-coreos-tracker/issues/623
-if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then
-    fatal "Didn't find file /usr/share/rpm/rpmdb.sqlite"
-fi
-ok rpmdb is sqlite
-
-# make sure dnsmasq is masked
-# https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
-if [ $(systemctl is-enabled dnsmasq.service) != 'masked' ]; then
-    fatal "dnsmasq.service systemd unit should be masked"
-fi
-ok "dnsmasq.service systemd unit is masked"
-
-# make sure systemd-repart is masked
-# https://github.com/coreos/fedora-coreos-config/pull/744
-if [ $(systemctl is-enabled systemd-repart.service) != 'masked' ]; then
-    fatal "systemd-repart.service systemd unit should be masked"
-fi
-ok "systemd-repart.service systemd unit is masked"
-
-rootflags=$(findmnt /sysroot -no OPTIONS)
-if ! grep prjquota <<< "${rootflags}"; then
-    fatal "missing prjquota in root mount flags: ${rootflags}"
-fi
-ok "root mounted with prjquota"
-
-# make sure the system is on cgroups v2
-has_cgroup_karg=1
-grep -q systemd.unified_cgroup_hierarchy /proc/cmdline || has_cgroup_karg=0
-sys_fs_cgroup_source=$(findmnt -no SOURCE /sys/fs/cgroup)
-stream=$(rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
-if [ $has_cgroup_karg == 1 ]; then
-    fatal "found systemd.unified_cgroup_hierarchy=0"
-fi
-if [[ $sys_fs_cgroup_source != cgroup2 ]]; then
-    fatal "/sys/fs/cgroup is not cgroup2"
-fi
-
-list="$(find /etc -type f,d -perm /022)"
-if [[ -n "${list}" ]]; then
-	find /etc -type f,d -perm /022 -print0 | xargs -0 ls -al
-	fatal "found files or directories with 'g+w' or 'o+w' permission"
-fi
-ok "no files with 'g+w' or 'o+w' permission found in /etc"
-
-for f in '/etc/passwd' '/etc/group'; do
-	if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
-		ls -al "${f}"
-		fatal "found incorrect permissions for ${f}"
-	fi
-done
-ok "correct ownership and mode on /etc/passwd & /etc/group"
-
-# We shouldn't pull this into the transaction by default. See
-# https://github.com/coreos/fedora-coreos-config/pull/1088
-# https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
-if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=inactive; then
-    fatal "Unit network-online.target shouldn't be active"
-fi
-ok "unit network-online.target inactive"
-
-# It's easy for dracut modules to accidentally ship scripts without +x set
-tmpd=$(mktemp -d)
-( cd ${tmpd} && lsinitrd --unpack /boot/ostree/*/init* )
-if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
-    fatal "Found non-executable scripts in initrd"
-fi
-rm -r ${tmpd}
-ok "All initrd scripts are executable"
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
new file mode 100755
index 0000000000..402b7dc523
--- /dev/null
+++ b/tests/kola/networking/dnsmasq-service
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# make sure dnsmasq is masked
+# https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
+if [ $(systemctl is-enabled dnsmasq.service) != 'masked' ]; then
+    fatal "dnsmasq.service systemd unit should be masked"
+fi
+ok "dnsmasq.service systemd unit is masked"
+
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
new file mode 100755
index 0000000000..a26d04ef78
--- /dev/null
+++ b/tests/kola/networking/network-online-service
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# We shouldn't pull this into the transaction by default. See
+# https://github.com/coreos/fedora-coreos-config/pull/1088
+# https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
+if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=inactive; then
+    fatal "Unit network-online.target shouldn't be active"
+fi
+ok "unit network-online.target inactive"
+
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
new file mode 100755
index 0000000000..70c10131d0
--- /dev/null
+++ b/tests/kola/networking/nic-naming
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
+if ip link | grep -o -e " eth[0-9]:"; then
+    fatal "detected eth* NIC naming on node"
+fi
+ok nic naming
+
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
new file mode 100755
index 0000000000..8cccc6b079
--- /dev/null
+++ b/tests/kola/networking/nm-start
@@ -0,0 +1,34 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+get_journal_msg_timestamp() {
+    journalctl -o json -b 0 --grep "$1" \
+        | jq -r --slurp '.[0]["__MONOTONIC_TIMESTAMP"]'
+}
+
+on_platform() {
+    grep -q " ignition.platform.id=$1 " /proc/cmdline
+}
+
+switchroot_ts=$(get_journal_msg_timestamp 'Switching root.')
+nm_ts=$(get_journal_msg_timestamp 'NetworkManager .* starting')
+# by default, kola on QEMU shouldn't need to bring up networking
+# https://github.com/coreos/fedora-coreos-config/pull/426
+if [[ $nm_ts -lt $switchroot_ts ]] && on_platform qemu; then
+    fatal "NetworkManager started in initramfs!"
+# and as a sanity-check that this test works, verify that on AWS
+# we did bring up networking in the initrd
+elif [[ $nm_ts -gt $switchroot_ts ]] && on_platform aws; then
+    fatal "NetworkManager not started in initramfs!"
+fi
+ok conditional initrd networking
diff --git a/tests/kola/networking/resolv/resolv b/tests/kola/networking/resolv/resolv
new file mode 100755
index 0000000000..776720e046
--- /dev/null
+++ b/tests/kola/networking/resolv/resolv
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# systemd-resolved should be fully functional on f35+
+source /etc/os-release
+if [ "$VERSION_ID" -ge "35" ]; then
+    if ! grep 'nameserver 127.0.0.53' /etc/resolv.conf; then
+        fatal "systemd-resolved stub listener isn't enabled"
+    fi
+fi
+ok services
diff --git a/tests/kola/networking/resolv/systemd-resolved-service b/tests/kola/networking/resolv/systemd-resolved-service
new file mode 100755
index 0000000000..f924192f8e
--- /dev/null
+++ b/tests/kola/networking/resolv/systemd-resolved-service
@@ -0,0 +1,17 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# systemd-resolved should be enabled
+if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
+    fatal "Unit systemd-resolved should be enabled"
+fi

From 18742c36d86d8a2e087d92812cea2c026246ffff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 11 Nov 2021 21:36:30 +0000
Subject: [PATCH 0560/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/598/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b76f0786db..d27c297d35 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -583,7 +583,7 @@
       "evra": "11.2.1-1.fc35.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.42-3.fc35.aarch64"
+      "evra": "1.43-1.fc35.aarch64"
     },
     "libgudev": {
       "evra": "237-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-10T20:58:46Z",
+    "generated": "2021-11-11T20:53:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-09T21:49:06Z"
+        "generated": "2021-11-10T22:06:21Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-10T02:16:53Z"
+        "generated": "2021-11-11T01:07:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3ad1efcdd9..1364ff81b2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -589,7 +589,7 @@
       "evra": "11.2.1-1.fc35.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.42-3.fc35.x86_64"
+      "evra": "1.43-1.fc35.x86_64"
     },
     "libgudev": {
       "evra": "237-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-10T20:59:45Z",
+    "generated": "2021-11-11T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-09T21:51:38Z"
+        "generated": "2021-11-10T22:07:32Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-10T02:17:03Z"
+        "generated": "2021-11-11T01:07:35Z"
       }
     }
   }

From 82e543171b53e05bbaaa1df709bbf3dd0bfb8fae Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 13 Nov 2021 21:25:22 +0000
Subject: [PATCH 0561/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/600/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d27c297d35..f9bbab68e2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1057,7 +1057,7 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.5.0-2.fc35.aarch64"
+      "evra": "1:1.5.1-1.fc35.aarch64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.aarch64"
@@ -1069,7 +1069,7 @@
       "evra": "1.1.9-3.fc35.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.1-3.fc35.aarch64"
+      "evra": "1.7.4.2-1.fc35.aarch64"
     },
     "sqlite-libs": {
       "evra": "3.36.0-3.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-11T20:53:34Z",
+    "generated": "2021-11-13T20:54:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-10T22:06:21Z"
+        "generated": "2021-11-11T21:40:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-11T01:07:25Z"
+        "generated": "2021-11-13T01:01:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1364ff81b2..084749392a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,7 +1069,7 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.5.0-2.fc35.x86_64"
+      "evra": "1:1.5.1-1.fc35.x86_64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.x86_64"
@@ -1081,7 +1081,7 @@
       "evra": "1.1.9-3.fc35.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.1-3.fc35.x86_64"
+      "evra": "1.7.4.2-1.fc35.x86_64"
     },
     "sqlite-libs": {
       "evra": "3.36.0-3.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-11T20:53:25Z",
+    "generated": "2021-11-13T20:54:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-10T22:07:32Z"
+        "generated": "2021-11-11T21:41:11Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-11T01:07:35Z"
+        "generated": "2021-11-13T01:01:58Z"
       }
     }
   }

From cc2340dd5b8c0a1febdb89e2786785551a38af78 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 Nov 2021 21:22:46 +0000
Subject: [PATCH 0562/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/601/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 2 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f9bbab68e2..d6dceb0261 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.2-1.fc35.aarch64"
+      "evra": "1.3-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -262,7 +262,7 @@
       "evra": "0.185-5.fc35.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.14-1.fc35.aarch64"
+      "evra": "2:5.15-1.fc35.aarch64"
     },
     "expat": {
       "evra": "2.4.1-2.fc35.aarch64"
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.aarch64"
     },
     "git-core": {
-      "evra": "2.33.1-1.fc35.aarch64"
+      "evra": "2.33.1-2.fc35.aarch64"
     },
     "glib2": {
       "evra": "2.70.1-1.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.16-301.fc35.aarch64"
+      "evra": "5.14.17-301.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.16-301.fc35.aarch64"
+      "evra": "5.14.17-301.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.16-301.fc35.aarch64"
+      "evra": "5.14.17-301.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-48.fc35.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "libjcat": {
       "evra": "0.1.8-2.fc35.aarch64"
@@ -733,16 +733,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc35.aarch64"
@@ -1081,28 +1081,28 @@
       "evra": "0.1.2-8.fc35.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-client": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-common": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.6.0-2.fc35.aarch64"
+      "evra": "2.6.1-1.fc35.aarch64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-13T20:54:55Z",
+    "generated": "2021-11-14T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-11T21:40:42Z"
+        "generated": "2021-11-13T21:27:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-13T01:01:31Z"
+        "generated": "2021-11-14T03:38:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 084749392a..4bd03cc00e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.2-1.fc35.x86_64"
+      "evra": "1.3-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -262,7 +262,7 @@
       "evra": "0.185-5.fc35.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.14-1.fc35.x86_64"
+      "evra": "2:5.15-1.fc35.x86_64"
     },
     "expat": {
       "evra": "2.4.1-2.fc35.x86_64"
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.x86_64"
     },
     "git-core": {
-      "evra": "2.33.1-1.fc35.x86_64"
+      "evra": "2.33.1-2.fc35.x86_64"
     },
     "glib2": {
       "evra": "2.70.1-1.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.16-301.fc35.x86_64"
+      "evra": "5.14.17-301.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.16-301.fc35.x86_64"
+      "evra": "5.14.17-301.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.16-301.fc35.x86_64"
+      "evra": "5.14.17-301.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-48.fc35.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "libjcat": {
       "evra": "0.1.8-2.fc35.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "libstdc++": {
       "evra": "11.2.1-1.fc35.x86_64"
@@ -1093,28 +1093,28 @@
       "evra": "0.1.2-8.fc35.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-client": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-common": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.6.0-2.fc35.x86_64"
+      "evra": "2.6.1-1.fc35.x86_64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-13T20:54:45Z",
+    "generated": "2021-11-14T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-11T21:41:11Z"
+        "generated": "2021-11-13T21:27:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-13T01:01:58Z"
+        "generated": "2021-11-14T03:38:15Z"
       }
     }
   }

From f50f500201a1ca1ea10078c1bc1cea59a5b66517 Mon Sep 17 00:00:00 2001
From: Michael Nguyen <mnguyen@redhat.com>
Date: Thu, 11 Nov 2021 16:13:20 -0500
Subject: [PATCH 0563/2157] kola: split misc-ign-ro into indivudal tests

Now that kola has the ability to run non-exclusive tests, split out the
remaining misc-ign-ro tests for better reporting and more granular
control of running tests.
---
 tests/kola/kubernetes/kube-watch/config.bu    | 37 +++++++++++++++++++
 .../kube-watch}/test.sh                       | 28 +++-----------
 tests/kola/networking/stub-resolve.sh         | 21 +++++++++++
 .../coreos-update-ca-trust}/config.bu         | 34 -----------------
 .../security/coreos-update-ca-trust/test.sh   | 21 +++++++++++
 .../passwd/config.bu                          |  0
 .../passwd/test.sh                            |  0
 7 files changed, 84 insertions(+), 57 deletions(-)
 create mode 100644 tests/kola/kubernetes/kube-watch/config.bu
 rename tests/kola/{misc-ign-ro => kubernetes/kube-watch}/test.sh (59%)
 create mode 100755 tests/kola/networking/stub-resolve.sh
 rename tests/kola/{misc-ign-ro => security/coreos-update-ca-trust}/config.bu (52%)
 create mode 100755 tests/kola/security/coreos-update-ca-trust/test.sh
 rename tests/kola/{authentication => security}/passwd/config.bu (100%)
 rename tests/kola/{authentication => security}/passwd/test.sh (100%)

diff --git a/tests/kola/kubernetes/kube-watch/config.bu b/tests/kola/kubernetes/kube-watch/config.bu
new file mode 100644
index 0000000000..9d902b03f9
--- /dev/null
+++ b/tests/kola/kubernetes/kube-watch/config.bu
@@ -0,0 +1,37 @@
+variant: fcos
+version: 1.2.0
+storage:
+  directories:
+    # This is for verifying that `kubernetes_file_t` labeled files can be
+    # watched by systemd
+    # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+    # See: https://github.com/containers/container-selinux/issues/135
+    - path: /etc/kubernetes
+systemd:
+  units:
+    - name: kube-watch.service
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # watched by systemd
+      # NOTE: we've observed a race where the journal message shows up as
+      # coming from `echo` rather than `kube-watch`, so we're embedding
+      # a UUID in the message to make it easier to find.
+      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      # See: https://github.com/containers/container-selinux/issues/135
+      contents: |
+        [Service]
+        ExecStart=/usr/bin/echo "This is the kube-watch unique id: 27a259a8-7f2d-4144-8b8f-23dd201b630c"
+        RemainAfterExit=yes
+        Type=oneshot
+        [Install]
+        WantedBy=multi-user.target
+    - name: kube-watch.path
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # watched by systemd
+      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
+      # See: https://github.com/containers/container-selinux/issues/135
+      enabled: true
+      contents: |
+        [Path]
+        PathExists=/etc/kubernetes/kubeconfig
+        [Install]
+        WantedBy=multi-user.target
diff --git a/tests/kola/misc-ign-ro/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
similarity index 59%
rename from tests/kola/misc-ign-ro/test.sh
rename to tests/kola/kubernetes/kube-watch/test.sh
index 010977181e..77f97c2f89 100755
--- a/tests/kola/misc-ign-ro/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -3,31 +3,13 @@
 set -xeuo pipefail
 
 ok() {
-        echo "ok" "$@"
-    }
+    echo "ok" "$@"
+}
 
 fatal() {
-        echo "$@" >&2
-            exit 1
-        }
-
-# Make sure that coreos-update-ca-trust kicked in and observe the result.
-if ! systemctl show coreos-update-ca-trust.service -p ActiveState | grep ActiveState=active; then
-    fatal "coreos-update-ca-trust.service not active"
-fi
-if ! grep '^# coreos.com$' /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt; then
-    fatal "expected coreos.com in ca-bundle"
-fi
-ok "coreos-update-ca-trust.service"
-
-# Make sure that the stub-resolv.conf file has the correct selinux context.
-# https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
-# https://github.com/systemd/systemd/pull/17976
-context=$(stat --format "%C" /run/systemd/resolve/stub-resolv.conf)
-if [ "$context" != "system_u:object_r:net_conf_t:s0" ]; then
-    fatal "SELinux context on stub-resolv.conf is wrong"
-fi
-ok "SELinux context on stub-resolv.conf is correct"
+    echo "$@" >&2
+    exit 1
+}
 
 # This is for verifying that `kubernetes_file_t` labeled files can be
 # watched by systemd
diff --git a/tests/kola/networking/stub-resolve.sh b/tests/kola/networking/stub-resolve.sh
new file mode 100755
index 0000000000..beff6dbeeb
--- /dev/null
+++ b/tests/kola/networking/stub-resolve.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure that the stub-resolv.conf file has the correct selinux context.
+# https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
+# https://github.com/systemd/systemd/pull/17976
+context=$(stat --format "%C" /run/systemd/resolve/stub-resolv.conf)
+if [ "$context" != "system_u:object_r:net_conf_t:s0" ]; then
+    fatal "SELinux context on stub-resolv.conf is wrong"
+fi
+ok "SELinux context on stub-resolv.conf is correct"
diff --git a/tests/kola/misc-ign-ro/config.bu b/tests/kola/security/coreos-update-ca-trust/config.bu
similarity index 52%
rename from tests/kola/misc-ign-ro/config.bu
rename to tests/kola/security/coreos-update-ca-trust/config.bu
index 38fc593655..def29be580 100644
--- a/tests/kola/misc-ign-ro/config.bu
+++ b/tests/kola/security/coreos-update-ca-trust/config.bu
@@ -1,12 +1,6 @@
 variant: fcos
 version: 1.2.0
 storage:
-  directories:
-    # This is for verifying that `kubernetes_file_t` labeled files can be
-    # watched by systemd
-    # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
-    # See: https://github.com/containers/container-selinux/issues/135
-    - path: /etc/kubernetes
   files:
     - path: /etc/pki/ca-trust/source/anchors/coreos.crt
       mode: 0644
@@ -33,31 +27,3 @@ storage:
           AKbyaAqbChEy9CvDgyv6qxTYU+eeBImLKS3PH2uW5etc/69V/sDojqpH3hEffsOt
           9g==
           -----END CERTIFICATE-----
-systemd:
-  units:
-    - name: kube-watch.service
-      # This is for verifying that `kubernetes_file_t` labeled files can be
-      # watched by systemd
-      # NOTE: we've observed a race where the journal message shows up as
-      # coming from `echo` rather than `kube-watch`, so we're embedding
-      # a UUID in the message to make it easier to find.
-      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
-      # See: https://github.com/containers/container-selinux/issues/135
-      contents: |
-        [Service]
-        ExecStart=/usr/bin/echo "This is the kube-watch unique id: 27a259a8-7f2d-4144-8b8f-23dd201b630c"
-        RemainAfterExit=yes
-        Type=oneshot
-        [Install]
-        WantedBy=multi-user.target
-    - name: kube-watch.path
-      # This is for verifying that `kubernetes_file_t` labeled files can be
-      # watched by systemd
-      # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
-      # See: https://github.com/containers/container-selinux/issues/135
-      enabled: true
-      contents: |
-        [Path]
-        PathExists=/etc/kubernetes/kubeconfig
-        [Install]
-        WantedBy=multi-user.target
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
new file mode 100755
index 0000000000..973a6e94d5
--- /dev/null
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure that coreos-update-ca-trust kicked in and observe the result.
+if ! systemctl show coreos-update-ca-trust.service -p ActiveState | grep ActiveState=active; then
+    fatal "coreos-update-ca-trust.service not active"
+fi
+if ! grep '^# coreos.com$' /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt; then
+    fatal "expected coreos.com in ca-bundle"
+fi
+ok "coreos-update-ca-trust.service"
diff --git a/tests/kola/authentication/passwd/config.bu b/tests/kola/security/passwd/config.bu
similarity index 100%
rename from tests/kola/authentication/passwd/config.bu
rename to tests/kola/security/passwd/config.bu
diff --git a/tests/kola/authentication/passwd/test.sh b/tests/kola/security/passwd/test.sh
similarity index 100%
rename from tests/kola/authentication/passwd/test.sh
rename to tests/kola/security/passwd/test.sh

From bfe5e9257839c4dd2181ade4ab469b05ce311a6a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 15 Nov 2021 13:38:22 -0500
Subject: [PATCH 0564/2157] tests/kola/kdump: rename kdump-service

We currently have a test name of "ext.config.kdump.kdump-service".  Make
it just "ext.config.kdump.service".
---
 tests/kola/kdump/{kdump-service => service} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename tests/kola/kdump/{kdump-service => service} (100%)

diff --git a/tests/kola/kdump/kdump-service b/tests/kola/kdump/service
similarity index 100%
rename from tests/kola/kdump/kdump-service
rename to tests/kola/kdump/service

From 89e798bfaca62f9fef87f9ba2044d027dd36fae1 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 15 Nov 2021 13:41:00 -0500
Subject: [PATCH 0565/2157] tests/kola/kdump: rename test.sh

Now that we have another test in the same directory, kola is calling this
"ext.config.kdump.test.sh".  Rename the test and update the denylist
entry.

Fixes: 1e2e2a73aefc ("tests: separate out misc-ro test")
---
 kola-denylist.yaml                  | 2 +-
 tests/kola/kdump/{test.sh => crash} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename tests/kola/kdump/{test.sh => crash} (100%)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index eb6d3e25d5..a35e78958e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,5 +12,5 @@
     - rawhide
   arches:
     - aarch64
-- pattern: ext.config.kdump
+- pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/860
diff --git a/tests/kola/kdump/test.sh b/tests/kola/kdump/crash
similarity index 100%
rename from tests/kola/kdump/test.sh
rename to tests/kola/kdump/crash

From 7a5b16805f7e3912a2a733a124288163570aee82 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 15 Nov 2021 22:03:14 +0000
Subject: [PATCH 0566/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/602/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d6dceb0261..f30d7757bb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.1-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-8.fc35.aarch64"
+      "evra": "1:2.3.3op2-10.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -706,7 +706,7 @@
       "evra": "3.3-1.fc35.aarch64"
     },
     "libsepol": {
-      "evra": "3.3-1.fc35.aarch64"
+      "evra": "3.3-2.fc35.aarch64"
     },
     "libsigsegv": {
       "evra": "2.13-3.fc35.aarch64"
@@ -808,7 +808,7 @@
       "evra": "1.5.0-2.fc35.aarch64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-28.fc34.aarch64"
+      "evra": "2.5.1-30.fc35.aarch64"
     },
     "linux-firmware": {
       "evra": "20211027-126.fc35.noarch"
@@ -1045,10 +1045,10 @@
       "evra": "1.46-2.fc35.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-5.fc35.aarch64"
+      "evra": "2:4.9-7.fc35.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-5.fc35.aarch64"
+      "evra": "2:4.9-7.fc35.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-14T20:53:05Z",
+    "generated": "2021-11-15T21:01:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-13T21:27:26Z"
+        "generated": "2021-11-14T21:25:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-14T03:38:03Z"
+        "generated": "2021-11-15T05:27:57Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4bd03cc00e..9d41ee7177 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.1-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-8.fc35.x86_64"
+      "evra": "1:2.3.3op2-10.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -712,7 +712,7 @@
       "evra": "3.3-1.fc35.x86_64"
     },
     "libsepol": {
-      "evra": "3.3-1.fc35.x86_64"
+      "evra": "3.3-2.fc35.x86_64"
     },
     "libsigsegv": {
       "evra": "2.13-3.fc35.x86_64"
@@ -817,7 +817,7 @@
       "evra": "1.5.0-2.fc35.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-28.fc34.x86_64"
+      "evra": "2.5.1-30.fc35.x86_64"
     },
     "linux-firmware": {
       "evra": "20211027-126.fc35.noarch"
@@ -1057,10 +1057,10 @@
       "evra": "1.46-2.fc35.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-5.fc35.x86_64"
+      "evra": "2:4.9-7.fc35.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-5.fc35.x86_64"
+      "evra": "2:4.9-7.fc35.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-14T20:52:56Z",
+    "generated": "2021-11-15T21:02:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-13T21:27:50Z"
+        "generated": "2021-11-14T21:25:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-14T03:38:15Z"
+        "generated": "2021-11-15T05:28:10Z"
       }
     }
   }

From a50bd3dcea6b4728014a519d234a9bbf7f46a880 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 15 Nov 2021 21:50:30 +0100
Subject: [PATCH 0567/2157] tests/kola/containers/cgroups-v2: Remove unused
 variable

Was added in b7e4622, and forgotten in aa16ec3.
---
 tests/kola/containers/cgroups-v2 | 2 --
 1 file changed, 2 deletions(-)

diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index 7deda8a23d..aaa32d4b84 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -15,8 +15,6 @@ fatal() {
 has_cgroup_karg=1
 grep -q systemd.unified_cgroup_hierarchy /proc/cmdline || has_cgroup_karg=0
 sys_fs_cgroup_source=$(findmnt -no SOURCE /sys/fs/cgroup)
-stream=$(rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"
-]')
 if [ $has_cgroup_karg == 1 ]; then
     fatal "found systemd.unified_cgroup_hierarchy=0"
 fi

From 67a72df94ee4cf91a60f64494136e682ae750008 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 15 Nov 2021 21:52:02 +0100
Subject: [PATCH 0568/2157] tests: Quote some variables (ShellCheck)

---
 tests/kola/chrony/coreos-platform-chrony-generator          | 2 +-
 tests/kola/chrony/dhcp-propagation                          | 2 +-
 tests/kola/disks/systemd-repart-service                     | 2 +-
 tests/kola/files/dracut-executable                          | 6 +++---
 tests/kola/ignition/systemd-enable-instance-unit/test.sh    | 4 ++--
 tests/kola/ignition/systemd-unmasking/test.sh               | 2 +-
 tests/kola/kdump/crash                                      | 2 +-
 .../kola/networking/default-network-behavior-change/test.sh | 2 +-
 tests/kola/networking/dnsmasq-service                       | 2 +-
 9 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index b902608bb6..729fa86d6f 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -4,7 +4,7 @@ set -euo pipefail
 
 # kola: { "platforms": "aws,azure,gcp" }
 
-cd $(mktemp -d)
+cd "$(mktemp -d)"
 
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in
diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 497848d26b..db1d353024 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -29,7 +29,7 @@ test_setup() {
     ip netns exec container ip link set veth-container up
 
     # run podman commands to set up dnsmasq server
-    pushd $(mktemp -d)
+    pushd "$(mktemp -d)"
     NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     cat <<EOF >Dockerfile
 FROM registry.fedoraproject.org/fedora:35
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index a73ab1b362..6ca1ab2d52 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -13,7 +13,7 @@ fatal() {
 
 # make sure systemd-repart is masked
 # https://github.com/coreos/fedora-coreos-config/pull/744
-if [ $(systemctl is-enabled systemd-repart.service) != 'masked' ]; then
+if [ "$(systemctl is-enabled systemd-repart.service)" != 'masked' ]; then
     fatal "systemd-repart.service systemd unit should be masked"
 fi
 ok "systemd-repart.service systemd unit is masked"
diff --git a/tests/kola/files/dracut-executable b/tests/kola/files/dracut-executable
index a04035f8cb..c0c6a808e6 100755
--- a/tests/kola/files/dracut-executable
+++ b/tests/kola/files/dracut-executable
@@ -13,9 +13,9 @@ fatal() {
 
 # It's easy for dracut modules to accidentally ship scripts without +x set
 tmpd=$(mktemp -d)
-( cd ${tmpd} && lsinitrd --unpack /boot/ostree/*/init* )
-if find ${tmpd}/usr/{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
+( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
+if find "${tmpd}/usr/"{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
     fatal "Found non-executable scripts in initrd"
 fi
-rm -r ${tmpd}
+rm -r "${tmpd}"
 ok "All initrd scripts are executable"
diff --git a/tests/kola/ignition/systemd-enable-instance-unit/test.sh b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
index 0a3b09ac05..4b9e741014 100755
--- a/tests/kola/ignition/systemd-enable-instance-unit/test.sh
+++ b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
@@ -19,13 +19,13 @@ fatal() {
 }
 
 # make sure the presets worked and the instantiated unit is enabled
-if [ $(systemctl is-enabled echo@foo.service) != 'enabled' ]; then
+if [ "$(systemctl is-enabled echo@foo.service)" != 'enabled' ]; then
     fatal "echo@foo.service systemd unit should be enabled"
 fi
 ok "echo@foo.service systemd unit is enabled"
 
 # make sure the unit ran and wrote 'foo' to the journal
-if [ $(journalctl -o cat -u echo@foo.service | sed -n 2p) != 'foo' ]; then
+if [ "$(journalctl -o cat -u echo@foo.service | sed -n 2p)" != 'foo' ]; then
     fatal "echo@foo.service did not write 'foo' to journal"
 fi
 ok "echo@foo.service ran and wrote 'foo' to the journal"
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 272f521295..64ee6d1d7a 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -19,7 +19,7 @@ fatal() {
 }
 
 # make sure the systemd unit (dnsmasq) is unmasked and enabled
-if [ $(systemctl is-enabled dnsmasq.service) != 'enabled' ]; then
+if [ "$(systemctl is-enabled dnsmasq.service)" != 'enabled' ]; then
     fatal "dnsmasq.service systemd unit should be unmasked and enabled"
 fi
 ok "dnsmasq.service systemd unit is unmasked and enabled"
diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash
index ac36128e4b..65820e21cc 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash
@@ -32,7 +32,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       if test -z "${kcore}"; then
         fatal "No kcore found in /var/crash"
       fi
-      info=$(file ${kcore})
+      info=$(file "${kcore}")
       if ! [[ "${info}" =~ 'vmcore: Kdump'.*'system Linux' ]]; then
         fatal "vmcore does not appear to be a Kdump?"
       fi
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index a7fb0d05e4..8421b12a62 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -107,7 +107,7 @@ normalize_connection_file() {
     sed -e s/^uuid=.*$/uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/ \
         -e s/^timestamp=.*$/timestamp=xxxxxxxxxx/                 \
         -e s/^interface-name=.*$/interface-name=xxxx/             \
-        $1
+        "${1}"
 }
 
 source /etc/os-release
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index 402b7dc523..4250c4c9d9 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -13,7 +13,7 @@ fatal() {
 
 # make sure dnsmasq is masked
 # https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
-if [ $(systemctl is-enabled dnsmasq.service) != 'masked' ]; then
+if [ "$(systemctl is-enabled dnsmasq.service)" != 'masked' ]; then
     fatal "dnsmasq.service systemd unit should be masked"
 fi
 ok "dnsmasq.service systemd unit is masked"

From bf7495584a4d65f7068233c83fcb73bf6249865a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 15 Nov 2021 21:58:36 +0100
Subject: [PATCH 0569/2157] tests: Fix whitespace and empty line at EOF

---
 tests/kola/networking/dnsmasq-service        | 1 -
 tests/kola/networking/network-online-service | 1 -
 tests/kola/networking/nic-naming             | 1 -
 tests/kola/security/passwd/config.bu         | 4 ++--
 tests/kola/security/passwd/test.sh           | 4 ++--
 tests/kola/swap/zram-generator/config.bu     | 2 +-
 tests/kola/swap/zram-generator/test.sh       | 2 +-
 7 files changed, 6 insertions(+), 9 deletions(-)

diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index 4250c4c9d9..eb295ac6d6 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -17,4 +17,3 @@ if [ "$(systemctl is-enabled dnsmasq.service)" != 'masked' ]; then
     fatal "dnsmasq.service systemd unit should be masked"
 fi
 ok "dnsmasq.service systemd unit is masked"
-
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index a26d04ef78..f1b73f1b40 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -18,4 +18,3 @@ if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=i
     fatal "Unit network-online.target shouldn't be active"
 fi
 ok "unit network-online.target inactive"
-
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 70c10131d0..23cc233ce1 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -16,4 +16,3 @@ if ip link | grep -o -e " eth[0-9]:"; then
     fatal "detected eth* NIC naming on node"
 fi
 ok nic naming
-
diff --git a/tests/kola/security/passwd/config.bu b/tests/kola/security/passwd/config.bu
index 2ce8f6f1ea..d9c0b5e109 100644
--- a/tests/kola/security/passwd/config.bu
+++ b/tests/kola/security/passwd/config.bu
@@ -2,6 +2,6 @@ variant: fcos
 version: 1.4.0
 passwd:
   users:
-    - name: tester 
+    - name: tester
       # encrypted version of 'foobar'. generated with `mkpasswd --method=yescrypt`
-      password_hash: $y$j9T$0HA8ReLTqRTccLKT0gzVY.$/e.OCrjePrh2tOm8CAoLqCMlZWS9q/WSAPBaZuopRs4
\ No newline at end of file
+      password_hash: $y$j9T$0HA8ReLTqRTccLKT0gzVY.$/e.OCrjePrh2tOm8CAoLqCMlZWS9q/WSAPBaZuopRs4
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index f379a22e71..efec65e240 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -19,7 +19,7 @@ fi
 # yescrypt was changed to the default in Fedora 35
 # https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow
 # Testing that passwd command creates a yescrypt password hash(starting with '$y$')
-source /etc/os-release 
+source /etc/os-release
 if [ "$VERSION_ID" -ge "35" ]; then
     sudo useradd tester2
     echo "42abcdef" | sudo passwd tester2 --stdin
@@ -28,4 +28,4 @@ if [ "$VERSION_ID" -ge "35" ]; then
         fatal "passwd did not create a yescrypt password hash"
     fi
 fi
-ok "User-password provisioned and passwd command successfully tested"
\ No newline at end of file
+ok "User-password provisioned and passwd command successfully tested"
diff --git a/tests/kola/swap/zram-generator/config.bu b/tests/kola/swap/zram-generator/config.bu
index 244d4a159c..09208a5fce 100644
--- a/tests/kola/swap/zram-generator/config.bu
+++ b/tests/kola/swap/zram-generator/config.bu
@@ -7,4 +7,4 @@ storage:
       contents:
         inline: |
           # This config file enables a /dev/zram0 device with the default settings
-          [zram0]
\ No newline at end of file
+          [zram0]
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index e356b98fdb..2d29672f6a 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -19,4 +19,4 @@ fatal() {
 if ! grep -q 'zram0' /proc/swaps; then
     fatal "expected zram0 to be set up"
 fi
-ok "swap on zram was set up correctly"
\ No newline at end of file
+ok "swap on zram was set up correctly"

From 3763c8225031eb4aa1c8265c687a0f8118bc4f0b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 15 Nov 2021 21:59:08 +0100
Subject: [PATCH 0570/2157] tests: Fix indentation (tab -> spaces)

---
 tests/kola/rpm-ostree-countme/test.sh | 84 +++++++++++++--------------
 tests/kola/toolbox/test.sh            | 20 +++----
 2 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 90d3f70950..f3e3e79c26 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -14,63 +14,63 @@ fatal() {
 }
 
 journal_cursor() {
-	journalctl --output json --lines 1 \
-		| jq --raw-output '.["__CURSOR"]' > /tmp/countme.cursor
+    journalctl --output json --lines 1 \
+        | jq --raw-output '.["__CURSOR"]' > /tmp/countme.cursor
 }
 
 journal_after_cursor() {
-	journalctl --output=json \
-		--after-cursor "$(cat /tmp/countme.cursor)" \
-		--output=json --unit=rpm-ostree-countme.service \
-		--grep "Successful requests:" \
-		| jq --raw-output '.MESSAGE'
+    journalctl --output=json \
+        --after-cursor "$(cat /tmp/countme.cursor)" \
+        --output=json --unit=rpm-ostree-countme.service \
+        --grep "Successful requests:" \
+        | jq --raw-output '.MESSAGE'
 }
 
 # Check that the timer has been enabled
 if [[ $(systemctl show -p ActiveState rpm-ostree-countme.timer) != "ActiveState=active" ]] && \
    [[ $(systemctl show -p SubState rpm-ostree-countme.timer) != "SubState=waiting" ]]; then
-	fatal "rpm-ostree-countme timer has not been started"
+    fatal "rpm-ostree-countme timer has not been started"
 fi
 
 # Try five times to avoid Fedora infra flakes
 for i in $(seq 1 5); do
-	# Remove status file so that we retry every time we flake
-	rm -f /var/lib/private/rpm-ostree-countme/countme
-	# Update the journal cursor
-	journal_cursor
+    # Remove status file so that we retry every time we flake
+    rm -f /var/lib/private/rpm-ostree-countme/countme
+    # Update the journal cursor
+    journal_cursor
 
-	# Check that running the service manually is successful
-	systemctl start rpm-ostree-countme.service
-	if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveState=inactive" ]] && \
-	   [[ $(systemctl show -p SubState rpm-ostree-countme.service) != "SubState=dead" ]] && \
-	   [[ $(systemctl show -p Result rpm-ostree-countme.service) != "Result=success" ]] && \
-	   [[ $(systemctl show -p ExecMainStatus rpm-ostree-countme.service) != "ExecMainStatus=0" ]]; then
-		echo "rpm-ostree-countme exited with an error (try: $i):"
-		systemctl status rpm-ostree-countme.service
-		sleep 10
-		continue
-	fi
+    # Check that running the service manually is successful
+    systemctl start rpm-ostree-countme.service
+    if [[ $(systemctl show -p ActiveState rpm-ostree-countme.service) != "ActiveState=inactive" ]] && \
+       [[ $(systemctl show -p SubState rpm-ostree-countme.service) != "SubState=dead" ]] && \
+       [[ $(systemctl show -p Result rpm-ostree-countme.service) != "Result=success" ]] && \
+       [[ $(systemctl show -p ExecMainStatus rpm-ostree-countme.service) != "ExecMainStatus=0" ]]; then
+        echo "rpm-ostree-countme exited with an error (try: $i):"
+        systemctl status rpm-ostree-countme.service
+        sleep 10
+        continue
+    fi
 
-	# Check rpm-ostree count me output
-	output="$(journal_after_cursor)"
-	trimmed=${output##Successful requests: }
-	if [[ ! $trimmed =~ ^[0-9]+/[0-9]+$ ]]; then
-		echo "rpm-ostree-countme service output does not match expected success output (try: $i):"
-		echo "${output}"
-		sleep 10
-		continue
-	fi
-	tries=${trimmed%%/*}
-	total=${trimmed##*/}
-	if [ "${tries}" != "${total}" ]; then
-		echo "rpm-ostree-countme service output shows failed requests (try: $i):"
-		echo "${output}"
-		sleep 10
-		continue
-	fi
+    # Check rpm-ostree count me output
+    output="$(journal_after_cursor)"
+    trimmed=${output##Successful requests: }
+    if [[ ! $trimmed =~ ^[0-9]+/[0-9]+$ ]]; then
+        echo "rpm-ostree-countme service output does not match expected success output (try: $i):"
+        echo "${output}"
+        sleep 10
+        continue
+    fi
+    tries=${trimmed%%/*}
+    total=${trimmed##*/}
+    if [ "${tries}" != "${total}" ]; then
+        echo "rpm-ostree-countme service output shows failed requests (try: $i):"
+        echo "${output}"
+        sleep 10
+        continue
+    fi
 
-	ok countme
-	exit 0
+    ok countme
+    exit 0
 done
 
 fatal "rpm-ostree-countme service failed or only partially completed five times"
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index bde7235d74..ae311133ec 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -28,22 +28,22 @@ fatal() {
 
 # Try five times to create the toolbox to avoid Fedora registry infra flakes
 for i in $(seq 1 5); do
-	machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
-	if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
-		echo "Could not create toolbox on try: $i"
-		sleep 10
-	else
-		break
-	fi
+    machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
+    if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
+        echo "Could not create toolbox on try: $i"
+        sleep 10
+    else
+        break
+    fi
 done
 if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then
-	fatal "Could not create toolbox"
+    fatal "Could not create toolbox"
 fi
 ok toolbox create
 
 machinectl shell core@ /bin/toolbox run touch ok_toolbox
 if [[ ! -f '/home/core/ok_toolbox' ]]; then
-	fatal "Could not run a simple command inside a toolbox"
+    fatal "Could not run a simple command inside a toolbox"
 fi
 ok toolbox run
 
@@ -51,6 +51,6 @@ toolbox="$(machinectl shell core@ /bin/toolbox list --containers | grep fedora-t
 machinectl shell core@ /bin/podman stop "${toolbox}"
 machinectl shell core@ /bin/toolbox rm "${toolbox}"
 if [[ -n "$(machinectl shell core@ /bin/toolbox list --containers)" ]]; then
-	fatal "Could not remove the toolbox container"
+    fatal "Could not remove the toolbox container"
 fi
 ok toolbox rm

From f972d1e8e7fae1f79ddb78868d9dadb8af370c82 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 15 Nov 2021 22:05:37 +0100
Subject: [PATCH 0571/2157] tests/misc-ro: Look for unwanted SetUID/GID bits

Ensure that only known good files and directories have the SetUID/GID
bits sets.

Test for https://github.com/coreos/fedora-coreos-tracker/issues/1003
---
 tests/kola/files/setgid | 38 ++++++++++++++++++++++++++++++
 tests/kola/files/setuid | 51 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 89 insertions(+)
 create mode 100755 tests/kola/files/setgid
 create mode 100755 tests/kola/files/setuid

diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
new file mode 100755
index 0000000000..bb2d20afc4
--- /dev/null
+++ b/tests/kola/files/setgid
@@ -0,0 +1,38 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# List of known files and directories with SetGID bit set
+list_setgid_files=(
+    '/usr/bin/write'
+    '/usr/libexec/openssh/ssh-keysign'
+    '/usr/libexec/utempter/utempter'
+)
+unknown_setgid_files=""
+while IFS= read -r -d '' e; do
+    found="false"
+    for k in "${list_setgid_files[@]}"; do
+        if [[ "${k}" == "${e}" ]]; then
+            found="true"
+            break
+        fi
+    done
+    if [[ "${found}" == "false" ]]; then
+        unknown_setgid_files+=" ${e}"
+    fi
+done< <(find /usr /etc -type f,d -perm /2000 -print0)
+
+if [[ -n "${unknown_setgid_files}" ]]; then
+    echo "SetGID:${unknown_setgid_files}"
+    fatal "found files/directories with SetUID/GID bit set"
+fi
+ok "no unknown file/directory with SetUID/GID bit set"
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
new file mode 100755
index 0000000000..91a1411c70
--- /dev/null
+++ b/tests/kola/files/setuid
@@ -0,0 +1,51 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# List of known files and directories with SetUID bit set
+list_setuid_files=(
+    '/usr/bin/chage'
+    '/usr/bin/fusermount'
+    '/usr/bin/fusermount3'
+    '/usr/bin/gpasswd'
+    '/usr/bin/mount'
+    '/usr/bin/newgrp'
+    '/usr/bin/passwd'
+    '/usr/bin/pkexec'
+    '/usr/bin/su'
+    '/usr/bin/sudo'
+    '/usr/bin/umount'
+    '/usr/lib/polkit-1/polkit-agent-helper-1'
+    '/usr/sbin/grub2-set-bootflag'
+    '/usr/sbin/mount.nfs'
+    '/usr/sbin/pam_timestamp_check'
+    '/usr/sbin/unix_chkpwd'
+)
+unknown_setuid_files=""
+while IFS= read -r -d '' e; do
+    found="false"
+    for k in "${list_setuid_files[@]}"; do
+        if [[ "${k}" == "${e}" ]]; then
+            found="true"
+            break
+        fi
+    done
+    if [[ "${found}" == "false" ]]; then
+        unknown_setuid_files+=" ${e}"
+    fi
+done< <(find /usr /etc -type f,d -perm /4000 -print0)
+
+if [[ -n "${unknown_setuid_files}" ]]; then
+    echo "SetUID:${unknown_setuid_files}"
+    fatal "found files/directories with SetUID/GID bit set"
+fi
+ok "no unknown file/directory with SetUID/GID bit set"

From ead1dc64d83b8d8df8efff39a019941a11d1dd97 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 16 Nov 2021 13:32:43 -0500
Subject: [PATCH 0572/2157] tests/coreos-platform-chrony-generator: make
 non-exclusive

There's nothing that mutates the host in there (after removing the
unnecessary `mktemp -d`) so let's just make it shared.
---
 tests/kola/chrony/coreos-platform-chrony-generator | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index 729fa86d6f..cbc810910a 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -2,9 +2,7 @@
 set -euo pipefail
 # Test the coreos-platform-chrony generator.
 
-# kola: { "platforms": "aws,azure,gcp" }
-
-cd "$(mktemp -d)"
+# kola: { "exclusive": false, "platforms": "aws,azure,gcp" }
 
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in

From 6e0f9d7c1c42358145b88e1dd20ef3de3372bf45 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 16 Nov 2021 12:49:56 -0500
Subject: [PATCH 0573/2157] tests/default-network-behavior-change: drop
 references to F34

Our testing stream has moved to F35 so effectively we can drop
references to F34 in the code/tests.
---
 .../kola/networking/default-network-behavior-change/test.sh | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 8421b12a62..d9f3e66315 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -49,7 +49,6 @@ method=auto
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG2
 #   - used on all RHCOS releases
-#   - used on FCOS F34
 EXPECTED_INITRD_NETWORK_CFG2="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -113,10 +112,7 @@ normalize_connection_file() {
 source /etc/os-release
 # All current FCOS releases use the same config
 if [ "$ID" == "fedora" ]; then
-    if [ "$VERSION_ID" -eq "34" ]; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
-        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
-    elif [ "$VERSION_ID" -ge "35" ]; then
+    if [ "$VERSION_ID" -ge "35" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     else

From acfed266b627d96b9592ca1ca7769f444e3e215e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 16 Nov 2021 12:46:40 -0500
Subject: [PATCH 0574/2157] tests/default-network-behavior-change: update
 default config

RHCOS streams have brought in a new NM RPM and the default config
from `nm-initrd-generator` has changed slightly. It looks like
the upstream PR [1] has landed to fix [2] so this is an expected
and desired change. The RPM change was:

```
NetworkManager 1.30.0-10.el8_4.x86_64 -> 1.30.0-13.el8_4.x86_64
```

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/907/
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1961666
---
 tests/kola/networking/default-network-behavior-change/test.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index d9f3e66315..36e82cad01 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -64,6 +64,7 @@ mac-address-blacklist=
 dhcp-timeout=90
 dns-search=
 method=auto
+required-timeout=20000
 
 [ipv6]
 addr-gen-mode=eui64

From 8711ef31029df553ecfae36303881da90974476c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 16 Nov 2021 12:58:06 -0500
Subject: [PATCH 0575/2157] tests/default-network-behavior-change: Make RHCOS
 minimum version 4.7

According to @miabbott we could backport this all the way to 4.7.
---
 tests/kola/networking/default-network-behavior-change/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 36e82cad01..846f5fe903 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -122,7 +122,7 @@ if [ "$ID" == "fedora" ]; then
 elif [ "$ID" == "rhcos" ]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
-    RHCOS_MINIMUM_VERSION="4.9"
+    RHCOS_MINIMUM_VERSION="4.7"
     if [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1

From 5b47e37e3425f60883894d8815ed7f4936a21844 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 16 Nov 2021 12:57:05 -0500
Subject: [PATCH 0576/2157] manifests/fedora-coreos-base: drop systemd-resolved
 neutering

This was needed and applied in F33/F34. Now that we've moved to F35+
we no longer need it.
---
 manifests/fedora-coreos-base.yaml | 23 -----------------------
 1 file changed, 23 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2b35ce5ce8..433441c20f 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -72,29 +72,6 @@ postprocess:
     #!/usr/bin/env bash
     systemctl mask systemd-repart.service
 
-  # Neuter systemd-resolved for now.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-743219353
-  # Remove when on F35+ as NM now handles rdns + resolved better
-  # https://github.com/coreos/fedora-coreos-tracker/issues/834
-  # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/601
-  # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/877
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    # Only operate on F34 since F35+ has been fixed
-    source /etc/os-release
-    [ ${VERSION_ID} -eq 34 ] || exit 0
-    # Get us back to Fedora 32's nsswitch.conf settings
-    sed -i 's/^hosts:.*/hosts:      files dns myhostname/' /etc/nsswitch.conf
-    mkdir -p /usr/lib/systemd/resolved.conf.d/
-    cat > /usr/lib/systemd/resolved.conf.d/fedora-coreos-stub-listener.conf <<'EOF'
-    # Fedora CoreOS is electing to not use systemd-resolved's internal
-    # logic for now because of issues with setting hostnames via reverse DNS.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/649#issuecomment-736104003
-    [Resolve]
-    DNSStubListener=no
-    EOF
-
   # Set the fallback hostname to `localhost`. This was needed in F33/F34
   # because a fallback hostname of `fedora` + systemd-resolved broke
   # rDNS. It's now fixed in F35+ NetworkManager to handle the corner cases

From 96716e33618235e349ecf76e98e74d6bd144e7f8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 17 Nov 2021 03:39:06 +0000
Subject: [PATCH 0577/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/604/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f30d7757bb..cff0ad90df 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "2021.2.50-3.fc35.noarch"
     },
     "catatonit": {
-      "evra": "0.1.6-1.fc35.aarch64"
+      "evra": "0.1.7-1.fc35.aarch64"
     },
     "chrony": {
       "evra": "4.1-3.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-15T21:01:56Z",
+    "generated": "2021-11-17T02:55:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-14T21:25:38Z"
+        "generated": "2021-11-15T22:05:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-15T05:27:57Z"
+        "generated": "2021-11-17T01:02:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9d41ee7177..3769e0df8c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "2021.2.50-3.fc35.noarch"
     },
     "catatonit": {
-      "evra": "0.1.6-1.fc35.x86_64"
+      "evra": "0.1.7-1.fc35.x86_64"
     },
     "chrony": {
       "evra": "4.1-3.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-15T21:02:25Z",
+    "generated": "2021-11-17T02:55:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-14T21:25:46Z"
+        "generated": "2021-11-15T22:06:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-15T05:28:10Z"
+        "generated": "2021-11-17T01:02:12Z"
       }
     }
   }

From b3060875220235df11c679d4a5e1e3ebaaaa03c0 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Tue, 2 Nov 2021 13:33:06 -0400
Subject: [PATCH 0578/2157] tests: add distro tags to FCOS only tests

This is a first pass at categorizing the existing external tests using
the `distros` tag to indicate that the tests are only supported on
FCOS.  This should allow better sharing of tests with RHCOS.

Note: some of these tests may be able to be adapted for RHCOS; will
investigate in a follow-up PR.

See: openshift/os#661
See: coreos/coreos-assembler#2521
---
 tests/kola/README.md                            | 17 +++++++++++++++++
 tests/kola/containers/cgroups-v2                |  5 ++++-
 tests/kola/files/remove-manifest-files          |  5 ++++-
 tests/kola/files/rpmdb-sqlite                   |  4 +++-
 tests/kola/firewall/iptables-legacy             |  6 +++++-
 tests/kola/ignition/systemd-unmasking/test.sh   |  5 ++++-
 tests/kola/migration/installer-cleanup          |  4 +++-
 .../default-network-behavior-change/test.sh     |  2 +-
 tests/kola/networking/dnsmasq-service           |  5 ++++-
 .../networking/resolv/systemd-resolved-service  |  4 +++-
 tests/kola/networking/stub-resolve.sh           |  4 +++-
 tests/kola/podman/rootless-systemd              |  6 +++++-
 tests/kola/reboot/test.sh                       |  5 ++++-
 tests/kola/root-reprovision/luks/test.sh        |  6 +++++-
 .../root-reprovision/swap-before-root/test.sh   |  4 +++-
 tests/kola/rpm-ostree-countme/test.sh           |  3 ++-
 tests/kola/security/passwd/test.sh              |  4 ++++
 tests/kola/swap/zram-default                    |  2 ++
 tests/kola/swap/zram-generator/test.sh          |  3 ++-
 tests/kola/toolbox/test.sh                      |  6 +++++-
 20 files changed, 83 insertions(+), 17 deletions(-)
 create mode 100644 tests/kola/README.md

diff --git a/tests/kola/README.md b/tests/kola/README.md
new file mode 100644
index 0000000000..4364c00fce
--- /dev/null
+++ b/tests/kola/README.md
@@ -0,0 +1,17 @@
+# Kola External Tests
+
+For more information about the `kola` external tests, see the [Integrating External Test Suites](https://coreos.github.io/coreos-assembler/kola/external-tests/#integrating-external-test-suites)
+topic in the `coreos-assembler` documentation.
+
+## Sharing tests between FCOS/RHCOS
+
+These tests are intended to be shared between FCOS and RHCOS. If you are adding
+a new test(s) to this collection, ensure that the test also run on RHCOS.
+Otherwise, use the `kola` JSON header to specify that it only runs on FCOS like
+so:
+
+```bash
+#!/bin/bash
+# kola: {"distros": "fcos"}
+...
+```
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index aaa32d4b84..93c70edecb 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -1,5 +1,8 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS because RHCOS does not currently support cgroupsv2
+# by default.
+# TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index ce01e1d7b4..de211c00f8 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -1,5 +1,8 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS bceause RHCOS does ship `info` which is a
+# Requires on a number of RHCOS packages.
+# TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 0c20d22df2..4b7d8e11cb 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -1,5 +1,7 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS as the RHCOS rpmdb has not migrated to sqlite yet.
+# TODO-RHCOS: drop the "fcos" tag when RHCOS migrates to using sqlite
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
index c21373026e..9e45b15c89 100755
--- a/tests/kola/firewall/iptables-legacy
+++ b/tests/kola/firewall/iptables-legacy
@@ -1,5 +1,9 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test is currently scoped to only FCOS because the RHCOS version of `iptables`
+# is using the `nf_tables` backend.
+# TODO: modify this test to check for `nf_tables` backend when FCOS switches.
+#       See https://github.com/coreos/fedora-coreos-config/pull/1324
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 64ee6d1d7a..760c7057f9 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -7,7 +7,10 @@ set -xeuo pipefail
 
 # We don't need to test this on every platform. If it passes in
 # one place it will pass everywhere.
-# kola: { "platforms": "qemu-unpriv" }
+# This test is currently scoped to FCOS because `dnsmasq` is not masked
+# on RHCOS.
+# TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
+# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/migration/installer-cleanup b/tests/kola/migration/installer-cleanup
index 9069a27de1..cef05c3c37 100755
--- a/tests/kola/migration/installer-cleanup
+++ b/tests/kola/migration/installer-cleanup
@@ -6,7 +6,9 @@
 
 # Just run on QEMU.  coreos-installer doesn't run in clouds, and rebooting
 # doesn't seem to work there currently.
-# kola: { "platforms": "qemu-unpriv" }
+# This test only runs on FCOS because the `coreos-cleanup-ignition-config` service
+# is not present on RHCOS.
+# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 846f5fe903..74b44ea076 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -136,7 +136,7 @@ fi
 
 # Execute nm-initrd-generator against our default kargs (defined by
 # afterburn drop in) to get the generated initrd network config.
-DEFAULT_KARGS_FILE=/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf 
+DEFAULT_KARGS_FILE=/usr/lib/dracut/modules.d/35coreos-network/50-afterburn-network-kargs-default.conf
 source <(grep -o 'AFTERBURN_NETWORK_KARGS_DEFAULT=.*' $DEFAULT_KARGS_FILE)
 tmpdir=$(mktemp -d)
 /usr/libexec/nm-initrd-generator \
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index eb295ac6d6..98f14e8f97 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -1,5 +1,8 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS because the `dnsmasq` service on RHCOS is simply
+# disabled, not masked.
+# TODO-RHCOS: adapt test to check that `dnsmasq` is in the proper state on RHCOS
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/networking/resolv/systemd-resolved-service b/tests/kola/networking/resolv/systemd-resolved-service
index f924192f8e..a04b5e366b 100755
--- a/tests/kola/networking/resolv/systemd-resolved-service
+++ b/tests/kola/networking/resolv/systemd-resolved-service
@@ -1,5 +1,7 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS because `systemd-resolved` is not installed on
+# RHCOS
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/networking/stub-resolve.sh b/tests/kola/networking/stub-resolve.sh
index beff6dbeeb..9754e59436 100755
--- a/tests/kola/networking/stub-resolve.sh
+++ b/tests/kola/networking/stub-resolve.sh
@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS because `systemd-resolved` is not installed on
+# RHCOS
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 170307772d..51447f4733 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -11,7 +11,11 @@ set -euxo pipefail
 
 # Just run on QEMU for now. If this test works in one place it should
 # work everywhere.
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+# The test is scoped to only FCOS because the `--retry-all-errors` flag passed
+# to `curl` is not avaiable on the version in RHCOS.
+# TODO-RHCOS: adapt test to conditionally use the `-retry-all-errors` flag on
+# only FCOS
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
 # Script to be executed as the `core` user to build and
 # run a rootless podman container that uses systemd inside.
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 06d3e12c03..41fd97fb64 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,6 +1,9 @@
 #!/bin/bash
 set -xeuo pipefail
-# kola: {"platforms": "qemu"}
+# This test is only run on FCOS because we are not mounting /boot by UUID on
+# RHCOS, yet.
+# TODO-RHCOS: drop 'fcos' tag when RHCOS starts mounting /boot by UUID
+# kola: {"distros": "fcos", "platforms": "qemu"}
 
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 86f9622d16..3bccfb59dd 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096, "architectures": "!s390x"}
+# This test is only running on FCOS because it is checking that /boot is
+# mounted by UUID and RHCOS is not doing that yet.
+# TODO-RHCOS: drop 'fcos' tag when RHCOS is mounting /boot by UUID
+#             See: https://github.com/openshift/os/issues/675
+# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index 33ba89850d..de269f7b3a 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,5 +1,7 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096}
+# This test only runs on FCOS due to a problem enabling a swap partition on
+# RHCOS.  See: https://github.com/openshift/os/issues/665
+# kola: {"distros": "fcos", "platforms": "qemu", "minMemory": 4096}
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index f3e3e79c26..0016306961 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -2,7 +2,8 @@
 set -xeuo pipefail
 
 # No need to run on any other platform than QEMU.
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+# This test only runs on FCOS because countme support is not available in RHCOS
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index efec65e240..0ab5546d63 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -1,4 +1,8 @@
 #!/bin/bash
+# This test only runs on FCOS because RHCOS does not support `yescrypt`
+# TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
+# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index c380b4dacf..5aa39cd076 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -1,4 +1,6 @@
 #!/bin/bash
+# We can run this on both FCOS and RHCOS as neither should have a zram device
+# enabled by default. (In RHCOS, there is no zram support at all)
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index 2d29672f6a..2ab2cfdcf2 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
-# kola: { "exclusive": true}
+# This test only runs on FCOS because RHCOS does not have zram support.
+# kola: { "distros": "fcos", "exclusive": true}
 set -xeuo pipefail
 
 ok() {
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index ae311133ec..b461750f29 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -13,7 +13,11 @@
 
 # Only run on QEMU to reduce CI costs as nothing is platform specific here.
 # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
+# This test only runs on FCOS because RHCOS is missing the `machinectl` command.
+# Additionally, there are some distro specific choices made for this test that
+# should/could be adpated for RHCOS.
+# TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
 
 set -xeuo pipefail
 

From 7ad52c298116b30aadf41ec39cb09e3d6e6f2b5a Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Fri, 12 Nov 2021 15:31:11 -0500
Subject: [PATCH 0579/2157] tests/aleph-version: change jq to work on RHCOS

Omitting the "." from the `jq` expression on RHCOS causes the command
to fail. By including the ".", the test can run on FCOS + RHCOS.
---
 tests/kola/files/aleph-version | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index 93043faafe..0e0b9ef14d 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -12,5 +12,5 @@ fatal() {
 }
 
 # Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
-jq < /sysroot/.coreos-aleph-version.json >/dev/null
+jq . < /sysroot/.coreos-aleph-version.json >/dev/null
 ok aleph

From dac1f6835e1e730409a4062c6562ece32bddaee1 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Fri, 12 Nov 2021 15:33:14 -0500
Subject: [PATCH 0580/2157] tests/files: split types into separate arguments

The version of `find` on RHCOS does not accept a comma-separated list
of file types to the `-type` argument. Splitting it into multiple args
should allow the test to work with FCOS/RHCOS.
---
 tests/kola/files/file-directory-permissions | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index 452240dc32..f982e657d5 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -11,9 +11,9 @@ fatal() {
     exit 1
 }
 
-list="$(find /etc -type f,d -perm /022)"
+list="$(find /etc -type f -type d -perm /022)"
 if [[ -n "${list}" ]]; then
-    find /etc -type f,d -perm /022 -print0 | xargs -0 ls -al
+    find /etc -type f -type d -perm /022 -print0 | xargs -0 ls -al
     fatal "found files or directories with 'g+w' or 'o+w' permission"
 fi
 ok "no files with 'g+w' or 'o+w' permission found in /etc"

From 8ecedee66ee3023be7b34cd72a5871e5c2a80fec Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Wed, 17 Nov 2021 15:55:50 -0500
Subject: [PATCH 0581/2157] tests/systemd-repart-service: only run on FCOS

The version of `systemd-udev` on RHCOS does not include the
`systemd-repart` service.

Missed this test as part of #1322.
---
 tests/kola/disks/systemd-repart-service | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index 6ca1ab2d52..32d71faaf7 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -1,5 +1,9 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+# This test only runs on FCOS because the version of `systemd-udev` in RHCOS does
+# not include `systemd-repart`
+# TODO-RHCOS: consider dropping the "fcos" tag if/when `systemd-udev` in RHEL
+#             starts to include `systemd-repart`
+# kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
 ok() {

From f05ef87daf93baf3ef11eb3f83d65ad52a856033 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 18 Nov 2021 21:23:31 +0000
Subject: [PATCH 0582/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/606/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cff0ad90df..31437bd41c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1111,22 +1111,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.6-2.fc35.aarch64"
+      "evra": "249.7-2.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-17T02:55:11Z",
+    "generated": "2021-11-18T20:53:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-15T22:05:40Z"
+        "generated": "2021-11-17T03:44:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-17T01:02:00Z"
+        "generated": "2021-11-18T00:59:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3769e0df8c..43bc1fe257 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1123,22 +1123,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.6-2.fc35.x86_64"
+      "evra": "249.7-2.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-17T02:55:06Z",
+    "generated": "2021-11-18T20:53:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-15T22:06:25Z"
+        "generated": "2021-11-17T03:45:09Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-17T01:02:12Z"
+        "generated": "2021-11-18T00:59:25Z"
       }
     }
   }

From 1d8a32230d907162a6f7deda92da8c1e0eb9f0d9 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 18 Nov 2021 18:18:11 -0500
Subject: [PATCH 0583/2157] overrides: fast-track coreos-installer
 0.11.0-1.fc35

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..7b72afd848 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.11.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-753084fa88
+      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.11.0
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.11.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-753084fa88
+      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.11.0
+      type: fast-track

From 75109f5cf3da5e60d585c288d38b4ab5e4d7dd0c Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 16 Aug 2021 19:04:24 -0400
Subject: [PATCH 0584/2157] 35coreos-ignition: allow setting kargs in live
 system if it's a no-op

In a live system, we can't set kargs in an Ignition config because we
don't control the bootloader settings.  If the config specifies kargs
anyway, we currently fail with "/dev/disk/by-label/boot: not a block
device", which isn't very clear.

In the live case, use the new rdcore kargs --current option to perform a
dry run on /proc/cmdline, and if it doesn't create the stamp file, we
don't need to do anything and can succeed anyway.  Otherwise, fail with a
clearer error message.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/917.
---
 .../dracut/modules.d/35coreos-ignition/coreos-kargs.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
index adad195737..1dcc3add13 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs.sh
@@ -1,4 +1,12 @@
 #!/bin/bash
 set -euo pipefail
 
-/usr/bin/rdcore kargs --boot-device /dev/disk/by-label/boot --create-if-changed /run/coreos-kargs-reboot "$@"
+if is-live-image; then
+    /usr/bin/rdcore kargs --current --create-if-changed /run/coreos-kargs-changed "$@"
+    if [ -e /run/coreos-kargs-changed ]; then
+        echo "Need to modify kernel arguments, but cannot affect live system." >&2
+        exit 1
+    fi
+else
+    /usr/bin/rdcore kargs --boot-device /dev/disk/by-label/boot --create-if-changed /run/coreos-kargs-reboot "$@"
+fi

From 279f8829b11b8a5990f5d9de0b3cdad05521f4f2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 19 Nov 2021 22:06:16 +0000
Subject: [PATCH 0585/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/608/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 2 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 31437bd41c..4a047107a3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.1-1.fc35.aarch64"
+      "evra": "0.11.0-1.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.1-1.fc35.aarch64"
+      "evra": "0.11.0-1.fc35.aarch64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.17-301.fc35.aarch64"
+      "evra": "5.14.18-300.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.17-301.fc35.aarch64"
+      "evra": "5.14.18-300.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.17-301.fc35.aarch64"
+      "evra": "5.14.18-300.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.1-0.fc35.aarch64"
+      "evra": "2:4.15.2-3.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.19-3.fc35.aarch64"
@@ -790,7 +790,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.1-0.fc35.aarch64"
+      "evra": "2:4.15.2-3.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.aarch64"
@@ -1018,13 +1018,13 @@
       "evra": "2:1.0.2-2.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.1-0.fc35.aarch64"
+      "evra": "2:4.15.2-3.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.1-0.fc35.noarch"
+      "evra": "2:4.15.2-3.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.1-0.fc35.aarch64"
+      "evra": "2:4.15.2-3.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-18T20:53:37Z",
+    "generated": "2021-11-19T21:22:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-17T03:44:28Z"
+        "generated": "2021-11-19T02:02:05Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-18T00:59:12Z"
+        "generated": "2021-11-19T01:03:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 43bc1fe257..bf32a60207 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.10.1-1.fc35.x86_64"
+      "evra": "0.11.0-1.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.10.1-1.fc35.x86_64"
+      "evra": "0.11.0-1.fc35.x86_64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.17-301.fc35.x86_64"
+      "evra": "5.14.18-300.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.17-301.fc35.x86_64"
+      "evra": "5.14.18-300.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.17-301.fc35.x86_64"
+      "evra": "5.14.18-300.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.1-0.fc35.x86_64"
+      "evra": "2:4.15.2-3.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.1-0.fc35.x86_64"
+      "evra": "2:4.15.2-3.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.x86_64"
@@ -1030,13 +1030,13 @@
       "evra": "2:1.0.2-2.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.1-0.fc35.x86_64"
+      "evra": "2:4.15.2-3.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.1-0.fc35.noarch"
+      "evra": "2:4.15.2-3.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.1-0.fc35.x86_64"
+      "evra": "2:4.15.2-3.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-18T20:53:34Z",
+    "generated": "2021-11-19T21:22:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-17T03:45:09Z"
+        "generated": "2021-11-19T02:02:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-18T00:59:25Z"
+        "generated": "2021-11-19T01:03:18Z"
       }
     }
   }

From c1721ea4405ab96436bdf451b0279cbfe3314e4d Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Fri, 19 Nov 2021 15:00:01 -0500
Subject: [PATCH 0586/2157] tests: check for mounting /boot by UUID on RHCOS

When the next git submodule update gets pulled into `openshift/os`,
RHCOS will start mounting `/boot` by UUID. (See openshift/os#678)

Let's drop the "fcos" tags on those tests that are checking for
mounting /boot by UUID, so we can change the behavior and get unit
tests enabled in one change.
---
 tests/kola/reboot/test.sh                | 5 +----
 tests/kola/root-reprovision/luks/test.sh | 6 +-----
 2 files changed, 2 insertions(+), 9 deletions(-)

diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 41fd97fb64..06d3e12c03 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,9 +1,6 @@
 #!/bin/bash
 set -xeuo pipefail
-# This test is only run on FCOS because we are not mounting /boot by UUID on
-# RHCOS, yet.
-# TODO-RHCOS: drop 'fcos' tag when RHCOS starts mounting /boot by UUID
-# kola: {"distros": "fcos", "platforms": "qemu"}
+# kola: {"platforms": "qemu"}
 
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 3bccfb59dd..1360c34bb9 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,9 +1,5 @@
 #!/bin/bash
-# This test is only running on FCOS because it is checking that /boot is
-# mounted by UUID and RHCOS is not doing that yet.
-# TODO-RHCOS: drop 'fcos' tag when RHCOS is mounting /boot by UUID
-#             See: https://github.com/openshift/os/issues/675
-# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
+# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
 set -xeuo pipefail
 
 ok() {

From 5418aca3493ca698020fa892be79b5a8314c7364 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 22 Nov 2021 22:03:12 +0000
Subject: [PATCH 0587/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/611/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4a047107a3..25099adc14 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -169,10 +169,10 @@
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.1-1.fc35.aarch64"
+      "evra": "2.4.2-1.fc35.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.1-1.fc35.aarch64"
+      "evra": "2.4.2-1.fc35.aarch64"
     },
     "cups-libs": {
       "evra": "1:2.3.3op2-10.fc35.aarch64"
@@ -274,13 +274,13 @@
       "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-repos": {
       "evra": "35-1.noarch"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.1-1.fc35.aarch64"
+      "evra": "1.7.2-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -850,7 +850,7 @@
       "evra": "20.10.9-1.fc35.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.4.0-6.fc35.aarch64"
+      "evra": "2:0.5.0-1.fc35.aarch64"
     },
     "mozjs78": {
       "evra": "78.15.0-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-19T21:22:26Z",
+    "generated": "2021-11-22T21:05:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-19T02:02:05Z"
+        "generated": "2021-11-22T12:35:08Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-19T01:03:04Z"
+        "generated": "2021-11-22T01:01:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bf32a60207..82b0589510 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,10 +169,10 @@
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.1-1.fc35.x86_64"
+      "evra": "2.4.2-1.fc35.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.1-1.fc35.x86_64"
+      "evra": "2.4.2-1.fc35.x86_64"
     },
     "cups-libs": {
       "evra": "1:2.3.3op2-10.fc35.x86_64"
@@ -274,13 +274,13 @@
       "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-33.noarch"
+      "evra": "35-35.noarch"
     },
     "fedora-repos": {
       "evra": "35-1.noarch"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.1-1.fc35.x86_64"
+      "evra": "1.7.2-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -862,7 +862,7 @@
       "evra": "20.10.9-1.fc35.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.4.0-6.fc35.x86_64"
+      "evra": "2:0.5.0-1.fc35.x86_64"
     },
     "mozjs78": {
       "evra": "78.15.0-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-19T21:22:31Z",
+    "generated": "2021-11-22T21:05:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-19T02:02:40Z"
+        "generated": "2021-11-22T12:35:44Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-19T01:03:18Z"
+        "generated": "2021-11-22T01:01:58Z"
       }
     }
   }

From c832e4e7ebeff371960421d968a0646194b2f264 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 9 Nov 2021 12:18:40 -0500
Subject: [PATCH 0588/2157] Revert "overlay: remove /boot/ignition on upgrade
 if present"

This was a fixup for existing nodes on upgrade.  Now that we've passed
through the F35 barrier release, drop the fixup.

Fixes https://github.com/coreos/fedora-coreos-config/issues/1094.

This reverts commit 6e178e717e1d20336ef285b2612428960854a600.
---
 .../lib/systemd/system-preset/45-fcos.preset  |  3 --
 .../coreos-cleanup-ignition-config.service    | 18 ---------
 .../libexec/coreos-cleanup-ignition-config    | 10 -----
 tests/kola/migration/installer-cleanup        | 38 -------------------
 4 files changed, 69 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
 delete mode 100755 overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
 delete mode 100755 tests/kola/migration/installer-cleanup

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index ad082ac367..c1d3e4dc9a 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,6 +3,3 @@ enable fedora-coreos-pinger.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
-# Clean up injected Ignition config in /boot on upgrade
-# https://github.com/coreos/fedora-coreos-tracker/issues/889
-enable coreos-cleanup-ignition-config.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
deleted file mode 100644
index bb923418dd..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-cleanup-ignition-config.service
+++ /dev/null
@@ -1,18 +0,0 @@
-[Unit]
-Description=Clean Up Injected Ignition Config in /boot
-Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/889
-# Newer Ignition will handle this on first boot; we only want to clean up
-# leftover configs on upgrade.  Disambiguate those two code paths for tests.
-ConditionKernelCommandLine=!ignition.firstboot
-RequiresMountsFor=/boot
-ConditionPathExists=/boot/ignition
-
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/coreos-cleanup-ignition-config
-RemainAfterExit=yes
-# MountFlags=slave ensures the rw mount of /boot is private to the unit
-MountFlags=slave
-
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config b/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
deleted file mode 100755
index ee76687c0a..0000000000
--- a/overlay.d/15fcos/usr/libexec/coreos-cleanup-ignition-config
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/usr/bin/bash
-#
-# Clean up existing nodes that have a world-readable /boot/ignition/config.ign.
-# Remove this after the next barrier release on all streams.
-# https://github.com/coreos/fedora-coreos-tracker/issues/889
-
-set -euo pipefail
-
-mount -o remount,rw /boot
-rm -rf /boot/ignition
diff --git a/tests/kola/migration/installer-cleanup b/tests/kola/migration/installer-cleanup
deleted file mode 100755
index cef05c3c37..0000000000
--- a/tests/kola/migration/installer-cleanup
+++ /dev/null
@@ -1,38 +0,0 @@
-#!/bin/bash
-# Old instances might have a leftover Ignition config in /boot/ignition on
-# upgrade.  Manually create one, reboot, and ensure that it's correctly
-# cleaned up.
-# https://github.com/coreos/fedora-coreos-tracker/issues/889
-
-# Just run on QEMU.  coreos-installer doesn't run in clouds, and rebooting
-# doesn't seem to work there currently.
-# This test only runs on FCOS because the `coreos-cleanup-ignition-config` service
-# is not present on RHCOS.
-# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
-
-set -xeuo pipefail
-
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-"")
-    sudo mount -o remount,rw /boot
-    sudo mkdir -p /boot/ignition
-    sudo touch /boot/ignition/config.ign
-    /tmp/autopkgtest-reboot rebooted
-    ;;
-rebooted)
-    [[ ! -e /boot/ignition ]]
-    ok "/boot/ignition was removed"
-    ;;
-*)
-    fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"
-    ;;
-esac

From 8dea37fed421ebf499e1ff7c66d3683135fc28e5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 23 Nov 2021 22:26:34 +0000
Subject: [PATCH 0589/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/613/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 25099adc14..fb6c792a39 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -847,7 +847,7 @@
       "evra": "4.2-rc2.fc35.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.9-1.fc35.aarch64"
+      "evra": "20.10.10-1.fc35.aarch64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.aarch64"
@@ -958,10 +958,10 @@
       "evra": "1.8.0-1.fc35.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.1-1.fc35.aarch64"
+      "evra": "3:3.4.2-1.fc35.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.1-1.fc35.aarch64"
+      "evra": "3:3.4.2-1.fc35.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-22T21:05:14Z",
+    "generated": "2021-11-23T21:11:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-22T12:35:08Z"
+        "generated": "2021-11-22T22:06:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-22T01:01:44Z"
+        "generated": "2021-11-23T01:26:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 82b0589510..53eacf0cf9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -859,7 +859,7 @@
       "evra": "2:2.1-47.fc35.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.9-1.fc35.x86_64"
+      "evra": "20.10.10-1.fc35.x86_64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.8.0-1.fc35.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.1-1.fc35.x86_64"
+      "evra": "3:3.4.2-1.fc35.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.1-1.fc35.x86_64"
+      "evra": "3:3.4.2-1.fc35.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-22T21:05:43Z",
+    "generated": "2021-11-23T21:16:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-22T12:35:44Z"
+        "generated": "2021-11-22T22:07:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-22T01:01:58Z"
+        "generated": "2021-11-23T01:27:04Z"
       }
     }
   }

From 1eb2b112953c87dfe2967b1d469a6c9a5cf05060 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 23 Nov 2021 15:06:30 +0800
Subject: [PATCH 0590/2157] tests: import test cases from openshift/os repo

These are tests cases that were in `misc-ro.sh` in the openshift/os repo [1].
We're importing them here to share them between FCOS and RHCOS because
they benefit both platforms.

[1] https://github.com/openshift/os/blob/43044b95eb9288162dd62b84ad7dc7b6c8b5707a/tests/kola/misc-ro/misc-ro.sh
---
 tests/kola/disks/tmpfs               | 19 +++++++++++++++++++
 tests/kola/files/kernel-headers      | 21 +++++++++++++++++++++
 tests/kola/files/logrotate-service   |  3 ++-
 tests/kola/files/system-generators   | 20 ++++++++++++++++++++
 tests/kola/files/trust-cpu           | 27 +++++++++++++++++++++++++++
 tests/kola/files/yum-repo-dir        | 17 +++++++++++++++++
 tests/kola/networking/nm-dhcp-client | 18 ++++++++++++++++++
 tests/kola/selinux/enforcing         | 19 +++++++++++++++++++
 tests/kola/selinux/usrlocal-context  | 19 +++++++++++++++++++
 9 files changed, 162 insertions(+), 1 deletion(-)
 create mode 100755 tests/kola/disks/tmpfs
 create mode 100755 tests/kola/files/kernel-headers
 create mode 100755 tests/kola/files/system-generators
 create mode 100755 tests/kola/files/trust-cpu
 create mode 100755 tests/kola/files/yum-repo-dir
 create mode 100755 tests/kola/networking/nm-dhcp-client
 create mode 100755 tests/kola/selinux/enforcing
 create mode 100755 tests/kola/selinux/usrlocal-context

diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
new file mode 100755
index 0000000000..ebbc4d0a24
--- /dev/null
+++ b/tests/kola/disks/tmpfs
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Ensure we have tmpfs on /tmp
+tmpfs=$(findmnt -n -o FSTYPE /tmp)
+if [ "${tmpfs}" != "tmpfs" ]; then
+    fatal "Error: Expected tmpfs on /tmp, found: ${tmpfs}"
+fi
+ok "tmpfs on /tmp"
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
new file mode 100755
index 0000000000..d3812744b8
--- /dev/null
+++ b/tests/kola/files/kernel-headers
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# check that we are not including the kernel headers on the host
+# See:
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
+# - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
+if test -d /usr/include/linux; then
+   fatal "Error: should not have kernel headers on host"
+fi
+ok "kernel headers not on host"
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index e0e26582a3..1024c95aed 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -12,8 +12,9 @@ fatal() {
 }
 
 # Test some services are enabled or disabled appropriately
-for unit in logrotate; do
+for unit in logrotate logrotate.timer; do
     if ! systemctl is-enabled ${unit} 1>/dev/null; then
         fatal "Unit ${unit} should be enabled"
     fi
+    ok "Unit ${unit} is enabled as expected"
 done
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
new file mode 100755
index 0000000000..a95e6eefdc
--- /dev/null
+++ b/tests/kola/files/system-generators
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure files in /usr/lib/systemd/system-generators have exec mode
+find /usr/lib/systemd/system-generators -type f | while read f; do
+    if ! test -x $f; then
+        fatal "Error: generator is not executable: $f"
+    fi
+done
+ok "system-generators are executable"
diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
new file mode 100755
index 0000000000..a464bcaf9f
--- /dev/null
+++ b/tests/kola/files/trust-cpu
@@ -0,0 +1,27 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1830280
+tmpd=$(mktemp -d)
+cd "${tmpd}"
+case "$(arch)" in
+    x86_64)
+        dmesg | grep ' random:' > random.txt
+        if ! grep -qe 'crng done.*trust.*CPU' <random.txt; then
+            sed -e 's/^/# /' < random.txt
+            fatal "Error: Failed to find crng trusting CPU"
+        fi
+        ok "random trust cpu" ;;
+    *) echo "Don't know how to test hardware RNG state on arch=$(arch)" ;;
+esac
+rm -r "${tmpd}"
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
new file mode 100755
index 0000000000..9d7363efb0
--- /dev/null
+++ b/tests/kola/files/yum-repo-dir
@@ -0,0 +1,17 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if ! test -d /etc/yum.repos.d; then
+    fatal "Error: not find /etc/yum.repos.d"
+fi
+ok "have /etc/yum.repos.d"
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
new file mode 100755
index 0000000000..63c32b97c5
--- /dev/null
+++ b/tests/kola/networking/nm-dhcp-client
@@ -0,0 +1,18 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Ensure NM's internal DHCP client runs by default
+if ! journalctl -b 0 -u NetworkManager --grep=dhcp | grep -q "Using DHCP client 'internal'"; then
+  fatal "Error: NetworkManager's internal DHCP client is not running"
+fi
+ok "NetworkManager's internal DHCP client is running"
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
new file mode 100755
index 0000000000..850d829d16
--- /dev/null
+++ b/tests/kola/selinux/enforcing
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# SELinux should be on
+enforce=$(getenforce)
+if [ "${enforce}" != "Enforcing" ]; then
+    fatal "Error: Expected SELinux Enforcing, found ${enforce}"
+fi
+ok "selinux is Enforcing"
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
new file mode 100755
index 0000000000..d063f013fb
--- /dev/null
+++ b/tests/kola/selinux/usrlocal-context
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+bin_ctx=$(stat -c %C /usr/sbin)
+usrlocal_sbin_ctx=$(stat -c %C /var/usrlocal/sbin)
+if test "${bin_ctx}" != "${usrlocal_sbin_ctx}"; then
+    fatal "Error: /usr/sbin is ${bin_ctx} but /var/usrlocal/sbin is ${usrlocal_sbin_ctx}"
+fi
+ok "/usr/sbin /var/usrlocal/sbin have the same SELinux security context"

From 43e59b36ac9a48c55ca2165201d17332cac0d719 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Nov 2021 21:41:38 +0000
Subject: [PATCH 0591/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/614/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fb6c792a39..216bd67402 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.22-1.fc35.aarch64"
+      "evra": "32:9.16.23-1.fc35.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.22-1.fc35.noarch"
+      "evra": "32:9.16.23-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.22-1.fc35.aarch64"
+      "evra": "32:9.16.23-1.fc35.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "4.17.0-1.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.13-2.fc35.aarch64"
+      "evra": "2021.14-2.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.13-2.fc35.aarch64"
+      "evra": "2021.14-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.aarch64"
@@ -1156,7 +1156,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3582-1.fc35.aarch64"
+      "evra": "2:8.2.3642-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-23T21:11:47Z",
+    "generated": "2021-11-24T20:53:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-22T22:06:46Z"
+        "generated": "2021-11-23T22:29:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-23T01:26:50Z"
+        "generated": "2021-11-24T01:07:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 53eacf0cf9..2bcdbe901b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.22-1.fc35.x86_64"
+      "evra": "32:9.16.23-1.fc35.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.22-1.fc35.noarch"
+      "evra": "32:9.16.23-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.22-1.fc35.x86_64"
+      "evra": "32:9.16.23-1.fc35.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "4.17.0-1.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.13-2.fc35.x86_64"
+      "evra": "2021.14-2.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.13-2.fc35.x86_64"
+      "evra": "2021.14-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3582-1.fc35.x86_64"
+      "evra": "2:8.2.3642-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-23T21:16:10Z",
+    "generated": "2021-11-24T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-22T22:07:46Z"
+        "generated": "2021-11-23T22:30:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-23T01:27:04Z"
+        "generated": "2021-11-24T01:07:18Z"
       }
     }
   }

From d9c4207e6fb2e57a9467e61bcfab125a4c2ca8de Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 26 Nov 2021 21:24:43 +0000
Subject: [PATCH 0592/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/616/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 216bd67402..a26110af42 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -253,13 +253,13 @@
       "evra": "37-17.fc35.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.185-5.fc35.noarch"
+      "evra": "0.186-1.fc35.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.185-5.fc35.aarch64"
+      "evra": "0.186-1.fc35.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.185-5.fc35.aarch64"
+      "evra": "0.186-1.fc35.aarch64"
     },
     "ethtool": {
       "evra": "2:5.15-1.fc35.aarch64"
@@ -592,7 +592,7 @@
       "evra": "0.3.8-1.fc35.aarch64"
     },
     "libibverbs": {
-      "evra": "37.0-1.fc35.aarch64"
+      "evra": "38.0-1.fc35.aarch64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.aarch64"
@@ -919,10 +919,10 @@
       "evra": "1.77-8.fc35.aarch64"
     },
     "ostree": {
-      "evra": "2021.5-2.fc35.aarch64"
+      "evra": "2021.6-1.fc35.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.5-2.fc35.aarch64"
+      "evra": "2021.6-1.fc35.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.aarch64"
@@ -1045,10 +1045,10 @@
       "evra": "1.46-2.fc35.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-7.fc35.aarch64"
+      "evra": "2:4.9-8.fc35.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-7.fc35.aarch64"
+      "evra": "2:4.9-8.fc35.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-24T20:53:32Z",
+    "generated": "2021-11-26T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-23T22:29:37Z"
+        "generated": "2021-11-24T21:43:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-24T01:07:03Z"
+        "generated": "2021-11-26T00:56:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2bcdbe901b..576cb920a8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -253,13 +253,13 @@
       "evra": "37-17.fc35.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.185-5.fc35.noarch"
+      "evra": "0.186-1.fc35.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.185-5.fc35.x86_64"
+      "evra": "0.186-1.fc35.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.185-5.fc35.x86_64"
+      "evra": "0.186-1.fc35.x86_64"
     },
     "ethtool": {
       "evra": "2:5.15-1.fc35.x86_64"
@@ -598,7 +598,7 @@
       "evra": "0.3.8-1.fc35.x86_64"
     },
     "libibverbs": {
-      "evra": "37.0-1.fc35.x86_64"
+      "evra": "38.0-1.fc35.x86_64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.x86_64"
@@ -931,10 +931,10 @@
       "evra": "1.77-8.fc35.x86_64"
     },
     "ostree": {
-      "evra": "2021.5-2.fc35.x86_64"
+      "evra": "2021.6-1.fc35.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.5-2.fc35.x86_64"
+      "evra": "2021.6-1.fc35.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.x86_64"
@@ -1057,10 +1057,10 @@
       "evra": "1.46-2.fc35.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-7.fc35.x86_64"
+      "evra": "2:4.9-8.fc35.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-7.fc35.x86_64"
+      "evra": "2:4.9-8.fc35.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-24T20:53:25Z",
+    "generated": "2021-11-26T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-23T22:30:04Z"
+        "generated": "2021-11-24T21:43:31Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-24T01:07:18Z"
+        "generated": "2021-11-26T00:57:09Z"
       }
     }
   }

From c30070ad3bf470278be0059af89e8879840a1789 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 28 Nov 2021 21:23:49 +0000
Subject: [PATCH 0593/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/617/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a26110af42..357cfa479c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -274,13 +274,13 @@
       "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-repos": {
       "evra": "35-1.noarch"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.18-300.fc35.aarch64"
+      "evra": "5.15.4-201.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.14.18-300.fc35.aarch64"
+      "evra": "5.15.4-201.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.14.18-300.fc35.aarch64"
+      "evra": "5.15.4-201.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1190,16 +1190,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-26T20:53:02Z",
+    "generated": "2021-11-28T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-24T21:43:40Z"
+        "generated": "2021-11-26T21:29:53Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-26T00:56:52Z"
+        "generated": "2021-11-28T00:34:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 576cb920a8..1c504b65d5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -274,13 +274,13 @@
       "evra": "35-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-35.noarch"
+      "evra": "35-36.noarch"
     },
     "fedora-repos": {
       "evra": "35-1.noarch"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.14.18-300.fc35.x86_64"
+      "evra": "5.15.4-201.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.14.18-300.fc35.x86_64"
+      "evra": "5.15.4-201.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.14.18-300.fc35.x86_64"
+      "evra": "5.15.4-201.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-26T20:53:05Z",
+    "generated": "2021-11-28T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-24T21:43:31Z"
+        "generated": "2021-11-26T21:30:28Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-26T00:57:09Z"
+        "generated": "2021-11-28T00:34:15Z"
       }
     }
   }

From 34c20762b6970ca8869fe1f7e37cde38e303b746 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 29 Nov 2021 00:49:00 +0000
Subject: [PATCH 0594/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 7b72afd848..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.11.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-753084fa88
-      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.11.0
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.11.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-753084fa88
-      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.11.0
-      type: fast-track
+packages: {}

From 72e0c1857268547c4a09f80877c6f629e0ae15ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 29 Nov 2021 21:35:28 +0000
Subject: [PATCH 0595/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/618/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 11 +++++++----
 manifest-lock.x86_64.json  | 11 +++++++----
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 357cfa479c..c68ebba59d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1155,8 +1155,11 @@
     "util-linux-core": {
       "evra": "2.37.2-1.fc35.aarch64"
     },
+    "vim-data": {
+      "evra": "2:8.2.3642-2.fc35.noarch"
+    },
     "vim-minimal": {
-      "evra": "2:8.2.3642-1.fc35.aarch64"
+      "evra": "2:8.2.3642-2.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1190,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-28T20:53:01Z",
+    "generated": "2021-11-29T20:56:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-26T21:29:53Z"
+        "generated": "2021-11-28T21:26:24Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-28T00:34:00Z"
+        "generated": "2021-11-29T02:16:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1c504b65d5..bacda74b8b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1167,8 +1167,11 @@
     "util-linux-core": {
       "evra": "2.37.2-1.fc35.x86_64"
     },
+    "vim-data": {
+      "evra": "2:8.2.3642-2.fc35.noarch"
+    },
     "vim-minimal": {
-      "evra": "2:8.2.3642-1.fc35.x86_64"
+      "evra": "2:8.2.3642-2.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1202,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-28T20:52:58Z",
+    "generated": "2021-11-29T20:56:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-26T21:30:28Z"
+        "generated": "2021-11-28T21:26:50Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-28T00:34:15Z"
+        "generated": "2021-11-29T02:16:45Z"
       }
     }
   }

From 5465aaf42216163ce886e92fd424f3287853d058 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Mon, 29 Nov 2021 12:16:36 -0500
Subject: [PATCH 0596/2157] manifests: move crun to user-experience

There is desire to include `crun` as part of RHCOS so that early
testing of OCP workloads using `crun` can be validated [1]

This moves `crun` out of an FCOS only manifest into a manifest that is
shared with RHCOS.

[1] openshift/release#23609
---
 manifests/fedora-coreos-base.yaml | 2 --
 manifests/user-experience.yaml    | 1 +
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 433441c20f..a6049725ec 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -89,8 +89,6 @@ postprocess:
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
 packages:
-  # Container tooling
-  - crun
   # Security
   - polkit
   # System setup
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 1874669071..93d961dc83 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -28,6 +28,7 @@ packages:
   # Remote Access
   - openssh-clients openssh-server
   # Container tooling
+  - crun
   - podman
   - runc
   - skopeo

From 3ba220dfccac78f7464205450f225009996ad8ca Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 30 Nov 2021 21:27:46 +0000
Subject: [PATCH 0597/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/619/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c68ebba59d..6a0d5875c5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.4-201.fc35.aarch64"
+      "evra": "5.15.5-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.4-201.fc35.aarch64"
+      "evra": "5.15.5-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.4-201.fc35.aarch64"
+      "evra": "5.15.5-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-29T20:56:32Z",
+    "generated": "2021-11-30T20:54:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-28T21:26:24Z"
+        "generated": "2021-11-29T21:37:06Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-29T02:16:31Z"
+        "generated": "2021-11-30T01:03:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bacda74b8b..ded7861e24 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.4-201.fc35.x86_64"
+      "evra": "5.15.5-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.4-201.fc35.x86_64"
+      "evra": "5.15.5-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.4-201.fc35.x86_64"
+      "evra": "5.15.5-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-29T20:56:41Z",
+    "generated": "2021-11-30T20:54:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-28T21:26:50Z"
+        "generated": "2021-11-29T21:38:08Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-29T02:16:45Z"
+        "generated": "2021-11-30T01:03:28Z"
       }
     }
   }

From 3014b8c5ba9fa438a3849cd8fb8c9693eb045e3e Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Tue, 30 Nov 2021 17:34:25 -0500
Subject: [PATCH 0598/2157] lockfiles: fast-track Ignition v2.13.0-1

---
 manifest-lock.overrides.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..57eaa8d514 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,10 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ignition:
+    evr: 2.13.0-1.fc35 
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ff46bd8ea
+      reason: https://github.com/coreos/ignition/issues/1287
+      type: fast-track

From 11a11bcd530a4e67b778dcaccca3cbe189715b00 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 30 Nov 2021 16:13:25 -0500
Subject: [PATCH 0599/2157] ignition-ostree-uuid-root.service: add stricter
 ordering

In the multipath case, we're mounting
`/dev/disk/by-label/dm-mpath-root`, not `by-label/root`.

Also order against `sysroot.mount` because in the general case, there's
actually nothing that prevents the restamping to run at the same time as
the mount AFAICT if the `root` karg points to some other device path we
didn't predict.

See: https://github.com/openshift/os/issues/683 (which hopefully this
fixes).
---
 .../40ignition-ostree/ignition-ostree-uuid-root.service      | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index 7164aaf5c3..d4b78e3e0d 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -1,10 +1,10 @@
 [Unit]
 Description=Ignition OSTree: Regenerate Filesystem UUID (root)
-# These conditions match mount-firstboot-sysroot.service
+# These conditions match ignition-ostree-mount-firstboot-sysroot.service
 DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
-Before=initrd-root-fs.target
+Before=sysroot.mount initrd-root-fs.target
 After=ignition-disks.service
 # If we've reprovisioned the rootfs, then there's no need to restamp
 ConditionPathExists=!/run/ignition-ostree-transposefs
@@ -12,6 +12,7 @@ ConditionPathExists=!/run/ignition-ostree-transposefs
 After=dev-disk-by\x2dlabel-root.device
 # Avoid racing with fsck
 Before=systemd-fsck@dev-disk-by\x2dlabel-root.service
+Before=systemd-fsck@dev-disk-by\x2dlabel-dm-mpath-root.service
 
 # Note we don't have a Requires: /dev/disk/by-label/root here like
 # the -subsequent service does because ignition-disks may have

From af99f8f4b0bfbe5ca02df7ba3731417a71e91ef1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Dec 2021 21:38:03 +0000
Subject: [PATCH 0600/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/620/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6a0d5875c5..4436689b5c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.170.0-2.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.7-1.fc35.aarch64"
+      "evra": "1.5.8-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-1.fc35.aarch64"
@@ -400,7 +400,7 @@
       "evra": "3.23-5.fc35.aarch64"
     },
     "ignition": {
-      "evra": "2.12.0-3.fc35.aarch64"
+      "evra": "2.13.0-1.fc35.aarch64"
     },
     "inih": {
       "evra": "49-4.fc35.aarch64"
@@ -628,7 +628,7 @@
       "evra": "9-12.fc35.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.5.2-2.fc35.aarch64"
+      "evra": "1.6.0-1.fc35.aarch64"
     },
     "libmnl": {
       "evra": "1.0.4-14.fc35.aarch64"
@@ -847,7 +847,7 @@
       "evra": "4.2-rc2.fc35.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.10-1.fc35.aarch64"
+      "evra": "20.10.11-1.fc35.aarch64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.aarch64"
@@ -901,13 +901,13 @@
       "evra": "2.4.59-3.fc35.aarch64"
     },
     "openssh": {
-      "evra": "8.7p1-2.fc35.aarch64"
+      "evra": "8.7p1-3.fc35.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.7p1-2.fc35.aarch64"
+      "evra": "8.7p1-3.fc35.aarch64"
     },
     "openssh-server": {
-      "evra": "8.7p1-2.fc35.aarch64"
+      "evra": "8.7p1-3.fc35.aarch64"
     },
     "openssl": {
       "evra": "1:1.1.1l-2.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-30T20:54:09Z",
+    "generated": "2021-12-01T20:53:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-29T21:37:06Z"
+        "generated": "2021-11-30T23:36:10Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-30T01:03:05Z"
+        "generated": "2021-12-01T01:05:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ded7861e24..31e0ca7a80 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.170.0-2.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.7-1.fc35.x86_64"
+      "evra": "1.5.8-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-1.fc35.x86_64"
@@ -406,7 +406,7 @@
       "evra": "3.23-5.fc35.x86_64"
     },
     "ignition": {
-      "evra": "2.12.0-3.fc35.x86_64"
+      "evra": "2.13.0-1.fc35.x86_64"
     },
     "inih": {
       "evra": "49-4.fc35.x86_64"
@@ -634,7 +634,7 @@
       "evra": "9-12.fc35.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.5.2-2.fc35.x86_64"
+      "evra": "1.6.0-1.fc35.x86_64"
     },
     "libmnl": {
       "evra": "1.0.4-14.fc35.x86_64"
@@ -859,7 +859,7 @@
       "evra": "2:2.1-47.fc35.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.10-1.fc35.x86_64"
+      "evra": "20.10.11-1.fc35.x86_64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.x86_64"
@@ -913,13 +913,13 @@
       "evra": "2.4.59-3.fc35.x86_64"
     },
     "openssh": {
-      "evra": "8.7p1-2.fc35.x86_64"
+      "evra": "8.7p1-3.fc35.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.7p1-2.fc35.x86_64"
+      "evra": "8.7p1-3.fc35.x86_64"
     },
     "openssh-server": {
-      "evra": "8.7p1-2.fc35.x86_64"
+      "evra": "8.7p1-3.fc35.x86_64"
     },
     "openssl": {
       "evra": "1:1.1.1l-2.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-11-30T20:54:09Z",
+    "generated": "2021-12-01T20:53:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-29T21:38:08Z"
+        "generated": "2021-11-30T23:36:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-11-30T01:03:28Z"
+        "generated": "2021-12-01T01:05:21Z"
       }
     }
   }

From 71a158c6cef4a1a7f5db9c3271b6a53cf81bf18a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 2 Dec 2021 21:22:42 +0000
Subject: [PATCH 0601/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/621/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4436689b5c..c228d2f9ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.14.2-1.fc35.aarch64"
+      "evra": "5.15.1-1.fc35.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.aarch64"
@@ -175,7 +175,7 @@
       "evra": "2.4.2-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-10.fc35.aarch64"
+      "evra": "1:2.3.3op2-11.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-01T20:53:43Z",
+    "generated": "2021-12-02T20:53:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-30T23:36:10Z"
+        "generated": "2021-12-01T21:40:19Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-01T01:05:06Z"
+        "generated": "2021-12-02T01:03:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 31e0ca7a80..26c9bfc960 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.14.2-1.fc35.x86_64"
+      "evra": "5.15.1-1.fc35.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.x86_64"
@@ -175,7 +175,7 @@
       "evra": "2.4.2-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-10.fc35.x86_64"
+      "evra": "1:2.3.3op2-11.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-01T20:53:42Z",
+    "generated": "2021-12-02T20:53:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-11-30T23:36:40Z"
+        "generated": "2021-12-01T21:41:16Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-01T01:05:21Z"
+        "generated": "2021-12-02T01:03:56Z"
       }
     }
   }

From 0f203a32aae70ad3bde3fcfcb97ea27e6c0cdd7d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 19 Oct 2021 10:41:51 -0400
Subject: [PATCH 0602/2157] Add Kubernetes e2e node tests

This patch adds new external tests which run the Kubernetes e2e node
tests. This will ensure that we don't inadvertedly break Kubernetes,
which is now itself tested on Fedora CoreOS.

The approach taken here is to model it as an external test. This makes
it easy for anyone to run it locally, which is important for
maintenance.

Note that these tests do *not* run by default: for now, I don't think we
should run these tests on every PR. They take a lot of resources and
time and it's not clear yet how flaky they'll be. Instead, we'll start
off by running them in the pipeline as a follow-on job. But as a next
step, I'd like to enable opt-in PR testing as well as testing as part of
the lockfile bumper.

One thing worth noting that makes it very different from a regular
external test is that the test binaries are built in the VM itself. This
is because (1) we may need newer golang than we have available in cosa,
and (2) cloning and building Kubernetes multiple times (per tested
release) is heavy and takes enough space that it's nicer to have it be
lifecycled to the VM itself, where it can be resource-constrained and
e.g. parallelized easily. For faster iteration, one can always just do
the same thing the test script does to build on the host and point the
k8s test harness at a pre-provisioned host.

Requires: https://github.com/coreos/coreos-assembler/pull/2505
Requires: https://github.com/kubernetes/kubernetes/pull/105764
---
 tests/kola/k8s/node-e2e/config.bu     | 14 ++++++++++
 tests/kola/k8s/node-e2e/data/node-e2e | 39 +++++++++++++++++++++++++++
 tests/kola/k8s/node-e2e/master        |  7 +++++
 3 files changed, 60 insertions(+)
 create mode 100644 tests/kola/k8s/node-e2e/config.bu
 create mode 100755 tests/kola/k8s/node-e2e/data/node-e2e
 create mode 100755 tests/kola/k8s/node-e2e/master

diff --git a/tests/kola/k8s/node-e2e/config.bu b/tests/kola/k8s/node-e2e/config.bu
new file mode 100644
index 0000000000..8e9cfa60d7
--- /dev/null
+++ b/tests/kola/k8s/node-e2e/config.bu
@@ -0,0 +1,14 @@
+variant: fcos
+version: 1.3.0
+ignition:
+  config:
+    merge:
+      # XXX: what this config does should probably be folded into the test
+      # directly instead so that the release-specific cri-o is used
+      - source: https://raw.githubusercontent.com/kubernetes/test-infra/master/jobs/e2e_node/crio/crio_cgrpv2.ign
+storage:
+  filesystems:
+    - device: /dev/disk/by-id/virtio-disk1
+      format: xfs
+      path: /var
+      with_mount_unit: true
diff --git a/tests/kola/k8s/node-e2e/data/node-e2e b/tests/kola/k8s/node-e2e/data/node-e2e
new file mode 100755
index 0000000000..4f38d299d1
--- /dev/null
+++ b/tests/kola/k8s/node-e2e/data/node-e2e
@@ -0,0 +1,39 @@
+#!/bin/bash
+set -xeuo pipefail
+
+SELF=$(realpath "$0")
+IMAGE=quay.io/projectquay/golang:1.17
+
+branch=$1; shift
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if [ -z "${container:-}" ]; then
+    mkdir -m 0600 ~/.ssh
+    ssh-keygen -N "" -t ed25519 -f /srv/kube
+    cat /srv/kube.pub >> ~/.ssh/authorized_keys
+    chmod 0600 ~/.ssh/*
+    exec podman run --net=host --rm -v /srv/kube:/srv/kube:z \
+        -v "${KOLA_EXT_DATA}:/srv/kola_ext_data:z" \
+        -v "${SELF}:/srv/self:z" "${IMAGE}" /srv/self "${branch}"
+    fatal "unreachable"
+fi
+
+# in container now
+dnf install -y rsync diffutils hostname
+git clone -b "${branch}" --depth 1 https://github.com/kubernetes/kubernetes
+make -C kubernetes test-e2e-node REMOTE=true REMOTE_MODE=ssh SSH_USER=root \
+    RUNTIME=remote CONTAINER_RUNTIME_ENDPOINT="unix:///var/run/crio/crio.sock" \
+    SSH_KEY=/srv/kube HOSTS=localhost FOCUS="\[NodeConformance\]" \
+    SSH_OPTIONS='-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' \
+    TEST_ARGS='--kubelet-flags="--cgroup-driver=systemd --cgroups-per-qos=true
+                                --cgroup-root=/ --non-masquerade-cidr=0.0.0.0/0
+                                --runtime-cgroups=/system.slice/crio.service
+                                --kubelet-cgroups=/system.slice/kubelet.service"'
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
new file mode 100755
index 0000000000..09fb0c2f24
--- /dev/null
+++ b/tests/kola/k8s/node-e2e/master
@@ -0,0 +1,7 @@
+#!/bin/bash
+set -xeuo pipefail
+# Just run on x86_64 for now. We'd need multi-arch images with go 1.17. We
+# could run on any platform, though need to replace `additionalDisks` by e.g.
+# `minDiskSpace` or something similar.
+# kola: {"minMemory": 4096, "timeoutMin": 45, "additionalDisks": ["15G"], "platforms": "qemu", "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
+exec "${KOLA_EXT_DATA}/node-e2e" "${KOLA_TEST_EXE}"

From a4d6eb7c507864d85c958c0021e0a004ea472f9c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 Dec 2021 22:14:53 +0000
Subject: [PATCH 0603/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/622/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c228d2f9ec..b5eb00c418 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.5-200.fc35.aarch64"
+      "evra": "5.15.6-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.5-200.fc35.aarch64"
+      "evra": "5.15.6-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.5-200.fc35.aarch64"
+      "evra": "5.15.6-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-02T20:53:19Z",
+    "generated": "2021-12-03T21:40:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-01T21:40:19Z"
+        "generated": "2021-12-02T21:24:37Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-02T01:03:41Z"
+        "generated": "2021-12-03T01:03:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 26c9bfc960..670fc1a198 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.5-200.fc35.x86_64"
+      "evra": "5.15.6-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.5-200.fc35.x86_64"
+      "evra": "5.15.6-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.5-200.fc35.x86_64"
+      "evra": "5.15.6-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-02T20:53:08Z",
+    "generated": "2021-12-03T21:39:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-01T21:41:16Z"
+        "generated": "2021-12-02T21:24:36Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-02T01:03:56Z"
+        "generated": "2021-12-03T01:03:45Z"
       }
     }
   }

From 472bfeb3b55b86920680d515c064231e78655c61 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Sat, 4 Dec 2021 10:23:14 -0500
Subject: [PATCH 0604/2157] tests/k8s: enable all platforms

There shouldn't be anything platform-specific about this test, and it's
opt-in anyway, so just drop the `qemu` constraint.

Motivated by wanting to run it in AWS instead to offload the cluster and
try to also test on aarch64.
---
 tests/kola/k8s/node-e2e/master | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index 09fb0c2f24..be04aad1da 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -3,5 +3,5 @@ set -xeuo pipefail
 # Just run on x86_64 for now. We'd need multi-arch images with go 1.17. We
 # could run on any platform, though need to replace `additionalDisks` by e.g.
 # `minDiskSpace` or something similar.
-# kola: {"minMemory": 4096, "timeoutMin": 45, "additionalDisks": ["15G"], "platforms": "qemu", "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
+# kola: {"minMemory": 4096, "timeoutMin": 45, "additionalDisks": ["15G"], "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
 exec "${KOLA_EXT_DATA}/node-e2e" "${KOLA_TEST_EXE}"

From 574652202f5f3cbc8bbde5c934bbaa94cc42361c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 4 Dec 2021 21:26:21 +0000
Subject: [PATCH 0605/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/623/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b5eb00c418..b136233ffc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1030,10 +1030,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.5-1.fc35.noarch"
+      "evra": "35.6-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.5-1.fc35.noarch"
+      "evra": "35.6-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1156,10 +1156,10 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.3642-2.fc35.noarch"
+      "evra": "2:8.2.3717-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3642-2.fc35.aarch64"
+      "evra": "2:8.2.3717-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-03T21:40:09Z",
+    "generated": "2021-12-04T20:53:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-02T21:24:37Z"
+        "generated": "2021-12-03T22:17:09Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-03T01:03:27Z"
+        "generated": "2021-12-04T01:05:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 670fc1a198..31c1818a2b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1042,10 +1042,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.5-1.fc35.noarch"
+      "evra": "35.6-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.5-1.fc35.noarch"
+      "evra": "35.6-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.3642-2.fc35.noarch"
+      "evra": "2:8.2.3717-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3642-2.fc35.x86_64"
+      "evra": "2:8.2.3717-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-03T21:39:58Z",
+    "generated": "2021-12-04T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-02T21:24:36Z"
+        "generated": "2021-12-03T22:17:46Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-03T01:03:45Z"
+        "generated": "2021-12-04T01:06:09Z"
       }
     }
   }

From 86e2bde857bcb573fef166faf38380a96209b095 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 5 Dec 2021 21:23:30 +0000
Subject: [PATCH 0606/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/624/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b136233ffc..51a4d3ef48 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.1-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-8.fc35.aarch64"
+      "evra": "2.34-10.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-8.fc35.aarch64"
+      "evra": "2.34-10.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-8.fc35.aarch64"
+      "evra": "2.34-10.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -1057,7 +1057,7 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.5.1-1.fc35.aarch64"
+      "evra": "1:1.5.2-1.fc35.aarch64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.aarch64"
@@ -1189,20 +1189,20 @@
       "evra": "1.2.11-30.fc35.aarch64"
     },
     "zram-generator": {
-      "evra": "1.0.1-3.fc35.aarch64"
+      "evra": "1.1.1-3.fc35.aarch64"
     }
   },
   "metadata": {
-    "generated": "2021-12-04T20:53:31Z",
+    "generated": "2021-12-05T20:53:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-03T22:17:09Z"
+        "generated": "2021-12-04T21:28:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-04T01:05:54Z"
+        "generated": "2021-12-05T01:02:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 31c1818a2b..3af12ee0df 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.1-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-8.fc35.x86_64"
+      "evra": "2.34-10.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-8.fc35.x86_64"
+      "evra": "2.34-10.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-8.fc35.x86_64"
+      "evra": "2.34-10.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -1069,7 +1069,7 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.5.1-1.fc35.x86_64"
+      "evra": "1:1.5.2-1.fc35.x86_64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.x86_64"
@@ -1201,20 +1201,20 @@
       "evra": "1.2.11-30.fc35.x86_64"
     },
     "zram-generator": {
-      "evra": "1.0.1-3.fc35.x86_64"
+      "evra": "1.1.1-3.fc35.x86_64"
     }
   },
   "metadata": {
-    "generated": "2021-12-04T20:53:23Z",
+    "generated": "2021-12-05T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-03T22:17:46Z"
+        "generated": "2021-12-04T21:28:32Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-04T01:06:09Z"
+        "generated": "2021-12-05T01:02:20Z"
       }
     }
   }

From 187afc952064000f3e89e50e09b6e08baaa1d258 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 6 Dec 2021 21:26:24 +0000
Subject: [PATCH 0607/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/625/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 51a4d3ef48..8921941fc5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -607,7 +607,7 @@
       "evra": "2.6.1-1.fc35.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.8-2.fc35.aarch64"
+      "evra": "0.1.9-1.fc35.aarch64"
     },
     "libjose": {
       "evra": "11-3.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-05T20:53:09Z",
+    "generated": "2021-12-06T20:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-04T21:28:13Z"
+        "generated": "2021-12-05T21:27:25Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-05T01:02:04Z"
+        "generated": "2021-12-06T00:59:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3af12ee0df..765d3dba53 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -613,7 +613,7 @@
       "evra": "2.6.1-1.fc35.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.8-2.fc35.x86_64"
+      "evra": "0.1.9-1.fc35.x86_64"
     },
     "libjose": {
       "evra": "11-3.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-05T20:52:56Z",
+    "generated": "2021-12-06T20:53:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-04T21:28:32Z"
+        "generated": "2021-12-05T21:27:23Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-05T01:02:20Z"
+        "generated": "2021-12-06T01:00:02Z"
       }
     }
   }

From 4b84dc6c14184624b2f62b4e69357784f735ed52 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Dec 2021 21:25:15 +0000
Subject: [PATCH 0608/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/626/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8921941fc5..d20037f564 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -574,13 +574,13 @@
       "evra": "1.4-5.fc35.aarch64"
     },
     "libgcc": {
-      "evra": "11.2.1-1.fc35.aarch64"
+      "evra": "11.2.1-7.fc35.aarch64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.aarch64"
     },
     "libgomp": {
-      "evra": "11.2.1-1.fc35.aarch64"
+      "evra": "11.2.1-7.fc35.aarch64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.aarch64"
@@ -745,7 +745,7 @@
       "evra": "2.6.1-1.fc35.aarch64"
     },
     "libstdc++": {
-      "evra": "11.2.1-1.fc35.aarch64"
+      "evra": "11.2.1-7.fc35.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-06T20:53:10Z",
+    "generated": "2021-12-07T20:53:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-05T21:27:25Z"
+        "generated": "2021-12-06T21:28:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-06T00:59:47Z"
+        "generated": "2021-12-07T01:51:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 765d3dba53..497d8a6918 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -580,13 +580,13 @@
       "evra": "1.4-5.fc35.x86_64"
     },
     "libgcc": {
-      "evra": "11.2.1-1.fc35.x86_64"
+      "evra": "11.2.1-7.fc35.x86_64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.x86_64"
     },
     "libgomp": {
-      "evra": "11.2.1-1.fc35.x86_64"
+      "evra": "11.2.1-7.fc35.x86_64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.x86_64"
@@ -754,7 +754,7 @@
       "evra": "2.6.1-1.fc35.x86_64"
     },
     "libstdc++": {
-      "evra": "11.2.1-1.fc35.x86_64"
+      "evra": "11.2.1-7.fc35.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-06T20:53:08Z",
+    "generated": "2021-12-07T20:53:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-05T21:27:23Z"
+        "generated": "2021-12-06T21:30:19Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-06T01:00:02Z"
+        "generated": "2021-12-07T01:51:30Z"
       }
     }
   }

From 0bf11977f5a45d41634cac361d463d8b88034e80 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 6 Dec 2021 16:50:23 -0500
Subject: [PATCH 0609/2157] tests/k8s: use `minDisk` instead of
 `additionalDisks`

The former is compatible with AWS while the latter is not. And it more
clearly represents our intent.
---
 tests/kola/k8s/node-e2e/config.bu | 6 ------
 tests/kola/k8s/node-e2e/master    | 6 ++----
 2 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/tests/kola/k8s/node-e2e/config.bu b/tests/kola/k8s/node-e2e/config.bu
index 8e9cfa60d7..653c7ad32e 100644
--- a/tests/kola/k8s/node-e2e/config.bu
+++ b/tests/kola/k8s/node-e2e/config.bu
@@ -6,9 +6,3 @@ ignition:
       # XXX: what this config does should probably be folded into the test
       # directly instead so that the release-specific cri-o is used
       - source: https://raw.githubusercontent.com/kubernetes/test-infra/master/jobs/e2e_node/crio/crio_cgrpv2.ign
-storage:
-  filesystems:
-    - device: /dev/disk/by-id/virtio-disk1
-      format: xfs
-      path: /var
-      with_mount_unit: true
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index be04aad1da..a87e7a1ad9 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -1,7 +1,5 @@
 #!/bin/bash
 set -xeuo pipefail
-# Just run on x86_64 for now. We'd need multi-arch images with go 1.17. We
-# could run on any platform, though need to replace `additionalDisks` by e.g.
-# `minDiskSpace` or something similar.
-# kola: {"minMemory": 4096, "timeoutMin": 45, "additionalDisks": ["15G"], "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
+# Just run on x86_64 for now. We'd need multi-arch images with go 1.17.
+# kola: {"minMemory": 4096, "timeoutMin": 45, "minDisk": 20, "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
 exec "${KOLA_EXT_DATA}/node-e2e" "${KOLA_TEST_EXE}"

From c4abcc30a00e4da0ab1153c6d31567cc36b01c44 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Dec 2021 06:19:08 +0000
Subject: [PATCH 0610/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 57eaa8d514..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ignition:
-    evr: 2.13.0-1.fc35 
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ff46bd8ea
-      reason: https://github.com/coreos/ignition/issues/1287
-      type: fast-track
+packages: {}

From 65bfaa176c084988261d3e8b74c73bc204dbfc3c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Dec 2021 21:29:41 +0000
Subject: [PATCH 0611/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/628/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d20037f564..98328a8bca 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -355,7 +355,7 @@
       "evra": "2.33.1-2.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.70.1-1.fc35.aarch64"
+      "evra": "2.70.2-1.fc35.aarch64"
     },
     "glibc": {
       "evra": "2.34-10.fc35.aarch64"
@@ -370,7 +370,7 @@
       "evra": "1:6.2.0-7.fc35.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.3-1.fc35.aarch64"
+      "evra": "2.3.3-2.fc35.aarch64"
     },
     "gnutls": {
       "evra": "3.7.2-2.fc35.aarch64"
@@ -799,7 +799,7 @@
       "evra": "2.9.12-6.fc35.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.3-1.fc35.aarch64"
+      "evra": "0.3.6-1.fc35.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-6.fc35.aarch64"
@@ -1156,10 +1156,10 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.3717-1.fc35.noarch"
+      "evra": "2:8.2.3755-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3717-1.fc35.aarch64"
+      "evra": "2:8.2.3755-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-07T20:53:54Z",
+    "generated": "2021-12-09T20:54:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-06T21:28:26Z"
+        "generated": "2021-12-07T21:27:59Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-07T01:51:12Z"
+        "generated": "2021-12-09T01:03:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 497d8a6918..bb5d2b9798 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,7 +355,7 @@
       "evra": "2.33.1-2.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.70.1-1.fc35.x86_64"
+      "evra": "2.70.2-1.fc35.x86_64"
     },
     "glibc": {
       "evra": "2.34-10.fc35.x86_64"
@@ -370,7 +370,7 @@
       "evra": "1:6.2.0-7.fc35.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.3-1.fc35.x86_64"
+      "evra": "2.3.3-2.fc35.x86_64"
     },
     "gnutls": {
       "evra": "3.7.2-2.fc35.x86_64"
@@ -808,7 +808,7 @@
       "evra": "2.9.12-6.fc35.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.3-1.fc35.x86_64"
+      "evra": "0.3.6-1.fc35.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-6.fc35.x86_64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.3717-1.fc35.noarch"
+      "evra": "2:8.2.3755-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3717-1.fc35.x86_64"
+      "evra": "2:8.2.3755-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-07T20:53:46Z",
+    "generated": "2021-12-09T20:53:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-06T21:30:19Z"
+        "generated": "2021-12-07T21:28:45Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-07T01:51:30Z"
+        "generated": "2021-12-09T01:03:45Z"
       }
     }
   }

From d0ad4c8d78b883b6324436d0eeb7b4597e0a4605 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 29 Nov 2021 17:03:15 -0500
Subject: [PATCH 0612/2157] chrony: use /dev/ptp_hyperv instead of /dev/ptp0

From the last paragraph in:

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync#check-for-ptp-clock-source

> In Linux VMs with Accelerated Networking enabled, you may see multiple
> PTP devices listed because the Mellanox mlx5 driver also creates a
> /dev/ptp device. Because the initialization order can be different
> each time Linux boots, the PTP device corresponding to the Azure host
> might be /dev/ptp0 or it might be /dev/ptp1, which makes it difficult
> to configure chronyd with the correct clock source. To solve this
> problem, the most recent Linux images have a udev rule that creates
> the symlink /dev/ptp_hyperv to whichever /dev/ptp entry corresponds to
> the Azure host. Chrony should be configured to use this symlink
> instead of /dev/ptp0 or /dev/ptp1.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1031
---
 .../usr/lib/systemd/system-generators/coreos-platform-chrony  | 4 +++-
 tests/kola/chrony/coreos-platform-chrony-generator            | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index 958c6e1732..4416f26f9f 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -66,8 +66,10 @@ EOF
 ) > "${confpath}"
 case "${platform}" in
     azure)
+        # the /dev/ptp_hyperv symlink is created by:
+        # https://github.com/systemd/systemd/blob/e67a5c14f0345f5ac456cfa109324dd9e70114d3/rules.d/50-udev-default.rules.in#L106
         (echo '# See also https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync'
-         echo 'refclock PHC /dev/ptp0 poll 3 dpoll -2 offset 0'
+         echo 'refclock PHC /dev/ptp_hyperv poll 3 dpoll -2 offset 0'
          echo 'leapsectz right/UTC'
         ) >> "${confpath}" ;;
     aws)
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index cbc810910a..ea0bc3dee3 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -7,7 +7,7 @@ set -euo pipefail
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in
     aws) chronyc sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
-    azure) chronyc sources |grep 'PHC0'; echo "ok chrony azure" ;;
+    azure) chronyc sources |grep 'PHC'; echo "ok chrony azure" ;;
     gcp) chronyc sources | grep metadata.google.internal; echo "ok chrony gcp" ;;
     *) echo "unhandled platform ${platform} ?"; exit 1 ;;
 esac

From 7fd9dbfe5d95fcd18abe147f32f538caa51ddfdc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 10 Dec 2021 21:32:52 +0000
Subject: [PATCH 0613/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/629/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 98328a8bca..3c8a885bdd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -589,7 +589,7 @@
       "evra": "237-1.fc35.aarch64"
     },
     "libgusb": {
-      "evra": "0.3.8-1.fc35.aarch64"
+      "evra": "0.3.9-1.fc35.aarch64"
     },
     "libibverbs": {
       "evra": "38.0-1.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-09T20:54:05Z",
+    "generated": "2021-12-10T20:53:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-07T21:27:59Z"
+        "generated": "2021-12-09T21:31:51Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-09T01:03:29Z"
+        "generated": "2021-12-10T01:03:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bb5d2b9798..daeface4fb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -595,7 +595,7 @@
       "evra": "237-1.fc35.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.8-1.fc35.x86_64"
+      "evra": "0.3.9-1.fc35.x86_64"
     },
     "libibverbs": {
       "evra": "38.0-1.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-09T20:53:51Z",
+    "generated": "2021-12-10T20:53:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-07T21:28:45Z"
+        "generated": "2021-12-09T21:31:38Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-09T01:03:45Z"
+        "generated": "2021-12-10T01:03:22Z"
       }
     }
   }

From 08ac30f6e63fd44827eaa17486058bb73b61140f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Dec 2021 21:26:47 +0000
Subject: [PATCH 0614/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/630/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 38 +++++++++++++++++++-------------------
 2 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3c8a885bdd..04fc44a480 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.2-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-10.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-10.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-10.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -382,16 +382,16 @@
       "evra": "3.6-4.fc35.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-8.fc35.noarch"
+      "evra": "1:2.06-10.fc35.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-8.fc35.aarch64"
+      "evra": "1:2.06-10.fc35.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-8.fc35.aarch64"
+      "evra": "1:2.06-10.fc35.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-8.fc35.aarch64"
+      "evra": "1:2.06-10.fc35.aarch64"
     },
     "gzip": {
       "evra": "1.10-5.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.2-3.fc35.aarch64"
+      "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.19-3.fc35.aarch64"
@@ -790,7 +790,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.2-3.fc35.aarch64"
+      "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.aarch64"
@@ -919,10 +919,10 @@
       "evra": "1.77-8.fc35.aarch64"
     },
     "ostree": {
-      "evra": "2021.6-1.fc35.aarch64"
+      "evra": "2021.6-3.fc35.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.6-1.fc35.aarch64"
+      "evra": "2021.6-3.fc35.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.aarch64"
@@ -1018,13 +1018,13 @@
       "evra": "2:1.0.2-2.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.2-3.fc35.aarch64"
+      "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.2-3.fc35.noarch"
+      "evra": "2:4.15.3-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.2-3.fc35.aarch64"
+      "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-10T20:53:28Z",
+    "generated": "2021-12-13T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-09T21:31:51Z"
+        "generated": "2021-12-10T21:34:40Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-10T01:03:06Z"
+        "generated": "2021-12-13T17:04:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index daeface4fb..a375afaa9f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.2-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-10.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-10.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-10.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -382,22 +382,22 @@
       "evra": "3.6-4.fc35.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-8.fc35.noarch"
+      "evra": "1:2.06-10.fc35.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-8.fc35.x86_64"
+      "evra": "1:2.06-10.fc35.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-8.fc35.x86_64"
+      "evra": "1:2.06-10.fc35.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-8.fc35.noarch"
+      "evra": "1:2.06-10.fc35.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-8.fc35.x86_64"
+      "evra": "1:2.06-10.fc35.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-8.fc35.x86_64"
+      "evra": "1:2.06-10.fc35.x86_64"
     },
     "gzip": {
       "evra": "1.10-5.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.2-3.fc35.x86_64"
+      "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.2-3.fc35.x86_64"
+      "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.26-4.fc35.x86_64"
@@ -931,10 +931,10 @@
       "evra": "1.77-8.fc35.x86_64"
     },
     "ostree": {
-      "evra": "2021.6-1.fc35.x86_64"
+      "evra": "2021.6-3.fc35.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.6-1.fc35.x86_64"
+      "evra": "2021.6-3.fc35.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.x86_64"
@@ -1030,13 +1030,13 @@
       "evra": "2:1.0.2-2.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.2-3.fc35.x86_64"
+      "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.2-3.fc35.noarch"
+      "evra": "2:4.15.3-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.2-3.fc35.x86_64"
+      "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-10T20:53:19Z",
+    "generated": "2021-12-13T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-09T21:31:38Z"
+        "generated": "2021-12-10T21:35:15Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-10T01:03:22Z"
+        "generated": "2021-12-13T17:04:26Z"
       }
     }
   }

From 329e432f9280644cfa49d5fa05a16cb60350657f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 15:22:25 -0500
Subject: [PATCH 0615/2157] coreos-copy-firstboot-network: drop unused variable

Fixes: 277f8416afd2 ("coreos-copy-firstboot-network.sh: Place stamp file if copied")
---
 .../modules.d/35coreos-network/coreos-copy-firstboot-network.sh  | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index 61c486c89c..34f582de50 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -9,7 +9,6 @@ bootdev=/dev/disk/by-label/boot
 firstboot_network_dir_basename="coreos-firstboot-network"
 initramfs_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
 initramfs_network_dir="/run/NetworkManager/system-connections/"
-realroot_firstboot_network_dir="/boot/${firstboot_network_dir_basename}"
 
 # Mount /boot. Note that we mount /boot but we don't unmount boot because we
 # are run in a systemd unit with MountFlags=slave so it is unmounted for us.

From 66f0120d69a11f2cd9122aa2ec6a8b55fe3d2bae Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 15:24:10 -0500
Subject: [PATCH 0616/2157] coreos-copy-firstboot-network: rename variable

Rename `initramfs_firstboot_network_dir` to `boot_firstboot_network_dir`
as prep for supporting another firstboot network dir.
---
 .../35coreos-network/coreos-copy-firstboot-network.sh  | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index 34f582de50..a85f8315f2 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -7,7 +7,7 @@ bootmnt=/mnt/boot_partition
 mkdir -p ${bootmnt}
 bootdev=/dev/disk/by-label/boot
 firstboot_network_dir_basename="coreos-firstboot-network"
-initramfs_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
+boot_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
 initramfs_network_dir="/run/NetworkManager/system-connections/"
 
 # Mount /boot. Note that we mount /boot but we don't unmount boot because we
@@ -16,15 +16,15 @@ initramfs_network_dir="/run/NetworkManager/system-connections/"
 # running alongside other code that also has it mounted ro
 mount -o ro ${bootdev} ${bootmnt}
 
-if [ -n "$(ls -A ${initramfs_firstboot_network_dir} 2>/dev/null)" ]; then
+if [ -n "$(ls -A ${boot_firstboot_network_dir} 2>/dev/null)" ]; then
     # Clear out any files that may have already been generated from
     # kargs by nm-initrd-generator
     rm -f ${initramfs_network_dir}/*
     # Copy files that were placed into boot (most likely by coreos-installer)
     # to the appropriate location for NetworkManager to use the configuration.
-    echo "info: copying files from ${initramfs_firstboot_network_dir} to ${initramfs_network_dir}"
+    echo "info: copying files from ${boot_firstboot_network_dir} to ${initramfs_network_dir}"
     mkdir -p ${initramfs_network_dir}
-    cp -v ${initramfs_firstboot_network_dir}/* ${initramfs_network_dir}/
+    cp -v ${boot_firstboot_network_dir}/* ${initramfs_network_dir}/
 else
-    echo "info: no files to copy from ${initramfs_firstboot_network_dir}. skipping"
+    echo "info: no files to copy from ${boot_firstboot_network_dir}. skipping"
 fi

From 1bc55c4cab3acf7fb1dbacd723ccf0be814606ee Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 15:29:23 -0500
Subject: [PATCH 0617/2157] coreos-copy-firstboot-network: factor out keyfile
 copying

Prep for adding another callsite.
---
 .../coreos-copy-firstboot-network.sh             | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index a85f8315f2..be97aa9172 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -16,15 +16,23 @@ initramfs_network_dir="/run/NetworkManager/system-connections/"
 # running alongside other code that also has it mounted ro
 mount -o ro ${bootdev} ${bootmnt}
 
-if [ -n "$(ls -A ${boot_firstboot_network_dir} 2>/dev/null)" ]; then
+copy_firstboot_network() {
+    local src=$1; shift
+
     # Clear out any files that may have already been generated from
     # kargs by nm-initrd-generator
     rm -f ${initramfs_network_dir}/*
-    # Copy files that were placed into boot (most likely by coreos-installer)
+    # Copy files that were placed into the source
     # to the appropriate location for NetworkManager to use the configuration.
-    echo "info: copying files from ${boot_firstboot_network_dir} to ${initramfs_network_dir}"
+    echo "info: copying files from ${src} to ${initramfs_network_dir}"
     mkdir -p ${initramfs_network_dir}
-    cp -v ${boot_firstboot_network_dir}/* ${initramfs_network_dir}/
+    cp -v ${src}/* ${initramfs_network_dir}/
+}
+
+if [ -n "$(ls -A ${boot_firstboot_network_dir} 2>/dev/null)" ]; then
+    # Likely placed there by coreos-installer, see:
+    # https://github.com/coreos/coreos-installer/pull/212
+    copy_firstboot_network "${boot_firstboot_network_dir}"
 else
     echo "info: no files to copy from ${boot_firstboot_network_dir}. skipping"
 fi

From dfd8fd76308a620dc8d799119dc703be0f5bf2dd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 16:35:19 -0500
Subject: [PATCH 0618/2157] coreos-copy-firstboot-network: drop redundant
 Requires/After

We already run after `coreos-gpt-setup.service` which has those same
requirements. It was good to be explicit and specify it again, but in
the future this unit will also support running in live images, where we
can't require `/dev/disk/by-label/boot` to exist.
---
 .../35coreos-network/coreos-copy-firstboot-network.service     | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 7dfbc59c8a..f189a47531 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -37,9 +37,6 @@ After=dracut-cmdline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service
-# Since we are mounting /boot/, require the device first
-Requires=dev-disk-by\x2dlabel-boot.device
-After=dev-disk-by\x2dlabel-boot.device
 # And since the boot device may be on multipath; optionally wait for it to
 # appear via the dynamic target.
 After=coreos-multipath-wait.target

From d7031787f9615e5b411392b583c5ecc21d22bba1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 16:36:33 -0500
Subject: [PATCH 0619/2157] coreos-copy-firstboot-network: mkdir just before
 mount

That way, the script prelude purely consists of variable declarations.
---
 .../modules.d/35coreos-network/coreos-copy-firstboot-network.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index be97aa9172..f44da1db99 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -4,7 +4,6 @@ set -euo pipefail
 # For a description of how this is used see coreos-copy-firstboot-network.service
 
 bootmnt=/mnt/boot_partition
-mkdir -p ${bootmnt}
 bootdev=/dev/disk/by-label/boot
 firstboot_network_dir_basename="coreos-firstboot-network"
 boot_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
@@ -14,6 +13,7 @@ initramfs_network_dir="/run/NetworkManager/system-connections/"
 # are run in a systemd unit with MountFlags=slave so it is unmounted for us.
 # Mount as read-only since we don't strictly need write access and we may be
 # running alongside other code that also has it mounted ro
+mkdir -p ${bootmnt}
 mount -o ro ${bootdev} ${bootmnt}
 
 copy_firstboot_network() {

From 249f4ce6241899855ea8ee0973715dd5831a8011 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 16:37:21 -0500
Subject: [PATCH 0620/2157] coreos-copy-firstboot-network: enable in live
 images

Mostly consists of swapping out `ignition-diskful.target` for
`ignition-complete.target` and making the boot partition logic
conditional on `! is-live-image`.

Prep for supporting an alternate source directory in the live case.
---
 .../coreos-copy-firstboot-network.service     |  2 +-
 .../coreos-copy-firstboot-network.sh          | 28 ++++++++++---------
 .../35coreos-network/module-setup.sh          |  4 +--
 3 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index f189a47531..08f5378897 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -29,7 +29,7 @@
 Description=Copy CoreOS Firstboot Networking Config
 ConditionPathExists=/usr/lib/initrd-release
 DefaultDependencies=false
-Before=ignition-diskful.target
+Before=ignition-complete.target
 Before=nm-initrd.service
 # compat: remove when everyone is on dracut 054+
 Before=dracut-initqueue.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index f44da1db99..31a6fd8ef9 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -9,13 +9,6 @@ firstboot_network_dir_basename="coreos-firstboot-network"
 boot_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
 initramfs_network_dir="/run/NetworkManager/system-connections/"
 
-# Mount /boot. Note that we mount /boot but we don't unmount boot because we
-# are run in a systemd unit with MountFlags=slave so it is unmounted for us.
-# Mount as read-only since we don't strictly need write access and we may be
-# running alongside other code that also has it mounted ro
-mkdir -p ${bootmnt}
-mount -o ro ${bootdev} ${bootmnt}
-
 copy_firstboot_network() {
     local src=$1; shift
 
@@ -29,10 +22,19 @@ copy_firstboot_network() {
     cp -v ${src}/* ${initramfs_network_dir}/
 }
 
-if [ -n "$(ls -A ${boot_firstboot_network_dir} 2>/dev/null)" ]; then
-    # Likely placed there by coreos-installer, see:
-    # https://github.com/coreos/coreos-installer/pull/212
-    copy_firstboot_network "${boot_firstboot_network_dir}"
-else
-    echo "info: no files to copy from ${boot_firstboot_network_dir}. skipping"
+if ! is-live-image; then
+    # Mount /boot. Note that we mount /boot but we don't unmount boot because we
+    # are run in a systemd unit with MountFlags=slave so it is unmounted for us.
+    # Mount as read-only since we don't strictly need write access and we may be
+    # running alongside other code that also has it mounted ro
+    mkdir -p ${bootmnt}
+    mount -o ro ${bootdev} ${bootmnt}
+
+    if [ -n "$(ls -A ${boot_firstboot_network_dir} 2>/dev/null)" ]; then
+        # Likely placed there by coreos-installer, see:
+        # https://github.com/coreos/coreos-installer/pull/212
+        copy_firstboot_network "${boot_firstboot_network_dir}"
+    else
+        echo "info: no files to copy from ${boot_firstboot_network_dir}. skipping"
+    fi
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
index 7c910b1b74..0cf3a1a464 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
@@ -15,10 +15,8 @@ install() {
 
     inst_simple "$moddir/coreos-copy-firstboot-network.sh" \
         "/usr/sbin/coreos-copy-firstboot-network"
-    # Only run this when ignition runs and only when the system
-    # has disks. ignition-diskful.target should suffice.
     install_and_enable_unit "coreos-copy-firstboot-network.service" \
-        "ignition-diskful.target"
+        "ignition-complete.target"
 
     # Dropin with firstboot network configuration kargs, applied via
     # Afterburn.

From 3edd2f28895d9fcd918d174d23b6b5ac2c05bb14 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Dec 2021 16:39:05 -0500
Subject: [PATCH 0621/2157] coreos-copy-firstboot-network: support
 /etc/coreos-firstboot-network

This adds support for copying NetworkManager keyfiles from
`/etc/coreos-firstboot-network`. It's similar in functionality to the
existing support for `/boot/coreos-firstboot-network`, but is intended
for the live path (ISO or PXE boot) where there is no boot partition.

Users won't interact directly with this; instead, it's expected that
`coreos-installer` will provide high-level commands to customize the ISO
or PXE artifacts to embed keyfiles via the existing layered initrd
mechanisms.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/841
---
 .../coreos-copy-firstboot-network.service       | 17 ++++++++++++-----
 .../coreos-copy-firstboot-network.sh            | 11 ++++++++++-
 2 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index 08f5378897..a1dd64b1bb 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -1,12 +1,17 @@
-# This unit will run early in boot and detect if the user copied
-# in firstboot networking config files into the installed system
-# (most likely by using `coreos-installer install --copy-network`).
+# This unit will run early in boot and detect if:
+# - In the diskful case, the user copied in firstboot networking config files
+#   into `/boot` (most likely by using `coreos-installer install
+#   --copy-network`).
+# - In the live case, the user provided firstboot networking config files in
+#   `/etc` (most likely by using `coreos-installer iso network embed`).
+#
 # Since this unit is modifying network configuration there are some
 # dependencies that we have:
 #
-# - Need to look for networking configuration on the /boot partition
+# - In the diskful case, we need to look for networking configuration on the
+#   /boot partition
 #     - i.e. after /dev/disk/by-label/boot is available
-#     - and after the ignition-dracut GPT generator (see below)
+#     - which is implied by running after coreos-gpt-setup (see below)
 # - Need to run before networking is brought up.
 #     - This is done in nm-initrd.service [1]
 #     - i.e. Before=nm-initrd.service
@@ -29,6 +34,8 @@
 Description=Copy CoreOS Firstboot Networking Config
 ConditionPathExists=/usr/lib/initrd-release
 DefaultDependencies=false
+# We're pulled in by ignition-complete.target; as good practice, add a matching
+# Before to be explicit about it gating on this unit passing.
 Before=ignition-complete.target
 Before=nm-initrd.service
 # compat: remove when everyone is on dracut 054+
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
index 31a6fd8ef9..51ea2830cd 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.sh
@@ -7,6 +7,7 @@ bootmnt=/mnt/boot_partition
 bootdev=/dev/disk/by-label/boot
 firstboot_network_dir_basename="coreos-firstboot-network"
 boot_firstboot_network_dir="${bootmnt}/${firstboot_network_dir_basename}"
+etc_firstboot_network_dir="/etc/${firstboot_network_dir_basename}"
 initramfs_network_dir="/run/NetworkManager/system-connections/"
 
 copy_firstboot_network() {
@@ -35,6 +36,14 @@ if ! is-live-image; then
         # https://github.com/coreos/coreos-installer/pull/212
         copy_firstboot_network "${boot_firstboot_network_dir}"
     else
-        echo "info: no files to copy from ${boot_firstboot_network_dir}. skipping"
+        echo "info: no files to copy from ${boot_firstboot_network_dir}; skipping"
+    fi
+else
+    if [ -n "$(ls -A ${etc_firstboot_network_dir} 2>/dev/null)" ]; then
+        # Also placed there by coreos-installer but in a different flow, see:
+        # https://github.com/coreos/coreos-installer/pull/713
+        copy_firstboot_network "${etc_firstboot_network_dir}"
+    else
+        echo "info: no files to copy from ${etc_firstboot_network_dir}; skipping"
     fi
 fi

From 752562a30e8f8b25ec4a74618ef98d0dc00dfe97 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Tue, 14 Dec 2021 13:30:24 -0500
Subject: [PATCH 0622/2157] manifests: add afterburn-dracut

The Fedora afterburn source package currently outputs an afterburn
and afterburn-dracut subpackage. In the process of unifying spec files
across Fedora/RHEL/C9S, we'd like to do the same for RHCOS. Before
splitting, we need to make sure that RHCOS won't lose the dracut bits.
So lower afterburn-dracut to a shared manifest.

An alternative is to have the afterburn package pull in afterburn-dracut
which will avoid any changes for RHCOS, but in theory the afterburn subpackage
could be useful without the dracut bits.
---
 manifests/fedora-coreos-base.yaml   | 2 --
 manifests/system-configuration.yaml | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index a6049725ec..e09cf94d1b 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -91,8 +91,6 @@ postprocess:
 packages:
   # Security
   - polkit
-  # System setup
-  - afterburn-dracut
   # SSH
   - ssh-key-dir
   # Containers
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index 5b4bb68795..73b98da76e 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -4,7 +4,7 @@
 
 packages:
   # Configuring SSH keys, cloud provider check-in, etc
-  - afterburn
+  - afterburn afterburn-dracut
   # NTP support
   - chrony
   # Installing CoreOS itself

From 7625231a33ffce40e0dbe3f26132e4babda3ab66 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Dec 2021 21:34:11 +0000
Subject: [PATCH 0623/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/632/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 04fc44a480..e2d0385370 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.6-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.6-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.6-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-13T20:53:11Z",
+    "generated": "2021-12-15T20:54:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-10T21:34:40Z"
+        "generated": "2021-12-13T22:40:47Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-13T17:04:09Z"
+        "generated": "2021-12-15T01:54:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a375afaa9f..1db56ad237 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.6-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.6-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.6-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-13T20:53:00Z",
+    "generated": "2021-12-15T20:54:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-10T21:35:15Z"
+        "generated": "2021-12-13T22:41:14Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-13T17:04:26Z"
+        "generated": "2021-12-15T01:54:26Z"
       }
     }
   }

From 048e0f84e88c712d7495ecb2d4b6ec588c13a6c7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 16 Dec 2021 10:22:55 -0500
Subject: [PATCH 0624/2157] tests/kola: fix `platforms` key for
 `coreos-platform-chrony-generator`

It's a space-separated list, not comma-separated.

This... may have caused us to never actually run that test. Though it's
possible also something changed in cosa, but I'm not seeing it right
now.

Fixes: b73a3757a8d9 ("20platform-chrony: Add support for AWS")
---
 tests/kola/chrony/coreos-platform-chrony-generator | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index ea0bc3dee3..050a19c42e 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -2,7 +2,7 @@
 set -euo pipefail
 # Test the coreos-platform-chrony generator.
 
-# kola: { "exclusive": false, "platforms": "aws,azure,gcp" }
+# kola: { "exclusive": false, "platforms": "aws azure gcp" }
 
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in

From 187015b3159ba822ae8ec43c8baadfdc1c1c17e0 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Mon, 6 Dec 2021 12:28:00 -0500
Subject: [PATCH 0625/2157] tests: common library for ok() & fatal() functions

A separate common library is created for all external kola tests to use.
---
 tests/kola/boot/bootupd                             |  9 +--------
 tests/kola/boot/data/commonlib.sh                   |  1 +
 .../coreos-platform-chrony-generator-permissions    |  9 +--------
 tests/kola/chrony/data/commonlib.sh                 |  1 +
 tests/kola/containers/cgroups-v2                    |  9 +--------
 tests/kola/containers/data/commonlib.sh             |  1 +
 tests/kola/data/commonlib.sh                        | 13 +++++++++++++
 tests/kola/disks/data/commonlib.sh                  |  1 +
 tests/kola/disks/root-boot-ro                       |  9 +--------
 tests/kola/disks/root-prjquota                      |  9 +--------
 tests/kola/disks/systemd-repart-service             |  9 +--------
 tests/kola/disks/tmpfs                              |  9 +--------
 tests/kola/files/aleph-version                      |  9 +--------
 tests/kola/files/data/commonlib.sh                  |  1 +
 tests/kola/files/dracut-executable                  |  9 +--------
 tests/kola/files/etc-passwd-group-permissions       |  9 +--------
 tests/kola/files/file-directory-permissions         |  9 +--------
 tests/kola/files/kernel-headers                     |  9 +--------
 tests/kola/files/license                            |  9 +--------
 tests/kola/files/logrotate-service                  |  9 +--------
 tests/kola/files/remove-manifest-files              |  9 +--------
 tests/kola/files/root-immutable-bit                 |  9 +--------
 tests/kola/files/rpmdb-sqlite                       |  9 +--------
 tests/kola/files/setgid                             |  9 +--------
 tests/kola/files/setuid                             |  9 +--------
 tests/kola/files/sudoers-permissions                |  9 +--------
 tests/kola/files/system-generators                  |  9 +--------
 tests/kola/files/trust-cpu                          |  9 +--------
 tests/kola/files/unlabeled-contexts                 |  9 +--------
 tests/kola/files/yum-repo-dir                       |  9 +--------
 tests/kola/firewall/data/commonlib.sh               |  1 +
 tests/kola/firewall/iptables-legacy                 |  9 +--------
 tests/kola/kdump/data/commonlib.sh                  |  1 +
 tests/kola/kdump/service                            |  9 +--------
 tests/kola/kubernetes/kube-watch/data/commonlib.sh  |  1 +
 tests/kola/kubernetes/kube-watch/test.sh            |  9 +--------
 tests/kola/multipath/data/commonlib.sh              |  1 +
 tests/kola/multipath/multipathd-service-fix         |  9 +--------
 tests/kola/multipath/multipathd-socket-fix          |  9 +--------
 tests/kola/networking/data/commonlib.sh             |  1 +
 .../data/commonlib.sh                               |  1 +
 .../default-network-behavior-change/test.sh         |  9 +--------
 tests/kola/networking/dnsmasq-service               |  9 +--------
 tests/kola/networking/network-online-service        |  9 +--------
 tests/kola/networking/nic-naming                    |  9 +--------
 tests/kola/networking/nm-dhcp-client                |  9 +--------
 tests/kola/networking/nm-start                      |  9 +--------
 .../data/commonlib.sh                               |  1 +
 .../no-default-initramfs-net-propagation/test.sh    |  9 +--------
 tests/kola/networking/resolv/data/commonlib.sh      |  1 +
 tests/kola/networking/resolv/resolv                 |  9 +--------
 .../kola/networking/resolv/systemd-resolved-service |  9 +--------
 tests/kola/networking/stub-resolve.sh               |  9 +--------
 tests/kola/podman/dns/data/commonlib.sh             |  1 +
 tests/kola/podman/dns/test.sh                       |  9 +--------
 tests/kola/reboot/data/commonlib.sh                 |  1 +
 tests/kola/reboot/test.sh                           |  9 +--------
 .../filesystem-only/data/commonlib.sh               |  1 +
 tests/kola/root-reprovision/filesystem-only/test.sh |  9 +--------
 tests/kola/root-reprovision/luks/data/commonlib.sh  |  1 +
 tests/kola/root-reprovision/luks/test.sh            |  9 +--------
 tests/kola/root-reprovision/raid1/data/commonlib.sh |  1 +
 tests/kola/root-reprovision/raid1/test.sh           |  9 +--------
 .../swap-before-root/data/commonlib.sh              |  1 +
 .../kola/root-reprovision/swap-before-root/test.sh  |  9 +--------
 tests/kola/rpm-ostree-countme/data/commonlib.sh     |  1 +
 tests/kola/rpm-ostree-countme/test.sh               |  9 +--------
 .../coreos-update-ca-trust/data/commonlib.sh        |  1 +
 tests/kola/security/coreos-update-ca-trust/test.sh  |  9 +--------
 tests/kola/security/passwd/data/commonlib.sh        |  1 +
 tests/kola/security/passwd/test.sh                  |  9 +--------
 tests/kola/selinux/data/commonlib.sh                |  1 +
 tests/kola/selinux/enforcing                        |  9 +--------
 tests/kola/selinux/usrlocal-context                 |  9 +--------
 tests/kola/swap/data/commonlib.sh                   |  1 +
 tests/kola/swap/zram-default                        |  9 +--------
 tests/kola/swap/zram-generator/data/commonlib.sh    |  1 +
 tests/kola/swap/zram-generator/test.sh              |  9 +--------
 tests/kola/toolbox/data/commonlib.sh                |  1 +
 tests/kola/toolbox/test.sh                          |  9 +--------
 tests/kola/var-mount/luks/data/commonlib.sh         |  1 +
 tests/kola/var-mount/luks/test.sh                   |  9 +--------
 tests/kola/var-mount/simple/data/commonlib.sh       |  1 +
 tests/kola/var-mount/simple/test.sh                 |  9 +--------
 84 files changed, 96 insertions(+), 440 deletions(-)
 create mode 120000 tests/kola/boot/data/commonlib.sh
 create mode 120000 tests/kola/chrony/data/commonlib.sh
 create mode 120000 tests/kola/containers/data/commonlib.sh
 create mode 100644 tests/kola/data/commonlib.sh
 create mode 120000 tests/kola/disks/data/commonlib.sh
 create mode 120000 tests/kola/files/data/commonlib.sh
 create mode 120000 tests/kola/firewall/data/commonlib.sh
 create mode 120000 tests/kola/kdump/data/commonlib.sh
 create mode 120000 tests/kola/kubernetes/kube-watch/data/commonlib.sh
 create mode 120000 tests/kola/multipath/data/commonlib.sh
 create mode 120000 tests/kola/networking/data/commonlib.sh
 create mode 120000 tests/kola/networking/default-network-behavior-change/data/commonlib.sh
 create mode 120000 tests/kola/networking/no-default-initramfs-net-propagation/data/commonlib.sh
 create mode 120000 tests/kola/networking/resolv/data/commonlib.sh
 create mode 120000 tests/kola/podman/dns/data/commonlib.sh
 create mode 120000 tests/kola/reboot/data/commonlib.sh
 create mode 120000 tests/kola/root-reprovision/filesystem-only/data/commonlib.sh
 create mode 120000 tests/kola/root-reprovision/luks/data/commonlib.sh
 create mode 120000 tests/kola/root-reprovision/raid1/data/commonlib.sh
 create mode 120000 tests/kola/root-reprovision/swap-before-root/data/commonlib.sh
 create mode 120000 tests/kola/rpm-ostree-countme/data/commonlib.sh
 create mode 120000 tests/kola/security/coreos-update-ca-trust/data/commonlib.sh
 create mode 120000 tests/kola/security/passwd/data/commonlib.sh
 create mode 120000 tests/kola/selinux/data/commonlib.sh
 create mode 120000 tests/kola/swap/data/commonlib.sh
 create mode 120000 tests/kola/swap/zram-generator/data/commonlib.sh
 create mode 120000 tests/kola/toolbox/data/commonlib.sh
 create mode 120000 tests/kola/var-mount/luks/data/commonlib.sh
 create mode 120000 tests/kola/var-mount/simple/data/commonlib.sh

diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 50ad6b01eb..1f2b0c9661 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 case "$(arch)" in
     x86_64|aarch64)
diff --git a/tests/kola/boot/data/commonlib.sh b/tests/kola/boot/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/boot/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
index bec9c316e3..a7101d3b6e 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator-permissions
+++ b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # See https://github.com/coreos/coreos-assembler/pull/1786
 path=/usr/lib/systemd/system-generators/coreos-platform-chrony
diff --git a/tests/kola/chrony/data/commonlib.sh b/tests/kola/chrony/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/chrony/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index 93c70edecb..7c308cb1fa 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -5,14 +5,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure the system is on cgroups v2
 has_cgroup_karg=1
diff --git a/tests/kola/containers/data/commonlib.sh b/tests/kola/containers/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/containers/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
new file mode 100644
index 0000000000..d429f3c162
--- /dev/null
+++ b/tests/kola/data/commonlib.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+#This is a common library created for the ok & fatal function 
+#and symlinks added to the data/ in each directory
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
diff --git a/tests/kola/disks/data/commonlib.sh b/tests/kola/disks/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/disks/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
index cc87625660..56abbebf75 100755
--- a/tests/kola/disks/root-boot-ro
+++ b/tests/kola/disks/root-boot-ro
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 for part in /sysroot /boot; do
     if ! findmnt -n -o options ${part} | grep -q "ro,"; then
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
index 63ec7cb337..e57fdf108c 100755
--- a/tests/kola/disks/root-prjquota
+++ b/tests/kola/disks/root-prjquota
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 rootflags=$(findmnt /sysroot -no OPTIONS)
 if ! grep prjquota <<< "${rootflags}"; then
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index 32d71faaf7..d21776f4a5 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -6,14 +6,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure systemd-repart is masked
 # https://github.com/coreos/fedora-coreos-config/pull/744
diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
index ebbc4d0a24..5b989e7278 100755
--- a/tests/kola/disks/tmpfs
+++ b/tests/kola/disks/tmpfs
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Ensure we have tmpfs on /tmp
 tmpfs=$(findmnt -n -o FSTYPE /tmp)
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index 0e0b9ef14d..ee69eabc68 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
 jq . < /sysroot/.coreos-aleph-version.json >/dev/null
diff --git a/tests/kola/files/data/commonlib.sh b/tests/kola/files/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/files/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/files/dracut-executable b/tests/kola/files/dracut-executable
index c0c6a808e6..71bb857926 100755
--- a/tests/kola/files/dracut-executable
+++ b/tests/kola/files/dracut-executable
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # It's easy for dracut modules to accidentally ship scripts without +x set
 tmpd=$(mktemp -d)
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
index 108234769d..849d5e245e 100755
--- a/tests/kola/files/etc-passwd-group-permissions
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 for f in '/etc/passwd' '/etc/group'; do
     if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index f982e657d5..a05928de4e 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 list="$(find /etc -type f -type d -perm /022)"
 if [[ -n "${list}" ]]; then
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index d3812744b8..e36a6b762e 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # check that we are not including the kernel headers on the host
 # See:
diff --git a/tests/kola/files/license b/tests/kola/files/license
index 920947f5ae..cbb20b45e6 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
     fatal missing LICENSE
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index 1024c95aed..3b1d87ace5 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Test some services are enabled or disabled appropriately
 for unit in logrotate logrotate.timer; do
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index de211c00f8..12203a031e 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -5,14 +5,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # See remove-files in the manifest
 if test -d /usr/share/info; then
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index 00a90155ae..f65c8a32e2 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! lsattr -d / | grep -qe '--i--'; then
     fatal "missing immutable bit on /"
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 4b7d8e11cb..0526a146cd 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -4,14 +4,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure we're using the sqlite rpmdb backend
 # https://github.com/coreos/fedora-coreos-tracker/issues/623
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index bb2d20afc4..fd738e34ba 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # List of known files and directories with SetGID bit set
 list_setgid_files=(
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 91a1411c70..5511a78bba 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # List of known files and directories with SetUID bit set
 list_setuid_files=(
diff --git a/tests/kola/files/sudoers-permissions b/tests/kola/files/sudoers-permissions
index 75bf5876aa..a84be0dc03 100755
--- a/tests/kola/files/sudoers-permissions
+++ b/tests/kola/files/sudoers-permissions
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Security scanners complain about world-readable files in /etc/sudoers.d.
 # Check that there aren't any.
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index a95e6eefdc..50e14549fd 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure files in /usr/lib/systemd/system-generators have exec mode
 find /usr/lib/systemd/system-generators -type f | while read f; do
diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
index a464bcaf9f..9c9c7c866f 100755
--- a/tests/kola/files/trust-cpu
+++ b/tests/kola/files/trust-cpu
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1830280
 tmpd=$(mktemp -d)
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index 697c57c95f..82c04d15a9 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # check that no files are unlabeled
 unlabeled=$(find /var /etc -context '*:unlabeled_t:*')
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
index 9d7363efb0..46e5d3070e 100755
--- a/tests/kola/files/yum-repo-dir
+++ b/tests/kola/files/yum-repo-dir
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! test -d /etc/yum.repos.d; then
     fatal "Error: not find /etc/yum.repos.d"
diff --git a/tests/kola/firewall/data/commonlib.sh b/tests/kola/firewall/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/firewall/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
index 9e45b15c89..2b1bf34d93 100755
--- a/tests/kola/firewall/iptables-legacy
+++ b/tests/kola/firewall/iptables-legacy
@@ -6,14 +6,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure we're still on legacy iptables for now
 # https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
diff --git a/tests/kola/kdump/data/commonlib.sh b/tests/kola/kdump/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/kdump/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 965281e9c0..16b2d2bae9 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure that kdump didn't start (it's either disabled, or enabled but
 # conditional on crashkernel= karg, which we don't bake).
diff --git a/tests/kola/kubernetes/kube-watch/data/commonlib.sh b/tests/kola/kubernetes/kube-watch/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/kubernetes/kube-watch/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index 77f97c2f89..15cc8f1537 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # This is for verifying that `kubernetes_file_t` labeled files can be
 # watched by systemd
diff --git a/tests/kola/multipath/data/commonlib.sh b/tests/kola/multipath/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/multipath/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index 8fc4143df1..820c26cab5 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -3,14 +3,7 @@
 # kola: { "exclusive": false, "platforms": "qemu-unpriv" }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # We need either a fixed dracut or temporary workaround, no need for both.
 # See https://github.com/coreos/fedora-coreos-tracker/issues/803.
diff --git a/tests/kola/multipath/multipathd-socket-fix b/tests/kola/multipath/multipathd-socket-fix
index e961fe89cf..23f28edb78 100755
--- a/tests/kola/multipath/multipathd-socket-fix
+++ b/tests/kola/multipath/multipathd-socket-fix
@@ -3,14 +3,7 @@
 # kola: { "exclusive": false, "platforms": "qemu-unpriv" }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # We need either a fixed multipathd.socket or temporary workaround, no need for both.
 # See https://bugzilla.redhat.com/show_bug.cgi?id=2008098.
diff --git a/tests/kola/networking/data/commonlib.sh b/tests/kola/networking/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/networking/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/default-network-behavior-change/data/commonlib.sh b/tests/kola/networking/default-network-behavior-change/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/default-network-behavior-change/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 74b44ea076..f1186f88ea 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -9,14 +9,7 @@ set -xeuo pipefail
 # (if needed) instead of finding out later that problems were introduced.
 # some context in: https://github.com/coreos/fedora-coreos-tracker/issues/1000
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG1
 #   - used on FCOS 35+ releases
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index 98f14e8f97..04e3c3c31a 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -5,14 +5,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure dnsmasq is masked
 # https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index f1b73f1b40..f4d5efa9cd 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # We shouldn't pull this into the transaction by default. See
 # https://github.com/coreos/fedora-coreos-config/pull/1088
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 23cc233ce1..c453b490d5 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 if ip link | grep -o -e " eth[0-9]:"; then
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
index 63c32b97c5..e91535951c 100755
--- a/tests/kola/networking/nm-dhcp-client
+++ b/tests/kola/networking/nm-dhcp-client
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Ensure NM's internal DHCP client runs by default
 if ! journalctl -b 0 -u NetworkManager --grep=dhcp | grep -q "Using DHCP client 'internal'"; then
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index 8cccc6b079..a0df67b14e 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 get_journal_msg_timestamp() {
     journalctl -o json -b 0 --grep "$1" \
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/data/commonlib.sh b/tests/kola/networking/no-default-initramfs-net-propagation/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
index bee179a59f..6a72d9581e 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
@@ -6,14 +6,7 @@ set -xeuo pipefail
 # from the initramfs. This test tries to verify that is the case.
 # https://github.com/coreos/fedora-coreos-tracker/issues/696
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! journalctl -t coreos-teardown-initramfs | \
        grep 'info: skipping propagation of default networking configs'; then
diff --git a/tests/kola/networking/resolv/data/commonlib.sh b/tests/kola/networking/resolv/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/resolv/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/resolv/resolv b/tests/kola/networking/resolv/resolv
index 776720e046..c6e20cf227 100755
--- a/tests/kola/networking/resolv/resolv
+++ b/tests/kola/networking/resolv/resolv
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # systemd-resolved should be fully functional on f35+
 source /etc/os-release
diff --git a/tests/kola/networking/resolv/systemd-resolved-service b/tests/kola/networking/resolv/systemd-resolved-service
index a04b5e366b..4bb37b99f0 100755
--- a/tests/kola/networking/resolv/systemd-resolved-service
+++ b/tests/kola/networking/resolv/systemd-resolved-service
@@ -4,14 +4,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # systemd-resolved should be enabled
 if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
diff --git a/tests/kola/networking/stub-resolve.sh b/tests/kola/networking/stub-resolve.sh
index 9754e59436..ec345332e2 100755
--- a/tests/kola/networking/stub-resolve.sh
+++ b/tests/kola/networking/stub-resolve.sh
@@ -4,14 +4,7 @@
 # kola: { "distros": "fcos", "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure that the stub-resolv.conf file has the correct selinux context.
 # https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
diff --git a/tests/kola/podman/dns/data/commonlib.sh b/tests/kola/podman/dns/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/podman/dns/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 5bde158506..b233a04a67 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -5,14 +5,7 @@ set -xeuo pipefail
 # https://github.com/coreos/fedora-coreos-tracker/issues/923
 # kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "exclusive": false}
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 runascoreuserscript='
 #!/bin/bash
diff --git a/tests/kola/reboot/data/commonlib.sh b/tests/kola/reboot/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/reboot/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 06d3e12c03..e6f7324955 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -5,14 +5,7 @@ set -xeuo pipefail
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # /var
 varsrc=$(findmnt -nvr /var -o SOURCE)
diff --git a/tests/kola/root-reprovision/filesystem-only/data/commonlib.sh b/tests/kola/root-reprovision/filesystem-only/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/filesystem-only/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 1a61befc79..699b2b92f3 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -2,14 +2,7 @@
 # kola: {"platforms": "qemu", "minMemory": 4096}
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 fstype=$(findmnt -nvr / -o FSTYPE)
 [[ $fstype == ext4 ]]
diff --git a/tests/kola/root-reprovision/luks/data/commonlib.sh b/tests/kola/root-reprovision/luks/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/luks/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 1360c34bb9..fd48ab8bde 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -2,14 +2,7 @@
 # kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == /dev/mapper/myluksdev ]]
diff --git a/tests/kola/root-reprovision/raid1/data/commonlib.sh b/tests/kola/root-reprovision/raid1/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/raid1/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index a1e510cffa..d26eb03d5d 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -2,14 +2,7 @@
 # kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == $(realpath /dev/md/foobar) ]]
diff --git a/tests/kola/root-reprovision/swap-before-root/data/commonlib.sh b/tests/kola/root-reprovision/swap-before-root/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/swap-before-root/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index de269f7b3a..a2979b3c68 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -4,14 +4,7 @@
 # kola: {"distros": "fcos", "platforms": "qemu", "minMemory": 4096}
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 swapstatus=$(systemctl is-active dev-disk-by\\x2dpartlabel-swap.swap)
 [[ ${swapstatus} == active ]]
diff --git a/tests/kola/rpm-ostree-countme/data/commonlib.sh b/tests/kola/rpm-ostree-countme/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/rpm-ostree-countme/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 0016306961..9da0077942 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -5,14 +5,7 @@ set -xeuo pipefail
 # This test only runs on FCOS because countme support is not available in RHCOS
 # kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 journal_cursor() {
     journalctl --output json --lines 1 \
diff --git a/tests/kola/security/coreos-update-ca-trust/data/commonlib.sh b/tests/kola/security/coreos-update-ca-trust/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/security/coreos-update-ca-trust/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
index 973a6e94d5..c6e0333a52 100755
--- a/tests/kola/security/coreos-update-ca-trust/test.sh
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure that coreos-update-ca-trust kicked in and observe the result.
 if ! systemctl show coreos-update-ca-trust.service -p ActiveState | grep ActiveState=active; then
diff --git a/tests/kola/security/passwd/data/commonlib.sh b/tests/kola/security/passwd/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/security/passwd/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index 0ab5546d63..1d702cb3c4 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -5,14 +5,7 @@
 
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 #Testing that a user password provisioned by ignition works
 OUTPUT=$(echo 'foobar' | setsid su - tester -c id)
diff --git a/tests/kola/selinux/data/commonlib.sh b/tests/kola/selinux/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/selinux/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index 850d829d16..e1c60e82c4 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # SELinux should be on
 enforce=$(getenforce)
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index d063f013fb..8771cccd75 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -2,14 +2,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 bin_ctx=$(stat -c %C /usr/sbin)
 usrlocal_sbin_ctx=$(stat -c %C /var/usrlocal/sbin)
diff --git a/tests/kola/swap/data/commonlib.sh b/tests/kola/swap/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/swap/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 5aa39cd076..a616456642 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -4,14 +4,7 @@
 # kola: { "exclusive": false }
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure we don't default to having swap on zram
 # https://github.com/coreos/fedora-coreos-tracker/issues/509
diff --git a/tests/kola/swap/zram-generator/data/commonlib.sh b/tests/kola/swap/zram-generator/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/swap/zram-generator/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index 2ab2cfdcf2..b7b0d82990 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -4,14 +4,7 @@
 # kola: { "distros": "fcos", "exclusive": true}
 set -xeuo pipefail
 
-ok() {
-        echo "ok" "$@"
-    }
-
-fatal() {
-        echo "$@" >&2
-            exit 1
-        }
+. $KOLA_EXT_DATA/commonlib.sh
 
 # This test makes sure that swap on zram devices can be set up
 # using the zram-generator as defined in the docs at
diff --git a/tests/kola/toolbox/data/commonlib.sh b/tests/kola/toolbox/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/toolbox/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index b461750f29..46e7b6e3ca 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -21,14 +21,7 @@
 
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # Try five times to create the toolbox to avoid Fedora registry infra flakes
 for i in $(seq 1 5); do
diff --git a/tests/kola/var-mount/luks/data/commonlib.sh b/tests/kola/var-mount/luks/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/var-mount/luks/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index 172fd62122..f27dd70a97 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -4,14 +4,7 @@ set -xeuo pipefail
 # restrict to qemu for now because the primary disk path is platform-dependent
 # kola: {"platforms": "qemu", "architectures": "!s390x"}
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # /var
 
diff --git a/tests/kola/var-mount/simple/data/commonlib.sh b/tests/kola/var-mount/simple/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/var-mount/simple/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index cdd5636dcb..2c1c608ea1 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -4,14 +4,7 @@ set -xeuo pipefail
 # restrict to qemu for now because the primary disk path is platform-dependent
 # kola: {"platforms": "qemu"}
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # /var
 

From af7bcc8671edcc1f3f6672f34e695d3c8638eb53 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Wed, 15 Dec 2021 15:06:16 -0500
Subject: [PATCH 0626/2157] overlay/15fcos: coreos-check-ssh-keys: limit search
 to current boot

On re-provisioning a FCOS instance, Ignition will append notices like
"wrote ssh authorized keys file for user: %s"
to "/etc/issue.d/30_ssh_authorized_keys.issue".

The problem is that the journal from the previous install remains available
and multiple entries are displayed when the journal is searched.
The problem is fixed by limiting the journal output to the most recent boot.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1033
---
 overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
index 7a7bc35079..438ca9bc7f 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
@@ -9,17 +9,20 @@ main() {
 
     # See https://github.com/coreos/ignition/pull/964 for the MESSAGE_ID 
     # source. It will track the authorized-ssh-keys entries in journald 
-    # provided via Ignition.
+    # provided via Ignition. Limit journal output to the most recent boot
+    # so we don't get output from re-used /var/ partitions.
     ignitionusers=$(
-            journalctl -o json-pretty MESSAGE_ID=225067b87bbd4a0cb6ab151f82fa364b | \
+            journalctl -b 0 -o json-pretty MESSAGE_ID=225067b87bbd4a0cb6ab151f82fa364b | \
             jq -r '.MESSAGE' | \
             xargs -I{} echo "Ignition: {}")
 
     # See https://github.com/coreos/afterburn/pull/397 for the MESSAGE_ID 
     # source. It will track the authorized-ssh-keys entries in journald  
-    # provided via Afterburn.
+    # provided via Afterburn.Limit journal output to the most recent boot
+    # so we don't get output from re-used /var/ partitions.
+
     afterburnusers=$(
-            journalctl -o json-pretty MESSAGE_ID=0f7d7a502f2d433caa1323440a6b4190 | \
+            journalctl -b 0 -o json-pretty MESSAGE_ID=0f7d7a502f2d433caa1323440a6b4190 | \
             jq -r '.MESSAGE' | \
             xargs -I{} echo "Afterburn: {}")
 

From 33b5ce4efae5aa5fd59fbc5a7c842b17f4d170c4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 16 Dec 2021 16:28:47 -0500
Subject: [PATCH 0627/2157] tests: networking.nic-naming: disable on Azure
 platform

Disable on azure because of a limitation of the hv_netvsc driver
there. According to [1] and [2] the driver does not provide sufficient
information to systemd-udev for systemd's naming to work. It falls
back to basic ethX naming.

[1] https://access.redhat.com/solutions/3204751
[2] https://github.com/Azure/WALinuxAgent/issues/1877
---
 tests/kola/networking/nic-naming | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index c453b490d5..0d5c09c738 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -1,5 +1,14 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+
+# Disable on azure because of a limitation of the hv_netvsc driver
+# there. According to [1] and [2] the driver does not provide sufficient
+# information to systemd-udev for systemd's naming to work. It falls
+# back to basic ethX naming.
+#
+# [1] https://access.redhat.com/solutions/3204751
+# [2] https://github.com/Azure/WALinuxAgent/issues/1877
+
+# kola: { "exclusive": false, "platforms": "!azure" }
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh

From e6c13cce1c1ba90945c2e82634c6549fa65bd084 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 18 Nov 2021 18:18:11 -0500
Subject: [PATCH 0628/2157] overrides: fast-track coreos-installer
 0.12.0-1.fc35

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..3d5c947ec1 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.12.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a9ed18c2c3
+      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.12.0
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.12.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a9ed18c2c3
+      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.12.0
+      type: fast-track

From 4a5c2f07461f697987797d811c49abb74d3b55ba Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 18 Dec 2021 16:42:42 +0000
Subject: [PATCH 0629/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/635/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 2 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e2d0385370..d4f9061d0e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -82,7 +82,7 @@
       "evra": "1.17.2-1.fc35.aarch64"
     },
     "ca-certificates": {
-      "evra": "2021.2.50-3.fc35.noarch"
+      "evra": "2021.2.52-1.0.fc35.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-1.fc35.aarch64"
@@ -112,16 +112,16 @@
       "evra": "2:2.0.30-2.fc35.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
       "evra": "2:2.170.0-2.fc35.noarch"
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.11.0-1.fc35.aarch64"
+      "evra": "0.12.0-1.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.11.0-1.fc35.aarch64"
+      "evra": "0.12.0-1.fc35.aarch64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.8-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.8-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.8-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -958,10 +958,10 @@
       "evra": "1.8.0-1.fc35.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.2-1.fc35.aarch64"
+      "evra": "3:3.4.4-1.fc35.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.2-1.fc35.aarch64"
+      "evra": "3:3.4.4-1.fc35.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-15T20:54:05Z",
+    "generated": "2021-12-18T16:02:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-13T22:40:47Z"
+        "generated": "2021-12-18T15:36:42Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-15T01:54:09Z"
+        "generated": "2021-12-18T01:00:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1db56ad237..1d29ed72d9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -82,7 +82,7 @@
       "evra": "1.17.2-1.fc35.x86_64"
     },
     "ca-certificates": {
-      "evra": "2021.2.50-3.fc35.noarch"
+      "evra": "2021.2.52-1.0.fc35.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-1.fc35.x86_64"
@@ -112,16 +112,16 @@
       "evra": "2:2.0.30-2.fc35.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-2.fc35.noarch"
+      "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
       "evra": "2:2.170.0-2.fc35.noarch"
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.11.0-1.fc35.x86_64"
+      "evra": "0.12.0-1.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.11.0-1.fc35.x86_64"
+      "evra": "0.12.0-1.fc35.x86_64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.8-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.8-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.8-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -970,10 +970,10 @@
       "evra": "1.8.0-1.fc35.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.2-1.fc35.x86_64"
+      "evra": "3:3.4.4-1.fc35.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.2-1.fc35.x86_64"
+      "evra": "3:3.4.4-1.fc35.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-15T20:54:08Z",
+    "generated": "2021-12-18T16:07:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-13T22:41:14Z"
+        "generated": "2021-12-18T15:37:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-15T01:54:26Z"
+        "generated": "2021-12-18T01:00:43Z"
       }
     }
   }

From c97b62390a37b2e53b26ac902bba14bdc1ca931a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 20 Dec 2021 10:20:04 -0500
Subject: [PATCH 0630/2157] denylist: snooze ext.config.podman.dns test on
 rawhide

It turns out too many things are being built against the new
systemd for us to effectively pin it. Let's snooze the test
(ext.config.podman.dns) instead while we investigate the fix.

See https://github.com/coreos/fedora-coreos-tracker/issues/1046
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a35e78958e..b8c1fb9ba2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -14,3 +14,8 @@
     - aarch64
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/860
+- pattern: ext.config.podman.dns
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
+  snooze: 2022-01-20
+  streams:
+    - rawhide

From d33a3229753ab80c42c7b6be4780c8a6cf49eec8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 20 Dec 2021 21:27:28 +0000
Subject: [PATCH 0631/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/638/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d4f9061d0e..2e5b314fd3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.2-1.fc35.aarch64"
+      "evra": "1.7.3-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.26-4.fc35.aarch64"
+      "evra": "4.4.27-1.fc35.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-18T16:02:37Z",
+    "generated": "2021-12-20T20:53:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-18T15:36:42Z"
+        "generated": "2021-12-18T16:45:07Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-18T01:00:26Z"
+        "generated": "2021-12-20T00:58:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1d29ed72d9..9cdc741ff6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.2-1.fc35.x86_64"
+      "evra": "1.7.3-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.26-4.fc35.x86_64"
+      "evra": "4.4.27-1.fc35.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-18T16:07:27Z",
+    "generated": "2021-12-20T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-18T15:37:04Z"
+        "generated": "2021-12-18T16:45:51Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-18T01:00:43Z"
+        "generated": "2021-12-20T00:59:07Z"
       }
     }
   }

From 4b19699e31b75a15f368955f434f018c10821f7b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Dec 2021 21:24:50 +0000
Subject: [PATCH 0632/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/639/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2e5b314fd3..49e11cd5db 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.8-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.8-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.8-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-20T20:53:52Z",
+    "generated": "2021-12-21T20:53:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-18T16:45:07Z"
+        "generated": "2021-12-20T21:34:55Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-20T00:58:49Z"
+        "generated": "2021-12-21T01:02:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9cdc741ff6..dcee33a31d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.8-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.8-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.8-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-20T20:53:35Z",
+    "generated": "2021-12-21T20:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-18T16:45:51Z"
+        "generated": "2021-12-20T21:35:04Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-20T00:59:07Z"
+        "generated": "2021-12-21T01:03:18Z"
       }
     }
   }

From 244b0a3a7457919c4ce671e3e42cddcaa2d6cd82 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 Dec 2021 16:55:12 -0500
Subject: [PATCH 0633/2157] denylist: snooze ostree.hotfix podman.base tests on
 rawhide stream

The ostree.hotfix tests rears it's ugly head a few weeks a month
and the podman.base test is surfacing kernel locking dep warnings.
Since no one is going to dig into these for the next few weeks let's
snooze them in the hopes we can finally get a new aarch64 rawhide
build.
---
 kola-denylist.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b8c1fb9ba2..26e199eae4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2021-10-25
+  snooze: 2022-01-10
   streams:
     - rawhide
   arches:
@@ -19,3 +19,8 @@
   snooze: 2022-01-20
   streams:
     - rawhide
+- pattern: podman.base
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
+  snooze: 2022-01-10
+  streams:
+    - rawhide

From d9531441a7bef1cdde74563a4d0816810399c221 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fran=C3=A7ois=20Rigault?= <frigo@amadeus.com>
Date: Wed, 22 Dec 2021 08:53:30 +0100
Subject: [PATCH 0634/2157] chrony: use /dev/ptp_hyperv on AzureStack

As implemented on Azure (d0ad4c8d78b883b6324436d0eeb7b4597e0a4605)
/dev/ptp_hyperv should be used as well on AzureStack.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1053
---
 .../usr/lib/systemd/system-generators/coreos-platform-chrony  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index 4416f26f9f..a87f6563a4 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -22,7 +22,7 @@ confpath=/run/coreos-platform-chrony.conf
 # we don't have one shared across shell services at the moment.
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in
-    azure|aws|gcp) ;;  # OK, this is a platform we know how to support
+    azure|azurestack|aws|gcp) ;;  # OK, this is a platform we know how to support
     *) exit 0 ;;
 esac
 
@@ -65,7 +65,7 @@ makestep 1.0 -1
 EOF
 ) > "${confpath}"
 case "${platform}" in
-    azure)
+    azure | azurestack)
         # the /dev/ptp_hyperv symlink is created by:
         # https://github.com/systemd/systemd/blob/e67a5c14f0345f5ac456cfa109324dd9e70114d3/rules.d/50-udev-default.rules.in#L106
         (echo '# See also https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync'

From 0eda5eb17adeff88a4ee60c3884c50c0d6a96a10 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Dec 2021 21:43:50 +0000
Subject: [PATCH 0635/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/640/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 49e11cd5db..565953c212 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.23-1.fc35.aarch64"
+      "evra": "32:9.16.24-1.fc35.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.23-1.fc35.noarch"
+      "evra": "32:9.16.24-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.23-1.fc35.aarch64"
+      "evra": "32:9.16.24-1.fc35.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.aarch64"
@@ -811,10 +811,10 @@
       "evra": "2.5.1-30.fc35.aarch64"
     },
     "linux-firmware": {
-      "evra": "20211027-126.fc35.noarch"
+      "evra": "20211216-127.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20211027-126.fc35.noarch"
+      "evra": "20211216-127.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-21T20:53:13Z",
+    "generated": "2021-12-22T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-20T21:34:55Z"
+        "generated": "2021-12-21T21:27:34Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-21T01:02:59Z"
+        "generated": "2021-12-22T01:58:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index dcee33a31d..0b318a68e3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.23-1.fc35.x86_64"
+      "evra": "32:9.16.24-1.fc35.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.23-1.fc35.noarch"
+      "evra": "32:9.16.24-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.23-1.fc35.x86_64"
+      "evra": "32:9.16.24-1.fc35.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-30.fc35.x86_64"
     },
     "linux-firmware": {
-      "evra": "20211027-126.fc35.noarch"
+      "evra": "20211216-127.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20211027-126.fc35.noarch"
+      "evra": "20211216-127.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-21T20:53:10Z",
+    "generated": "2021-12-22T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-20T21:35:04Z"
+        "generated": "2021-12-21T21:28:16Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-21T01:03:18Z"
+        "generated": "2021-12-22T01:58:26Z"
       }
     }
   }

From 15153c9b69299a9614b9083f2d86117da122a562 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 24 Dec 2021 21:25:52 +0000
Subject: [PATCH 0636/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/642/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 565953c212..a65a15c33c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -370,7 +370,7 @@
       "evra": "1:6.2.0-7.fc35.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.3-2.fc35.aarch64"
+      "evra": "2.3.4-1.fc35.aarch64"
     },
     "gnutls": {
       "evra": "3.7.2-2.fc35.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.6-1.fc35.noarch"
+      "evra": "35.7-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.6-1.fc35.noarch"
+      "evra": "35.7-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-22T20:53:01Z",
+    "generated": "2021-12-24T20:52:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-21T21:27:34Z"
+        "generated": "2021-12-22T22:01:01Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-22T01:58:08Z"
+        "generated": "2021-12-24T01:02:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0b318a68e3..71c5aebb98 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -370,7 +370,7 @@
       "evra": "1:6.2.0-7.fc35.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.3-2.fc35.x86_64"
+      "evra": "2.3.4-1.fc35.x86_64"
     },
     "gnutls": {
       "evra": "3.7.2-2.fc35.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.6-1.fc35.noarch"
+      "evra": "35.7-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.6-1.fc35.noarch"
+      "evra": "35.7-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-22T20:52:58Z",
+    "generated": "2021-12-24T20:52:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-21T21:28:16Z"
+        "generated": "2021-12-22T22:02:06Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-22T01:58:26Z"
+        "generated": "2021-12-24T01:02:43Z"
       }
     }
   }

From d1743185ffd47dce8fa5e885894d3a6a068b5dee Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Dec 2021 21:23:21 +0000
Subject: [PATCH 0637/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/644/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a65a15c33c..7dce35b1a4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.11-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.11-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.11-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.0-2.fc35.aarch64"
+      "evra": "1.5.1-1.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-24T20:52:59Z",
+    "generated": "2021-12-26T20:53:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-22T22:01:01Z"
+        "generated": "2021-12-24T21:29:13Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-24T01:02:23Z"
+        "generated": "2021-12-26T01:02:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 71c5aebb98..7c0560d7bf 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.11-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.11-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.11-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.0-2.fc35.x86_64"
+      "evra": "1.5.1-1.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-24T20:52:45Z",
+    "generated": "2021-12-26T20:53:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-22T22:02:06Z"
+        "generated": "2021-12-24T21:29:57Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-24T01:02:43Z"
+        "generated": "2021-12-26T01:03:14Z"
       }
     }
   }

From d13e6ea419a4523e5c666a3cead6576ec3ec7669 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 29 Dec 2021 20:53:20 +0000
Subject: [PATCH 0638/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/647/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7dce35b1a4..d94b7a94b3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-26T20:53:13Z",
+    "generated": "2021-12-29T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-24T21:29:13Z"
+        "generated": "2021-12-26T21:26:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-26T01:02:54Z"
+        "generated": "2021-12-29T01:23:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7c0560d7bf..2d5637227f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-26T20:53:03Z",
+    "generated": "2021-12-29T20:52:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-24T21:29:57Z"
+        "generated": "2021-12-26T21:26:05Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-26T01:03:14Z"
+        "generated": "2021-12-29T01:23:55Z"
       }
     }
   }

From 431389fc14d6b30d23359a462d81ae9458f212f9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 30 Dec 2021 21:24:57 +0000
Subject: [PATCH 0639/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/648/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d94b7a94b3..74da43cabf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.1-1.fc35.aarch64"
+      "evra": "1.5.1-2.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1193,7 +1193,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-29T20:53:11Z",
+    "generated": "2021-12-30T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1202,7 +1202,7 @@
         "generated": "2021-12-26T21:26:29Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-29T01:23:36Z"
+        "generated": "2021-12-30T01:05:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2d5637227f..3f48c179ea 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.1-1.fc35.x86_64"
+      "evra": "1.5.1-2.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1205,7 +1205,7 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-29T20:52:57Z",
+    "generated": "2021-12-30T20:52:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1214,7 +1214,7 @@
         "generated": "2021-12-26T21:26:05Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-29T01:23:55Z"
+        "generated": "2021-12-30T01:06:17Z"
       }
     }
   }

From 4dd78e47fa26af50d71938104588c2d40452f31d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 31 Dec 2021 21:25:03 +0000
Subject: [PATCH 0640/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/649/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 74da43cabf..169b57e601 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.3-1.fc35.aarch64"
+      "evra": "1.4-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.1-2.fc35.aarch64"
+      "evra": "1.5.1-3.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-30T20:53:02Z",
+    "generated": "2021-12-31T20:53:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-26T21:26:29Z"
+        "generated": "2021-12-30T21:29:09Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-30T01:05:58Z"
+        "generated": "2021-12-31T01:02:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3f48c179ea..48b92b4c2c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.3-1.fc35.x86_64"
+      "evra": "1.4-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.1-2.fc35.x86_64"
+      "evra": "1.5.1-3.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-30T20:52:47Z",
+    "generated": "2021-12-31T20:52:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-26T21:26:05Z"
+        "generated": "2021-12-30T21:29:27Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-30T01:06:17Z"
+        "generated": "2021-12-31T01:02:41Z"
       }
     }
   }

From c62b89b44be802ae8d62b5e87045c87c078c7958 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 1 Jan 2022 21:26:30 +0000
Subject: [PATCH 0641/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/650/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 169b57e601..bd7cee7944 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.11-200.fc35.aarch64"
+      "evra": "5.15.12-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.11-200.fc35.aarch64"
+      "evra": "5.15.12-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.11-200.fc35.aarch64"
+      "evra": "5.15.12-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-31T20:53:03Z",
+    "generated": "2022-01-01T20:53:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-30T21:29:09Z"
+        "generated": "2021-12-31T21:27:26Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-31T01:02:21Z"
+        "generated": "2022-01-01T01:23:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 48b92b4c2c..0ff2733cf8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.11-200.fc35.x86_64"
+      "evra": "5.15.12-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.11-200.fc35.x86_64"
+      "evra": "5.15.12-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.11-200.fc35.x86_64"
+      "evra": "5.15.12-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2021-12-31T20:52:48Z",
+    "generated": "2022-01-01T20:53:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-30T21:29:27Z"
+        "generated": "2021-12-31T21:28:06Z"
       },
       "fedora-updates": {
-        "generated": "2021-12-31T01:02:41Z"
+        "generated": "2022-01-01T01:23:44Z"
       }
     }
   }

From 07614caac919eaee6c5cd242c5a6d392213f43ca Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 2 Jan 2022 00:54:57 +0000
Subject: [PATCH 0642/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3d5c947ec1..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.12.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a9ed18c2c3
-      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.12.0
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.12.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a9ed18c2c3
-      reason: https://github.com/coreos/coreos-installer/releases/tag/v0.12.0
-      type: fast-track
+packages: {}

From 8ec2468bb51f1d7ec79e560c41cdef5a728d74c8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 3 Jan 2022 21:36:34 +0000
Subject: [PATCH 0643/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/652/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bd7cee7944..f6e18aa24d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.12.0-1.fc35.aarch64"
+      "evra": "0.12.0-2.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.12.0-1.fc35.aarch64"
+      "evra": "0.12.0-2.fc35.aarch64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-01T20:53:17Z",
+    "generated": "2022-01-03T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-31T21:27:26Z"
+        "generated": "2022-01-01T21:29:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-01T01:23:25Z"
+        "generated": "2022-01-03T00:34:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0ff2733cf8..582baaa768 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-32.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.12.0-1.fc35.x86_64"
+      "evra": "0.12.0-2.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.12.0-1.fc35.x86_64"
+      "evra": "0.12.0-2.fc35.x86_64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-01T20:53:15Z",
+    "generated": "2022-01-03T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2021-12-31T21:28:06Z"
+        "generated": "2022-01-01T21:29:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-01T01:23:44Z"
+        "generated": "2022-01-03T00:34:58Z"
       }
     }
   }

From 24589719d58c1b875c2c6fc6684a99fb8a50f411 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 20 Dec 2021 15:17:47 +0800
Subject: [PATCH 0644/2157] commonlib.sh: add func get_ip_for_nic

This is to add func get_ip_for_nic to get ip for the specified nic
---
 tests/kola/data/commonlib.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index d429f3c162..a6309263c3 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -11,3 +11,13 @@ fatal() {
     echo "$@" >&2
     exit 1
 }
+
+get_ip_for_nic () {
+    local nic_name=$1
+    nic_ip=""
+    nic_ip=`ip -j addr show ${nic_name} | jq -r '.[0].addr_info | map(select(.family == "inet")) | .[0].local'`
+    if [ -z "$nic_ip" ]; then
+        echo "Error: can not get ${nic_name} ip"
+        exit 1
+    fi
+}

From 44a0c465f2bb2435ed8c5a0b98cf473d0458edf3 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 30 Dec 2021 09:34:14 +0800
Subject: [PATCH 0645/2157] networking: add test scripts for
 coreos.force_persist_ip

This is to test with and without coreos.force_persist_ip.

Setup configuration for a single NIC with two different ways:
- karg ip=x provides static network config for ens5 and (or not)
  coreos.force_persist_ip
- ignition provides dhcp network config for ens5
Expected result:
- With coreos.force_persist_ip, ip=kargs wins, ens5 gets the static IP address via kargs
- Without coreos.force_persist_ip, Ignition networking configuration wins,
  ens5 gets ip via dhcp
See https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
---
 .../networking/force-persist-ip/config.bu     | 16 +++++++++
 .../force-persist-ip/data/commonlib.sh        |  1 +
 .../kola/networking/force-persist-ip/test.sh  | 36 +++++++++++++++++++
 .../prefer-ignition-networking/config.bu      | 16 +++++++++
 .../data/commonlib.sh                         |  1 +
 .../prefer-ignition-networking/test.sh        | 29 +++++++++++++++
 6 files changed, 99 insertions(+)
 create mode 100644 tests/kola/networking/force-persist-ip/config.bu
 create mode 120000 tests/kola/networking/force-persist-ip/data/commonlib.sh
 create mode 100755 tests/kola/networking/force-persist-ip/test.sh
 create mode 100644 tests/kola/networking/prefer-ignition-networking/config.bu
 create mode 120000 tests/kola/networking/prefer-ignition-networking/data/commonlib.sh
 create mode 100755 tests/kola/networking/prefer-ignition-networking/test.sh

diff --git a/tests/kola/networking/force-persist-ip/config.bu b/tests/kola/networking/force-persist-ip/config.bu
new file mode 100644
index 0000000000..a40fc39d59
--- /dev/null
+++ b/tests/kola/networking/force-persist-ip/config.bu
@@ -0,0 +1,16 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/NetworkManager/system-connections/ens5.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=ens5
+          type=ethernet
+          interface-name=ens5
+          [ipv4]
+          dns-search=
+          may-fail=false
+          method=auto
diff --git a/tests/kola/networking/force-persist-ip/data/commonlib.sh b/tests/kola/networking/force-persist-ip/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/force-persist-ip/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
new file mode 100755
index 0000000000..6f90b70ce2
--- /dev/null
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# Setup configuration for a single NIC with two different ways:
+# - kargs provide static network config for ens5 and also coreos.force_persist_ip
+# - ignition provides dhcp network config for ens5
+# Expected result:
+# - with coreos.force_persist_ip ip=kargs win, verify that 
+#   ens5 has the static IP address via kargs
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8 coreos.force_persist_ip"}
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Verify ens5 get staic ip via kargs
+nic_name="ens5"
+nic_ip=""
+get_ip_for_nic ${nic_name}
+if [ ${nic_ip} != "10.10.10.10" ]; then
+    fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.10.10.10"
+fi
+ok "get ${nic_name} ip is 10.10.10.10"
+
+syscon="/etc/NetworkManager/system-connections"
+if [ ! -f "${syscon}/${nic_name}.nmconnection" ]; then
+    fatal "Error: can not find ${syscon}/${nic_name}.nmconnection"
+fi
+ok "find ${syscon}/${nic_name}.nmconnection"
+
+# Verify logs
+if ! journalctl -b 0 -u coreos-teardown-initramfs | \
+     grep -q "info: coreos.force_persist_ip detected: will force network config propagation"; then
+  fatal "Error: force network config propagation not work"
+fi
+ok "force network config propagation"
diff --git a/tests/kola/networking/prefer-ignition-networking/config.bu b/tests/kola/networking/prefer-ignition-networking/config.bu
new file mode 100644
index 0000000000..a40fc39d59
--- /dev/null
+++ b/tests/kola/networking/prefer-ignition-networking/config.bu
@@ -0,0 +1,16 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/NetworkManager/system-connections/ens5.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=ens5
+          type=ethernet
+          interface-name=ens5
+          [ipv4]
+          dns-search=
+          may-fail=false
+          method=auto
diff --git a/tests/kola/networking/prefer-ignition-networking/data/commonlib.sh b/tests/kola/networking/prefer-ignition-networking/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/networking/prefer-ignition-networking/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
new file mode 100755
index 0000000000..a9648415f3
--- /dev/null
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# Setup configuration for a single NIC with two different ways:
+# - kargs provide static network config for ens5 without coreos.force_persist_ip
+# - ignition provides dhcp network config for ens5
+# Expected result:
+# - without coreos.force_persist_ip Ignition networking 
+#   configuration wins, verify that ens5 gets ip via dhcp
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8"}
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Verify ens5 get ip address via dhcp
+nic_name="ens5"
+nic_ip=""
+get_ip_for_nic ${nic_name}
+if [ ${nic_ip} != "10.0.2.31" ]; then
+    fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.0.2.31"
+fi
+ok "get ${nic_name} ip is 10.0.2.31"
+
+syscon="/etc/NetworkManager/system-connections"
+if [ ! -f "${syscon}/${nic_name}.nmconnection" ]; then
+    fatal "Error: can not find ${syscon}/${nic_name}.nmconnection"
+fi
+ok "find ${syscon}/${nic_name}.nmconnection"

From 44b1c527d71eb63b05af153f56d70edd6f9e44a1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 3 Jan 2022 13:20:12 +0100
Subject: [PATCH 0646/2157] tests: Add OS extensions test

Ensure that we can install common tools that are not strictly required
for operation but do not really make sense to run from a container and
are usually useful as overlayed packages/OS extensions.
---
 tests/kola/extensions/data/commonlib.sh |  1 +
 tests/kola/extensions/test.sh           | 34 +++++++++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 120000 tests/kola/extensions/data/commonlib.sh
 create mode 100755 tests/kola/extensions/test.sh

diff --git a/tests/kola/extensions/data/commonlib.sh b/tests/kola/extensions/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/extensions/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/extensions/test.sh b/tests/kola/extensions/test.sh
new file mode 100755
index 0000000000..ce7a99dbd5
--- /dev/null
+++ b/tests/kola/extensions/test.sh
@@ -0,0 +1,34 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
+# kola: { "distros": "fcos", "tags": "needs-internet" }
+#
+# This test ensures that we can install some common tools as OS extensions.
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+commands=(
+  'gdb'
+  'htop'
+  'strace'
+  'tcpdump'
+  'tree'
+  'vim'
+)
+
+rpm-ostree install --apply-live "${commands[@]}"
+
+failed=""
+
+for c in "${commands[@]}"; do
+  if [[ -z "$(command -v "${c}")" ]]; then
+    echo "Could not find: ${c}"
+    failed+=" ${1}"
+  fi
+done
+
+if [[ -n "${failed}" ]]; then
+  fatal "could not install: ${failed}"
+fi
+ok "successfully installed os extensions"

From 104ecf16b17c1871096daabba91a65638c7ce04e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 4 Jan 2022 15:37:36 -0500
Subject: [PATCH 0647/2157] kola-denylist: snooze karg networking tests on
 rawhide

They are failing right now because `systemd-network-generator` is
having issues writing files because of SELinux. See:

- https://github.com/coreos/fedora-coreos-tracker/issues/1059
- https://bugzilla.redhat.com/show_bug.cgi?id=2037047
---
 kola-denylist.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 26e199eae4..d6ef79d6e2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -24,3 +24,13 @@
   snooze: 2022-01-10
   streams:
     - rawhide
+- pattern: ext.config.networking.prefer-ignition-networking
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+  snooze: 2022-01-25
+  streams:
+    - rawhide
+- pattern: ext.config.networking.force-persist-ip
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+  snooze: 2022-01-25
+  streams:
+    - rawhide

From 8c755c34e3d81bf8fc5e1e4b3194445e147d8e4a Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 21 Dec 2021 15:20:55 +0800
Subject: [PATCH 0648/2157] var-mount: verify udev rules /dev/disk/by-id/scsi-*
 symlinks present in initramfs

Add test script for https://bugzilla.redhat.com/show_bug.cgi?id=1990506
---
 tests/kola/var-mount/scsi-id/config.bu        | 16 ++++++++
 .../kola/var-mount/scsi-id/data/commonlib.sh  |  1 +
 tests/kola/var-mount/scsi-id/test.sh          | 37 +++++++++++++++++++
 3 files changed, 54 insertions(+)
 create mode 100644 tests/kola/var-mount/scsi-id/config.bu
 create mode 120000 tests/kola/var-mount/scsi-id/data/commonlib.sh
 create mode 100755 tests/kola/var-mount/scsi-id/test.sh

diff --git a/tests/kola/var-mount/scsi-id/config.bu b/tests/kola/var-mount/scsi-id/config.bu
new file mode 100644
index 0000000000..97677034a1
--- /dev/null
+++ b/tests/kola/var-mount/scsi-id/config.bu
@@ -0,0 +1,16 @@
+variant: fcos
+version: 1.4.0
+storage:
+  disks:
+    - device: /dev/disk/by-id/scsi-0NVME_VirtualMultipath_disk1
+      wipe_table: true
+      partitions:
+        - number: 1
+          label: var
+  filesystems:
+    - path: /var
+      device: /dev/disk/by-partlabel/var
+      format: xfs
+      wipe_filesystem: true
+      label: var
+      with_mount_unit: true
\ No newline at end of file
diff --git a/tests/kola/var-mount/scsi-id/data/commonlib.sh b/tests/kola/var-mount/scsi-id/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/var-mount/scsi-id/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
new file mode 100755
index 0000000000..b3aabc02e6
--- /dev/null
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -0,0 +1,37 @@
+#!/bin/bash
+set -xeuo pipefail
+# This is to verify udev rules /dev/disk/by-id/scsi-* 
+# symlinks present in initramfs
+# https://bugzilla.redhat.com/show_bug.cgi?id=1990506
+
+# kola: {"platforms": "qemu", "additionalDisks": ["5G:mpath"]}
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+fstype=$(findmnt -nvr /var -o FSTYPE)
+if [ $fstype != xfs ]; then
+    fatal "Error: /var fstype is $fstype, expected is xfs"
+fi
+
+source /etc/os-release
+ostree_conf=""
+if [ "$ID" == "fedora" ]; then
+    ostree_conf="/boot/loader.1/entries/ostree-1-fedora-coreos.conf"
+elif [ "$ID" == "rhcos" ]; then
+    ostree_conf="/boot/loader.1/entries/ostree-1-rhcos.conf"
+else
+    fatal "fail: not operating on expected OS"
+fi
+
+initramfs=/boot$(grep initrd ${ostree_conf} | sed 's/initrd //g')
+tempfile=$(mktemp)
+lsinitrd $initramfs > $tempfile
+if ! grep -q "61-scsi-sg3_id.rules" $tempfile; then
+    fatal "Error: can not find 61-scsi-sg3_id.rules in $initramfs"
+fi
+
+if ! grep -q "63-scsi-sg3_symlink.rules" $tempfile; then
+    fatal "Error: can not find 63-scsi-sg3_symlink.rules in $initramfs"
+fi
+
+rm -f $tempfile

From 0409b297baa2088d497d795b62600a418bced75d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 5 Jan 2022 10:47:21 -0500
Subject: [PATCH 0649/2157] tests: Limit kola networking karg tests to x86_64
 for now

These tests fail on aarch64 becaue the interface names are different.
Limit to x86_64 for now. See https://github.com/coreos/fedora-coreos-tracker/issues/1060
---
 tests/kola/networking/force-persist-ip/test.sh           | 4 +++-
 tests/kola/networking/prefer-ignition-networking/test.sh | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 6f90b70ce2..ece55599da 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -9,7 +9,9 @@ set -xeuo pipefail
 #   ens5 has the static IP address via kargs
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8 coreos.force_persist_ip"}
+# These tests fail on aarch64. Limit to x86_64 for now:
+# 	- https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8 coreos.force_persist_ip", "architectures": "x86_64"}
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index a9648415f3..6e07171c1d 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -9,7 +9,9 @@ set -xeuo pipefail
 #   configuration wins, verify that ens5 gets ip via dhcp
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8"}
+# These tests fail on aarch64. Limit to x86_64 for now:
+# 	- https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8", "architectures": "x86_64"}
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From a522e62aede5a454039618c2dcbd7655898396fd Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 29 Nov 2021 21:51:20 -0500
Subject: [PATCH 0650/2157] tests/kola/root-reprovision: add test for linear
 device

It's a type of RAID device, which isn't completely obvious from the name.
Mostly copied from root-reprovision/raid1.
---
 tests/kola/root-reprovision/linear/config.bu  | 14 +++++++
 .../root-reprovision/linear/data/commonlib.sh |  1 +
 tests/kola/root-reprovision/linear/test.sh    | 40 +++++++++++++++++++
 3 files changed, 55 insertions(+)
 create mode 100644 tests/kola/root-reprovision/linear/config.bu
 create mode 120000 tests/kola/root-reprovision/linear/data/commonlib.sh
 create mode 100755 tests/kola/root-reprovision/linear/test.sh

diff --git a/tests/kola/root-reprovision/linear/config.bu b/tests/kola/root-reprovision/linear/config.bu
new file mode 100644
index 0000000000..4be3adf2c6
--- /dev/null
+++ b/tests/kola/root-reprovision/linear/config.bu
@@ -0,0 +1,14 @@
+variant: fcos
+version: 1.4.0
+storage:
+  raid:
+    - name: foobar
+      level: linear
+      devices:
+      - /dev/disk/by-id/virtio-disk1
+      - /dev/disk/by-id/virtio-disk2
+  filesystems:
+    - device: /dev/md/foobar
+      format: xfs
+      wipe_filesystem: true
+      label: root
diff --git a/tests/kola/root-reprovision/linear/data/commonlib.sh b/tests/kola/root-reprovision/linear/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/linear/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
new file mode 100755
index 0000000000..f5722e1abe
--- /dev/null
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+# kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+srcdev=$(findmnt -nvr / -o SOURCE)
+[[ ${srcdev} == $(realpath /dev/md/foobar) ]]
+
+blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
+[[ ${blktype} == linear ]]
+
+fstype=$(findmnt -nvr / -o FSTYPE)
+[[ ${fstype} == xfs ]]
+ok "source is XFS on linear device"
+
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      # check that ignition-ostree-growfs didn't run
+      if [ -e /run/ignition-ostree-growfs.stamp ]; then
+          fatal "ignition-ostree-growfs ran"
+      fi
+
+      # reboot once to sanity-check we can find root on second boot
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      grep root=UUID= /proc/cmdline
+      grep rd.md.uuid= /proc/cmdline
+      ok "found root kargs"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From 2ca1ef324199a96008ddcf67217c782d6b9594c4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 6 Jan 2022 04:39:58 +0000
Subject: [PATCH 0651/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/656/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f6e18aa24d..9e5e109ce2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -529,7 +529,7 @@
       "evra": "2.48-3.fc35.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-6.fc35.aarch64"
+      "evra": "0.8.2-8.fc35.aarch64"
     },
     "libcbor": {
       "evra": "0.7.0-4.fc35.aarch64"
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.1-3.fc35.aarch64"
+      "evra": "1.5.1-4.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-03T20:53:16Z",
+    "generated": "2022-01-06T04:06:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-01T21:29:04Z"
+        "generated": "2022-01-06T02:09:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-03T00:34:36Z"
+        "generated": "2022-01-06T00:59:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 582baaa768..baa922d0c7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -535,7 +535,7 @@
       "evra": "2.48-3.fc35.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-6.fc35.x86_64"
+      "evra": "0.8.2-8.fc35.x86_64"
     },
     "libcbor": {
       "evra": "0.7.0-4.fc35.x86_64"
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.1-3.fc35.x86_64"
+      "evra": "1.5.1-4.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-03T20:53:16Z",
+    "generated": "2022-01-06T04:05:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-01T21:29:52Z"
+        "generated": "2022-01-06T02:09:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-03T00:34:58Z"
+        "generated": "2022-01-06T01:00:03Z"
       }
     }
   }

From 03e6a53e039b6b2fd5779f81cb1fbe434a247b55 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 6 Jan 2022 08:52:00 -0500
Subject: [PATCH 0652/2157] overlay: update link to discussion forum

See:
- https://discussion.fedoraproject.org/t/fedora-discussion-2022-whats-new/35558
- https://github.com/coreos/fedora-coreos-tracker/pull/1063
---
 overlay.d/15fcos/usr/lib/motd.d/tracker.motd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/15fcos/usr/lib/motd.d/tracker.motd b/overlay.d/15fcos/usr/lib/motd.d/tracker.motd
index 837cc57ccf..aff5d6b42f 100644
--- a/overlay.d/15fcos/usr/lib/motd.d/tracker.motd
+++ b/overlay.d/15fcos/usr/lib/motd.d/tracker.motd
@@ -1,3 +1,3 @@
 Tracker: https://github.com/coreos/fedora-coreos-tracker
-Discuss: https://discussion.fedoraproject.org/c/server/coreos/
+Discuss: https://discussion.fedoraproject.org/tag/coreos
 

From a1f7320baf0ee1db913545f507143120230f1e94 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 6 Jan 2022 21:51:06 -0500
Subject: [PATCH 0653/2157] tests: rename commonlib function, update

Let's update `get_ip_for_nic()` to `get_ipv4_for_nic()` since we're
inspecting the ipv4 address. Let's also make it not use a shared
global variable but rather capture the return value from the function
call.
---
 tests/kola/data/commonlib.sh                           | 10 +++++-----
 tests/kola/networking/force-persist-ip/test.sh         |  3 +--
 .../kola/networking/prefer-ignition-networking/test.sh |  3 +--
 3 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index a6309263c3..9a0ffc893b 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -12,12 +12,12 @@ fatal() {
     exit 1
 }
 
-get_ip_for_nic () {
+get_ipv4_for_nic() {
     local nic_name=$1
-    nic_ip=""
-    nic_ip=`ip -j addr show ${nic_name} | jq -r '.[0].addr_info | map(select(.family == "inet")) | .[0].local'`
-    if [ -z "$nic_ip" ]; then
-        echo "Error: can not get ${nic_name} ip"
+    local ip=$(ip -j addr show ${nic_name} | jq -r '.[0].addr_info | map(select(.family == "inet")) | .[0].local')
+    if [ -z "$ip" ]; then
+        echo "Error: can not get ip for ${nic_name}"
         exit 1
     fi
+    echo $ip
 }
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index ece55599da..b834e325cd 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -17,8 +17,7 @@ set -xeuo pipefail
 
 # Verify ens5 get staic ip via kargs
 nic_name="ens5"
-nic_ip=""
-get_ip_for_nic ${nic_name}
+nic_ip=$(get_ipv4_for_nic ${nic_name})
 if [ ${nic_ip} != "10.10.10.10" ]; then
     fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.10.10.10"
 fi
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 6e07171c1d..ad45270716 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -17,8 +17,7 @@ set -xeuo pipefail
 
 # Verify ens5 get ip address via dhcp
 nic_name="ens5"
-nic_ip=""
-get_ip_for_nic ${nic_name}
+nic_ip=$(get_ipv4_for_nic ${nic_name})
 if [ ${nic_ip} != "10.0.2.31" ]; then
     fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.0.2.31"
 fi

From e1207dec843b0b4cb0e712fddd91f2606499913f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 6 Jan 2022 22:03:21 -0500
Subject: [PATCH 0654/2157] tests: use net.ifnames=0 for karg network tests

In order to allow the tests to work on both x86_64/BIOS, x86_64/UEFI
and aarch64/UEFI we use net.ifnames=0 so we can use eth1 in all
instances and it just works. Otherwise on x86_64/BIOS we get ens5
and on UEFI we get enp0s4.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1060
---
 .../kola/networking/force-persist-ip/config.bu  |  6 +++---
 tests/kola/networking/force-persist-ip/test.sh  | 17 +++++++++--------
 .../prefer-ignition-networking/config.bu        |  6 +++---
 .../prefer-ignition-networking/test.sh          | 17 +++++++++--------
 4 files changed, 24 insertions(+), 22 deletions(-)

diff --git a/tests/kola/networking/force-persist-ip/config.bu b/tests/kola/networking/force-persist-ip/config.bu
index a40fc39d59..6897419b2e 100644
--- a/tests/kola/networking/force-persist-ip/config.bu
+++ b/tests/kola/networking/force-persist-ip/config.bu
@@ -2,14 +2,14 @@ variant: fcos
 version: 1.4.0
 storage:
   files:
-    - path: /etc/NetworkManager/system-connections/ens5.nmconnection
+    - path: /etc/NetworkManager/system-connections/eth1.nmconnection
       mode: 0600
       contents:
         inline: |
           [connection]
-          id=ens5
+          id=eth1
           type=ethernet
-          interface-name=ens5
+          interface-name=eth1
           [ipv4]
           dns-search=
           may-fail=false
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index b834e325cd..437582c848 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -2,21 +2,22 @@
 set -xeuo pipefail
 
 # Setup configuration for a single NIC with two different ways:
-# - kargs provide static network config for ens5 and also coreos.force_persist_ip
-# - ignition provides dhcp network config for ens5
+# - kargs provide static network config for eth1 and also coreos.force_persist_ip
+# - ignition provides dhcp network config for eth1
 # Expected result:
 # - with coreos.force_persist_ip ip=kargs win, verify that 
-#   ens5 has the static IP address via kargs
+#   eth1 has the static IP address via kargs
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# These tests fail on aarch64. Limit to x86_64 for now:
-# 	- https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8 coreos.force_persist_ip", "architectures": "x86_64"}
+# - We use net.ifnames=0 to disable consistent network naming here because on
+#   different firmwares (BIOS vs UEFI) the NIC names are different.
+#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip" }
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Verify ens5 get staic ip via kargs
-nic_name="ens5"
+# Verify eth1 gets staic ip via kargs
+nic_name="eth1"
 nic_ip=$(get_ipv4_for_nic ${nic_name})
 if [ ${nic_ip} != "10.10.10.10" ]; then
     fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.10.10.10"
diff --git a/tests/kola/networking/prefer-ignition-networking/config.bu b/tests/kola/networking/prefer-ignition-networking/config.bu
index a40fc39d59..6897419b2e 100644
--- a/tests/kola/networking/prefer-ignition-networking/config.bu
+++ b/tests/kola/networking/prefer-ignition-networking/config.bu
@@ -2,14 +2,14 @@ variant: fcos
 version: 1.4.0
 storage:
   files:
-    - path: /etc/NetworkManager/system-connections/ens5.nmconnection
+    - path: /etc/NetworkManager/system-connections/eth1.nmconnection
       mode: 0600
       contents:
         inline: |
           [connection]
-          id=ens5
+          id=eth1
           type=ethernet
-          interface-name=ens5
+          interface-name=eth1
           [ipv4]
           dns-search=
           may-fail=false
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index ad45270716..4b7531f01c 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -2,21 +2,22 @@
 set -xeuo pipefail
 
 # Setup configuration for a single NIC with two different ways:
-# - kargs provide static network config for ens5 without coreos.force_persist_ip
-# - ignition provides dhcp network config for ens5
+# - kargs provide static network config for eth1 without coreos.force_persist_ip
+# - ignition provides dhcp network config for eth1
 # Expected result:
 # - without coreos.force_persist_ip Ignition networking 
-#   configuration wins, verify that ens5 gets ip via dhcp
+#   configuration wins, verify that eth1 gets ip via dhcp
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# These tests fail on aarch64. Limit to x86_64 for now:
-# 	- https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:ens5:none:8.8.8.8", "architectures": "x86_64"}
+# - We use net.ifnames=0 to disable consistent network naming here because on
+#   different firmwares (BIOS vs UEFI) the NIC names are different.
+#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0" }
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Verify ens5 get ip address via dhcp
-nic_name="ens5"
+# Verify eth1 gets ip address via dhcp
+nic_name="eth1"
 nic_ip=$(get_ipv4_for_nic ${nic_name})
 if [ ${nic_ip} != "10.0.2.31" ]; then
     fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.0.2.31"

From 55037178c8cbc766915b01941cbdcf0f314685e8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 7 Jan 2022 21:32:28 +0000
Subject: [PATCH 0655/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/658/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9e5e109ce2..d772c8397e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1156,10 +1156,10 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.3755-1.fc35.noarch"
+      "evra": "2:8.2.4006-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3755-1.fc35.aarch64"
+      "evra": "2:8.2.4006-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-06T04:06:03Z",
+    "generated": "2022-01-07T20:53:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-06T02:09:59Z"
+        "generated": "2022-01-06T04:42:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-06T00:59:38Z"
+        "generated": "2022-01-07T01:04:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index baa922d0c7..ef4a115753 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1168,10 +1168,10 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.3755-1.fc35.noarch"
+      "evra": "2:8.2.4006-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.3755-1.fc35.x86_64"
+      "evra": "2:8.2.4006-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-06T04:05:59Z",
+    "generated": "2022-01-07T20:53:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-06T02:09:50Z"
+        "generated": "2022-01-06T04:43:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-06T01:00:03Z"
+        "generated": "2022-01-07T01:05:02Z"
       }
     }
   }

From 0a577a1e9032df0a68bf6afcbed6897b15b69e7b Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 5 Jan 2022 15:35:52 +0800
Subject: [PATCH 0656/2157] networking: configure MTU on a VLAN subinterface
 for the bond using kernel args works

Configuring MTU on a VLAN subinterface for the bond using kernel args
- verify MTU on the bond matches config
- verify MTU on the VLAN subinterface for the bond matches config
- verify ip address on the VLAN subinterface for the bond matches config
See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
---
 tests/kola/networking/mtu-on-bond | 35 +++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100755 tests/kola/networking/mtu-on-bond

diff --git a/tests/kola/networking/mtu-on-bond b/tests/kola/networking/mtu-on-bond
new file mode 100755
index 0000000000..f41a0a68e0
--- /dev/null
+++ b/tests/kola/networking/mtu-on-bond
@@ -0,0 +1,35 @@
+#!/bin/bash
+# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: vlan=bond0.100:bond0 net.ifnames=0"}
+# - We use net.ifnames=0 to disable consistent network naming here because on
+#   different firmwares (BIOS vs UEFI) the NIC names are different.
+#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+
+# Configuring MTU on a VLAN subinterface for the bond,
+# - verify MTU on the bond matches config
+# - verify MTU on the VLAN subinterface for the bond matches config
+# - verify ip address on the VLAN subinterface for the bond matches config
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+bond="bond0"
+vlan="bond0.100"
+for interface in $bond $vlan
+do
+    mtu=""
+    # MTU is changed to 9000 by `appendKernelArgs` in `kola` above
+    mtu=$(nmcli -g 802-3-ethernet.mtu connection show ${interface})
+    if [ "${mtu}" != "9000" ]; then
+        fatal "Error: get ${interface} mtu = ${mtu}, expected is 9000"
+    fi
+    ok "${interface} mtu is correct"
+done
+
+# Verify "bond0.100" gets ip address by `appendKernelArgs` in `kola` above
+nic_ip=$(get_ipv4_for_nic ${vlan})
+if [ "${nic_ip}" != "10.10.10.10" ]; then
+    fatal "Error: get ${vlan} ip = ${nic_ip}, expected is 10.10.10.10"
+fi
+ok "get ${vlan} ip is 10.10.10.10"

From 52d4ce5b3b70301fcf37ea6a58235740b8a4ef75 Mon Sep 17 00:00:00 2001
From: Micah Abbott <micah.abbott@gmail.com>
Date: Sat, 11 Dec 2021 14:42:42 -0500
Subject: [PATCH 0657/2157] tests: add test for systemd reading files labeled
 kubernetes_file_t

Adds a test for the ability of `systemd` to read files
labeled with `kubernetes_file_t`.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
---
 .../kubernetes/systemd-env-read/config.bu     | 27 ++++++++++++++++
 .../kola/kubernetes/systemd-env-read/test.sh  | 32 +++++++++++++++++++
 2 files changed, 59 insertions(+)
 create mode 100644 tests/kola/kubernetes/systemd-env-read/config.bu
 create mode 100755 tests/kola/kubernetes/systemd-env-read/test.sh

diff --git a/tests/kola/kubernetes/systemd-env-read/config.bu b/tests/kola/kubernetes/systemd-env-read/config.bu
new file mode 100644
index 0000000000..68927604e8
--- /dev/null
+++ b/tests/kola/kubernetes/systemd-env-read/config.bu
@@ -0,0 +1,27 @@
+variant: fcos
+version: 1.2.0
+storage:
+  files:
+    - path: /etc/kubernetes/envfile
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # read by systemd
+      # See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
+      mode: 0644
+      contents:
+        inline: |
+          KUBE="FCOS"
+systemd:
+  units:
+    - name: kube-env.service
+      # This is for verifying that `kubernetes_file_t` labeled files can be
+      # read by systemd
+      # See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
+      enabled: true
+      contents: |
+        [Service]
+        EnvironmentFile=/etc/kubernetes/envfile
+        ExecStart=/usr/bin/echo ${KUBE}
+        RemainAfterExit=yes
+        Type=oneshot
+        [Install]
+        WantedBy=multi-user.target
\ No newline at end of file
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
new file mode 100755
index 0000000000..adf379aced
--- /dev/null
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# In order to verify that `kubernetes_file_t` labeled files can be read by
+# systemd, we check to see if the `kube-env` service started successfully
+# and that the service wrote to the journal successfully.
+# See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
+if [ "$( stat -c %C /etc/kubernetes/envfile)" != "system_u:object_r:kubernetes_file_t:s0" ]; then
+    fatal "/etc/kubernetes/envfile is labeled incorrectly"
+fi
+ok "/etc/kubernetes/envfile is labeled correctly"
+
+if [ "$(systemctl is-failed kube-env.service)" != "active" ]; then
+    fatal "kube-env.service failed unexpectedly"
+fi
+ok "kube-env.service successfully started"
+
+# Verify that 'FCOS' was wrtitten to the journal
+if [ "$(journalctl -o cat -u kube-env.service | sed -n 2p)" != "FCOS" ]; then
+    fatal "kube-env.service did not write 'FCOS' to journal"
+fi
+ok "kube-env.service ran and wrote 'FCOS' to the journal"
\ No newline at end of file

From 88bfdf241e4a39b5f3bb0f3cbf871cc748095a95 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 10 Jan 2022 17:30:36 +0000
Subject: [PATCH 0658/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/661/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d772c8397e..4962791fe8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.aarch64"
     },
     "git-core": {
-      "evra": "2.33.1-2.fc35.aarch64"
+      "evra": "2.34.1-1.fc35.aarch64"
     },
     "glib2": {
       "evra": "2.70.2-1.fc35.aarch64"
@@ -919,10 +919,10 @@
       "evra": "1.77-8.fc35.aarch64"
     },
     "ostree": {
-      "evra": "2021.6-3.fc35.aarch64"
+      "evra": "2022.1-1.fc35.aarch64"
     },
     "ostree-libs": {
-      "evra": "2021.6-3.fc35.aarch64"
+      "evra": "2022.1-1.fc35.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "4.17.0-1.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2021.14-2.fc35.aarch64"
+      "evra": "2022.1-2.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.14-2.fc35.aarch64"
+      "evra": "2022.1-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.7-1.fc35.noarch"
+      "evra": "35.8-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.7-1.fc35.noarch"
+      "evra": "35.8-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-07T20:53:47Z",
+    "generated": "2022-01-10T16:34:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-06T04:42:02Z"
+        "generated": "2022-01-07T21:34:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-07T01:04:41Z"
+        "generated": "2022-01-10T00:55:13Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef4a115753..6d3872fa4e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.x86_64"
     },
     "git-core": {
-      "evra": "2.33.1-2.fc35.x86_64"
+      "evra": "2.34.1-1.fc35.x86_64"
     },
     "glib2": {
       "evra": "2.70.2-1.fc35.x86_64"
@@ -931,10 +931,10 @@
       "evra": "1.77-8.fc35.x86_64"
     },
     "ostree": {
-      "evra": "2021.6-3.fc35.x86_64"
+      "evra": "2022.1-1.fc35.x86_64"
     },
     "ostree-libs": {
-      "evra": "2021.6-3.fc35.x86_64"
+      "evra": "2022.1-1.fc35.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "4.17.0-1.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2021.14-2.fc35.x86_64"
+      "evra": "2022.1-2.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2021.14-2.fc35.x86_64"
+      "evra": "2022.1-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-1.fc35.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.7-1.fc35.noarch"
+      "evra": "35.8-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.7-1.fc35.noarch"
+      "evra": "35.8-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-07T20:53:44Z",
+    "generated": "2022-01-10T16:34:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-06T04:43:24Z"
+        "generated": "2022-01-07T21:35:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-07T01:05:02Z"
+        "generated": "2022-01-10T00:55:36Z"
       }
     }
   }

From a2c6dbff790a7ce460c5e558ada698761dc28ba3 Mon Sep 17 00:00:00 2001
From: Christian Glombek <cglombek@redhat.com>
Date: Wed, 5 Jan 2022 20:59:49 +0100
Subject: [PATCH 0659/2157] tests: Add OS module extensions test

Ensure that we can install commonly used RPM modules as overlay.
---
 tests/kola/extensions/module               | 34 ++++++++++++++++++++++
 tests/kola/extensions/{test.sh => package} |  2 +-
 2 files changed, 35 insertions(+), 1 deletion(-)
 create mode 100755 tests/kola/extensions/module
 rename tests/kola/extensions/{test.sh => package} (92%)

diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
new file mode 100755
index 0000000000..3562a5de5a
--- /dev/null
+++ b/tests/kola/extensions/module
@@ -0,0 +1,34 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
+# kola: { "distros": "fcos", "tags": "needs-internet" }
+#
+# This test ensures that we can install some common tools as OS extensions.
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Note: This version must be kept up to date for now, since there currently is no 'latest' (or similar) stream
+CRIO_VERSION=1.22
+
+declare -A commands=(
+  ["cri-o:${CRIO_VERSION}/default"]="crio"
+  ["nginx:mainline"]="nginx"
+)
+
+rpm-ostree ex module install "${!commands[@]}"
+rpm-ostree ex apply-live
+
+failed=""
+
+for m in "${!commands[@]}"; do
+  if [[ -z "$(command -v "${commands[$m]}")" ]]; then
+    echo "Could not find: ${commands[$m]}"
+    failed+=" ${1}"
+  fi
+done
+
+if [[ -n "${failed}" ]]; then
+  fatal "could not install: ${failed}"
+fi
+ok "successfully installed os rpm module extensions"
diff --git a/tests/kola/extensions/test.sh b/tests/kola/extensions/package
similarity index 92%
rename from tests/kola/extensions/test.sh
rename to tests/kola/extensions/package
index ce7a99dbd5..ec5f2b2f38 100755
--- a/tests/kola/extensions/test.sh
+++ b/tests/kola/extensions/package
@@ -31,4 +31,4 @@ done
 if [[ -n "${failed}" ]]; then
   fatal "could not install: ${failed}"
 fi
-ok "successfully installed os extensions"
+ok "successfully installed os rpm package extensions"

From 11ec3b601acec7e8a8d1e2fd730c14aff07ae24d Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Wed, 22 Dec 2021 15:47:36 -0500
Subject: [PATCH 0660/2157] tests: Uniform layout for kola test cases

Formatted the comments in the test cases following a
standard layout

Fixes https://github.com/coreos/fedora-coreos-config/pull/1351
JIRA : https://issues.redhat.com/browse/COS-935
---
 README.md                                       | 17 +++++++++++++++++
 tests/kola/boot/bootupd                         |  9 +++++----
 .../chrony/coreos-platform-chrony-generator     |  4 ++--
 ...coreos-platform-chrony-generator-permissions |  1 +
 tests/kola/chrony/dhcp-propagation              |  3 +--
 tests/kola/containers/cgroups-v2                |  3 ++-
 tests/kola/disks/root-boot-ro                   |  1 +
 tests/kola/disks/root-prjquota                  |  1 +
 tests/kola/disks/systemd-repart-service         |  5 +++--
 tests/kola/disks/tmpfs                          |  1 +
 tests/kola/files/aleph-version                  |  1 +
 tests/kola/files/dracut-executable              |  1 +
 tests/kola/files/etc-passwd-group-permissions   |  2 +-
 tests/kola/files/file-directory-permissions     |  1 +
 tests/kola/files/kernel-headers                 |  9 +++++----
 tests/kola/files/license                        |  1 +
 tests/kola/files/logrotate-service              |  3 ++-
 tests/kola/files/remove-manifest-files          |  3 ++-
 tests/kola/files/root-immutable-bit             |  1 +
 tests/kola/files/rpmdb-sqlite                   |  3 ++-
 tests/kola/files/setuid                         |  1 +
 tests/kola/files/sudoers-permissions            |  1 +
 tests/kola/files/system-generators              |  8 +++++---
 tests/kola/files/trust-cpu                      |  1 +
 tests/kola/files/unlabeled-contexts             |  1 +
 tests/kola/files/yum-repo-dir                   |  1 +
 tests/kola/firewall/iptables-legacy             |  3 ++-
 tests/kola/ignition/remote/test.sh              |  5 ++---
 .../systemd-enable-instance-unit/test.sh        |  5 +++--
 tests/kola/ignition/systemd-unmasking/test.sh   |  6 +++---
 tests/kola/k8s/node-e2e/master                  |  6 ++++--
 tests/kola/kdump/crash                          |  5 +++--
 tests/kola/kdump/service                        |  5 +++--
 tests/kola/kubernetes/kube-watch/test.sh        |  9 +++++----
 tests/kola/multipath/multipathd-service-fix     |  3 ++-
 tests/kola/multipath/multipathd-socket-fix      |  3 ++-
 .../default-network-behavior-change/test.sh     |  4 ++--
 tests/kola/networking/dnsmasq-service           |  3 ++-
 tests/kola/networking/network-online-service    |  1 +
 tests/kola/networking/nic-naming                |  3 +--
 tests/kola/networking/nm-dhcp-client            |  1 +
 tests/kola/networking/nm-start                  |  1 +
 .../test.sh                                     |  4 ++--
 tests/kola/networking/stub-resolve.sh           |  3 ++-
 tests/kola/podman/rootless-systemd              |  8 ++++----
 tests/kola/reboot/test.sh                       |  4 ++--
 .../root-reprovision/filesystem-only/test.sh    |  1 +
 tests/kola/root-reprovision/luks/test.sh        |  1 +
 tests/kola/root-reprovision/raid1/test.sh       |  1 +
 .../root-reprovision/swap-before-root/test.sh   |  3 ++-
 tests/kola/rpm-ostree-countme/test.sh           |  6 +++---
 .../security/coreos-update-ca-trust/test.sh     |  1 +
 tests/kola/security/passwd/test.sh              |  2 +-
 tests/kola/selinux/enforcing                    |  1 +
 tests/kola/selinux/usrlocal-context             |  1 +
 tests/kola/swap/zram-default                    |  3 ++-
 tests/kola/swap/zram-generator/test.sh          |  3 ++-
 tests/kola/toolbox/test.sh                      |  3 +--
 58 files changed, 125 insertions(+), 66 deletions(-)

diff --git a/README.md b/README.md
index 5c8b31e9bc..8e2915e55e 100644
--- a/README.md
+++ b/README.md
@@ -142,3 +142,20 @@ Pull requests submitted to this repo are tested by
 [CoreOS CI](https://github.com/coreos/coreos-ci). You can see the pipeline
 executed in `.cci.jenkinsfile`. For more information, including interacting with
 CI, see the [CoreOS CI documentation](https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md).
+
+## Tests layout
+Tests should follow the following format:
+
+#!/bin/bash
+# kola: { "exclusive": false }    <-- kola option comment. See all options in <https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson>
+# Short summary of what the test does, why we need it, etc.
+# Should also explain the reasons behind the non-obvious options selected above.
+# Optional: Link to corresponding issue or PR
+
+set -euxo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+foo_bar()    <-- Other function definitions
+
+if ...    <-- Actual test code. Errors must be raised with `fatal()`. Does not need to end with a call to `ok()`
\ No newline at end of file
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 1f2b0c9661..f30cf4989a 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -1,15 +1,16 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+# This is just a basic sanity check; at some point we
+# will implement "project-owned tests run in the pipeline"
+# and be able to run the existing bootupd tests:
+# https://github.com/coreos/fedora-coreos-config/pull/677
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
 case "$(arch)" in
     x86_64|aarch64)
-        # This is just a basic sanity check; at some point we
-        # will implement "project-owned tests run in the pipeline"
-        # and be able to run the existing bootupd tests:
-        # https://github.com/coreos/fedora-coreos-config/pull/677
         bootupctl status
         ok bootupctl
         ;;
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index 050a19c42e..859617bbd3 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -1,8 +1,8 @@
 #!/bin/bash
-set -euo pipefail
+# kola: { "exclusive": false, "platforms": "aws azure gcp" }
 # Test the coreos-platform-chrony generator.
 
-# kola: { "exclusive": false, "platforms": "aws azure gcp" }
+set -xeuo pipefail
 
 platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
 case "${platform}" in
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
index a7101d3b6e..6942ddfdeb 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator-permissions
+++ b/tests/kola/chrony/coreos-platform-chrony-generator-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index db1d353024..a0758f3d49 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -1,5 +1,5 @@
 #!/bin/bash
-
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
 # This script creates two veth interfaces i.e. one for the host machine 
 # and other for the container(dnsmasq server). This setup will be helpful
 # to verify the DHCP propagation of NTP servers. This will also avoid any 
@@ -10,7 +10,6 @@ set -xeuo pipefail
 
 # Just run on QEMU; it should work theoretically on cloud platforms, but many
 # of those have platform-specific sources which take precedence.
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
 test_setup() {
 
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index 7c308cb1fa..1549393826 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -1,8 +1,9 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS because RHCOS does not currently support cgroupsv2
 # by default.
 # TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
index 56abbebf75..41f81fc0d3 100755
--- a/tests/kola/disks/root-boot-ro
+++ b/tests/kola/disks/root-boot-ro
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
index e57fdf108c..4032037114 100755
--- a/tests/kola/disks/root-prjquota
+++ b/tests/kola/disks/root-prjquota
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index d21776f4a5..307c8ff327 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -1,9 +1,10 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS because the version of `systemd-udev` in RHCOS does
 # not include `systemd-repart`
 # TODO-RHCOS: consider dropping the "fcos" tag if/when `systemd-udev` in RHEL
-#             starts to include `systemd-repart`
-# kola: { "distros": "fcos", "exclusive": false }
+# starts to include `systemd-repart`
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
index 5b989e7278..8d3af04481 100755
--- a/tests/kola/disks/tmpfs
+++ b/tests/kola/disks/tmpfs
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index ee69eabc68..3819e7b235 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/dracut-executable b/tests/kola/files/dracut-executable
index 71bb857926..95265953d3 100755
--- a/tests/kola/files/dracut-executable
+++ b/tests/kola/files/dracut-executable
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
index 849d5e245e..e2d1574b13 100755
--- a/tests/kola/files/etc-passwd-group-permissions
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
@@ -11,4 +12,3 @@ for f in '/etc/passwd' '/etc/group'; do
     fi
 done
 ok "correct ownership and mode on /etc/passwd & /etc/group"
-
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index a05928de4e..08e86f4464 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index e36a6b762e..ecf1f16762 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -1,13 +1,14 @@
 #!/bin/bash
 # kola: { "exclusive": false }
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
 # check that we are not including the kernel headers on the host
 # See:
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
 # - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
 if test -d /usr/include/linux; then
    fatal "Error: should not have kernel headers on host"
 fi
diff --git a/tests/kola/files/license b/tests/kola/files/license
index cbb20b45e6..1f31ca2c08 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index 3b1d87ace5..8e0d1f7680 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -1,10 +1,11 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+# Test some services are enabled or disabled appropriately
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Test some services are enabled or disabled appropriately
 for unit in logrotate logrotate.timer; do
     if ! systemctl is-enabled ${unit} 1>/dev/null; then
         fatal "Unit ${unit} should be enabled"
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index 12203a031e..f858be3a0e 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -1,8 +1,9 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS bceause RHCOS does ship `info` which is a
 # Requires on a number of RHCOS packages.
 # TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index f65c8a32e2..e4d81d8649 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 0526a146cd..3479ddf094 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -1,7 +1,8 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS as the RHCOS rpmdb has not migrated to sqlite yet.
 # TODO-RHCOS: drop the "fcos" tag when RHCOS migrates to using sqlite
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 5511a78bba..4393fb234b 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/sudoers-permissions b/tests/kola/files/sudoers-permissions
index a84be0dc03..58d9d8c61a 100755
--- a/tests/kola/files/sudoers-permissions
+++ b/tests/kola/files/sudoers-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index 50e14549fd..10795ae23a 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -1,13 +1,15 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
 # Make sure files in /usr/lib/systemd/system-generators have exec mode
-find /usr/lib/systemd/system-generators -type f | while read f; do
-    if ! test -x $f; then
-        fatal "Error: generator is not executable: $f"
+find /usr/lib/systemd/system-generators -type f | while read -r f; do
+    mode=$(stat -c '%a' "${f}")
+    if [[ "${mode}" != 555 ]] && [[ "${mode}" != 755 ]]; then
+        fatal "Error: generator is not executable: ${f}. Expected mode 555 or 755, found ${mode}"
     fi
 done
 ok "system-generators are executable"
diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
index 9c9c7c866f..827dffdd0a 100755
--- a/tests/kola/files/trust-cpu
+++ b/tests/kola/files/trust-cpu
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index 82c04d15a9..bf918bb02a 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
index 46e5d3070e..ff06413695 100755
--- a/tests/kola/files/yum-repo-dir
+++ b/tests/kola/files/yum-repo-dir
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
index 2b1bf34d93..594f691a5d 100755
--- a/tests/kola/firewall/iptables-legacy
+++ b/tests/kola/firewall/iptables-legacy
@@ -1,9 +1,10 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test is currently scoped to only FCOS because the RHCOS version of `iptables`
 # is using the `nf_tables` backend.
 # TODO: modify this test to check for `nf_tables` backend when FCOS switches.
 #       See https://github.com/coreos/fedora-coreos-config/pull/1324
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index dc01bc0b42..2ddf424349 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -1,11 +1,10 @@
 #!/bin/bash
-set -xeuo pipefail
-
+# kola: { "tags": "needs-internet" }
 # To test https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 # remote.ign on github: inject kernelArguments and write something to /etc/testfile
 # config.ign to include remote kargsfile.ign
 
-# kola: { "tags": "needs-internet" }
+set -xeuo pipefail
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/ignition/systemd-enable-instance-unit/test.sh b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
index 4b9e741014..dc031639b9 100755
--- a/tests/kola/ignition/systemd-enable-instance-unit/test.sh
+++ b/tests/kola/ignition/systemd-enable-instance-unit/test.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -xeuo pipefail
+# kola: { "platforms": "qemu-unpriv" }
 
 # This test makes sure that ignition is able to enable instance units.
 # https://github.com/coreos/ignition/issues/586
@@ -7,7 +7,8 @@ set -xeuo pipefail
 
 # We don't need to test this on every platform. If it passes in
 # one place it will pass everywhere.
-# kola: { "platforms": "qemu-unpriv" }
+
+set -xeuo pipefail
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 760c7057f9..bd71bb6e02 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
-set -xeuo pipefail
-
+# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
 # This test makes sure that ignition is able to unmask units
 # It just so happens we have masked dnsmasq in FCOS so we can
 # test this by unmasking it.
@@ -10,7 +9,8 @@ set -xeuo pipefail
 # This test is currently scoped to FCOS because `dnsmasq` is not masked
 # on RHCOS.
 # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
-# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
+
+set -xeuo pipefail
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index a87e7a1ad9..a575717ea9 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -1,5 +1,7 @@
 #!/bin/bash
-set -xeuo pipefail
-# Just run on x86_64 for now. We'd need multi-arch images with go 1.17.
 # kola: {"minMemory": 4096, "timeoutMin": 45, "minDisk": 20, "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
+# Just run on x86_64 for now. We'd need multi-arch images with go 1.17.
+
+set -xeuo pipefail
+
 exec "${KOLA_EXT_DATA}/node-e2e" "${KOLA_TEST_EXE}"
diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash
index 65820e21cc..209736c762 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash
@@ -1,9 +1,10 @@
 #!/bin/bash
-set -xeuo pipefail
+# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64"}
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 # Only run on QEMU x86_64 for now:
 # https://github.com/coreos/fedora-coreos-tracker/issues/860
-# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64"}
+
+set -xeuo pipefail
 
 fatal() {
     echo "$@" >&2
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 16b2d2bae9..78a9afd3b2 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -1,11 +1,12 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+# Make sure that kdump didn't start (it's either disabled, or enabled but
+# conditional on crashkernel= karg, which we don't bake).
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Make sure that kdump didn't start (it's either disabled, or enabled but
-# conditional on crashkernel= karg, which we don't bake).
 if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive; then
     fatal "Unit kdump.service shouldn't be active"
 fi
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index 15cc8f1537..dec4c1ae1d 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -1,13 +1,14 @@
 #!/bin/bash
 # kola: { "exclusive": false }
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
 # This is for verifying that `kubernetes_file_t` labeled files can be
 # watched by systemd
 # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
 # See: https://github.com/containers/container-selinux/issues/135
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
 if [ "$(systemctl is-active kube-watch.path)" != "active" ]; then
     fatal "kube-watch.path did not activate successfully"
 fi
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index 820c26cab5..9fb9e9ed98 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -1,6 +1,7 @@
 #!/bin/bash
-# Just run on qemu since the answer is the same everywhere
 # kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+# Just run on qemu since the answer is the same everywhere
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/multipath/multipathd-socket-fix b/tests/kola/multipath/multipathd-socket-fix
index 23f28edb78..ae58123a20 100755
--- a/tests/kola/multipath/multipathd-socket-fix
+++ b/tests/kola/multipath/multipathd-socket-fix
@@ -1,6 +1,7 @@
 #!/bin/bash
-# Just run on qemu since the answer is the same everywhere
 # kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+# Just run on qemu since the answer is the same everywhere
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index f1186f88ea..802bdd9ef5 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
-# No need to run on any other platform than QEMU.
 # kola: { "exclusive": false, "platforms": "qemu-unpriv" }
+# No need to run on any other platform than QEMU.
+
 set -xeuo pipefail
 
 # Since we depend so much on the default networking configurations let's
@@ -152,5 +153,4 @@ GENERATED_REALROOT_NETWORK_CFG=$(normalize_connection_file \
 if ! diff -u <(echo "$EXPECTED_REALROOT_NETWORK_CFG") <(echo "$GENERATED_REALROOT_NETWORK_CFG"); then
     fatal "fail: the expected realroot network config is not given by the kargs"
 fi
-
 ok "success: expected network configs were generated"
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index 04e3c3c31a..a9dc3e6ccf 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -1,8 +1,9 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS because the `dnsmasq` service on RHCOS is simply
 # disabled, not masked.
 # TODO-RHCOS: adapt test to check that `dnsmasq` is in the proper state on RHCOS
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index f4d5efa9cd..a615a2ca7c 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 0d5c09c738..7af6d5acb0 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -1,5 +1,5 @@
 #!/bin/bash
-
+# kola: { "exclusive": false, "platforms": "!azure" }
 # Disable on azure because of a limitation of the hv_netvsc driver
 # there. According to [1] and [2] the driver does not provide sufficient
 # information to systemd-udev for systemd's naming to work. It falls
@@ -8,7 +8,6 @@
 # [1] https://access.redhat.com/solutions/3204751
 # [2] https://github.com/Azure/WALinuxAgent/issues/1877
 
-# kola: { "exclusive": false, "platforms": "!azure" }
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
index e91535951c..4ab6a399c2 100755
--- a/tests/kola/networking/nm-dhcp-client
+++ b/tests/kola/networking/nm-dhcp-client
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index a0df67b14e..19b914f3b2 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
index 6a72d9581e..c143449eb4 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
 # kola: { "exclusive": false }
-set -xeuo pipefail
-
 # With pure network defaults no networking should have been propagated
 # from the initramfs. This test tries to verify that is the case.
 # https://github.com/coreos/fedora-coreos-tracker/issues/696
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 if ! journalctl -t coreos-teardown-initramfs | \
diff --git a/tests/kola/networking/stub-resolve.sh b/tests/kola/networking/stub-resolve.sh
index ec345332e2..c4c87d9bc0 100755
--- a/tests/kola/networking/stub-resolve.sh
+++ b/tests/kola/networking/stub-resolve.sh
@@ -1,7 +1,8 @@
 #!/usr/bin/env bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS because `systemd-resolved` is not installed on
 # RHCOS
-# kola: { "distros": "fcos", "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 51447f4733..6d1c84208a 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,5 +1,5 @@
 #!/bin/bash
-
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 # This script runs a rootless podman container with systemd inside
 # that brings up httpd. Tests that rootless+systemd works. See issue:
 # https://github.com/containers/podman/issues/7441
@@ -7,18 +7,18 @@
 # If it gets easy to change the kargs in the future we should try this
 # both on cgroups v1 and cgroups v2.
 
-set -euxo pipefail
-
 # Just run on QEMU for now. If this test works in one place it should
 # work everywhere.
 # The test is scoped to only FCOS because the `--retry-all-errors` flag passed
 # to `curl` is not avaiable on the version in RHCOS.
 # TODO-RHCOS: adapt test to conditionally use the `-retry-all-errors` flag on
 # only FCOS
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 
 # Script to be executed as the `core` user to build and
 # run a rootless podman container that uses systemd inside.
+
+set -xeuo pipefail
+
 runascoreuserscript='
 #!/bin/bash
 set -euxo pipefail
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index e6f7324955..9d9fa0b9e8 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,10 +1,10 @@
 #!/bin/bash
-set -xeuo pipefail
 # kola: {"platforms": "qemu"}
-
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 # /var
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 699b2b92f3..696b0f5ac3 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: {"platforms": "qemu", "minMemory": 4096}
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index fd48ab8bde..416cb67a05 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index d26eb03d5d..89fda1e5d8 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index a2979b3c68..569a4d1a2b 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,7 +1,8 @@
 #!/bin/bash
+# kola: {"distros": "fcos", "platforms": "qemu", "minMemory": 4096}
 # This test only runs on FCOS due to a problem enabling a swap partition on
 # RHCOS.  See: https://github.com/openshift/os/issues/665
-# kola: {"distros": "fcos", "platforms": "qemu", "minMemory": 4096}
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 9da0077942..c859ffd732 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
-set -xeuo pipefail
-
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
 # No need to run on any other platform than QEMU.
 # This test only runs on FCOS because countme support is not available in RHCOS
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
+
+set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
index c6e0333a52..e3fe4ca9a3 100755
--- a/tests/kola/security/coreos-update-ca-trust/test.sh
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index 1d702cb3c4..f4433e837c 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": false }
 # This test only runs on FCOS because RHCOS does not support `yescrypt`
 # TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
-# kola: { "distros": "fcos", "exclusive": false }
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index e1c60e82c4..a866024064 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index 8771cccd75..bd1f717f55 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -1,5 +1,6 @@
 #!/bin/bash
 # kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index a616456642..4c61eb8b80 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -1,7 +1,8 @@
 #!/bin/bash
+# kola: { "exclusive": false }
 # We can run this on both FCOS and RHCOS as neither should have a zram device
 # enabled by default. (In RHCOS, there is no zram support at all)
-# kola: { "exclusive": false }
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index b7b0d82990..a610a0cd79 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -1,7 +1,8 @@
 #!/bin/bash
+# kola: { "distros": "fcos", "exclusive": true}
 # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
 # This test only runs on FCOS because RHCOS does not have zram support.
-# kola: { "distros": "fcos", "exclusive": true}
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 46e7b6e3ca..7ea3360655 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
 # Make sure that basic toolbox functionnality is working:
 # - Creating a toolbox
 # - Running a command in a toolbox
@@ -17,7 +17,6 @@
 # Additionally, there are some distro specific choices made for this test that
 # should/could be adpated for RHCOS.
 # TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
 
 set -xeuo pipefail
 

From b48a93fba7474e46f5b7d862527981ebd9d145ed Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 4 Jan 2022 22:10:21 -0500
Subject: [PATCH 0661/2157] README: fix double slash in some links

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 8e2915e55e..39c1692571 100644
--- a/README.md
+++ b/README.md
@@ -14,8 +14,8 @@ https://github.com/coreos/fedora-coreos-tracker.
 There is one branch for each stream. The default branch is
 [`testing-devel`](https://github.com/coreos/fedora-coreos-config/commits/testing-devel),
 on which all development happens. See
-[the design](https://github.com/coreos/fedora-coreos-tracker/blob/main//Design.md#release-streams)
-and [tooling](https://github.com/coreos/fedora-coreos-tracker/blob/main//stream-tooling.md)
+[the design](https://github.com/coreos/fedora-coreos-tracker/blob/main/Design.md#release-streams)
+and [tooling](https://github.com/coreos/fedora-coreos-tracker/blob/main/stream-tooling.md)
 docs for more information about streams.
 
 All file changes in `testing-devel` are propagated to other

From 7fb07191483cc6bf4c7b4e60ff2120aa1f3a2ab4 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 20 Dec 2021 21:11:43 -0500
Subject: [PATCH 0662/2157] README: add badge for next-devel maintenance status

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 39c1692571..7b8f093695 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,7 @@
 # Fedora CoreOS Config
+
+[![next-devel status](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/coreos/fedora-coreos-pipeline/main/next-devel/badge.json)](https://github.com/coreos/fedora-coreos-pipeline/blob/main/next-devel/README.md)
+
 Base manifest configuration for
 [Fedora CoreOS](https://coreos.fedoraproject.org/).
 

From 1786c05a2c82d3bdd074e46fd9573cce1408c514 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 20 Dec 2021 21:50:18 -0500
Subject: [PATCH 0663/2157] workflows: comment on next-devel PRs if the branch
 is closed

When a next-devel PR is opened, reopened, marked ready for review, or its
base branch is changed, post a comment if the branch is not currently
accepting PRs.  This should help reduce confusion for occasional
maintainers.
---
 .github/workflows/next-devel.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/workflows/next-devel.yml

diff --git a/.github/workflows/next-devel.yml b/.github/workflows/next-devel.yml
new file mode 100644
index 0000000000..4511d19050
--- /dev/null
+++ b/.github/workflows/next-devel.yml
@@ -0,0 +1,32 @@
+---
+name: next-devel
+on:
+  pull_request:
+    branches: [next-devel]
+    types: [opened, edited, reopened, ready_for_review]
+
+permissions:
+  pull-requests: write
+
+# Privileged job to comment on next-devel PRs indicating whether next-devel
+# is currently open.  This job must not trust the contents of the PR.
+
+jobs:
+  branch-status:
+    name: "Check branch status"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Post PR comment
+        uses: actions/github-script@v3
+        with:
+          script: |
+            const url = 'https://raw.githubusercontent.com/coreos/fedora-coreos-pipeline/main/next-devel/status.json'
+            const resp = await github.request(url)
+            if (!JSON.parse(resp.data).enabled) {
+              await github.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body: ':no_entry: The `next-devel` branch is currently closed.  PRs should target only `testing-devel`.',
+              })
+            }

From c3e2d5175893056f8a6367bbc212614a290151f9 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 11 Jan 2022 15:41:55 -0500
Subject: [PATCH 0664/2157] workflows: allow commenting on next-devel PRs from
 forks

This was written to be a privileged job, but wasn't actually declared as
such.

Fixes: 1786c05a2c82 ("workflows: comment on next-devel PRs if the branch is closed")
---
 .github/workflows/next-devel.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/next-devel.yml b/.github/workflows/next-devel.yml
index 4511d19050..6a531e45bd 100644
--- a/.github/workflows/next-devel.yml
+++ b/.github/workflows/next-devel.yml
@@ -1,7 +1,9 @@
 ---
 name: next-devel
 on:
-  pull_request:
+  # This is a privileged event!  It runs with a r/w token, even in PRs from
+  # forks.
+  pull_request_target:
     branches: [next-devel]
     types: [opened, edited, reopened, ready_for_review]
 

From 1fcd6f7f42ff9be1482fe45cfc4f7f1501f28789 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 11 Jan 2022 22:33:49 +0000
Subject: [PATCH 0665/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/664/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4962791fe8..c722ec9ad1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.12-200.fc35.aarch64"
+      "evra": "5.15.13-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.12-200.fc35.aarch64"
+      "evra": "5.15.13-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.12-200.fc35.aarch64"
+      "evra": "5.15.13-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -781,7 +781,7 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "libuv": {
-      "evra": "1:1.42.0-2.fc35.aarch64"
+      "evra": "1:1.43.0-2.fc35.aarch64"
     },
     "libvarlink-util": {
       "evra": "22-3.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-10T16:34:34Z",
+    "generated": "2022-01-11T21:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-07T21:34:58Z"
+        "generated": "2022-01-10T17:33:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-10T00:55:13Z"
+        "generated": "2022-01-11T02:16:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6d3872fa4e..17065bcc75 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.12-200.fc35.x86_64"
+      "evra": "5.15.13-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.12-200.fc35.x86_64"
+      "evra": "5.15.13-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.12-200.fc35.x86_64"
+      "evra": "5.15.13-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -790,7 +790,7 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "libuv": {
-      "evra": "1:1.42.0-2.fc35.x86_64"
+      "evra": "1:1.43.0-2.fc35.x86_64"
     },
     "libvarlink-util": {
       "evra": "22-3.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-10T16:34:46Z",
+    "generated": "2022-01-11T21:53:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-07T21:35:35Z"
+        "generated": "2022-01-10T17:33:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-10T00:55:36Z"
+        "generated": "2022-01-11T02:16:43Z"
       }
     }
   }

From d2cbd8677f6c7c461cb769f20d4275995fb429f6 Mon Sep 17 00:00:00 2001
From: Gursewak Mangat <gursmangat@gmail.com>
Date: Tue, 11 Jan 2022 15:13:19 -0800
Subject: [PATCH 0666/2157] Re-enable kdump test for all platforms The
 kdump.crash should pass for online platforms after changes in
 https://github.com/coreos/coreos-assembler/pull/2639

---
 tests/kola/kdump/crash | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash
index 209736c762..9e2be2acbf 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash
@@ -1,8 +1,6 @@
 #!/bin/bash
-# kola: {"platforms": "qemu-unpriv", "minMemory": 4096, "tags": "skip-base-checks", "architectures": "x86_64"}
+# kola: {"minMemory": 4096, "tags": "skip-base-checks"}
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# Only run on QEMU x86_64 for now:
-# https://github.com/coreos/fedora-coreos-tracker/issues/860
 
 set -xeuo pipefail
 

From 467af828b69fb451aab7aaff2f6e2a2854fe64ef Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 12 Jan 2022 13:08:02 -0500
Subject: [PATCH 0667/2157] overrides: pin to kernel-5.15.7-200.fc35

Newer kernels seem to have an issue with enhanced networking on some
AWS instance types so they don't boot. Let's pin on the older kernel
for now while we investigate and find a proper solution.

See https://github.com/coreos/fedora-coreos-tracker/issues/1066
---
 manifest-lock.aarch64.json   |  6 +++---
 manifest-lock.overrides.yaml | 17 ++++++++++++++++-
 manifest-lock.x86_64.json    |  6 +++---
 3 files changed, 22 insertions(+), 7 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c722ec9ad1..f6cdf5fcd5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.13-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.13-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.13-200.fc35.aarch64"
+      "evra": "5.15.7-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..558d344bd7 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,19 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kernel:
+    evr: 5.15.7-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
+  kernel-core:
+    evr: 5.15.7-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
+  kernel-modules:
+    evr: 5.15.7-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 17065bcc75..b89b2b537b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.13-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.13-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.13-200.fc35.x86_64"
+      "evra": "5.15.7-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"

From 5be7338036507421b1de43b6f9fa587da1b31ad5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 12 Jan 2022 14:51:58 -0500
Subject: [PATCH 0668/2157] kola-denylist: snooze new karg networking test on
 rawhide

Similar to 104ecf1 we need to snooze the new karg networking test
added in 0a577a1 on rawhide because of the same issue.

See https://github.com/coreos/fedora-coreos-tracker/issues/1059
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d6ef79d6e2..ba2f426dde 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,3 +34,8 @@
   snooze: 2022-01-25
   streams:
     - rawhide
+- pattern: ext.config.networking.mtu-on-bond
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+  snooze: 2022-01-25
+  streams:
+    - rawhide

From f082776d5828af267098ba08c86869a161b33658 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 12 Jan 2022 21:52:52 +0000
Subject: [PATCH 0669/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/665/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f6cdf5fcd5..dab22ff877 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1135,7 +1135,7 @@
       "evra": "1.31-4.fc35.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.2^3.git075b9a8d2779-4.fc35.aarch64"
+      "evra": "0.0.99.3-2.fc35.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.2-1.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-11T21:53:36Z",
+    "generated": "2022-01-12T20:53:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-10T17:33:41Z"
+        "generated": "2022-01-11T22:36:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-11T02:16:23Z"
+        "generated": "2022-01-12T01:04:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b89b2b537b..2507979030 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1147,7 +1147,7 @@
       "evra": "1.31-4.fc35.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.2^3.git075b9a8d2779-4.fc35.x86_64"
+      "evra": "0.0.99.3-2.fc35.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.2-1.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-11T21:53:54Z",
+    "generated": "2022-01-12T20:53:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-10T17:33:45Z"
+        "generated": "2022-01-11T22:37:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-11T02:16:43Z"
+        "generated": "2022-01-12T01:05:07Z"
       }
     }
   }

From bf37b9cdab01586b282c20dc813d76656f18b3f7 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 11 Jan 2022 15:12:28 +0800
Subject: [PATCH 0670/2157] networking: set MTU on a VLAN subinterface for the
 bond using ignition config works

Set MTU on a VLAN subinterface for the bond using ignition config and check
- verify MTU on the bond matches config
- verify MTU on the VLAN subinterface for the bond matches config
- verify ip address on the VLAN subinterface for the bond matches config

The ignition config is generated using nm-initrd-generator according to
https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
$ kargs="bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 \
       ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: \
       vlan=bond0.100:bond0"
$ /usr/libexec/nm-initrd-generator -s -- $kargs

Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to
https://github.com/coreos/fedora-coreos-config/pull/1401
---
 .../networking/mtu-on-bond-ignition/config.bu | 60 +++++++++++++++++++
 .../mtu-on-bond-ignition/data/commonlib.sh    |  1 +
 .../networking/mtu-on-bond-ignition/test.sh   | 44 ++++++++++++++
 .../{mtu-on-bond => mtu-on-bond-kargs}        |  0
 4 files changed, 105 insertions(+)
 create mode 100644 tests/kola/networking/mtu-on-bond-ignition/config.bu
 create mode 120000 tests/kola/networking/mtu-on-bond-ignition/data/commonlib.sh
 create mode 100755 tests/kola/networking/mtu-on-bond-ignition/test.sh
 rename tests/kola/networking/{mtu-on-bond => mtu-on-bond-kargs} (100%)

diff --git a/tests/kola/networking/mtu-on-bond-ignition/config.bu b/tests/kola/networking/mtu-on-bond-ignition/config.bu
new file mode 100644
index 0000000000..ef3b13fc8b
--- /dev/null
+++ b/tests/kola/networking/mtu-on-bond-ignition/config.bu
@@ -0,0 +1,60 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/NetworkManager/system-connections/bond0.100.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=bond0.100
+          type=vlan
+          interface-name=bond0.100
+          [ethernet]
+          mtu=9000
+          [vlan]
+          flags=1
+          id=100
+          parent=bond0
+          [ipv4]
+          address1=10.10.10.10/24,10.10.10.1
+          dhcp-hostname=staticvlanbond
+          may-fail=false
+          method=manual
+    - path: /etc/NetworkManager/system-connections/bond0.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=bond0
+          type=bond
+          interface-name=bond0
+          [ethernet]
+          mtu=9000
+          [bond]
+          miimon=100
+          mode=active-backup
+          [ipv4]
+          method=disabled
+          [ipv6]
+          method=disabled
+    - path: /etc/NetworkManager/system-connections/eth1.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=eth1
+          type=ethernet
+          interface-name=eth1
+          master=bond0
+          slave-type=bond
+    - path: /etc/NetworkManager/system-connections/eth2.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=eth2
+          type=ethernet
+          interface-name=eth2
+          master=bond0
+          slave-type=bond
diff --git a/tests/kola/networking/mtu-on-bond-ignition/data/commonlib.sh b/tests/kola/networking/mtu-on-bond-ignition/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/networking/mtu-on-bond-ignition/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
new file mode 100755
index 0000000000..869f6c0a93
--- /dev/null
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -0,0 +1,44 @@
+#!/bin/bash
+# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "net.ifnames=0"}
+# - We use net.ifnames=0 to disable consistent network naming here because on
+#   different firmwares (BIOS vs UEFI) the NIC names are different.
+#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+
+# Set MTU on a VLAN subinterface for the bond using ignition config and check
+# - verify MTU on the bond matches config
+# - verify MTU on the VLAN subinterface for the bond matches config
+# - verify ip address on the VLAN subinterface for the bond matches config
+
+# The ignition config is generated using nm-initrd-generator according to
+# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
+# kargs="bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 \
+#        ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: \
+#        vlan=bond0.100:bond0"
+# $/usr/libexec/nm-initrd-generator -s -- $kargs
+
+# Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to 
+# https://github.com/coreos/fedora-coreos-config/pull/1401
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+bond="bond0"
+vlan="bond0.100"
+for interface in $bond $vlan
+do
+    mtu=""
+    # MTU is changed to 9000 according to config.bu
+    mtu=$(nmcli -g 802-3-ethernet.mtu connection show ${interface})
+    if [ "${mtu}" != "9000" ]; then
+        fatal "Error: get ${interface} mtu = ${mtu}, expected is 9000"
+    fi
+    ok "${interface} mtu is correct"
+done
+
+# Verify "bond0.100" gets ip address 10.10.10.10 according to config.bu
+nic_ip=$(get_ipv4_for_nic ${vlan})
+if [ "${nic_ip}" != "10.10.10.10" ]; then
+    fatal "Error: get ${vlan} ip = ${nic_ip}, expected is 10.10.10.10"
+fi
+ok "get ${vlan} ip is 10.10.10.10"
diff --git a/tests/kola/networking/mtu-on-bond b/tests/kola/networking/mtu-on-bond-kargs
similarity index 100%
rename from tests/kola/networking/mtu-on-bond
rename to tests/kola/networking/mtu-on-bond-kargs

From 2e0717303297c6301746e675b065a96e76e1b68c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 13 Jan 2022 10:23:45 -0500
Subject: [PATCH 0671/2157] kola-denylist: update mtu-on-bond test name

The test name changed in bf37b9c.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index ba2f426dde..16a793f7a4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,7 +34,7 @@
   snooze: 2022-01-25
   streams:
     - rawhide
-- pattern: ext.config.networking.mtu-on-bond
+- pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-01-25
   streams:

From 85fd577c1e298fa7d6935cef709ca360be56994e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 13 Jan 2022 12:39:38 -0500
Subject: [PATCH 0672/2157] README: update formatting

Add ``` around the code section so the markdown formatting looks nice.
---
 README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 7b8f093695..7191e91855 100644
--- a/README.md
+++ b/README.md
@@ -149,6 +149,7 @@ CI, see the [CoreOS CI documentation](https://github.com/coreos/coreos-ci/blob/m
 ## Tests layout
 Tests should follow the following format:
 
+```bash
 #!/bin/bash
 # kola: { "exclusive": false }    <-- kola option comment. See all options in <https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson>
 # Short summary of what the test does, why we need it, etc.
@@ -161,4 +162,5 @@ set -euxo pipefail
 
 foo_bar()    <-- Other function definitions
 
-if ...    <-- Actual test code. Errors must be raised with `fatal()`. Does not need to end with a call to `ok()`
\ No newline at end of file
+if ...    <-- Actual test code. Errors must be raised with `fatal()`. Does not need to end with a call to `ok()`
+```

From 629fe2190c11092a595c78826910085b2d8c4be6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 13 Jan 2022 13:55:01 -0500
Subject: [PATCH 0673/2157] overrides: update pinned kernel to last known good

We shipped out updates this morning to `testing` and `next`
with a downgraded kernel that matches what is already in `stable`.
For our upcoming regularly scheduled releases let's at least get to
the latest possible known good kernel.

See https://github.com/coreos/fedora-coreos-tracker/issues/1066
---
 manifest-lock.aarch64.json   | 6 +++---
 manifest-lock.overrides.yaml | 6 +++---
 manifest-lock.x86_64.json    | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index dab22ff877..3a70d28ad8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.7-200.fc35.aarch64"
+      "evra": "5.15.10-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 558d344bd7..1ae45e6237 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,17 +10,17 @@
 
 packages:
   kernel:
-    evr: 5.15.7-200.fc35
+    evr: 5.15.10-200.fc35
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
   kernel-core:
-    evr: 5.15.7-200.fc35
+    evr: 5.15.10-200.fc35
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
   kernel-modules:
-    evr: 5.15.7-200.fc35
+    evr: 5.15.10-200.fc35
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2507979030..e95de9d8f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.7-200.fc35.x86_64"
+      "evra": "5.15.10-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"

From 4bad1c4090c1b7d563a8ad6117a25a45f0e69dcf Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 14 Jan 2022 09:35:03 -0500
Subject: [PATCH 0674/2157] tests/trust-cpu: Loosen regexp for validating crng
 state

There's now an `init` in the middle:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=161212c7fd1d9069b232785c75492e50941e2ea8
---
 tests/kola/files/trust-cpu | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
index 827dffdd0a..5b942108c3 100755
--- a/tests/kola/files/trust-cpu
+++ b/tests/kola/files/trust-cpu
@@ -11,7 +11,7 @@ cd "${tmpd}"
 case "$(arch)" in
     x86_64)
         dmesg | grep ' random:' > random.txt
-        if ! grep -qe 'crng done.*trust.*CPU' <random.txt; then
+        if ! grep -qe 'crng.*done.*trust.*CPU' <random.txt; then
             sed -e 's/^/# /' < random.txt
             fatal "Error: Failed to find crng trusting CPU"
         fi

From 1b884bec9bc670fa758650722f8f6fa8101982e5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 14 Jan 2022 21:47:24 +0000
Subject: [PATCH 0675/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/671/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3a70d28ad8..3b53e3375e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.1-4.fc35.aarch64"
+      "evra": "1.5.1-6.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1156,10 +1156,10 @@
       "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4006-1.fc35.noarch"
+      "evra": "2:8.2.4068-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4006-1.fc35.aarch64"
+      "evra": "2:8.2.4068-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-12T20:53:31Z",
+    "generated": "2022-01-14T20:56:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-11T22:36:44Z"
+        "generated": "2022-01-13T14:49:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-12T01:04:46Z"
+        "generated": "2022-01-14T01:04:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e95de9d8f9..c5bcc8fd28 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.1-4.fc35.x86_64"
+      "evra": "1.5.1-6.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4006-1.fc35.noarch"
+      "evra": "2:8.2.4068-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4006-1.fc35.x86_64"
+      "evra": "2:8.2.4068-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-12T20:53:26Z",
+    "generated": "2022-01-14T20:56:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-11T22:37:26Z"
+        "generated": "2022-01-13T14:49:31Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-12T01:05:07Z"
+        "generated": "2022-01-14T01:05:05Z"
       }
     }
   }

From 342a430a133dcd0c0942936df077d0b25aaab4eb Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 15 Jan 2022 22:38:00 -0500
Subject: [PATCH 0676/2157] tests: networking: fix syntax in networking kargs

The trailing colon isn't correct syntax according to the definition.
`nm-initrd-generator` allows it but `systemd-network-generator` will
error out and say it's invalid.
---
 tests/kola/networking/mtu-on-bond-kargs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index f41a0a68e0..b32bb35783 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: vlan=bond0.100:bond0 net.ifnames=0"}
+# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"}
 # - We use net.ifnames=0 to disable consistent network naming here because on
 #   different firmwares (BIOS vs UEFI) the NIC names are different.
 #   See https://github.com/coreos/fedora-coreos-tracker/issues/1060

From 4801a9684fcde29b2c91d8f692a4e57c48ff7cf7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 15 Jan 2022 22:43:14 -0500
Subject: [PATCH 0677/2157] overrides: pin to systemd-249.7-2.fc35

SELinux denials are causing systemd-network-generator to fail
running. https://github.com/coreos/fedora-coreos-tracker/issues/1059
---
 manifest-lock.overrides.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1ae45e6237..334ba4ef22 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,3 +24,33 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
+  systemd:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin
+  systemd-container:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin
+  systemd-libs:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin
+  systemd-pam:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin
+  systemd-resolved:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin
+  systemd-udev:
+    evr: 249.7-2.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
+      type: pin

From f0dc2fd4ffd4b867b6c30524c03f795e6ce24eb4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 16 Jan 2022 21:36:53 +0000
Subject: [PATCH 0678/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/675/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3b53e3375e..cc10fd8662 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -169,13 +169,13 @@
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.2-1.fc35.aarch64"
+      "evra": "2.4.3-1.fc35.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.2-1.fc35.aarch64"
+      "evra": "2.4.3-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-11.fc35.aarch64"
+      "evra": "1:2.3.3op2-12.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.3-1.fc35.aarch64"
+      "evra": "1.7.4-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -931,7 +931,7 @@
       "evra": "0.23.22-4.fc35.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-5.fc35.aarch64"
+      "evra": "1.5.2-7.fc35.aarch64"
     },
     "passwd": {
       "evra": "0.80-11.fc35.aarch64"
@@ -940,10 +940,10 @@
       "evra": "8.45-1.fc35.aarch64"
     },
     "pcre2": {
-      "evra": "10.37-4.fc35.aarch64"
+      "evra": "10.39-1.fc35.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.37-4.fc35.noarch"
+      "evra": "10.39-1.fc35.noarch"
     },
     "pigz": {
       "evra": "2.5-2.fc35.aarch64"
@@ -1193,16 +1193,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-14T20:56:43Z",
+    "generated": "2022-01-16T20:53:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-13T14:49:00Z"
+        "generated": "2022-01-14T21:49:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-14T01:04:45Z"
+        "generated": "2022-01-16T00:59:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c5bcc8fd28..d00ce9b0a3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,13 +169,13 @@
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.2-1.fc35.x86_64"
+      "evra": "2.4.3-1.fc35.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.2-1.fc35.x86_64"
+      "evra": "2.4.3-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-11.fc35.x86_64"
+      "evra": "1:2.3.3op2-12.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.3-1.fc35.x86_64"
+      "evra": "1.7.4-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -943,7 +943,7 @@
       "evra": "0.23.22-4.fc35.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-5.fc35.x86_64"
+      "evra": "1.5.2-7.fc35.x86_64"
     },
     "passwd": {
       "evra": "0.80-11.fc35.x86_64"
@@ -952,10 +952,10 @@
       "evra": "8.45-1.fc35.x86_64"
     },
     "pcre2": {
-      "evra": "10.37-4.fc35.x86_64"
+      "evra": "10.39-1.fc35.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.37-4.fc35.noarch"
+      "evra": "10.39-1.fc35.noarch"
     },
     "pigz": {
       "evra": "2.5-2.fc35.x86_64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-14T20:56:46Z",
+    "generated": "2022-01-16T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-13T14:49:31Z"
+        "generated": "2022-01-14T21:50:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-14T01:05:05Z"
+        "generated": "2022-01-16T00:59:59Z"
       }
     }
   }

From 034d298383eb5d6f8757abda5a7990ddbf10b9e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 3 Jan 2022 12:42:26 +0100
Subject: [PATCH 0679/2157] manifests/user-experience: Set nano as default
 editor

Add nano and set it as default editor.

This is following the corresponding Fedora Change in Fedora 33:
https://fedoraproject.org/wiki/Changes/UseNanoByDefault

To revert to `vim-minimal` as default:
```
$ sudo rm /etc/profile.d/nano.{sh,csh}
```

This is not shared with RHCOS.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1058
---
 manifest-lock.aarch64.json   | 6 ++++++
 manifest-lock.x86_64.json    | 6 ++++++
 manifests/fedora-coreos.yaml | 2 ++
 3 files changed, 14 insertions(+)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cc10fd8662..fa5833d219 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -858,6 +858,12 @@
     "mpfr": {
       "evra": "4.1.0-8.fc35.aarch64"
     },
+    "nano": {
+      "evra": "5.8-4.fc35.aarch64"
+    },
+    "nano-default-editor": {
+      "evra": "5.8-4.fc35.noarch"
+    },
     "ncurses": {
       "evra": "6.2-8.20210508.fc35.aarch64"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d00ce9b0a3..b938c71f95 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -870,6 +870,12 @@
     "mpfr": {
       "evra": "4.1.0-8.fc35.x86_64"
     },
+    "nano": {
+      "evra": "5.8-4.fc35.x86_64"
+    },
+    "nano-default-editor": {
+      "evra": "5.8-4.fc35.noarch"
+    },
     "ncurses": {
       "evra": "6.2-8.20210508.fc35.x86_64"
     },
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 726e0af407..569a9ce890 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -26,6 +26,8 @@ packages:
   - fedora-coreos-pinger
   # Updates
   - zincati
+  # Include and set the default editor
+  - nano nano-default-editor
 
 etc-group-members:
   # Add the docker group to /etc/group

From ac58f3d7252498e36c73da15ecebdb84b05d07e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 7 Jan 2022 20:02:16 +0100
Subject: [PATCH 0680/2157] README: Extend the 'new package' section

---
 README.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 7191e91855..9b766bdf65 100644
--- a/README.md
+++ b/README.md
@@ -132,8 +132,11 @@ the corresponding entries in the lockfiles:
 There will be better tooling to come to enable this, though
 one easy way to do this is for now:
 - add packages to the correct YAML manifest
-- run `cosa fetch --update-lockfile`
-- commit only the new package entries
+- run `cosa fetch --update-lockfile` (this will only update the lockfile for
+  the current architecture, most likely `x86_64`)
+- copy the new lines to the lockfiles for other architectures (i.e. `aarch64`)
+- commit only the new package entries (skip the timestamped changes to avoid
+  merge conflicts with the lockfile updates made by the bot)
 
 ## Moving to a new major version (N) of Fedora
 

From d119de31f77071af54f6be8ef7ea55284518441d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 17 Jan 2022 21:36:40 +0000
Subject: [PATCH 0681/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/677/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fa5833d219..6fc53e6a38 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.2-1.fc35.aarch64"
+      "evra": "1.12.3-1.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -592,7 +592,7 @@
       "evra": "0.3.9-1.fc35.aarch64"
     },
     "libibverbs": {
-      "evra": "38.0-1.fc35.aarch64"
+      "evra": "38.1-2.fc35.aarch64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-16T20:53:28Z",
+    "generated": "2022-01-17T20:53:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-14T21:49:39Z"
+        "generated": "2022-01-17T17:10:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-16T00:59:38Z"
+        "generated": "2022-01-17T01:48:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b938c71f95..037ce54b83 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.2-1.fc35.x86_64"
+      "evra": "1.12.3-1.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -598,7 +598,7 @@
       "evra": "0.3.9-1.fc35.x86_64"
     },
     "libibverbs": {
-      "evra": "38.0-1.fc35.x86_64"
+      "evra": "38.1-2.fc35.x86_64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-16T20:53:25Z",
+    "generated": "2022-01-17T20:53:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-14T21:50:10Z"
+        "generated": "2022-01-17T17:11:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-16T00:59:59Z"
+        "generated": "2022-01-17T01:48:47Z"
       }
     }
   }

From 92427feded9fea298c3af1897897b5644581a59f Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 17 Jan 2022 15:04:16 -0500
Subject: [PATCH 0682/2157] overrides: fast-track Afterburn 5.2.0-1.fc35

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 334ba4ef22..76ed66d327 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -54,3 +54,13 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
       type: pin
+  afterburn:
+    evr: 5.2.0-1.fc35
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-87a938a18c
+  afterburn-dracut:
+    evr: 5.2.0-1.fc35
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-87a938a18c

From 6198c6d5fc95546f9c281c155ccf0b2864a8e104 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 18 Jan 2022 21:29:30 +0000
Subject: [PATCH 0683/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/679/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6fc53e6a38..19857a1a7f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.aarch64"
     },
     "afterburn": {
-      "evra": "5.1.0-1.fc35.aarch64"
+      "evra": "5.2.0-1.fc35.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.1.0-1.fc35.aarch64"
+      "evra": "5.2.0-1.fc35.aarch64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.aarch64"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.8-1.fc35.noarch"
+      "evra": "35.9-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.8-1.fc35.noarch"
+      "evra": "35.9-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-17T20:53:30Z",
+    "generated": "2022-01-18T20:52:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-17T17:10:29Z"
+        "generated": "2022-01-17T21:49:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-17T01:48:17Z"
+        "generated": "2022-01-18T01:33:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 037ce54b83..ce077cb417 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.x86_64"
     },
     "afterburn": {
-      "evra": "5.1.0-1.fc35.x86_64"
+      "evra": "5.2.0-1.fc35.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.1.0-1.fc35.x86_64"
+      "evra": "5.2.0-1.fc35.x86_64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.8-1.fc35.noarch"
+      "evra": "35.9-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.8-1.fc35.noarch"
+      "evra": "35.9-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-17T20:53:28Z",
+    "generated": "2022-01-18T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-17T17:11:32Z"
+        "generated": "2022-01-17T21:49:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-17T01:48:47Z"
+        "generated": "2022-01-18T01:34:10Z"
       }
     }
   }

From 5cc6dcdae056baabcdbbf5cb88ae2746f4163b84 Mon Sep 17 00:00:00 2001
From: Gursewak Mangat <gursmangat@gmail.com>
Date: Wed, 19 Jan 2022 11:06:55 -0800
Subject: [PATCH 0684/2157] ci/buildroot: Blow out quay.io cache pickup newer
 version for fcos-buildroot

---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 1825bb37db..84e119ba28 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -7,4 +7,4 @@
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:35
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20211108
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20220119

From 0d69bd06b881ccc7b428efb468c27d0aa553645b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 19 Jan 2022 21:33:43 +0000
Subject: [PATCH 0685/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/681/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 19857a1a7f..9e7ec6e357 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -223,7 +223,7 @@
       "evra": "3.8-1.fc35.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-3.fc35.aarch64"
+      "evra": "2.86-4.fc35.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-2.fc35.aarch64"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.9-1.fc35.noarch"
+      "evra": "35.10-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.9-1.fc35.noarch"
+      "evra": "35.10-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-18T20:52:57Z",
+    "generated": "2022-01-19T20:52:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-17T21:49:22Z"
+        "generated": "2022-01-18T21:30:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-18T01:33:48Z"
+        "generated": "2022-01-19T01:41:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ce077cb417..ee5c988018 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -223,7 +223,7 @@
       "evra": "3.8-1.fc35.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-3.fc35.x86_64"
+      "evra": "2.86-4.fc35.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-2.fc35.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.9-1.fc35.noarch"
+      "evra": "35.10-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.9-1.fc35.noarch"
+      "evra": "35.10-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-18T20:52:54Z",
+    "generated": "2022-01-19T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-17T21:49:40Z"
+        "generated": "2022-01-18T21:30:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-18T01:34:10Z"
+        "generated": "2022-01-19T01:42:17Z"
       }
     }
   }

From af6309be7d08d9a5fdc295b0bc94f8c920e6278f Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Thu, 20 Jan 2022 12:30:03 -0500
Subject: [PATCH 0686/2157] manifests: move location of nvme-cli for sharing
 with RHCOS

OCP/RHCOS customers want to have `nvme-cli` included as part of the
OS, so let's move the location of the package in the manifests to one
that is shared with RHCOS.

See: https://issues.redhat.com/browse/RFE-2503
---
 manifests/fedora-coreos-base.yaml | 2 --
 manifests/user-experience.yaml    | 2 ++
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index e09cf94d1b..111e94d884 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -132,8 +132,6 @@ packages:
   - console-login-helper-messages-motdgen
   # i18n
   - kbd
-  # nvme-cli for managing nvme disks
-  - nvme-cli
   # zram-generator (but not zram-generator-defaults) for F33 change
   # https://github.com/coreos/fedora-coreos-tracker/issues/509
   - zram-generator
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 93d961dc83..3832e668ad 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -33,3 +33,5 @@ packages:
   - runc
   - skopeo
   - toolbox
+  # nvme-cli for managing nvme disks
+  - nvme-cli

From 52d8e6d0726b75b290a6b8d47c26453ab34e2dca Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 20 Jan 2022 15:43:22 -0500
Subject: [PATCH 0687/2157] denylist: extend snooze for ext.config.podman.dns

I poked upstream to see if we can further the discussion:
https://github.com/containers/podman/issues/12661#issuecomment-1017899651
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 16a793f7a4..4b9fbf6509 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -16,7 +16,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/860
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-01-20
+  snooze: 2022-01-31
   streams:
     - rawhide
 - pattern: podman.base

From 6b1b2087a3602a61c3b964beb65e915ce24c59e7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 20 Jan 2022 23:27:58 +0000
Subject: [PATCH 0688/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/687/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9e7ec6e357..0c814d8649 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -847,7 +847,7 @@
       "evra": "4.2-rc2.fc35.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.11-1.fc35.aarch64"
+      "evra": "20.10.12-1.fc35.aarch64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.aarch64"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.10-1.fc35.noarch"
+      "evra": "35.11-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.10-1.fc35.noarch"
+      "evra": "35.11-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-19T20:52:50Z",
+    "generated": "2022-01-20T22:56:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-18T21:30:13Z"
+        "generated": "2022-01-19T21:49:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-19T01:41:53Z"
+        "generated": "2022-01-20T14:40:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ee5c988018..496f427d47 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -859,7 +859,7 @@
       "evra": "2:2.1-47.fc35.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.11-1.fc35.x86_64"
+      "evra": "20.10.12-1.fc35.x86_64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.10-1.fc35.noarch"
+      "evra": "35.11-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.10-1.fc35.noarch"
+      "evra": "35.11-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-19T20:52:54Z",
+    "generated": "2022-01-20T22:57:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-18T21:30:46Z"
+        "generated": "2022-01-19T21:50:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-19T01:42:17Z"
+        "generated": "2022-01-20T14:40:25Z"
       }
     }
   }

From f0e0b3d9732f058153243eeb7f5bee34e718adac Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 20 Jan 2022 19:57:11 -0500
Subject: [PATCH 0689/2157] overrides: fast-track Ignition 2.13.0-3.fc35

Fixes https://github.com/coreos/ignition/issues/1305.
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 76ed66d327..8c10373c09 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -64,3 +64,9 @@ packages:
     metadata:
       type: fast-track
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-87a938a18c
+  ignition:
+    evr: 2.13.0-3.fc35
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b238d6fbbf
+      reason: https://github.com/coreos/ignition/issues/1305

From e0abb37288d8f3c4d040062d46efcbfce9208ba9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 21 Jan 2022 09:26:58 -0500
Subject: [PATCH 0690/2157] denylist: extend snooze for podman.base on rawhide

Still seeing it. There is some movement in the BZ, but
let's snooze again.

https://github.com/coreos/fedora-coreos-tracker/issues/1049
https://bugzilla.redhat.com/show_bug.cgi?id=2033016
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 4b9fbf6509..d761c67499 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,7 +21,7 @@
     - rawhide
 - pattern: podman.base
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
-  snooze: 2022-01-10
+  snooze: 2022-01-31
   streams:
     - rawhide
 - pattern: ext.config.networking.prefer-ignition-networking

From 3122fb149180603c1df0de82398a546bf3ac5f30 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Jan 2022 21:46:59 +0000
Subject: [PATCH 0691/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/688/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0c814d8649..9e1b8b265f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -265,7 +265,7 @@
       "evra": "2:5.15-1.fc35.aarch64"
     },
     "expat": {
-      "evra": "2.4.1-2.fc35.aarch64"
+      "evra": "2.4.3-1.fc35.aarch64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.aarch64"
@@ -400,7 +400,7 @@
       "evra": "3.23-5.fc35.aarch64"
     },
     "ignition": {
-      "evra": "2.13.0-1.fc35.aarch64"
+      "evra": "2.13.0-3.fc35.aarch64"
     },
     "inih": {
       "evra": "49-4.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "2:4.15.3-0.fc35.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.27-1.fc35.aarch64"
+      "evra": "4.4.27-2.fc35.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "1.2.6-1.fc35.aarch64"
     },
     "rpm": {
-      "evra": "4.17.0-1.fc35.aarch64"
+      "evra": "4.17.0-3.fc35.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-1.fc35.aarch64"
+      "evra": "4.17.0-3.fc35.aarch64"
     },
     "rpm-ostree": {
       "evra": "2022.1-2.fc35.aarch64"
@@ -1015,7 +1015,7 @@
       "evra": "2022.1-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-1.fc35.aarch64"
+      "evra": "4.17.0-3.fc35.aarch64"
     },
     "rsync": {
       "evra": "3.2.3-8.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-20T22:56:21Z",
+    "generated": "2022-01-21T20:52:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-19T21:49:58Z"
+        "generated": "2022-01-21T01:56:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-20T14:40:02Z"
+        "generated": "2022-01-21T16:16:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 496f427d47..1f3ae6b77c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -265,7 +265,7 @@
       "evra": "2:5.15-1.fc35.x86_64"
     },
     "expat": {
-      "evra": "2.4.1-2.fc35.x86_64"
+      "evra": "2.4.3-1.fc35.x86_64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.x86_64"
@@ -406,7 +406,7 @@
       "evra": "3.23-5.fc35.x86_64"
     },
     "ignition": {
-      "evra": "2.13.0-1.fc35.x86_64"
+      "evra": "2.13.0-3.fc35.x86_64"
     },
     "inih": {
       "evra": "49-4.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.15.3-0.fc35.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.27-1.fc35.x86_64"
+      "evra": "4.4.27-2.fc35.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "1.2.6-1.fc35.x86_64"
     },
     "rpm": {
-      "evra": "4.17.0-1.fc35.x86_64"
+      "evra": "4.17.0-3.fc35.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-1.fc35.x86_64"
+      "evra": "4.17.0-3.fc35.x86_64"
     },
     "rpm-ostree": {
       "evra": "2022.1-2.fc35.x86_64"
@@ -1027,7 +1027,7 @@
       "evra": "2022.1-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-1.fc35.x86_64"
+      "evra": "4.17.0-3.fc35.x86_64"
     },
     "rsync": {
       "evra": "3.2.3-8.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-20T22:57:20Z",
+    "generated": "2022-01-21T20:52:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-19T21:50:38Z"
+        "generated": "2022-01-21T01:57:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-20T14:40:25Z"
+        "generated": "2022-01-21T16:16:27Z"
       }
     }
   }

From 13b198d64197303b3da1e8463390c001f7ce10ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 22 Jan 2022 21:31:18 +0000
Subject: [PATCH 0692/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/690/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9e1b8b265f..7610d6f23f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -262,7 +262,7 @@
       "evra": "0.186-1.fc35.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.15-1.fc35.aarch64"
+      "evra": "2:5.16-1.fc35.aarch64"
     },
     "expat": {
       "evra": "2.4.3-1.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-21T20:52:53Z",
+    "generated": "2022-01-22T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-21T01:56:13Z"
+        "generated": "2022-01-21T21:50:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-21T16:16:05Z"
+        "generated": "2022-01-22T01:09:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1f3ae6b77c..5da381f275 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -262,7 +262,7 @@
       "evra": "0.186-1.fc35.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.15-1.fc35.x86_64"
+      "evra": "2:5.16-1.fc35.x86_64"
     },
     "expat": {
       "evra": "2.4.3-1.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-21T20:52:52Z",
+    "generated": "2022-01-22T20:53:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-21T01:57:03Z"
+        "generated": "2022-01-21T21:51:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-21T16:16:27Z"
+        "generated": "2022-01-22T01:10:17Z"
       }
     }
   }

From 2fca65f459108660d9812e3dfe221580b6820de0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 23 Jan 2022 21:32:03 +0000
Subject: [PATCH 0693/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos.apps.ocp.ci.centos.org/job/bump-lockfile/692/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7610d6f23f..64a054e384 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.4-1.fc35.aarch64"
+      "evra": "1.4.1-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-12.fc35.aarch64"
+      "evra": "1:2.3.3op2-13.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -1051,10 +1051,10 @@
       "evra": "1.46-2.fc35.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-8.fc35.aarch64"
+      "evra": "2:4.9-9.fc35.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-8.fc35.aarch64"
+      "evra": "2:4.9-9.fc35.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-22T20:52:56Z",
+    "generated": "2022-01-23T20:52:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-21T21:50:02Z"
+        "generated": "2022-01-22T21:33:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-22T01:09:53Z"
+        "generated": "2022-01-23T01:36:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5da381f275..2dec1bae0c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.4-1.fc35.x86_64"
+      "evra": "1.4.1-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-12.fc35.x86_64"
+      "evra": "1:2.3.3op2-13.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -1063,10 +1063,10 @@
       "evra": "1.46-2.fc35.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-8.fc35.x86_64"
+      "evra": "2:4.9-9.fc35.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-8.fc35.x86_64"
+      "evra": "2:4.9-9.fc35.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-22T20:53:18Z",
+    "generated": "2022-01-23T20:52:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-21T21:51:26Z"
+        "generated": "2022-01-22T21:33:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-22T01:10:17Z"
+        "generated": "2022-01-23T01:37:18Z"
       }
     }
   }

From 01a6e3e5e4af544770dff9e6af953afe851e77b4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 11 Jan 2022 17:08:19 -0500
Subject: [PATCH 0694/2157] Use new `overlay.d/cosa-no-autolayer` option

Tell coreos-assembler to not automatically add the overlays to the final
manifest. Add references to the auto-generated OSTree layers in our
lower-level manifests where most appropriate.

Prep for using this to make an overlay only active on the `next-devel`
stream.

Requires: https://github.com/coreos/coreos-assembler/pull/2641
---
 manifests/fedora-coreos-base.yaml | 7 +++++++
 manifests/fedora-coreos.yaml      | 3 +++
 overlay.d/README.md               | 5 +++++
 overlay.d/cosa-no-autolayer       | 0
 4 files changed, 15 insertions(+)
 create mode 100644 overlay.d/cosa-no-autolayer

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 111e94d884..f7113ccd21 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -10,6 +10,13 @@ include:
   - user-experience.yaml
   - shared-workarounds.yaml
 
+ostree-layers:
+  - overlay/05core
+  - overlay/08nouveau
+  - overlay/09misc
+  - overlay/14NetworkManager-plugins
+  - overlay/20platform-chrony
+
 initramfs-args:
   - --no-hostonly
   # We don't support root on NFS, so we don't need it in the initramfs. It also
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 569a9ce890..52eb0b9ae7 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -4,6 +4,9 @@
 
 include: fedora-coreos-base.yaml
 
+ostree-layers:
+  - overlay/15fcos
+
 automatic-version-prefix: "${releasever}.<date:%Y%m%d>.dev"
 mutate-os-release: "${releasever}"
 
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 384112faec..4213f2c0b2 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -1,3 +1,8 @@
+These overlay directories are automatically committed to the build OSTree repo
+by coreos-assembler. They are then explicitly included in our various manifest
+files via `ostree-layers` (this used to be done automatically, but that's no
+longer the case).
+
 05core
 -----
 
diff --git a/overlay.d/cosa-no-autolayer b/overlay.d/cosa-no-autolayer
new file mode 100644
index 0000000000..e69de29bb2

From 532fd714e4fff8ee6f6f77cd09f4889560512299 Mon Sep 17 00:00:00 2001
From: Gursewak Mangat <gursmangat@gmail.com>
Date: Wed, 12 Jan 2022 15:09:05 -0800
Subject: [PATCH 0695/2157] kola-denylist: remove kdump.crash from denylist
 kdump.crash should run and pass after fixes in
 https://github.com/coreos/coreos-assembler/pull/2639

---
 kola-denylist.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d761c67499..d9443c13c4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,8 +12,6 @@
     - rawhide
   arches:
     - aarch64
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/860
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
   snooze: 2022-01-31

From aa50439847f34282b41bf2eb60d478a45d2a27d7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 24 Jan 2022 22:13:29 -0500
Subject: [PATCH 0696/2157] denylist: extend snooze for network karg tests

Currently no movement on the report BZ. I marked it as a prioritized
bug so we can hopefully get some fix soon.

https://github.com/coreos/fedora-coreos-tracker/issues/1059
https://bugzilla.redhat.com/show_bug.cgi?id=2037047
---
 kola-denylist.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d9443c13c4..90e93f10c1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -24,16 +24,16 @@
     - rawhide
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-25
+  snooze: 2022-01-31
   streams:
     - rawhide
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-25
+  snooze: 2022-01-31
   streams:
     - rawhide
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-25
+  snooze: 2022-01-31
   streams:
     - rawhide

From b4d9193d473572c8b2770d91b800edcfb80e8458 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 26 Jan 2022 14:58:46 +0000
Subject: [PATCH 0697/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/5/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 64a054e384..0ed389cb26 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.6-1.fc35.aarch64"
+      "evra": "3.0.7-1.fc35.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.aarch64"
@@ -88,7 +88,7 @@
       "evra": "0.1.7-1.fc35.aarch64"
     },
     "chrony": {
-      "evra": "4.1-3.fc35.aarch64"
+      "evra": "4.2-1.fc35.aarch64"
     },
     "cifs-utils": {
       "evra": "6.13-3.fc35.aarch64"
@@ -805,7 +805,7 @@
       "evra": "0.2.5-6.fc35.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.1-6.fc35.aarch64"
+      "evra": "1.5.2-1.fc35.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-23T20:52:50Z",
+    "generated": "2022-01-26T14:37:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-22T21:33:56Z"
+        "generated": "2022-01-23T21:34:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-23T01:36:54Z"
+        "generated": "2022-01-25T01:05:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2dec1bae0c..3d893ae121 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.6-1.fc35.x86_64"
+      "evra": "3.0.7-1.fc35.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.x86_64"
@@ -88,7 +88,7 @@
       "evra": "0.1.7-1.fc35.x86_64"
     },
     "chrony": {
-      "evra": "4.1-3.fc35.x86_64"
+      "evra": "4.2-1.fc35.x86_64"
     },
     "cifs-utils": {
       "evra": "6.13-3.fc35.x86_64"
@@ -814,7 +814,7 @@
       "evra": "0.2.5-6.fc35.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.1-6.fc35.x86_64"
+      "evra": "1.5.2-1.fc35.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-30.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-23T20:52:37Z",
+    "generated": "2022-01-26T14:37:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-22T21:33:54Z"
+        "generated": "2022-01-23T21:34:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-23T01:37:18Z"
+        "generated": "2022-01-25T01:05:52Z"
       }
     }
   }

From d103bb05210b66a318b08a7a84c7b2b2d67ee846 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 26 Jan 2022 09:26:05 -0500
Subject: [PATCH 0698/2157] overrides: fast-track polkit-0.120-1.fc35.1 for
 CVE-2021-4034 (pwnkit)

See https://github.com/coreos/fedora-coreos-tracker/issues/1078.
---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 8c10373c09..94c1345afb 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -70,3 +70,15 @@ packages:
       type: fast-track
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b238d6fbbf
       reason: https://github.com/coreos/ignition/issues/1305
+  polkit:
+    evr: 0.120-1.fc35.1
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-da040e6b94
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1078
+  polkit-libs:
+    evr: 0.120-1.fc35.1
+    metadata:
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-da040e6b94
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1078

From 4e8c13f070f988f67d7880879b73d635d25feced Mon Sep 17 00:00:00 2001
From: Gursewak Mangat <gursmangat@gmail.com>
Date: Wed, 26 Jan 2022 14:40:10 -0800
Subject: [PATCH 0699/2157] denylist: disable ext.config.kdump.crash on aarch64
 for now

---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 90e93f10c1..4db2fbcdd6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,6 +12,10 @@
     - rawhide
   arches:
     - aarch64
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
+  arches:
+    - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
   snooze: 2022-01-31

From 449e745ce42a5ea617b0eac80514149a66623be3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 Jan 2022 14:43:33 +0000
Subject: [PATCH 0700/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/11/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 2 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0ed389cb26..254bbeb420 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.3-1.fc35.aarch64"
+      "evra": "1.12.4-1.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -358,13 +358,13 @@
       "evra": "2.70.2-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-21.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-21.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-21.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -517,7 +517,7 @@
       "evra": "0.1.1-48.fc35.aarch64"
     },
     "libblkid": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.aarch64"
@@ -562,7 +562,7 @@
       "evra": "2.1.12-4.fc35.aarch64"
     },
     "libfdisk": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.aarch64"
@@ -637,7 +637,7 @@
       "evra": "2.13.0-3.fc35.aarch64"
     },
     "libmount": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.aarch64"
@@ -715,7 +715,7 @@
       "evra": "4.6.1-2.fc35.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libsmbclient": {
       "evra": "2:4.15.3-0.fc35.aarch64"
@@ -778,7 +778,7 @@
       "evra": "1.2.1-5.fc35.aarch64"
     },
     "libuuid": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.aarch64"
@@ -973,10 +973,10 @@
       "evra": "3.3-1.fc35.aarch64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.aarch64"
+      "evra": "0.120-1.fc35.1.aarch64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.aarch64"
+      "evra": "0.120-1.fc35.1.aarch64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-20.fc35.aarch64"
@@ -1156,16 +1156,16 @@
       "evra": "0.13.0-3.fc35.aarch64"
     },
     "util-linux": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4068-1.fc35.noarch"
+      "evra": "2:8.2.4198-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4068-1.fc35.aarch64"
+      "evra": "2:8.2.4198-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-26T14:37:39Z",
+    "generated": "2022-01-27T13:37:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-23T21:34:24Z"
+        "generated": "2022-01-26T16:13:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-25T01:05:29Z"
+        "generated": "2022-01-26T18:32:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3d893ae121..e77de14d57 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.3-1.fc35.x86_64"
+      "evra": "1.12.4-1.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -358,13 +358,13 @@
       "evra": "2.70.2-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-21.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-21.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-21.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -523,7 +523,7 @@
       "evra": "0.1.1-48.fc35.x86_64"
     },
     "libblkid": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.x86_64"
@@ -568,7 +568,7 @@
       "evra": "2.1.12-4.fc35.x86_64"
     },
     "libfdisk": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.x86_64"
@@ -643,7 +643,7 @@
       "evra": "2.13.0-3.fc35.x86_64"
     },
     "libmount": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.x86_64"
@@ -721,7 +721,7 @@
       "evra": "4.6.1-2.fc35.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.15.3-0.fc35.x86_64"
@@ -787,7 +787,7 @@
       "evra": "1.2.1-5.fc35.x86_64"
     },
     "libuuid": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.x86_64"
@@ -985,10 +985,10 @@
       "evra": "3.3-1.fc35.x86_64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.x86_64"
+      "evra": "0.120-1.fc35.1.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.x86_64"
+      "evra": "0.120-1.fc35.1.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-20.fc35.x86_64"
@@ -1168,16 +1168,16 @@
       "evra": "0.13.0-3.fc35.x86_64"
     },
     "util-linux": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4068-1.fc35.noarch"
+      "evra": "2:8.2.4198-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4068-1.fc35.x86_64"
+      "evra": "2:8.2.4198-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-26T14:37:07Z",
+    "generated": "2022-01-27T13:37:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-23T21:34:14Z"
+        "generated": "2022-01-26T16:14:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-25T01:05:52Z"
+        "generated": "2022-01-26T18:32:29Z"
       }
     }
   }

From de9d5a87ac85ec1aeb2a07f65107a2ddf8429258 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 Jan 2022 00:51:48 +0000
Subject: [PATCH 0701/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 34 ++++++----------------------------
 1 file changed, 6 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 94c1345afb..c59b56f409 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,12 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  ignition:
+    evr: 2.13.0-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b238d6fbbf
+      reason: https://github.com/coreos/ignition/issues/1305
+      type: fast-track
   kernel:
     evr: 5.15.10-200.fc35
     metadata:
@@ -54,31 +60,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
       type: pin
-  afterburn:
-    evr: 5.2.0-1.fc35
-    metadata:
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-87a938a18c
-  afterburn-dracut:
-    evr: 5.2.0-1.fc35
-    metadata:
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-87a938a18c
-  ignition:
-    evr: 2.13.0-3.fc35
-    metadata:
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b238d6fbbf
-      reason: https://github.com/coreos/ignition/issues/1305
-  polkit:
-    evr: 0.120-1.fc35.1
-    metadata:
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-da040e6b94
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1078
-  polkit-libs:
-    evr: 0.120-1.fc35.1
-    metadata:
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-da040e6b94
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1078

From eed579f04537d315d0cbc0d843f99c18b25d9dea Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 29 Oct 2021 14:59:32 -0400
Subject: [PATCH 0702/2157] coreos-boot-edit: run `rdcore bind-boot`

This binds the bootloader to the bootfs and the bootfs to the rootfs.

Part of https://github.com/coreos/fedora-coreos-tracker/issues/976.
---
 .../35coreos-ignition/coreos-boot-edit.sh     | 24 +++++++------------
 tests/kola/reboot/test.sh                     | 15 ++++++++++--
 2 files changed, 22 insertions(+), 17 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index 4116f03217..cf2e9c3c3e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -34,18 +34,12 @@ if [ -z "${root}" ]; then
     rdcore rootmap /sysroot --boot-mount ${bootmnt}
 fi
 
-# And similarly, only inject boot= if it's not already present.
-boot=$(karg boot)
-if [ -z "${boot}" ]; then
-    # XXX: `rdcore rootmap --inject-boot-karg` or maybe `rdcore bootmap`
-    eval $(blkid -o export "${bootdev}")
-    if [ -z "${UUID}" ]; then
-        # This should never happen
-        echo "Boot filesystem ${bootdev} has no UUID" >&2
-        exit 1
-    fi
-    rdcore kargs --boot-mount ${bootmnt} --append boot=UUID=${UUID}
-    # but also put it in /run for the first boot real root mount
-    mkdir -p /run/coreos
-    echo "${UUID}" > /run/coreos/bootfs_uuid
-fi
+# This does a few things:
+# 1. it puts the boot UUID in /run/coreos/bootfs_uuid which is used by the real
+#    root for mounting the bootfs in this boot
+# 2. it adds a boot=UUID= karg which is used by the real root for mounting the
+#    bootfs in subsequent boots
+# 3. it create a .root_uuid stamp file on the bootfs or fails if one exists
+# 4. it adds GRUB bootuuid.cfg dropins so that GRUB selects the boot filesystem
+#    by UUID
+rdcore bind-boot /sysroot ${bootmnt}
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 9d9fa0b9e8..f10e51632e 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -20,6 +20,15 @@ if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
 fi
 ok "boot mounted by UUID"
 
+# check that we took ownership of the bootfs
+[ -f /boot/.root_uuid ]
+
+# check for the UUID dropins
+[ -f /boot/grub2/bootuuid.cfg ]
+mount -o ro /dev/disk/by-label/EFI-SYSTEM /boot/efi
+[ -f /boot/efi/EFI/*/bootuuid.cfg ]
+umount /boot/efi
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       ok "first boot"
@@ -28,10 +37,12 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 
   rebooted)
       # check for expected default kargs
-      grep root=UUID= /proc/cmdline
+      grep root=UUID=$(cat /boot/.root_uuid) /proc/cmdline
       ok "found root karg"
 
-      grep boot=UUID= /proc/cmdline
+      bootsrc=$(findmnt -nvr /boot -o SOURCE)
+      eval $(blkid -o export "${bootsrc}")
+      grep boot=UUID=${UUID} /proc/cmdline
       ok "found boot karg"
 
       ok "second boot"

From 60fbe17912f670d5f0bfc7a3fbcf523d495bcd3e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 27 Jan 2022 13:57:17 -0500
Subject: [PATCH 0703/2157] overrides: fast-track kernel-5.15.17-200.fc35

This kernel has a revert [1] that allows us to get AWS instance types
working again [2] and also is newer so it includes a fix for recent
CVE-2022-0185 [3].

[1] https://gitlab.com/cki-project/kernel-ark/-/commit/63aede4
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1066#issuecomment-1019560658
[3] https://bugzilla.redhat.com/show_bug.cgi?id=2042052
---
 manifest-lock.overrides.yaml | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index c59b56f409..4133d66dd5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -16,20 +16,23 @@ packages:
       reason: https://github.com/coreos/ignition/issues/1305
       type: fast-track
   kernel:
-    evr: 5.15.10-200.fc35
+    evr: 5.15.17-200.fc35
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
+      type: fast-track
   kernel-core:
-    evr: 5.15.10-200.fc35
+    evr: 5.15.17-200.fc35
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
+      type: fast-track
   kernel-modules:
-    evr: 5.15.10-200.fc35
+    evr: 5.15.17-200.fc35
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
+      type: fast-track
   systemd:
     evr: 249.7-2.fc35
     metadata:

From 601b3e83141219f3aae6d76afd83924fd13c8544 Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Thu, 27 Jan 2022 16:01:54 -0500
Subject: [PATCH 0704/2157] tests/k8s/systemd-env-read: search all lines of
 service logs

The previous version of this test was specifically searching the
second log entry of the `kube-env.service` for the magic "FCOS" entry.
However, it has been observed that the magic entry can appear *before*
the message that the service started.

```
Jan 27 19:58:13.313896 localhost echo[962]: FCOS
Jan 27 19:58:13.314524 localhost systemd[1]: Starting kube-env.service...
Jan 27 19:58:13.443933 localhost systemd[1]: Finished kube-env.service.
```

So change the logic to just search all of the logged lines from the
service.
---
 tests/kola/kubernetes/systemd-env-read/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index adf379aced..1d14aeaa30 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -26,7 +26,7 @@ fi
 ok "kube-env.service successfully started"
 
 # Verify that 'FCOS' was wrtitten to the journal
-if [ "$(journalctl -o cat -u kube-env.service | sed -n 2p)" != "FCOS" ]; then
+if ! journalctl -o cat -u kube-env.service | grep FCOS; then
     fatal "kube-env.service did not write 'FCOS' to journal"
 fi
 ok "kube-env.service ran and wrote 'FCOS' to the journal"
\ No newline at end of file

From 4688484639725ca36d55c1c42680a03a33797d91 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 28 Jan 2022 10:19:10 -0500
Subject: [PATCH 0705/2157] tests/extensions.package: don't try vim on rawhide

The `vim-enhanced` package has a shared base dep (`vim-common`) so is
subject to the binding issue which the updates archiver solves. Since
the archiver isn't enabled on rawhide, don't try it there.
---
 tests/kola/data/commonlib.sh  | 4 ++++
 tests/kola/extensions/package | 8 +++++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 9a0ffc893b..6e562a7dac 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -21,3 +21,7 @@ get_ipv4_for_nic() {
     fi
     echo $ip
 }
+
+get_fcos_stream() {
+    rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]'
+}
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index ec5f2b2f38..0e3f321a41 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -14,9 +14,15 @@ commands=(
   'strace'
   'tcpdump'
   'tree'
-  'vim'
 )
 
+# Also try some OS extensions which have host bindings. But these we can only do
+# on !rawhide because the archive repo isn't active there.
+case "$(get_fcos_stream)" in
+    "rawhide") ;;
+    *) commands+=('vim') ;;
+esac
+
 rpm-ostree install --apply-live "${commands[@]}"
 
 failed=""

From 4d0d98a72f5e63c2cd5503a061e1b4e15204a260 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 28 Jan 2022 22:04:37 +0000
Subject: [PATCH 0706/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/14/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 254bbeb420..35d4f77ee4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.17-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.17-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.10-200.fc35.aarch64"
+      "evra": "5.15.17-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1162,10 +1162,10 @@
       "evra": "2.37.3-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4198-1.fc35.noarch"
+      "evra": "2:8.2.4068-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4198-1.fc35.aarch64"
+      "evra": "2:8.2.4068-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1199,16 +1199,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-27T13:37:53Z",
+    "generated": "2022-01-28T20:53:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-26T16:13:41Z"
+        "generated": "2022-01-27T20:30:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-26T18:32:06Z"
+        "generated": "2022-01-28T01:04:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e77de14d57..89ddd0805d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.17-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.17-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.10-200.fc35.x86_64"
+      "evra": "5.15.17-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1174,10 +1174,10 @@
       "evra": "2.37.3-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4198-1.fc35.noarch"
+      "evra": "2:8.2.4068-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4198-1.fc35.x86_64"
+      "evra": "2:8.2.4068-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1211,16 +1211,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-27T13:37:18Z",
+    "generated": "2022-01-28T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-26T16:14:57Z"
+        "generated": "2022-01-27T20:32:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-26T18:32:29Z"
+        "generated": "2022-01-28T01:04:30Z"
       }
     }
   }

From 342c49106ab5d0d5447e0bd80e45b54882609856 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Jan 2022 12:22:01 +0000
Subject: [PATCH 0707/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 4133d66dd5..3d7b4ac71d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,12 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  ignition:
-    evr: 2.13.0-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b238d6fbbf
-      reason: https://github.com/coreos/ignition/issues/1305
-      type: fast-track
   kernel:
     evr: 5.15.17-200.fc35
     metadata:

From 479bebeeb227fd60c53c50cfeadd0429f2b5bfd1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Jan 2022 22:06:45 +0000
Subject: [PATCH 0708/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/16/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 43 ++++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 43 ++++++++++++++++++++------------------
 2 files changed, 46 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 35d4f77ee4..8fd4859f4c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.aarch64"
     },
     "afterburn": {
-      "evra": "5.2.0-1.fc35.aarch64"
+      "evra": "5.2.0-3.fc35.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-1.fc35.aarch64"
+      "evra": "5.2.0-3.fc35.aarch64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.aarch64"
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-2.fc35.noarch"
+      "evra": "2:2.173.1-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.5.8-1.fc35.aarch64"
@@ -355,7 +355,7 @@
       "evra": "2.34.1-1.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.70.2-1.fc35.aarch64"
+      "evra": "2.70.3-1.fc35.aarch64"
     },
     "glibc": {
       "evra": "2.34-21.fc35.aarch64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-48.fc35.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "libjcat": {
       "evra": "0.1.9-1.fc35.aarch64"
@@ -733,16 +733,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "libstdc++": {
       "evra": "11.2.1-7.fc35.aarch64"
@@ -826,7 +826,7 @@
       "evra": "4.94.0-2.fc35.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.3-2.fc35.aarch64"
+      "evra": "5.4.3-4.fc35.aarch64"
     },
     "luksmeta": {
       "evra": "9-12.fc35.aarch64"
@@ -1087,28 +1087,31 @@
       "evra": "0.1.2-8.fc35.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-client": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-common": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.6.1-1.fc35.aarch64"
+      "evra": "2.6.3-1.fc35.aarch64"
+    },
+    "sssd-nfs-idmap": {
+      "evra": "2.6.3-1.fc35.aarch64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.aarch64"
@@ -1199,7 +1202,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-28T20:53:24Z",
+    "generated": "2022-01-29T20:52:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1208,7 +1211,7 @@
         "generated": "2022-01-27T20:30:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-28T01:04:07Z"
+        "generated": "2022-01-29T06:26:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 89ddd0805d..88c503d0ff 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.x86_64"
     },
     "afterburn": {
-      "evra": "5.2.0-1.fc35.x86_64"
+      "evra": "5.2.0-3.fc35.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-1.fc35.x86_64"
+      "evra": "5.2.0-3.fc35.x86_64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.x86_64"
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.170.0-2.fc35.noarch"
+      "evra": "2:2.173.1-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.5.8-1.fc35.x86_64"
@@ -355,7 +355,7 @@
       "evra": "2.34.1-1.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.70.2-1.fc35.x86_64"
+      "evra": "2.70.3-1.fc35.x86_64"
     },
     "glibc": {
       "evra": "2.34-21.fc35.x86_64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-48.fc35.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "libjcat": {
       "evra": "0.1.9-1.fc35.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "libstdc++": {
       "evra": "11.2.1-7.fc35.x86_64"
@@ -835,7 +835,7 @@
       "evra": "4.94.0-2.fc35.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.3-2.fc35.x86_64"
+      "evra": "5.4.3-4.fc35.x86_64"
     },
     "luksmeta": {
       "evra": "9-12.fc35.x86_64"
@@ -1099,28 +1099,31 @@
       "evra": "0.1.2-8.fc35.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-client": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-common": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.6.1-1.fc35.x86_64"
+      "evra": "2.6.3-1.fc35.x86_64"
+    },
+    "sssd-nfs-idmap": {
+      "evra": "2.6.3-1.fc35.x86_64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.x86_64"
@@ -1211,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-28T20:52:56Z",
+    "generated": "2022-01-29T20:52:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1220,7 +1223,7 @@
         "generated": "2022-01-27T20:32:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-28T01:04:30Z"
+        "generated": "2022-01-29T06:26:29Z"
       }
     }
   }

From 236e7304b0f90a5e4c2263b2db824dbc29e3fd87 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 29 Jan 2022 16:39:36 -0500
Subject: [PATCH 0709/2157] tests/extensions: bump timeout for the package test

This is dependent on network and disk speed but we've seen the
test take longer than 10 minutes in our aarch64 qemu tests.
---
 tests/kola/extensions/package | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 0e3f321a41..5e6ae4b24e 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -2,9 +2,13 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet" }
+# kola: { "distros": "fcos", "tags": "needs-internet", "timeoutMin": 15 }
 #
 # This test ensures that we can install some common tools as OS extensions.
+#
+# - timeoutMin: 15
+#   - This is dependent on network and disk speed but we've seen the
+#     test take longer than 10 minutes in our aarch64 qemu tests.
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From be9209bb5fed9aa90086af21328e812e63ff3784 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 29 Jan 2022 16:44:44 -0500
Subject: [PATCH 0710/2157] tests/extensions: limit to running on one platform

Our default is qemu, so let's run once there and no where else because
the test should pass everywhere if it passes anywhere.
---
 tests/kola/extensions/module  | 5 ++++-
 tests/kola/extensions/package | 4 +++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index 3562a5de5a..f46e939520 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -2,9 +2,12 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet" }
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu"}
 #
 # This test ensures that we can install some common tools as OS extensions.
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 5e6ae4b24e..861179dfee 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -2,13 +2,15 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "timeoutMin": 15 }
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15 }
 #
 # This test ensures that we can install some common tools as OS extensions.
 #
 # - timeoutMin: 15
 #   - This is dependent on network and disk speed but we've seen the
 #     test take longer than 10 minutes in our aarch64 qemu tests.
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From 0e2361382ce5f9d12b81a57410693ba0acafaede Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 30 Jan 2022 20:04:35 -0500
Subject: [PATCH 0711/2157] overrides: fast-track Afterburn 5.2.0-4

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3d7b4ac71d..f9915b54f0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,16 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  afterburn:
+    evr: 5.2.0-4.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
+      type: fast-track
+  afterburn-dracut:
+    evr: 5.2.0-4.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
+      type: fast-track
   kernel:
     evr: 5.15.17-200.fc35
     metadata:

From 52db678b6764afa6785b5f45a7db039d70ef50d9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 31 Jan 2022 04:54:53 +0000
Subject: [PATCH 0712/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/21/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8fd4859f4c..9f13526fdd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.aarch64"
     },
     "afterburn": {
-      "evra": "5.2.0-3.fc35.aarch64"
+      "evra": "5.2.0-4.fc35.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-3.fc35.aarch64"
+      "evra": "5.2.0-4.fc35.aarch64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.aarch64"
@@ -1165,10 +1165,10 @@
       "evra": "2.37.3-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4068-1.fc35.noarch"
+      "evra": "2:8.2.4232-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4068-1.fc35.aarch64"
+      "evra": "2:8.2.4232-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-29T20:52:42Z",
+    "generated": "2022-01-31T03:39:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-27T20:30:48Z"
+        "generated": "2022-01-31T03:29:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-29T06:26:05Z"
+        "generated": "2022-01-31T01:03:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 88c503d0ff..22276136ee 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.x86_64"
     },
     "afterburn": {
-      "evra": "5.2.0-3.fc35.x86_64"
+      "evra": "5.2.0-4.fc35.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-3.fc35.x86_64"
+      "evra": "5.2.0-4.fc35.x86_64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.x86_64"
@@ -1177,10 +1177,10 @@
       "evra": "2.37.3-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4068-1.fc35.noarch"
+      "evra": "2:8.2.4232-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4068-1.fc35.x86_64"
+      "evra": "2:8.2.4232-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-29T20:52:08Z",
+    "generated": "2022-01-31T03:38:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-27T20:32:11Z"
+        "generated": "2022-01-31T03:29:42Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-29T06:26:29Z"
+        "generated": "2022-01-31T01:03:36Z"
       }
     }
   }

From 8c6c6ae25913b69c0f778d984d6fb287e30ee152 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 31 Jan 2022 06:17:48 +0000
Subject: [PATCH 0713/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f9915b54f0..8dcb8d0dd6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,24 +19,6 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
       type: fast-track
-  kernel:
-    evr: 5.15.17-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: fast-track
-  kernel-core:
-    evr: 5.15.17-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: fast-track
-  kernel-modules:
-    evr: 5.15.17-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aaa4e47375
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: fast-track
   systemd:
     evr: 249.7-2.fc35
     metadata:

From d7ba66b271aa1db1cdbaca8ecdc322d6785e8b2a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 17:57:52 -0500
Subject: [PATCH 0714/2157] workflows: fix copypaste error in step name

---
 .github/workflows/remove-graduated-overrides.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 78e7736c61..e52ee55d9d 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -33,7 +33,7 @@ jobs:
           git config user.name 'CoreOS Bot'
           git config user.email coreosbot@fedoraproject.org
           ci/remove-graduated-overrides.py
-      - name: Open pull request
+      - name: Create commit
         run: |
           if ! git diff --quiet --exit-code; then
               git commit -am "lockfiles: drop graduated overrides 🎓" \

From 35b084480a2fbb0958b3d593d54bd78c416b11a8 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 17:58:15 -0500
Subject: [PATCH 0715/2157] ci/remove-graduated-overrides: rename and move to
 subcommand

We're going to add more functionality.
---
 .github/workflows/remove-graduated-overrides.yml  |  2 +-
 ...remove-graduated-overrides.py => overrides.py} | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)
 rename ci/{remove-graduated-overrides.py => overrides.py} (88%)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index e52ee55d9d..c403723cf6 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -32,7 +32,7 @@ jobs:
         run: |
           git config user.name 'CoreOS Bot'
           git config user.email coreosbot@fedoraproject.org
-          ci/remove-graduated-overrides.py
+          ci/overrides.py graduate
       - name: Create commit
         run: |
           if ! git diff --quiet --exit-code; then
diff --git a/ci/remove-graduated-overrides.py b/ci/overrides.py
similarity index 88%
rename from ci/remove-graduated-overrides.py
rename to ci/overrides.py
index 0ae84a6741..4ad11b4b9c 100755
--- a/ci/remove-graduated-overrides.py
+++ b/ci/overrides.py
@@ -1,5 +1,6 @@
 #!/usr/bin/python3
 
+import argparse
 import os
 import sys
 import json
@@ -25,6 +26,20 @@
 
 
 def main():
+    parser = argparse.ArgumentParser(description='Manage overrides.')
+    # "dest" to work around https://bugs.python.org/issue29298
+    subcommands = parser.add_subparsers(title='subcommands', required=True,
+            dest='command')
+
+    graduate = subcommands.add_parser('graduate',
+            description='Remove graduated overrides.')
+    graduate.set_defaults(func=do_graduate)
+
+    args = parser.parse_args()
+    args.func(args)
+
+
+def do_graduate(_args):
     treefile = get_treefile()
     base = get_dnf_base(treefile)
     setup_repos(base, treefile)

From 71cfb5a24c8320352faccc5d8893e72bc7f06fab Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 16:51:43 -0500
Subject: [PATCH 0716/2157] ci/overrides: rename function for clarity

We're going to be updating lockfiles in other ways too.
---
 ci/overrides.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 4ad11b4b9c..6d4a621bef 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -45,7 +45,7 @@ def do_graduate(_args):
     setup_repos(base, treefile)
 
     for fn in get_lockfiles():
-        update_lockfile(base, fn)
+        graduate_lockfile(base, fn)
 
 
 def get_treefile():
@@ -84,7 +84,7 @@ def get_lockfiles():
     return lockfiles
 
 
-def update_lockfile(base, fn):
+def graduate_lockfile(base, fn):
     if not os.path.exists(fn):
         return
 

From bf5b0b4bb6d8d0c7d862ba1cfeff70e3ee67c01c Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 17:15:23 -0500
Subject: [PATCH 0717/2157] ci/overrides: move lockfile writing to a helper
 function

---
 ci/overrides.py | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 6d4a621bef..6cc1b74f1e 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -114,10 +114,7 @@ def graduate_lockfile(base, fn):
 
     if lockfile['packages'] != new_packages:
         lockfile['packages'] = new_packages
-        with open(fn, 'w') as f:
-            f.write(OVERRIDES_HEADER.strip())
-            f.write('\n\n')
-            yaml.dump(lockfile, f)
+        write_lockfile(fn, lockfile)
     else:
         print(f"{fn}: no packages graduated")
 
@@ -138,5 +135,12 @@ def sack_has_nevra_greater_or_equal(base, nevra):
     return nevra_latest >= nevra
 
 
+def write_lockfile(fn, contents):
+    with open(fn, 'w') as f:
+        f.write(OVERRIDES_HEADER.strip())
+        f.write('\n\n')
+        yaml.dump(contents, f)
+
+
 if __name__ == "__main__":
     sys.exit(main())

From 6a3f6490e29e2eed74f09048d602364bca7fda8a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 17:15:42 -0500
Subject: [PATCH 0718/2157] ci/overrides: don't assume we're running in the
 root of the repo

---
 ci/overrides.py | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 6cc1b74f1e..2c685b86ad 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -24,6 +24,8 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 """
 
+basedir = os.path.normpath(os.path.join(os.path.dirname(sys.argv[0]), '..'))
+
 
 def main():
     parser = argparse.ArgumentParser(description='Manage overrides.')
@@ -50,13 +52,14 @@ def do_graduate(_args):
 
 def get_treefile():
     treefile = subprocess.check_output(['rpm-ostree', 'compose', 'tree',
-                                        '--print-only', 'manifest.yaml'])
+                                        '--print-only',
+                                        os.path.join(basedir, 'manifest.yaml')])
     return json.loads(treefile)
 
 
 def get_dnf_base(treefile):
     base = dnf.Base()
-    base.conf.reposdir = "."
+    base.conf.reposdir = basedir
     base.conf.releasever = treefile['releasever']
     base.read_all_repos()
     return base
@@ -81,7 +84,7 @@ def get_lockfiles():
     # arch-specific lockfiles will require making dnf fetch metadata not just
     # for the basearch on which we're running
     # lockfiles += [f'manifest-lock.overrides.{arch}.yaml' for arch in ARCHES]
-    return lockfiles
+    return [os.path.join(basedir, f) for f in lockfiles]
 
 
 def graduate_lockfile(base, fn):

From a07073d785ed2a9351812930670ebbceeca96ee8 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 18:07:25 -0500
Subject: [PATCH 0719/2157] ci/overrides: use yaml.safe_load()

---
 ci/overrides.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 2c685b86ad..41007a01e9 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -92,7 +92,7 @@ def graduate_lockfile(base, fn):
         return
 
     with open(fn) as f:
-        lockfile = yaml.load(f)
+        lockfile = yaml.safe_load(f)
     if 'packages' not in lockfile:
         return
 

From 2adfc0be72b7f9d6256401ba6855b1a3e31aa33e Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 18:17:29 -0500
Subject: [PATCH 0720/2157] ci/overrides: add commands to pin and fast-track
 packages

For fast-tracks, take the Bodhi update, and for pins, take the SRPM NVR.
---
 .../workflows/remove-graduated-overrides.yml  |   3 +-
 ci/overrides.py                               | 128 ++++++++++++++++++
 2 files changed, 130 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index c403723cf6..51226e2150 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -23,7 +23,8 @@ jobs:
           - rawhide
       fail-fast: false
     steps:
-      - run: dnf install -y rpm-ostree # see related TODO above
+      - name: Install dependencies
+        run: dnf install -y python3-bodhi-client rpm-ostree # see related TODO above
       - name: Checkout
         uses: actions/checkout@v2
         with:
diff --git a/ci/overrides.py b/ci/overrides.py
index 41007a01e9..c1d6e57580 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -1,15 +1,20 @@
 #!/usr/bin/python3
 
 import argparse
+import functools
 import os
 import sys
 import json
+from urllib.parse import urlparse
 import yaml
 import subprocess
 
+import bodhi.client
 import dnf
 import hawkey
+import koji
 
+KOJI_URL = 'https://koji.fedoraproject.org/kojihub'
 ARCHES = ['s390x', 'x86_64', 'ppc64le', 'aarch64']
 
 OVERRIDES_HEADER = """
@@ -33,6 +38,21 @@ def main():
     subcommands = parser.add_subparsers(title='subcommands', required=True,
             dest='command')
 
+    fast_track = subcommands.add_parser('fast-track',
+            description='Fast-track Bodhi updates.')
+    fast_track.add_argument('update', nargs='+',
+            help='ID or URL of Bodhi update to fast-track')
+    fast_track.add_argument('-r', '--reason',
+            help='URL explaining the reason for the fast-track')
+    fast_track.set_defaults(func=do_fast_track)
+
+    pin = subcommands.add_parser('pin', description='Pin source RPMs.')
+    pin.add_argument('nvr', nargs='+',
+            help='NVR of SRPM to pin')
+    pin.add_argument('-r', '--reason', required=True,
+            help='URL explaining the reason for the pin')
+    pin.set_defaults(func=do_pin)
+
     graduate = subcommands.add_parser('graduate',
             description='Remove graduated overrides.')
     graduate.set_defaults(func=do_graduate)
@@ -41,6 +61,41 @@ def main():
     args.func(args)
 
 
+def do_fast_track(args):
+    overrides = {}
+    if args.reason:
+        check_url(args.reason)
+    for update in args.update:
+        update = get_bodhi_update(update)
+        for n, evr in get_binary_packages(get_source_nvrs(update)).items():
+            overrides[n] = dict(
+                evr=evr,
+                metadata=dict(
+                    type='fast-track',
+                    bodhi=update['url'],
+                )
+            )
+            if args.reason:
+                overrides[n]['metadata']['reason'] = args.reason
+    for lockfile_path in get_lockfiles():
+        merge_overrides(lockfile_path, overrides)
+
+
+def do_pin(args):
+    overrides = {}
+    check_url(args.reason)
+    for n, evr in get_binary_packages(args.nvr).items():
+        overrides[n] = dict(
+            evr=evr,
+            metadata=dict(
+                type='pin',
+                reason=args.reason,
+            )
+        )
+    for lockfile_path in get_lockfiles():
+        merge_overrides(lockfile_path, overrides)
+
+
 def do_graduate(_args):
     treefile = get_treefile()
     base = get_dnf_base(treefile)
@@ -65,6 +120,65 @@ def get_dnf_base(treefile):
     return base
 
 
+@functools.cache
+def get_manifest_packages(arch):
+    '''Return manifest lock package map for the specified arch.'''
+    try:
+        with open(os.path.join(basedir, f'manifest-lock.{arch}.json')) as f:
+            manifest = json.load(f)
+        return manifest['packages']
+    except FileNotFoundError:
+        return {}
+
+
+def get_bodhi_update(id_or_url):
+    '''Query Bodhi for the specified update ID or URL and return an info
+    dict.'''
+    # discard rest of URL if any
+    id = id_or_url.split('/')[-1]
+    client = bodhi.client.bindings.BodhiClient()
+    result = client.query(updateid=id)
+    if not result.updates:
+        raise Exception(f'Update {id} not found')
+    return result.updates[0]
+
+
+def get_source_nvrs(update):
+    '''Return list of source NVRs from the update info dict.'''
+    return [b['nvr'] for b in update.builds]
+
+
+def get_binary_packages(source_nvrs):
+    '''Return name => EVR dict for the specified source NVRs.  A binary
+    package is included if it is in the manifest lockfiles.'''
+    binpkgs = {}
+    accepted_in_arch = {}
+    client = koji.ClientSession(KOJI_URL)
+
+    def arches_with_package(name, arch):
+        '''For a given package and arch, return the arches that list the
+        package in their lockfiles.  There may be more than one, since we
+        check noarch packages against every candidate architecture.'''
+        candidates = ARCHES if arch == 'noarch' else [arch]
+        return [a for a in candidates if name in get_manifest_packages(a)]
+
+    for source_nvr in source_nvrs:
+        for binpkg in client.listBuildRPMs(source_nvr):
+            name = binpkg['name']
+            evr = f'{binpkg["version"]}-{binpkg["release"]}'
+            if binpkg['epoch'] is not None:
+                evr = f'{binpkg["epoch"]}:{evr}'
+            for arch in arches_with_package(name, binpkg['arch']):
+                binpkgs[name] = evr
+                accepted_in_arch.setdefault(arch, set()).add(name)
+
+    # Check that every arch has the same package set
+    if list(accepted_in_arch.values())[:-1] != list(accepted_in_arch.values())[1:]:
+        raise Exception(f'This tool cannot handle arch-specific overrides: {accepted_in_arch}')
+
+    return binpkgs
+
+
 def setup_repos(base, treefile):
     for repo in base.repos.values():
         repo.disable()
@@ -138,6 +252,14 @@ def sack_has_nevra_greater_or_equal(base, nevra):
     return nevra_latest >= nevra
 
 
+def merge_overrides(fn, overrides):
+    '''Modify the file fn by applying the specified package overrides.'''
+    with open(fn) as f:
+        lockfile = yaml.safe_load(f)
+    lockfile.setdefault('packages', {}).update(overrides)
+    write_lockfile(fn, lockfile)
+
+
 def write_lockfile(fn, contents):
     with open(fn, 'w') as f:
         f.write(OVERRIDES_HEADER.strip())
@@ -145,5 +267,11 @@ def write_lockfile(fn, contents):
         yaml.dump(contents, f)
 
 
+def check_url(u):
+    p = urlparse(u)
+    if p.scheme not in ('http', 'https'):
+        raise Exception(f'Invalid URL: {u}')
+
+
 if __name__ == "__main__":
     sys.exit(main())

From ea5f8f1cfb5eb3b966e1d5cb945a5bf306effd0c Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 18:31:27 -0500
Subject: [PATCH 0721/2157] ci/overrides: check for mismatched dist tags

Verify that newly added pins and fast-tracks have dist tags that match
the releasever from manifest.yaml, unless --ignore-dist-mismatch is
specified.
---
 ci/overrides.py | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/ci/overrides.py b/ci/overrides.py
index c1d6e57580..b6eff94902 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -44,6 +44,8 @@ def main():
             help='ID or URL of Bodhi update to fast-track')
     fast_track.add_argument('-r', '--reason',
             help='URL explaining the reason for the fast-track')
+    fast_track.add_argument('--ignore-dist-mismatch', action='store_true',
+            help='ignore mismatched Fedora major version')
     fast_track.set_defaults(func=do_fast_track)
 
     pin = subcommands.add_parser('pin', description='Pin source RPMs.')
@@ -51,6 +53,8 @@ def main():
             help='NVR of SRPM to pin')
     pin.add_argument('-r', '--reason', required=True,
             help='URL explaining the reason for the pin')
+    pin.add_argument('--ignore-dist-mismatch', action='store_true',
+            help='ignore mismatched Fedora major version')
     pin.set_defaults(func=do_pin)
 
     graduate = subcommands.add_parser('graduate',
@@ -63,11 +67,14 @@ def main():
 
 def do_fast_track(args):
     overrides = {}
+    dist = get_expected_dist_tag()
     if args.reason:
         check_url(args.reason)
     for update in args.update:
         update = get_bodhi_update(update)
         for n, evr in get_binary_packages(get_source_nvrs(update)).items():
+            if not args.ignore_dist_mismatch:
+                check_dist_tag(n, evr, dist)
             overrides[n] = dict(
                 evr=evr,
                 metadata=dict(
@@ -83,8 +90,11 @@ def do_fast_track(args):
 
 def do_pin(args):
     overrides = {}
+    dist = get_expected_dist_tag()
     check_url(args.reason)
     for n, evr in get_binary_packages(args.nvr).items():
+        if not args.ignore_dist_mismatch:
+            check_dist_tag(n, evr, dist)
         overrides[n] = dict(
             evr=evr,
             metadata=dict(
@@ -273,5 +283,16 @@ def check_url(u):
         raise Exception(f'Invalid URL: {u}')
 
 
+def get_expected_dist_tag():
+    with open(os.path.join(basedir, 'manifest.yaml')) as f:
+        releasever = yaml.safe_load(f)['releasever']
+    return f'.fc{releasever}'
+
+
+def check_dist_tag(name, evr, dist):
+    if not evr.endswith(dist):
+        raise Exception(f"Package {name}-{evr} doesn't match expected dist tag {dist}")
+
+
 if __name__ == "__main__":
     sys.exit(main())

From 0aa8145d73aca046a7ad27255ca99af10ec9a3c0 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 26 Jan 2022 23:49:27 -0500
Subject: [PATCH 0722/2157] ci/overrides: require fast-track reason for
 non-CoreOS packages

This enforces existing policy.
---
 ci/overrides.py | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index b6eff94902..1734b2dac0 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -16,6 +16,19 @@
 
 KOJI_URL = 'https://koji.fedoraproject.org/kojihub'
 ARCHES = ['s390x', 'x86_64', 'ppc64le', 'aarch64']
+TRIVIAL_FAST_TRACKS = [
+    # Packages that don't need a reason URL when fast-tracking
+    'console-login-helper-messages',
+    'ignition',
+    'ostree',
+    'rpm-ostree',
+    'rust-afterburn',
+    'rust-bootupd',
+    'rust-coreos-installer',
+    'rust-fedora-coreos-pinger',
+    'rust-ignition-config',
+    'rust-zincati',
+]
 
 OVERRIDES_HEADER = """
 # This lockfile should be used to pin to a package version (`type: pin`) or to
@@ -72,7 +85,12 @@ def do_fast_track(args):
         check_url(args.reason)
     for update in args.update:
         update = get_bodhi_update(update)
-        for n, evr in get_binary_packages(get_source_nvrs(update)).items():
+        source_nvrs = get_source_nvrs(update)
+        for source_nvr in source_nvrs:
+            source_name = '-'.join(source_nvr.split('-')[:-2])
+            if not args.reason and source_name not in TRIVIAL_FAST_TRACKS:
+                raise Exception(f'No reason URL specified and source package {source_name} not in {TRIVIAL_FAST_TRACKS}')
+        for n, evr in get_binary_packages(source_nvrs).items():
             if not args.ignore_dist_mismatch:
                 check_dist_tag(n, evr, dist)
             overrides[n] = dict(

From 57a187aab43d4dae3a95a8d26aeb1dd91115b26d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 19:23:20 -0500
Subject: [PATCH 0723/2157] ci/overrides: add a query command to map a Bodhi
 update to SRPM NVRs

The CI workflow will need it.
---
 ci/overrides.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ci/overrides.py b/ci/overrides.py
index 1734b2dac0..9bceb0aa5f 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -70,6 +70,11 @@ def main():
             help='ignore mismatched Fedora major version')
     pin.set_defaults(func=do_pin)
 
+    srpms = subcommands.add_parser('srpms',
+            description='Name the source RPMs for a Bodhi update.')
+    srpms.add_argument('update', help='ID or URL of Bodhi update')
+    srpms.set_defaults(func=do_srpms)
+
     graduate = subcommands.add_parser('graduate',
             description='Remove graduated overrides.')
     graduate.set_defaults(func=do_graduate)
@@ -124,6 +129,11 @@ def do_pin(args):
         merge_overrides(lockfile_path, overrides)
 
 
+def do_srpms(args):
+    for nvr in get_source_nvrs(get_bodhi_update(args.update)):
+        print(nvr)
+
+
 def do_graduate(_args):
     treefile = get_treefile()
     base = get_dnf_base(treefile)

From 0aecce8e786465203112f2471b93d0f6b8c61483 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 19:24:22 -0500
Subject: [PATCH 0724/2157] workflows: add manual workflow to fast-track or pin
 packages

Run `overrides.py {fast-track|pin}` and submit a PR.  For now, only
handle one Bodhi update (for fast-track) or SRPM (for pin) per run.

Two runs are required when overriding both testing-devel and next-devel,
since next-devel might be on a different Fedora major.
---
 .github/workflows/add-override.yml | 90 ++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 .github/workflows/add-override.yml

diff --git a/.github/workflows/add-override.yml b/.github/workflows/add-override.yml
new file mode 100644
index 0000000000..185c4246e6
--- /dev/null
+++ b/.github/workflows/add-override.yml
@@ -0,0 +1,90 @@
+---
+name: Add package override
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: Target branch
+        default: testing-devel
+      what:
+        description: "Bodhi update (fast-track) or SRPM NVR (pin)"
+      pin:
+        description: "Pin (don't remove when stable)"
+        type: boolean
+      reason:
+        description: "Reason URL (optional for routine fast-tracks)"
+
+permissions:
+  # none at all
+  contents: none
+
+# This workflow could almost use the default GITHUB_TOKEN, if we were to
+# push the branch into this repo.  However, GitHub Actions has recursion
+# avoidance that would prevent CI from running on the PR:
+#
+# https://github.com/peter-evans/create-pull-request/blob/28fa4848947e/docs/concepts-guidelines.md#workarounds-to-trigger-further-workflow-runs
+#
+# So we create the PR using a separate Personal Access Token in
+# COREOSBOT_RELENG_TOKEN, belonging to a machine account.  That allows CI to
+# run when the PR is first created.  However, it's also possible to rerun
+# the workflow and have it force-push the branch, reusing the same PR.  In
+# that case the push also cannot come from GITHUB_TOKEN, or CI will not
+# rerun.  Thus we also do the push using COREOSBOT_RELENG_TOKEN.  Since we
+# don't want to give the machine account privileges to this repo, we push
+# to a forked repo owned by the machine account.
+
+jobs:
+  add-override:
+    name: Add package override
+    runs-on: ubuntu-latest
+    container: registry.fedoraproject.org/fedora:latest
+    steps:
+      - name: Install dependencies
+        run: dnf install -y git jq python3-bodhi-client python3-pyyaml
+      - name: Check out repository
+        uses: actions/checkout@v2
+        with:
+          ref: ${{ github.event.inputs.target }}
+          # We need an unbroken commit chain when pushing to the fork.  Don't
+          # make assumptions about which commits are already available there.
+          fetch-depth: 0
+      - name: Update metadata
+        env:
+          TARGET: ${{ github.event.inputs.target }}
+          WHAT: ${{ github.event.inputs.what }}
+          PIN: ${{ github.event.inputs.pin }}
+          REASON: ${{ github.event.inputs.reason }}
+        run: |
+          set -euxo pipefail
+
+          if [ "${PIN}" = true ]; then
+              ci/overrides.py pin "${WHAT}" -r "${REASON}"
+              title="overrides: pin ${WHAT}"
+          else
+              ci/overrides.py fast-track "${WHAT}" ${REASON:+-r "${REASON}"}
+              srpms=$(ci/overrides.py srpms "${WHAT}" | paste -sd,)
+              title="overrides: fast-track ${srpms//,/, }"
+          fi
+
+          if [ "${TARGET}" = testing-devel ]; then
+              pr_title="${title}"
+          else
+              pr_title="[${TARGET}] ${title}"
+          fi
+          branch_name=override-$(echo "${TARGET}:${title}" | sha256sum | cut -c1-8)
+
+          echo "BRANCH_NAME=${branch_name}" >> ${GITHUB_ENV}
+          echo "COMMIT_TITLE=${title}" >> ${GITHUB_ENV}
+          echo "PR_TITLE=${pr_title}" >> ${GITHUB_ENV}
+      - name: Open pull request
+        uses: peter-evans/create-pull-request@v3.8.2
+        with:
+          token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
+          branch: ${{ env.BRANCH_NAME }}
+          commit-message: ${{ env.COMMIT_TITLE }}
+          push-to-fork: coreosbot-releng/fedora-coreos-config
+          title: ${{ env.PR_TITLE }}
+          body: "Requested by @${{ github.actor }} via [GitHub workflow](${{ github.server_url }}/${{ github.repository }}/actions/workflows/add-override.yml) ([source](${{ github.server_url }}/${{ github.repository }}/blob/testing-devel/.github/workflows/add-override.yml))."
+          committer: "CoreOS Bot <coreosbot@fedoraproject.org>"
+          author: "CoreOS Bot <coreosbot@fedoraproject.org>"
+          delete-branch: true

From 1b6eb5c590291117b8d3b025e047293c3814425d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 21 Jan 2022 20:19:59 -0500
Subject: [PATCH 0725/2157] README: document overrides.py and its GitHub
 workflow

---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 9b766bdf65..8fc2e4db20 100644
--- a/README.md
+++ b/README.md
@@ -55,7 +55,10 @@ hold back some packages, or pull in fixes ahead of Bodhi. To
 add such overrides, one needs to add the packages to
 `manifest-lock.overrides.yaml` (there are also arch-specific
 variants of these files for the rare occasions the override
-should only apply to a specific arch).
+should only apply to a specific arch). There is a
+[tool](ci/overrides.py) to help with this, and for simple
+cases, an [automated workflow](https://github.com/coreos/fedora-coreos-config/actions/workflows/add-override.yml)
+that runs the tool and submits a PR.
 
 Note that comments are not preserved in these files. The
 lockfile supports arbitrary keys under the `metadata` key to

From 7b9d3b59aa534c31413a05eeb8e7624d6efd9955 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 31 Jan 2022 21:22:52 -0500
Subject: [PATCH 0726/2157] denylist: extend snooze for all rawhide targeted
 tests

All of these are still failing in rawhide. Hoping to push them to
a resolution soon.
---
 kola-denylist.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 4db2fbcdd6..9578c71cfd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2022-01-10
+  snooze: 2022-02-07
   streams:
     - rawhide
   arches:
@@ -18,26 +18,26 @@
     - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-01-31
+  snooze: 2022-02-07
   streams:
     - rawhide
 - pattern: podman.base
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
-  snooze: 2022-01-31
+  snooze: 2022-02-07
   streams:
     - rawhide
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-31
+  snooze: 2022-02-07
   streams:
     - rawhide
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-31
+  snooze: 2022-02-07
   streams:
     - rawhide
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-01-31
+  snooze: 2022-02-07
   streams:
     - rawhide

From 104fe1f1a2f063879ebd33ff2a1ca1f143e54d8d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 31 Jan 2022 14:18:07 -0500
Subject: [PATCH 0727/2157] workflows/remove-graduated-overrides: clean up
 workflow display name

This makes it look nicer in the Actions tab.
---
 .github/workflows/remove-graduated-overrides.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 51226e2150..021e44c52d 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -1,4 +1,4 @@
-name: remove-graduated-overrides
+name: Remove graduated overrides
 
 on:
   schedule:

From b11b070b90ff07c3043db6ca58443e6053e17da8 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 31 Jan 2022 16:37:57 -0500
Subject: [PATCH 0728/2157] workflows/remove-graduated-overrides: allow manual
 runs via Actions tab

It's occasionally convenient to force a run, e.g. to rebase existing
graduation PRs.
---
 .github/workflows/remove-graduated-overrides.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 021e44c52d..0e4ac8a9c9 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -3,6 +3,7 @@ name: Remove graduated overrides
 on:
   schedule:
     - cron: '0 */6 * * *'
+  workflow_dispatch:
 
 permissions:
   contents: read

From 699737c00fadad1dbfacb240f53c46590978b630 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 31 Jan 2022 16:38:36 -0500
Subject: [PATCH 0729/2157] workflows/remove-graduated-overrides: improve PR
 message body

Link to the workflow's config and its job history in the Actions tab.
---
 .github/workflows/remove-graduated-overrides.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 0e4ac8a9c9..24a8760e38 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -48,6 +48,6 @@ jobs:
           branch: ${{ matrix.branch }}-graduation
           push-to-fork: coreosbot-releng/fedora-coreos-config
           title: "[${{ matrix.branch }}] lockfiles: drop graduated overrides 🎓"
-          body: "Triggered by remove-graduated-overrides GitHub Action."
+          body: "Created by remove-graduated-overrides [GitHub workflow](${{ github.server_url }}/${{ github.repository }}/actions/workflows/remove-graduated-overrides.yml) ([source](${{ github.server_url }}/${{ github.repository }}/blob/testing-devel/.github/workflows/remove-graduated-overrides.yml))."
           committer: "CoreOS Bot <coreosbot@fedoraproject.org>"
           author: "CoreOS Bot <coreosbot@fedoraproject.org>"

From 2daca0447ef98eea5d12cc7b78361a6cd8017bd9 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 1 Feb 2022 10:31:59 -0500
Subject: [PATCH 0730/2157] tests/skopeo: Verify `experimental-image-proxy`
 exists

Needed by the ostree-container stack.  I don't expect this test
to fail on FCOS; my main real goal is to trickle this down into
RHCOS where it would currently fail (and I have a fix pending).
---
 tests/kola/skopeo/data/commonlib.sh |  1 +
 tests/kola/skopeo/proxy             | 11 +++++++++++
 2 files changed, 12 insertions(+)
 create mode 120000 tests/kola/skopeo/data/commonlib.sh
 create mode 100755 tests/kola/skopeo/proxy

diff --git a/tests/kola/skopeo/data/commonlib.sh b/tests/kola/skopeo/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/skopeo/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/skopeo/proxy b/tests/kola/skopeo/proxy
new file mode 100755
index 0000000000..48d04d1247
--- /dev/null
+++ b/tests/kola/skopeo/proxy
@@ -0,0 +1,11 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Verify this command exists since it's a hard dependency of ostree's container bits.
+skopeo experimental-image-proxy --help
+
+ok skopeo

From 7a488a40ad5be7bfad6feba4dfbf680195db1bad Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 1 Feb 2022 22:02:46 +0000
Subject: [PATCH 0731/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/24/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9f13526fdd..f393de574c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.17-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.17-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.17-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-31T03:39:04Z",
+    "generated": "2022-02-01T20:52:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-31T03:29:19Z"
+        "generated": "2022-01-31T04:52:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-31T01:03:12Z"
+        "generated": "2022-02-01T01:00:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 22276136ee..0c292fbc45 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.17-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.17-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.17-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-01-31T03:38:29Z",
+    "generated": "2022-02-01T20:52:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-31T03:29:42Z"
+        "generated": "2022-01-31T04:53:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-01-31T01:03:36Z"
+        "generated": "2022-02-01T01:00:40Z"
       }
     }
   }

From 6d7b9ad5c61a72dce7759405b8186af65b8f00ec Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 30 Sep 2021 10:44:30 +0200
Subject: [PATCH 0732/2157] overlay.d: add udev rule for creating stable
 symlink to boot disk

Creates '/dev/disk/coreos-boot-disk' symlink to boot disk for
use by Ignition config, therefore 'storage.disks' section
could be defined without hardcoding /dev/sda, /dev/vda, etc.

Issue: https://github.com/coreos/fedora-coreos-tracker/issues/759

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../coreos-disk-contains-fs.sh                | 20 ++++++++++++++
 .../coreos-teardown-initramfs.sh              |  2 ++
 .../35coreos-ignition/module-setup.sh         |  6 +++++
 .../udev/rules.d/80-coreos-boot-disk.rules    | 10 +++++++
 tests/kola/ignition/stable-boot/config.bu     | 15 +++++++++++
 tests/kola/ignition/stable-boot/test.sh       | 27 +++++++++++++++++++
 6 files changed, 80 insertions(+)
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-disk-contains-fs.sh
 create mode 100644 overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules
 create mode 100644 tests/kola/ignition/stable-boot/config.bu
 create mode 100755 tests/kola/ignition/stable-boot/test.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-disk-contains-fs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-disk-contains-fs.sh
new file mode 100755
index 0000000000..37b5f98bd1
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-disk-contains-fs.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+# checks whether `disk` contains filesystem labeled `label`
+set -euo pipefail
+
+disk=$1
+label=$2
+
+# during execution of udev rules on disks 'lsblk' returns empty fields
+for pt in /sys/block/$disk/*; do
+    name=$(basename $pt)
+    if [[ "$name" =~ ${disk}p?[[:digit:]] ]] && [[ -e "/sys/block/$disk/$name/start" ]];
+    then
+        eval $(udevadm info --query=property -n /dev/$name | grep -e ID_FS_LABEL -e PARTNAME)
+        if [[ "${ID_FS_LABEL:-}" == "$label" ]] || [[ "${PARTNAME:-}" == "$label" ]]; then
+            exit 0
+        fi
+    fi
+done
+
+exit 1
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 7f8135ace7..e8aee1f312 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -211,6 +211,8 @@ main() {
     # clean it up so that no information from outside of the
     # real root is passed on to NetworkManager in the real root
     rm -rf /run/NetworkManager/
+
+    rm -rf /dev/disk/by-id/coreos-boot-disk
 }
 
 main
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index a42bcc3724..511dd369af 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -22,6 +22,7 @@ install() {
         diff \
         lsblk \
         sed \
+        grep \
         sgdisk
 
     inst_simple "$moddir/coreos-diskful-generator" \
@@ -30,6 +31,11 @@ install() {
     inst_script "$moddir/coreos-gpt-setup.sh" \
         "/usr/sbin/coreos-gpt-setup"
 
+    inst_simple "/usr/lib/udev/rules.d/80-coreos-boot-disk.rules"
+
+    inst_script "$moddir/coreos-disk-contains-fs.sh" \
+        "/usr/lib/udev/coreos-disk-contains-fs"
+
     inst_script "$moddir/coreos-ignition-setup-user.sh" \
         "/usr/sbin/coreos-ignition-setup-user"
 
diff --git a/overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules b/overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules
new file mode 100644
index 0000000000..e56ee5b741
--- /dev/null
+++ b/overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules
@@ -0,0 +1,10 @@
+# CoreOS-specific symlink for boot disk
+
+ACTION!="add|change", GOTO="stable_boot_end"
+SUBSYSTEM!="block", GOTO="stable_boot_end"
+
+ENV{DEVTYPE}=="disk" \
+  , PROGRAM=="coreos-disk-contains-fs $name boot" \
+  , SYMLINK+="disk/by-id/coreos-boot-disk"
+
+LABEL="stable_boot_end"
diff --git a/tests/kola/ignition/stable-boot/config.bu b/tests/kola/ignition/stable-boot/config.bu
new file mode 100644
index 0000000000..c785d136df
--- /dev/null
+++ b/tests/kola/ignition/stable-boot/config.bu
@@ -0,0 +1,15 @@
+variant: fcos
+version: 1.3.0
+storage:
+  disks:
+  - device: /dev/disk/by-id/coreos-boot-disk
+    wipe_table: false
+    partitions:
+    - number: 5
+      size_mib: 1024
+      label: toor
+  filesystems:
+    - path: /var/lib/toor
+      device: /dev/disk/by-partlabel/toor
+      format: ext4
+      with_mount_unit: true
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
new file mode 100755
index 0000000000..1dec105aee
--- /dev/null
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -0,0 +1,27 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# This test makes sure that ignition is able to use `coreos-boot-disk` symlink
+
+# We don't need to test this on every platform. If it passes in
+# one place it will pass everywhere.
+# kola: { "platforms": "qemu-unpriv" }
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# symlink shouldn't be propogated to real-root
+link="/dev/disk/by-id/coreos-boot-disk"
+if [[ -h "${link}" ]]; then
+    fatal "${link} still exists"
+fi
+
+# sanity-check that the root disk has all required partitions
+findmnt -nvr -o SOURCE /boot
+findmnt -nvr -o SOURCE /sysroot
+toor=$(findmnt -nvr -o SOURCE /var/lib/toor)
+if [[ ! "$toor" =~ ^/dev/[a-z0-9]+p?5$ ]]; then
+    fatal "${toor} is not 5th partition"
+fi

From 18f59651006fee3655320bc4d1943d71f9d28943 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Feb 2022 22:15:17 +0000
Subject: [PATCH 0733/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/26/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f393de574c..93abb547e2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -130,7 +130,7 @@
       "evra": "1.5.8-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-1.fc35.aarch64"
+      "evra": "1.0.1-3.fc35.aarch64"
     },
     "containers-common": {
       "evra": "4:1-32.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.3-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-21.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-21.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-21.fc35.aarch64"
+      "evra": "2.34-11.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.3-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.3-0.fc35.aarch64"
+      "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.19-3.fc35.aarch64"
@@ -790,7 +790,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.3-0.fc35.aarch64"
+      "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.27-2.fc35.aarch64"
@@ -1024,13 +1024,13 @@
       "evra": "2:1.0.2-2.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.3-0.fc35.aarch64"
+      "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.3-0.fc35.noarch"
+      "evra": "2:4.15.5-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.3-0.fc35.aarch64"
+      "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-01T20:52:42Z",
+    "generated": "2022-02-02T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-31T04:52:08Z"
+        "generated": "2022-02-01T22:09:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-01T01:00:16Z"
+        "generated": "2022-02-02T01:06:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0c292fbc45..6ff62d49bd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,7 +130,7 @@
       "evra": "1.5.8-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-1.fc35.x86_64"
+      "evra": "1.0.1-3.fc35.x86_64"
     },
     "containers-common": {
       "evra": "4:1-32.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.3-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-21.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-21.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-21.fc35.x86_64"
+      "evra": "2.34-11.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.3-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.3-0.fc35.x86_64"
+      "evra": "2:4.15.5-0.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.3-0.fc35.x86_64"
+      "evra": "2:4.15.5-0.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.27-2.fc35.x86_64"
@@ -1036,13 +1036,13 @@
       "evra": "2:1.0.2-2.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.3-0.fc35.x86_64"
+      "evra": "2:4.15.5-0.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.3-0.fc35.noarch"
+      "evra": "2:4.15.5-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.3-0.fc35.x86_64"
+      "evra": "2:4.15.5-0.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-01T20:52:07Z",
+    "generated": "2022-02-02T20:52:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-01-31T04:53:27Z"
+        "generated": "2022-02-01T22:09:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-01T01:00:40Z"
+        "generated": "2022-02-02T01:06:47Z"
       }
     }
   }

From 49c5a1346d80e950a4e5360997437d129c622d77 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Feb 2022 21:36:09 -0500
Subject: [PATCH 0734/2157] tests/extensions: bump timeout for the module test

This is dependent on network and disk speed but we've seen the
test take longer than 10 minutes in our aarch64 qemu tests.
---
 tests/kola/extensions/module | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index f46e939520..b23ceb0b51 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -2,12 +2,15 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu"}
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15 }
 #
 # This test ensures that we can install some common tools as OS extensions.
 #
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
+# - timeoutMin: 15
+#   - This is dependent on network and disk speed but we've seen the
+#     test take longer than 10 minutes in our aarch64 qemu tests.
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From 79a2fdb8ef0fb25b2e07b816d5c611617dc5c947 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Feb 2022 22:09:08 -0500
Subject: [PATCH 0735/2157] tests/root-reprovision: bump timeout for
 reprovision tests to 15m

All of these tests include a lot of disk I/O and can take a long time.
They all flirt with the 10 minute timeout already and some can go over.
Let's bump them all to give us some breathing room.

Also updated each test to include an explanation for the kola.json
parameters.
---
 .../kola/root-reprovision/filesystem-only/test.sh | 10 +++++++++-
 tests/kola/root-reprovision/linear/test.sh        | 14 +++++++++++++-
 tests/kola/root-reprovision/luks/test.sh          | 12 +++++++++++-
 tests/kola/root-reprovision/raid1/test.sh         | 13 ++++++++++++-
 .../root-reprovision/swap-before-root/test.sh     | 15 ++++++++++++---
 5 files changed, 57 insertions(+), 7 deletions(-)

diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 696b0f5ac3..102a8a86f4 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,5 +1,13 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096}
+# kola: { "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15 }
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - minMemory: 4096
+#   - Root reprovisioning requires at least 4GiB of memory.
+# - timeoutMin: 15
+#   - This test includes a lot of disk I/O and needs a higher
+#     timeout value than the default.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index f5722e1abe..7355ab3633 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -1,5 +1,17 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
+# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15 }
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+#   - additionalDisks is only supported on qemu.
+# - minMemory: 4096
+#   - Root reprovisioning requires at least 4GiB of memory.
+# - additionalDisks: ["5G", "5G"]
+#   - Linear RAID is setup on these disks.
+# - timeoutMin: 15
+#   - This test includes a lot of disk I/O and needs a higher
+#     timeout value than the default.
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 416cb67a05..5ec6513792 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,5 +1,15 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x" }
+# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x", "timeoutMin": 15 }
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - minMemory: 4096
+#   - Root reprovisioning requires at least 4GiB of memory.
+# - architectures: !s390x
+#   - A TPM backend device is not available on s390x to suport TPM.
+# - timeoutMin: 15
+#   - This test includes a lot of disk I/O and needs a higher
+#     timeout value than the default.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 89fda1e5d8..1fb966ff45 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -1,5 +1,16 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"]}
+# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15 }
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+#   - additionalDisks is only supported on qemu.
+# - minMemory: 4096
+#   - Root reprovisioning requires at least 4GiB of memory.
+# - additionalDisks: ["5G", "5G"]
+#   - A RAID1 is setup on these disks.
+# - timeoutMin: 15
+#   - This test includes a lot of disk I/O and needs a higher
+#     timeout value than the default.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index 569a4d1a2b..b344849b86 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,7 +1,16 @@
 #!/bin/bash
-# kola: {"distros": "fcos", "platforms": "qemu", "minMemory": 4096}
-# This test only runs on FCOS due to a problem enabling a swap partition on
-# RHCOS.  See: https://github.com/openshift/os/issues/665
+# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15 }
+#
+# - distros: fcos
+#   - This test only runs on FCOS due to a problem enabling a swap partition on
+#     RHCOS. See: https://github.com/openshift/os/issues/665
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - minMemory: 4096
+#   - Root reprovisioning requires at least 4GiB of memory.
+# - timeoutMin: 15
+#   - This test includes a lot of disk I/O and needs a higher
+#     timeout value than the default.
 
 set -xeuo pipefail
 

From 481f0a1ecd62b0a6dada6fb92cbfc63abc5d3934 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 3 Feb 2022 14:24:51 -0500
Subject: [PATCH 0736/2157] ci/overrides: fail if we didn't fast-track/pin
 anything

If none of the detected binary packages are listed in the lockfiles, fail
rather than performing a no-op rewrite of the override file and appearing
to succeed.
---
 ci/overrides.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ci/overrides.py b/ci/overrides.py
index 9bceb0aa5f..d37849dabb 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -107,6 +107,8 @@ def do_fast_track(args):
             )
             if args.reason:
                 overrides[n]['metadata']['reason'] = args.reason
+    if not overrides:
+        raise Exception('specified updates contain no binary packages listed in lockfiles')
     for lockfile_path in get_lockfiles():
         merge_overrides(lockfile_path, overrides)
 
@@ -125,6 +127,8 @@ def do_pin(args):
                 reason=args.reason,
             )
         )
+    if not overrides:
+        raise Exception('specified source packages produce no binary packages listed in lockfiles')
     for lockfile_path in get_lockfiles():
         merge_overrides(lockfile_path, overrides)
 

From 581ddb9ff4960321f2f84bfcd469bd9a96ca6243 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 3 Feb 2022 22:07:22 +0000
Subject: [PATCH 0737/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/28/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 93abb547e2..7fcbf26a22 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -355,7 +355,7 @@
       "evra": "2.34.1-1.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.70.3-1.fc35.aarch64"
+      "evra": "2.70.3-2.fc35.aarch64"
     },
     "glibc": {
       "evra": "2.34-11.fc35.aarch64"
@@ -1202,7 +1202,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-02T20:53:01Z",
+    "generated": "2022-02-03T20:52:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1211,7 +1211,7 @@
         "generated": "2022-02-01T22:09:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-02T01:06:23Z"
+        "generated": "2022-02-03T02:03:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6ff62d49bd..b2b50e1233 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,7 +355,7 @@
       "evra": "2.34.1-1.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.70.3-1.fc35.x86_64"
+      "evra": "2.70.3-2.fc35.x86_64"
     },
     "glibc": {
       "evra": "2.34-11.fc35.x86_64"
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-02T20:52:28Z",
+    "generated": "2022-02-03T20:52:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1223,7 +1223,7 @@
         "generated": "2022-02-01T22:09:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-02T01:06:47Z"
+        "generated": "2022-02-03T02:04:09Z"
       }
     }
   }

From c7afefbac95f33d3553d99e1e7f3041f8ab13d87 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Feb 2022 20:52:50 -0500
Subject: [PATCH 0738/2157] manifests/bootable-rpm-ostree: explicitly add
 linux-firmware

In rawhide it's now a recommends so let's name it in our list of
packages. See upstream commits:

- https://gitlab.com/cki-project/kernel-ark/-/commit/32271d0cd9bd52d386eb35497c4876a8f041f70b
- https://src.fedoraproject.org/rpms/kernel/c/f55c3e9ed8605ff28cb9a922efbab1055947e213?branch=rawhide
---
 manifests/bootable-rpm-ostree.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 862a01e58b..cbce4b878a 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -8,6 +8,10 @@ packages:
  # Kernel + systemd.  Note we explicitly specify kernel-{core,modules}
  # because otherwise depsolving could bring in kernel-debug.
  - kernel kernel-core kernel-modules systemd
+ # linux-firmware now a recommends so let's explicitly include it
+ # https://gitlab.com/cki-project/kernel-ark/-/commit/32271d0cd9bd52d386eb35497c4876a8f041f70b
+ # https://src.fedoraproject.org/rpms/kernel/c/f55c3e9ed8605ff28cb9a922efbab1055947e213?branch=rawhide
+ - linux-firmware linux-firmware-whence
  # rpm-ostree
  - rpm-ostree nss-altfiles
  # firmware updates

From a43c15ddea562feb361552c061e51b24125d557d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 2 Feb 2022 15:24:10 -0500
Subject: [PATCH 0739/2157] 35coreos-multipath: propagate config on first boot

In #829, we changed multipath config propagation to happen on subsequent
boots to handle upgrading nodes. Back then, we didn't yet support first
boot multipath, so not propagating on first boot didn't matter anyway.

But with #1011 we now support multipath on first boot. So we need to
adapt this so we always propagate, including on first boot.
---
 .../dracut/modules.d/35coreos-multipath/module-setup.sh   | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
index 4ab4bc4006..92a33e7e3f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/module-setup.sh
@@ -2,20 +2,20 @@
 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
 # ex: ts=8 sw=4 sts=4 et filetype=sh
 
-install_ignition_unit() {
+install_unit() {
     local unit=$1; shift
-    local target=${1:-complete}
+    local target=${1:-initrd}
     inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
     # note we `|| exit 1` here so we error out if e.g. the units are missing
     # see https://github.com/coreos/fedora-coreos-config/issues/799
-    systemctl -q --root="$initdir" add-requires "ignition-${target}.target" "$unit" || exit 1
+    systemctl -q --root="$initdir" add-requires "${target}.target" "$unit" || exit 1
 }
 
 install() {
     inst_script "$moddir/coreos-propagate-multipath-conf.sh" \
         "/usr/sbin/coreos-propagate-multipath-conf"
 
-    install_ignition_unit coreos-propagate-multipath-conf.service subsequent
+    install_unit coreos-propagate-multipath-conf.service
 
     inst_simple "$moddir/coreos-multipath-generator" \
         "$systemdutildir/system-generators/coreos-multipath-generator"

From b6950afcbc49fa6f51c894f219c3061229b26766 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 4 Feb 2022 22:07:25 +0000
Subject: [PATCH 0740/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/30/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 2 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7fcbf26a22..56c45ac261 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -109,7 +109,7 @@
       "evra": "0.31-9.fc35.noarch"
     },
     "conmon": {
-      "evra": "2:2.0.30-2.fc35.aarch64"
+      "evra": "2:2.1.0-2.fc35.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-3.fc35.noarch"
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.4.1-1.fc35.aarch64"
+      "evra": "1.4.2-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.3-2.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-24.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-24.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-11.fc35.aarch64"
+      "evra": "2.34-24.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -517,7 +517,7 @@
       "evra": "0.1.1-48.fc35.aarch64"
     },
     "libblkid": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.aarch64"
@@ -562,7 +562,7 @@
       "evra": "2.1.12-4.fc35.aarch64"
     },
     "libfdisk": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.aarch64"
@@ -637,7 +637,7 @@
       "evra": "2.13.0-3.fc35.aarch64"
     },
     "libmount": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.aarch64"
@@ -715,7 +715,7 @@
       "evra": "4.6.1-2.fc35.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.aarch64"
@@ -778,7 +778,7 @@
       "evra": "1.2.1-5.fc35.aarch64"
     },
     "libuuid": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.27-2.fc35.aarch64"
+      "evra": "4.4.28-1.fc35.aarch64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "1.2.6-1.fc35.aarch64"
     },
     "rpm": {
-      "evra": "4.17.0-3.fc35.aarch64"
+      "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-3.fc35.aarch64"
+      "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
       "evra": "2022.1-2.fc35.aarch64"
@@ -1015,13 +1015,13 @@
       "evra": "2022.1-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-3.fc35.aarch64"
+      "evra": "4.17.0-4.fc35.aarch64"
     },
     "rsync": {
       "evra": "3.2.3-8.fc35.aarch64"
     },
     "runc": {
-      "evra": "2:1.0.2-2.fc35.aarch64"
+      "evra": "2:1.1.0-1.fc35.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.15.5-0.fc35.aarch64"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.11-1.fc35.noarch"
+      "evra": "35.13-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.11-1.fc35.noarch"
+      "evra": "35.13-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1159,10 +1159,10 @@
       "evra": "0.13.0-3.fc35.aarch64"
     },
     "util-linux": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.2-1.fc35.aarch64"
     },
     "vim-data": {
       "evra": "2:8.2.4232-1.fc35.noarch"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-03T20:52:52Z",
+    "generated": "2022-02-04T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-01T22:09:35Z"
+        "generated": "2022-02-04T16:54:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-03T02:03:45Z"
+        "generated": "2022-02-04T01:08:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b2b50e1233..fa7b5a06af 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -109,7 +109,7 @@
       "evra": "0.31-9.fc35.noarch"
     },
     "conmon": {
-      "evra": "2:2.0.30-2.fc35.x86_64"
+      "evra": "2:2.1.0-2.fc35.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.2-3.fc35.noarch"
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.4.1-1.fc35.x86_64"
+      "evra": "1.4.2-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.70.3-2.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-24.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-24.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-11.fc35.x86_64"
+      "evra": "2.34-24.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -523,7 +523,7 @@
       "evra": "0.1.1-48.fc35.x86_64"
     },
     "libblkid": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.x86_64"
@@ -568,7 +568,7 @@
       "evra": "2.1.12-4.fc35.x86_64"
     },
     "libfdisk": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.x86_64"
@@ -643,7 +643,7 @@
       "evra": "2.13.0-3.fc35.x86_64"
     },
     "libmount": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.x86_64"
@@ -721,7 +721,7 @@
       "evra": "4.6.1-2.fc35.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.x86_64"
@@ -787,7 +787,7 @@
       "evra": "1.2.1-5.fc35.x86_64"
     },
     "libuuid": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2:4.15.5-0.fc35.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.27-2.fc35.x86_64"
+      "evra": "4.4.28-1.fc35.x86_64"
     },
     "libxml2": {
       "evra": "2.9.12-6.fc35.x86_64"
@@ -1015,10 +1015,10 @@
       "evra": "1.2.6-1.fc35.x86_64"
     },
     "rpm": {
-      "evra": "4.17.0-3.fc35.x86_64"
+      "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-3.fc35.x86_64"
+      "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
       "evra": "2022.1-2.fc35.x86_64"
@@ -1027,13 +1027,13 @@
       "evra": "2022.1-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-3.fc35.x86_64"
+      "evra": "4.17.0-4.fc35.x86_64"
     },
     "rsync": {
       "evra": "3.2.3-8.fc35.x86_64"
     },
     "runc": {
-      "evra": "2:1.0.2-2.fc35.x86_64"
+      "evra": "2:1.1.0-1.fc35.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.15.5-0.fc35.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.11-1.fc35.noarch"
+      "evra": "35.13-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.11-1.fc35.noarch"
+      "evra": "35.13-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1171,10 +1171,10 @@
       "evra": "0.13.0-3.fc35.x86_64"
     },
     "util-linux": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.2-1.fc35.x86_64"
     },
     "vim-data": {
       "evra": "2:8.2.4232-1.fc35.noarch"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-03T20:52:18Z",
+    "generated": "2022-02-04T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-01T22:09:29Z"
+        "generated": "2022-02-04T16:54:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-03T02:04:09Z"
+        "generated": "2022-02-04T01:08:44Z"
       }
     }
   }

From f71f738888b860a7878d137434a5dfff90a58f19 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 5 Feb 2022 22:08:24 +0000
Subject: [PATCH 0741/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/32/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 2 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 56c45ac261..b691ce5794 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.5-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.5-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.5-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -517,7 +517,7 @@
       "evra": "0.1.1-48.fc35.aarch64"
     },
     "libblkid": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.aarch64"
@@ -562,7 +562,7 @@
       "evra": "2.1.12-4.fc35.aarch64"
     },
     "libfdisk": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.aarch64"
@@ -637,7 +637,7 @@
       "evra": "2.13.0-3.fc35.aarch64"
     },
     "libmount": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.aarch64"
@@ -715,7 +715,7 @@
       "evra": "4.6.1-2.fc35.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.aarch64"
@@ -778,7 +778,7 @@
       "evra": "1.2.1-5.fc35.aarch64"
     },
     "libuuid": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.aarch64"
@@ -1159,10 +1159,10 @@
       "evra": "0.13.0-3.fc35.aarch64"
     },
     "util-linux": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.37.2-1.fc35.aarch64"
+      "evra": "2.37.3-1.fc35.aarch64"
     },
     "vim-data": {
       "evra": "2:8.2.4232-1.fc35.noarch"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-04T20:52:54Z",
+    "generated": "2022-02-05T20:52:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-04T16:54:32Z"
+        "generated": "2022-02-04T22:12:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-04T01:08:18Z"
+        "generated": "2022-02-05T01:03:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fa7b5a06af..584da1f9b9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.5-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.5-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.5-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -523,7 +523,7 @@
       "evra": "0.1.1-48.fc35.x86_64"
     },
     "libblkid": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.x86_64"
@@ -568,7 +568,7 @@
       "evra": "2.1.12-4.fc35.x86_64"
     },
     "libfdisk": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.x86_64"
@@ -643,7 +643,7 @@
       "evra": "2.13.0-3.fc35.x86_64"
     },
     "libmount": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.x86_64"
@@ -721,7 +721,7 @@
       "evra": "4.6.1-2.fc35.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.x86_64"
@@ -787,7 +787,7 @@
       "evra": "1.2.1-5.fc35.x86_64"
     },
     "libuuid": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.x86_64"
@@ -1171,10 +1171,10 @@
       "evra": "0.13.0-3.fc35.x86_64"
     },
     "util-linux": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.37.2-1.fc35.x86_64"
+      "evra": "2.37.3-1.fc35.x86_64"
     },
     "vim-data": {
       "evra": "2:8.2.4232-1.fc35.noarch"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-04T20:52:24Z",
+    "generated": "2022-02-05T20:52:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-04T16:54:51Z"
+        "generated": "2022-02-04T22:13:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-04T01:08:44Z"
+        "generated": "2022-02-05T01:03:50Z"
       }
     }
   }

From 60c082cad6daec3aa718d7787b665ea27e802771 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 3 Feb 2022 21:49:30 -0500
Subject: [PATCH 0742/2157] tests/kola/root-reprovision/swap-before-root: set
 allowConfigWarnings

Starting with https://github.com/coreos/coreos-assembler/pull/2686,
kola fails any test that produces warnings when parsing Ignition or
Butane configs unless configured otherwise.
---
 tests/kola/root-reprovision/swap-before-root/test.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index b344849b86..ebe9fdaff6 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15 }
+# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "allowConfigWarnings": true }
 #
 # - distros: fcos
 #   - This test only runs on FCOS due to a problem enabling a swap partition on
@@ -11,6 +11,9 @@
 # - timeoutMin: 15
 #   - This test includes a lot of disk I/O and needs a higher
 #     timeout value than the default.
+# - allowConfigWarnings: true
+#   - We intentionally put the root filesystem on partition 5.  This is
+#     legal but usually not intended, so Butane warns about it.
 
 set -xeuo pipefail
 

From a45754f0fa97e549edd967074938f418acc1eb03 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 6 Feb 2022 02:55:37 +0000
Subject: [PATCH 0743/2157] overrides: pin kernel-5.15.18-200.fc35

---
 manifest-lock.overrides.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 8dcb8d0dd6..758dbf5687 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,6 +19,21 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
       type: fast-track
+  kernel:
+    evr: 5.15.18-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
+  kernel-core:
+    evr: 5.15.18-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
+  kernel-modules:
+    evr: 5.15.18-200.fc35
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
+      type: pin
   systemd:
     evr: 249.7-2.fc35
     metadata:

From 11baa99ca95fdaca13bbd8d651a91592616575bf Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 5 Feb 2022 22:51:43 -0500
Subject: [PATCH 0744/2157] manifests/bootable-rpm-ostree: drop
 linux-firmware-whence

On Fedora, linux-firmware requires linux-firmware-whence, so we don't
need to specify it.  On RHEL 8, linux-firmware-whence doesn't exist.
---
 manifests/bootable-rpm-ostree.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index cbce4b878a..784acd4f50 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -11,7 +11,7 @@ packages:
  # linux-firmware now a recommends so let's explicitly include it
  # https://gitlab.com/cki-project/kernel-ark/-/commit/32271d0cd9bd52d386eb35497c4876a8f041f70b
  # https://src.fedoraproject.org/rpms/kernel/c/f55c3e9ed8605ff28cb9a922efbab1055947e213?branch=rawhide
- - linux-firmware linux-firmware-whence
+ - linux-firmware
  # rpm-ostree
  - rpm-ostree nss-altfiles
  # firmware updates

From 50f137d96a034ee02005678ca7573609409a8cd1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 6 Feb 2022 22:05:09 +0000
Subject: [PATCH 0745/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/34/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b691ce5794..8b83c05c33 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.3-2.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-24.fc35.aarch64"
+      "evra": "2.34-25.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-24.fc35.aarch64"
+      "evra": "2.34-25.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-24.fc35.aarch64"
+      "evra": "2.34-25.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.5-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.5-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.5-200.fc35.aarch64"
+      "evra": "5.15.18-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-05T20:52:49Z",
+    "generated": "2022-02-06T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-04T22:12:54Z"
+        "generated": "2022-02-06T03:57:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-05T01:03:24Z"
+        "generated": "2022-02-06T01:53:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 584da1f9b9..f2ae4eb1df 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.3-2.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-24.fc35.x86_64"
+      "evra": "2.34-25.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-24.fc35.x86_64"
+      "evra": "2.34-25.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-24.fc35.x86_64"
+      "evra": "2.34-25.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.5-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.5-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.5-200.fc35.x86_64"
+      "evra": "5.15.18-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-05T20:52:16Z",
+    "generated": "2022-02-06T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-04T22:13:24Z"
+        "generated": "2022-02-06T03:58:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-05T01:03:50Z"
+        "generated": "2022-02-06T01:54:06Z"
       }
     }
   }

From b689818fa6f3bbeed005b491433eb1ebdec98fbf Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 6 Feb 2022 17:06:37 -0500
Subject: [PATCH 0746/2157] denylist: snooze the coreos.boot-mirror.luks test

The ignition-ostree-transposefs-restore.service is failing on boot
and we're dropping into the emergency shell. Let's snooze the test
for now on rawhide while we investigate.

See https://github.com/coreos/fedora-coreos-tracker/issues/1092
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9578c71cfd..34f310684e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,3 +41,8 @@
   snooze: 2022-02-07
   streams:
     - rawhide
+- pattern: coreos.boot-mirror.luks
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
+  snooze: 2022-02-14
+  streams:
+    - rawhide

From 79702a034bfc4687f56c60ebe1a2ca3af59eeb3d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 6 Feb 2022 02:20:56 -0500
Subject: [PATCH 0747/2157] ci/overrides: add helper lambda for detecting
 "noarch"

---
 ci/overrides.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index d37849dabb..58d0a6446c 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -197,11 +197,13 @@ def get_binary_packages(source_nvrs):
     accepted_in_arch = {}
     client = koji.ClientSession(KOJI_URL)
 
+    archful = lambda arch: arch != 'noarch'
+
     def arches_with_package(name, arch):
         '''For a given package and arch, return the arches that list the
         package in their lockfiles.  There may be more than one, since we
         check noarch packages against every candidate architecture.'''
-        candidates = ARCHES if arch == 'noarch' else [arch]
+        candidates = [arch] if archful(arch) else ARCHES
         return [a for a in candidates if name in get_manifest_packages(a)]
 
     for source_nvr in source_nvrs:

From b3e4b5c996ed3160f11799764ca0ff72a3fadf8e Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 6 Feb 2022 02:24:03 -0500
Subject: [PATCH 0748/2157] ci/overrides: return info dict from
 get_binary_packages()

Populate the "evr" key in the callee.
---
 ci/overrides.py | 40 ++++++++++++++++++----------------------
 1 file changed, 18 insertions(+), 22 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 58d0a6446c..321750f425 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -95,18 +95,16 @@ def do_fast_track(args):
             source_name = '-'.join(source_nvr.split('-')[:-2])
             if not args.reason and source_name not in TRIVIAL_FAST_TRACKS:
                 raise Exception(f'No reason URL specified and source package {source_name} not in {TRIVIAL_FAST_TRACKS}')
-        for n, evr in get_binary_packages(source_nvrs).items():
+        for n, info in get_binary_packages(source_nvrs).items():
             if not args.ignore_dist_mismatch:
-                check_dist_tag(n, evr, dist)
-            overrides[n] = dict(
-                evr=evr,
-                metadata=dict(
-                    type='fast-track',
-                    bodhi=update['url'],
-                )
+                check_dist_tag(n, info, dist)
+            info['metadata'] = dict(
+                type='fast-track',
+                bodhi=update['url'],
             )
             if args.reason:
-                overrides[n]['metadata']['reason'] = args.reason
+                info['metadata']['reason'] = args.reason
+            overrides[n] = info
     if not overrides:
         raise Exception('specified updates contain no binary packages listed in lockfiles')
     for lockfile_path in get_lockfiles():
@@ -117,16 +115,14 @@ def do_pin(args):
     overrides = {}
     dist = get_expected_dist_tag()
     check_url(args.reason)
-    for n, evr in get_binary_packages(args.nvr).items():
+    for n, info in get_binary_packages(args.nvr).items():
         if not args.ignore_dist_mismatch:
-            check_dist_tag(n, evr, dist)
-        overrides[n] = dict(
-            evr=evr,
-            metadata=dict(
-                type='pin',
-                reason=args.reason,
-            )
+            check_dist_tag(n, info, dist)
+        info['metadata'] = dict(
+            type='pin',
+            reason=args.reason,
         )
+        overrides[n] = info
     if not overrides:
         raise Exception('specified source packages produce no binary packages listed in lockfiles')
     for lockfile_path in get_lockfiles():
@@ -191,7 +187,7 @@ def get_source_nvrs(update):
 
 
 def get_binary_packages(source_nvrs):
-    '''Return name => EVR dict for the specified source NVRs.  A binary
+    '''Return name => info dict for the specified source NVRs.  A binary
     package is included if it is in the manifest lockfiles.'''
     binpkgs = {}
     accepted_in_arch = {}
@@ -213,7 +209,7 @@ def arches_with_package(name, arch):
             if binpkg['epoch'] is not None:
                 evr = f'{binpkg["epoch"]}:{evr}'
             for arch in arches_with_package(name, binpkg['arch']):
-                binpkgs[name] = evr
+                binpkgs[name] = {'evr': evr}
                 accepted_in_arch.setdefault(arch, set()).add(name)
 
     # Check that every arch has the same package set
@@ -323,9 +319,9 @@ def get_expected_dist_tag():
     return f'.fc{releasever}'
 
 
-def check_dist_tag(name, evr, dist):
-    if not evr.endswith(dist):
-        raise Exception(f"Package {name}-{evr} doesn't match expected dist tag {dist}")
+def check_dist_tag(name, info, dist):
+    if not info['evr'].endswith(dist):
+        raise Exception(f"Package {name}-{info['evr']} doesn't match expected dist tag {dist}")
 
 
 if __name__ == "__main__":

From 0439c1c9d0971eed01e99a36850b54163d1a6051 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sun, 6 Feb 2022 02:26:18 -0500
Subject: [PATCH 0749/2157] ci/overrides: correctly add noarch overrides

For noarch binary packages, we need to use the `evra` key and append
`.noarch` to the version.
---
 ci/overrides.py | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 321750f425..d8cf23f619 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -187,8 +187,9 @@ def get_source_nvrs(update):
 
 
 def get_binary_packages(source_nvrs):
-    '''Return name => info dict for the specified source NVRs.  A binary
-    package is included if it is in the manifest lockfiles.'''
+    '''Return name => info dict for the specified source NVRs.  The info
+    dict contains "evr" for archful packages and "evra" for noarch ones.
+    A binary package is included if it is in the manifest lockfiles.'''
     binpkgs = {}
     accepted_in_arch = {}
     client = koji.ClientSession(KOJI_URL)
@@ -209,7 +210,10 @@ def arches_with_package(name, arch):
             if binpkg['epoch'] is not None:
                 evr = f'{binpkg["epoch"]}:{evr}'
             for arch in arches_with_package(name, binpkg['arch']):
-                binpkgs[name] = {'evr': evr}
+                if archful(binpkg['arch']):
+                    binpkgs[name] = {'evr': evr}
+                else:
+                    binpkgs[name] = {'evra': evr + '.noarch'}
                 accepted_in_arch.setdefault(arch, set()).add(name)
 
     # Check that every arch has the same package set
@@ -320,8 +324,10 @@ def get_expected_dist_tag():
 
 
 def check_dist_tag(name, info, dist):
-    if not info['evr'].endswith(dist):
+    if 'evr' in info and not info['evr'].endswith(dist):
         raise Exception(f"Package {name}-{info['evr']} doesn't match expected dist tag {dist}")
+    if 'evra' in info and not info['evra'].endswith(dist + '.noarch'):
+        raise Exception(f"Package {name}-{info['evra']} doesn't match expected dist tag {dist}")
 
 
 if __name__ == "__main__":

From d75822c6c17d1dd0847719c603700e42f1774fe1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Feb 2022 16:21:09 -0500
Subject: [PATCH 0750/2157] denylist: extend snoozes for rawhide

These are still a problem. Intentionally not extending the ostree.hotfix
snooze because I want to see that test run in the pipeline on aarch64
this time.
---
 kola-denylist.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 34f310684e..f4a380dbce 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,27 +18,27 @@
     - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-02-07
+  snooze: 2022-02-14
   streams:
     - rawhide
 - pattern: podman.base
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
-  snooze: 2022-02-07
+  snooze: 2022-02-14
   streams:
     - rawhide
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-07
+  snooze: 2022-02-14
   streams:
     - rawhide
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-07
+  snooze: 2022-02-14
   streams:
     - rawhide
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-07
+  snooze: 2022-02-14
   streams:
     - rawhide
 - pattern: coreos.boot-mirror.luks

From b9beb76aafacabff8f9d573ffadaf711cefde687 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Feb 2022 21:28:34 -0500
Subject: [PATCH 0751/2157] denylist: extend snooze for ostree.hotfix on
 rawhide/aarch64

We should get some help here soon but for now this is still
failing.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f4a380dbce..1c2b5b5b04 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2022-02-07
+  snooze: 2022-02-21
   streams:
     - rawhide
   arches:

From 17d5b5d8d9fd4cc4e190b869f093e687a23e60c9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 8 Feb 2022 21:15:57 +0000
Subject: [PATCH 0752/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8b83c05c33..3cd654c388 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.15.1-1.fc35.aarch64"
+      "evra": "5.16.1-1.fc35.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.aarch64"
@@ -826,7 +826,7 @@
       "evra": "4.94.0-2.fc35.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.3-4.fc35.aarch64"
+      "evra": "5.4.4-1.fc35.aarch64"
     },
     "luksmeta": {
       "evra": "9-12.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-06T20:53:35Z",
+    "generated": "2022-02-08T20:02:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-06T03:57:57Z"
+        "generated": "2022-02-08T02:29:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-06T01:53:41Z"
+        "generated": "2022-02-08T01:03:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f2ae4eb1df..39717d691a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.15.1-1.fc35.x86_64"
+      "evra": "5.16.1-1.fc35.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.x86_64"
@@ -835,7 +835,7 @@
       "evra": "4.94.0-2.fc35.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.3-4.fc35.x86_64"
+      "evra": "5.4.4-1.fc35.x86_64"
     },
     "luksmeta": {
       "evra": "9-12.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-06T20:53:00Z",
+    "generated": "2022-02-08T20:02:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-06T03:58:04Z"
+        "generated": "2022-02-08T02:29:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-06T01:54:06Z"
+        "generated": "2022-02-08T01:03:52Z"
       }
     }
   }

From c075dd3011b87eab1484b72c519917d105316bcd Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 8 Feb 2022 17:58:06 -0500
Subject: [PATCH 0753/2157] ci/overrides: support pin/fast-track on mechanical
 streams

If there are no lockfiles in the current branch, fetch generated lockfiles
from the latest successful CI builds of the branch on each architecture.
---
 ci/overrides.py | 50 ++++++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 45 insertions(+), 5 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index d8cf23f619..d20aaae7c4 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -5,6 +5,7 @@
 import os
 import sys
 import json
+import requests
 from urllib.parse import urlparse
 import yaml
 import subprocess
@@ -29,6 +30,8 @@
     'rust-ignition-config',
     'rust-zincati',
 ]
+BUILDS_JSON_URL_TEMPLATE = 'https://builds.coreos.fedoraproject.org/prod/streams/{stream}/builds/builds.json'
+GENERATED_LOCKFILE_URL_TEMPLATE = 'https://builds.coreos.fedoraproject.org/prod/streams/{stream}/builds/{version}/{arch}/manifest-lock.generated.{arch}.json'
 
 OVERRIDES_HEADER = """
 # This lockfile should be used to pin to a package version (`type: pin`) or to
@@ -158,15 +161,52 @@ def get_dnf_base(treefile):
     return base
 
 
+@functools.cache
+def get_stream():
+    '''Get the current stream name.'''
+    with open(os.path.join(basedir, 'manifest.yaml')) as fh:
+        manifest = yaml.safe_load(fh)
+    return manifest['add-commit-metadata']['fedora-coreos.stream']
+
+
+@functools.cache
+def get_build_list():
+    '''Return list of official builds fetched from builds.json for the current
+    stream.'''
+    stream_url = BUILDS_JSON_URL_TEMPLATE.format(stream=get_stream())
+    resp = requests.get(stream_url)
+    resp.raise_for_status()
+    return resp.json()['builds']
+
+
 @functools.cache
 def get_manifest_packages(arch):
     '''Return manifest lock package map for the specified arch.'''
-    try:
-        with open(os.path.join(basedir, f'manifest-lock.{arch}.json')) as f:
-            manifest = json.load(f)
-        return manifest['packages']
-    except FileNotFoundError:
+
+    # If this branch has any lockfiles in it, return the lockfile for the
+    # specified arch, or an empty dict if missing.
+    lockfile_path = lambda arch: os.path.join(basedir, f'manifest-lock.{arch}.json')
+    if any(os.path.exists(lockfile_path(a)) for a in ARCHES):
+        try:
+            with open(lockfile_path(arch)) as f:
+                manifest = json.load(f)
+            return manifest['packages']
+        except FileNotFoundError:
+            return {}
+
+    # Otherwise we're on a mechanical branch.  Pull the generated lockfile
+    # from the most recent successful CI build, or return an empty dict if
+    # we've never built for this arch.  Thus, different arches may return
+    # lockfiles from different builds if a recent build failed on some arches.
+    versions = [b['id'] for b in get_build_list() if arch in b['arches']]
+    if not versions:
         return {}
+    print(f'Reading generated lockfile from build {versions[0]} on {arch}')
+    lockfile_url = GENERATED_LOCKFILE_URL_TEMPLATE.format(stream=get_stream(),
+            version=versions[0], arch=arch)
+    resp = requests.get(lockfile_url)
+    resp.raise_for_status()
+    return resp.json()['packages']
 
 
 def get_bodhi_update(id_or_url):

From a8a73fb9658490ebc4d5e409acc05a5b2ba97e25 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 9 Feb 2022 06:18:00 +0000
Subject: [PATCH 0754/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 758dbf5687..96b6de4194 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  afterburn:
-    evr: 5.2.0-4.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.2.0-4.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b76e3a192
-      type: fast-track
   kernel:
     evr: 5.15.18-200.fc35
     metadata:

From 87e32338a3cdedcb57d782865f62fcf06c2ff4c9 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Tue, 8 Feb 2022 11:37:42 +0100
Subject: [PATCH 0755/2157] tests/kola: Skip grub specific parts on s390x in
 reboot test

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/reboot/test.sh | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index f10e51632e..18cbb38a40 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -23,11 +23,14 @@ ok "boot mounted by UUID"
 # check that we took ownership of the bootfs
 [ -f /boot/.root_uuid ]
 
-# check for the UUID dropins
-[ -f /boot/grub2/bootuuid.cfg ]
-mount -o ro /dev/disk/by-label/EFI-SYSTEM /boot/efi
-[ -f /boot/efi/EFI/*/bootuuid.cfg ]
-umount /boot/efi
+# s390x does not have grub, skip this part
+if [ "$(arch)" != "s390x" ]; then
+  # check for the UUID dropins
+  [ -f /boot/grub2/bootuuid.cfg ]
+  mount -o ro /dev/disk/by-label/EFI-SYSTEM /boot/efi
+  [ -f /boot/efi/EFI/*/bootuuid.cfg ]
+  umount /boot/efi
+fi
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")

From c4ca6f62fd96164c2a35601a6db97d4d94b02749 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Tue, 8 Feb 2022 11:42:37 +0100
Subject: [PATCH 0756/2157] tests/kola: Skip incompatible tests on s390x

These tests have never run successfully on s390x. Skip them for now and
investigate wether or not they can be adapted for s390x.

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/kdump/crash                                   | 4 +++-
 tests/kola/networking/force-persist-ip/test.sh           | 7 +++++--
 tests/kola/networking/mtu-on-bond-ignition/test.sh       | 7 +++++--
 tests/kola/networking/mtu-on-bond-kargs                  | 5 ++++-
 tests/kola/networking/prefer-ignition-networking/test.sh | 7 +++++--
 5 files changed, 22 insertions(+), 8 deletions(-)

diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash
index 9e2be2acbf..3ac190cc38 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash
@@ -1,6 +1,8 @@
 #!/bin/bash
-# kola: {"minMemory": 4096, "tags": "skip-base-checks"}
+# kola: {"minMemory": 4096, "tags": "skip-base-checks", "architectures": "!s390x"}
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
+# https://github.com/coreos/fedora-coreos-config/issues/1500
+# - kdump.service is failling on s390x
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 437582c848..173bbe607b 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -5,14 +5,17 @@ set -xeuo pipefail
 # - kargs provide static network config for eth1 and also coreos.force_persist_ip
 # - ignition provides dhcp network config for eth1
 # Expected result:
-# - with coreos.force_persist_ip ip=kargs win, verify that 
+# - with coreos.force_persist_ip ip=kargs win, verify that
 #   eth1 has the static IP address via kargs
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 # - We use net.ifnames=0 to disable consistent network naming here because on
 #   different firmwares (BIOS vs UEFI) the NIC names are different.
 #   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip" }
+
+# https://github.com/coreos/fedora-coreos-config/issues/1499
+# - Disable the test on s390x
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip", "architectures": "!s390x" }
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 869f6c0a93..ffb757d7b6 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "net.ifnames=0"}
+# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "net.ifnames=0", "architectures": "!s390x"}
 # - We use net.ifnames=0 to disable consistent network naming here because on
 #   different firmwares (BIOS vs UEFI) the NIC names are different.
 #   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
@@ -16,9 +16,12 @@
 #        vlan=bond0.100:bond0"
 # $/usr/libexec/nm-initrd-generator -s -- $kargs
 
-# Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to 
+# Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to
 # https://github.com/coreos/fedora-coreos-config/pull/1401
 
+# https://github.com/coreos/fedora-coreos-config/issues/1499
+# - Disable the test on s390x
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index b32bb35783..5f85d2eb0e 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"}
+# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0", "architectures": "!s390x"}
 # - We use net.ifnames=0 to disable consistent network naming here because on
 #   different firmwares (BIOS vs UEFI) the NIC names are different.
 #   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
@@ -10,6 +10,9 @@
 # - verify ip address on the VLAN subinterface for the bond matches config
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
 
+# https://github.com/coreos/fedora-coreos-config/issues/1499
+# - Disable the test on s390x
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 4b7531f01c..43d7c6c386 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -5,14 +5,17 @@ set -xeuo pipefail
 # - kargs provide static network config for eth1 without coreos.force_persist_ip
 # - ignition provides dhcp network config for eth1
 # Expected result:
-# - without coreos.force_persist_ip Ignition networking 
+# - without coreos.force_persist_ip Ignition networking
 #   configuration wins, verify that eth1 gets ip via dhcp
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 # - We use net.ifnames=0 to disable consistent network naming here because on
 #   different firmwares (BIOS vs UEFI) the NIC names are different.
 #   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0" }
+
+# https://github.com/coreos/fedora-coreos-config/issues/1499
+# - Disable the test on s390x
+# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0", "architectures": "!s390x" }
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From 5d508c807b4be6411d2e4be7136c4c4508f8d31f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 9 Feb 2022 14:25:37 -0500
Subject: [PATCH 0757/2157] denylist: snooze ext.config.chrony.dhcp-propagation
 in rawhide

SELinux denials are causing some issues and we need to have them looked
at. See https://github.com/coreos/fedora-coreos-tracker/issues/1097
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1c2b5b5b04..f7c0637943 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -46,3 +46,8 @@
   snooze: 2022-02-14
   streams:
     - rawhide
+- pattern: ext.config.chrony.dhcp-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1097
+  snooze: 2022-02-21
+  streams:
+    - rawhide

From abd1e72023243b829a69d604208cf25e11773af1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 9 Feb 2022 22:04:08 +0000
Subject: [PATCH 0758/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/5/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3cd654c388..abe7fee83b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1009,10 +1009,10 @@
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.1-2.fc35.aarch64"
+      "evra": "2022.2-1.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.1-2.fc35.aarch64"
+      "evra": "2022.2-1.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-08T20:02:52Z",
+    "generated": "2022-02-09T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-08T02:29:03Z"
+        "generated": "2022-02-08T21:25:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-08T01:03:26Z"
+        "generated": "2022-02-09T01:05:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 39717d691a..5ffb01c4a3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1021,10 +1021,10 @@
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.1-2.fc35.x86_64"
+      "evra": "2022.2-1.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.1-2.fc35.x86_64"
+      "evra": "2022.2-1.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-08T20:02:16Z",
+    "generated": "2022-02-09T20:52:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-08T02:29:25Z"
+        "generated": "2022-02-08T21:26:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-08T01:03:52Z"
+        "generated": "2022-02-09T01:06:04Z"
       }
     }
   }

From 74f7c554538177fe52b4d4c5e205855cee628994 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 9 Feb 2022 23:05:36 -0500
Subject: [PATCH 0759/2157] denylist: apply snoozes to the branched stream as
 well

Since we're re-enabling `branched` we need these to apply
there too.
---
 kola-denylist.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f7c0637943..704e0e1717 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,6 +10,7 @@
   snooze: 2022-02-21
   streams:
     - rawhide
+    - branched
   arches:
     - aarch64
 - pattern: ext.config.kdump.crash
@@ -21,33 +22,40 @@
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: podman.base
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
   snooze: 2022-02-14
   streams:
     - rawhide
+    - branched
 - pattern: ext.config.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1097
   snooze: 2022-02-21
   streams:
     - rawhide
+    - branched

From 2497e0c9b4fbd0f9eb59fb8b1ce55fba0ec1c27b Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 10 Feb 2022 16:53:29 +0800
Subject: [PATCH 0760/2157] denylist: enable coreos.boot-mirror.luks test

Can not reproduce `coreos.boot-mirror.luks` failed issue locally
 with rawhide after running 20 times, remove from denylist to see
if it happens.

See https://github.com/coreos/fedora-coreos-tracker/issues/1092
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 704e0e1717..43e2b872a2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -47,12 +47,6 @@
   streams:
     - rawhide
     - branched
-- pattern: coreos.boot-mirror.luks
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
-  snooze: 2022-02-14
-  streams:
-    - rawhide
-    - branched
 - pattern: ext.config.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1097
   snooze: 2022-02-21

From 82f22f92620b60b009e94872a7b44fade8e782e1 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 10 Feb 2022 09:54:12 -0500
Subject: [PATCH 0761/2157] tests/default-network-behavior-change: Adapt to
 RHCOS 4.11

We're going to rebase RHCOS 4.11, which picks up a new NM,
and the new case is actually the same.

BTW, minor rant here: We really need to stop defaulting to writing conditionals
that do `if is_fcos() {} else if is_rhcos() {}` because about 70%
of the time, this is actually trying to test "RHEL 8" versus "Fedora".

And in this case, what we want to dispatch on is the RHEL8 minor
version.  Or even the NetworkManager version.

Anyways for now, because we haven't updated the `redhat-release-coreos`
package because doing so is painful, dispatch on the OCP version.
---
 .../default-network-behavior-change/test.sh       | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 802bdd9ef5..63c089620c 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -13,7 +13,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG1
-#   - used on FCOS 35+ releases
+#   - used on Fedora 35+ and RHEL 8.5+ releases
 EXPECTED_INITRD_NETWORK_CFG1="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -42,7 +42,7 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG2
-#   - used on all RHCOS releases
+#   - used on older RHCOS <= 4.10 releases
 EXPECTED_INITRD_NETWORK_CFG2="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -106,10 +106,11 @@ normalize_connection_file() {
 
 source /etc/os-release
 # All current FCOS releases use the same config
+EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
+EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
 if [ "$ID" == "fedora" ]; then
     if [ "$VERSION_ID" -ge "35" ]; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
-        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
+        echo "Using defaults"
     else
         fatal "fail: not operating on expected OS version"
     fi
@@ -117,7 +118,11 @@ elif [ "$ID" == "rhcos" ]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
     RHCOS_MINIMUM_VERSION="4.7"
-    if [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
+    # FIXME test RHEL_VERSION instead, but we need to fix the release package for that
+    RHCOS_RHEL_85_OCP_VERSION="4.11"
+    if [ "${VERSION_ID/\./}" -ge "${RHCOS_RHEL_85_OCP_VERSION/\./}" ]; then
+        echo "Using defaults"
+    elif [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     else

From 75f1505ef78962104d1acd774bd03de6db681aed Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 11 Feb 2022 22:04:56 +0000
Subject: [PATCH 0762/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/9/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index abe7fee83b..cd3bbe71d4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.4-1.fc35.aarch64"
+      "evra": "1.7.5-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -634,7 +634,7 @@
       "evra": "1.0.4-14.fc35.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-3.fc35.aarch64"
+      "evra": "2.14.0-1.fc35.aarch64"
     },
     "libmount": {
       "evra": "2.37.3-1.fc35.aarch64"
@@ -1165,10 +1165,10 @@
       "evra": "2.37.3-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4232-1.fc35.noarch"
+      "evra": "2:8.2.4314-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4232-1.fc35.aarch64"
+      "evra": "2:8.2.4314-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-09T20:52:51Z",
+    "generated": "2022-02-11T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-08T21:25:17Z"
+        "generated": "2022-02-09T22:08:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-09T01:05:38Z"
+        "generated": "2022-02-11T01:04:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5ffb01c4a3..7813cefcb9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.4-1.fc35.x86_64"
+      "evra": "1.7.5-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -640,7 +640,7 @@
       "evra": "1.0.4-14.fc35.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.13.0-3.fc35.x86_64"
+      "evra": "2.14.0-1.fc35.x86_64"
     },
     "libmount": {
       "evra": "2.37.3-1.fc35.x86_64"
@@ -856,7 +856,7 @@
       "evra": "4.2-rc2.fc35.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-47.fc35.x86_64"
+      "evra": "2:2.1-47.1.fc35.x86_64"
     },
     "moby-engine": {
       "evra": "20.10.12-1.fc35.x86_64"
@@ -1177,10 +1177,10 @@
       "evra": "2.37.3-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4232-1.fc35.noarch"
+      "evra": "2:8.2.4314-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4232-1.fc35.x86_64"
+      "evra": "2:8.2.4314-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-09T20:52:15Z",
+    "generated": "2022-02-11T20:52:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-08T21:26:07Z"
+        "generated": "2022-02-09T22:08:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-09T01:06:04Z"
+        "generated": "2022-02-11T01:05:23Z"
       }
     }
   }

From 489effaf04cae3772da4148fc7c9bfe9dc515cfb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Feb 2022 22:07:13 +0000
Subject: [PATCH 0763/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/13/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cd3bbe71d4..27da6aea42 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -130,10 +130,10 @@
       "evra": "1.5.8-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-3.fc35.aarch64"
+      "evra": "1.0.1-4.fc35.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-32.fc35.noarch"
+      "evra": "4:1-41.fc35.noarch"
     },
     "coreos-installer": {
       "evra": "0.12.0-2.fc35.aarch64"
@@ -574,13 +574,13 @@
       "evra": "1.4-5.fc35.aarch64"
     },
     "libgcc": {
-      "evra": "11.2.1-7.fc35.aarch64"
+      "evra": "11.2.1-9.fc35.aarch64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.aarch64"
     },
     "libgomp": {
-      "evra": "11.2.1-7.fc35.aarch64"
+      "evra": "11.2.1-9.fc35.aarch64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.aarch64"
@@ -745,7 +745,7 @@
       "evra": "2.6.3-1.fc35.aarch64"
     },
     "libstdc++": {
-      "evra": "11.2.1-7.fc35.aarch64"
+      "evra": "11.2.1-9.fc35.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-11T20:52:51Z",
+    "generated": "2022-02-13T20:54:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-09T22:08:01Z"
+        "generated": "2022-02-11T22:06:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-11T01:04:56Z"
+        "generated": "2022-02-13T01:02:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7813cefcb9..8354d62a0d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,10 +130,10 @@
       "evra": "1.5.8-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-3.fc35.x86_64"
+      "evra": "1.0.1-4.fc35.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-32.fc35.noarch"
+      "evra": "4:1-41.fc35.noarch"
     },
     "coreos-installer": {
       "evra": "0.12.0-2.fc35.x86_64"
@@ -580,13 +580,13 @@
       "evra": "1.4-5.fc35.x86_64"
     },
     "libgcc": {
-      "evra": "11.2.1-7.fc35.x86_64"
+      "evra": "11.2.1-9.fc35.x86_64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.x86_64"
     },
     "libgomp": {
-      "evra": "11.2.1-7.fc35.x86_64"
+      "evra": "11.2.1-9.fc35.x86_64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.x86_64"
@@ -754,7 +754,7 @@
       "evra": "2.6.3-1.fc35.x86_64"
     },
     "libstdc++": {
-      "evra": "11.2.1-7.fc35.x86_64"
+      "evra": "11.2.1-9.fc35.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-11T20:52:14Z",
+    "generated": "2022-02-13T20:53:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-09T22:08:27Z"
+        "generated": "2022-02-11T22:07:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-11T01:05:23Z"
+        "generated": "2022-02-13T01:03:20Z"
       }
     }
   }

From 861b2814da6e8340c597a0c117c1ce5259403297 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Feb 2022 22:23:30 +0000
Subject: [PATCH 0764/2157] overrides: fast-track
 rust-coreos-installer-0.13.1-1.fc35

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 96b6de4194..61a8bf95dd 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,16 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  coreos-installer:
+    evr: 0.13.1-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-be486d7fdc
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.13.1-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-be486d7fdc
+      type: fast-track
   kernel:
     evr: 5.15.18-200.fc35
     metadata:

From 46e319671fe604d667f1d4b6a892ca259f1b4a49 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Feb 2022 09:46:07 -0500
Subject: [PATCH 0765/2157] denylist: extend snoozes for rawhide, branched

These are still a problem.
---
 kola-denylist.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 43e2b872a2..68f3547f4e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -19,31 +19,31 @@
     - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-02-14
+  snooze: 2022-02-21
   streams:
     - rawhide
     - branched
 - pattern: podman.base
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
-  snooze: 2022-02-14
+  snooze: 2022-02-21
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-14
+  snooze: 2022-02-21
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-14
+  snooze: 2022-02-21
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-14
+  snooze: 2022-02-21
   streams:
     - rawhide
     - branched

From f3fa757e122ef037f3a87101158f3b83d7f2da1c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Feb 2022 10:07:09 -0500
Subject: [PATCH 0766/2157] shared-workarounds: adjust multipath fix to apply
 to F37 too

A new version of dracut hasn't been cut yet so the fix hasn't landed
in our rawhide stream.
---
 manifests/shared-workarounds.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index 29ff05a0b5..01916b71f1 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -37,9 +37,9 @@ postprocess:
     set -xeuo pipefail
     source /etc/os-release
     if [[ ${NAME} =~ "Fedora" ]]; then
-        # FCOS: This fix hasn't landed in rawhide (F36) yet,
+        # FCOS: This fix hasn't landed in rawhide (F37) yet,
         # but hopefully will soon.
-        [ ${VERSION_ID} -le 36 ] || exit 0
+        [ ${VERSION_ID} -le 37 ] || exit 0
     else 
         # RHCOS: The fix hasn't landed in any version of RHEL yet
         true

From f645dd796466469b8794a8f6f6ddcefc411cac84 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 14 Feb 2022 12:31:03 -0500
Subject: [PATCH 0767/2157] denylist: snooze `ext.config.extensions.module` for
 now

See https://github.com/coreos/fedora-coreos-tracker/issues/1104.
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 68f3547f4e..5614853ebb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,3 +53,8 @@
   streams:
     - rawhide
     - branched
+- pattern: ext.config.extensions.module
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
+  snooze: 2022-02-21
+  streams:
+    - rawhide

From 4f7064ae70e27c477bce3f3c7ce2e188d2bfd14d Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Tue, 5 Oct 2021 16:03:52 +0200
Subject: [PATCH 0768/2157] overlay: add coreos-unique-boot.service

Aborts firstboot when system has several filesystems labeled `boot`

Fix for https://github.com/coreos/fedora-coreos-tracker/issues/976

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../coreos-unique-boot.service                | 22 +++++++++++++++++++
 .../35coreos-ignition/module-setup.sh         |  1 +
 2 files changed, 23 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
new file mode 100644
index 0000000000..7505ff564a
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Ensure filesystem labeled `boot` is unique
+ConditionPathExists=/etc/initrd-release
+DefaultDependencies=no
+Before=ignition-diskful.target
+Wants=systemd-udevd.service
+After=systemd-udevd.service
+# And since the boot device may be on multipath; optionally wait for it to
+# appear via the dynamic target.
+After=coreos-multipath-wait.target
+Requires=dev-disk-by\x2dlabel-boot.device
+After=dev-disk-by\x2dlabel-boot.device
+# Run before services that modify/use `boot` partition
+Before=coreos-gpt-setup.service coreos-boot-edit.service
+
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/rdcore verify-unique-fs-label boot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 511dd369af..96345f7107 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -61,5 +61,6 @@ install() {
     install_ignition_unit "coreos-boot-edit.service" \
         "ignition-diskful.target"
 
+    install_ignition_unit coreos-unique-boot.service ignition-diskful.target
     install_ignition_unit coreos-ignition-setup-user.service
 }

From bd7a5c78911f5bcfc89b0af42f401144661abcb1 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Mon, 20 Dec 2021 17:10:23 +0100
Subject: [PATCH 0769/2157] overlay: verify filesystem labeled 'boot' is unique
 after ignition

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh  | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index cf2e9c3c3e..64c2c44c6e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -14,6 +14,8 @@ karg() {
     echo "${value}"
 }
 
+rdcore verify-unique-fs-label --rereadpt boot
+
 # Mount /boot. Note that we mount /boot but we don't unmount it because we
 # are run in a systemd unit with MountFlags=slave so it is unmounted for us.
 bootmnt=/mnt/boot_partition

From bdd7759abe4cdbd7121fd2db2d5e1c3a680beb21 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Feb 2022 11:50:24 -0500
Subject: [PATCH 0770/2157] denylist: snooze ext.config.toolbox test in rawhide

There is no registry.fedoraproject.org/fedora-toolbox:37 in the
registry. Let's snooze the test for a month and hopefully it will
exist by then.

See https://github.com/coreos/fedora-coreos-tracker/issues/1103
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5614853ebb..a0bbc02f4b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -58,3 +58,8 @@
   snooze: 2022-02-21
   streams:
     - rawhide
+- pattern: ext.config.toolbox
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1103
+  snooze: 2022-03-15
+  streams:
+    - rawhide

From 6424d50e3abbee59b80ecef6d88e60be935e157d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 14 Feb 2022 22:07:43 +0000
Subject: [PATCH 0771/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/15/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 27da6aea42..d5583ff54b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-41.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.12.0-2.fc35.aarch64"
+      "evra": "0.13.1-1.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.12.0-2.fc35.aarch64"
+      "evra": "0.13.1-1.fc35.aarch64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.aarch64"
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.aarch64"
     },
     "git-core": {
-      "evra": "2.34.1-1.fc35.aarch64"
+      "evra": "2.35.1-1.fc35.aarch64"
     },
     "glib2": {
       "evra": "2.70.3-2.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-13T20:54:04Z",
+    "generated": "2022-02-14T20:54:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-11T22:06:43Z"
+        "generated": "2022-02-13T23:56:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-13T01:02:52Z"
+        "generated": "2022-02-14T01:26:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8354d62a0d..82450105da 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,10 +136,10 @@
       "evra": "4:1-41.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.12.0-2.fc35.x86_64"
+      "evra": "0.13.1-1.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.12.0-2.fc35.x86_64"
+      "evra": "0.13.1-1.fc35.x86_64"
     },
     "coreutils": {
       "evra": "8.32-31.fc35.x86_64"
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.x86_64"
     },
     "git-core": {
-      "evra": "2.34.1-1.fc35.x86_64"
+      "evra": "2.35.1-1.fc35.x86_64"
     },
     "glib2": {
       "evra": "2.70.3-2.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-13T20:53:29Z",
+    "generated": "2022-02-14T20:53:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-11T22:07:03Z"
+        "generated": "2022-02-13T23:56:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-13T01:03:20Z"
+        "generated": "2022-02-14T01:27:22Z"
       }
     }
   }

From 4f672085e2ef15e76f1f00ecdc57ad9ac045af11 Mon Sep 17 00:00:00 2001
From: Marcio Xavier <marcioas@br.ibm.com>
Date: Thu, 10 Feb 2022 18:00:20 -0300
Subject: [PATCH 0772/2157] skipping EFI on arch ppc64le and s390x

EFI does not work for Powerpc and s390x. It reports error when mounting /boot/efi eg:"(mount: /boot/efi: mount point does not exist)"
---
 tests/kola/reboot/test.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 18cbb38a40..2f55be75eb 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -24,7 +24,10 @@ ok "boot mounted by UUID"
 [ -f /boot/.root_uuid ]
 
 # s390x does not have grub, skip this part
-if [ "$(arch)" != "s390x" ]; then
+
+if [ "$(arch)" == "ppc64le" ] || [ "$(arch)" == "s390x" ]; then
+  echo "skipping EFI verification on arch $(arch)"
+else
   # check for the UUID dropins
   [ -f /boot/grub2/bootuuid.cfg ]
   mount -o ro /dev/disk/by-label/EFI-SYSTEM /boot/efi

From 0ff74bb2298c2baab19f8d28b01478e67b2da429 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 27 Jan 2022 16:54:08 -0500
Subject: [PATCH 0773/2157] overlay.d: add 35coreos-iptables

From `overlay.d/README.md`:

Contains systemd service and script for remaining on iptables-nft after
the migration to nft.

Split out because (1) it will roll out to next first, and (2) it can
more easily be deleted after the barrier release.

For more details, see:
https://github.com/coreos/fedora-coreos-tracker/issues/676
https://github.com/coreos/fedora-coreos-config/pull/1324
---
 .../coreos-enable-iptables-legacy.service     | 18 ++++
 .../coreos-enable-iptables-legacy.sh          | 82 +++++++++++++++++++
 .../35coreos-iptables/module-setup.sh         | 17 ++++
 overlay.d/README.md                           | 13 +++
 4 files changed, 130 insertions(+)
 create mode 100644 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
 create mode 100755 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
 create mode 100644 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh

diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
new file mode 100644
index 0000000000..a59bc10531
--- /dev/null
+++ b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=CoreOS Enable iptables-legacy
+ConditionPathExists=/etc/initrd-release
+DefaultDependencies=false
+ConditionPathExists=/sysroot/etc/coreos/iptables-legacy.stamp
+
+# On first boot, allow Ignition config to install stamp file.
+After=ignition-files.service
+
+# On subsequent boots, just make sure the deployment is accessible.
+After=ostree-prepare-root.service
+
+Before=initrd.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/sbin/coreos-enable-iptables-legacy
diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
new file mode 100755
index 0000000000..4f364510bf
--- /dev/null
+++ b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
@@ -0,0 +1,82 @@
+#!/bin/bash
+set -euo pipefail
+
+declare -A SYMLINKS=(
+    [ip6tables]=ip6tables-legacy
+    [ip6tables-restore]=ip6tables-legacy-restore
+    [ip6tables-save]=ip6tables-legacy-save
+    [iptables]=iptables-legacy
+    [iptables-restore]=iptables-legacy-restore
+    [iptables-save]=iptables-legacy-save
+)
+
+STAMP=/sysroot/etc/coreos/iptables-legacy.stamp
+IGNITION_RESULT=/sysroot/etc/.ignition-result.json
+
+# sanity-check the stamp file is present
+if [ ! -e "${STAMP}" ]; then
+    echo "File ${STAMP} not found; exiting."
+    exit 0
+fi
+
+# We only want to run once.
+rm "${STAMP}"
+
+# Ignore firstboot. We don't want the stamp file to be a long-term
+# provisioning-time API for moving to iptables-legacy, so explicitly check for
+# this and don't support it. We use the Ignition report file because it's less
+# hacky than parsing the kernel commandline for `ignition.firstboot`.
+if [ -e "${IGNITION_RESULT}" ]; then
+    ignition_boot=$(jq -r .provisioningBootID "${IGNITION_RESULT}")
+    if [ "$(cat /proc/sys/kernel/random/boot_id)" = "${ignition_boot}" ]; then
+        echo "First boot detected; exiting."
+        exit 0
+    fi
+fi
+
+# if legacy doesn't exist on the host anymore, do nothing
+for legacy in "${SYMLINKS[@]}"; do
+    path=/sysroot/usr/sbin/$legacy
+    if [ ! -e "$path" ]; then
+        echo "Executable $path no longer present; exiting."
+        exit 0
+    fi
+done
+
+symlink_is_default() {
+    local symlinkpath=$1; shift
+    # check that the deployment is still using the symlink (i.e. the user didn't
+    # do something funky), and that the OSTree default is still symlink-based
+    # (i.e. that we didn't change strategy and forgot to update this script)
+    if [ ! -L "/sysroot/$symlinkpath" ] || [ ! -L "/sysroot/usr/$symlinkpath" ]; then
+        return 1
+    fi
+    # compare symlink targets between deployment and OSTree default
+    if [ "$(readlink "/sysroot/$symlinkpath")" != "$(readlink "/sysroot/usr/$symlinkpath")" ]; then
+        return 1
+    fi
+    # it's the default
+    return 0
+}
+
+# If there are any modifications to the symlinks, do nothing. This is basically
+# like `ostree admin config-diff` but more focused and lighter/safer than doing
+# a bwrap call and grepping output.
+for symlink in "${!SYMLINKS[@]}"; do
+    symlinkpath=/etc/alternatives/$symlink
+    if ! symlink_is_default "$symlinkpath"; then
+        echo "Symlink $symlinkpath is not default; exiting without modifying."
+        exit 0
+    fi
+done
+
+# Update symlinks for legacy backend!
+for symlink in "${!SYMLINKS[@]}"; do
+    target=${SYMLINKS[$symlink]}
+    symlink=/etc/alternatives/$symlink
+    ln -vsf "/usr/sbin/$target" "/sysroot/$symlink"
+    # symlink labels don't matter, but relabel to appease unlabeled_t scanners
+    coreos-relabel "$symlink"
+done
+
+echo "Updated /sysroot to use iptables-legacy."
diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh
new file mode 100644
index 0000000000..677f3f6188
--- /dev/null
+++ b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh
@@ -0,0 +1,17 @@
+install_and_enable_unit() {
+    unit="$1"; shift
+    target="$1"; shift
+    inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
+    # note we `|| exit 1` here so we error out if e.g. the units are missing
+    # see https://github.com/coreos/fedora-coreos-config/issues/799
+    systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
+}
+
+install() {
+    inst_simple readlink
+
+    inst_simple "$moddir/coreos-enable-iptables-legacy.sh" \
+        "/usr/sbin/coreos-enable-iptables-legacy"
+    install_and_enable_unit "coreos-enable-iptables-legacy.service" \
+        "initrd.target"
+}
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 4213f2c0b2..61a989718a 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -46,3 +46,16 @@ Add static chrony configuration for NTP servers provided on platforms
 such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
 should override other chrony configuration (e.g. DHCP-provided)
 configuration.
+
+35coreos-iptables
+-----------------
+
+Contains systemd service and script for remaining on iptables-nft after
+the migration to nft.
+
+Split out because (1) it will roll out to next first, and (2) it can
+more easily be deleted after the barrier release.
+
+For more details, see:
+https://github.com/coreos/fedora-coreos-tracker/issues/676
+https://github.com/coreos/fedora-coreos-config/pull/1324

From 11a94cd8e38fc7fe7f9aae5db9a7160f4e889699 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 27 Jan 2022 17:07:43 -0500
Subject: [PATCH 0774/2157] tests: add iptables-nft test

This is prep for enabling iptables-nft in `next`.

Because tests are shared between streams, this is a bit awkward. The way
this does it is:
- Make the iptables-legacy test exclusive and attach a Butane config
  that sets the legacy symlinks. On next, this will verify that this
  config can be used to boot into legacy. On !next, this will verify
  that the config can safely be used even before migration.
- Add an iptables non-exclusive test. On next, this will verify that the
  default backend is nft. On !next, it will verify that it is legacy.
  Once the migration is over on all streams, the latter check will be
  removed, so it'll purely check for nft.
---
 tests/kola/firewall/data/commonlib.sh         |  1 -
 tests/kola/firewall/iptables-legacy           | 18 ------------
 tests/kola/firewall/iptables-legacy/config.bu | 28 +++++++++++++++++++
 .../iptables-legacy/data/commonlib.sh         |  1 +
 tests/kola/firewall/iptables-legacy/test.sh   | 14 ++++++++++
 .../kola/firewall/iptables/data/commonlib.sh  |  1 +
 tests/kola/firewall/iptables/test.sh          | 26 +++++++++++++++++
 7 files changed, 70 insertions(+), 19 deletions(-)
 delete mode 120000 tests/kola/firewall/data/commonlib.sh
 delete mode 100755 tests/kola/firewall/iptables-legacy
 create mode 100644 tests/kola/firewall/iptables-legacy/config.bu
 create mode 120000 tests/kola/firewall/iptables-legacy/data/commonlib.sh
 create mode 100755 tests/kola/firewall/iptables-legacy/test.sh
 create mode 120000 tests/kola/firewall/iptables/data/commonlib.sh
 create mode 100755 tests/kola/firewall/iptables/test.sh

diff --git a/tests/kola/firewall/data/commonlib.sh b/tests/kola/firewall/data/commonlib.sh
deleted file mode 120000
index 1742d51e67..0000000000
--- a/tests/kola/firewall/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
deleted file mode 100755
index 594f691a5d..0000000000
--- a/tests/kola/firewall/iptables-legacy
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test is currently scoped to only FCOS because the RHCOS version of `iptables`
-# is using the `nf_tables` backend.
-# TODO: modify this test to check for `nf_tables` backend when FCOS switches.
-#       See https://github.com/coreos/fedora-coreos-config/pull/1324
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# Make sure we're still on legacy iptables for now
-# https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
-if ! iptables --version | grep legacy; then
-    iptables --version # output for logs
-    fatal "iptables version is not legacy"
-fi
-ok "iptables still in legacy mode"
diff --git a/tests/kola/firewall/iptables-legacy/config.bu b/tests/kola/firewall/iptables-legacy/config.bu
new file mode 100644
index 0000000000..c7092c4022
--- /dev/null
+++ b/tests/kola/firewall/iptables-legacy/config.bu
@@ -0,0 +1,28 @@
+variant: fcos
+version: 1.4.0
+storage:
+  links:
+    - path: /etc/alternatives/iptables
+      target: /usr/sbin/iptables-legacy
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/iptables-restore
+      target: /usr/sbin/iptables-legacy-restore
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/iptables-save
+      target: /usr/sbin/iptables-legacy-save
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables
+      target: /usr/sbin/ip6tables-legacy
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables-restore
+      target: /usr/sbin/ip6tables-legacy-restore
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables-save
+      target: /usr/sbin/ip6tables-legacy-save
+      overwrite: true
+      hard: false
diff --git a/tests/kola/firewall/iptables-legacy/data/commonlib.sh b/tests/kola/firewall/iptables-legacy/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/firewall/iptables-legacy/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
new file mode 100755
index 0000000000..8ef28366cd
--- /dev/null
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -0,0 +1,14 @@
+#!/bin/bash
+# kola: { "distros": "fcos", "exclusive": true }
+# This test verifies that one can configure a node to use the legacy iptables
+# backend. It is scoped to only FCOS because RHCOS only supports nft.
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Make sure we're on legacy iptables
+if ! iptables --version | grep legacy; then
+    iptables --version # output for logs
+    fatal "iptables version is not legacy"
+fi
+ok "iptables in legacy mode"
diff --git a/tests/kola/firewall/iptables/data/commonlib.sh b/tests/kola/firewall/iptables/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/firewall/iptables/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
new file mode 100755
index 0000000000..3477f2f125
--- /dev/null
+++ b/tests/kola/firewall/iptables/test.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+# Verifies that the expected iptables backend is configured.
+# https://github.com/coreos/fedora-coreos-tracker/issues/676
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# we're currently rolling out to next first
+case "$(get_fcos_stream)" in
+    "next-devel" | "next")
+        if ! iptables --version | grep nf_tables; then
+            iptables --version # output for logs
+            fatal "iptables version is not nft"
+        fi
+        ok "iptables in nft mode"
+        ;;
+    *)
+        # Make sure we're on legacy iptables
+        if ! iptables --version | grep legacy; then
+            iptables --version # output for logs
+            fatal "iptables version is not legacy"
+        fi
+        ok "iptables in legacy mode"
+        ;;
+esac

From e000ea06917087c94f72dd4ec219fcbb6f40dd08 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 16 Feb 2022 16:04:57 -0500
Subject: [PATCH 0775/2157] tests/manual: add iptables-nft upgrade tests

These are manual upgrade tests that verify various upgrade paths for
iptables-nft.

It's manual in that you have to update the `OCIARCHIVE_URL` to point to
a URL of an ociarchive of a build with `35coreos-iptables`.

Long-term, I'd like to add external tests support directly in upgrade
tests so that we could have access to the artifacts vis e.g.
`KOLA_EXT_DATA` or a mount. But for now, this will do.

To run the tests, first update `OCIARCHIVE_URL`, and then:

```
    kola run -E /path/to/tests/manual/iptables-nft-migration ext.iptables-nft-migration.*
```
---
 .../tests/kola/already-migrated/config.bu     | 28 +++++++++++++++++++
 .../kola/already-migrated/data/common.sh      |  1 +
 .../tests/kola/already-migrated/test.sh       | 21 ++++++++++++++
 .../tests/kola/data/common.sh                 | 22 +++++++++++++++
 .../tests/kola/migrate-to-nft                 | 21 ++++++++++++++
 .../tests/kola/stay-on-legacy.day1/config.bu  |  6 ++++
 .../kola/stay-on-legacy.day1/data/common.sh   |  1 +
 .../tests/kola/stay-on-legacy.day1/test.sh    | 21 ++++++++++++++
 .../tests/kola/stay-on-legacy.day2            | 23 +++++++++++++++
 9 files changed, 144 insertions(+)
 create mode 100644 tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
 create mode 120000 tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
 create mode 100755 tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
 create mode 100644 tests/manual/iptables-nft-migration/tests/kola/data/common.sh
 create mode 100755 tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
 create mode 100644 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
 create mode 120000 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
 create mode 100755 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
 create mode 100755 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2

diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
new file mode 100644
index 0000000000..2692db6c75
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
@@ -0,0 +1,28 @@
+variant: fcos
+version: 1.4.0
+storage:
+  links:
+    - path: /etc/alternatives/iptables
+      target: /usr/sbin/iptables-nft
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/iptables-restore
+      target: /usr/sbin/iptables-nft-restore
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/iptables-save
+      target: /usr/sbin/iptables-nft-save
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables
+      target: /usr/sbin/ip6tables-nft
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables-restore
+      target: /usr/sbin/ip6tables-nft-restore
+      overwrite: true
+      hard: false
+    - path: /etc/alternatives/ip6tables-save
+      target: /usr/sbin/ip6tables-nft-save
+      overwrite: true
+      hard: false
diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
new file mode 120000
index 0000000000..e232e75550
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
@@ -0,0 +1 @@
+../../data/common.sh
\ No newline at end of file
diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
new file mode 100755
index 0000000000..76984b55e9
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# kola: { "tags": "needs-internet" }
+
+. $KOLA_EXT_DATA/common.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      assert_iptables_nft
+      assert_iptables_differs_from_default
+      upgrade
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      assert_iptables_nft
+      assert_iptables_matches_default
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/data/common.sh
new file mode 100644
index 0000000000..7b9b98e516
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/data/common.sh
@@ -0,0 +1,22 @@
+OCIARCHIVE_URL=http://192.168.0.13:8000/fedora-coreos-35.20220210.dev.0-ostree.x86_64.ociarchive
+
+upgrade() {
+    curl -Lo /var/tmp/update.ociarchive "${OCIARCHIVE_URL}"
+    rpm-ostree rebase --experimental ostree-unverified-image:oci-archive:/var/tmp/update.ociarchive
+}
+
+assert_iptables_legacy() {
+    iptables --version | grep legacy
+}
+
+assert_iptables_nft() {
+    iptables --version | grep nf_tables
+}
+
+assert_iptables_differs_from_default() {
+    ostree admin config-diff | grep alternatives/iptables
+}
+
+assert_iptables_matches_default() {
+    ! ostree admin config-diff | grep alternatives/iptables
+}
diff --git a/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft b/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
new file mode 100755
index 0000000000..919df443b1
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
@@ -0,0 +1,21 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# kola: { "tags": "needs-internet" }
+
+. $KOLA_EXT_DATA/common.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      assert_iptables_legacy
+      assert_iptables_matches_default
+      upgrade
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      assert_iptables_nft
+      assert_iptables_matches_default
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
new file mode 100644
index 0000000000..81e9d43319
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
@@ -0,0 +1,6 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/coreos/iptables-legacy.stamp
+      mode: 0644
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
new file mode 120000
index 0000000000..e232e75550
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
@@ -0,0 +1 @@
+../../data/common.sh
\ No newline at end of file
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
new file mode 100755
index 0000000000..2d263ea1a5
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# kola: { "tags": "needs-internet" }
+
+. $KOLA_EXT_DATA/common.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      assert_iptables_legacy
+      assert_iptables_matches_default
+      upgrade
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      assert_iptables_legacy
+      assert_iptables_differs_from_default
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2 b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2
new file mode 100755
index 0000000000..85035164e3
--- /dev/null
+++ b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2
@@ -0,0 +1,23 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# kola: { "tags": "needs-internet" }
+
+. $KOLA_EXT_DATA/common.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      assert_iptables_legacy
+      assert_iptables_matches_default
+      mkdir -m 755 /etc/coreos/
+      touch /etc/coreos/iptables-legacy.stamp
+      upgrade
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      assert_iptables_legacy
+      assert_iptables_differs_from_default
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From a90eac1f79b2756c6832a260eb4132753a6a6010 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 16 Feb 2022 17:06:24 -0500
Subject: [PATCH 0776/2157] kola-denylist: snooze multipath.day1 for a week

This will unblock lockfile bumps while we investigate the issue.
---
 kola-denylist.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a0bbc02f4b..c069cbfa41 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -63,3 +63,6 @@
   snooze: 2022-03-15
   streams:
     - rawhide
+- pattern: multipath.day1
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
+  snooze: 2022-02-23

From 6e33397b3499dcbd0dad8eac5da71b071bf8e417 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 17 Feb 2022 02:53:18 +0000
Subject: [PATCH 0777/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/22/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 2 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d5583ff54b..1822238cf4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.173.1-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.8-1.fc35.aarch64"
+      "evra": "1.6.0~rc.2-2.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-4.fc35.aarch64"
@@ -265,7 +265,7 @@
       "evra": "2:5.16-1.fc35.aarch64"
     },
     "expat": {
-      "evra": "2.4.3-1.fc35.aarch64"
+      "evra": "2.4.4-1.fc35.aarch64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.aarch64"
@@ -355,7 +355,7 @@
       "evra": "2.35.1-1.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.70.3-2.fc35.aarch64"
+      "evra": "2.70.4-1.fc35.aarch64"
     },
     "glibc": {
       "evra": "2.34-25.fc35.aarch64"
@@ -517,7 +517,7 @@
       "evra": "0.1.1-48.fc35.aarch64"
     },
     "libblkid": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.aarch64"
@@ -562,7 +562,7 @@
       "evra": "2.1.12-4.fc35.aarch64"
     },
     "libfdisk": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.aarch64"
@@ -637,7 +637,7 @@
       "evra": "2.14.0-1.fc35.aarch64"
     },
     "libmount": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.aarch64"
@@ -715,7 +715,7 @@
       "evra": "4.6.1-2.fc35.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.aarch64"
@@ -778,7 +778,7 @@
       "evra": "1.2.1-5.fc35.aarch64"
     },
     "libuuid": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.aarch64"
@@ -811,10 +811,10 @@
       "evra": "2.5.1-30.fc35.aarch64"
     },
     "linux-firmware": {
-      "evra": "20211216-127.fc35.noarch"
+      "evra": "20220209-129.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20211216-127.fc35.noarch"
+      "evra": "20220209-129.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.aarch64"
@@ -1159,10 +1159,10 @@
       "evra": "0.13.0-3.fc35.aarch64"
     },
     "util-linux": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.37.3-1.fc35.aarch64"
+      "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
       "evra": "2:8.2.4314-1.fc35.noarch"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-14T20:54:20Z",
+    "generated": "2022-02-17T01:45:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-13T23:56:11Z"
+        "generated": "2022-02-16T22:09:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-14T01:26:55Z"
+        "generated": "2022-02-16T01:06:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 82450105da..875e407979 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.173.1-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.5.8-1.fc35.x86_64"
+      "evra": "1.6.0~rc.2-2.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-4.fc35.x86_64"
@@ -265,7 +265,7 @@
       "evra": "2:5.16-1.fc35.x86_64"
     },
     "expat": {
-      "evra": "2.4.3-1.fc35.x86_64"
+      "evra": "2.4.4-1.fc35.x86_64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.x86_64"
@@ -355,7 +355,7 @@
       "evra": "2.35.1-1.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.70.3-2.fc35.x86_64"
+      "evra": "2.70.4-1.fc35.x86_64"
     },
     "glibc": {
       "evra": "2.34-25.fc35.x86_64"
@@ -523,7 +523,7 @@
       "evra": "0.1.1-48.fc35.x86_64"
     },
     "libblkid": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-6.fc35.x86_64"
@@ -568,7 +568,7 @@
       "evra": "2.1.12-4.fc35.x86_64"
     },
     "libfdisk": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "libffi": {
       "evra": "3.1-29.fc35.x86_64"
@@ -643,7 +643,7 @@
       "evra": "2.14.0-1.fc35.x86_64"
     },
     "libmount": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "libndp": {
       "evra": "1.8-2.fc35.x86_64"
@@ -721,7 +721,7 @@
       "evra": "4.6.1-2.fc35.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.15.5-0.fc35.x86_64"
@@ -787,7 +787,7 @@
       "evra": "1.2.1-5.fc35.x86_64"
     },
     "libuuid": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "libuv": {
       "evra": "1:1.43.0-2.fc35.x86_64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-30.fc35.x86_64"
     },
     "linux-firmware": {
-      "evra": "20211216-127.fc35.noarch"
+      "evra": "20220209-129.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20211216-127.fc35.noarch"
+      "evra": "20220209-129.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.x86_64"
@@ -1171,10 +1171,10 @@
       "evra": "0.13.0-3.fc35.x86_64"
     },
     "util-linux": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.37.3-1.fc35.x86_64"
+      "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
       "evra": "2:8.2.4314-1.fc35.noarch"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-14T20:53:37Z",
+    "generated": "2022-02-17T01:44:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-13T23:56:58Z"
+        "generated": "2022-02-16T22:10:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-14T01:27:22Z"
+        "generated": "2022-02-16T01:07:18Z"
       }
     }
   }

From 9dee6035940df7cd3108ba4306a521377921deb8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 5 Jan 2022 20:32:48 +0100
Subject: [PATCH 0778/2157] tests: Rework 'find' calls with multiple file type
 filters

Fedora has a recent enough `find` command to be able to use the `-type
f,d` option but that is not yet supported by `find` on RHEL.

We can not use `-type f -type d` instead as this filters on entries
being both a file and a directory which never happens. Thus we must
explicitely duplicate the entire filters and actions and use `-o` to OR
them.

This reworks the tests using that option to be compatible on both FCOS
and RHCOS. We can drop this change once RHCOS moves to RHEL 9.

This also includes `/usr` in the file-directory-permissions test and
tries to figure out which package the offending files/dires come from.

Fixes: https://github.com/coreos/fedora-coreos-config/commit/dac1f6835e1e730409a4062c6562ece32bddaee1
---
 tests/kola/files/file-directory-permissions | 6 ++++--
 tests/kola/files/setgid                     | 3 ++-
 tests/kola/files/setuid                     | 3 ++-
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index 08e86f4464..bfd880f079 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -5,9 +5,11 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-list="$(find /etc -type f -type d -perm /022)"
+list="$(find /usr /etc -type f -perm /022 -o -type d -perm /022)"
+
 if [[ -n "${list}" ]]; then
-    find /etc -type f -type d -perm /022 -print0 | xargs -0 ls -al
+    find /usr /etc -type f -perm /022 -print0 -o -type d -perm /022 -print0 | xargs -0 ls -al
+    find /usr /etc -type f -perm /022 -print0 -o -type d -perm /022 -print0 | xargs -0 rpm -qf
     fatal "found files or directories with 'g+w' or 'o+w' permission"
 fi
 ok "no files with 'g+w' or 'o+w' permission found in /etc"
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index fd738e34ba..b777dd1326 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -10,6 +10,7 @@ list_setgid_files=(
     '/usr/libexec/openssh/ssh-keysign'
     '/usr/libexec/utempter/utempter'
 )
+
 unknown_setgid_files=""
 while IFS= read -r -d '' e; do
     found="false"
@@ -22,7 +23,7 @@ while IFS= read -r -d '' e; do
     if [[ "${found}" == "false" ]]; then
         unknown_setgid_files+=" ${e}"
     fi
-done< <(find /usr /etc -type f,d -perm /2000 -print0)
+done< <(find /usr /etc -type f -perm /2000 -print0 -o -type d -perm /2000 -print0)
 
 if [[ -n "${unknown_setgid_files}" ]]; then
     echo "SetGID:${unknown_setgid_files}"
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 4393fb234b..337e78d222 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -24,6 +24,7 @@ list_setuid_files=(
     '/usr/sbin/pam_timestamp_check'
     '/usr/sbin/unix_chkpwd'
 )
+
 unknown_setuid_files=""
 while IFS= read -r -d '' e; do
     found="false"
@@ -36,7 +37,7 @@ while IFS= read -r -d '' e; do
     if [[ "${found}" == "false" ]]; then
         unknown_setuid_files+=" ${e}"
     fi
-done< <(find /usr /etc -type f,d -perm /4000 -print0)
+done< <(find /usr /etc -type f -perm /4000 -print0 -o -type d -perm /4000 -print0)
 
 if [[ -n "${unknown_setuid_files}" ]]; then
     echo "SetUID:${unknown_setuid_files}"

From 05e0f27964de2daba7b2a1d7a9e08072cd11cca8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 27 Jan 2022 17:40:30 +0100
Subject: [PATCH 0779/2157] tests: Add exclude lists for RHCOS

---
 tests/kola/files/file-directory-permissions | 37 +++++++++++++++++++--
 tests/kola/files/setuid                     | 22 ++++++++++++
 2 files changed, 57 insertions(+), 2 deletions(-)

diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index bfd880f079..43d38f8537 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -5,9 +5,42 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-list="$(find /usr /etc -type f -perm /022 -o -type d -perm /022)"
+# List of known files and directories with group write permission
+list_known=()
 
-if [[ -n "${list}" ]]; then
+# List of known files and directories with group write permission (RHCOS only)
+list_known_rhcos=(
+    '/usr/share/licenses/publicsuffix-list-dafsa/COPYING'
+)
+
+is_fcos="false"
+if [[ "$(source /etc/os-release && echo "${ID}")" == "fedora" ]]; then
+    is_fcos="true"
+fi
+
+unknown=""
+while IFS= read -r -d '' e; do
+    found="false"
+    for k in "${list_known[@]}"; do
+        if [[ "${k}" == "${e}" ]]; then
+            found="true"
+            break
+        fi
+    done
+    if [[ "${is_fcos}" == "false" ]]; then
+        for k in "${list_known_rhcos[@]}"; do
+            if [[ "${k}" == "${e}" ]]; then
+                found="true"
+                break
+            fi
+        done
+    fi
+    if [[ "${found}" == "false" ]]; then
+        unknown+=" ${e}"
+    fi
+done< <(find /usr /etc -type f -perm /022 -print0 -o -type d -perm /022 -print0)
+
+if [[ -n "${unknown}" ]]; then
     find /usr /etc -type f -perm /022 -print0 -o -type d -perm /022 -print0 | xargs -0 ls -al
     find /usr /etc -type f -perm /022 -print0 -o -type d -perm /022 -print0 | xargs -0 rpm -qf
     fatal "found files or directories with 'g+w' or 'o+w' permission"
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 337e78d222..0efd5d1148 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -25,6 +25,20 @@ list_setuid_files=(
     '/usr/sbin/unix_chkpwd'
 )
 
+# List of known files and directories with SetUID bit set (RHCOS only)
+list_setuid_files_rhcos=(
+    '/usr/libexec/dbus-1/dbus-daemon-launch-helper'
+    '/usr/libexec/sssd/krb5_child'
+    '/usr/libexec/sssd/ldap_child'
+    '/usr/libexec/sssd/proxy_child'
+    '/usr/libexec/sssd/selinux_child'
+)
+
+is_fcos="false"
+if [[ "$(source /etc/os-release && echo "${ID}")" == "fedora" ]]; then
+    is_fcos="true"
+fi
+
 unknown_setuid_files=""
 while IFS= read -r -d '' e; do
     found="false"
@@ -34,6 +48,14 @@ while IFS= read -r -d '' e; do
             break
         fi
     done
+    if [[ "${is_fcos}" == "false" ]]; then
+        for k in "${list_setuid_files_rhcos[@]}"; do
+            if [[ "${k}" == "${e}" ]]; then
+                found="true"
+                break
+            fi
+        done
+    fi
     if [[ "${found}" == "false" ]]; then
         unknown_setuid_files+=" ${e}"
     fi

From 0139ffd656b4f78892b1ae03f1c6ccb70bb59bc9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 17 Feb 2022 10:19:17 -0500
Subject: [PATCH 0780/2157] denylist: snooze the coreos.boot-mirror.luks test

This issue is back again.

See https://github.com/coreos/fedora-coreos-tracker/issues/1092#issuecomment-1043059521
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c069cbfa41..f9f6e275f2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -66,3 +66,9 @@
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
   snooze: 2022-02-23
+- pattern: coreos.boot-mirror.luks
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
+  snooze: 2022-02-28
+  streams:
+    - rawhide
+    - branched

From 54e261ed09a8f23a3ed5e7aa3ac8433f2dfe0410 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 17 Feb 2022 22:08:31 +0000
Subject: [PATCH 0781/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/23/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1822238cf4..30c653fce1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1036,10 +1036,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.13-1.fc35.noarch"
+      "evra": "35.15-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.13-1.fc35.noarch"
+      "evra": "35.15-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1165,10 +1165,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4314-1.fc35.noarch"
+      "evra": "2:8.2.4386-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4314-1.fc35.aarch64"
+      "evra": "2:8.2.4386-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1202,7 +1202,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-17T01:45:31Z",
+    "generated": "2022-02-17T20:54:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1211,7 +1211,7 @@
         "generated": "2022-02-16T22:09:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-16T01:06:38Z"
+        "generated": "2022-02-17T02:59:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 875e407979..bfd91613a9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1048,10 +1048,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.13-1.fc35.noarch"
+      "evra": "35.15-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.13-1.fc35.noarch"
+      "evra": "35.15-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1177,10 +1177,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4314-1.fc35.noarch"
+      "evra": "2:8.2.4386-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4314-1.fc35.x86_64"
+      "evra": "2:8.2.4386-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1214,7 +1214,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-17T01:44:54Z",
+    "generated": "2022-02-17T20:53:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1223,7 +1223,7 @@
         "generated": "2022-02-16T22:10:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-16T01:07:18Z"
+        "generated": "2022-02-17T03:00:02Z"
       }
     }
   }

From a6cd600141a82216dd8f988923c87f8eda94d521 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 18 Feb 2022 22:03:34 +0000
Subject: [PATCH 0782/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/25/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 30c653fce1..7ee5dfc682 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.173.1-1.fc35.noarch"
+      "evra": "2:2.177.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.0~rc.2-2.fc35.aarch64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.4-1.fc35.aarch64"
+      "evra": "1.12.5-1.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-17T20:54:10Z",
+    "generated": "2022-02-18T20:52:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-16T22:09:52Z"
+        "generated": "2022-02-17T22:11:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-17T02:59:34Z"
+        "generated": "2022-02-18T01:05:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bfd91613a9..dca4962719 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.173.1-1.fc35.noarch"
+      "evra": "2:2.177.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.0~rc.2-2.fc35.x86_64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.4-1.fc35.x86_64"
+      "evra": "1.12.5-1.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-17T20:53:46Z",
+    "generated": "2022-02-18T20:52:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-16T22:10:22Z"
+        "generated": "2022-02-17T22:11:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-17T03:00:02Z"
+        "generated": "2022-02-18T01:05:33Z"
       }
     }
   }

From 80c01d0dc2bcf237d5e5479b7d571d4699a8b774 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 19 Feb 2022 22:02:43 +0000
Subject: [PATCH 0783/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/27/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7ee5dfc682..b631b9ef92 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -973,10 +973,10 @@
       "evra": "3.3-1.fc35.aarch64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.1.aarch64"
+      "evra": "0.120-1.fc35.2.aarch64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.1.aarch64"
+      "evra": "0.120-1.fc35.2.aarch64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-20.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-18T20:52:47Z",
+    "generated": "2022-02-19T20:52:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-17T22:11:12Z"
+        "generated": "2022-02-18T22:05:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-18T01:05:07Z"
+        "generated": "2022-02-19T01:02:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index dca4962719..3b29b7cf11 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -985,10 +985,10 @@
       "evra": "3.3-1.fc35.x86_64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.1.x86_64"
+      "evra": "0.120-1.fc35.2.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.1.x86_64"
+      "evra": "0.120-1.fc35.2.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-20.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-18T20:52:14Z",
+    "generated": "2022-02-19T20:52:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-17T22:11:50Z"
+        "generated": "2022-02-18T22:07:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-18T01:05:33Z"
+        "generated": "2022-02-19T01:03:05Z"
       }
     }
   }

From 31f2de353507370e9a971e86429aa16a880b501b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Feb 2022 22:04:48 +0000
Subject: [PATCH 0784/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/29/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b631b9ef92..4d8dee7499 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.7-1.fc35.aarch64"
+      "evra": "3.0.7-2.fc35.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-19T20:52:48Z",
+    "generated": "2022-02-20T20:53:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-18T22:05:41Z"
+        "generated": "2022-02-19T22:05:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-19T01:02:37Z"
+        "generated": "2022-02-20T01:00:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3b29b7cf11..0b642aaa2f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.7-1.fc35.x86_64"
+      "evra": "3.0.7-2.fc35.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-19T20:52:12Z",
+    "generated": "2022-02-20T20:53:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-18T22:07:01Z"
+        "generated": "2022-02-19T22:05:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-19T01:03:05Z"
+        "generated": "2022-02-20T01:00:28Z"
       }
     }
   }

From 3e5a8f251819424033382e52baf4705528bac296 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 21 Feb 2022 10:45:29 -0500
Subject: [PATCH 0785/2157] denylist: remove podman.base snooze

This should be fixed now. See https://bugzilla.redhat.com/show_bug.cgi?id=2033016#c20

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1049
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f9f6e275f2..053bde231b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,12 +23,6 @@
   streams:
     - rawhide
     - branched
-- pattern: podman.base
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1049
-  snooze: 2022-02-21
-  streams:
-    - rawhide
-    - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-02-21

From 37b57f913e086fb0e1552962c46910496ba1caf0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 21 Feb 2022 10:46:53 -0500
Subject: [PATCH 0786/2157] denylist: extend snoozes for still failing tests

These are still failing and being investigated.
---
 kola-denylist.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 053bde231b..13e87e805e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
@@ -19,37 +19,37 @@
     - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
 - pattern: ext.config.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1097
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
     - branched
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
-  snooze: 2022-02-21
+  snooze: 2022-02-28
   streams:
     - rawhide
 - pattern: ext.config.toolbox
@@ -59,7 +59,7 @@
     - rawhide
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
-  snooze: 2022-02-23
+  snooze: 2022-02-28
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
   snooze: 2022-02-28

From f8c7195281193c3d8eff3d9caa8f30a9e1acf277 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 21 Feb 2022 13:47:02 -0500
Subject: [PATCH 0787/2157] tests/default-network-behavior-change: update for
 NM 1.36.0

Upstream in NM they changed it so that entries in a keyfile
don't get written out if they were empty strings [1]. Let's
update our definitions accordingly.

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/27c33d15efdf974a085590aa4077ab76862c1854
---
 .../default-network-behavior-change/test.sh   | 65 +++++++++++++++++--
 1 file changed, 58 insertions(+), 7 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 63c089620c..1fc3e1a357 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -13,7 +13,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG1
-#   - used on Fedora 35+ and RHEL 8.5+ releases
+#   - used on Fedora 35 and RHEL 8.5+ releases
 EXPECTED_INITRD_NETWORK_CFG1="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -67,9 +67,34 @@ dns-search=
 method=auto
 
 [proxy]"
+# EXPECTED_INITRD_NETWORK_CFG3
+#   - used on Fedora 36+
+EXPECTED_INITRD_NETWORK_CFG3="[connection]
+id=Wired Connection
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-retries=1
+multi-connect=3
+
+[ethernet]
+
+[ipv4]
+dhcp-timeout=90
+method=auto
+required-timeout=20000
+
+[ipv6]
+addr-gen-mode=eui64
+dhcp-timeout=90
+method=auto
+
+[proxy]
+
+[user]
+org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
 # EXPECTED_REALROOT_NETWORK_CFG1:
-#   - used on all FCOS/RHCOS releases
+#   - used on F35 and all RHCOS releases
 EXPECTED_REALROOT_NETWORK_CFG1="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -93,6 +118,29 @@ method=auto
 
 [proxy]
 
+[.nmmeta]
+nm-generated=true"
+# EXPECTED_REALROOT_NETWORK_CFG2:
+#   - used on all Fedora 36+
+EXPECTED_REALROOT_NETWORK_CFG2="[connection]
+id=Wired connection 1
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-priority=-999
+interface-name=xxxx
+timestamp=xxxxxxxxxx
+
+[ethernet]
+
+[ipv4]
+method=auto
+
+[ipv6]
+addr-gen-mode=stable-privacy
+method=auto
+
+[proxy]
+
 [.nmmeta]
 nm-generated=true"
 
@@ -106,11 +154,13 @@ normalize_connection_file() {
 
 source /etc/os-release
 # All current FCOS releases use the same config
-EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
-EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
 if [ "$ID" == "fedora" ]; then
-    if [ "$VERSION_ID" -ge "35" ]; then
-        echo "Using defaults"
+    if [ "$VERSION_ID" -ge "36" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2
+    elif [ "$VERSION_ID" -eq "35" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     else
         fatal "fail: not operating on expected OS version"
     fi
@@ -121,7 +171,8 @@ elif [ "$ID" == "rhcos" ]; then
     # FIXME test RHEL_VERSION instead, but we need to fix the release package for that
     RHCOS_RHEL_85_OCP_VERSION="4.11"
     if [ "${VERSION_ID/\./}" -ge "${RHCOS_RHEL_85_OCP_VERSION/\./}" ]; then
-        echo "Using defaults"
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     elif [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1

From 5592994943823d8605dbb4bde37339fd233242bd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 21 Feb 2022 22:21:25 -0500
Subject: [PATCH 0788/2157] denylist: snooze the ext.config.firewall.iptables
 test on next*

We merged an update to the test that checks for iptables-nft on
next/next-devel but we haven't switched to iptables-nft there yet
because we are coupling that with the rebase to F36.

I imagine what we'll do is modify the test to be conditional on
Fedora 36 rather than the stream but we have to wait to make that
change until we actually switch rawhide/branched over as well,
which will most likely happen after https://github.com/coreos/rpm-ostree/pull/3439
lands.
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 13e87e805e..1c91a6c18b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -66,3 +66,9 @@
   streams:
     - rawhide
     - branched
+- pattern: ext.config.firewall.iptables
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/676
+  snooze: 2022-02-28
+  streams:
+    - next
+    - next-devel

From 59dd9c53d16b94b0d0060d1bc6862b4538f4a216 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 22 Feb 2022 06:05:18 +0000
Subject: [PATCH 0789/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 61a8bf95dd..96b6de4194 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  coreos-installer:
-    evr: 0.13.1-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-be486d7fdc
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.13.1-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-be486d7fdc
-      type: fast-track
   kernel:
     evr: 5.15.18-200.fc35
     metadata:

From 7413ad4049882ed2c873db954d6147d8d43f1af0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 22 Feb 2022 22:05:32 +0000
Subject: [PATCH 0790/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/34/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4d8dee7499..1bea49a060 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.16.1-1.fc35.aarch64"
+      "evra": "5.16.2-1.fc35.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.aarch64"
@@ -133,7 +133,7 @@
       "evra": "1.0.1-4.fc35.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-41.fc35.noarch"
+      "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
       "evra": "0.13.1-1.fc35.aarch64"
@@ -592,7 +592,7 @@
       "evra": "0.3.9-1.fc35.aarch64"
     },
     "libibverbs": {
-      "evra": "38.1-2.fc35.aarch64"
+      "evra": "39.0-1.fc35.aarch64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.aarch64"
@@ -1165,10 +1165,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4386-1.fc35.noarch"
+      "evra": "2:8.2.4428-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4386-1.fc35.aarch64"
+      "evra": "2:8.2.4428-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-20T20:53:48Z",
+    "generated": "2022-02-22T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-19T22:05:12Z"
+        "generated": "2022-02-20T22:06:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-20T01:00:01Z"
+        "generated": "2022-02-22T18:53:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0b642aaa2f..3020824bfd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "3.5.2-2.fc35.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.16.1-1.fc35.x86_64"
+      "evra": "5.16.2-1.fc35.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-1.fc35.x86_64"
@@ -133,7 +133,7 @@
       "evra": "1.0.1-4.fc35.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-41.fc35.noarch"
+      "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
       "evra": "0.13.1-1.fc35.x86_64"
@@ -598,7 +598,7 @@
       "evra": "0.3.9-1.fc35.x86_64"
     },
     "libibverbs": {
-      "evra": "38.1-2.fc35.x86_64"
+      "evra": "39.0-1.fc35.x86_64"
     },
     "libicu": {
       "evra": "69.1-2.fc35.x86_64"
@@ -1177,10 +1177,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4386-1.fc35.noarch"
+      "evra": "2:8.2.4428-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4386-1.fc35.x86_64"
+      "evra": "2:8.2.4428-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-20T20:53:12Z",
+    "generated": "2022-02-22T20:52:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-19T22:05:01Z"
+        "generated": "2022-02-20T22:07:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-20T01:00:28Z"
+        "generated": "2022-02-22T18:53:58Z"
       }
     }
   }

From 4ae74aafb2abd50a3b3242e2f2daf1eeca616c66 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 16 Feb 2022 17:51:28 -0500
Subject: [PATCH 0791/2157] workflows: add job to check for unexpected changes
 in promotion diff

When we get a promotion PR in the next/testing/stable branches, compare
the new code with a checkout of the commit hash from the PR title and
annotate the differences.  For manifest.yaml, compare with the base
branch instead, since the branch we're promoting from will have a
different config.
---
 .github/workflows/promotion-diff.yml | 44 ++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 .github/workflows/promotion-diff.yml

diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
new file mode 100644
index 0000000000..b8f0cb7c5f
--- /dev/null
+++ b/.github/workflows/promotion-diff.yml
@@ -0,0 +1,44 @@
+---
+name: Check promotion diffs
+on:
+  pull_request:
+    branches: [next, testing, stable]
+permissions:
+  contents: read
+
+jobs:
+  promotion-diff:
+    name: Check promotion diffs
+    runs-on: ubuntu-latest
+    # Only run if this looks like a promotion PR
+    if: "startsWith(github.event.pull_request.title, 'tree: promote changes from')"
+    steps:
+      - name: Get base commit hash
+        env:
+          COMMIT_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          echo "ORIGIN_COMMIT=$(echo ${COMMIT_TITLE} | awk '{print $NF}')" >> $GITHUB_ENV
+      - name: Check out origin commit
+        uses: actions/checkout@v2
+        with:
+          path: origin
+          ref: ${{ env.ORIGIN_COMMIT }}
+      - name: Check out base branch
+        uses: actions/checkout@v2
+        with:
+          path: base
+          ref: ${{ github.base_ref }}
+      - name: Check out PR
+        uses: actions/checkout@v2
+        with:
+          path: new
+      - name: Ignore manifest files
+        run: |
+          # manifest.yaml is per-branch, so we care about changes vs. the
+          # one in the base, not the one from the origin
+          cp base/manifest.yaml origin/
+      - name: Compare trees
+        uses: coreos/check-diff@main
+        with:
+          basedir: origin
+          patchdir: new

From 0a84651cb79e79c4ea0a846eb32865c430ac2011 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 16 Feb 2022 07:28:57 -0500
Subject: [PATCH 0792/2157] 35coreos-live: support
 coreos.live.rootfs_url=tftp://

As discussed in
https://github.com/coreos/fedora-coreos-tracker/issues/1055, the
rootfs_url karg is preferred over initrd concatenation due to its lower
memory footprint and generally better performance.  We originally chose to
disallow its use with TFTP to reduce the feature matrix, but that forces
users without HTTP servers to fall back to concatenation.  Enable TFTP
so rootfs_url can be used in all environments.
---
 .../dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index 9f59a8dbd7..c7188bfbfb 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -23,12 +23,12 @@ elif [[ -n "${rootfs_url}" ]]; then
     # rootfs URL was provided as karg.  Fetch image, check its hash, and
     # unpack it.
     echo "Fetching rootfs image from ${rootfs_url}..."
-    if [[ ${rootfs_url} != http:* && ${rootfs_url} != https:* ]]; then
+    if [[ ${rootfs_url} != http:* && ${rootfs_url} != https:* && ${rootfs_url} != tftp:* ]]; then
         # Don't commit to supporting protocols we might not want to expose in
         # the long term.
         echo "Unsupported scheme for image specified by:" >&2
         echo "coreos.live.rootfs_url=${rootfs_url}" >&2
-        echo "Only HTTP and HTTPS are supported. Please fix your PXE configuration." >&2
+        echo "Only HTTP, HTTPS, and TFTP are supported. Please fix your PXE configuration." >&2
         exit 1
     fi
 

From 8d8ad1d7818a5f91e7a201d61787b0ff44807d08 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 24 Feb 2022 09:29:42 -0500
Subject: [PATCH 0793/2157] tests/iptables: adapt for RHCOS and f36+

Don't make the test stream-based, but rather releasever-based. Handle
RHCOS correctly, which has long already switched to iptables-nft.

While we're here, add a bunch of query functions to the commonlib.
There are some tests in which we could use these in a follow-up.
---
 tests/kola/data/commonlib.sh         | 23 +++++++++++++++++++
 tests/kola/firewall/iptables/test.sh | 34 +++++++++++++---------------
 2 files changed, 39 insertions(+), 18 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 6e562a7dac..193170b102 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -25,3 +25,26 @@ get_ipv4_for_nic() {
 get_fcos_stream() {
     rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]'
 }
+
+is_fcos() (
+    source /etc/os-release
+    [ "${ID}" == "fedora" ] && [ "${VARIANT_ID}" == "coreos" ]
+)
+
+# Note when using this, you probably also want to check `get_rhel_maj_ver`.
+is_rhcos() (
+    source /etc/os-release
+    [ "${ID}" == "rhcos" ]
+)
+
+get_fedora_ver() (
+    source /etc/os-release
+    if is_fcos; then
+        echo "${VERSION_ID}"
+    fi
+)
+
+get_rhel_maj_ver() {
+    source /etc/os-release
+    echo "${RHEL_VERSION%%.*}"
+}
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index 3477f2f125..84f178d8e0 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -6,21 +6,19 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# we're currently rolling out to next first
-case "$(get_fcos_stream)" in
-    "next-devel" | "next")
-        if ! iptables --version | grep nf_tables; then
-            iptables --version # output for logs
-            fatal "iptables version is not nft"
-        fi
-        ok "iptables in nft mode"
-        ;;
-    *)
-        # Make sure we're on legacy iptables
-        if ! iptables --version | grep legacy; then
-            iptables --version # output for logs
-            fatal "iptables version is not legacy"
-        fi
-        ok "iptables in legacy mode"
-        ;;
-esac
+# rollout is tied to f36+ on FCOS
+# RHCOS is already in nft
+# once all of FCOS is on f36, we can drop this branching
+if is_rhcos || [ "$(get_fedora_ver)" -ge 36 ]; then
+    if ! iptables --version | grep nf_tables; then
+        iptables --version # output for logs
+        fatal "iptables version is not nft"
+    fi
+    ok "iptables in nft mode"
+else
+    if ! iptables --version | grep legacy; then
+        iptables --version # output for logs
+        fatal "iptables version is not legacy"
+    fi
+    ok "iptables in legacy mode"
+fi

From 53b41b51eeffaa3e5b03f3796e043290fa470eac Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 26 Jan 2022 09:45:28 -0500
Subject: [PATCH 0794/2157] overlay.d: delete `cosa-no-autolayer` knob file

It's the default behaviour now:
https://github.com/coreos/coreos-assembler/pull/2665
---
 overlay.d/cosa-no-autolayer | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 overlay.d/cosa-no-autolayer

diff --git a/overlay.d/cosa-no-autolayer b/overlay.d/cosa-no-autolayer
deleted file mode 100644
index e69de29bb2..0000000000

From a5aa57c80d4fe68363b7456b8d18ddc91b439504 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 25 Feb 2022 22:07:46 +0000
Subject: [PATCH 0795/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/41/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1bea49a060..d87362a1e1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -64,7 +64,7 @@
       "evra": "0.2.6-1.fc35.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.2-2.fc35.aarch64"
+      "evra": "3.5.3-1.fc35.aarch64"
     },
     "btrfs-progs": {
       "evra": "5.16.2-1.fc35.aarch64"
@@ -373,7 +373,7 @@
       "evra": "2.3.4-1.fc35.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.2-2.fc35.aarch64"
+      "evra": "3.7.2-3.fc35.aarch64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc35.aarch64"
@@ -502,7 +502,7 @@
       "evra": "0.3.111-12.fc35.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.2-2.fc35.aarch64"
+      "evra": "3.5.3-1.fc35.aarch64"
     },
     "libargon2": {
       "evra": "20171227-7.fc35.aarch64"
@@ -691,7 +691,7 @@
       "evra": "1.14.2-1.fc35.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-6.fc35.noarch"
+      "evra": "2.15.2-7.fc35.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-1.fc35.aarch64"
@@ -796,7 +796,7 @@
       "evra": "4.4.28-1.fc35.aarch64"
     },
     "libxml2": {
-      "evra": "2.9.12-6.fc35.aarch64"
+      "evra": "2.9.13-1.fc35.aarch64"
     },
     "libxmlb": {
       "evra": "0.3.6-1.fc35.aarch64"
@@ -1165,10 +1165,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4428-1.fc35.noarch"
+      "evra": "2:8.2.4460-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4428-1.fc35.aarch64"
+      "evra": "2:8.2.4460-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-22T20:52:51Z",
+    "generated": "2022-02-25T20:54:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-20T22:06:45Z"
+        "generated": "2022-02-22T22:08:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-22T18:53:30Z"
+        "generated": "2022-02-25T16:39:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3020824bfd..6fe5d869b5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,7 +64,7 @@
       "evra": "0.2.6-1.fc35.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.2-2.fc35.x86_64"
+      "evra": "3.5.3-1.fc35.x86_64"
     },
     "btrfs-progs": {
       "evra": "5.16.2-1.fc35.x86_64"
@@ -373,7 +373,7 @@
       "evra": "2.3.4-1.fc35.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.2-2.fc35.x86_64"
+      "evra": "3.7.2-3.fc35.x86_64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc35.x86_64"
@@ -508,7 +508,7 @@
       "evra": "0.3.111-12.fc35.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.2-2.fc35.x86_64"
+      "evra": "3.5.3-1.fc35.x86_64"
     },
     "libargon2": {
       "evra": "20171227-7.fc35.x86_64"
@@ -697,7 +697,7 @@
       "evra": "1.14.2-1.fc35.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-6.fc35.noarch"
+      "evra": "2.15.2-7.fc35.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-1.fc35.x86_64"
@@ -805,7 +805,7 @@
       "evra": "4.4.28-1.fc35.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.12-6.fc35.x86_64"
+      "evra": "2.9.13-1.fc35.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.6-1.fc35.x86_64"
@@ -1177,10 +1177,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4428-1.fc35.noarch"
+      "evra": "2:8.2.4460-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4428-1.fc35.x86_64"
+      "evra": "2:8.2.4460-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1214,16 +1214,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-22T20:52:14Z",
+    "generated": "2022-02-25T20:53:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-20T22:07:10Z"
+        "generated": "2022-02-22T22:08:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-22T18:53:58Z"
+        "generated": "2022-02-25T16:39:27Z"
       }
     }
   }

From a456f26a3f6fa4e77ce92a4cb83ea77c9f1b7ee8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Feb 2022 10:52:59 -0500
Subject: [PATCH 0796/2157] 15fcos: add coreos-fix-systemd-journald.service

This service will detect when systemd-journald has been leaked from the
initramfs and kill it so the system can recover. This is a workaround
for https://github.com/coreos/fedora-coreos-tracker/issues/1108
---
 .../lib/systemd/system-preset/45-fcos.preset  |  2 ++
 .../coreos-fix-systemd-journald.service       | 13 ++++++++++++
 .../usr/libexec/coreos-fix-systemd-journald   | 20 ++++++++++++++++++
 tests/kola/systemd/data/commonlib.sh          |  1 +
 tests/kola/systemd/sytemd-journald-fix        | 21 +++++++++++++++++++
 5 files changed, 57 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
 create mode 100755 overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
 create mode 120000 tests/kola/systemd/data/commonlib.sh
 create mode 100755 tests/kola/systemd/sytemd-journald-fix

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index c1d3e4dc9a..6cdbfa3400 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,3 +3,5 @@ enable fedora-coreos-pinger.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
+# Fix systemd-journald if required
+enable coreos-fix-systemd-journald.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
new file mode 100644
index 0000000000..0c28e66260
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Fix systemd-journald after switch root on Fedora CoreOS
+Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1108
+DefaultDependencies=no
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-fix-systemd-journald
+RemainAfterExit=yes
+# can't send output to the journal because we might kill it
+StandardOutput=file:/run/coreos-fix-systemd-journald-stdout
+StandardError=file:/run/coreos-fix-systemd-journald-stderr
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald b/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
new file mode 100755
index 0000000000..764141000a
--- /dev/null
+++ b/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
@@ -0,0 +1,20 @@
+#!/usr/bin/bash
+# This is a workaround for cases where systemd-journald can fail to
+# process SIGTERM and get left over from the initramfs into the real
+# root. https://github.com/coreos/fedora-coreos-tracker/issues/1108
+set -eux -o pipefail
+
+# We find the PID of the systemd-journald process and then determine
+# if it's the one from the initramfs by checking the SELinux context.
+# If the context is `kernel_t` then we know it's been leaked from the
+# initramfs and it must be taken out. We must use SIGKILL because the
+# reason we're here in the first place is because it's not responding
+# to SIGTERM.
+jrnlpid=$(systemctl show --property=MainPID --value systemd-journald.service)
+context=$(ps --no-headers --format label $jrnlpid)
+if [ "${context}" == "system_u:system_r:kernel_t:s0" ]; then
+    kill -s KILL $jrnlpid
+    # Leave behind evidence that we had to fix things
+    mkdir -p /run/coreos
+    touch /run/coreos/coreos-fix-systemd-journald
+fi
diff --git a/tests/kola/systemd/data/commonlib.sh b/tests/kola/systemd/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/systemd/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/systemd/sytemd-journald-fix b/tests/kola/systemd/sytemd-journald-fix
new file mode 100755
index 0000000000..00dd6e749a
--- /dev/null
+++ b/tests/kola/systemd/sytemd-journald-fix
@@ -0,0 +1,21 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+# This test identifies when the workaround for [1] gets used. We still
+# want to know how when it happens until it gets fixed. We can
+# denylist/snooze this test if we decide we don't want to see it for
+# a while.
+# [1] https://github.com/coreos/fedora-coreos-tracker/issues/1108
+# 
+# - exclusive: false
+#   - This problem really only happens for non-exclusive tests that 
+#     we've seen so far.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [ -f /run/coreos/coreos-fix-systemd-journald ]; then
+    echo "Workaround for https://github.com/coreos/fedora-coreos-tracker/issues/1108 used"
+    fatal "Error: The systemd-journald workaround was needed"
+fi
+ok "No systemd-journald workaround used"

From 8ebc89554ad7902b4b757a42ab4a331418485cdc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 27 Feb 2022 22:04:35 +0000
Subject: [PATCH 0797/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/45/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 11 +++++++----
 manifest-lock.x86_64.json  | 11 +++++++----
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d87362a1e1..028820d823 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.177.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.0~rc.2-2.fc35.aarch64"
+      "evra": "1.6.0-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-4.fc35.aarch64"
@@ -765,6 +765,9 @@
     "libtirpc": {
       "evra": "1.3.2-1.fc35.aarch64"
     },
+    "libtool-ltdl": {
+      "evra": "2.4.6-42.fc35.aarch64"
+    },
     "libunistring": {
       "evra": "0.9.10-14.fc35.aarch64"
     },
@@ -1202,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-25T20:54:14Z",
+    "generated": "2022-02-27T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-22T22:08:38Z"
+        "generated": "2022-02-25T22:10:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-25T16:39:00Z"
+        "generated": "2022-02-27T03:39:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6fe5d869b5..2046334136 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.177.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.0~rc.2-2.fc35.x86_64"
+      "evra": "1.6.0-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.0.1-4.fc35.x86_64"
@@ -774,6 +774,9 @@
     "libtirpc": {
       "evra": "1.3.2-1.fc35.x86_64"
     },
+    "libtool-ltdl": {
+      "evra": "2.4.6-42.fc35.x86_64"
+    },
     "libunistring": {
       "evra": "0.9.10-14.fc35.x86_64"
     },
@@ -1214,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-25T20:53:40Z",
+    "generated": "2022-02-27T20:52:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-22T22:08:54Z"
+        "generated": "2022-02-25T22:11:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-25T16:39:27Z"
+        "generated": "2022-02-27T03:40:11Z"
       }
     }
   }

From 9f8925fe61c2d99916fb84391197364443cfdfc3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 16 Feb 2022 12:30:06 +0100
Subject: [PATCH 0798/2157] tests: Ensure that Ignition can preset/enable
 socket units

---
 .../config.bu                                 |  2 ++
 .../systemd-enable-units/data/commonlib.sh    |  1 +
 .../test.sh                                   | 23 ++++++++-----------
 3 files changed, 13 insertions(+), 13 deletions(-)
 rename tests/kola/ignition/{systemd-enable-instance-unit => systemd-enable-units}/config.bu (86%)
 create mode 120000 tests/kola/ignition/systemd-enable-units/data/commonlib.sh
 rename tests/kola/ignition/{systemd-enable-instance-unit => systemd-enable-units}/test.sh (63%)

diff --git a/tests/kola/ignition/systemd-enable-instance-unit/config.bu b/tests/kola/ignition/systemd-enable-units/config.bu
similarity index 86%
rename from tests/kola/ignition/systemd-enable-instance-unit/config.bu
rename to tests/kola/ignition/systemd-enable-units/config.bu
index 0d39eac884..fd9ca2fc4e 100644
--- a/tests/kola/ignition/systemd-enable-instance-unit/config.bu
+++ b/tests/kola/ignition/systemd-enable-units/config.bu
@@ -12,3 +12,5 @@ systemd:
         WantedBy=multi-user.target
     - name: echo@foo.service
       enabled: true
+    - name: podman.socket
+      enabled: true
diff --git a/tests/kola/ignition/systemd-enable-units/data/commonlib.sh b/tests/kola/ignition/systemd-enable-units/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/systemd-enable-units/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/systemd-enable-instance-unit/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
similarity index 63%
rename from tests/kola/ignition/systemd-enable-instance-unit/test.sh
rename to tests/kola/ignition/systemd-enable-units/test.sh
index dc031639b9..523269f89a 100755
--- a/tests/kola/ignition/systemd-enable-instance-unit/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,23 +1,15 @@
 #!/bin/bash
 # kola: { "platforms": "qemu-unpriv" }
-
-# This test makes sure that ignition is able to enable instance units.
+# This test makes sure that ignition is able to enable systemd units of
+# different types.
 # https://github.com/coreos/ignition/issues/586
 # https://github.com/systemd/systemd/pull/9901
-
-# We don't need to test this on every platform. If it passes in
-# one place it will pass everywhere.
+# We don't need to test this on every platform. If it passes in one place it
+# will pass everywhere.
 
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure the presets worked and the instantiated unit is enabled
 if [ "$(systemctl is-enabled echo@foo.service)" != 'enabled' ]; then
@@ -30,3 +22,8 @@ if [ "$(journalctl -o cat -u echo@foo.service | sed -n 2p)" != 'foo' ]; then
     fatal "echo@foo.service did not write 'foo' to journal"
 fi
 ok "echo@foo.service ran and wrote 'foo' to the journal"
+
+if [ "$(systemctl is-enabled podman.socket)" != 'enabled' ]; then
+    fatal "podman.socket systemd unit should be enabled"
+fi
+ok "podman.socket systemd unit is enabled"

From d08e051f3b0dd9d39522a1ceeb316545799ddd19 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 16 Feb 2022 14:28:35 +0100
Subject: [PATCH 0799/2157] tests: Cleanup and convert to new format

---
 tests/kola/data/commonlib.sh                    |  4 ++--
 tests/kola/ignition/kargs/data/commonlib.sh     |  1 +
 tests/kola/ignition/kargs/test.sh               | 11 +++--------
 tests/kola/ignition/remote/data/commonlib.sh    |  1 +
 tests/kola/ignition/remote/test.sh              |  9 +--------
 .../kola/ignition/stable-boot/data/commonlib.sh |  1 +
 tests/kola/ignition/stable-boot/test.sh         | 16 ++++++----------
 .../systemd-unmasking/data/commonlib.sh         |  1 +
 tests/kola/ignition/systemd-unmasking/test.sh   | 17 +++++------------
 tests/kola/k8s/node-e2e/data/commonlib.sh       |  1 +
 tests/kola/k8s/node-e2e/data/node-e2e           | 13 ++++---------
 tests/kola/kdump/crash                          |  5 +----
 .../systemd-env-read/data/commonlib.sh          |  1 +
 tests/kola/kubernetes/systemd-env-read/test.sh  | 12 +++---------
 14 files changed, 31 insertions(+), 62 deletions(-)
 create mode 120000 tests/kola/ignition/kargs/data/commonlib.sh
 create mode 120000 tests/kola/ignition/remote/data/commonlib.sh
 create mode 120000 tests/kola/ignition/stable-boot/data/commonlib.sh
 create mode 120000 tests/kola/ignition/systemd-unmasking/data/commonlib.sh
 create mode 120000 tests/kola/k8s/node-e2e/data/commonlib.sh
 create mode 120000 tests/kola/kubernetes/systemd-env-read/data/commonlib.sh

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 193170b102..25dd0cc3e5 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
-#This is a common library created for the ok & fatal function 
-#and symlinks added to the data/ in each directory
+# This is a common library created for the ok & fatal function and symlinks
+# added to the data/ in each directory
 
 ok() {
     echo "ok" "$@"
diff --git a/tests/kola/ignition/kargs/data/commonlib.sh b/tests/kola/ignition/kargs/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/kargs/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
index a7535254f8..1601fd71f8 100755
--- a/tests/kola/ignition/kargs/test.sh
+++ b/tests/kola/ignition/kargs/test.sh
@@ -1,14 +1,9 @@
 #!/bin/bash
-set -xeuo pipefail
+# TODO: Doc
 
-ok() {
-    echo "ok" "$@"
-}
+set -xeuo pipefail
 
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! grep foobar /proc/cmdline; then
     fatal "missing foobar in kernel cmdline"
diff --git a/tests/kola/ignition/remote/data/commonlib.sh b/tests/kola/ignition/remote/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/remote/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 2ddf424349..86a0e29177 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -6,14 +6,7 @@
 
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 if ! grep -q foobar /proc/cmdline; then
     fatal "missing foobar in kernel cmdline"
diff --git a/tests/kola/ignition/stable-boot/data/commonlib.sh b/tests/kola/ignition/stable-boot/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/stable-boot/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index 1dec105aee..5714e70337 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,16 +1,12 @@
 #!/bin/bash
-set -xeuo pipefail
-
-# This test makes sure that ignition is able to use `coreos-boot-disk` symlink
-
-# We don't need to test this on every platform. If it passes in
-# one place it will pass everywhere.
 # kola: { "platforms": "qemu-unpriv" }
+# This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
+# We don't need to test this on every platform. If it passes in one place it
+# will pass everywhere.
+
+set -xeuo pipefail
 
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # symlink shouldn't be propogated to real-root
 link="/dev/disk/by-id/coreos-boot-disk"
diff --git a/tests/kola/ignition/systemd-unmasking/data/commonlib.sh b/tests/kola/ignition/systemd-unmasking/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/systemd-unmasking/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index bd71bb6e02..147e3c49f5 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -4,22 +4,15 @@
 # It just so happens we have masked dnsmasq in FCOS so we can
 # test this by unmasking it.
 
-# We don't need to test this on every platform. If it passes in
-# one place it will pass everywhere.
-# This test is currently scoped to FCOS because `dnsmasq` is not masked
-# on RHCOS.
+# We don't need to test this on every platform. If it passes in one place it
+# will pass everywhere.
+# This test is currently scoped to FCOS because `dnsmasq` is not masked on
+# RHCOS.
 # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
 
 set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # make sure the systemd unit (dnsmasq) is unmasked and enabled
 if [ "$(systemctl is-enabled dnsmasq.service)" != 'enabled' ]; then
diff --git a/tests/kola/k8s/node-e2e/data/commonlib.sh b/tests/kola/k8s/node-e2e/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/k8s/node-e2e/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/k8s/node-e2e/data/node-e2e b/tests/kola/k8s/node-e2e/data/node-e2e
index 4f38d299d1..ee759a7cea 100755
--- a/tests/kola/k8s/node-e2e/data/node-e2e
+++ b/tests/kola/k8s/node-e2e/data/node-e2e
@@ -1,20 +1,15 @@
 #!/bin/bash
+# TODO: Doc
+
 set -xeuo pipefail
 
+. $KOLA_EXT_DATA/commonlib.sh
+
 SELF=$(realpath "$0")
 IMAGE=quay.io/projectquay/golang:1.17
 
 branch=$1; shift
 
-ok() {
-    echo "ok" "$@"
-}
-
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
-
 if [ -z "${container:-}" ]; then
     mkdir -m 0600 ~/.ssh
     ssh-keygen -N "" -t ed25519 -f /srv/kube
diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash
index 3ac190cc38..2b702c8646 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash
@@ -6,10 +6,7 @@
 
 set -xeuo pipefail
 
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
diff --git a/tests/kola/kubernetes/systemd-env-read/data/commonlib.sh b/tests/kola/kubernetes/systemd-env-read/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/kubernetes/systemd-env-read/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index 1d14aeaa30..d47005ff9d 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -1,15 +1,9 @@
 #!/bin/bash
 # kola: { "exclusive": false }
-set -xeuo pipefail
 
-ok() {
-    echo "ok" "$@"
-}
+set -xeuo pipefail
 
-fatal() {
-    echo "$@" >&2
-    exit 1
-}
+. $KOLA_EXT_DATA/commonlib.sh
 
 # In order to verify that `kubernetes_file_t` labeled files can be read by
 # systemd, we check to see if the `kube-env` service started successfully
@@ -29,4 +23,4 @@ ok "kube-env.service successfully started"
 if ! journalctl -o cat -u kube-env.service | grep FCOS; then
     fatal "kube-env.service did not write 'FCOS' to journal"
 fi
-ok "kube-env.service ran and wrote 'FCOS' to the journal"
\ No newline at end of file
+ok "kube-env.service ran and wrote 'FCOS' to the journal"

From 02b706c10d354b39044df32b4cadbd058309bf57 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 28 Feb 2022 10:58:17 -0500
Subject: [PATCH 0800/2157] denylist: drop ext.config.chrony.dhcp-propagation
 snooze

The underlying issue seems to have been resolved in a recent
selinux-policy update.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1097
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1c91a6c18b..a925bd144b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,12 +41,6 @@
   streams:
     - rawhide
     - branched
-- pattern: ext.config.chrony.dhcp-propagation
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1097
-  snooze: 2022-02-28
-  streams:
-    - rawhide
-    - branched
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
   snooze: 2022-02-28

From 7ff63f097cffc2697f646e691c0d7980d7786930 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 28 Feb 2022 10:59:50 -0500
Subject: [PATCH 0801/2157] denylist: switch snooze streams for
 ext.config.firewall.iptables

In 8d8ad1d we switched the test to be based on the Fedora major
rather than the stream so let's now snooze on the streams that are
Fedora 36+ already.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a925bd144b..bd662b5132 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -64,5 +64,5 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/676
   snooze: 2022-02-28
   streams:
-    - next
-    - next-devel
+    - rawhide
+    - branched

From 53098661a83b3c6b26c334540aaec72d3f9cbfc9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 28 Feb 2022 11:21:19 -0500
Subject: [PATCH 0802/2157] denylist: extend snoozes

These are still problems and need to be extended.
---
 kola-denylist.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index bd662b5132..10e5f50e1f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ostree.hotfix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
@@ -19,31 +19,31 @@
     - aarch64
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
 - pattern: ext.config.toolbox
@@ -53,16 +53,16 @@
     - rawhide
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
-  snooze: 2022-02-28
+  snooze: 2022-03-07
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched
 - pattern: ext.config.firewall.iptables
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/676
-  snooze: 2022-02-28
+  snooze: 2022-03-07
   streams:
     - rawhide
     - branched

From 656b9727368317a5adcf49823f9ae3a03d1fe3f5 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 1 Mar 2022 09:28:40 +0800
Subject: [PATCH 0803/2157] multipathd.socket: remove workaround for rhel8.6

The fix landed in RHEL8.6+ and there is no need for a workaround.
Add check to remove workaround if `RHEL_VERSION` > `8.5`.
See:
- https://bugzilla.redhat.com/show_bug.cgi?id=2008101
- Fixed RPM version: device-mapper-multipath-0.8.4-18.el8
---
 manifests/shared-workarounds.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index 01916b71f1..efe8f042a3 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -14,9 +14,12 @@ postprocess:
         # FCOS: Only operate on releases before F36. The fix has landed
         # in F36+ and there is no need for a workaround.
         [ ${VERSION_ID} -le 35 ] || exit 0
-    else 
-        # RHCOS: The fix hasn't landed in any version of RHEL yet
-        true
+    elif [[ "${ID}" == "rhcos" ]]; then
+        # RHCOS: Only operate on releases before RHEL8.5. The fix has 
+        # landed in RHEL8.6+ and there is no need for a workaround.
+        # https://bugzilla.redhat.com/show_bug.cgi?id=2008101
+        # Fixed RPM version: device-mapper-multipath-0.8.4-18.el8
+        [ ${RHEL_VERSION//.} -le 85 ] || exit 0
     fi
     mkdir /usr/lib/systemd/system/multipathd.socket.d
     cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'

From 5881204013b581259981435da7019c9f28203ef3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 1 Mar 2022 22:05:55 +0000
Subject: [PATCH 0804/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/49/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 028820d823..41bc6b29d7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,16 +187,16 @@
       "evra": "2.1.27-13.fc35.aarch64"
     },
     "dbus": {
-      "evra": "1:1.12.20-5.fc35.aarch64"
+      "evra": "1:1.12.22-1.fc35.aarch64"
     },
     "dbus-broker": {
       "evra": "29-4.fc35.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.12.20-5.fc35.noarch"
+      "evra": "1:1.12.22-1.fc35.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.20-5.fc35.aarch64"
+      "evra": "1:1.12.22-1.fc35.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.175-6.fc35.aarch64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.5-1.fc35.aarch64"
+      "evra": "1.12.6-1.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.5-1.fc35.aarch64"
+      "evra": "1.7.6-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -721,7 +721,7 @@
       "evra": "2:4.15.5-0.fc35.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.19-3.fc35.aarch64"
+      "evra": "0.7.21-1.fc35.aarch64"
     },
     "libss": {
       "evra": "1.46.3-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-27T20:52:51Z",
+    "generated": "2022-03-01T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-25T22:10:35Z"
+        "generated": "2022-02-28T21:40:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-27T03:39:41Z"
+        "generated": "2022-03-01T18:09:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2046334136..d542a0a92b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -187,16 +187,16 @@
       "evra": "2.1.27-13.fc35.x86_64"
     },
     "dbus": {
-      "evra": "1:1.12.20-5.fc35.x86_64"
+      "evra": "1:1.12.22-1.fc35.x86_64"
     },
     "dbus-broker": {
       "evra": "29-4.fc35.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.12.20-5.fc35.noarch"
+      "evra": "1:1.12.22-1.fc35.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.20-5.fc35.x86_64"
+      "evra": "1:1.12.22-1.fc35.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.175-6.fc35.x86_64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.5-1.fc35.x86_64"
+      "evra": "1.12.6-1.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.5-1.fc35.x86_64"
+      "evra": "1.7.6-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -730,7 +730,7 @@
       "evra": "2.4.3-4.fc35.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.19-3.fc35.x86_64"
+      "evra": "0.7.21-1.fc35.x86_64"
     },
     "libss": {
       "evra": "1.46.3-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-02-27T20:52:14Z",
+    "generated": "2022-03-01T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-25T22:11:44Z"
+        "generated": "2022-02-28T21:40:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-02-27T03:40:11Z"
+        "generated": "2022-03-01T18:09:51Z"
       }
     }
   }

From 5a2c87639ede4f9452e3e123935e3ce954dcb017 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 2 Mar 2022 14:51:17 +0800
Subject: [PATCH 0805/2157] tests/default-network-behavior-change: update for
 rhel8.6

RHEL8.6 includes NetworkManager-1.36.0-1.el8.x86_64, update
scripts according to F36.
See https://github.com/coreos/fedora-coreos-config/pull/1533
---
 .../default-network-behavior-change/test.sh   | 23 +++++++++++--------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 1fc3e1a357..876d1ca1df 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -13,7 +13,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG1
-#   - used on Fedora 35 and RHEL 8.5+ releases
+#   - used on Fedora 35 and RHEL 8.5 release
 EXPECTED_INITRD_NETWORK_CFG1="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -42,7 +42,7 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG2
-#   - used on older RHCOS <= 4.10 releases
+#   - used on older RHEL 8.4 release
 EXPECTED_INITRD_NETWORK_CFG2="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -68,7 +68,7 @@ method=auto
 
 [proxy]"
 # EXPECTED_INITRD_NETWORK_CFG3
-#   - used on Fedora 36+
+#   - used on Fedora 36+ and RHEL8.6+
 EXPECTED_INITRD_NETWORK_CFG3="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -94,7 +94,7 @@ method=auto
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
 # EXPECTED_REALROOT_NETWORK_CFG1:
-#   - used on F35 and all RHCOS releases
+#   - used on F35 and RHEL <= 8.5
 EXPECTED_REALROOT_NETWORK_CFG1="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -121,7 +121,7 @@ method=auto
 [.nmmeta]
 nm-generated=true"
 # EXPECTED_REALROOT_NETWORK_CFG2:
-#   - used on all Fedora 36+
+#   - used on all Fedora 36+ and RHEL8.6+
 EXPECTED_REALROOT_NETWORK_CFG2="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -154,6 +154,7 @@ normalize_connection_file() {
 
 source /etc/os-release
 # All current FCOS releases use the same config
+# https://github.com/coreos/fedora-coreos-config/pull/1533
 if [ "$ID" == "fedora" ]; then
     if [ "$VERSION_ID" -ge "36" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
@@ -167,13 +168,15 @@ if [ "$ID" == "fedora" ]; then
 elif [ "$ID" == "rhcos" ]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
-    RHCOS_MINIMUM_VERSION="4.7"
-    # FIXME test RHEL_VERSION instead, but we need to fix the release package for that
-    RHCOS_RHEL_85_OCP_VERSION="4.11"
-    if [ "${VERSION_ID/\./}" -ge "${RHCOS_RHEL_85_OCP_VERSION/\./}" ]; then
+    # RHEL8.6 includes NetworkManager-1.36.0-1.el8.x86_64, update scripts
+    # according to F36
+    if [ "${RHEL_VERSION/\./}" -ge 86 ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2
+    elif [ "${RHEL_VERSION/\./}" -eq 85 ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
-    elif [ "${VERSION_ID/\./}" -ge "${RHCOS_MINIMUM_VERSION/\./}" ]; then
+    elif [ "${RHEL_VERSION/\./}" -eq 84 ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     else

From 0334ab5ad6cd2e71aa88dca9ac3f0faf2509305d Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 2 Mar 2022 16:25:02 +0800
Subject: [PATCH 0806/2157] multipathd.socket: fix `remove workaround for
 rhel8.6`

https://github.com/coreos/fedora-coreos-config/pull/1550 does not work when https://github.com/openshift/os/pull/713 merged,
because it will use generic redhat-release package instead of redhat-release-coreos.

Need to check RHEL specific version using `VERSION_ID`(for example
VERSION_ID=8.6), and clarify rhel or fedora using `ID=rhel`,
as this will be executed before override according to
https://github.com/openshift/os/blob/master/manifest.yaml#L128-L150
---
 manifests/shared-workarounds.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index efe8f042a3..5b205e8138 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -14,12 +14,15 @@ postprocess:
         # FCOS: Only operate on releases before F36. The fix has landed
         # in F36+ and there is no need for a workaround.
         [ ${VERSION_ID} -le 35 ] || exit 0
-    elif [[ "${ID}" == "rhcos" ]]; then
+    elif [[ "${ID}" == "rhel" ]]; then
         # RHCOS: Only operate on releases before RHEL8.5. The fix has 
         # landed in RHEL8.6+ and there is no need for a workaround.
         # https://bugzilla.redhat.com/show_bug.cgi?id=2008101
         # Fixed RPM version: device-mapper-multipath-0.8.4-18.el8
-        [ ${RHEL_VERSION//.} -le 85 ] || exit 0
+        # Using generic redhat-release package according to 
+        # https://github.com/openshift/os/pull/713, should check RHEL version
+        # with VERSION_ID
+        [ ${VERSION_ID//.} -le 85 ] || exit 0
     fi
     mkdir /usr/lib/systemd/system/multipathd.socket.d
     cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'

From 8651a0e0fa8217d5bf561b3c8db9fdc5eaa9423d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Mar 2022 19:32:24 +0000
Subject: [PATCH 0807/2157] overrides: fast-track rpm-ostree-2022.4-1.fc35

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 96b6de4194..29ee5c2046 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,6 +24,16 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
+  rpm-ostree:
+    evr: 2022.4-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-53811a0195
+      type: fast-track
+  rpm-ostree-libs:
+    evr: 2022.4-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-53811a0195
+      type: fast-track
   systemd:
     evr: 249.7-2.fc35
     metadata:

From 83e1b96cd2c48b5da7bb51712558d48ba04d60dd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Mar 2022 22:04:10 +0000
Subject: [PATCH 0808/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/51/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 41bc6b29d7..12a888e4d1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,10 +142,10 @@
       "evra": "0.13.1-1.fc35.aarch64"
     },
     "coreutils": {
-      "evra": "8.32-31.fc35.aarch64"
+      "evra": "8.32-32.fc35.aarch64"
     },
     "coreutils-common": {
-      "evra": "8.32-31.fc35.aarch64"
+      "evra": "8.32-32.fc35.aarch64"
     },
     "cpio": {
       "evra": "2.13-11.fc35.aarch64"
@@ -1012,10 +1012,10 @@
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.2-1.fc35.aarch64"
+      "evra": "2022.4-1.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.2-1.fc35.aarch64"
+      "evra": "2022.4-1.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.aarch64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4460-1.fc35.noarch"
+      "evra": "2:8.2.4485-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4460-1.fc35.aarch64"
+      "evra": "2:8.2.4485-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1192,7 +1192,7 @@
       "evra": "2.1.0-17.fc35.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.1.15-2.fc35.aarch64"
+      "evra": "1.2.0-1.fc35.aarch64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-01T20:53:00Z",
+    "generated": "2022-03-02T20:54:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-28T21:40:01Z"
+        "generated": "2022-03-02T20:31:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-01T18:09:21Z"
+        "generated": "2022-03-02T15:52:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d542a0a92b..b069b3d281 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,10 +142,10 @@
       "evra": "0.13.1-1.fc35.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-31.fc35.x86_64"
+      "evra": "8.32-32.fc35.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-31.fc35.x86_64"
+      "evra": "8.32-32.fc35.x86_64"
     },
     "cpio": {
       "evra": "2.13-11.fc35.x86_64"
@@ -1024,10 +1024,10 @@
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.2-1.fc35.x86_64"
+      "evra": "2022.4-1.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.2-1.fc35.x86_64"
+      "evra": "2022.4-1.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.x86_64"
@@ -1180,10 +1180,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4460-1.fc35.noarch"
+      "evra": "2:8.2.4485-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4460-1.fc35.x86_64"
+      "evra": "2:8.2.4485-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1204,7 +1204,7 @@
       "evra": "2.1.0-17.fc35.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.1.15-2.fc35.x86_64"
+      "evra": "1.2.0-1.fc35.x86_64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-01T20:52:24Z",
+    "generated": "2022-03-02T20:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-02-28T21:40:06Z"
+        "generated": "2022-03-02T20:31:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-01T18:09:51Z"
+        "generated": "2022-03-02T15:52:43Z"
       }
     }
   }

From 7bb4d6e9d48cfe24b3417fecc6c8631270f9a632 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Mar 2022 21:11:33 -0500
Subject: [PATCH 0809/2157] coreos-teardown-initramfs: account for BOOTIF
 kernel argument

`nm-initrd-generator` will take into account the `BOOTIF=` kernel
argument. Let's account for that in our `propagate_initramfs_networking()`
code so don't propagate networking config if `BOOTIF` is the only
networking config.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1048
---
 .../coreos-teardown-initramfs.sh              | 21 +++++++++++++-
 .../bootif                                    | 28 +++++++++++++++++++
 .../data/test-net-propagation.sh              | 12 ++++++++
 .../{test.sh => default}                      | 12 ++------
 4 files changed, 62 insertions(+), 11 deletions(-)
 create mode 100755 tests/kola/networking/no-default-initramfs-net-propagation/bootif
 create mode 100644 tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
 rename tests/kola/networking/no-default-initramfs-net-propagation/{test.sh => default} (55%)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index e8aee1f312..c91a79209f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -22,6 +22,21 @@ dracut_func() {
     return $rc
 }
 
+# Get the BOOTIF and rd.bootif kernel arguments from
+# the kernel command line.
+get_bootif_kargs() {
+    bootif_kargs=""
+    bootif_karg=$(dracut_func getarg BOOTIF)
+    if [ ! -z "$bootif_karg" ]; then
+        bootif_kargs+="BOOTIF=${bootif_karg}"
+    fi
+    rdbootif_karg=$(dracut_func getarg rd.bootif)
+    if [ ! -z "$rdbootif_karg" ]; then
+        bootif_kargs+="rd.bootif=${rdbootif_karg}"
+    fi
+    echo $bootif_kargs
+}
+
 # Determine if the generated NM connection profiles match the default
 # that would be given to us if the user had provided no additional
 # configuration. i.e. did the user give us any network configuration
@@ -33,6 +48,9 @@ are_default_NM_configs() {
     # pick up our CoreOS default networking kargs from the afterburn dropin
     DEFAULT_KARGS_FILE=/usr/lib/systemd/system/afterburn-network-kargs.service.d/50-afterburn-network-kargs-default.conf
     source <(grep -o 'AFTERBURN_NETWORK_KARGS_DEFAULT=.*' $DEFAULT_KARGS_FILE)
+    # Also pick up BOOTIF/rd.bootif kargs and apply them here.
+    # See https://github.com/coreos/fedora-coreos-tracker/issues/1048
+    BOOTIF_KARGS=$(get_bootif_kargs)
     # Make two dirs for storing files to use in the comparison
     mkdir -p /run/coreos-teardown-initramfs/connections-compare-{1,2}
     # Make another that's just a throwaway for the initrd-data-dir
@@ -43,7 +61,8 @@ are_default_NM_configs() {
     # Do a new run with the default input
     /usr/libexec/nm-initrd-generator \
         -c /run/coreos-teardown-initramfs/connections-compare-2 \
-        -i /run/coreos-teardown-initramfs/initrd-data-dir -- $AFTERBURN_NETWORK_KARGS_DEFAULT
+        -i /run/coreos-teardown-initramfs/initrd-data-dir \
+        -- $AFTERBURN_NETWORK_KARGS_DEFAULT $BOOTIF_KARGS
     # remove unique identifiers from the files (so our diff can work)
     sed -i '/^uuid=/d' /run/coreos-teardown-initramfs/connections-compare-{1,2}/*
     # currently the output will differ based on whether rd.neednet=1
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
new file mode 100755
index 0000000000..a53345ec1c
--- /dev/null
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -0,0 +1,28 @@
+#!/bin/bash
+# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "BOOTIF=52:54:00:12:34:56" }
+#
+# In addition to the pure network defaults case we should also make
+# sure that when BOOTIF= or rd.bootif= are provided on the kernel
+# command line (typically from PXE servers) that we don't propagate
+# networking configs either. See https://github.com/coreos/fedora-coreos-tracker/issues/1048
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - appendFirstbootKernelArgs: "BOOTIF=52:54:00:12:34:56"
+#   - Append BOOTIF kernel argument so we can test how nm-initrd-generator
+#     and the coreos-teardown-initramfs interact. The MAC address is from:
+#     https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
+
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Run the test bits (sets the $fail var)
+. $KOLA_EXT_DATA/test-net-propagation.sh
+
+if [ -z "${fail:-}" ]; then
+    ok "success: no initramfs network propagation for default configuration with BOOTIF"
+else
+    fatal "fail: no initramfs network propagation for default configuration with BOOTIF"
+fi
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh b/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
new file mode 100644
index 0000000000..8cf263ee4a
--- /dev/null
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
@@ -0,0 +1,12 @@
+# common pieces of each of the no-default-initramfs-net-propagation tests
+if ! journalctl -t coreos-teardown-initramfs | \
+       grep 'info: skipping propagation of default networking configs'; then
+    echo "no log message claiming to skip initramfs network propagation" >&2
+    fail=1
+fi
+
+if [ -n "$(ls -A /etc/NetworkManager/system-connections/)" ]; then
+    echo "configs exist in /etc/NetworkManager/system-connections/, but shouldn't" >&2
+    fail=1
+fi
+
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh b/tests/kola/networking/no-default-initramfs-net-propagation/default
similarity index 55%
rename from tests/kola/networking/no-default-initramfs-net-propagation/test.sh
rename to tests/kola/networking/no-default-initramfs-net-propagation/default
index c143449eb4..da6af16d3f 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/test.sh
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/default
@@ -8,16 +8,8 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-if ! journalctl -t coreos-teardown-initramfs | \
-       grep 'info: skipping propagation of default networking configs'; then
-    echo "no log message claiming to skip initramfs network propagation" >&2
-    fail=1
-fi
-
-if [ -n "$(ls -A /etc/NetworkManager/system-connections/)" ]; then
-    echo "configs exist in /etc/NetworkManager/system-connections/, but shouldn't" >&2
-    fail=1
-fi
+# Run the test bits (sets the $fail var)
+. $KOLA_EXT_DATA/test-net-propagation.sh
 
 if [ -z "${fail:-}" ]; then
     ok "success: no initramfs network propagation for default configuration"

From a4dd2107b41c99903e0b6057f78c43f48342eee8 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Wed, 2 Mar 2022 14:34:57 -0300
Subject: [PATCH 0810/2157] denylist: skip tests on ppc64le  - More info:
 coreos/coreos-assembler/issues/2725  - Skip:     -
 ext.config.shared.kdump.crash     - coreos.boot-mirror.luks/detach-primary   
  - coreos.boot-mirror/detach-primary

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 kola-denylist.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 10e5f50e1f..ef6e86ccab 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,6 +17,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:
     - aarch64
+    - ppc64le
 - pattern: ext.config.podman.dns
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
   snooze: 2022-03-07
@@ -66,3 +67,11 @@
   streams:
     - rawhide
     - branched
+- pattern: coreos.boot-mirror.luks/detach-primary
+  tracker: https://github.com/coreos/coreos-assembler/issues/2725
+  arches:
+  - ppc64le
+- pattern: coreos.boot-mirror/detach-primary
+  tracker: https://github.com/coreos/coreos-assembler/issues/2725
+  arches:
+  - ppc64le

From b001ff75d50170e446ad945047631a5cf05934d5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Mar 2022 15:08:54 -0500
Subject: [PATCH 0811/2157] coreos-teardown-initramfs: add space to
 bootif_kargs append

I missed this in 7bb4d6e.
---
 .../modules.d/35coreos-ignition/coreos-teardown-initramfs.sh    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index c91a79209f..9fd1720dc1 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -32,7 +32,7 @@ get_bootif_kargs() {
     fi
     rdbootif_karg=$(dracut_func getarg rd.bootif)
     if [ ! -z "$rdbootif_karg" ]; then
-        bootif_kargs+="rd.bootif=${rdbootif_karg}"
+        bootif_kargs+=" rd.bootif=${rdbootif_karg}"
     fi
     echo $bootif_kargs
 }

From c3b27ec391f176eb5fc880175c6cc9da7045020d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 3 Mar 2022 15:48:31 -0500
Subject: [PATCH 0812/2157] denylist: drop ostree.hotfix denial

Since https://github.com/coreos/rpm-ostree/pull/3406 has now landed
in rpm-ostree 2022.3 and later we can remove this denial and
hopefully never see the test failure again.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/942
---
 kola-denylist.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index ef6e86ccab..157e3a2fcb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,14 +5,6 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: ostree.hotfix
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/942
-  snooze: 2022-03-07
-  streams:
-    - rawhide
-    - branched
-  arches:
-    - aarch64
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:

From ebcb4b78de816d7a196a9a6adda7c968ee8b92e1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 4 Mar 2022 14:09:08 +0000
Subject: [PATCH 0813/2157] overrides: fast-track rpm-ostree-2022.5-1.fc35

---
 manifest-lock.overrides.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 29ee5c2046..a812327abf 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -25,14 +25,14 @@ packages:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
       type: pin
   rpm-ostree:
-    evr: 2022.4-1.fc35
+    evr: 2022.5-1.fc35
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-53811a0195
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d39d0555a0
       type: fast-track
   rpm-ostree-libs:
-    evr: 2022.4-1.fc35
+    evr: 2022.5-1.fc35
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-53811a0195
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d39d0555a0
       type: fast-track
   systemd:
     evr: 249.7-2.fc35

From 83287efcb5fd8cbdb42b7a8f7f2c7faa43c6b5e0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 4 Mar 2022 22:03:50 +0000
Subject: [PATCH 0814/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/56/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 12a888e4d1..79e4c969c6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-13.fc35.aarch64"
+      "evra": "1:2.3.3op2-15.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -223,7 +223,7 @@
       "evra": "3.8-1.fc35.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-4.fc35.aarch64"
+      "evra": "2.86-5.fc35.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-2.fc35.aarch64"
@@ -1012,10 +1012,10 @@
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.4-1.fc35.aarch64"
+      "evra": "2022.5-1.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.4-1.fc35.aarch64"
+      "evra": "2022.5-1.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-02T20:54:11Z",
+    "generated": "2022-03-04T20:52:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-02T20:31:55Z"
+        "generated": "2022-03-04T16:52:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-02T15:52:14Z"
+        "generated": "2022-03-04T16:28:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b069b3d281..29dbf4f95d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-13.fc35.x86_64"
+      "evra": "1:2.3.3op2-15.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -223,7 +223,7 @@
       "evra": "3.8-1.fc35.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-4.fc35.x86_64"
+      "evra": "2.86-5.fc35.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-2.fc35.x86_64"
@@ -1024,10 +1024,10 @@
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.4-1.fc35.x86_64"
+      "evra": "2022.5-1.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.4-1.fc35.x86_64"
+      "evra": "2022.5-1.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-02T20:53:36Z",
+    "generated": "2022-03-04T20:52:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-02T20:31:40Z"
+        "generated": "2022-03-04T16:53:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-02T15:52:43Z"
+        "generated": "2022-03-04T16:28:38Z"
       }
     }
   }

From 6532d38bc03ba4a4e25b64dee1ff38245a897950 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 6 Mar 2022 22:07:36 +0000
Subject: [PATCH 0815/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/60/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 79e4c969c6..73c62ab629 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -718,7 +718,7 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.5-0.fc35.aarch64"
+      "evra": "2:4.15.5-1.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.21-1.fc35.aarch64"
@@ -766,7 +766,7 @@
       "evra": "1.3.2-1.fc35.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-42.fc35.aarch64"
+      "evra": "2.4.6-50.fc35.aarch64"
     },
     "libunistring": {
       "evra": "0.9.10-14.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.5-0.fc35.aarch64"
+      "evra": "2:4.15.5-1.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.aarch64"
@@ -1027,13 +1027,13 @@
       "evra": "2:1.1.0-1.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.5-0.fc35.aarch64"
+      "evra": "2:4.15.5-1.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.5-0.fc35.noarch"
+      "evra": "2:4.15.5-1.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.5-0.fc35.aarch64"
+      "evra": "2:4.15.5-1.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1205,7 +1205,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-04T20:52:55Z",
+    "generated": "2022-03-06T20:52:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1214,7 +1214,7 @@
         "generated": "2022-03-04T16:52:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-04T16:28:07Z"
+        "generated": "2022-03-06T18:07:35Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 29dbf4f95d..e6789c29ef 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -724,7 +724,7 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.5-0.fc35.x86_64"
+      "evra": "2:4.15.5-1.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -775,7 +775,7 @@
       "evra": "1.3.2-1.fc35.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-42.fc35.x86_64"
+      "evra": "2.4.6-50.fc35.x86_64"
     },
     "libunistring": {
       "evra": "0.9.10-14.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.5-0.fc35.x86_64"
+      "evra": "2:4.15.5-1.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.x86_64"
@@ -1039,13 +1039,13 @@
       "evra": "2:1.1.0-1.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.5-0.fc35.x86_64"
+      "evra": "2:4.15.5-1.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.5-0.fc35.noarch"
+      "evra": "2:4.15.5-1.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.5-0.fc35.x86_64"
+      "evra": "2:4.15.5-1.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1217,7 +1217,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-04T20:52:19Z",
+    "generated": "2022-03-06T20:52:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1226,7 +1226,7 @@
         "generated": "2022-03-04T16:53:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-04T16:28:38Z"
+        "generated": "2022-03-06T18:08:04Z"
       }
     }
   }

From a59ffb35f6c4d4429e5c4283ca78f3620e466231 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Feb 2022 21:30:07 -0500
Subject: [PATCH 0816/2157] manifests: make `releasever` a number

This is supported by rpm-ostree now.
---
 manifest.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifest.yaml b/manifest.yaml
index 3d9d6abf6f..411c3f50a5 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -1,7 +1,7 @@
 ref: fedora/${basearch}/coreos/testing-devel
 include: manifests/fedora-coreos.yaml
 
-releasever: "35"
+releasever: 35
 
 rojig:
   license: MIT

From 31de4fb2ac71d4501de0d1f7bf3cde7440431c87 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Feb 2022 21:31:37 -0500
Subject: [PATCH 0817/2157] manifests: add iptables-nft.yaml for f36+

Add a new conditional include which migrates streams on Fedora 36 and
higher to iptables-nft. This is magnitudes simpler than the current
alternative rollout procedure detailed in:

https://github.com/coreos/fedora-coreos-tracker/issues/676
---
 kola-denylist.yaml                |  6 ------
 manifests/fedora-coreos-base.yaml |  5 +++++
 manifests/iptables-nft.yaml       | 17 +++++++++++++++++
 3 files changed, 22 insertions(+), 6 deletions(-)
 create mode 100644 manifests/iptables-nft.yaml

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 157e3a2fcb..1cf7cdd650 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,12 +53,6 @@
   streams:
     - rawhide
     - branched
-- pattern: ext.config.firewall.iptables
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/676
-  snooze: 2022-03-07
-  streams:
-    - rawhide
-    - branched
 - pattern: coreos.boot-mirror.luks/detach-primary
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index f7113ccd21..d0775ec5b0 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -17,6 +17,11 @@ ostree-layers:
   - overlay/14NetworkManager-plugins
   - overlay/20platform-chrony
 
+conditional-include:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/676
+  - if: releasever >= 36
+    include: iptables-nft.yaml
+
 initramfs-args:
   - --no-hostonly
   # We don't support root on NFS, so we don't need it in the initramfs. It also
diff --git a/manifests/iptables-nft.yaml b/manifests/iptables-nft.yaml
new file mode 100644
index 0000000000..ff6e15b850
--- /dev/null
+++ b/manifests/iptables-nft.yaml
@@ -0,0 +1,17 @@
+# Scripts for opting into staying on iptables-legacy after migration. Remove
+# after the next barrier release.
+ostree-layers:
+  - overlay/35coreos-iptables
+
+# Default to iptables-nft. Otherwise, legacy wins. We can drop this once/if we
+# remove iptables-legacy.
+postprocess:
+- |
+  #!/usr/bin/env bash
+  set -xeuo pipefail
+  ln -sf /usr/sbin/ip6tables-nft         /etc/alternatives/ip6tables
+  ln -sf /usr/sbin/ip6tables-nft-restore /etc/alternatives/ip6tables-restore
+  ln -sf /usr/sbin/ip6tables-nft-save    /etc/alternatives/ip6tables-save
+  ln -sf /usr/sbin/iptables-nft          /etc/alternatives/iptables
+  ln -sf /usr/sbin/iptables-nft-restore  /etc/alternatives/iptables-restore
+  ln -sf /usr/sbin/iptables-nft-save     /etc/alternatives/iptables-save

From b2a95e3562685bbb7898df0196361a5f78329665 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Feb 2022 21:42:19 -0500
Subject: [PATCH 0818/2157] manifests: move zincati/pinger disablement to
 overlay.d

Add a new `prod` variable and use a conditional include to include the
new OSTree layer. (So then on e.g. `stable`, `prod` would be `true`.)
---
 manifest.yaml                                       | 13 +++----------
 manifests/disable-zincati-and-pinger.yaml           |  2 ++
 manifests/fedora-coreos.yaml                        |  4 ++++
 .../90-disable-on-non-production-stream.toml        |  2 ++
 .../90-disable-on-non-production-stream.toml        |  2 ++
 overlay.d/README.md                                 |  6 ++++++
 6 files changed, 19 insertions(+), 10 deletions(-)
 create mode 100644 manifests/disable-zincati-and-pinger.yaml
 create mode 100644 overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
 create mode 100644 overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml

diff --git a/manifest.yaml b/manifest.yaml
index 411c3f50a5..8496d2516a 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -1,6 +1,9 @@
 ref: fedora/${basearch}/coreos/testing-devel
 include: manifests/fedora-coreos.yaml
 
+variables:
+  prod: false
+
 releasever: 35
 
 rojig:
@@ -18,13 +21,3 @@ repos:
 
 add-commit-metadata:
   fedora-coreos.stream: testing-devel
-
-postprocess:
-  # Disable Zincati and fedora-coreos-pinger on non-production streams
-  # https://github.com/coreos/fedora-coreos-tracker/issues/163
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    mkdir -p /etc/fedora-coreos-pinger/config.d /etc/zincati/config.d
-    echo -e '# https://github.com/coreos/fedora-coreos-tracker/issues/163\nreporting.enabled = false' > /etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
-    echo -e '# https://github.com/coreos/fedora-coreos-tracker/issues/163\nupdates.enabled = false' > /etc/zincati/config.d/90-disable-on-non-production-stream.toml
diff --git a/manifests/disable-zincati-and-pinger.yaml b/manifests/disable-zincati-and-pinger.yaml
new file mode 100644
index 0000000000..c756f3ff6b
--- /dev/null
+++ b/manifests/disable-zincati-and-pinger.yaml
@@ -0,0 +1,2 @@
+ostree-layers:
+  - overlay/16disable-zincati-and-pinger
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 52eb0b9ae7..62198d63ec 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -3,6 +3,10 @@
 # or are very "opinionated" like disabling SSH passwords by default.
 
 include: fedora-coreos-base.yaml
+conditional-include:
+  - if: prod == false
+    # long-term, would be good to support specifying a nested TreeComposeConfig
+    include: disable-zincati-and-pinger.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml b/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
new file mode 100644
index 0000000000..20e6b5a5c2
--- /dev/null
+++ b/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
@@ -0,0 +1,2 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/163
+reporting.enabled = false
diff --git a/overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml b/overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml
new file mode 100644
index 0000000000..795389841f
--- /dev/null
+++ b/overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml
@@ -0,0 +1,2 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/163
+updates.enabled = false
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 61a989718a..bf7960e97a 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -39,6 +39,12 @@ Things that are more closely "Fedora CoreOS":
 * display warnings on the console if no ignition config was provided or no ssh
   key found.
 
+16disable-zincati-and-pinger
+------------------------
+
+Disable Zincati and fedora-coreos-pinger on non-production streams:
+https://github.com/coreos/fedora-coreos-tracker/issues/163
+
 20platform-chrony
 -----------------
 

From f75b0cbcab4578bf1f65d797b41e8bedec1cf3cd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Feb 2022 21:44:14 -0500
Subject: [PATCH 0819/2157] manifests: delete redundant rojig definition

This is already specified by all top-level manifests, and AFAIK nothing
else directly includes `fedora-coreos.yaml`.
---
 manifests/fedora-coreos.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 62198d63ec..8f127344c1 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -43,12 +43,6 @@ etc-group-members:
   # https://github.com/projectatomic/rpm-ostree/issues/49
   - docker
 
-# XXX: this is used by coreos-assembler for artifact naming...
-rojig:
-  license: MIT
-  name: fedora-coreos
-  summary: Fedora CoreOS base image
-
 # ⚠⚠⚠ ONLY TEMPORARY HACKS ALLOWED HERE; ALL ENTRIES NEED TRACKER LINKS ⚠⚠⚠
 # See also the version of this in fedora-coreos-base.yaml
 postprocess:

From 400833f16b17cb31ef36571b996413f859c0949e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Feb 2022 21:45:37 -0500
Subject: [PATCH 0820/2157] manifests: lower all templatable fields to shared
 manifest

Now that rpm-ostree supports templating more fields, we can drain the
manifest even more and keep all the common templatable cruft in
`fedora-coreos.yaml`.
---
 ci/overrides.py              |  2 +-
 manifest.yaml                | 12 ++----------
 manifests/fedora-coreos.yaml |  9 +++++++++
 3 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index d20aaae7c4..18f5cf171d 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -166,7 +166,7 @@ def get_stream():
     '''Get the current stream name.'''
     with open(os.path.join(basedir, 'manifest.yaml')) as fh:
         manifest = yaml.safe_load(fh)
-    return manifest['add-commit-metadata']['fedora-coreos.stream']
+    return manifest['variables']['stream']
 
 
 @functools.cache
diff --git a/manifest.yaml b/manifest.yaml
index 8496d2516a..d3e321a656 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -1,16 +1,9 @@
-ref: fedora/${basearch}/coreos/testing-devel
-include: manifests/fedora-coreos.yaml
-
 variables:
+  stream: testing-devel
   prod: false
 
 releasever: 35
 
-rojig:
-  license: MIT
-  name: fedora-coreos
-  summary: Fedora CoreOS testing-devel
-
 repos:
   # These repos are there to make it easier to add new packages to the OS and to
   # use `cosa fetch --update-lockfile`; but note that all package versions are
@@ -19,5 +12,4 @@ repos:
   - fedora
   - fedora-updates
 
-add-commit-metadata:
-  fedora-coreos.stream: testing-devel
+include: manifests/fedora-coreos.yaml
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 8f127344c1..cd6344903f 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -2,6 +2,15 @@
 # into "official" builds of Fedora CoreOS (such as including `fedora-release-coreos`)
 # or are very "opinionated" like disabling SSH passwords by default.
 
+ref: fedora/${basearch}/coreos/${stream}
+rojig:
+  license: MIT
+  name: fedora-coreos
+  summary: Fedora CoreOS ${stream}
+
+add-commit-metadata:
+  fedora-coreos.stream: ${stream}
+
 include: fedora-coreos-base.yaml
 conditional-include:
   - if: prod == false

From 8b319e957246b37df3638806440274af6c27563a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Mar 2022 10:43:49 -0500
Subject: [PATCH 0821/2157] shared-workarounds: adjust service fix to not apply
 to F37+

A new version of dracut (with the service fix) landed in F37/rawhide.
---
 manifests/shared-workarounds.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index 5b205e8138..d6cf4ad927 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -43,9 +43,8 @@ postprocess:
     set -xeuo pipefail
     source /etc/os-release
     if [[ ${NAME} =~ "Fedora" ]]; then
-        # FCOS: This fix hasn't landed in rawhide (F37) yet,
-        # but hopefully will soon.
-        [ ${VERSION_ID} -le 37 ] || exit 0
+        # FCOS: This fix has landed in F37+
+        [ ${VERSION_ID} -le 36 ] || exit 0
     else 
         # RHCOS: The fix hasn't landed in any version of RHEL yet
         true

From 1a6e0aba6f1446f24edae9333d59b553d1899c87 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Mar 2022 10:54:57 -0500
Subject: [PATCH 0822/2157] denylist: make boot-mirror denials apply to the
 main test

I've heard that denylisting a subtest doesn't work. We have to deny
the main test.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1cf7cdd650..9bdaf7c51f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,11 +53,11 @@
   streams:
     - rawhide
     - branched
-- pattern: coreos.boot-mirror.luks/detach-primary
+- pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le
-- pattern: coreos.boot-mirror/detach-primary
+- pattern: coreos.boot-mirror
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le

From 0599c28770c93450009b6b818256e17dd471379d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Mar 2022 10:56:16 -0500
Subject: [PATCH 0823/2157] denylist: drop snooze for ext.config.podman.dns

This is now fixed.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1046
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9bdaf7c51f..a917f7c883 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,12 +10,6 @@
   arches:
     - aarch64
     - ppc64le
-- pattern: ext.config.podman.dns
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1046
-  snooze: 2022-03-07
-  streams:
-    - rawhide
-    - branched
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
   snooze: 2022-03-07

From 6703091e3ac42351100c9a6dd2e94bb0ef84da09 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Mar 2022 11:23:40 -0500
Subject: [PATCH 0824/2157] denylist: extend snooze's for tests that are still
 failing

These all are for rawhide/branched.
---
 kola-denylist.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a917f7c883..233bf1331f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,25 +12,25 @@
     - ppc64le
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-07
+  snooze: 2022-03-14
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-07
+  snooze: 2022-03-14
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-07
+  snooze: 2022-03-14
   streams:
     - rawhide
     - branched
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
-  snooze: 2022-03-07
+  snooze: 2022-03-14
   streams:
     - rawhide
 - pattern: ext.config.toolbox
@@ -43,7 +43,7 @@
   snooze: 2022-03-07
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
-  snooze: 2022-03-07
+  snooze: 2022-03-14
   streams:
     - rawhide
     - branched

From 81ed0a0295738673a2e1c4dbd3eff6edeb57795b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 7 Mar 2022 12:48:33 -0500
Subject: [PATCH 0825/2157] manifests: apply podman-v4.yaml manifest on F36+

This will allow us to share the package inclusion rather than carrying
it in manifest.yaml on various branches.
---
 manifests/fedora-coreos-base.yaml | 3 +++
 manifests/podman-v4.yaml          | 8 ++++++++
 2 files changed, 11 insertions(+)
 create mode 100644 manifests/podman-v4.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index d0775ec5b0..11bce3a1b4 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -21,6 +21,9 @@ conditional-include:
   # https://github.com/coreos/fedora-coreos-tracker/issues/676
   - if: releasever >= 36
     include: iptables-nft.yaml
+  # https://github.com/coreos/fedora-coreos-config/pull/1519
+  - if: releasever >= 36
+    include: podman-v4.yaml
 
 initramfs-args:
   - --no-hostonly
diff --git a/manifests/podman-v4.yaml b/manifests/podman-v4.yaml
new file mode 100644
index 0000000000..c0caf170d8
--- /dev/null
+++ b/manifests/podman-v4.yaml
@@ -0,0 +1,8 @@
+# Extra tweaks needed for podman v4
+packages:
+  # For podman v4 netavark gets pulled in but it only recommends
+  # aardvark-dns (which provides name resolution based on container
+  # names). This functionality was previously provided by dnsname from
+  # podman-plugins in the podman v3 stack.
+  # See https://github.com/containers/netavark/pull/217
+  - aardvark-dns

From 3e22b5923b93377ebda201d1f9ce97ad252d5302 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 7 Mar 2022 15:25:42 -0500
Subject: [PATCH 0826/2157] workflows/remove-graduated-overrides: enable
 continuous repo

Until we actually use cosa for this, we should match its input repos.
Currently that means enabling the continuous repo.

This should give us a more recent rpm-ostree which has support for
`releasever` as a number.
---
 .github/workflows/remove-graduated-overrides.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 24a8760e38..494639250b 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -24,6 +24,10 @@ jobs:
           - rawhide
       fail-fast: false
     steps:
+      - name: Enable CoreOS continuous repo
+        run: |
+          version_id=$(. /etc/os-release && echo ${VERSION_ID})
+          echo -e "[f${version_id}-coreos-continuous]\nenabled=1\nmetadata_expire=1m\nbaseurl=https://kojipkgs.fedoraproject.org/repos-dist/f${version_id}-coreos-continuous/latest/\$basearch/\ngpgcheck=0\nskip_if_unavailable=False\n" > /etc/yum.repos.d/coreos.repo
       - name: Install dependencies
         run: dnf install -y python3-bodhi-client rpm-ostree # see related TODO above
       - name: Checkout

From 95aeb801be82b47c2e6883b785f1ab7f2d1bd120 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 08:37:48 -0500
Subject: [PATCH 0827/2157] overrides: drop kernel pin

This allows us to get the latest kernel-5.16.12-200.fc35. Moving to
a kernel newer than 5.16.11 picks up the fix fo CVE-2022-0847. We're
able to do this because the Fedora kernel maintainers agreed to again
pick up a revert that allows us to not regress on some AWS instance
types (https://github.com/coreos/fedora-coreos-tracker/issues/1066).

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1118
---
 manifest-lock.overrides.yaml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index a812327abf..2168509ccb 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,21 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 5.15.18-200.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
-  kernel-core:
-    evr: 5.15.18-200.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
-  kernel-modules:
-    evr: 5.15.18-200.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1066
-      type: pin
   rpm-ostree:
     evr: 2022.5-1.fc35
     metadata:

From 20804f887956f0a985d72195488130d295824e4e Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 7 Mar 2022 18:25:52 -0500
Subject: [PATCH 0828/2157] buildroot: Install `clang-tools-extra`

For `clang-format`, which is used as of https://github.com/coreos/rpm-ostree/pull/3475
---
 ci/buildroot/buildroot-reqs.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 0568b79a14..fdacd64c8b 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -46,6 +46,8 @@ createrepo_c
 
 # Also, add clang since it's useful at least in CI for C/C++ projects
 clang lld
+# And the tools such as clang-format, used for style checking
+clang-tools-extra
 # All C/C++ projects should have CI that uses the sanitizers
 libubsan libasan libtsan
 # And all C/C++ projects should use clang-analyzer

From 5791a5c60019fb550187713b96f6c8602fe1cf9a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 10:15:23 -0500
Subject: [PATCH 0829/2157] denylist: extend snooze for multipath.day1

I thought this one might have gone away but it seems to only present
itself on aarch64.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 233bf1331f..e4364afb35 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -40,7 +40,7 @@
     - rawhide
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
-  snooze: 2022-03-07
+  snooze: 2022-03-14
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
   snooze: 2022-03-14

From 3787cc1d251781932010448e65a189a2980c06d2 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 4 Feb 2022 10:18:47 -0500
Subject: [PATCH 0830/2157] manifest: Add `container-cmd`
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Builds on https://github.com/coreos/rpm-ostree/pull/3402

Relates to https://github.com/coreos/coreos-assembler/issues/2685

Basically, source of truth for the CMD moves from being hardcoded
in cosa hackiliy to being part of the ostree commit, which means
it survives a full round trip of
ostree → container → ostree → container
---
 manifests/fedora-coreos.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index cd6344903f..bf57ec1cbf 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -11,6 +11,9 @@ rojig:
 add-commit-metadata:
   fedora-coreos.stream: ${stream}
 
+container-cmd:
+  - /usr/bin/bash
+
 include: fedora-coreos-base.yaml
 conditional-include:
   - if: prod == false

From 57f71048df23301f2a6ef3ff7d5920000a027980 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 11:06:22 -0500
Subject: [PATCH 0831/2157] tests: update documentation in podman.dns test

This adds more context for the options for the podman.dns test.
---
 tests/kola/podman/dns/test.sh | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index b233a04a67..d65cc46c83 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,9 +1,18 @@
 #!/bin/bash
 set -xeuo pipefail
 
+# kola: { "platforms": "qemu", "tags": "needs-internet", "exclusive": false }
 # Tests that rootless podman containers can DNS resolve external domains.
 # https://github.com/coreos/fedora-coreos-tracker/issues/923
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "exclusive": false}
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - tags: needs-internet
+#   - This test pulls a container from a registry.
+# - exclusive: false
+#   - This test doesn't make meaningful changes to the system and
+#     should be able to be combined with other tests.
+#   - Root reprovisioning requires at least 4GiB of memory.
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From dd042c9893c37cc61cf88f29999ba92f90fdc037 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 11:08:42 -0500
Subject: [PATCH 0832/2157] tests: extend timeout for podman.dns test

I've seen this timeout recently. It could take some extra time to
grab the container from the registry so let's bump the timeout from
the default of 1 minute for a non-exclusive test to 3 minutes.
---
 tests/kola/podman/dns/test.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index d65cc46c83..05a6f98fe5 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# kola: { "platforms": "qemu", "tags": "needs-internet", "exclusive": false }
+# kola: { "platforms": "qemu", "tags": "needs-internet", "exclusive": false, "timeoutMin": 3 }
 # Tests that rootless podman containers can DNS resolve external domains.
 # https://github.com/coreos/fedora-coreos-tracker/issues/923
 #
@@ -13,6 +13,9 @@ set -xeuo pipefail
 #   - This test doesn't make meaningful changes to the system and
 #     should be able to be combined with other tests.
 #   - Root reprovisioning requires at least 4GiB of memory.
+# - timeoutMin: 3
+#   - This test reaches out to the internet and it could take more
+#     time to pull down the container.
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From a18d3119664465ebf10b9306d6e11a08ed5e8b09 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 11:54:32 -0500
Subject: [PATCH 0833/2157] denylist: snooze the detection of the journald fix

The test lets us know when the workaround was used so we can keep
an eye on how often the problem occurs. It's happening often enough
that it's not super useful. Let's snooze it for 10 days.
---
 kola-denylist.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e4364afb35..a92806dc57 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -55,3 +55,12 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le
+- pattern: ext.config.systemd.sytemd-journald-fix
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1061988853
+  snooze: 2022-03-18
+  streams:
+    - stable
+    - testing
+    - testing-devel
+    - next
+    - next-devel

From ba247f70a31fafe8e1c37520e37322de55436aa1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 8 Mar 2022 19:45:07 +0000
Subject: [PATCH 0834/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/67/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 73c62ab629..211f73c43e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.12-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.12-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.15.18-200.fc35.aarch64"
+      "evra": "5.16.12-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1205,13 +1205,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-06T20:52:53Z",
+    "generated": "2022-03-08T18:35:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-04T16:52:18Z"
+        "generated": "2022-03-08T16:42:23Z"
       },
       "fedora-updates": {
         "generated": "2022-03-06T18:07:35Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e6789c29ef..1bb9df3216 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.12-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.12-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.15.18-200.fc35.x86_64"
+      "evra": "5.16.12-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1217,13 +1217,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-06T20:52:18Z",
+    "generated": "2022-03-08T18:34:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-04T16:53:13Z"
+        "generated": "2022-03-08T16:42:27Z"
       },
       "fedora-updates": {
         "generated": "2022-03-06T18:08:04Z"

From 37fafe2fb810443b7d6eb1a1b06be4a0992aaa8e Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 8 Mar 2022 12:27:40 -0500
Subject: [PATCH 0835/2157] manifests: Move `container-cmd` to
 `user-experience.yaml`

I was going to do a PR to add this to openshift/os too, but actually
let's just share it more directly instead!
---
 manifests/fedora-coreos.yaml   | 2 --
 manifests/user-experience.yaml | 9 ++++++++-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index bf57ec1cbf..f0926b330f 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -11,8 +11,6 @@ rojig:
 add-commit-metadata:
   fedora-coreos.stream: ${stream}
 
-container-cmd:
-  - /usr/bin/bash
 
 include: fedora-coreos-base.yaml
 conditional-include:
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 3832e668ad..2cc28c6ef7 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -1,8 +1,15 @@
+# This file is included in RHEL CoreOS, see
+# https://github.com/openshift/os/blob/71c974b1e456292033e3ef3fe7bcfe17d1855ebc/manifest.yaml#L12
+# Only apply changes here that should apply to both FCOS and RHCOS.
+
+# Default to `bash` in our container, the same as other containers we ship.
+container-cmd:
+  - /usr/bin/bash
+
 # These packages are either widely used utilities/services or 
 # are targeted for improving the general CoreOS user experience.
 # It is intended to be kept generic so that it may be shared downstream with
 # RHCOS.
-
 packages:
   # Basic user tools
   ## jq - parsing/interacting with JSON data

From bba842e863ed23dfb2152ec349fbd86c9b59a68f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Mar 2022 21:07:23 -0500
Subject: [PATCH 0836/2157] overrides: fast-track kernel-5.16.13-200.fc35

This is the first kernel with the most recent revert that allows
us to not regress on some AWS instance types [1]. Because it is
newer than 5.16.11 it also allows for us to pick up the fix to
CVE-2022-0847 [2].

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1066
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1118
---
 manifest-lock.aarch64.json   |  6 +++---
 manifest-lock.overrides.yaml | 15 +++++++++++++++
 manifest-lock.x86_64.json    |  6 +++---
 3 files changed, 21 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 211f73c43e..5c180bc63e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.12-200.fc35.aarch64"
+      "evra": "5.16.13-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.12-200.fc35.aarch64"
+      "evra": "5.16.13-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.12-200.fc35.aarch64"
+      "evra": "5.16.13-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2168509ccb..fc8641924d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,21 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 5.16.13-200.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
+      type: fast-track
+  kernel-core:
+    evr: 5.16.13-200.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
+      type: fast-track
+  kernel-modules:
+    evr: 5.16.13-200.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
+      type: fast-track
   rpm-ostree:
     evr: 2022.5-1.fc35
     metadata:
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1bb9df3216..e4a5048534 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.12-200.fc35.x86_64"
+      "evra": "5.16.13-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.12-200.fc35.x86_64"
+      "evra": "5.16.13-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.12-200.fc35.x86_64"
+      "evra": "5.16.13-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"

From a76166fbbf88f72607e1897d531a93e9a0b6c193 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 9 Mar 2022 22:08:40 +0000
Subject: [PATCH 0837/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/70/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5c180bc63e..7f1196f97a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -181,10 +181,10 @@
       "evra": "7.79.1-1.fc35.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-13.fc35.aarch64"
+      "evra": "2.1.27-14.fc35.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-13.fc35.aarch64"
+      "evra": "2.1.27-14.fc35.aarch64"
     },
     "dbus": {
       "evra": "1:1.12.22-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-08T18:35:10Z",
+    "generated": "2022-03-09T20:55:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-08T16:42:23Z"
+        "generated": "2022-03-09T01:52:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-06T18:07:35Z"
+        "generated": "2022-03-09T19:24:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e4a5048534..f09d7c6233 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -181,10 +181,10 @@
       "evra": "7.79.1-1.fc35.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-13.fc35.x86_64"
+      "evra": "2.1.27-14.fc35.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-13.fc35.x86_64"
+      "evra": "2.1.27-14.fc35.x86_64"
     },
     "dbus": {
       "evra": "1:1.12.22-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-08T18:34:27Z",
+    "generated": "2022-03-09T20:57:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-08T16:42:27Z"
+        "generated": "2022-03-09T01:52:37Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-06T18:08:04Z"
+        "generated": "2022-03-09T19:25:12Z"
       }
     }
   }

From 63c331acbae648c9547a41d9845da56ae121d04a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 11 Mar 2022 22:06:04 +0000
Subject: [PATCH 0838/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/74/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7f1196f97a..6d4b6bb707 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.4-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-25.fc35.aarch64"
+      "evra": "2.34-28.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-25.fc35.aarch64"
+      "evra": "2.34-28.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-25.fc35.aarch64"
+      "evra": "2.34-28.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4485-1.fc35.noarch"
+      "evra": "2:8.2.4529-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4485-1.fc35.aarch64"
+      "evra": "2:8.2.4529-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-09T20:55:20Z",
+    "generated": "2022-03-11T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-09T01:52:13Z"
+        "generated": "2022-03-09T22:10:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-09T19:24:42Z"
+        "generated": "2022-03-11T14:01:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f09d7c6233..4c11e70922 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,13 +358,13 @@
       "evra": "2.70.4-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-25.fc35.x86_64"
+      "evra": "2.34-28.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-25.fc35.x86_64"
+      "evra": "2.34-28.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-25.fc35.x86_64"
+      "evra": "2.34-28.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -1180,10 +1180,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4485-1.fc35.noarch"
+      "evra": "2:8.2.4529-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4485-1.fc35.x86_64"
+      "evra": "2:8.2.4529-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-09T20:57:04Z",
+    "generated": "2022-03-11T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-09T01:52:37Z"
+        "generated": "2022-03-09T22:12:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-09T19:25:12Z"
+        "generated": "2022-03-11T14:02:27Z"
       }
     }
   }

From df0743c50d8c590c636ecbf94825825b1e1b43cd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Mar 2022 18:05:56 +0000
Subject: [PATCH 0839/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 25 -------------------------
 1 file changed, 25 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fc8641924d..b2c6cfa353 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,31 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 5.16.13-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
-      type: fast-track
-  kernel-core:
-    evr: 5.16.13-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
-      type: fast-track
-  kernel-modules:
-    evr: 5.16.13-200.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b75eae92ca
-      type: fast-track
-  rpm-ostree:
-    evr: 2022.5-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d39d0555a0
-      type: fast-track
-  rpm-ostree-libs:
-    evr: 2022.5-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d39d0555a0
-      type: fast-track
   systemd:
     evr: 249.7-2.fc35
     metadata:

From 183af2b29123864f61a4b1a8c93b2c1e4dd51b11 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Mar 2022 22:04:28 +0000
Subject: [PATCH 0840/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/78/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6d4b6bb707..2674a95451 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.4.2-1.fc35.aarch64"
+      "evra": "1.4.3-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -784,7 +784,7 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "libuv": {
-      "evra": "1:1.43.0-2.fc35.aarch64"
+      "evra": "1:1.44.1-1.fc35.aarch64"
     },
     "libvarlink-util": {
       "evra": "22-3.fc35.aarch64"
@@ -814,10 +814,10 @@
       "evra": "2.5.1-30.fc35.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220209-129.fc35.noarch"
+      "evra": "20220310-130.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220209-129.fc35.noarch"
+      "evra": "20220310-130.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-11T20:52:58Z",
+    "generated": "2022-03-13T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-09T22:10:49Z"
+        "generated": "2022-03-11T22:11:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-11T14:01:58Z"
+        "generated": "2022-03-13T17:32:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4c11e70922..8071da34f0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.4.2-1.fc35.x86_64"
+      "evra": "1.4.3-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -793,7 +793,7 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "libuv": {
-      "evra": "1:1.43.0-2.fc35.x86_64"
+      "evra": "1:1.44.1-1.fc35.x86_64"
     },
     "libvarlink-util": {
       "evra": "22-3.fc35.x86_64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-30.fc35.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220209-129.fc35.noarch"
+      "evra": "20220310-130.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220209-129.fc35.noarch"
+      "evra": "20220310-130.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-11T20:52:56Z",
+    "generated": "2022-03-13T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-09T22:12:13Z"
+        "generated": "2022-03-11T22:11:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-11T14:02:27Z"
+        "generated": "2022-03-13T17:32:37Z"
       }
     }
   }

From 38331b8d2e17f27a9d1e39e37bcf93cc39421678 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Mar 2022 22:43:41 -0400
Subject: [PATCH 0841/2157] denylist: drop ext.config.extensions.module snooze

This test seems to be passing now.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1104
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a92806dc57..0956a3439c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -28,11 +28,6 @@
   streams:
     - rawhide
     - branched
-- pattern: ext.config.extensions.module
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1104
-  snooze: 2022-03-14
-  streams:
-    - rawhide
 - pattern: ext.config.toolbox
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1103
   snooze: 2022-03-15

From cf14c684498f630ce2f6d7c91d62a9a27265ac13 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Mar 2022 22:45:04 -0400
Subject: [PATCH 0842/2157] denylist: extend snoozes for tests that are still
 failing

These tests are still failing and are still being investigated. See:

- https://github.com/coreos/fedora-coreos-tracker/issues/1059
- https://github.com/coreos/fedora-coreos-tracker/issues/1092
- https://github.com/coreos/fedora-coreos-tracker/issues/1105
---
 kola-denylist.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0956a3439c..9793a31a45 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -12,19 +12,19 @@
     - ppc64le
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-14
+  snooze: 2022-03-21
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-14
+  snooze: 2022-03-21
   streams:
     - rawhide
     - branched
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-14
+  snooze: 2022-03-21
   streams:
     - rawhide
     - branched
@@ -35,10 +35,10 @@
     - rawhide
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
-  snooze: 2022-03-14
+  snooze: 2022-03-21
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
-  snooze: 2022-03-14
+  snooze: 2022-03-21
   streams:
     - rawhide
     - branched

From 266a5c37053d87601216bc1a6f5fc74fa9a7ff90 Mon Sep 17 00:00:00 2001
From: Ryan Jenkins <ryanjenkins1299@gmail.com>
Date: Tue, 15 Mar 2022 16:33:21 +0000
Subject: [PATCH 0843/2157] denylist: drop `ext.config.toolbox` denial

The toolbox container for F37 now exists in the registry so
the test passes.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1103
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9793a31a45..9e8ca5c4d7 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -28,11 +28,6 @@
   streams:
     - rawhide
     - branched
-- pattern: ext.config.toolbox
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1103
-  snooze: 2022-03-15
-  streams:
-    - rawhide
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
   snooze: 2022-03-21

From f726f793ae37f6de6a0c9686bdbefc3462df4d1b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 15 Mar 2022 22:05:30 +0000
Subject: [PATCH 0844/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/82/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2674a95451..4ead90e3d7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.177.0-1.fc35.noarch"
+      "evra": "2:2.180.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.0-1.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.13-200.fc35.aarch64"
+      "evra": "5.16.14-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.13-200.fc35.aarch64"
+      "evra": "5.16.14-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.13-200.fc35.aarch64"
+      "evra": "5.16.14-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -691,7 +691,7 @@
       "evra": "1.14.2-1.fc35.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-7.fc35.noarch"
+      "evra": "2.15.2-8.fc35.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-13T20:52:58Z",
+    "generated": "2022-03-15T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-11T22:11:49Z"
+        "generated": "2022-03-13T22:09:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-13T17:32:05Z"
+        "generated": "2022-03-15T17:06:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8071da34f0..b57c810ff0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.177.0-1.fc35.noarch"
+      "evra": "2:2.180.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.0-1.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.13-200.fc35.x86_64"
+      "evra": "5.16.14-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.13-200.fc35.x86_64"
+      "evra": "5.16.14-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.13-200.fc35.x86_64"
+      "evra": "5.16.14-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -697,7 +697,7 @@
       "evra": "1.14.2-1.fc35.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-7.fc35.noarch"
+      "evra": "2.15.2-8.fc35.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-13T20:53:11Z",
+    "generated": "2022-03-15T20:53:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-11T22:11:38Z"
+        "generated": "2022-03-13T22:08:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-13T17:32:37Z"
+        "generated": "2022-03-15T17:07:07Z"
       }
     }
   }

From 58fdfb7f5722bf37a9ba09c6bd9a3dd18279985b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 16 Mar 2022 10:30:13 -0400
Subject: [PATCH 0845/2157] denylist: drop denial for coreos.boot-mirror.luks
 on rawhide/branched
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

We're no longer seeing a test failure there. It appears the following
kernel transition fixed the issue:

```
kernel 5.17.0-0.rc5.20220225git53ab78cd6d5a.106.fc37.x86_64 → 5.17.0-0.rc6.109.fc37.x86_64
```

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1092
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9e8ca5c4d7..8bf39951ec 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -31,12 +31,6 @@
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
   snooze: 2022-03-21
-- pattern: coreos.boot-mirror.luks
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1092
-  snooze: 2022-03-21
-  streams:
-    - rawhide
-    - branched
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:

From f31dcecefcc1d7587fed5e8779044957116a3237 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 16 Mar 2022 11:04:59 -0400
Subject: [PATCH 0846/2157] manifests/fedora-coreos-base: mask
 systemd-network-generator.service

systemd-network-generator fails to run because of SELinux. The existing
bug for this problem [1] has been open for months. Let's mask the service
and move on. We do want the generator to run in the future for things
like creating udev rules [2] but it's not 100% necessary for now.

We're making this change now because we're about to switch `next` over
to Fedora 36 where we can't just freeze on an older version of systemd
and we don't want to mask the tests any longer because we want the test
coverage.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2037047
[2] https://github.com/systemd/systemd/pull/21766
---
 kola-denylist.yaml                | 18 -----------------
 manifest-lock.overrides.yaml      | 32 +------------------------------
 manifests/fedora-coreos-base.yaml |  7 +++++++
 3 files changed, 8 insertions(+), 49 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8bf39951ec..6b7652f4a0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -10,24 +10,6 @@
   arches:
     - aarch64
     - ppc64le
-- pattern: ext.config.networking.prefer-ignition-networking
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-21
-  streams:
-    - rawhide
-    - branched
-- pattern: ext.config.networking.force-persist-ip
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-21
-  streams:
-    - rawhide
-    - branched
-- pattern: ext.config.networking.mtu-on-bond-kargs
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-  snooze: 2022-03-21
-  streams:
-    - rawhide
-    - branched
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
   snooze: 2022-03-21
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b2c6cfa353..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,34 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  systemd:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
-  systemd-container:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
-  systemd-libs:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
-  systemd-pam:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
-  systemd-resolved:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
-  systemd-udev:
-    evr: 249.7-2.fc35
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1059
-      type: pin
+packages: {}
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 11bce3a1b4..d29e1b02f9 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -86,6 +86,13 @@ postprocess:
   - |
     #!/usr/bin/env bash
     systemctl mask systemd-repart.service
+  # Mask systemd-network-generator. We need it for some things in the future
+  # (https://github.com/systemd/systemd/pull/21766/files), but for now it's
+  # just failing on boot because of SELinux:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1059#issuecomment-1013766710
+  - |
+    #!/usr/bin/env bash
+    systemctl mask systemd-network-generator.service
 
   # Set the fallback hostname to `localhost`. This was needed in F33/F34
   # because a fallback hostname of `fedora` + systemd-resolved broke

From b7100844aad9c98caad20a0c19c34ae9b8c54d21 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 16 Mar 2022 22:05:53 +0000
Subject: [PATCH 0847/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/84/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4ead90e3d7..e5b72dcfc8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -130,7 +130,7 @@
       "evra": "1.6.0-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-4.fc35.aarch64"
+      "evra": "1.1.0-1.fc35.aarch64"
     },
     "containers-common": {
       "evra": "4:1-45.fc35.noarch"
@@ -1123,22 +1123,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.7-2.fc35.aarch64"
+      "evra": "249.9-1.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-15T20:53:01Z",
+    "generated": "2022-03-16T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-13T22:09:00Z"
+        "generated": "2022-03-15T22:26:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-15T17:06:37Z"
+        "generated": "2022-03-16T15:51:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b57c810ff0..260efaa213 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -130,7 +130,7 @@
       "evra": "1.6.0-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.0.1-4.fc35.x86_64"
+      "evra": "1.1.0-1.fc35.x86_64"
     },
     "containers-common": {
       "evra": "4:1-45.fc35.noarch"
@@ -1135,22 +1135,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.7-2.fc35.x86_64"
+      "evra": "249.9-1.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-15T20:53:04Z",
+    "generated": "2022-03-16T20:55:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-13T22:08:52Z"
+        "generated": "2022-03-15T22:26:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-15T17:07:07Z"
+        "generated": "2022-03-16T15:52:25Z"
       }
     }
   }

From fd11d98f1d17ccb73fb421a19b0037aa6bf969ae Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 17 Mar 2022 13:04:04 +0000
Subject: [PATCH 0848/2157] overrides: fast-track kernel-5.16.15-201.fc35

---
 manifest-lock.overrides.yaml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..5ffb6335c1 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,22 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kernel:
+    evr: 5.16.15-201.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
+      type: fast-track
+  kernel-core:
+    evr: 5.16.15-201.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
+      type: fast-track
+  kernel-modules:
+    evr: 5.16.15-201.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
+      type: fast-track

From 490c1e94c041697fdf665cb40f7af8fcb663b5ef Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 17 Mar 2022 10:54:40 -0400
Subject: [PATCH 0849/2157] tests: limit host bound package layer to specific
 streams

It's easy for some streams to not be able to package layer the vim
package because of the vim RPMs that are already installed in FCOS.
This can happen often on streams that aren't stable Fedora releases.

Let's just limit this part of the test to streams that are usually
based on Fedora stable versions.
---
 tests/kola/extensions/package | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 861179dfee..d91b4e2f0f 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -22,11 +22,18 @@ commands=(
   'tree'
 )
 
-# Also try some OS extensions which have host bindings. But these we can only do
-# on !rawhide because the archive repo isn't active there.
+# Also try some OS extensions which have host bindings. These can only
+# work on streams that are sure to have the archive repo available
+# (mostly streams based on Fedora stable releases). Since `next`
+# rebases early to the next major Fedora and the other streams operate
+# continuously on non-stable Fedora we'll just limit this to
+# `stable`/`testing`/`testing-devel`. It's possible that this test will
+# fail on one of those streams if we fast track VIM and it's not
+# availabe in any repo, but we can just snooze the entire test in that
+# case.
 case "$(get_fcos_stream)" in
-    "rawhide") ;;
-    *) commands+=('vim') ;;
+    "stable"|"testing"|"testing-devel") commands+=('vim') ;;
+    *) ;;
 esac
 
 rpm-ostree install --apply-live "${commands[@]}"

From d300acda304b8777fc0c4897024e296884158ef3 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 17 Mar 2022 02:10:00 -0400
Subject: [PATCH 0850/2157] image-base: specify VMware OS and HW versions

Stick with hardware version 13 for now, but switch the OS ID from RHEL 7
to 64-bit Fedora.

For https://github.com/coreos/coreos-assembler/pull/2762.
---
 image-base.yaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index c3ad9adb8f..98c324dfb1 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -26,8 +26,12 @@ ostree-remote: fedora
 # https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html
 bootfs_metadata_csum_seed: true
 
+vmware-os-type: fedora64Guest
+# VMware hardware versions: https://kb.vmware.com/s/article/1003746
+# We use the newest version allowed by the oldest non-EOL VMware
+# Workstation/Player/Fusion/ESXi release: https://lifecycle.vmware.com/
+vmware-hw-version: 13
+
 # After this, we plan to add support for the Ignition
 # storage/filesystems sections.  (Although one can do
 # that on boot as well)
-
-

From 224be5d072125445633dfd509b9d6f28ba6fda5d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 17 Mar 2022 12:55:04 -0400
Subject: [PATCH 0851/2157] manifests/system-configuration: add `acl`

This is currently getting pulled in by systemd, but won't anymore in
f36. Let's keep shipping it though since users might be relying on it to
manage permissions.
---
 manifests/system-configuration.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index 73b98da76e..eceb626b0f 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -24,6 +24,7 @@ packages:
   # User configuration
   - passwd
   - shadow-utils
+  - acl
   # SELinux policy
   - selinux-policy-targeted
   # There are things that write outside of the journal still (such as the

From 89de1204d499dc997142e0cc0ba2bd6884536271 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Thu, 17 Mar 2022 15:38:35 -0400
Subject: [PATCH 0852/2157] overrides: fast-track Ignition 2.13.0-5.fc35

Fixes https://github.com/coreos/ignition/issues/1092
---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5ffb6335c1..18bbc9b61f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -27,3 +27,9 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
       type: fast-track
+  ignition:
+    evr: 2.13.0-5.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-cfe402447e
+      reason: https://github.com/coreos/ignition/issues/1092
+      type: fast-track

From 5af111924f2d70e8a9c81215276cb9009146944e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 17 Mar 2022 16:07:10 -0400
Subject: [PATCH 0853/2157] manifests: fedora-coreos-base: add
 containernetworking-plugins explicitly

In order to continue to support CNI networks in podman, which is what
any existing Fedora <= 35 system is using, we need to continue to ship
containernetworking-plugins.

It was dropped in [1]. Traditional yum based systems won't uninstall the
package on an upgrade, but OSTrees are "baked fresh" every time and
won't retain it because it's no longer a dependency. We need to name it
explicitly if we want upgrading FCOS users to be able to start their
containers.

Additionally, since both `containernetworking-plugins` and `netavark`
provide `container-network-stack` if we want them both installed we
need to name them both in our manifests.

[1] https://src.fedoraproject.org/rpms/podman/c/06c601234feac4f5da7b6e1d92430d62f556f3b9
---
 manifests/fedora-coreos-base.yaml | 6 ++++--
 manifests/podman-v4.yaml          | 6 ++++++
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index d29e1b02f9..fb7fd26c9c 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -118,9 +118,11 @@ packages:
   # Containers
   - systemd-container catatonit
   - fuse-overlayfs slirp4netns
-  # name resolution for podman containers
+  # support for old style CNI networks and name resolution for
+  # podman containers with CNI networks
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
-  - podman-plugins dnsmasq
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071338097
+  - containernetworking-plugins podman-plugins dnsmasq
   # Remote IPC for podman
   - libvarlink-util
   # Minimal NFS client
diff --git a/manifests/podman-v4.yaml b/manifests/podman-v4.yaml
index c0caf170d8..f4e34897ac 100644
--- a/manifests/podman-v4.yaml
+++ b/manifests/podman-v4.yaml
@@ -6,3 +6,9 @@ packages:
   # podman-plugins in the podman v3 stack.
   # See https://github.com/containers/netavark/pull/217
   - aardvark-dns
+  # Since we need `containernetworking-plugins` installed to continue
+  # to support CNI networks we need to also explicitly install
+  # `netavark` so we get both of them installed since both of them
+  # provide `container-network-stack`.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071458717
+  - netavark

From afbc911825b8c7ece3b20723ba25b00a4c1040e2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 18 Mar 2022 15:14:12 +0000
Subject: [PATCH 0854/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/88/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e5b72dcfc8..a61c686292 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -400,7 +400,7 @@
       "evra": "3.23-5.fc35.aarch64"
     },
     "ignition": {
-      "evra": "2.13.0-3.fc35.aarch64"
+      "evra": "2.13.0-5.fc35.aarch64"
     },
     "inih": {
       "evra": "49-4.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.14-200.fc35.aarch64"
+      "evra": "5.16.15-201.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.14-200.fc35.aarch64"
+      "evra": "5.16.15-201.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.14-200.fc35.aarch64"
+      "evra": "5.16.15-201.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1192,7 +1192,7 @@
       "evra": "2.1.0-17.fc35.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.0-1.fc35.aarch64"
+      "evra": "1.2.1-1.fc35.aarch64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-16T20:53:00Z",
+    "generated": "2022-03-18T13:48:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-15T22:26:29Z"
+        "generated": "2022-03-17T20:52:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-16T15:51:55Z"
+        "generated": "2022-03-17T15:17:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 260efaa213..6007261165 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,7 +406,7 @@
       "evra": "3.23-5.fc35.x86_64"
     },
     "ignition": {
-      "evra": "2.13.0-3.fc35.x86_64"
+      "evra": "2.13.0-5.fc35.x86_64"
     },
     "inih": {
       "evra": "49-4.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.14-200.fc35.x86_64"
+      "evra": "5.16.15-201.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.14-200.fc35.x86_64"
+      "evra": "5.16.15-201.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.14-200.fc35.x86_64"
+      "evra": "5.16.15-201.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1204,7 +1204,7 @@
       "evra": "2.1.0-17.fc35.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.0-1.fc35.x86_64"
+      "evra": "1.2.1-1.fc35.x86_64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-16T20:55:09Z",
+    "generated": "2022-03-18T13:47:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-15T22:26:15Z"
+        "generated": "2022-03-17T20:51:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-16T15:52:25Z"
+        "generated": "2022-03-17T15:17:39Z"
       }
     }
   }

From 5d1a3ec91b773da393f7d4e52f292eb89dc77a45 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 17 Mar 2022 16:48:10 +0800
Subject: [PATCH 0855/2157] networking: veirfy rd.net.timeout.dhcp and
 rd.net.dhcp.retry are supported by NetworkManager.

Append rd.net.timeout.dhcp and rd.net.dhcp.retry to kernel parameter
when boot, get total dhcp timeout is `rd.net.timeout.dhcp * rd.net.dhcp.retry`
seconds.
See:
- https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
- https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
- https://bugzilla.redhat.com/show_bug.cgi?id=1877740
---
 tests/kola/networking/kargs-rd-net | 31 ++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100755 tests/kola/networking/kargs-rd-net

diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
new file mode 100755
index 0000000000..d2e778187e
--- /dev/null
+++ b/tests/kola/networking/kargs-rd-net
@@ -0,0 +1,31 @@
+#!/bin/bash
+# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"}
+# 
+# Veirfy rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
+# by NetworkManager. Append them to kernel parameter when boot, 
+# get total timeout is `timeout * retry`, 30*8(240) seconds 
+# in this test scenario
+# See:
+# - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# check kernel parameter
+cmdline="/proc/cmdline"
+for rd in rd.net.timeout.dhcp rd.net.dhcp.retry;
+do
+    if ! grep -q $rd $cmdline; then
+        fatal "Error: can not find $rd in kernel parameter"
+    fi
+done
+
+log=$(journalctl -b -u NetworkManager | grep "beginning transaction")
+timeout=$(echo $log | awk -F'[( )]' '{print $(NF-2)}')
+if [ $timeout -ne 240 ]; then
+    fatal "Error: actual dhcp timeout is $timeout, expected 240"
+fi
+ok "Total dhcp timeout matches expected value"

From 2bea5f7741f3917eac3b1d587237988055d83477 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 18 Mar 2022 22:08:10 +0000
Subject: [PATCH 0856/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/89/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a61c686292..456f236886 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-15.fc35.aarch64"
+      "evra": "1:2.3.3op2-16.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -1066,7 +1066,7 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.5.2-1.fc35.aarch64"
+      "evra": "1:1.6.0-1.fc35.aarch64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.aarch64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4529-1.fc35.noarch"
+      "evra": "2:8.2.4579-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4529-1.fc35.aarch64"
+      "evra": "2:8.2.4579-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-18T13:48:11Z",
+    "generated": "2022-03-18T20:55:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-17T20:52:05Z"
+        "generated": "2022-03-18T19:18:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-17T15:17:09Z"
+        "generated": "2022-03-18T19:56:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6007261165..0f163feb6f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-15.fc35.x86_64"
+      "evra": "1:2.3.3op2-16.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -1078,7 +1078,7 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.5.2-1.fc35.x86_64"
+      "evra": "1:1.6.0-1.fc35.x86_64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.x86_64"
@@ -1180,10 +1180,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4529-1.fc35.noarch"
+      "evra": "2:8.2.4579-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4529-1.fc35.x86_64"
+      "evra": "2:8.2.4579-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-18T13:47:47Z",
+    "generated": "2022-03-18T20:56:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-17T20:51:44Z"
+        "generated": "2022-03-18T19:19:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-17T15:17:39Z"
+        "generated": "2022-03-18T19:56:48Z"
       }
     }
   }

From 59f762c2e49f1e1884c37f2af4f37da5be484989 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 19 Mar 2022 00:13:03 +0000
Subject: [PATCH 0857/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 18bbc9b61f..e891a369cd 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,24 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 5.16.15-201.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
-      type: fast-track
-  kernel-core:
-    evr: 5.16.15-201.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
-      type: fast-track
-  kernel-modules:
-    evr: 5.16.15-201.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-de4474b89d
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1121
-      type: fast-track
   ignition:
     evr: 2.13.0-5.fc35
     metadata:

From 626f24fbcfb7835d4a92d783979377e66e8015d4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 19 Mar 2022 13:59:57 -0400
Subject: [PATCH 0858/2157] denylist: extend snooze for journald fix test

This is still happening reliably. Snooze and keep following
up upstream.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6b7652f4a0..78b364f249 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,7 +23,7 @@
   - ppc64le
 - pattern: ext.config.systemd.sytemd-journald-fix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1061988853
-  snooze: 2022-03-18
+  snooze: 2022-04-01
   streams:
     - stable
     - testing

From ba803b8bfe5de83ae6e2789318e8575efe42f640 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 18 Mar 2022 18:26:47 -0400
Subject: [PATCH 0859/2157] workflows: update check-diff location

---
 .github/workflows/promotion-diff.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index b8f0cb7c5f..2aa14f5763 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -38,7 +38,7 @@ jobs:
           # one in the base, not the one from the origin
           cp base/manifest.yaml origin/
       - name: Compare trees
-        uses: coreos/check-diff@main
+        uses: coreos/actions-lib/check-diff@main
         with:
           basedir: origin
           patchdir: new

From ec96e60aeca398bdbe59a4d7b961ff2a7d148abe Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Mar 2022 22:00:58 +0000
Subject: [PATCH 0860/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/93/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 456f236886..8635f8a343 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -355,16 +355,16 @@
       "evra": "2.35.1-1.fc35.aarch64"
     },
     "glib2": {
-      "evra": "2.70.4-1.fc35.aarch64"
+      "evra": "2.70.5-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-28.fc35.aarch64"
+      "evra": "2.34-29.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-28.fc35.aarch64"
+      "evra": "2.34-29.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-28.fc35.aarch64"
+      "evra": "2.34-29.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-18T20:55:37Z",
+    "generated": "2022-03-20T20:52:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-18T19:18:48Z"
+        "generated": "2022-03-18T22:12:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-18T19:56:17Z"
+        "generated": "2022-03-19T23:15:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0f163feb6f..0690db0da7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,16 +355,16 @@
       "evra": "2.35.1-1.fc35.x86_64"
     },
     "glib2": {
-      "evra": "2.70.4-1.fc35.x86_64"
+      "evra": "2.70.5-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-28.fc35.x86_64"
+      "evra": "2.34-29.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-28.fc35.x86_64"
+      "evra": "2.34-29.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-28.fc35.x86_64"
+      "evra": "2.34-29.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-18T20:56:01Z",
+    "generated": "2022-03-20T20:53:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-18T19:19:27Z"
+        "generated": "2022-03-18T22:13:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-18T19:56:48Z"
+        "generated": "2022-03-19T23:16:29Z"
       }
     }
   }

From f67dec624b6e7df5677216c5f27cf1a32e4e6999 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 21 Mar 2022 16:16:54 -0400
Subject: [PATCH 0861/2157] overlay: 40ignition-ostree: make
 ignition-ostree-transposefs tolerant to debug kernels

It appears that on debug kernels the "/dev/disk/by-label/$label" device *can* not
appear at all (some sort of race condition) and thus calling `realpath` on it will
fail. Let's just make the call to `realpath` not be fatal so we can workaround this
issue that has been around in the kernel for some time.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1092
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh         | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 18224c363c..145a05c318 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -56,7 +56,10 @@ udev_trigger_on_label_mismatch() {
     local expected_dev=$1; shift
     local actual_dev
     expected_dev=$(realpath "${expected_dev}")
-    actual_dev=$(realpath "/dev/disk/by-label/$label")
+    # We `|| :` here because sometimes /dev/disk/by-label/$label is missing.
+    # We've seen this on Fedora kernels with debug enabled (common in `rawhide`).
+    # See https://github.com/coreos/fedora-coreos-tracker/issues/1092
+    actual_dev=$(realpath "/dev/disk/by-label/$label" || :)
     if [ "$actual_dev" != "$expected_dev" ]; then
         echo "Expected /dev/disk/by-label/$label to point to $expected_dev, but points to $actual_dev; triggering udev"
         udevadm trigger --settle "$expected_dev"

From f98dbb0cb76a8535338096a65bb6801305cdaeda Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Mar 2022 09:45:55 -0400
Subject: [PATCH 0862/2157] manifest: explicitly list containerd

This is already in the OS as a dependency of moby-engine, but Typhoon is
now also relying on this and likely other people deploying Kubernetes on
top of FCOS.

Unlike cri-o, the versioning of containerd wrt CRI is less tight, which
makes baking it into the host easier.

Things may change here in the future, and it's likely we will recommend
cri-o as an alternative runtime for k8s eventually. But for now, let's
at least be more explicit that we're shipping containerd.

For more information, see:
https://github.com/coreos/fedora-coreos-tracker/issues/767
https://github.com/poseidon/typhoon/issues/899#issuecomment-1010638811
---
 manifests/fedora-coreos.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index f0926b330f..72cfb977dc 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -39,6 +39,8 @@ packages:
   - fedora-repos-archive
   # CL ships this.
   - moby-engine
+  # Already pulled in by moby-engine, but let's be explicit. Typhoon uses it.
+  - containerd
   # User metrics
   - fedora-coreos-pinger
   # Updates

From 163e8987aa360f86139af97d0fae8f3cd0298613 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Tue, 22 Mar 2022 16:16:49 +0100
Subject: [PATCH 0863/2157] Revert "overlay: verify filesystem labeled 'boot'
 is unique after ignition"

Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1105
This reverts commit bd7a5c78911f5bcfc89b0af42f401144661abcb1.
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh  | 2 --
 1 file changed, 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index 64c2c44c6e..cf2e9c3c3e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -14,8 +14,6 @@ karg() {
     echo "${value}"
 }
 
-rdcore verify-unique-fs-label --rereadpt boot
-
 # Mount /boot. Note that we mount /boot but we don't unmount it because we
 # are run in a systemd unit with MountFlags=slave so it is unmounted for us.
 bootmnt=/mnt/boot_partition

From 5cdd20a4266ba717c948ccdf487b50a17e9da755 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 22 Mar 2022 22:07:38 +0000
Subject: [PATCH 0864/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/97/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 42 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 42 +++++++++++++++++++-------------------
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8635f8a343..af1077d363 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.24-1.fc35.aarch64"
+      "evra": "32:9.16.27-1.fc35.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.24-1.fc35.noarch"
+      "evra": "32:9.16.27-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.24-1.fc35.aarch64"
+      "evra": "32:9.16.27-1.fc35.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.aarch64"
@@ -127,7 +127,7 @@
       "evra": "2:2.180.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.0-1.fc35.aarch64"
+      "evra": "1.6.1-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.aarch64"
@@ -265,7 +265,7 @@
       "evra": "2:5.16-1.fc35.aarch64"
     },
     "expat": {
-      "evra": "2.4.4-1.fc35.aarch64"
+      "evra": "2.4.7-1.fc35.aarch64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.aarch64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.6-1.fc35.aarch64"
+      "evra": "1.12.7-1.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.15-201.fc35.aarch64"
+      "evra": "5.16.16-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.15-201.fc35.aarch64"
+      "evra": "5.16.16-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.15-201.fc35.aarch64"
+      "evra": "5.16.16-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -622,7 +622,7 @@
       "evra": "1.6.0-2.fc35.aarch64"
     },
     "libldb": {
-      "evra": "2.4.1-1.fc35.aarch64"
+      "evra": "2.4.2-1.fc35.aarch64"
     },
     "libluksmeta": {
       "evra": "9-12.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.5-1.fc35.aarch64"
+      "evra": "2:4.15.6-0.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.21-1.fc35.aarch64"
@@ -772,7 +772,7 @@
       "evra": "0.9.10-14.fc35.aarch64"
     },
     "libusb1": {
-      "evra": "1.0.24-4.fc35.aarch64"
+      "evra": "1.0.25-8.fc35.aarch64"
     },
     "libuser": {
       "evra": "0.63-7.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.5-1.fc35.aarch64"
+      "evra": "2:4.15.6-0.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.aarch64"
@@ -919,10 +919,10 @@
       "evra": "8.7p1-3.fc35.aarch64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-2.fc35.aarch64"
+      "evra": "1:1.1.1n-1.fc35.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-2.fc35.aarch64"
+      "evra": "1:1.1.1n-1.fc35.aarch64"
     },
     "os-prober": {
       "evra": "1.77-8.fc35.aarch64"
@@ -1027,13 +1027,13 @@
       "evra": "2:1.1.0-1.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.5-1.fc35.aarch64"
+      "evra": "2:4.15.6-0.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.5-1.fc35.noarch"
+      "evra": "2:4.15.6-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.5-1.fc35.aarch64"
+      "evra": "2:4.15.6-0.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-20T20:52:59Z",
+    "generated": "2022-03-22T20:53:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-18T22:12:55Z"
+        "generated": "2022-03-20T22:09:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-19T23:15:58Z"
+        "generated": "2022-03-22T14:18:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0690db0da7..67f62aa781 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.24-1.fc35.x86_64"
+      "evra": "32:9.16.27-1.fc35.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.24-1.fc35.noarch"
+      "evra": "32:9.16.27-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.24-1.fc35.x86_64"
+      "evra": "32:9.16.27-1.fc35.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.x86_64"
@@ -127,7 +127,7 @@
       "evra": "2:2.180.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.0-1.fc35.x86_64"
+      "evra": "1.6.1-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.x86_64"
@@ -265,7 +265,7 @@
       "evra": "2:5.16-1.fc35.x86_64"
     },
     "expat": {
-      "evra": "2.4.4-1.fc35.x86_64"
+      "evra": "2.4.7-1.fc35.x86_64"
     },
     "fedora-coreos-pinger": {
       "evra": "0.0.4-12.fc35.x86_64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.6-1.fc35.x86_64"
+      "evra": "1.12.7-1.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.15-201.fc35.x86_64"
+      "evra": "5.16.16-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.15-201.fc35.x86_64"
+      "evra": "5.16.16-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.15-201.fc35.x86_64"
+      "evra": "5.16.16-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -628,7 +628,7 @@
       "evra": "1.6.0-2.fc35.x86_64"
     },
     "libldb": {
-      "evra": "2.4.1-1.fc35.x86_64"
+      "evra": "2.4.2-1.fc35.x86_64"
     },
     "libluksmeta": {
       "evra": "9-12.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.5-1.fc35.x86_64"
+      "evra": "2:4.15.6-0.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -781,7 +781,7 @@
       "evra": "0.9.10-14.fc35.x86_64"
     },
     "libusb1": {
-      "evra": "1.0.24-4.fc35.x86_64"
+      "evra": "1.0.25-8.fc35.x86_64"
     },
     "libuser": {
       "evra": "0.63-7.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.5-1.fc35.x86_64"
+      "evra": "2:4.15.6-0.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.x86_64"
@@ -931,10 +931,10 @@
       "evra": "8.7p1-3.fc35.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1l-2.fc35.x86_64"
+      "evra": "1:1.1.1n-1.fc35.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1l-2.fc35.x86_64"
+      "evra": "1:1.1.1n-1.fc35.x86_64"
     },
     "os-prober": {
       "evra": "1.77-8.fc35.x86_64"
@@ -1039,13 +1039,13 @@
       "evra": "2:1.1.0-1.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.5-1.fc35.x86_64"
+      "evra": "2:4.15.6-0.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.5-1.fc35.noarch"
+      "evra": "2:4.15.6-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.5-1.fc35.x86_64"
+      "evra": "2:4.15.6-0.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-20T20:53:03Z",
+    "generated": "2022-03-22T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-18T22:13:32Z"
+        "generated": "2022-03-20T22:09:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-19T23:16:29Z"
+        "generated": "2022-03-22T14:19:10Z"
       }
     }
   }

From e8ff8522b3676477cd42590f4ecae5f346981a10 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 22 Mar 2022 16:12:18 -0400
Subject: [PATCH 0865/2157] overlay/05core: ship by-id/coreos-boot-disk udev
 rule in initrd only

The associated script only exists in the initrd. But also, we only need
the symlink in the initrd anyway.

Fixes 6d7b9ad5 ("overlay.d: add udev rule for creating stable symlink to
boot disk").

Fixes https://github.com/openshift/os/issues/755.
---
 .../modules.d/35coreos-ignition}/80-coreos-boot-disk.rules     | 0
 .../usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh | 3 ++-
 2 files changed, 2 insertions(+), 1 deletion(-)
 rename overlay.d/05core/usr/lib/{udev/rules.d => dracut/modules.d/35coreos-ignition}/80-coreos-boot-disk.rules (100%)

diff --git a/overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/80-coreos-boot-disk.rules
similarity index 100%
rename from overlay.d/05core/usr/lib/udev/rules.d/80-coreos-boot-disk.rules
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/80-coreos-boot-disk.rules
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 96345f7107..74490c2e71 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -31,7 +31,8 @@ install() {
     inst_script "$moddir/coreos-gpt-setup.sh" \
         "/usr/sbin/coreos-gpt-setup"
 
-    inst_simple "/usr/lib/udev/rules.d/80-coreos-boot-disk.rules"
+    inst_simple "$moddir/80-coreos-boot-disk.rules" \
+        "/usr/lib/udev/rules.d/80-coreos-boot-disk.rules"
 
     inst_script "$moddir/coreos-disk-contains-fs.sh" \
         "/usr/lib/udev/coreos-disk-contains-fs"

From 9b49ffd440fae5186a768befa4bf65fa9ea80a85 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 24 Mar 2022 13:46:05 +0000
Subject: [PATCH 0866/2157] overrides: fast-track
 rust-coreos-installer-0.13.1-3.fc35

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index e891a369cd..a52e698f5d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,18 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  coreos-installer:
+    evr: 0.13.1-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0813365f58
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1116
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.13.1-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0813365f58
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1116
+      type: fast-track
   ignition:
     evr: 2.13.0-5.fc35
     metadata:

From 6b1da4361e970d25f2af39517aefe05f7c62b117 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 24 Mar 2022 22:12:02 +0000
Subject: [PATCH 0867/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/101/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index af1077d363..068fa4335c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,16 +136,16 @@
       "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.13.1-1.fc35.aarch64"
+      "evra": "0.13.1-3.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.13.1-1.fc35.aarch64"
+      "evra": "0.13.1-3.fc35.aarch64"
     },
     "coreutils": {
-      "evra": "8.32-32.fc35.aarch64"
+      "evra": "8.32-33.fc35.aarch64"
     },
     "coreutils-common": {
-      "evra": "8.32-32.fc35.aarch64"
+      "evra": "8.32-33.fc35.aarch64"
     },
     "cpio": {
       "evra": "2.13-11.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-22T20:53:12Z",
+    "generated": "2022-03-24T20:53:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-20T22:09:08Z"
+        "generated": "2022-03-24T19:01:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-22T14:18:38Z"
+        "generated": "2022-03-24T16:06:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 67f62aa781..4fccc6cd9b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,16 +136,16 @@
       "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.13.1-1.fc35.x86_64"
+      "evra": "0.13.1-3.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.13.1-1.fc35.x86_64"
+      "evra": "0.13.1-3.fc35.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-32.fc35.x86_64"
+      "evra": "8.32-33.fc35.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-32.fc35.x86_64"
+      "evra": "8.32-33.fc35.x86_64"
     },
     "cpio": {
       "evra": "2.13-11.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-22T20:53:23Z",
+    "generated": "2022-03-24T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-20T22:09:51Z"
+        "generated": "2022-03-24T19:02:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-22T14:19:10Z"
+        "generated": "2022-03-24T16:07:24Z"
       }
     }
   }

From 4cae1d0bb381927e776cc041d5c8cdffaa81d30c Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Wed, 23 Mar 2022 09:33:35 +0100
Subject: [PATCH 0868/2157] s390x: Do not install fwupd package

The fwupd package is not needed on s390x and causes problems in RHCOS.
https://github.com/openshift/os/issues/752

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 manifests/bootable-rpm-ostree.yaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 784acd4f50..4fd63c0faf 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -14,14 +14,16 @@ packages:
  - linux-firmware
  # rpm-ostree
  - rpm-ostree nss-altfiles
- # firmware updates
- - fwupd
 
 # bootloader
 packages-aarch64:
   - grub2-efi-aa64 efibootmgr shim
+  # firmware updates
+  - fwupd
 packages-ppc64le:
   - grub2 ostree-grub2
+  # firmware updates
+  - fwupd
 packages-s390x:
   # On Fedora, this is provided by s390utils-core. on RHEL, this is for now
   # provided by s390utils-base, but soon will be -core too.
@@ -29,3 +31,5 @@ packages-s390x:
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl
+  # firmware updates
+  - fwupd

From 02bc2feef0b9a9cad5a1b3dea12abd12ce7156df Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Wed, 23 Mar 2022 15:15:14 +0100
Subject: [PATCH 0869/2157] s390x: Do not run
 ext.config.networking.kargs-rd-net test

appendFirstbootKernelArgs is currently not working on s390x.
See: https://github.com/coreos/coreos-assembler/issues/2776

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/networking/kargs-rd-net | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index d2e778187e..f7e4aa1447 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -1,14 +1,22 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"}
-# 
+# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8", "architectures": "!s390x"}
+#
 # Veirfy rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
-# by NetworkManager. Append them to kernel parameter when boot, 
-# get total timeout is `timeout * retry`, 30*8(240) seconds 
+# by NetworkManager. Append them to kernel parameter when boot,
+# get total timeout is `timeout * retry`, 30*8(240) seconds
 # in this test scenario
 # See:
 # - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
+#   - The functionality we're testing here.
+# - architectures: !s390x
+#   - appendFirstbootKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 set -xeuo pipefail
 

From 91d5414af330f9c331a777304575f469a8a43858 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Thu, 24 Mar 2022 15:12:27 +0100
Subject: [PATCH 0870/2157] tests/kola/networking: Update tests with
 description of kola arguments

Add a description for the kola arguments.
Switch the s390x issue for the RFE link.

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/networking/force-persist-ip/test.sh | 18 +++++++++++++-----
 .../networking/mtu-on-bond-ignition/test.sh    | 16 +++++++++++-----
 tests/kola/networking/mtu-on-bond-kargs        | 17 ++++++++++++-----
 .../prefer-ignition-networking/test.sh         | 15 ++++++++++++---
 4 files changed, 48 insertions(+), 18 deletions(-)

diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 173bbe607b..da20c52a4c 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -9,13 +9,21 @@ set -xeuo pipefail
 #   eth1 has the static IP address via kargs
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# - We use net.ifnames=0 to disable consistent network naming here because on
-#   different firmwares (BIOS vs UEFI) the NIC names are different.
-#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 
-# https://github.com/coreos/fedora-coreos-config/issues/1499
-# - Disable the test on s390x
 # kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip", "architectures": "!s390x" }
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - additionalNics: 1
+#   - Add 1 NIC for this test
+# - appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip"
+#   - The functionality we're testing here and the configuration for the NIC
+#   - We use net.ifnames=0 to disable consistent network naming here because on
+#     different firmwares (BIOS vs UEFI) the NIC names are different.
+#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# - architectures: !s390x
+#   - appendKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index ffb757d7b6..f79618b768 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,8 +1,5 @@
 #!/bin/bash
 # kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "net.ifnames=0", "architectures": "!s390x"}
-# - We use net.ifnames=0 to disable consistent network naming here because on
-#   different firmwares (BIOS vs UEFI) the NIC names are different.
-#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 
 # Set MTU on a VLAN subinterface for the bond using ignition config and check
 # - verify MTU on the bond matches config
@@ -19,8 +16,17 @@
 # Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to
 # https://github.com/coreos/fedora-coreos-config/pull/1401
 
-# https://github.com/coreos/fedora-coreos-config/issues/1499
-# - Disable the test on s390x
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - additionalNics: 2
+#   - Add 2 NIC for this test
+# - appendKernelArgs: "net.ifnames=0"
+#   - We use net.ifnames=0 to disable consistent network naming here because on
+#     different firmwares (BIOS vs UEFI) the NIC names are different.
+#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# - architectures: !s390x
+#   - appendKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 5f85d2eb0e..242bfe3cee 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,8 +1,5 @@
 #!/bin/bash
 # kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0", "architectures": "!s390x"}
-# - We use net.ifnames=0 to disable consistent network naming here because on
-#   different firmwares (BIOS vs UEFI) the NIC names are different.
-#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 
 # Configuring MTU on a VLAN subinterface for the bond,
 # - verify MTU on the bond matches config
@@ -10,8 +7,18 @@
 # - verify ip address on the VLAN subinterface for the bond matches config
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
 
-# https://github.com/coreos/fedora-coreos-config/issues/1499
-# - Disable the test on s390x
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - additionalNics: 2
+#   - Add 2 NIC for this test
+# - appendKernelArgs: "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"
+#   - Configuration of the 2 NICs for this test
+#   - We use net.ifnames=0 to disable consistent network naming here because on
+#     different firmwares (BIOS vs UEFI) the NIC names are different.
+#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# - architectures: !s390x
+#   - appendKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 43d7c6c386..72d199cedd 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -9,13 +9,22 @@ set -xeuo pipefail
 #   configuration wins, verify that eth1 gets ip via dhcp
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-# - We use net.ifnames=0 to disable consistent network naming here because on
-#   different firmwares (BIOS vs UEFI) the NIC names are different.
-#   See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 
 # https://github.com/coreos/fedora-coreos-config/issues/1499
 # - Disable the test on s390x
 # kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0", "architectures": "!s390x" }
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - additionalNics: 1
+#   - Add 1 NIC for this test
+# - appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0"
+#   - The functionality we're testing here and the configuration for the NIC
+#   - We use net.ifnames=0 to disable consistent network naming here because on
+#     different firmwares (BIOS vs UEFI) the NIC names are different.
+#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+# - architectures: !s390x
+#   - appendKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From 6e07f282154851cf6bd482cc1d2f2a95b9bdb356 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 25 Mar 2022 09:48:08 -0400
Subject: [PATCH 0871/2157] README.md: update section about repo

Tweak the section talking about how this repo works to reflect the
latest state.
---
 README.md | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 8fc2e4db20..52ebb23d09 100644
--- a/README.md
+++ b/README.md
@@ -22,16 +22,19 @@ and [tooling](https://github.com/coreos/fedora-coreos-tracker/blob/main/stream-t
 docs for more information about streams.
 
 All file changes in `testing-devel` are propagated to other
-branches (to `bodhi-updates` through
+branches (to `next-devel`, `branched`, and `rawhide` through
 [config-bot](https://github.com/coreos/fedora-coreos-releng-automation/tree/main/config-bot),
-and to `testing` through usual promotion), with the
-following exceptions:
-- `manifest.yaml`: contains the stream "identity", such as
-  the ref, additional commit metadata, and yum input repos.
-- lockfiles (`manifest-lock.*` files): lockfiles are
-  imported from `bodhi-updates` to `testing-devel`.
-  Overrides (`manifest-lock.overrides.*`) are manually
-  curated.
+and to `testing` and eventually `stable` through usual
+promotion), with the following exceptions:
+- `manifest.yaml`: contains the stream's name, yum repos
+  used during composes, and the `releasever`.
+- lockfiles (`manifest-lock.*` files): on `testing-devel`
+  and `next-devel`, lockfiles are pushed by
+  [the `bump-lockfile` job](https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile).
+  Production streams receive them as part of usual
+  promotion. Overrides (`manifest-lock.overrides.*`) are
+  managed independently with the help of some GitHub Actions
+  (see sections below).
 
 ## Layout
 

From b513281496880fa825cc90553cd0361d0f79dcbb Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Mar 2022 11:19:33 -0400
Subject: [PATCH 0872/2157] tests: bump timeout for
 `ext.config.chrony.dhcp-propagation`

We've seen it take 10 minutes to pass this test because the container
pull/build can take a long time depending on remote servers. Let's bump
the timeout to try to handle slow remote servers.
---
 tests/kola/chrony/dhcp-propagation | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index a0758f3d49..1a469ce382 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -1,10 +1,21 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv" }
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15 }
 # This script creates two veth interfaces i.e. one for the host machine 
 # and other for the container(dnsmasq server). This setup will be helpful
 # to verify the DHCP propagation of NTP servers. This will also avoid any 
 # regression that might cause in RHCOS or FCOS when the upstream changes 
 # come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
+#
+# - tags: needs-internet
+#   - This test builds a container from remote sources.
+#   - This test uses a remote NTP server.
+# - platforms: qemu-unpriv
+#   - Limit it to qemu because some cloud providers have their own
+#     special sauce for NTP/chrony and we don't want to interfere with
+#     that.
+# - timeoutMin: 15
+#   - Pulling and building the container can take a long time if a
+#     slow mirror gets chosen.
 
 set -xeuo pipefail
 

From 23168aa2ac6c3f38f0f1eef63a8890b509669f10 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 26 Mar 2022 00:13:23 +0000
Subject: [PATCH 0873/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index a52e698f5d..eab31ff455 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -21,9 +21,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0813365f58
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1116
       type: fast-track
-  ignition:
-    evr: 2.13.0-5.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-cfe402447e
-      reason: https://github.com/coreos/ignition/issues/1092
-      type: fast-track

From 327cdaef08d9a172db654112dea13c9506ea67b7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 25 Mar 2022 18:32:55 -0400
Subject: [PATCH 0874/2157] workflows: allow magic promotion text anywhere in
 PR title

The PR title might be prefixed with a branch name.
---
 .github/workflows/promotion-diff.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index 2aa14f5763..29ce106eea 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -11,7 +11,7 @@ jobs:
     name: Check promotion diffs
     runs-on: ubuntu-latest
     # Only run if this looks like a promotion PR
-    if: "startsWith(github.event.pull_request.title, 'tree: promote changes from')"
+    if: "contains(github.event.pull_request.title, 'tree: promote changes from')"
     steps:
       - name: Get base commit hash
         env:

From f0d74ed48b85784d56ed689fe48bd6047e2d0afd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 27 Mar 2022 20:53:16 +0000
Subject: [PATCH 0875/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/108/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 068fa4335c..0055b93de6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-24T20:53:12Z",
+    "generated": "2022-03-27T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-24T19:01:28Z"
+        "generated": "2022-03-25T22:19:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-24T16:06:53Z"
+        "generated": "2022-03-27T01:08:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4fccc6cd9b..ad92679770 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-24T20:53:07Z",
+    "generated": "2022-03-27T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-24T19:02:15Z"
+        "generated": "2022-03-25T22:20:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-24T16:07:24Z"
+        "generated": "2022-03-27T01:09:28Z"
       }
     }
   }

From b3633646155bb88ed79b48e600ca2de5c539c480 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 26 Mar 2022 12:56:26 -0400
Subject: [PATCH 0876/2157] tests: bump timeout for
 `ext.config.podman.rootless-systemd`

We've seen it take 10 minutes to pass this test because the container
pull/build can take a long time depending on remote servers. Let's bump
the timeout to try to handle slow remote servers.
---
 tests/kola/podman/rootless-systemd | 31 +++++++++++++++++-------------
 1 file changed, 18 insertions(+), 13 deletions(-)

diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 6d1c84208a..21cd94ef15 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,21 +1,26 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
-# This script runs a rootless podman container with systemd inside
-# that brings up httpd. Tests that rootless+systemd works. See issue:
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15 }
+# This script runs a rootless podman container (rootless because it's
+# run as the `core` user) with systemd inside that brings up httpd.
+# It tests that rootless+systemd works. See issue:
 # https://github.com/containers/podman/issues/7441
 #
 # If it gets easy to change the kargs in the future we should try this
 # both on cgroups v1 and cgroups v2.
-
-# Just run on QEMU for now. If this test works in one place it should
-# work everywhere.
-# The test is scoped to only FCOS because the `--retry-all-errors` flag passed
-# to `curl` is not avaiable on the version in RHCOS.
-# TODO-RHCOS: adapt test to conditionally use the `-retry-all-errors` flag on
-# only FCOS
-
-# Script to be executed as the `core` user to build and
-# run a rootless podman container that uses systemd inside.
+#
+# - distros: fcos
+#   - The test is scoped to only FCOS because the `--retry-all-errors`
+#     flag passed to `curl` is not avaiable on RHEL8.
+#     TODO-RHCOS: adapt test to conditionally use the `-retry-all-errors`
+#     flag on only FCOS
+# - tags: needs-internet
+#   - This test builds a container from remote sources.
+#   - This test uses a remote NTP server.
+# - platforms: qemu-unpriv
+#   - If the test works anywhere it should work everywhere.
+# - timeoutMin: 15
+#   - Pulling and building the container can take a long time if a
+#     slow mirror gets chosen.
 
 set -xeuo pipefail
 

From a227d5545dbd40126912de8091afbc768137833c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 29 Mar 2022 22:09:05 +0000
Subject: [PATCH 0877/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/113/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0055b93de6..ef906faf03 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.16-200.fc35.aarch64"
+      "evra": "5.16.17-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.16-200.fc35.aarch64"
+      "evra": "5.16.17-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.16-200.fc35.aarch64"
+      "evra": "5.16.17-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -847,7 +847,7 @@
       "evra": "2.10-5.fc35.aarch64"
     },
     "mdadm": {
-      "evra": "4.2-rc2.fc35.aarch64"
+      "evra": "4.2-1.fc35.aarch64"
     },
     "moby-engine": {
       "evra": "20.10.12-1.fc35.aarch64"
@@ -1168,10 +1168,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4579-1.fc35.noarch"
+      "evra": "2:8.2.4621-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4579-1.fc35.aarch64"
+      "evra": "2:8.2.4621-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-27T20:53:07Z",
+    "generated": "2022-03-29T20:54:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-25T22:19:15Z"
+        "generated": "2022-03-28T22:48:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-27T01:08:56Z"
+        "generated": "2022-03-29T02:24:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ad92679770..93b6a39a11 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.16-200.fc35.x86_64"
+      "evra": "5.16.17-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.16-200.fc35.x86_64"
+      "evra": "5.16.17-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.16-200.fc35.x86_64"
+      "evra": "5.16.17-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -856,7 +856,7 @@
       "evra": "2.10-5.fc35.x86_64"
     },
     "mdadm": {
-      "evra": "4.2-rc2.fc35.x86_64"
+      "evra": "4.2-1.fc35.x86_64"
     },
     "microcode_ctl": {
       "evra": "2:2.1-47.1.fc35.x86_64"
@@ -1180,10 +1180,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4579-1.fc35.noarch"
+      "evra": "2:8.2.4621-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4579-1.fc35.x86_64"
+      "evra": "2:8.2.4621-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-27T20:53:06Z",
+    "generated": "2022-03-29T20:56:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-25T22:20:16Z"
+        "generated": "2022-03-28T22:48:42Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-27T01:09:28Z"
+        "generated": "2022-03-29T02:24:58Z"
       }
     }
   }

From 7bc180227e95d236f8820e2bde04ea179ba82629 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 31 Mar 2022 15:52:58 +0000
Subject: [PATCH 0878/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/117/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ef906faf03..7ade4ed861 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.17-200.fc35.aarch64"
+      "evra": "5.16.18-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.17-200.fc35.aarch64"
+      "evra": "5.16.18-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.17-200.fc35.aarch64"
+      "evra": "5.16.18-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1201,20 +1201,20 @@
       "evra": "1.2.11-30.fc35.aarch64"
     },
     "zram-generator": {
-      "evra": "1.1.1-3.fc35.aarch64"
+      "evra": "1.1.2-1.fc35.aarch64"
     }
   },
   "metadata": {
-    "generated": "2022-03-29T20:54:15Z",
+    "generated": "2022-03-31T14:38:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-28T22:48:06Z"
+        "generated": "2022-03-30T22:12:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-29T02:24:25Z"
+        "generated": "2022-03-31T01:02:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 93b6a39a11..587f664e2c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.17-200.fc35.x86_64"
+      "evra": "5.16.18-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.17-200.fc35.x86_64"
+      "evra": "5.16.18-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.17-200.fc35.x86_64"
+      "evra": "5.16.18-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1213,20 +1213,20 @@
       "evra": "1.2.11-30.fc35.x86_64"
     },
     "zram-generator": {
-      "evra": "1.1.1-3.fc35.x86_64"
+      "evra": "1.1.2-1.fc35.x86_64"
     }
   },
   "metadata": {
-    "generated": "2022-03-29T20:56:04Z",
+    "generated": "2022-03-31T14:38:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-28T22:48:42Z"
+        "generated": "2022-03-30T22:12:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-29T02:24:58Z"
+        "generated": "2022-03-31T01:02:45Z"
       }
     }
   }

From 3d81ddf1e0702d5da189895cf66f9c39a3533581 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 1 Apr 2022 06:06:59 +0000
Subject: [PATCH 0879/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index eab31ff455..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.13.1-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0813365f58
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1116
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.13.1-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0813365f58
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1116
-      type: fast-track
+packages: {}

From cd60a15cb862459eda985b342a0f05ac8d93a7d6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 1 Apr 2022 20:58:28 +0000
Subject: [PATCH 0880/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/120/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7ade4ed861..573d3ee8c5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.aarch64"
     },
     "crun": {
-      "evra": "1.4.3-1.fc35.aarch64"
+      "evra": "1.4.4-1.fc35.aarch64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-31T14:38:55Z",
+    "generated": "2022-04-01T19:45:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-30T22:12:05Z"
+        "generated": "2022-04-01T15:46:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-31T01:02:14Z"
+        "generated": "2022-04-01T01:42:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 587f664e2c..7b62d0281d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,7 +163,7 @@
       "evra": "3.16.1-2.fc35.x86_64"
     },
     "crun": {
-      "evra": "1.4.3-1.fc35.x86_64"
+      "evra": "1.4.4-1.fc35.x86_64"
     },
     "crypto-policies": {
       "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-03-31T14:38:50Z",
+    "generated": "2022-04-01T19:45:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-03-30T22:12:48Z"
+        "generated": "2022-04-01T15:47:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-03-31T01:02:45Z"
+        "generated": "2022-04-01T01:42:59Z"
       }
     }
   }

From 53fa577ca143b86e91edb3c5ec6f1864b4521b16 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Apr 2022 22:03:09 +0000
Subject: [PATCH 0881/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/124/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 573d3ee8c5..8093d891da 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1066,7 +1066,7 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.6.0-1.fc35.aarch64"
+      "evra": "1:1.7.0-1.fc35.aarch64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-01T19:45:16Z",
+    "generated": "2022-04-02T20:53:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-01T15:46:06Z"
+        "generated": "2022-04-01T21:13:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-01T01:42:28Z"
+        "generated": "2022-04-02T01:22:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7b62d0281d..649226ab79 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1078,7 +1078,7 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.6.0-1.fc35.x86_64"
+      "evra": "1:1.7.0-1.fc35.x86_64"
     },
     "slang": {
       "evra": "2.3.2-10.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-01T19:45:24Z",
+    "generated": "2022-04-02T20:53:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-01T15:47:29Z"
+        "generated": "2022-04-01T21:14:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-01T01:42:59Z"
+        "generated": "2022-04-02T01:22:55Z"
       }
     }
   }

From e86754be5fd968e287e04fde57c5b66adcdfe4a7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 3 Apr 2022 22:07:33 +0000
Subject: [PATCH 0882/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/126/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8093d891da..2903dd9742 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -490,7 +490,7 @@
       "evra": "0.8.6-5.fc35.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-2.fc35.aarch64"
+      "evra": "1.19.2-4.fc35.aarch64"
     },
     "less": {
       "evra": "590-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-02T20:53:17Z",
+    "generated": "2022-04-03T20:55:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-01T21:13:32Z"
+        "generated": "2022-04-02T22:06:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-02T01:22:24Z"
+        "generated": "2022-04-03T01:56:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 649226ab79..3e0fc706cd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -496,7 +496,7 @@
       "evra": "0.8.6-5.fc35.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-2.fc35.x86_64"
+      "evra": "1.19.2-4.fc35.x86_64"
     },
     "less": {
       "evra": "590-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-02T20:53:22Z",
+    "generated": "2022-04-03T20:56:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-01T21:14:17Z"
+        "generated": "2022-04-02T22:07:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-02T01:22:55Z"
+        "generated": "2022-04-03T01:56:39Z"
       }
     }
   }

From a167a1620858cb3b7ed5c2ff5e2ef741e945ec33 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 4 Apr 2022 22:15:11 +0000
Subject: [PATCH 0883/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/128/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2903dd9742..08d15a3f5d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.7-2.fc35.aarch64"
+      "evra": "3.0.8-1.fc35.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-03T20:55:40Z",
+    "generated": "2022-04-04T20:58:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-02T22:06:14Z"
+        "generated": "2022-04-04T19:33:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-03T01:56:09Z"
+        "generated": "2022-04-04T01:02:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3e0fc706cd..e046cdb6f7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "2.5.1-3.fc35.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.7-2.fc35.x86_64"
+      "evra": "3.0.8-1.fc35.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-14.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-03T20:56:08Z",
+    "generated": "2022-04-04T20:58:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-02T22:07:46Z"
+        "generated": "2022-04-04T19:35:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-03T01:56:39Z"
+        "generated": "2022-04-04T01:02:53Z"
       }
     }
   }

From f7994c88cff08c43ebfde4d6b247c16cd5512f85 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 4 Apr 2022 23:28:12 -0400
Subject: [PATCH 0884/2157] shared-workarounds: adjust service fix to not apply
 to F36+

A new version of dracut (with the service fix) landed in
F36.
---
 manifests/shared-workarounds.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index d6cf4ad927..fe78a62b95 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -43,8 +43,8 @@ postprocess:
     set -xeuo pipefail
     source /etc/os-release
     if [[ ${NAME} =~ "Fedora" ]]; then
-        # FCOS: This fix has landed in F37+
-        [ ${VERSION_ID} -le 36 ] || exit 0
+        # FCOS: This fix has landed in F36+
+        [ ${VERSION_ID} -le 35 ] || exit 0
     else 
         # RHCOS: The fix hasn't landed in any version of RHEL yet
         true

From a10c7ed74c5cbeaa9cb6d521b3da415c52f870b1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Apr 2022 22:09:16 +0000
Subject: [PATCH 0885/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/132/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 08d15a3f5d..526bc52896 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.180.0-1.fc35.noarch"
+      "evra": "2:2.181.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.1-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-04T20:58:01Z",
+    "generated": "2022-04-05T20:53:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-04T19:33:14Z"
+        "generated": "2022-04-04T22:17:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-04T01:02:21Z"
+        "generated": "2022-04-05T15:24:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e046cdb6f7..4223847fce 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.180.0-1.fc35.noarch"
+      "evra": "2:2.181.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.1-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-04T20:58:05Z",
+    "generated": "2022-04-05T20:55:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-04T19:35:00Z"
+        "generated": "2022-04-04T22:18:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-04T01:02:53Z"
+        "generated": "2022-04-05T15:25:03Z"
       }
     }
   }

From fb3ded355d139e8fe8a9062809083009bc5a13c1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 5 Apr 2022 22:54:15 -0400
Subject: [PATCH 0886/2157] denylist: extend snooze for
 ext.config.systemd.sytemd-journald-fix

The fix has landed upstream and we're just waiting for a new rpm
build in Fedora. For now let's keep snoozing.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 78b364f249..d7dfaa2d68 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,7 +23,7 @@
   - ppc64le
 - pattern: ext.config.systemd.sytemd-journald-fix
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1061988853
-  snooze: 2022-04-01
+  snooze: 2022-04-20
   streams:
     - stable
     - testing

From 497819ca123856eda93320b397471f27d54198b3 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 5 Apr 2022 13:52:41 -0700
Subject: [PATCH 0887/2157] manifest: Include libvarlink-util conditionally
 Removed libvarlink-util package for next stream as an initial step to fully
 drop it

---
 manifests/fedora-coreos-base.yaml | 9 +++++++--
 manifests/varlink.yaml            | 5 +++++
 2 files changed, 12 insertions(+), 2 deletions(-)
 create mode 100644 manifests/varlink.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index fb7fd26c9c..907fc997b2 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -18,6 +18,13 @@ ostree-layers:
   - overlay/20platform-chrony
 
 conditional-include:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1130
+  - if: stream == "testing-devel"
+    include: varlink.yaml
+  - if: stream == "testing"
+    include: varlink.yaml
+  - if: stream == "stable"
+    include: varlink.yaml
   # https://github.com/coreos/fedora-coreos-tracker/issues/676
   - if: releasever >= 36
     include: iptables-nft.yaml
@@ -123,8 +130,6 @@ packages:
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
   # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071338097
   - containernetworking-plugins podman-plugins dnsmasq
-  # Remote IPC for podman
-  - libvarlink-util
   # Minimal NFS client
   - nfs-utils-coreos
   # Active Directory support
diff --git a/manifests/varlink.yaml b/manifests/varlink.yaml
new file mode 100644
index 0000000000..d43eb76980
--- /dev/null
+++ b/manifests/varlink.yaml
@@ -0,0 +1,5 @@
+# Include libvarlink-util package selectively
+# before we drop it from the remaining streams 
+# https://github.com/coreos/fedora-coreos-tracker/issues/1130
+packages:
+  - libvarlink-util

From 6dc91d213b9def2b28a2e604452457b3a4b47a10 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Mon, 21 Mar 2022 16:19:42 -0400
Subject: [PATCH 0888/2157] 05core/*: display Ignition warnings on the console

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1125

This change displays all Ignition warnings on the console. Also, renamed
the existing Ignition service to make it more generalized for handling
status information about the Ignition run.
---
 .../lib/systemd/system-preset/40-coreos.preset   |  4 ++--
 .../system/coreos-check-ignition-config.service  | 14 --------------
 .../system/coreos-ignition-write-issues.service  | 16 ++++++++++++++++
 ...ition-config => coreos-ignition-write-issues} |  5 +++++
 4 files changed, 23 insertions(+), 16 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
 rename overlay.d/05core/usr/libexec/{coreos-check-ignition-config => coreos-ignition-write-issues} (87%)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 13963ef789..818affa161 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -23,5 +23,5 @@ enable bootupd.socket
 # Ideally it should have been added as part of base Fedora - but since it was arch specific, it was not added: https://bugzilla.redhat.com/show_bug.cgi?id=1433859
 enable rtas_errd.service
 enable clevis-luks-askpass.path
-# Provide information if no ignition is provided
-enable coreos-check-ignition-config.service
+# Provide status information about the Ignition run
+enable coreos-ignition-write-issues.service
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service b/overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service
deleted file mode 100644
index 569de69eee..0000000000
--- a/overlay.d/05core/usr/lib/systemd/system/coreos-check-ignition-config.service
+++ /dev/null
@@ -1,14 +0,0 @@
-# This service is used for printing a message if 
-# no Ignition config is provided.
-[Unit]
-Description=Check if Ignition config is provided
-Before=systemd-user-sessions.service
-ConditionPathExists=/etc/.ignition-result.json
-
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/coreos-check-ignition-config
-RemainAfterExit=yes
-
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
new file mode 100644
index 0000000000..048c9f798f
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
@@ -0,0 +1,16 @@
+# This service writes issue files describing status 
+# information about the Ignition run, which includes 
+# Ignition warnings and information if no Ignition 
+# config is provided.
+[Unit]
+Description=Create Ignition Status Issue Files
+Before=systemd-user-sessions.service
+ConditionPathExists=/etc/.ignition-result.json
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-ignition-write-issues
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/05core/usr/libexec/coreos-check-ignition-config b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
similarity index 87%
rename from overlay.d/05core/usr/libexec/coreos-check-ignition-config
rename to overlay.d/05core/usr/libexec/coreos-ignition-write-issues
index 794efe974e..6a46935ac7 100755
--- a/overlay.d/05core/usr/libexec/coreos-check-ignition-config
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
@@ -27,6 +27,11 @@ behavior may occur. Ignition is not designed to run more than once per system.
 ${RESET}
 EOF
     fi
+    # This is for displaying Ignition warnings on the console
+    # TODO: find a way to query journal entries recorded before the system switches to real root
+    journalctl -t ignition -o cat -p warning | while read line; do
+        echo "Ignition: $line" >> /etc/issue.d/30_coreos_ignition_warnings.issue
+    done
 else
     nreboots=$(($(journalctl --list-boots | wc -l) - 1))
     [ "${nreboots}" -eq 1 ] && boot="boot" || boot="boots"

From e906a541901a9cdc232d6b680ec913ee16d95c5f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 6 Apr 2022 22:22:19 +0000
Subject: [PATCH 0889/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/136/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 526bc52896..9b6395b926 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -262,7 +262,7 @@
       "evra": "0.186-1.fc35.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.16-1.fc35.aarch64"
+      "evra": "2:5.17-1.fc35.aarch64"
     },
     "expat": {
       "evra": "2.4.7-1.fc35.aarch64"
@@ -1024,7 +1024,7 @@
       "evra": "3.2.3-8.fc35.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.0-1.fc35.aarch64"
+      "evra": "2:1.1.1-1.fc35.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.15.6-0.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-05T20:53:33Z",
+    "generated": "2022-04-06T20:56:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-04T22:17:19Z"
+        "generated": "2022-04-06T15:54:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-05T15:24:32Z"
+        "generated": "2022-04-06T18:55:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4223847fce..5d2b56e767 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -262,7 +262,7 @@
       "evra": "0.186-1.fc35.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.16-1.fc35.x86_64"
+      "evra": "2:5.17-1.fc35.x86_64"
     },
     "expat": {
       "evra": "2.4.7-1.fc35.x86_64"
@@ -1036,7 +1036,7 @@
       "evra": "3.2.3-8.fc35.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.0-1.fc35.x86_64"
+      "evra": "2:1.1.1-1.fc35.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.15.6-0.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-05T20:55:10Z",
+    "generated": "2022-04-06T21:01:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-04T22:18:36Z"
+        "generated": "2022-04-06T15:54:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-05T15:25:03Z"
+        "generated": "2022-04-06T18:55:58Z"
       }
     }
   }

From 675760dfbbfe835fa32ffed8f8e9562151a48cf3 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 6 Apr 2022 13:30:27 -0700
Subject: [PATCH 0890/2157] manifests/fedora-coreos-base: mask
 systemd-network-generator.service for only F35

---
 manifests/fedora-coreos-base.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 907fc997b2..2de65d0b0b 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -95,11 +95,14 @@ postprocess:
     systemctl mask systemd-repart.service
   # Mask systemd-network-generator. We need it for some things in the future
   # (https://github.com/systemd/systemd/pull/21766/files), but for now it's
-  # just failing on boot because of SELinux:
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1059#issuecomment-1013766710
+  # just failing for Fedora 35 on boot because of SELinux:
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1059#issuecomment-1090602396
   - |
     #!/usr/bin/env bash
-    systemctl mask systemd-network-generator.service
+    source /etc/os-release
+    if [ "$VERSION_ID" -eq "35" ]; then
+      systemctl mask systemd-network-generator.service
+    fi
 
   # Set the fallback hostname to `localhost`. This was needed in F33/F34
   # because a fallback hostname of `fedora` + systemd-resolved broke

From 94f1bfd8c463b280f385737e89165cd9306aad49 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 6 Apr 2022 15:13:15 -0400
Subject: [PATCH 0891/2157] tests/kola/kubernetes/kube-watch: stop journal
 grepping

The way we check the systemd unit status is racy. Instead, wait up to 30
seconds for the service to become active.

Instead of grepping the journal, check that a file it should have
touched was actually touched.

Closes: https://github.com/coreos/fedora-coreos-config/issues/1637
---
 tests/kola/kubernetes/kube-watch/config.bu |  5 +----
 tests/kola/kubernetes/kube-watch/test.sh   | 23 +++++++++++-----------
 2 files changed, 13 insertions(+), 15 deletions(-)

diff --git a/tests/kola/kubernetes/kube-watch/config.bu b/tests/kola/kubernetes/kube-watch/config.bu
index 9d902b03f9..c139236c7f 100644
--- a/tests/kola/kubernetes/kube-watch/config.bu
+++ b/tests/kola/kubernetes/kube-watch/config.bu
@@ -12,14 +12,11 @@ systemd:
     - name: kube-watch.service
       # This is for verifying that `kubernetes_file_t` labeled files can be
       # watched by systemd
-      # NOTE: we've observed a race where the journal message shows up as
-      # coming from `echo` rather than `kube-watch`, so we're embedding
-      # a UUID in the message to make it easier to find.
       # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
       # See: https://github.com/containers/container-selinux/issues/135
       contents: |
         [Service]
-        ExecStart=/usr/bin/echo "This is the kube-watch unique id: 27a259a8-7f2d-4144-8b8f-23dd201b630c"
+        ExecStart=/usr/bin/touch /var/tmp/kube-watched
         RemainAfterExit=yes
         Type=oneshot
         [Install]
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index dec4c1ae1d..90824e5fe3 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -17,21 +17,22 @@ ok "kube-watch.path successfully activated"
 touch /etc/kubernetes/kubeconfig
 ok "successfully created /etc/kubernetes/kubeconfig"
 
-# If we check the status too soon it could still be activating..
-# Sleep in a loop until it's done "activating"
-while [ "$(systemctl is-active kube-watch.service)" == "activating" ]; do
-    echo "kube-watch is activating. sleeping for 1 second"
+# Give the service 30 seconds to activate
+active=0
+for i in {1..30}; do
+    if systemctl is-active kube-watch.service; then
+        active=1
+        break
+    fi
     sleep 1
 done
-if [ "$(systemctl is-active kube-watch.service)" != "active" ]; then
+if [[ $active != 1 ]]; then
+    systemctl status kube-watch.service
     fatal "kube-watch.service did not successfully activate"
 fi
 ok "kube-watch.service activated successfully"
 
-# NOTE: we've observed a race where the journal message shows up as
-# coming from `echo` rather than `kube-watch`, so we're embedding
-# a UUID in the message to make it easier to find.
-if ! journalctl -o cat -b | grep 27a259a8-7f2d-4144-8b8f-23dd201b630c; then
-    fatal "kube-watch.service did not print message to journal"
+if ! test -e /var/tmp/kube-watched; then
+    fatal "/var/tmp/kube-watched does not exist"
 fi
-ok "Found message from kube-watch.service in journal"
+ok "/var/tmp/kube-watched exists"

From afe52a7dbc18b3a448b5b27ec3a799805f6aaba8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 7 Apr 2022 12:19:00 -0400
Subject: [PATCH 0892/2157] denylist: snooze ext.config.files.dracut-executable

Snooze the ext.config.files.dracut-executable test because a new
package came in that is causing it to fail. We'll investigate over
in https://github.com/coreos/fedora-coreos-tracker/issues/1155.
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d7dfaa2d68..8c022587de 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,3 +30,8 @@
     - testing-devel
     - next
     - next-devel
+- pattern: ext.config.files.dracut-executable
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1155
+  snooze: 2022-04-18
+  streams:
+    - rawhide

From 7b5b83380f92cc02f2383733684a1e7b46166f77 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Apr 2022 05:08:47 +0000
Subject: [PATCH 0893/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/140/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9b6395b926..0f9dd04aec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -490,7 +490,7 @@
       "evra": "0.8.6-5.fc35.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-4.fc35.aarch64"
+      "evra": "1.19.2-6.fc35.aarch64"
     },
     "less": {
       "evra": "590-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-06T20:56:40Z",
+    "generated": "2022-04-08T03:58:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-06T15:54:41Z"
+        "generated": "2022-04-07T14:18:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-06T18:55:26Z"
+        "generated": "2022-04-07T15:10:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5d2b56e767..aef8b35659 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -496,7 +496,7 @@
       "evra": "0.8.6-5.fc35.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-4.fc35.x86_64"
+      "evra": "1.19.2-6.fc35.x86_64"
     },
     "less": {
       "evra": "590-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-06T21:01:29Z",
+    "generated": "2022-04-08T03:58:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-06T15:54:25Z"
+        "generated": "2022-04-07T14:19:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-06T18:55:58Z"
+        "generated": "2022-04-07T15:11:30Z"
       }
     }
   }

From c3c84dba50a44e63f0471941a7044b300e9d75cc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Apr 2022 04:00:32 +0000
Subject: [PATCH 0894/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/143/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0f9dd04aec..7135c1646b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1168,10 +1168,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4621-1.fc35.noarch"
+      "evra": "2:8.2.4701-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4621-1.fc35.aarch64"
+      "evra": "2:8.2.4701-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-08T03:58:17Z",
+    "generated": "2022-04-09T02:50:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-07T14:18:04Z"
+        "generated": "2022-04-08T05:11:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-07T15:10:58Z"
+        "generated": "2022-04-08T20:17:13Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index aef8b35659..f9655b5053 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1180,10 +1180,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4621-1.fc35.noarch"
+      "evra": "2:8.2.4701-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4621-1.fc35.x86_64"
+      "evra": "2:8.2.4701-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-08T03:58:10Z",
+    "generated": "2022-04-09T02:50:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-07T14:19:28Z"
+        "generated": "2022-04-08T05:12:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-07T15:11:30Z"
+        "generated": "2022-04-08T20:17:44Z"
       }
     }
   }

From c15e76dd3c9f008a327f567666c26420e57228a6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 10 Apr 2022 22:10:37 +0000
Subject: [PATCH 0895/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/146/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7135c1646b..76cf29483a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1039,10 +1039,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.15-1.fc35.noarch"
+      "evra": "35.16-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.15-1.fc35.noarch"
+      "evra": "35.16-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1084,7 +1084,7 @@
       "evra": "3.36.0-3.fc35.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5-3.20210913gite048580.fc35.aarch64"
+      "evra": "4.5.1-1.fc35.aarch64"
     },
     "ssh-key-dir": {
       "evra": "0.1.2-8.fc35.aarch64"
@@ -1123,22 +1123,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.9-1.fc35.aarch64"
+      "evra": "249.11-1.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-09T02:50:39Z",
+    "generated": "2022-04-10T20:55:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-08T05:11:59Z"
+        "generated": "2022-04-09T04:04:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-08T20:17:13Z"
+        "generated": "2022-04-10T19:43:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f9655b5053..e2965825d6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1051,10 +1051,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.15-1.fc35.noarch"
+      "evra": "35.16-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.15-1.fc35.noarch"
+      "evra": "35.16-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1096,7 +1096,7 @@
       "evra": "3.36.0-3.fc35.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5-3.20210913gite048580.fc35.x86_64"
+      "evra": "4.5.1-1.fc35.x86_64"
     },
     "ssh-key-dir": {
       "evra": "0.1.2-8.fc35.x86_64"
@@ -1135,22 +1135,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.9-1.fc35.x86_64"
+      "evra": "249.11-1.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-09T02:50:31Z",
+    "generated": "2022-04-10T20:55:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-08T05:12:30Z"
+        "generated": "2022-04-09T04:04:34Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-08T20:17:44Z"
+        "generated": "2022-04-10T19:44:03Z"
       }
     }
   }

From e1d4617184bf8abf70f02c93b0fb4f1ad4e905c7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 11 Apr 2022 22:18:55 +0000
Subject: [PATCH 0896/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/150/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 76cf29483a..f0b2df1065 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.181.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.1-1.fc35.aarch64"
+      "evra": "1.6.2-1.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-10T20:55:20Z",
+    "generated": "2022-04-11T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-09T04:04:01Z"
+        "generated": "2022-04-11T16:05:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-10T19:43:32Z"
+        "generated": "2022-04-11T17:08:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e2965825d6..f2cbea15e7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.181.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.1-1.fc35.x86_64"
+      "evra": "1.6.2-1.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-10T20:55:44Z",
+    "generated": "2022-04-11T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-09T04:04:34Z"
+        "generated": "2022-04-11T16:07:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-10T19:44:03Z"
+        "generated": "2022-04-11T17:08:51Z"
       }
     }
   }

From 5c2aa41e22e481ea0c39fd66a810c6a15567665b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Apr 2022 22:04:14 +0000
Subject: [PATCH 0897/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/154/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f0b2df1065..36388e81ff 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.aarch64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-16.fc35.aarch64"
+      "evra": "1:2.3.3op2-17.fc35.aarch64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.aarch64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.6-1.fc35.aarch64"
+      "evra": "1.7.7-1.fc35.aarch64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.18-200.fc35.aarch64"
+      "evra": "5.16.19-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.18-200.fc35.aarch64"
+      "evra": "5.16.19-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.18-200.fc35.aarch64"
+      "evra": "5.16.19-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1156,7 +1156,7 @@
       "evra": "3.1.0-3.fc35.aarch64"
     },
     "tzdata": {
-      "evra": "2021e-1.fc35.noarch"
+      "evra": "2022a-1.fc35.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-3.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-11T20:53:16Z",
+    "generated": "2022-04-13T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-11T16:05:36Z"
+        "generated": "2022-04-12T22:09:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-11T17:08:19Z"
+        "generated": "2022-04-13T15:10:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f2cbea15e7..28aa232ab7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "2.4.3-1.fc35.x86_64"
     },
     "cups-libs": {
-      "evra": "1:2.3.3op2-16.fc35.x86_64"
+      "evra": "1:2.3.3op2-17.fc35.x86_64"
     },
     "curl": {
       "evra": "7.79.1-1.fc35.x86_64"
@@ -334,7 +334,7 @@
       "evra": "3.10.5-1.fc35.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.6-1.fc35.x86_64"
+      "evra": "1.7.7-1.fc35.x86_64"
     },
     "gawk": {
       "evra": "5.1.0-4.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.18-200.fc35.x86_64"
+      "evra": "5.16.19-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.18-200.fc35.x86_64"
+      "evra": "5.16.19-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.18-200.fc35.x86_64"
+      "evra": "5.16.19-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "3.1.0-3.fc35.x86_64"
     },
     "tzdata": {
-      "evra": "2021e-1.fc35.noarch"
+      "evra": "2022a-1.fc35.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-3.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-11T20:53:00Z",
+    "generated": "2022-04-13T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-11T16:07:12Z"
+        "generated": "2022-04-12T22:10:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-11T17:08:51Z"
+        "generated": "2022-04-13T15:11:02Z"
       }
     }
   }

From 03c5d9ba25ad23697c57580548a075095f58e4a3 Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Wed, 13 Apr 2022 10:49:24 -0400
Subject: [PATCH 0898/2157] 05core/usr/libexec: avoid displaying duplicated
 Ignition warnings

In Ignition, we've two config validation checks, the one after
fetching a config and the second after merging configs. Sometimes,
a warning goes away after merging, however, it's possible that a
warning appears in case merging creates a contradiction between two
fields. So this workflow eventually sends duplicate warnings in journal
entries. Hence, we need to avoid displaying duplicate Ignition warnings
on the console. Also, Ignition warnings are highlighted with yelllow.
---
 .../usr/libexec/coreos-ignition-write-issues  | 27 ++++++++++++++++---
 1 file changed, 23 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-write-issues b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
index 6a46935ac7..9ae7413f81 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
@@ -27,10 +27,29 @@ behavior may occur. Ignition is not designed to run more than once per system.
 ${RESET}
 EOF
     fi
-    # This is for displaying Ignition warnings on the console
-    # TODO: find a way to query journal entries recorded before the system switches to real root
-    journalctl -t ignition -o cat -p warning | while read line; do
-        echo "Ignition: $line" >> /etc/issue.d/30_coreos_ignition_warnings.issue
+    # In Ignition, we've two config validation checks, the one after 
+    # fetching a config and the second after merging configs. Sometimes, 
+    # a warning goes away after merging, however, it's possible that a 
+    # warning appears in case merging creates a contradiction between 
+    # two fields. So this workflow eventually sends duplicate warnings 
+    # in journal entries. Hence, we need to avoid displaying duplicate 
+    # Ignition warnings on the console.
+    # For e.g. In the journal entries, we might see the following logs:
+    #
+    # warning at $.systemd.units.0.contents, line 1 col 997: unit "echo@.service" is enabled, but has no install section so enable does nothing 
+    # warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing
+    # 
+    # In order to normalize these logs, we'd need to get rid of the line 
+    # and column numbers entirely using the sed command, and then use 
+    # `sort -u` to remove duplicate content. After this, we'd see the 
+    # following warning on the console:
+    #
+    # warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing
+    #
+    # TODO: find a way to query journal entries recorded before the 
+    # system switches to real root
+    journalctl -t ignition -o cat -p warning | sed -r 's/, line [0-9]+ col [0-9]+//g' | sort -u | while read line; do
+        echo -e "${WARN}Ignition: $line${RESET}" >> /etc/issue.d/30_coreos_ignition_warnings.issue
     done
 else
     nreboots=$(($(journalctl --list-boots | wc -l) - 1))

From 698aceb8e31933a1fcfd66e2959113ab4f8abcb1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Apr 2022 23:48:53 +0000
Subject: [PATCH 0899/2157] overrides: fast-track ostree-2022.2-1.fc35

---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..43548204f6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ostree:
+    evr: 2022.2-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-f22a8e8cec
+      type: fast-track
+  ostree-libs:
+    evr: 2022.2-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-f22a8e8cec
+      type: fast-track

From ccb548bdd5ea4dfb8547191f832736ec4dd91b21 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Apr 2022 18:05:59 +0000
Subject: [PATCH 0900/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 43548204f6..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,14 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ostree:
-    evr: 2022.2-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-f22a8e8cec
-      type: fast-track
-  ostree-libs:
-    evr: 2022.2-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-f22a8e8cec
-      type: fast-track
+packages: {}

From b3046bf386de18d3d8f9a2836350df62e3ae5662 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Apr 2022 22:06:38 +0000
Subject: [PATCH 0901/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/158/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 36388e81ff..63ac2f6f25 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -928,10 +928,10 @@
       "evra": "1.77-8.fc35.aarch64"
     },
     "ostree": {
-      "evra": "2022.1-1.fc35.aarch64"
+      "evra": "2022.2-1.fc35.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.1-1.fc35.aarch64"
+      "evra": "2022.2-1.fc35.aarch64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-13T20:53:11Z",
+    "generated": "2022-04-15T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-12T22:09:32Z"
+        "generated": "2022-04-14T02:58:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-13T15:10:30Z"
+        "generated": "2022-04-15T14:29:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 28aa232ab7..9ead9a3f84 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -940,10 +940,10 @@
       "evra": "1.77-8.fc35.x86_64"
     },
     "ostree": {
-      "evra": "2022.1-1.fc35.x86_64"
+      "evra": "2022.2-1.fc35.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.1-1.fc35.x86_64"
+      "evra": "2022.2-1.fc35.x86_64"
     },
     "p11-kit": {
       "evra": "0.23.22-4.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-13T20:53:00Z",
+    "generated": "2022-04-15T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-12T22:10:05Z"
+        "generated": "2022-04-14T03:00:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-13T15:11:02Z"
+        "generated": "2022-04-15T14:30:14Z"
       }
     }
   }

From e49baba31ba3cedbaaa5029f33bc69131f414a7d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 12 Apr 2022 23:10:35 -0400
Subject: [PATCH 0902/2157] manifests: work around non-executable initrd script
 in rawhide

The 95nvmf Dracut module has always shipped a non-executable script,
but we didn't notice until the rawhide nvme package caused that module
to start installing itself.  Fix the executable bit until the upstream
Dracut fix can propagate.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1155.
---
 kola-denylist.yaml                |  5 -----
 manifests/fedora-coreos-base.yaml | 14 ++++++++++++++
 2 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8c022587de..d7dfaa2d68 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,8 +30,3 @@
     - testing-devel
     - next
     - next-devel
-- pattern: ext.config.files.dracut-executable
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1155
-  snooze: 2022-04-18
-  streams:
-    - rawhide
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2de65d0b0b..51b21ef501 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -117,6 +117,20 @@ postprocess:
       echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
     fi
 
+  # Fedora 37 adds the nvmf dracut module to the initrd, causing
+  # ext.config.files.dracut-executable to notice that the module puts a
+  # non-executable file in /usr/sbin.  Dracut has been updated to fix the
+  # missing permission, and hopefully this can be removed for Fedora 38.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1155
+  # https://github.com/dracutdevs/dracut/pull/1777
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    source /etc/os-release
+    if [ ${VERSION_ID} -le 37 ]; then
+        chmod +x /usr/lib/dracut/modules.d/95nvmf/nvmf-autoconnect.sh
+    fi
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.

From 8425ff7cafcd82547e3273b279d215b5b74e4026 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 18 Apr 2022 22:09:48 +0000
Subject: [PATCH 0903/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/165/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 2 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 63ac2f6f25..15ec2ecbe7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.19-200.fc35.aarch64"
+      "evra": "5.16.20-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.19-200.fc35.aarch64"
+      "evra": "5.16.20-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.19-200.fc35.aarch64"
+      "evra": "5.16.20-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -721,7 +721,7 @@
       "evra": "2:4.15.6-0.fc35.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.21-1.fc35.aarch64"
+      "evra": "0.7.22-1.fc35.aarch64"
     },
     "libss": {
       "evra": "1.46.3-1.fc35.aarch64"
@@ -814,10 +814,10 @@
       "evra": "2.5.1-30.fc35.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220310-130.fc35.noarch"
+      "evra": "20220411-131.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220310-130.fc35.noarch"
+      "evra": "20220411-131.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.aarch64"
@@ -1012,16 +1012,16 @@
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.5-1.fc35.aarch64"
+      "evra": "2022.6-2.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.5-1.fc35.aarch64"
+      "evra": "2022.6-2.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rsync": {
-      "evra": "3.2.3-8.fc35.aarch64"
+      "evra": "3.2.3-9.fc35.aarch64"
     },
     "runc": {
       "evra": "2:1.1.1-1.fc35.aarch64"
@@ -1156,7 +1156,7 @@
       "evra": "3.1.0-3.fc35.aarch64"
     },
     "tzdata": {
-      "evra": "2022a-1.fc35.noarch"
+      "evra": "2022a-2.fc35.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-3.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-15T20:53:11Z",
+    "generated": "2022-04-18T20:55:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-14T02:58:53Z"
+        "generated": "2022-04-18T18:05:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-15T14:29:40Z"
+        "generated": "2022-04-18T16:49:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9ead9a3f84..fd6996433c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.19-200.fc35.x86_64"
+      "evra": "5.16.20-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.19-200.fc35.x86_64"
+      "evra": "5.16.20-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.19-200.fc35.x86_64"
+      "evra": "5.16.20-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -730,7 +730,7 @@
       "evra": "2.4.3-4.fc35.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.21-1.fc35.x86_64"
+      "evra": "0.7.22-1.fc35.x86_64"
     },
     "libss": {
       "evra": "1.46.3-1.fc35.x86_64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-30.fc35.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220310-130.fc35.noarch"
+      "evra": "20220411-131.fc35.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220310-130.fc35.noarch"
+      "evra": "20220411-131.fc35.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-2.fc35.x86_64"
@@ -1024,16 +1024,16 @@
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.5-1.fc35.x86_64"
+      "evra": "2022.6-2.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.5-1.fc35.x86_64"
+      "evra": "2022.6-2.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rsync": {
-      "evra": "3.2.3-8.fc35.x86_64"
+      "evra": "3.2.3-9.fc35.x86_64"
     },
     "runc": {
       "evra": "2:1.1.1-1.fc35.x86_64"
@@ -1168,7 +1168,7 @@
       "evra": "3.1.0-3.fc35.x86_64"
     },
     "tzdata": {
-      "evra": "2022a-1.fc35.noarch"
+      "evra": "2022a-2.fc35.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-3.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-15T20:53:06Z",
+    "generated": "2022-04-18T20:55:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-14T03:00:17Z"
+        "generated": "2022-04-18T18:05:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-15T14:30:14Z"
+        "generated": "2022-04-18T16:50:15Z"
       }
     }
   }

From 100a71d187917b3bcba4e4b8cad019882fc0e53b Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 19 Apr 2022 15:33:51 -0700
Subject: [PATCH 0904/2157] Re-enable kdump.crash for aarch64

---
 kola-denylist.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d7dfaa2d68..5a01fdba34 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -8,7 +8,6 @@
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:
-    - aarch64
     - ppc64le
 - pattern: multipath.day1
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105

From 5685ae6eae671857a9f6ca8271fe57ed0c0da50e Mon Sep 17 00:00:00 2001
From: Sohan Kunkerkar <sohank2602@gmail.com>
Date: Wed, 6 Apr 2022 16:17:25 -0400
Subject: [PATCH 0905/2157] tests: ensure that Ignition warnings are displayed
 on the console

Follow up to https://github.com/coreos/fedora-coreos-config/pull/1621#pullrequestreview-930860551
This adds kola test coverage for displaying Ignition warnings
on the console.
---
 tests/kola/clhm/ignition-warnings/config.bu   | 16 ++++++++++
 .../clhm/ignition-warnings/data/commonlib.sh  |  1 +
 tests/kola/clhm/ignition-warnings/test.sh     | 31 +++++++++++++++++++
 3 files changed, 48 insertions(+)
 create mode 100644 tests/kola/clhm/ignition-warnings/config.bu
 create mode 120000 tests/kola/clhm/ignition-warnings/data/commonlib.sh
 create mode 100755 tests/kola/clhm/ignition-warnings/test.sh

diff --git a/tests/kola/clhm/ignition-warnings/config.bu b/tests/kola/clhm/ignition-warnings/config.bu
new file mode 100644
index 0000000000..c5cddac199
--- /dev/null
+++ b/tests/kola/clhm/ignition-warnings/config.bu
@@ -0,0 +1,16 @@
+variant: fcos
+version: 1.1.0
+systemd:
+  # This systemd unit doesn't have the Install
+  # section in it, so as part of the validation 
+  # step, Ignition will throw the following warning:
+  # 'warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing'
+  units:
+    - name: echo.service
+      enabled: true
+      contents: |
+        [Unit]
+        Description=echo service template
+        [Service]
+        Type=oneshot
+        ExecStart=/bin/echo %i
diff --git a/tests/kola/clhm/ignition-warnings/data/commonlib.sh b/tests/kola/clhm/ignition-warnings/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/clhm/ignition-warnings/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
new file mode 100755
index 0000000000..6f6335040b
--- /dev/null
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+# kola: { "platforms": "qemu-unpriv", "allowConfigWarnings": true }
+# - platforms: qemu-unpriv 
+#   - This test should pass everywhere if it passes anywhere. 
+# - allowConfigWarnings: true 
+#   - We intentionally exclude the Install section from a systemd unit.  
+#     This is valid but not ideal, so Butane warns about it.  
+# This test ensures that Ignition warnings are displayed on the console.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+WARN='\033[0;33m' # yellow
+RESET='\033[0m' # reset
+
+warningsfile="/etc/issue.d/30_coreos_ignition_warnings.issue"
+tmpd=$(mktemp -d)
+expectedwarningsfile="${tmpd}"/expectedwarningsfile
+
+# Check for the motd file
+if ! test -f ${warningsfile}; then
+    fatal "not found Ignition warnings issue file"
+fi
+
+echo -e "${WARN}Ignition: warning at $.systemd.units.0.contents: unit \"echo.service\" is enabled, but has no install section so enable does nothing${RESET}" > $expectedwarningsfile
+
+if ! diff $expectedwarningsfile $warningsfile; then
+    fatal "Ignition warning did not show up as expected in issue.d"
+fi
+ok "Successfully displayed Ignition warning on the console"

From a276c9f20d3b38d9179156e6653aee400c45fc53 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Apr 2022 22:07:04 +0000
Subject: [PATCH 0906/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/171/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 39 ++++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 39 ++++++++++++++++++++------------------
 2 files changed, 42 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 15ec2ecbe7..4b3dd309d2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -394,7 +394,7 @@
       "evra": "1:2.06-10.fc35.aarch64"
     },
     "gzip": {
-      "evra": "1.10-5.fc35.aarch64"
+      "evra": "1.10-6.fc35.aarch64"
     },
     "hostname": {
       "evra": "3.23-5.fc35.aarch64"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-48.fc35.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "libjcat": {
       "evra": "0.1.9-1.fc35.aarch64"
@@ -733,16 +733,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "libstdc++": {
       "evra": "11.2.1-9.fc35.aarch64"
@@ -1090,31 +1090,34 @@
       "evra": "0.1.2-8.fc35.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-client": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-common": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
+    },
+    "sssd-idp": {
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.6.3-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc35.aarch64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.aarch64"
@@ -1205,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-18T20:55:50Z",
+    "generated": "2022-04-20T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-18T18:05:51Z"
+        "generated": "2022-04-20T19:14:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-18T16:49:43Z"
+        "generated": "2022-04-20T19:01:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fd6996433c..f4ee5c9696 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -400,7 +400,7 @@
       "evra": "1:2.06-10.fc35.x86_64"
     },
     "gzip": {
-      "evra": "1.10-5.fc35.x86_64"
+      "evra": "1.10-6.fc35.x86_64"
     },
     "hostname": {
       "evra": "3.23-5.fc35.x86_64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-48.fc35.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "libjcat": {
       "evra": "0.1.9-1.fc35.x86_64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-1.fc35.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "libstdc++": {
       "evra": "11.2.1-9.fc35.x86_64"
@@ -1102,31 +1102,34 @@
       "evra": "0.1.2-8.fc35.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-client": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-common": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
+    },
+    "sssd-idp": {
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.6.3-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc35.x86_64"
     },
     "stalld": {
       "evra": "1.14.1-1.fc35.x86_64"
@@ -1217,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-18T20:55:58Z",
+    "generated": "2022-04-20T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-18T18:05:47Z"
+        "generated": "2022-04-20T19:14:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-18T16:50:15Z"
+        "generated": "2022-04-20T19:01:36Z"
       }
     }
   }

From 79b122127f12dcba8325d1f97534bda619ec4c5c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 21 Apr 2022 08:54:58 -0400
Subject: [PATCH 0907/2157] denylist: extend snooze for
 ext.config.systemd.sytemd-journald-fix

The fix still hasn't made it all the way to Fedora 35.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5a01fdba34..e6ece8fb07 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,8 +21,8 @@
   arches:
   - ppc64le
 - pattern: ext.config.systemd.sytemd-journald-fix
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1061988853
-  snooze: 2022-04-20
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1105171521
+  snooze: 2022-05-05
   streams:
     - stable
     - testing

From 13106a6f4916815b0bed987cdb302904ccdf345d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 21 Apr 2022 13:05:11 -0400
Subject: [PATCH 0908/2157] 05user: report ENOSPC in initrd when entering
 e-shell

When a user tries to boot a live system with an appended rootfs without
enough RAM, the kernel will unpack the initramfs and rootfs until it
runs out of memory, and then continue booting with a partial OS image.
This causes random confusing boot errors, such as a service failing
because its binary is missing, or the rootfs squashfs failing to mount
with some error that looks like filesystem corruption.

Make this failure less confusing by having timeout.sh try to write a small
file, and if that fails, tell the user that they need more RAM.  Suppress
reporting of unit failures in this case, since the unit logs will just
muddy the issue.

This works reliably when the rootfs image can't be unpacked, i.e. when
the system has a moderate amount of RAM.  It doesn't work reliably when
we're so low on RAM that the initramfs image can't be unpacked (because
the compressed initramfs and rootfs images have used up our RAM); in that
case we might be missing important binaries/libraries and boot can fail
at any point.  It would be possible to construct a more robust detection
mechanism, e.g. by running a statically-linked program that's unpacked
first.  But this can't be completely robust (/sbin/init might not have
been unpacked, so we might not boot at all) and doesn't seem worth it for
now.

This code will also trigger if we run out of RAM in the
coreos.live.rootfs_url case, which is nice but less important, since that
case produces a clear error during rootfs fetch.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1055.
---
 .../99emergency-timeout/module-setup.sh       |  3 +-
 .../modules.d/99emergency-timeout/timeout.sh  | 28 +++++++++++++++----
 2 files changed, 25 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
index 63907da412..456111aab1 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
@@ -15,7 +15,8 @@ install_unit_wants() {
 install() {
     inst_multiple \
         cut \
-        date
+        date \
+        dd
 
     inst_hook emergency 99 "${moddir}/timeout.sh"
 
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh
index 85fb3d761d..ec0122b8a0 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh
@@ -53,11 +53,29 @@ downloaded from GitHub:
 
 EOF
         fi
-        echo "Displaying logs from failed units: ${failed}"
-        for unit in ${failed}; do
-            # 10 lines should be enough for everyone
-            journalctl -b --no-pager --no-hostname -u ${unit} -n 10
-        done
+
+        # If this is a live boot, check for ENOSPC in initramfs filesystem
+        # Try creating a 64 KiB file, in case a small file was deleted on
+        # service failure
+        # https://github.com/coreos/fedora-coreos-tracker/issues/1055
+        if [ -f /etc/coreos-live-initramfs ] && \
+            ! dd if=/dev/zero of=/tmp/check-space bs=4K count=16 2>/dev/null; then
+            cat <<EOF
+------
+Ran out of memory when unpacking initrd filesystem.  Ensure your system has
+at least 2 GiB RAM if booting with coreos.live.rootfs_url, or 4 GiB otherwise.
+------
+
+EOF
+            # Don't show logs from failed units, since they'll just be
+            # random misleading errors.
+        else
+            echo "Displaying logs from failed units: ${failed}"
+            for unit in ${failed}; do
+                # 10 lines should be enough for everyone
+                journalctl -b --no-pager --no-hostname -u ${unit} -n 10
+            done
+        fi
     fi
 
     # Regularly prompt with time remaining.  This ensures the prompt doesn't

From c3f518549fc06cf7859f1574e5e2ff1270966665 Mon Sep 17 00:00:00 2001
From: Steven Presti <spresti@redhat.com>
Date: Tue, 12 Apr 2022 15:31:42 -0400
Subject: [PATCH 0909/2157] 05core: remove automatic reboot after timeout

The reboot and consequently the timeout masked valuable debug
information. The reboot also caused some cascading errors due to the
fact that the system would try and run as if all required dependencies
were satisfied during the first boot.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/928.
---
 .../emergency-shell.sh}                       | 47 ++-----------------
 .../ignition-virtio-dump-journal.service      |  0
 .../ignition-virtio-dump-journal.sh           |  0
 .../module-setup.sh                           |  2 +-
 4 files changed, 4 insertions(+), 45 deletions(-)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{99emergency-timeout/timeout.sh => 99emergency-shell-setup/emergency-shell.sh} (63%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{99emergency-timeout => 99emergency-shell-setup}/ignition-virtio-dump-journal.service (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{99emergency-timeout => 99emergency-shell-setup}/ignition-virtio-dump-journal.sh (100%)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{99emergency-timeout => 99emergency-shell-setup}/module-setup.sh (93%)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
similarity index 63%
rename from overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
index ec0122b8a0..a0884a7583 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/timeout.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
@@ -1,7 +1,4 @@
-# Before starting the emergency shell, prompt the user to press Enter.
-# If they don't, reboot the system.
-#
-# Assumes /bin/sh is bash.
+# Display relevant errors then enter emergency shell
 
 # _wait_for_journalctl_to_stop will block until either:
 # - no messages have appeared in journalctl for the past 5 seconds
@@ -22,13 +19,7 @@ _wait_for_journalctl_to_stop() {
     done
 }
 
-_prompt_for_timeout() {
-    local timeout=300
-    local interval=15
-
-    if [[ -e /.emergency-shell-confirmed ]]; then
-        return
-    fi
+_display_relevant_errors() { 
     failed=$(systemctl --failed --no-legend --plain | cut -f 1 -d ' ')
     if [ -n "${failed}" ]; then
         # Something failed, suppress kernel logs so that it's more likely
@@ -77,41 +68,9 @@ EOF
             done
         fi
     fi
-
-    # Regularly prompt with time remaining.  This ensures the prompt doesn't
-    # get lost among kernel and systemd messages, and makes it clear what's
-    # going on if the user just connected a serial console.
-    while [[ $timeout > 0 ]]; do
-        local m=$(( $timeout / 60 ))
-        local s=$(( $timeout % 60 ))
-        local m_label="minutes"
-        if [[ $m = 1 ]]; then
-            m_label="minute"
-        fi
-
-        if [[ $s != 0 ]]; then
-            echo -n -e "Press Enter for emergency shell or wait $m $m_label $s seconds for reboot.      \r"
-        else
-            echo -n -e "Press Enter for emergency shell or wait $m $m_label for reboot.                 \r"
-        fi
-
-        local anything
-        if read -t $interval anything; then
-            > /.emergency-shell-confirmed
-            return
-        fi
-        timeout=$(( $timeout - $interval ))
-    done
-
-    echo -e "\nRebooting."
-    # This is not very nice, but since reboot.target likely conflicts with
-    # the existing goal target wrt the desired state of shutdown.target,
-    # there doesn't seem to be a better option.
-    systemctl reboot --force
-    exit 0
 }
 
 # If we're invoked from a dracut breakpoint rather than
 # dracut-emergency.service, we won't have a controlling terminal and stdio
 # won't be connected to it. Explicitly read/write /dev/console.
-_prompt_for_timeout < /dev/console > /dev/console
+_display_relevant_errors < /dev/console > /dev/console
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/ignition-virtio-dump-journal.service b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/ignition-virtio-dump-journal.service
rename to overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/ignition-virtio-dump-journal.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/ignition-virtio-dump-journal.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/module-setup.sh
similarity index 93%
rename from overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/module-setup.sh
index 456111aab1..df52cba573 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-timeout/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/module-setup.sh
@@ -18,7 +18,7 @@ install() {
         date \
         dd
 
-    inst_hook emergency 99 "${moddir}/timeout.sh"
+    inst_hook emergency 99 "${moddir}/emergency-shell.sh"
 
     inst_script "$moddir/ignition-virtio-dump-journal.sh" "/usr/bin/ignition-virtio-dump-journal"
     install_unit_wants ignition-virtio-dump-journal.service emergency.target

From e83eaa9763a276040fa068ec61885050bacc7ac3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 22 Apr 2022 09:17:39 -0400
Subject: [PATCH 0910/2157] Revert "overlay: add new module for installing
 Azure udev rules"

The WALinuxAgent-udev rpm now installs the udev rules into the
initramfs [1] so we can drop this glue code.

This reverts commit 8c07b7391473910ba3884ee0d3763743805ac78f.

[1] https://src.fedoraproject.org/rpms/WALinuxAgent/c/521b67bc8575f53a30b4b2c4e63292e67483a4e1?branch=rawhide
---
 .../25coreos-azure-udev/module-setup.sh        | 18 ------------------
 1 file changed, 18 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh
deleted file mode 100644
index e796e89267..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/25coreos-azure-udev/module-setup.sh
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
-# ex: ts=8 sw=4 sts=4 et filetype=sh
-
-# We want to provide Azure udev rules as part of the initrd, so that Ignition
-# is able to detect disks and act on them.
-#
-# If the WALinuxAgent-udev package is changed to install the udev rules as
-# part of the initramfs, we should drop this module.
-#
-# See https://bugzilla.redhat.com/show_bug.cgi?id=1909287
-# See also https://bugzilla.redhat.com/show_bug.cgi?id=1756173
-
-install() {
-    inst_multiple \
-        /usr/lib/udev/rules.d/66-azure-storage.rules \
-        /usr/lib/udev/rules.d/99-azure-product-uuid.rules
-}

From 8a6cf60ab045a74b8d2ce6b20d813322008eaa0e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 23 Apr 2022 22:08:28 +0000
Subject: [PATCH 0911/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/181/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 2 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4b3dd309d2..76382bfa5d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -343,7 +343,7 @@
       "evra": "1:1.22-1.fc35.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.8-2.fc35.aarch64"
+      "evra": "1.0.9-1.fc35.aarch64"
     },
     "gettext": {
       "evra": "0.21-8.fc35.aarch64"
@@ -1126,22 +1126,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.11-1.fc35.aarch64"
+      "evra": "249.11-2.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1171,10 +1171,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4701-1.fc35.noarch"
+      "evra": "2:8.2.4804-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4701-1.fc35.aarch64"
+      "evra": "2:8.2.4804-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "5.12.0-2.fc35.aarch64"
     },
     "xz": {
-      "evra": "5.2.5-7.fc35.aarch64"
+      "evra": "5.2.5-9.fc35.aarch64"
     },
     "xz-libs": {
-      "evra": "5.2.5-7.fc35.aarch64"
+      "evra": "5.2.5-9.fc35.aarch64"
     },
     "yajl": {
       "evra": "2.1.0-17.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-20T20:53:23Z",
+    "generated": "2022-04-23T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-20T19:14:22Z"
+        "generated": "2022-04-22T21:10:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-20T19:01:03Z"
+        "generated": "2022-04-23T18:55:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f4ee5c9696..23244a9941 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -343,7 +343,7 @@
       "evra": "1:1.22-1.fc35.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.8-2.fc35.x86_64"
+      "evra": "1.0.9-1.fc35.x86_64"
     },
     "gettext": {
       "evra": "0.21-8.fc35.x86_64"
@@ -1138,22 +1138,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.11-1.fc35.x86_64"
+      "evra": "249.11-2.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1183,10 +1183,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4701-1.fc35.noarch"
+      "evra": "2:8.2.4804-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4701-1.fc35.x86_64"
+      "evra": "2:8.2.4804-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1198,10 +1198,10 @@
       "evra": "5.12.0-2.fc35.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-7.fc35.x86_64"
+      "evra": "5.2.5-9.fc35.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-7.fc35.x86_64"
+      "evra": "5.2.5-9.fc35.x86_64"
     },
     "yajl": {
       "evra": "2.1.0-17.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-20T20:53:11Z",
+    "generated": "2022-04-23T20:52:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-20T19:14:17Z"
+        "generated": "2022-04-22T21:11:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-20T19:01:36Z"
+        "generated": "2022-04-23T18:56:20Z"
       }
     }
   }

From a988ddb23ebbe1c6417283152afb7b473702fcee Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 24 Apr 2022 22:05:10 +0000
Subject: [PATCH 0912/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/183/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 76382bfa5d..3a513a6e6b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.27-1.fc35.aarch64"
+      "evra": "32:9.16.28-1.fc35.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.27-1.fc35.noarch"
+      "evra": "32:9.16.28-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.27-1.fc35.aarch64"
+      "evra": "32:9.16.28-1.fc35.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.aarch64"
@@ -358,13 +358,13 @@
       "evra": "2.70.5-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-29.fc35.aarch64"
+      "evra": "2.34-30.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-29.fc35.aarch64"
+      "evra": "2.34-30.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-29.fc35.aarch64"
+      "evra": "2.34-30.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.20-200.fc35.aarch64"
+      "evra": "5.17.4-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.16.20-200.fc35.aarch64"
+      "evra": "5.17.4-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.16.20-200.fc35.aarch64"
+      "evra": "5.17.4-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-23T20:53:11Z",
+    "generated": "2022-04-24T20:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-22T21:10:22Z"
+        "generated": "2022-04-23T22:12:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-23T18:55:46Z"
+        "generated": "2022-04-24T19:33:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 23244a9941..e5e4145a74 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,13 +52,13 @@
       "evra": "1:2.11-3.fc35.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.27-1.fc35.x86_64"
+      "evra": "32:9.16.28-1.fc35.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.27-1.fc35.noarch"
+      "evra": "32:9.16.28-1.fc35.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.27-1.fc35.x86_64"
+      "evra": "32:9.16.28-1.fc35.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-1.fc35.x86_64"
@@ -358,13 +358,13 @@
       "evra": "2.70.5-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-29.fc35.x86_64"
+      "evra": "2.34-30.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-29.fc35.x86_64"
+      "evra": "2.34-30.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-29.fc35.x86_64"
+      "evra": "2.34-30.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.16.20-200.fc35.x86_64"
+      "evra": "5.17.4-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.16.20-200.fc35.x86_64"
+      "evra": "5.17.4-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.16.20-200.fc35.x86_64"
+      "evra": "5.17.4-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-23T20:52:35Z",
+    "generated": "2022-04-24T20:52:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-22T21:11:17Z"
+        "generated": "2022-04-23T22:13:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-23T18:56:20Z"
+        "generated": "2022-04-24T19:34:17Z"
       }
     }
   }

From 6560587f7a54de00a60374a302d2958f1ece5b12 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 25 Apr 2022 13:48:34 -0400
Subject: [PATCH 0913/2157] denylist: drop multipath.day1 snooze

It's no longer failing so we can drop the denial.

xref: https://github.com/coreos/fedora-coreos-tracker/issues/1105#issuecomment-1108861785
---
 kola-denylist.yaml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e6ece8fb07..14e7fd3be2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -9,9 +9,6 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:
     - ppc64le
-- pattern: multipath.day1
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1105
-  snooze: 2022-03-21
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:

From 0f308733552af35b4fa262d647fd2bca347f74ca Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 25 Apr 2022 21:22:10 -0700
Subject: [PATCH 0914/2157] Disable kdump.crash test for aws

---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 14e7fd3be2..266467ec25 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,6 +5,12 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
+  arches:
+    - aarch64
+  platforms:
+    - aws
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:

From d80e22d9f1a8b522e7f4b990b81991a8f40b3d07 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 26 Apr 2022 22:09:39 +0000
Subject: [PATCH 0915/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/188/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3a513a6e6b..fc4d2d3372 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.181.0-1.fc35.noarch"
+      "evra": "2:2.183.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.2-1.fc35.aarch64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-1.fc35.aarch64"
+      "evra": "1.12.7-2.fc35.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.aarch64"
@@ -850,7 +850,7 @@
       "evra": "4.2-1.fc35.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.12-1.fc35.aarch64"
+      "evra": "20.10.14-1.fc35.aarch64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.8-8.fc35.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.16-1.fc35.noarch"
+      "evra": "35.17-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.16-1.fc35.noarch"
+      "evra": "35.17-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1195,7 +1195,7 @@
       "evra": "2.1.0-17.fc35.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.1-1.fc35.aarch64"
+      "evra": "1.2.2-1.fc35.aarch64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-24T20:53:10Z",
+    "generated": "2022-04-26T20:53:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-23T22:12:20Z"
+        "generated": "2022-04-26T19:15:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-24T19:33:43Z"
+        "generated": "2022-04-26T13:50:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e5e4145a74..223f454a5d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.181.0-1.fc35.noarch"
+      "evra": "2:2.183.0-1.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.2-1.fc35.x86_64"
@@ -307,7 +307,7 @@
       "evra": "1:4.8.0-4.fc35.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-1.fc35.x86_64"
+      "evra": "1.12.7-2.fc35.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-3.fc35.x86_64"
@@ -862,7 +862,7 @@
       "evra": "2:2.1-47.1.fc35.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.12-1.fc35.x86_64"
+      "evra": "20.10.14-1.fc35.x86_64"
     },
     "mokutil": {
       "evra": "2:0.5.0-1.fc35.x86_64"
@@ -1051,10 +1051,10 @@
       "evra": "4.8-8.fc35.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.16-1.fc35.noarch"
+      "evra": "35.17-1.fc35.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.16-1.fc35.noarch"
+      "evra": "35.17-1.fc35.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-2.fc35.noarch"
@@ -1207,7 +1207,7 @@
       "evra": "2.1.0-17.fc35.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.1-1.fc35.x86_64"
+      "evra": "1.2.2-1.fc35.x86_64"
     },
     "zincati": {
       "evra": "0.0.24-1.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-24T20:52:34Z",
+    "generated": "2022-04-26T20:52:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-23T22:13:21Z"
+        "generated": "2022-04-26T19:17:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-24T19:34:17Z"
+        "generated": "2022-04-26T13:50:35Z"
       }
     }
   }

From 013432dd427445209c7d594bc8c2999f8b53577f Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Fri, 22 Apr 2022 15:32:19 -0400
Subject: [PATCH 0916/2157] manifests: drop the multipath.socket workaround on
 RHCOS

The fixed systemd unit for the multipathd.socket is now present in
RHEL 8.6, RHEL 8.5.z, and RHEL 8.4.z EUS, so let's stop applying
the workaround on RHCOS systems.

See: https://bugzilla.redhat.com/show_bug.cgi?id=2008101
See: https://bugzilla.redhat.com/show_bug.cgi?id=2054877
See: https://bugzilla.redhat.com/show_bug.cgi?id=2054876
---
 manifests/shared-workarounds.yaml | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index fe78a62b95..a2928d0db1 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -8,21 +8,16 @@ postprocess:
   - |
     #!/usr/bin/env bash
     set -xeuo pipefail
-    # Operate on RHCOS and FCOS. 
+    # Operate on RHCOS and FCOS.
     source /etc/os-release
     if [[ ${NAME} =~ "Fedora" ]]; then
         # FCOS: Only operate on releases before F36. The fix has landed
         # in F36+ and there is no need for a workaround.
         [ ${VERSION_ID} -le 35 ] || exit 0
     elif [[ "${ID}" == "rhel" ]]; then
-        # RHCOS: Only operate on releases before RHEL8.5. The fix has 
-        # landed in RHEL8.6+ and there is no need for a workaround.
-        # https://bugzilla.redhat.com/show_bug.cgi?id=2008101
-        # Fixed RPM version: device-mapper-multipath-0.8.4-18.el8
-        # Using generic redhat-release package according to 
-        # https://github.com/openshift/os/pull/713, should check RHEL version
-        # with VERSION_ID
-        [ ${VERSION_ID//.} -le 85 ] || exit 0
+        # RHCOS: The fix has landed in RHEL 8.6, 8.5.z, 8.4.z EUS, so we should
+        # be able to just exit out safely.
+        exit 0
     fi
     mkdir /usr/lib/systemd/system/multipathd.socket.d
     cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'
@@ -45,7 +40,7 @@ postprocess:
     if [[ ${NAME} =~ "Fedora" ]]; then
         # FCOS: This fix has landed in F36+
         [ ${VERSION_ID} -le 35 ] || exit 0
-    else 
+    else
         # RHCOS: The fix hasn't landed in any version of RHEL yet
         true
     fi

From 96241aec21f7400158a0c149270e335d8fba92c7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 20 Apr 2022 16:45:04 -0400
Subject: [PATCH 0917/2157] 05core: add ignition-delete-config.service to
 default preset

For https://github.com/coreos/ignition/pull/1350.
---
 .../05core/usr/lib/systemd/system-preset/40-coreos.preset      | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 818affa161..9c0a2761c4 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -7,6 +7,9 @@ enable console-login-helper-messages-gensnippet-ssh-keys.service
 enable coreos-update-ca-trust.service
 # https://github.com/coreos/ignition/issues/1125
 enable coreos-ignition-firstboot-complete.service
+# Delete Ignition config from provider on platforms where it's possible
+# https://github.com/coreos/ignition/pull/1350
+enable ignition-delete-config.service
 # Boot checkin services for cloud providers.
 enable afterburn-checkin.service
 enable afterburn-firstboot-checkin.service

From 812192f5781d6cb39c0edce764d95c01d75dabe7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 27 Apr 2022 21:09:43 +0000
Subject: [PATCH 0918/2157] overrides: fast-track
 rust-coreos-installer-0.14.0-1.fc35

---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..80f43aa50e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.14.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b5d122ac00
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.14.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b5d122ac00
+      type: fast-track

From ae62e5b820a5f07ea4c13b64883aa03ae9937b62 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 29 Apr 2022 14:11:59 -0400
Subject: [PATCH 0919/2157] overrides: fast-track systemd-249.12-3.fc35

This fixes the journald issues we've been seeing because it includes
the upstream fix from https://github.com/systemd/systemd/pull/22861

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1108
---
 kola-denylist.yaml           |  9 ---------
 manifest-lock.overrides.yaml | 36 ++++++++++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+), 9 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 266467ec25..0252a3e837 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,12 +23,3 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le
-- pattern: ext.config.systemd.sytemd-journald-fix
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1108#issuecomment-1105171521
-  snooze: 2022-05-05
-  streams:
-    - stable
-    - testing
-    - testing-devel
-    - next
-    - next-devel
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 80f43aa50e..1bab41e76b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,39 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b5d122ac00
       type: fast-track
+  systemd:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track
+  systemd-container:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track
+  systemd-libs:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track
+  systemd-pam:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track
+  systemd-resolved:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track
+  systemd-udev:
+    evr: 249.12-3.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
+      type: fast-track

From 8d4d1ec1989d98a5a3d0c8e95215ae7c31688e4e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 29 Apr 2022 14:13:37 -0400
Subject: [PATCH 0920/2157] Revert "15fcos: add
 coreos-fix-systemd-journald.service"

This is no longer needed because the fix from upstream [1]
has made it into systemd-249.12-3.fc35. See [2]

This reverts commit a456f26a3f6fa4e77ce92a4cb83ea77c9f1b7ee8.

[1] https://github.com/systemd/systemd/pull/22861
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1108
---
 .../lib/systemd/system-preset/45-fcos.preset  |  2 --
 .../coreos-fix-systemd-journald.service       | 13 ------------
 .../usr/libexec/coreos-fix-systemd-journald   | 20 ------------------
 tests/kola/systemd/data/commonlib.sh          |  1 -
 tests/kola/systemd/sytemd-journald-fix        | 21 -------------------
 5 files changed, 57 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
 delete mode 100755 overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
 delete mode 120000 tests/kola/systemd/data/commonlib.sh
 delete mode 100755 tests/kola/systemd/sytemd-journald-fix

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index 6cdbfa3400..c1d3e4dc9a 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,5 +3,3 @@ enable fedora-coreos-pinger.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
-# Fix systemd-journald if required
-enable coreos-fix-systemd-journald.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
deleted file mode 100644
index 0c28e66260..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-systemd-journald.service
+++ /dev/null
@@ -1,13 +0,0 @@
-[Unit]
-Description=Fix systemd-journald after switch root on Fedora CoreOS
-Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1108
-DefaultDependencies=no
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/coreos-fix-systemd-journald
-RemainAfterExit=yes
-# can't send output to the journal because we might kill it
-StandardOutput=file:/run/coreos-fix-systemd-journald-stdout
-StandardError=file:/run/coreos-fix-systemd-journald-stderr
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald b/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
deleted file mode 100755
index 764141000a..0000000000
--- a/overlay.d/15fcos/usr/libexec/coreos-fix-systemd-journald
+++ /dev/null
@@ -1,20 +0,0 @@
-#!/usr/bin/bash
-# This is a workaround for cases where systemd-journald can fail to
-# process SIGTERM and get left over from the initramfs into the real
-# root. https://github.com/coreos/fedora-coreos-tracker/issues/1108
-set -eux -o pipefail
-
-# We find the PID of the systemd-journald process and then determine
-# if it's the one from the initramfs by checking the SELinux context.
-# If the context is `kernel_t` then we know it's been leaked from the
-# initramfs and it must be taken out. We must use SIGKILL because the
-# reason we're here in the first place is because it's not responding
-# to SIGTERM.
-jrnlpid=$(systemctl show --property=MainPID --value systemd-journald.service)
-context=$(ps --no-headers --format label $jrnlpid)
-if [ "${context}" == "system_u:system_r:kernel_t:s0" ]; then
-    kill -s KILL $jrnlpid
-    # Leave behind evidence that we had to fix things
-    mkdir -p /run/coreos
-    touch /run/coreos/coreos-fix-systemd-journald
-fi
diff --git a/tests/kola/systemd/data/commonlib.sh b/tests/kola/systemd/data/commonlib.sh
deleted file mode 120000
index 1742d51e67..0000000000
--- a/tests/kola/systemd/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/systemd/sytemd-journald-fix b/tests/kola/systemd/sytemd-journald-fix
deleted file mode 100755
index 00dd6e749a..0000000000
--- a/tests/kola/systemd/sytemd-journald-fix
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false }
-# This test identifies when the workaround for [1] gets used. We still
-# want to know how when it happens until it gets fixed. We can
-# denylist/snooze this test if we decide we don't want to see it for
-# a while.
-# [1] https://github.com/coreos/fedora-coreos-tracker/issues/1108
-# 
-# - exclusive: false
-#   - This problem really only happens for non-exclusive tests that 
-#     we've seen so far.
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-if [ -f /run/coreos/coreos-fix-systemd-journald ]; then
-    echo "Workaround for https://github.com/coreos/fedora-coreos-tracker/issues/1108 used"
-    fatal "Error: The systemd-journald workaround was needed"
-fi
-ok "No systemd-journald workaround used"

From 736a60640c794830f7444ab79f582a31f3ba497c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Apr 2022 22:55:30 +0000
Subject: [PATCH 0921/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/198/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 38 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 38 +++++++++++++++++++-------------------
 2 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fc4d2d3372..54263a119f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.183.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-1.fc35.aarch64"
+      "evra": "1.6.2-2.fc35.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.aarch64"
@@ -136,10 +136,10 @@
       "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.13.1-3.fc35.aarch64"
+      "evra": "0.14.0-1.fc35.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.13.1-3.fc35.aarch64"
+      "evra": "0.14.0-1.fc35.aarch64"
     },
     "coreutils": {
       "evra": "8.32-33.fc35.aarch64"
@@ -574,13 +574,13 @@
       "evra": "1.4-5.fc35.aarch64"
     },
     "libgcc": {
-      "evra": "11.2.1-9.fc35.aarch64"
+      "evra": "11.3.1-2.fc35.aarch64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.aarch64"
     },
     "libgomp": {
-      "evra": "11.2.1-9.fc35.aarch64"
+      "evra": "11.3.1-2.fc35.aarch64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.aarch64"
@@ -745,7 +745,7 @@
       "evra": "2.7.0-1.fc35.aarch64"
     },
     "libstdc++": {
-      "evra": "11.2.1-9.fc35.aarch64"
+      "evra": "11.3.1-2.fc35.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.aarch64"
@@ -967,10 +967,10 @@
       "evra": "1.8.0-1.fc35.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.4-1.fc35.aarch64"
+      "evra": "3:3.4.7-1.fc35.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.4-1.fc35.aarch64"
+      "evra": "3:3.4.7-1.fc35.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.aarch64"
@@ -1012,10 +1012,10 @@
       "evra": "4.17.0-4.fc35.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.6-2.fc35.aarch64"
+      "evra": "2022.8-1.fc35.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.6-2.fc35.aarch64"
+      "evra": "2022.8-1.fc35.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.aarch64"
@@ -1126,22 +1126,22 @@
       "evra": "1.9.7p2-2.fc35.aarch64"
     },
     "systemd": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "systemd-container": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.11-2.fc35.aarch64"
+      "evra": "249.12-3.fc35.aarch64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-26T20:53:11Z",
+    "generated": "2022-04-29T21:46:11Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-26T19:15:44Z"
+        "generated": "2022-04-29T19:04:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-26T13:50:04Z"
+        "generated": "2022-04-29T06:51:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 223f454a5d..f739883e9b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -127,7 +127,7 @@
       "evra": "2:2.183.0-1.fc35.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-1.fc35.x86_64"
+      "evra": "1.6.2-2.fc35.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc35.x86_64"
@@ -136,10 +136,10 @@
       "evra": "4:1-45.fc35.noarch"
     },
     "coreos-installer": {
-      "evra": "0.13.1-3.fc35.x86_64"
+      "evra": "0.14.0-1.fc35.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.13.1-3.fc35.x86_64"
+      "evra": "0.14.0-1.fc35.x86_64"
     },
     "coreutils": {
       "evra": "8.32-33.fc35.x86_64"
@@ -580,13 +580,13 @@
       "evra": "1.4-5.fc35.x86_64"
     },
     "libgcc": {
-      "evra": "11.2.1-9.fc35.x86_64"
+      "evra": "11.3.1-2.fc35.x86_64"
     },
     "libgcrypt": {
       "evra": "1.9.4-1.fc35.x86_64"
     },
     "libgomp": {
-      "evra": "11.2.1-9.fc35.x86_64"
+      "evra": "11.3.1-2.fc35.x86_64"
     },
     "libgpg-error": {
       "evra": "1.43-1.fc35.x86_64"
@@ -754,7 +754,7 @@
       "evra": "2.7.0-1.fc35.x86_64"
     },
     "libstdc++": {
-      "evra": "11.2.1-9.fc35.x86_64"
+      "evra": "11.3.1-2.fc35.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.3-2.fc35.x86_64"
@@ -979,10 +979,10 @@
       "evra": "1.8.0-1.fc35.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.4-1.fc35.x86_64"
+      "evra": "3:3.4.7-1.fc35.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.4-1.fc35.x86_64"
+      "evra": "3:3.4.7-1.fc35.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-1.fc35.x86_64"
@@ -1024,10 +1024,10 @@
       "evra": "4.17.0-4.fc35.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.6-2.fc35.x86_64"
+      "evra": "2022.8-1.fc35.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.6-2.fc35.x86_64"
+      "evra": "2022.8-1.fc35.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-4.fc35.x86_64"
@@ -1138,22 +1138,22 @@
       "evra": "1.9.7p2-2.fc35.x86_64"
     },
     "systemd": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "systemd-container": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.11-2.fc35.x86_64"
+      "evra": "249.12-3.fc35.x86_64"
     },
     "tar": {
       "evra": "2:1.34-2.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-26T20:52:34Z",
+    "generated": "2022-04-29T21:45:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-26T19:17:19Z"
+        "generated": "2022-04-29T19:05:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-26T13:50:35Z"
+        "generated": "2022-04-29T06:52:03Z"
       }
     }
   }

From 54f2cbaa63c5c8207f8185217f05830393940ca2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Apr 2022 21:03:53 +0000
Subject: [PATCH 0922/2157] overrides: fast-track rust-afterburn-5.3.0-1.fc35

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1bab41e76b..d98bb63053 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,18 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  afterburn:
+    evr: 5.3.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-bec21e906f
+      reason: https://github.com/coreos/afterburn/issues/733
+      type: fast-track
+  afterburn-dracut:
+    evr: 5.3.0-1.fc35
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-bec21e906f
+      reason: https://github.com/coreos/afterburn/issues/733
+      type: fast-track
   coreos-installer:
     evr: 0.14.0-1.fc35
     metadata:

From 8fc657ebb9617a1ab9f1b513123d19ea7775ac68 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 30 Apr 2022 22:10:23 +0000
Subject: [PATCH 0923/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/200/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 2 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 54263a119f..d5b310ba65 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.aarch64"
     },
     "afterburn": {
-      "evra": "5.2.0-4.fc35.aarch64"
+      "evra": "5.3.0-1.fc35.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-4.fc35.aarch64"
+      "evra": "5.3.0-1.fc35.aarch64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.aarch64"
@@ -358,13 +358,13 @@
       "evra": "2.70.5-1.fc35.aarch64"
     },
     "glibc": {
-      "evra": "2.34-30.fc35.aarch64"
+      "evra": "2.34-32.fc35.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-30.fc35.aarch64"
+      "evra": "2.34-32.fc35.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-30.fc35.aarch64"
+      "evra": "2.34-32.fc35.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.aarch64"
@@ -718,7 +718,7 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.6-0.fc35.aarch64"
+      "evra": "2:4.15.7-0.fc35.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc35.aarch64"
@@ -793,7 +793,7 @@
       "evra": "0.3.2-2.fc35.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.6-0.fc35.aarch64"
+      "evra": "2:4.15.7-0.fc35.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.aarch64"
@@ -1027,13 +1027,13 @@
       "evra": "2:1.1.1-1.fc35.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.6-0.fc35.aarch64"
+      "evra": "2:4.15.7-0.fc35.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.6-0.fc35.noarch"
+      "evra": "2:4.15.7-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.6-0.fc35.aarch64"
+      "evra": "2:4.15.7-0.fc35.aarch64"
     },
     "sed": {
       "evra": "4.8-8.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-29T21:46:11Z",
+    "generated": "2022-04-30T20:53:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-29T19:04:39Z"
+        "generated": "2022-04-30T01:08:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-29T06:51:29Z"
+        "generated": "2022-04-30T18:02:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f739883e9b..ce35f9a9a7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -25,10 +25,10 @@
       "evra": "0.9.1-9.fc35.x86_64"
     },
     "afterburn": {
-      "evra": "5.2.0-4.fc35.x86_64"
+      "evra": "5.3.0-1.fc35.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.2.0-4.fc35.x86_64"
+      "evra": "5.3.0-1.fc35.x86_64"
     },
     "alternatives": {
       "evra": "1.19-1.fc35.x86_64"
@@ -358,13 +358,13 @@
       "evra": "2.70.5-1.fc35.x86_64"
     },
     "glibc": {
-      "evra": "2.34-30.fc35.x86_64"
+      "evra": "2.34-32.fc35.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-30.fc35.x86_64"
+      "evra": "2.34-32.fc35.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-30.fc35.x86_64"
+      "evra": "2.34-32.fc35.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.0-7.fc35.x86_64"
@@ -724,7 +724,7 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.6-0.fc35.x86_64"
+      "evra": "2:4.15.7-0.fc35.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-4.fc35.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-2.fc35.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.6-0.fc35.x86_64"
+      "evra": "2:4.15.7-0.fc35.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc35.x86_64"
@@ -1039,13 +1039,13 @@
       "evra": "2:1.1.1-1.fc35.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.6-0.fc35.x86_64"
+      "evra": "2:4.15.7-0.fc35.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.6-0.fc35.noarch"
+      "evra": "2:4.15.7-0.fc35.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.6-0.fc35.x86_64"
+      "evra": "2:4.15.7-0.fc35.x86_64"
     },
     "sed": {
       "evra": "4.8-8.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-29T21:45:35Z",
+    "generated": "2022-04-30T20:52:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-29T19:05:15Z"
+        "generated": "2022-04-30T01:10:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-29T06:52:03Z"
+        "generated": "2022-04-30T18:02:43Z"
       }
     }
   }

From 43bd80d88f72c78cd45d41f1c4814ae77bae27d5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 2 May 2022 20:54:42 +0000
Subject: [PATCH 0924/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/204/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d5b310ba65..43815e4b8d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-30T20:53:12Z",
+    "generated": "2022-05-02T20:54:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-30T01:08:50Z"
+        "generated": "2022-04-30T22:26:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-30T18:02:09Z"
+        "generated": "2022-05-02T06:59:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ce35f9a9a7..c112e8e255 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-04-30T20:52:35Z",
+    "generated": "2022-05-02T20:53:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-30T01:10:01Z"
+        "generated": "2022-04-30T22:27:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-04-30T18:02:43Z"
+        "generated": "2022-05-02T07:00:22Z"
       }
     }
   }

From 1b7e6ed9e19517e6820834231d42517497f23435 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 29 Apr 2022 20:58:18 -0400
Subject: [PATCH 0925/2157] manifests: add curl to file-transfer manifest

This is used in coreos-livepxe-rootfs.sh [1], although I'm sure there
are probably more places too.

[1] https://github.com/coreos/fedora-coreos-config/blob/testing-devel/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
---
 manifests/file-transfer.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/manifests/file-transfer.yaml b/manifests/file-transfer.yaml
index 64ae36782c..88e27b90eb 100644
--- a/manifests/file-transfer.yaml
+++ b/manifests/file-transfer.yaml
@@ -3,3 +3,6 @@ packages:
   - git-core
   - gnupg2
   - rsync
+  # Explicit dependency on curl because we use it in coreos-livepxe-rootfs.sh
+  # We need curl and not curl-minimal because we support TFTP.
+  - curl

From 29724036426eb278b8f61455537c05b161973e09 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 3 May 2022 22:07:56 +0000
Subject: [PATCH 0926/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/206/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 43815e4b8d..e02e1d99ae 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-1.fc35.noarch"
+      "evra": "2:2.183.0-3.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.2-2.fc35.aarch64"
@@ -463,13 +463,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.17.4-200.fc35.aarch64"
+      "evra": "5.17.5-200.fc35.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.4-200.fc35.aarch64"
+      "evra": "5.17.5-200.fc35.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.4-200.fc35.aarch64"
+      "evra": "5.17.5-200.fc35.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.aarch64"
@@ -1208,7 +1208,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-02T20:54:34Z",
+    "generated": "2022-05-03T20:53:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
@@ -1217,7 +1217,7 @@
         "generated": "2022-04-30T22:26:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-02T06:59:49Z"
+        "generated": "2022-05-03T14:32:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c112e8e255..a7064cba65 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -124,7 +124,7 @@
       "evra": "0.21.2-3.fc35.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-1.fc35.noarch"
+      "evra": "2:2.183.0-3.fc35.noarch"
     },
     "containerd": {
       "evra": "1.6.2-2.fc35.x86_64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-8.fc35.noarch"
     },
     "kernel": {
-      "evra": "5.17.4-200.fc35.x86_64"
+      "evra": "5.17.5-200.fc35.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.4-200.fc35.x86_64"
+      "evra": "5.17.5-200.fc35.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.4-200.fc35.x86_64"
+      "evra": "5.17.5-200.fc35.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.22-7.fc35.x86_64"
@@ -1220,7 +1220,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-02T20:53:57Z",
+    "generated": "2022-05-03T20:52:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
@@ -1229,7 +1229,7 @@
         "generated": "2022-04-30T22:27:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-02T07:00:22Z"
+        "generated": "2022-05-03T14:33:00Z"
       }
     }
   }

From 9102625bcc880458f91db7d0b4dbc232cd6cd6d1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 1 May 2022 22:55:45 -0400
Subject: [PATCH 0927/2157] make kdump work on first boot

Up until this point people have had to reboot once after setting up
kdump so that if a crash happens the crash kernel doesn't get started
with the ignition.firstboot kernel argument. If we add `ignition.firstboot`
to the list of arguments in `KDUMP_COMMANDLINE_REMOVE=` in
`/etc/sysconfig/kdump` then we can set it up on first boot without issues.

Here we also switch the kdump.crash test to set up kdump via Ignition
to prove out the change works as desired.
---
 manifests/system-configuration.yaml       | 11 +++++++++++
 tests/kola/kdump/crash/config.bu          |  9 +++++++++
 tests/kola/kdump/crash/data/commonlib.sh  |  1 +
 tests/kola/kdump/{crash => crash/test.sh} |  5 -----
 4 files changed, 21 insertions(+), 5 deletions(-)
 create mode 100644 tests/kola/kdump/crash/config.bu
 create mode 120000 tests/kola/kdump/crash/data/commonlib.sh
 rename tests/kola/kdump/{crash => crash/test.sh} (87%)

diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index eceb626b0f..e8f48d0d93 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -37,3 +37,14 @@ packages:
   # Boost starving threads
   # https://github.com/coreos/fedora-coreos-tracker/issues/753
   - stalld
+
+postprocess:
+  # Make kdump work on firstboot
+  - |
+    #!/usr/bin/env bash
+    # Make kdump ignore `ignition.firstboot` when copying kargs from
+    # the running kernel to the kdump kernel when passing to be kexec.
+    # This makes it so kdump can be set up on the very first boot.
+    # Upstream request to have this upstream so we can stop carrying it here:
+    # https://lists.fedoraproject.org/archives/list/kexec@lists.fedoraproject.org/thread/5P4WIJLW2TSGF4PZGRZGOXYML4RXZU23/
+    sed -i -e 's/KDUMP_COMMANDLINE_REMOVE="/KDUMP_COMMANDLINE_REMOVE="ignition.firstboot /' /etc/sysconfig/kdump
diff --git a/tests/kola/kdump/crash/config.bu b/tests/kola/kdump/crash/config.bu
new file mode 100644
index 0000000000..4c21130a13
--- /dev/null
+++ b/tests/kola/kdump/crash/config.bu
@@ -0,0 +1,9 @@
+variant: fcos
+version: 1.4.0
+kernel_arguments:
+  should_exist:
+    - crashkernel=256M
+systemd:
+  units:
+    - name: kdump.service
+      enabled: true
diff --git a/tests/kola/kdump/crash/data/commonlib.sh b/tests/kola/kdump/crash/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/kdump/crash/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/kdump/crash b/tests/kola/kdump/crash/test.sh
similarity index 87%
rename from tests/kola/kdump/crash
rename to tests/kola/kdump/crash/test.sh
index 2b702c8646..ac01c6fb6e 100755
--- a/tests/kola/kdump/crash
+++ b/tests/kola/kdump/crash/test.sh
@@ -10,11 +10,6 @@ set -xeuo pipefail
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      rpm-ostree kargs --append='crashkernel=256M'
-      systemctl enable kdump.service
-      /tmp/autopkgtest-reboot setcrashkernel
-      ;;
-  setcrashkernel)
       /tmp/autopkgtest-reboot-prepare aftercrash
       echo "Triggering sysrq"
       sync

From a32c450044f56da351b4872bf5c50ab7edbf6c8e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 1 May 2022 23:13:29 -0400
Subject: [PATCH 0928/2157] tests: kdump.crash: extend timeout

The kdump.crash test on the rawhide stream for aarch64 has started
taking just longer than 10 minutes. Let's extend the timeout so those
tests don't timeout and fail the entire run.

Also added comments for the test's kola.json arguments.
---
 tests/kola/kdump/crash/test.sh | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index ac01c6fb6e..d481e40695 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -1,8 +1,17 @@
 #!/bin/bash
-# kola: {"minMemory": 4096, "tags": "skip-base-checks", "architectures": "!s390x"}
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# https://github.com/coreos/fedora-coreos-config/issues/1500
-# - kdump.service is failling on s390x
+# kola: {"minMemory": 4096, "tags": "skip-base-checks", "timeoutMin": 15, "architectures": "!s390x"}
+# - minMemory: 4096
+#   - Testing kdump requires some reserved memory for the crashkernel.
+# - tags: skip-base-checks
+#   - Skip checks for things like kernel crashes in the console logs.
+#     For this test we trigger a kernel crash on purpose.
+# - architectures: !s390x
+#   - kdump.service is failing on s390x. See
+#     https://github.com/coreos/fedora-coreos-config/issues/1500
+# - timeoutMin: 15
+#   - This test includes a few reboots and the generation of a vmcore,
+#     which can take longer than the default 10 minute timeout.
 
 set -xeuo pipefail
 

From bb17770c76d23461cd283c7db092b1ec21319c65 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 3 May 2022 10:24:06 -0400
Subject: [PATCH 0929/2157] tests: kdump.crash: update crashkernel size based
 on our docs

In our documentation [1] we recommend setting it to 300M as a
starting baseline. Let's update from 256M to 300M here.

[1] https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
---
 tests/kola/kdump/crash/config.bu | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/kdump/crash/config.bu b/tests/kola/kdump/crash/config.bu
index 4c21130a13..909e91e4d3 100644
--- a/tests/kola/kdump/crash/config.bu
+++ b/tests/kola/kdump/crash/config.bu
@@ -2,7 +2,7 @@ variant: fcos
 version: 1.4.0
 kernel_arguments:
   should_exist:
-    - crashkernel=256M
+    - crashkernel=300M
 systemd:
   units:
     - name: kdump.service

From 4c31f5862643e5de601f69466bde04d6dcd9f331 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 1 May 2022 23:01:42 -0400
Subject: [PATCH 0930/2157] manifests/fedora-coreos: fix kdump.crash test for
 aarch64 AWS

The irqpoll` karg that gets added when the crash kernel is
started causes issues on AWS aarch64 instances. Let's workaround
by removing that from `KDUMP_COMMANDLINE_APPEND` in
`/etc/sysconfig/kdump` for now.

See https://github.com/coreos/fedora-coreos-tracker/issues/1187
---
 kola-denylist.yaml                          |  6 ------
 manifests/fedora-coreos.yaml                |  4 ++++
 manifests/kdump-aarch64-aws-workaround.yaml | 12 ++++++++++++
 3 files changed, 16 insertions(+), 6 deletions(-)
 create mode 100644 manifests/kdump-aarch64-aws-workaround.yaml

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0252a3e837..d4edd432d2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,12 +5,6 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
-  arches:
-    - aarch64
-  platforms:
-    - aws
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 72cfb977dc..07978b48d3 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -17,6 +17,9 @@ conditional-include:
   - if: prod == false
     # long-term, would be good to support specifying a nested TreeComposeConfig
     include: disable-zincati-and-pinger.yaml
+  - if: basearch == "aarch64"
+    # Fixup for kdump on aarch64 AWS instances
+    include: kdump-aarch64-aws-workaround.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -86,6 +89,7 @@ postprocess:
     cp /tmp/rpm-ostreed.conf /usr/etc/rpm-ostreed.conf
     rm /tmp/rpm-ostreed.conf
 
+
 remove-from-packages:
   # Drop NetworkManager support for ifcfg files, see also corresponding
   # overlay.d/14NetworkManager-plugins
diff --git a/manifests/kdump-aarch64-aws-workaround.yaml b/manifests/kdump-aarch64-aws-workaround.yaml
new file mode 100644
index 0000000000..c198739425
--- /dev/null
+++ b/manifests/kdump-aarch64-aws-workaround.yaml
@@ -0,0 +1,12 @@
+# This file includes a fixup for kdump on aarch64 AWS instances.
+# The issue seems specific to aarch64 AWS instances, but we'll go
+# ahead and apply it across the board for aarch64, since that's
+# the easiest thing to do. Hopefully the upstream issue will get
+# resolved soon.
+postprocess:
+  - |
+    #!/usr/bin/env bash
+    # Remove irqpoll from the list of KDUMP_COMMANDLINE_APPEND. This
+    # causes issues on aarch64 AWS instances.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1187
+    sed -i -e 's/irqpoll //' /etc/sysconfig/kdump

From 22555a454bf17aefb1f443e555a764789627ea05 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 4 May 2022 14:50:06 -0400
Subject: [PATCH 0931/2157] manifests/fedora-coreos: switch grub2-removals to
 conditional-include

This move the `arch-include` statments to `conditional-include`, which
allows us to use `!=`. In this case what we were really trying to target
was s390x IIUC.
---
 manifests/fedora-coreos.yaml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 07978b48d3..a7bef6b85d 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -20,6 +20,9 @@ conditional-include:
   - if: basearch == "aarch64"
     # Fixup for kdump on aarch64 AWS instances
     include: kdump-aarch64-aws-workaround.yaml
+  - if: basearch != "s390x"
+    # And remove some cruft from grub2
+    include: grub2-removals.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -122,9 +125,3 @@ exclude-packages:
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth
-
-# And remove some cruft from grub2
-arch-include:
-  x86_64: grub2-removals.yaml
-  aarch64: grub2-removals.yaml
-  ppc64le: grub2-removals.yaml

From 1a3cc573a2cecab39af6696a822e18bb82b6e1df Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 5 May 2022 10:15:52 -0700
Subject: [PATCH 0932/2157] kola/systemd-enable-units: remove journal check
 Instead of writing to journal, we just check a file the service should have
 touched and test that it exists.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1190
---
 tests/kola/ignition/systemd-enable-units/config.bu |  6 +++---
 tests/kola/ignition/systemd-enable-units/test.sh   | 14 +++++++-------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/tests/kola/ignition/systemd-enable-units/config.bu b/tests/kola/ignition/systemd-enable-units/config.bu
index fd9ca2fc4e..f037808cf2 100644
--- a/tests/kola/ignition/systemd-enable-units/config.bu
+++ b/tests/kola/ignition/systemd-enable-units/config.bu
@@ -2,15 +2,15 @@ variant: fcos
 version: 1.3.0
 systemd:
   units:
-    - name: echo@.service
+    - name: touch@.service
       contents: |
         [Service]
         Type=oneshot
-        ExecStart=/bin/echo %i
+        ExecStart=/bin/touch /run/%i
         RemainAfterExit=yes
         [Install]
         WantedBy=multi-user.target
-    - name: echo@foo.service
+    - name: touch@foo.service
       enabled: true
     - name: podman.socket
       enabled: true
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index 523269f89a..ac80c7c01a 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -12,16 +12,16 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # make sure the presets worked and the instantiated unit is enabled
-if [ "$(systemctl is-enabled echo@foo.service)" != 'enabled' ]; then
-    fatal "echo@foo.service systemd unit should be enabled"
+if [ "$(systemctl is-enabled touch@foo.service)" != 'enabled' ]; then
+    fatal "touch@foo.service systemd unit should be enabled"
 fi
-ok "echo@foo.service systemd unit is enabled"
+ok "touch@foo.service systemd unit is enabled"
 
-# make sure the unit ran and wrote 'foo' to the journal
-if [ "$(journalctl -o cat -u echo@foo.service | sed -n 2p)" != 'foo' ]; then
-    fatal "echo@foo.service did not write 'foo' to journal"
+# make sure the unit ran
+if ! test -e /run/foo; then
+    fatal "touch@foo.service didn't run as /run/foo does not exist"
 fi
-ok "echo@foo.service ran and wrote 'foo' to the journal"
+ok "touch@foo.service ran as /run/foo exists"
 
 if [ "$(systemctl is-enabled podman.socket)" != 'enabled' ]; then
     fatal "podman.socket systemd unit should be enabled"

From a1cc19c2d781a3b891bcf9d3236d09ed955a4a22 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 5 May 2022 22:02:15 +0000
Subject: [PATCH 0933/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/212/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e02e1d99ae..7b2a5021b6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1171,10 +1171,10 @@
       "evra": "2.37.4-1.fc35.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4804-1.fc35.noarch"
+      "evra": "2:8.2.4845-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4804-1.fc35.aarch64"
+      "evra": "2:8.2.4845-1.fc35.aarch64"
     },
     "which": {
       "evra": "2.21-27.fc35.aarch64"
@@ -1208,16 +1208,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-03T20:53:21Z",
+    "generated": "2022-05-05T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-30T22:26:07Z"
+        "generated": "2022-05-05T03:12:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-03T14:32:25Z"
+        "generated": "2022-05-05T07:01:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a7064cba65..7476831739 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1183,10 +1183,10 @@
       "evra": "2.37.4-1.fc35.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4804-1.fc35.noarch"
+      "evra": "2:8.2.4845-1.fc35.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4804-1.fc35.x86_64"
+      "evra": "2:8.2.4845-1.fc35.x86_64"
     },
     "which": {
       "evra": "2.21-27.fc35.x86_64"
@@ -1220,16 +1220,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-03T20:52:48Z",
+    "generated": "2022-05-05T20:52:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-04-30T22:27:33Z"
+        "generated": "2022-05-05T03:14:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-03T14:33:00Z"
+        "generated": "2022-05-05T07:02:20Z"
       }
     }
   }

From adca3f7abd90893d1d0226f2b8581aa56e498fe3 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 4 May 2022 03:28:17 -0400
Subject: [PATCH 0934/2157] tests/kola/ignition: port resource fetching tests
 from mantle

Reimplement tests from mantle/kola/tests/ignition/resource.go:

- coreos.ignition.resource.remote
- coreos.ignition.resource.s3
- coreos.ignition.resource.s3.versioned (merged into .remote test, since
  it's only separate for historical reasons)
---
 tests/kola/ignition/resource/remote/config.bu | 19 ++++++++++++++
 .../resource/remote/data/commonlib.sh         |  1 +
 .../resource/remote/data/expected/http        |  1 +
 .../resource/remote/data/expected/https       |  1 +
 .../resource/remote/data/expected/s3-anon     |  1 +
 .../data/expected/s3-versioned-https-latest   |  1 +
 .../data/expected/s3-versioned-https-original |  1 +
 tests/kola/ignition/resource/remote/test.sh   | 12 +++++++++
 tests/kola/ignition/resource/s3/config.bu     | 14 ++++++++++
 .../ignition/resource/s3/data/commonlib.sh    |  1 +
 .../resource/s3/data/expected/s3-auth         |  1 +
 .../resource/s3/data/expected/s3-config       |  1 +
 tests/kola/ignition/resource/s3/test.sh       | 26 +++++++++++++++++++
 13 files changed, 80 insertions(+)
 create mode 100644 tests/kola/ignition/resource/remote/config.bu
 create mode 120000 tests/kola/ignition/resource/remote/data/commonlib.sh
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/http
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/https
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/s3-anon
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-latest
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-original
 create mode 100755 tests/kola/ignition/resource/remote/test.sh
 create mode 100644 tests/kola/ignition/resource/s3/config.bu
 create mode 120000 tests/kola/ignition/resource/s3/data/commonlib.sh
 create mode 100644 tests/kola/ignition/resource/s3/data/expected/s3-auth
 create mode 100644 tests/kola/ignition/resource/s3/data/expected/s3-config
 create mode 100755 tests/kola/ignition/resource/s3/test.sh

diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
new file mode 100644
index 0000000000..4ed900fd38
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -0,0 +1,19 @@
+variant: fcos
+version: 1.0.0
+storage:
+  files:
+    - path: /var/resource/http
+      contents:
+        source: "http://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous"
+    - path: /var/resource/https
+      contents:
+        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous"
+    - path: /var/resource/s3-anon
+      contents:
+        source: "s3://rh-kola-fixtures/resources/anonymous"
+    - path: /var/resource/s3-versioned-https-original
+      contents:
+        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/versioned?versionId=Ym98GTx0npVaJznSAd0I1eUjFoZMP8Zo"
+    - path: /var/resource/s3-versioned-https-latest
+      contents:
+        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/versioned"
diff --git a/tests/kola/ignition/resource/remote/data/commonlib.sh b/tests/kola/ignition/resource/remote/data/commonlib.sh
new file mode 120000
index 0000000000..7028449b11
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/commonlib.sh
@@ -0,0 +1 @@
+../../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/http b/tests/kola/ignition/resource/remote/data/expected/http
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/http
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/https b/tests/kola/ignition/resource/remote/data/expected/https
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/https
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/s3-anon b/tests/kola/ignition/resource/remote/data/expected/s3-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/s3-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-latest b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-latest
new file mode 100644
index 0000000000..f55556eed1
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-latest
@@ -0,0 +1 @@
+updated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-original b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-original
new file mode 100644
index 0000000000..94f3610c08
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-https-original
@@ -0,0 +1 @@
+original
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
new file mode 100755
index 0000000000..888c317c4c
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+# kola: { "tags": "needs-internet" }
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
+    fatal "fetched data mismatch"
+else
+    ok "fetched data ok"
+fi
diff --git a/tests/kola/ignition/resource/s3/config.bu b/tests/kola/ignition/resource/s3/config.bu
new file mode 100644
index 0000000000..67d6bc9a21
--- /dev/null
+++ b/tests/kola/ignition/resource/s3/config.bu
@@ -0,0 +1,14 @@
+# Objects accessible by any authenticated S3 user, such as the IAM role
+# associated with the instance
+
+variant: fcos
+version: 1.0.0
+ignition:
+  config:
+    merge:
+      - source: "s3://rh-kola-fixtures/resources/authenticated-var-v3.ign"
+storage:
+  files:
+    - path: /var/resource/s3-auth
+      contents:
+        source: "s3://rh-kola-fixtures/resources/authenticated"
diff --git a/tests/kola/ignition/resource/s3/data/commonlib.sh b/tests/kola/ignition/resource/s3/data/commonlib.sh
new file mode 120000
index 0000000000..7028449b11
--- /dev/null
+++ b/tests/kola/ignition/resource/s3/data/commonlib.sh
@@ -0,0 +1 @@
+../../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/s3/data/expected/s3-auth b/tests/kola/ignition/resource/s3/data/expected/s3-auth
new file mode 100644
index 0000000000..f4253bde46
--- /dev/null
+++ b/tests/kola/ignition/resource/s3/data/expected/s3-auth
@@ -0,0 +1 @@
+kola-authenticated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/s3/data/expected/s3-config b/tests/kola/ignition/resource/s3/data/expected/s3-config
new file mode 100644
index 0000000000..9433f22dd3
--- /dev/null
+++ b/tests/kola/ignition/resource/s3/data/expected/s3-config
@@ -0,0 +1 @@
+kola-config
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/s3/test.sh b/tests/kola/ignition/resource/s3/test.sh
new file mode 100755
index 0000000000..7302989785
--- /dev/null
+++ b/tests/kola/ignition/resource/s3/test.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+# kola: { "tags": "needs-internet", "platforms": "aws" }
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
+    fatal "fetched data mismatch"
+else
+    ok "fetched data ok"
+fi
+
+# verify that the objects are inaccessible anonymously
+for obj in authenticated authenticated.ign; do
+    if curl -sf "https://rh-kola-fixtures.s3.amazonaws.com/resources/$obj"; then
+        fatal "anonymously fetching authenticated resource should have failed, but did not"
+    fi
+done
+
+# ...but that the anonymous object is accessible
+if ! curl -sf "https://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous" > /dev/null; then
+    fatal "anonymous resource is inaccessible"
+fi
+
+ok "resource checks ok"

From 39283de1c0ff67120d8373bdc33de2139499166c Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 4 May 2022 03:31:27 -0400
Subject: [PATCH 0935/2157] tests/kola/ignition: add tests for s3:// versioned
 resource fetch

We were testing versioned resource fetch via HTTPS but not via s3://.
---
 tests/kola/ignition/resource/remote/config.bu               | 6 ++++++
 .../resource/remote/data/expected/s3-versioned-latest       | 1 +
 .../resource/remote/data/expected/s3-versioned-original     | 1 +
 3 files changed, 8 insertions(+)
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/s3-versioned-latest
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/s3-versioned-original

diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index 4ed900fd38..9fef0c7214 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -11,6 +11,12 @@ storage:
     - path: /var/resource/s3-anon
       contents:
         source: "s3://rh-kola-fixtures/resources/anonymous"
+    - path: /var/resource/s3-versioned-original
+      contents:
+        source: "s3://rh-kola-fixtures/resources/versioned?versionId=Ym98GTx0npVaJznSAd0I1eUjFoZMP8Zo"
+    - path: /var/resource/s3-versioned-latest
+      contents:
+        source: "s3://rh-kola-fixtures/resources/versioned"
     - path: /var/resource/s3-versioned-https-original
       contents:
         source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/versioned?versionId=Ym98GTx0npVaJznSAd0I1eUjFoZMP8Zo"
diff --git a/tests/kola/ignition/resource/remote/data/expected/s3-versioned-latest b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-latest
new file mode 100644
index 0000000000..f55556eed1
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-latest
@@ -0,0 +1 @@
+updated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/s3-versioned-original b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-original
new file mode 100644
index 0000000000..94f3610c08
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/s3-versioned-original
@@ -0,0 +1 @@
+original
\ No newline at end of file

From 275f85c3a4d8ba8495cb7ca55a79f96f8cc6f6be Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 4 May 2022 19:42:19 -0400
Subject: [PATCH 0936/2157] tests/kola/ignition: move S3 test fixtures to a new
 bucket

The previous bucket is in a deprecated AWS account.
---
 tests/kola/ignition/resource/remote/config.bu | 14 +++++++-------
 tests/kola/ignition/resource/s3/config.bu     |  4 ++--
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index 9fef0c7214..dad3214cf3 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -4,22 +4,22 @@ storage:
   files:
     - path: /var/resource/http
       contents:
-        source: "http://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous"
+        source: "http://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous"
     - path: /var/resource/https
       contents:
-        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous"
+        source: "https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous"
     - path: /var/resource/s3-anon
       contents:
-        source: "s3://rh-kola-fixtures/resources/anonymous"
+        source: "s3://ignition-test-fixtures/resources/anonymous"
     - path: /var/resource/s3-versioned-original
       contents:
-        source: "s3://rh-kola-fixtures/resources/versioned?versionId=Ym98GTx0npVaJznSAd0I1eUjFoZMP8Zo"
+        source: "s3://ignition-test-fixtures/resources/versioned?versionId=Y9YqVujoLyHHSHJ4DslyXoaLvcilQJnU"
     - path: /var/resource/s3-versioned-latest
       contents:
-        source: "s3://rh-kola-fixtures/resources/versioned"
+        source: "s3://ignition-test-fixtures/resources/versioned"
     - path: /var/resource/s3-versioned-https-original
       contents:
-        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/versioned?versionId=Ym98GTx0npVaJznSAd0I1eUjFoZMP8Zo"
+        source: "https://ignition-test-fixtures.s3.amazonaws.com/resources/versioned?versionId=Y9YqVujoLyHHSHJ4DslyXoaLvcilQJnU"
     - path: /var/resource/s3-versioned-https-latest
       contents:
-        source: "https://rh-kola-fixtures.s3.amazonaws.com/resources/versioned"
+        source: "https://ignition-test-fixtures.s3.amazonaws.com/resources/versioned"
diff --git a/tests/kola/ignition/resource/s3/config.bu b/tests/kola/ignition/resource/s3/config.bu
index 67d6bc9a21..d55b1f1d2a 100644
--- a/tests/kola/ignition/resource/s3/config.bu
+++ b/tests/kola/ignition/resource/s3/config.bu
@@ -6,9 +6,9 @@ version: 1.0.0
 ignition:
   config:
     merge:
-      - source: "s3://rh-kola-fixtures/resources/authenticated-var-v3.ign"
+      - source: "s3://ignition-test-fixtures/resources/authenticated-var-v3.ign"
 storage:
   files:
     - path: /var/resource/s3-auth
       contents:
-        source: "s3://rh-kola-fixtures/resources/authenticated"
+        source: "s3://ignition-test-fixtures/resources/authenticated"

From 6efda1ad0e564e8e4951746b2c256664202ab71d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 6 May 2022 07:11:34 -0400
Subject: [PATCH 0937/2157] tests/kola/ignition: finish moving S3 test fixtures
 to a new bucket

We had a couple hardcoded checks that weren't caught.

Fixes: 275f85c3a4d8 ("tests/kola/ignition: move S3 test fixtures to a new bucket")
---
 tests/kola/ignition/resource/s3/test.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/ignition/resource/s3/test.sh b/tests/kola/ignition/resource/s3/test.sh
index 7302989785..df6dd25a04 100755
--- a/tests/kola/ignition/resource/s3/test.sh
+++ b/tests/kola/ignition/resource/s3/test.sh
@@ -13,13 +13,13 @@ fi
 
 # verify that the objects are inaccessible anonymously
 for obj in authenticated authenticated.ign; do
-    if curl -sf "https://rh-kola-fixtures.s3.amazonaws.com/resources/$obj"; then
+    if curl -sf "https://ignition-test-fixtures.s3.amazonaws.com/resources/$obj"; then
         fatal "anonymously fetching authenticated resource should have failed, but did not"
     fi
 done
 
 # ...but that the anonymous object is accessible
-if ! curl -sf "https://rh-kola-fixtures.s3.amazonaws.com/resources/anonymous" > /dev/null; then
+if ! curl -sf "https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous" > /dev/null; then
     fatal "anonymous resource is inaccessible"
 fi
 

From 0856e21a48d389409f55eb2da8fa6ca9715a0991 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Fri, 6 May 2022 09:15:28 +0200
Subject: [PATCH 0938/2157] clhm.ignition-warnings: Improve test to ignore
 additional warnings

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/clhm/ignition-warnings/test.sh | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index 6f6335040b..e687c525c0 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,31 +1,28 @@
 #!/bin/bash
 # kola: { "platforms": "qemu-unpriv", "allowConfigWarnings": true }
-# - platforms: qemu-unpriv 
-#   - This test should pass everywhere if it passes anywhere. 
-# - allowConfigWarnings: true 
-#   - We intentionally exclude the Install section from a systemd unit.  
-#     This is valid but not ideal, so Butane warns about it.  
+# - platforms: qemu-unpriv
+#   - This test should pass everywhere if it passes anywhere.
+# - allowConfigWarnings: true
+#   - We intentionally exclude the Install section from a systemd unit.
+#     This is valid but not ideal, so Butane warns about it.
 # This test ensures that Ignition warnings are displayed on the console.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-WARN='\033[0;33m' # yellow
-RESET='\033[0m' # reset
+WARN='\e\[0;33m' # yellow
+RESET='\e\[0m' # reset
 
+warning="${WARN}Ignition: warning at \\$.systemd.units.0.contents: unit \"echo.service\" is enabled, but has no install section so enable does nothing${RESET}"
 warningsfile="/etc/issue.d/30_coreos_ignition_warnings.issue"
-tmpd=$(mktemp -d)
-expectedwarningsfile="${tmpd}"/expectedwarningsfile
 
 # Check for the motd file
 if ! test -f ${warningsfile}; then
     fatal "not found Ignition warnings issue file"
 fi
 
-echo -e "${WARN}Ignition: warning at $.systemd.units.0.contents: unit \"echo.service\" is enabled, but has no install section so enable does nothing${RESET}" > $expectedwarningsfile
-
-if ! diff $expectedwarningsfile $warningsfile; then
+if ! grep -P -q "${warning}" "${warningsfile}"; then
     fatal "Ignition warning did not show up as expected in issue.d"
 fi
 ok "Successfully displayed Ignition warning on the console"

From 0e50d9b290db84fa079fb2c4400581e8a887dc10 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 6 May 2022 16:13:37 -0400
Subject: [PATCH 0939/2157] manifests: drop libvarlink conditional includes

Now that we have waited an amount of time let's drop libvarlink-util
altogether.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1130
---
 manifests/fedora-coreos-base.yaml | 7 -------
 manifests/varlink.yaml            | 5 -----
 2 files changed, 12 deletions(-)
 delete mode 100644 manifests/varlink.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 51b21ef501..c5146ae5cb 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -18,13 +18,6 @@ ostree-layers:
   - overlay/20platform-chrony
 
 conditional-include:
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1130
-  - if: stream == "testing-devel"
-    include: varlink.yaml
-  - if: stream == "testing"
-    include: varlink.yaml
-  - if: stream == "stable"
-    include: varlink.yaml
   # https://github.com/coreos/fedora-coreos-tracker/issues/676
   - if: releasever >= 36
     include: iptables-nft.yaml
diff --git a/manifests/varlink.yaml b/manifests/varlink.yaml
deleted file mode 100644
index d43eb76980..0000000000
--- a/manifests/varlink.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-# Include libvarlink-util package selectively
-# before we drop it from the remaining streams 
-# https://github.com/coreos/fedora-coreos-tracker/issues/1130
-packages:
-  - libvarlink-util

From e002e8bb148b05837355afd65423ea7ea8a5d0c4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 6 May 2022 22:06:53 +0000
Subject: [PATCH 0940/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/214/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 7 ++-----
 manifest-lock.x86_64.json  | 7 ++-----
 2 files changed, 4 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7b2a5021b6..2fa4cfe66b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -786,9 +786,6 @@
     "libuv": {
       "evra": "1:1.44.1-1.fc35.aarch64"
     },
-    "libvarlink-util": {
-      "evra": "22-3.fc35.aarch64"
-    },
     "libverto": {
       "evra": "0.3.2-2.fc35.aarch64"
     },
@@ -1208,13 +1205,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-05T20:53:05Z",
+    "generated": "2022-05-06T20:52:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-05T03:12:24Z"
+        "generated": "2022-05-05T22:07:54Z"
       },
       "fedora-updates": {
         "generated": "2022-05-05T07:01:47Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7476831739..dba803ad47 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -795,9 +795,6 @@
     "libuv": {
       "evra": "1:1.44.1-1.fc35.x86_64"
     },
-    "libvarlink-util": {
-      "evra": "22-3.fc35.x86_64"
-    },
     "libverto": {
       "evra": "0.3.2-2.fc35.x86_64"
     },
@@ -1220,13 +1217,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-05T20:52:26Z",
+    "generated": "2022-05-06T20:52:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-05T03:14:23Z"
+        "generated": "2022-05-05T22:07:33Z"
       },
       "fedora-updates": {
         "generated": "2022-05-05T07:02:20Z"

From adffbbacb7e7dbb16b4b3d7a845a625c6697224a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 6 May 2022 23:08:43 -0400
Subject: [PATCH 0941/2157] tests/kola/ignition: rename resource.s3 to
 .authenticated-s3

Make it clearer that the purpose of the test is to check authenticated
S3 access.
---
 tests/kola/ignition/resource/{s3 => authenticated-s3}/config.bu   | 0
 .../ignition/resource/{s3 => authenticated-s3}/data/commonlib.sh  | 0
 .../resource/{s3 => authenticated-s3}/data/expected/s3-auth       | 0
 .../resource/{s3 => authenticated-s3}/data/expected/s3-config     | 0
 tests/kola/ignition/resource/{s3 => authenticated-s3}/test.sh     | 0
 5 files changed, 0 insertions(+), 0 deletions(-)
 rename tests/kola/ignition/resource/{s3 => authenticated-s3}/config.bu (100%)
 rename tests/kola/ignition/resource/{s3 => authenticated-s3}/data/commonlib.sh (100%)
 rename tests/kola/ignition/resource/{s3 => authenticated-s3}/data/expected/s3-auth (100%)
 rename tests/kola/ignition/resource/{s3 => authenticated-s3}/data/expected/s3-config (100%)
 rename tests/kola/ignition/resource/{s3 => authenticated-s3}/test.sh (100%)

diff --git a/tests/kola/ignition/resource/s3/config.bu b/tests/kola/ignition/resource/authenticated-s3/config.bu
similarity index 100%
rename from tests/kola/ignition/resource/s3/config.bu
rename to tests/kola/ignition/resource/authenticated-s3/config.bu
diff --git a/tests/kola/ignition/resource/s3/data/commonlib.sh b/tests/kola/ignition/resource/authenticated-s3/data/commonlib.sh
similarity index 100%
rename from tests/kola/ignition/resource/s3/data/commonlib.sh
rename to tests/kola/ignition/resource/authenticated-s3/data/commonlib.sh
diff --git a/tests/kola/ignition/resource/s3/data/expected/s3-auth b/tests/kola/ignition/resource/authenticated-s3/data/expected/s3-auth
similarity index 100%
rename from tests/kola/ignition/resource/s3/data/expected/s3-auth
rename to tests/kola/ignition/resource/authenticated-s3/data/expected/s3-auth
diff --git a/tests/kola/ignition/resource/s3/data/expected/s3-config b/tests/kola/ignition/resource/authenticated-s3/data/expected/s3-config
similarity index 100%
rename from tests/kola/ignition/resource/s3/data/expected/s3-config
rename to tests/kola/ignition/resource/authenticated-s3/data/expected/s3-config
diff --git a/tests/kola/ignition/resource/s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
similarity index 100%
rename from tests/kola/ignition/resource/s3/test.sh
rename to tests/kola/ignition/resource/authenticated-s3/test.sh

From 9994444837399158dfef98922fef81c70eb0ccce Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 6 May 2022 23:10:07 -0400
Subject: [PATCH 0942/2157] tests/kola/ignition: document kola options in
 resource tests

---
 tests/kola/ignition/resource/authenticated-s3/test.sh | 4 ++++
 tests/kola/ignition/resource/remote/test.sh           | 2 ++
 2 files changed, 6 insertions(+)

diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
index df6dd25a04..6c6ec29b1e 100755
--- a/tests/kola/ignition/resource/authenticated-s3/test.sh
+++ b/tests/kola/ignition/resource/authenticated-s3/test.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 # kola: { "tags": "needs-internet", "platforms": "aws" }
+# - tags: needs-internet
+#   - We fetch resources from S3.
+# - platforms: aws
+#   - We authenticate to S3 with the EC2 instance's IAM role.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 888c317c4c..72e15b7555 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -1,5 +1,7 @@
 #!/bin/bash
 # kola: { "tags": "needs-internet" }
+# - tags: needs-internet
+#   - We fetch resources from S3.
 
 set -xeuo pipefail
 

From 15e0ed1fd17232009908cadc76d168530fcc1ea5 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 7 May 2022 00:53:49 -0400
Subject: [PATCH 0943/2157] tests/kola/ignition: fix object name in negative
 test

---
 tests/kola/ignition/resource/authenticated-s3/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
index 6c6ec29b1e..152eed0c73 100755
--- a/tests/kola/ignition/resource/authenticated-s3/test.sh
+++ b/tests/kola/ignition/resource/authenticated-s3/test.sh
@@ -16,7 +16,7 @@ else
 fi
 
 # verify that the objects are inaccessible anonymously
-for obj in authenticated authenticated.ign; do
+for obj in authenticated authenticated-var-v3.ign; do
     if curl -sf "https://ignition-test-fixtures.s3.amazonaws.com/resources/$obj"; then
         fatal "anonymously fetching authenticated resource should have failed, but did not"
     fi

From 9bbff4b01969e27759420ad8668cc4d287c33512 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 7 May 2022 02:10:09 -0400
Subject: [PATCH 0944/2157] tests/kola/chrony: fix running test on GCP

kola calls the platform "gce" for historical reasons.
---
 tests/kola/chrony/coreos-platform-chrony-generator | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index 859617bbd3..181d499431 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "aws azure gcp" }
+# kola: { "exclusive": false, "platforms": "aws azure gce" }
 # Test the coreos-platform-chrony generator.
 
 set -xeuo pipefail

From c9f726a8434a3cbead4d794c813e8f84f38dcf9f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 8 May 2022 22:03:09 +0000
Subject: [PATCH 0945/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/220/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2fa4cfe66b..0cf7fea7ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.aarch64"
     },
     "git-core": {
-      "evra": "2.35.1-1.fc35.aarch64"
+      "evra": "2.35.3-1.fc35.aarch64"
     },
     "glib2": {
       "evra": "2.70.5-1.fc35.aarch64"
@@ -901,7 +901,7 @@
       "evra": "1.11.1-4.fc35.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.7.1-1.fc35.1.aarch64"
+      "evra": "6.9.8-1.fc35.aarch64"
     },
     "openldap": {
       "evra": "2.4.59-3.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-06T20:52:57Z",
+    "generated": "2022-05-08T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-05T22:07:54Z"
+        "generated": "2022-05-07T22:09:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-05T07:01:47Z"
+        "generated": "2022-05-08T01:13:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index dba803ad47..7b4edf5369 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -352,7 +352,7 @@
       "evra": "0.21-8.fc35.x86_64"
     },
     "git-core": {
-      "evra": "2.35.1-1.fc35.x86_64"
+      "evra": "2.35.3-1.fc35.x86_64"
     },
     "glib2": {
       "evra": "2.70.5-1.fc35.x86_64"
@@ -913,7 +913,7 @@
       "evra": "1.11.1-4.fc35.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.7.1-1.fc35.1.x86_64"
+      "evra": "6.9.8-1.fc35.x86_64"
     },
     "openldap": {
       "evra": "2.4.59-3.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-06T20:52:20Z",
+    "generated": "2022-05-08T20:52:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-05T22:07:33Z"
+        "generated": "2022-05-07T22:09:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-05T07:02:20Z"
+        "generated": "2022-05-08T01:13:44Z"
       }
     }
   }

From 87505b27cafb3f61d49f638a49dcdc738f6938b3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 9 May 2022 00:14:59 +0000
Subject: [PATCH 0946/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d98bb63053..5ad9627dd6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,28 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  afterburn:
-    evr: 5.3.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-bec21e906f
-      reason: https://github.com/coreos/afterburn/issues/733
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.3.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-bec21e906f
-      reason: https://github.com/coreos/afterburn/issues/733
-      type: fast-track
-  coreos-installer:
-    evr: 0.14.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b5d122ac00
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.14.0-1.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b5d122ac00
-      type: fast-track
   systemd:
     evr: 249.12-3.fc35
     metadata:

From 9367a9756729a6aa02410ff5778ef842158214c7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 9 May 2022 11:38:26 -0700
Subject: [PATCH 0947/2157] tests/kola/chrony: grep metadata server IP on GCP

The output of `chronyc sources` on GCP contains the resolved IP address,
even though the config we write uses the hostname. GCP documents[1] the
IP address of the metadata server as 169.254.169.254 so we can just
hardcode it here like we do for AWS.

[1] https://cloud.google.com/compute/docs/internal-dns
---
 tests/kola/chrony/coreos-platform-chrony-generator | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index 181d499431..5a955933d9 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -8,6 +8,6 @@ platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d
 case "${platform}" in
     aws) chronyc sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
     azure) chronyc sources |grep 'PHC'; echo "ok chrony azure" ;;
-    gcp) chronyc sources | grep metadata.google.internal; echo "ok chrony gcp" ;;
+    gcp) chronyc sources | grep '169.254.169.254'; echo "ok chrony gcp" ;;
     *) echo "unhandled platform ${platform} ?"; exit 1 ;;
 esac

From 3b52493f2af02017137856445d61a8ec0fe2e6d8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 9 May 2022 22:02:59 +0000
Subject: [PATCH 0948/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/222/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0cf7fea7ec..79515ab6f2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "4.2-1.fc35.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.13-3.fc35.aarch64"
+      "evra": "6.15-1.fc35.aarch64"
     },
     "clevis": {
       "evra": "18-4.fc35.aarch64"
@@ -403,7 +403,7 @@
       "evra": "2.13.0-5.fc35.aarch64"
     },
     "inih": {
-      "evra": "49-4.fc35.aarch64"
+      "evra": "55-1.fc35.aarch64"
     },
     "iproute": {
       "evra": "5.13.0-2.fc35.aarch64"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-08T20:53:06Z",
+    "generated": "2022-05-09T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:21Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-07T22:09:28Z"
+        "generated": "2022-05-08T22:06:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-08T01:13:08Z"
+        "generated": "2022-05-09T13:07:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7b4edf5369..7067b91ee6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -91,7 +91,7 @@
       "evra": "4.2-1.fc35.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.13-3.fc35.x86_64"
+      "evra": "6.15-1.fc35.x86_64"
     },
     "clevis": {
       "evra": "18-4.fc35.x86_64"
@@ -409,7 +409,7 @@
       "evra": "2.13.0-5.fc35.x86_64"
     },
     "inih": {
-      "evra": "49-4.fc35.x86_64"
+      "evra": "55-1.fc35.x86_64"
     },
     "iproute": {
       "evra": "5.13.0-2.fc35.x86_64"
@@ -1217,16 +1217,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-08T20:52:30Z",
+    "generated": "2022-05-09T20:52:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2021-10-26T05:31:27Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-07T22:09:40Z"
+        "generated": "2022-05-08T22:06:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-08T01:13:44Z"
+        "generated": "2022-05-09T13:07:55Z"
       }
     }
   }

From 10fc19937b91c83c49b02fd9d9b99dd207311174 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 14:22:03 -0400
Subject: [PATCH 0949/2157] manifest: Move to Fedora Linux 36 content

Also seeded the architecture specific lockfiles from `next-devel`.
---
 ci/buildroot/Dockerfile      |   2 +-
 manifest-lock.aarch64.json   | 838 +++++++++++++++++-----------------
 manifest-lock.overrides.yaml |  38 +-
 manifest-lock.x86_64.json    | 846 ++++++++++++++++++-----------------
 manifest.yaml                |   2 +-
 5 files changed, 869 insertions(+), 857 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 84e119ba28..567ab0b3e2 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:35
+FROM registry.fedoraproject.org/fedora:36
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20220119
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 79515ab6f2..440951ab7a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1060 +1,1081 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.32.12-2.fc35.aarch64"
+      "evra": "1:1.36.4-1.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.32.12-2.fc35.aarch64"
+      "evra": "1:1.36.4-1.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.32.12-2.fc35.aarch64"
+      "evra": "1:1.36.4-1.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.32.12-2.fc35.aarch64"
+      "evra": "1:1.36.4-1.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.32.12-2.fc35.aarch64"
+      "evra": "1:1.36.4-1.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.1.1-2.fc35.noarch"
+      "evra": "2.5.0.2-2.fc36.noarch"
+    },
+    "aardvark-dns": {
+      "evra": "1.0.2-1.fc36.aarch64"
     },
     "acl": {
-      "evra": "2.3.1-2.fc35.aarch64"
+      "evra": "2.3.1-3.fc36.aarch64"
     },
     "adcli": {
-      "evra": "0.9.1-9.fc35.aarch64"
+      "evra": "0.9.1-10.fc36.aarch64"
     },
     "afterburn": {
-      "evra": "5.3.0-1.fc35.aarch64"
+      "evra": "5.3.0-1.fc36.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-1.fc35.aarch64"
+      "evra": "5.3.0-1.fc36.aarch64"
     },
     "alternatives": {
-      "evra": "1.19-1.fc35.aarch64"
+      "evra": "1.19-2.fc36.aarch64"
     },
     "attr": {
-      "evra": "2.5.1-3.fc35.aarch64"
+      "evra": "2.5.1-4.fc36.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc35.aarch64"
+      "evra": "3.0.8-1.fc36.aarch64"
+    },
+    "authselect": {
+      "evra": "1.3.0-10.fc36.aarch64"
+    },
+    "authselect-libs": {
+      "evra": "1.3.0-10.fc36.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-14.fc35.aarch64"
+      "evra": "0.8-15.fc36.aarch64"
     },
     "basesystem": {
-      "evra": "11-12.fc35.noarch"
+      "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.8-2.fc35.aarch64"
+      "evra": "5.1.16-2.fc36.aarch64"
     },
     "bash-completion": {
-      "evra": "1:2.11-3.fc35.noarch"
+      "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.28-1.fc35.aarch64"
+      "evra": "32:9.16.28-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.28-1.fc35.noarch"
+      "evra": "32:9.16.28-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.28-1.fc35.aarch64"
+      "evra": "32:9.16.28-1.fc36.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.6-1.fc35.aarch64"
+      "evra": "0.2.6-2.fc36.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.3-1.fc35.aarch64"
+      "evra": "3.5.3-1.fc36.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.16.2-1.fc35.aarch64"
+      "evra": "5.16.2-1.fc36.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-1.fc35.aarch64"
+      "evra": "0.5.0-2.fc36.aarch64"
     },
     "bzip2": {
-      "evra": "1.0.8-9.fc35.aarch64"
+      "evra": "1.0.8-11.fc36.aarch64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-9.fc35.aarch64"
+      "evra": "1.0.8-11.fc36.aarch64"
     },
     "c-ares": {
-      "evra": "1.17.2-1.fc35.aarch64"
+      "evra": "1.17.2-2.fc36.aarch64"
     },
     "ca-certificates": {
-      "evra": "2021.2.52-1.0.fc35.noarch"
+      "evra": "2021.2.52-3.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-1.fc35.aarch64"
+      "evra": "0.1.7-5.fc36.aarch64"
     },
     "chrony": {
-      "evra": "4.2-1.fc35.aarch64"
+      "evra": "4.2-5.fc36.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc35.aarch64"
+      "evra": "6.15-1.fc36.aarch64"
     },
     "clevis": {
-      "evra": "18-4.fc35.aarch64"
+      "evra": "18-6.fc36.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-4.fc35.aarch64"
+      "evra": "18-6.fc36.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-4.fc35.aarch64"
+      "evra": "18-6.fc36.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-4.fc35.aarch64"
+      "evra": "18-6.fc36.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-9.fc35.noarch"
+      "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc35.aarch64"
+      "evra": "2:2.1.0-2.fc36.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-3.fc35.noarch"
+      "evra": "2:2.183.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-2.fc35.aarch64"
+      "evra": "1.6.2-2.fc36.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc35.aarch64"
+      "evra": "1.1.0-1.fc36.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-45.fc35.noarch"
+      "evra": "4:1-56.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.14.0-1.fc35.aarch64"
+      "evra": "0.14.0-1.fc36.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.14.0-1.fc35.aarch64"
+      "evra": "0.14.0-1.fc36.aarch64"
     },
     "coreutils": {
-      "evra": "8.32-33.fc35.aarch64"
+      "evra": "9.0-5.fc36.aarch64"
     },
     "coreutils-common": {
-      "evra": "8.32-33.fc35.aarch64"
+      "evra": "9.0-5.fc36.aarch64"
     },
     "cpio": {
-      "evra": "2.13-11.fc35.aarch64"
+      "evra": "2.13-12.fc36.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.6-27.fc35.aarch64"
+      "evra": "2.9.6-28.fc36.aarch64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-27.fc35.aarch64"
+      "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.16.1-2.fc35.aarch64"
+      "evra": "3.16.1-12.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.16.1-2.fc35.aarch64"
+      "evra": "3.16.1-12.fc36.aarch64"
     },
     "crun": {
-      "evra": "1.4.4-1.fc35.aarch64"
+      "evra": "1.4.4-1.fc36.aarch64"
     },
     "crypto-policies": {
-      "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
+      "evra": "20220203-2.git112f859.fc36.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-1.fc35.aarch64"
+      "evra": "2.4.3-2.fc36.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-1.fc35.aarch64"
-    },
-    "cups-libs": {
-      "evra": "1:2.3.3op2-17.fc35.aarch64"
+      "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.79.1-1.fc35.aarch64"
+      "evra": "7.82.0-4.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-14.fc35.aarch64"
+      "evra": "2.1.27-18.fc36.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-14.fc35.aarch64"
+      "evra": "2.1.27-18.fc36.aarch64"
     },
     "dbus": {
-      "evra": "1:1.12.22-1.fc35.aarch64"
+      "evra": "1:1.14.0-1.fc36.aarch64"
     },
     "dbus-broker": {
-      "evra": "29-4.fc35.aarch64"
+      "evra": "29-5.fc36.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.12.22-1.fc35.noarch"
+      "evra": "1:1.14.0-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.22-1.fc35.aarch64"
+      "evra": "1:1.14.0-1.fc36.aarch64"
     },
     "device-mapper": {
-      "evra": "1.02.175-6.fc35.aarch64"
+      "evra": "1.02.175-7.fc36.aarch64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-6.fc35.aarch64"
+      "evra": "1.02.175-7.fc36.aarch64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-6.fc35.aarch64"
+      "evra": "1.02.175-7.fc36.aarch64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-6.fc35.aarch64"
+      "evra": "1.02.175-7.fc36.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.6-5.fc35.aarch64"
+      "evra": "0.8.7-8.fc36.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.6-5.fc35.aarch64"
+      "evra": "0.8.7-8.fc36.aarch64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-6.fc35.aarch64"
+      "evra": "0.9.0-7.fc36.aarch64"
     },
     "diffutils": {
-      "evra": "3.8-1.fc35.aarch64"
+      "evra": "3.8-2.fc36.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-5.fc35.aarch64"
+      "evra": "2.86-6.fc36.aarch64"
     },
     "dosfstools": {
-      "evra": "4.2-2.fc35.aarch64"
+      "evra": "4.2-3.fc36.aarch64"
     },
     "dracut": {
-      "evra": "055-6.fc35.aarch64"
+      "evra": "056-1.fc36.aarch64"
     },
     "dracut-network": {
-      "evra": "055-6.fc35.aarch64"
+      "evra": "056-1.fc36.aarch64"
     },
     "dracut-squash": {
-      "evra": "055-6.fc35.aarch64"
+      "evra": "056-1.fc36.aarch64"
     },
     "e2fsprogs": {
-      "evra": "1.46.3-1.fc35.aarch64"
+      "evra": "1.46.5-2.fc36.aarch64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.3-1.fc35.aarch64"
+      "evra": "1.46.5-2.fc36.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-4.fc35.noarch"
+      "evra": "5-5.fc36.noarch"
     },
     "efibootmgr": {
-      "evra": "16-11.fc35.aarch64"
+      "evra": "16-12.fc36.aarch64"
     },
     "efivar-libs": {
-      "evra": "37-17.fc35.aarch64"
+      "evra": "38-2.fc36.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.186-1.fc35.noarch"
+      "evra": "0.187-2.fc36.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.186-1.fc35.aarch64"
+      "evra": "0.187-2.fc36.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.186-1.fc35.aarch64"
+      "evra": "0.187-2.fc36.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.17-1.fc35.aarch64"
+      "evra": "2:5.17-1.fc36.aarch64"
     },
     "expat": {
-      "evra": "2.4.7-1.fc35.aarch64"
+      "evra": "2.4.7-1.fc36.aarch64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-12.fc35.aarch64"
+      "evra": "0.0.4-13.fc36.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-repos": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "file": {
-      "evra": "5.40-9.fc35.aarch64"
+      "evra": "5.41-4.fc36.aarch64"
     },
     "file-libs": {
-      "evra": "5.40-9.fc35.aarch64"
+      "evra": "5.41-4.fc36.aarch64"
     },
     "filesystem": {
-      "evra": "3.14-7.fc35.aarch64"
+      "evra": "3.16-2.fc36.aarch64"
     },
     "findutils": {
-      "evra": "1:4.8.0-4.fc35.aarch64"
+      "evra": "1:4.9.0-1.fc36.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-2.fc35.aarch64"
+      "evra": "1.12.7-2.fc36.aarch64"
     },
     "fstrm": {
-      "evra": "0.6.1-3.fc35.aarch64"
+      "evra": "0.6.1-4.fc36.aarch64"
     },
     "fuse": {
-      "evra": "2.9.9-13.fc35.aarch64"
+      "evra": "2.9.9-14.fc36.aarch64"
     },
     "fuse-common": {
-      "evra": "3.10.5-1.fc35.aarch64"
+      "evra": "3.10.5-2.fc36.aarch64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-13.fc35.aarch64"
+      "evra": "2.9.9-14.fc36.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-2.fc35.aarch64"
+      "evra": "1.8.1-3.fc36.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-2.fc35.aarch64"
+      "evra": "3.7.2-3.fc36.aarch64"
     },
     "fuse3": {
-      "evra": "3.10.5-1.fc35.aarch64"
+      "evra": "3.10.5-2.fc36.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-1.fc35.aarch64"
+      "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.7-1.fc35.aarch64"
+      "evra": "1.7.7-1.fc36.aarch64"
     },
     "gawk": {
-      "evra": "5.1.0-4.fc35.aarch64"
+      "evra": "5.1.1-2.fc36.aarch64"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-1.fc35.aarch64"
+      "evra": "1:1.22-2.fc36.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.9-1.fc35.aarch64"
+      "evra": "1.0.9-1.fc36.aarch64"
     },
     "gettext": {
-      "evra": "0.21-8.fc35.aarch64"
+      "evra": "0.21-9.fc36.aarch64"
     },
     "gettext-libs": {
-      "evra": "0.21-8.fc35.aarch64"
+      "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.35.3-1.fc35.aarch64"
+      "evra": "2.36.0-1.fc36.aarch64"
     },
     "glib2": {
-      "evra": "2.70.5-1.fc35.aarch64"
+      "evra": "2.72.1-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.34-32.fc35.aarch64"
+      "evra": "2.35-5.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.34-32.fc35.aarch64"
+      "evra": "2.35-5.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-32.fc35.aarch64"
+      "evra": "2.35-5.fc36.aarch64"
     },
     "gmp": {
-      "evra": "1:6.2.0-7.fc35.aarch64"
+      "evra": "1:6.2.1-2.fc36.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.4-1.fc35.aarch64"
+      "evra": "2.3.6-1.fc36.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.2-3.fc35.aarch64"
+      "evra": "3.7.4-1.fc36.aarch64"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc35.aarch64"
+      "evra": "1.15.1-6.fc36.aarch64"
     },
     "grep": {
-      "evra": "3.6-4.fc35.aarch64"
+      "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-10.fc35.noarch"
+      "evra": "1:2.06-38.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-10.fc35.aarch64"
+      "evra": "1:2.06-38.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-10.fc35.aarch64"
+      "evra": "1:2.06-38.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-10.fc35.aarch64"
+      "evra": "1:2.06-38.fc36.aarch64"
     },
     "gzip": {
-      "evra": "1.10-6.fc35.aarch64"
+      "evra": "1.11-3.fc36.aarch64"
     },
     "hostname": {
-      "evra": "3.23-5.fc35.aarch64"
+      "evra": "3.23-6.fc36.aarch64"
     },
     "ignition": {
-      "evra": "2.13.0-5.fc35.aarch64"
+      "evra": "2.13.0-5.fc36.aarch64"
     },
     "inih": {
-      "evra": "55-1.fc35.aarch64"
+      "evra": "55-1.fc36.aarch64"
     },
     "iproute": {
-      "evra": "5.13.0-2.fc35.aarch64"
+      "evra": "5.15.0-2.fc36.aarch64"
     },
     "iproute-tc": {
-      "evra": "5.13.0-2.fc35.aarch64"
+      "evra": "5.15.0-2.fc36.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-13.fc35.aarch64"
+      "evra": "1.8.7-15.fc36.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-13.fc35.aarch64"
+      "evra": "1.8.7-15.fc36.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-13.fc35.aarch64"
+      "evra": "1.8.7-15.fc36.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-13.fc35.aarch64"
+      "evra": "1.8.7-15.fc36.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.7-13.fc35.noarch"
+      "evra": "1.8.7-15.fc36.noarch"
     },
     "iputils": {
-      "evra": "20210722-1.fc35.aarch64"
+      "evra": "20211215-2.fc36.aarch64"
     },
     "irqbalance": {
       "evra": "2:1.7.0-8.fc35.aarch64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-0.git095f59c.fc35.2.aarch64"
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.aarch64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-0.git095f59c.fc35.2.aarch64"
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.aarch64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-2.fc35.aarch64"
+      "evra": "0.101-4.fc36.aarch64"
     },
     "jansson": {
-      "evra": "2.13.1-3.fc35.aarch64"
+      "evra": "2.13.1-4.fc36.aarch64"
     },
     "jose": {
-      "evra": "11-3.fc35.aarch64"
+      "evra": "11-5.fc36.aarch64"
     },
     "jq": {
-      "evra": "1.6-10.fc35.aarch64"
+      "evra": "1.6-13.fc36.aarch64"
     },
     "json-c": {
-      "evra": "0.15-2.fc35.aarch64"
+      "evra": "0.15-3.fc36.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.6-1.fc35.aarch64"
+      "evra": "1.6.6-2.fc36.aarch64"
     },
     "kbd": {
-      "evra": "2.4.0-8.fc35.aarch64"
+      "evra": "2.4.0-9.fc36.aarch64"
     },
     "kbd-misc": {
-      "evra": "2.4.0-8.fc35.noarch"
+      "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.5-200.fc35.aarch64"
+      "evra": "5.17.5-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.5-200.fc35.aarch64"
+      "evra": "5.17.5-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.5-200.fc35.aarch64"
+      "evra": "5.17.5-300.fc36.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.22-7.fc35.aarch64"
+      "evra": "2.0.23-6.fc36.aarch64"
     },
     "keyutils": {
-      "evra": "1.6.1-3.fc35.aarch64"
+      "evra": "1.6.1-4.fc36.aarch64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-3.fc35.aarch64"
+      "evra": "1.6.1-4.fc36.aarch64"
     },
     "kmod": {
-      "evra": "29-4.fc35.aarch64"
+      "evra": "29-7.fc36.aarch64"
     },
     "kmod-libs": {
-      "evra": "29-4.fc35.aarch64"
+      "evra": "29-7.fc36.aarch64"
     },
     "kpartx": {
-      "evra": "0.8.6-5.fc35.aarch64"
+      "evra": "0.8.7-8.fc36.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-6.fc35.aarch64"
+      "evra": "1.19.2-9.fc36.aarch64"
     },
     "less": {
-      "evra": "590-2.fc35.aarch64"
+      "evra": "590-3.fc36.aarch64"
     },
     "libacl": {
-      "evra": "2.3.1-2.fc35.aarch64"
+      "evra": "2.3.1-3.fc36.aarch64"
     },
     "libaio": {
-      "evra": "0.3.111-12.fc35.aarch64"
+      "evra": "0.3.111-13.fc36.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.3-1.fc35.aarch64"
+      "evra": "3.5.3-1.fc36.aarch64"
     },
     "libargon2": {
-      "evra": "20171227-7.fc35.aarch64"
+      "evra": "20171227-9.fc36.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.5-3.fc35.aarch64"
+      "evra": "2.5.5-4.fc36.aarch64"
     },
     "libattr": {
-      "evra": "2.5.1-3.fc35.aarch64"
+      "evra": "2.5.1-4.fc36.aarch64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-48.fc35.aarch64"
+      "evra": "0.1.1-50.fc36.aarch64"
     },
     "libblkid": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
+    },
+    "libbpf": {
+      "evra": "2:0.5.0-2.fc36.aarch64"
     },
     "libbrotli": {
-      "evra": "1.0.9-6.fc35.aarch64"
+      "evra": "1.0.9-7.fc36.aarch64"
     },
     "libbsd": {
-      "evra": "0.10.0-8.fc35.aarch64"
+      "evra": "0.10.0-9.fc36.aarch64"
     },
     "libcap": {
-      "evra": "2.48-3.fc35.aarch64"
+      "evra": "2.48-4.fc36.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-8.fc35.aarch64"
+      "evra": "0.8.2-9.fc36.aarch64"
     },
     "libcbor": {
-      "evra": "0.7.0-4.fc35.aarch64"
+      "evra": "0.7.0-5.fc36.aarch64"
     },
     "libcollection": {
-      "evra": "0.7.0-48.fc35.aarch64"
+      "evra": "0.7.0-50.fc36.aarch64"
     },
     "libcom_err": {
-      "evra": "1.46.3-1.fc35.aarch64"
+      "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.79.1-1.fc35.aarch64"
+      "evra": "7.82.0-4.fc36.aarch64"
     },
     "libdaemon": {
-      "evra": "0.14-22.fc35.aarch64"
+      "evra": "0.14-23.fc36.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-50.fc35.aarch64"
+      "evra": "5.3.28-51.fc36.aarch64"
     },
     "libdhash": {
-      "evra": "0.5.0-48.fc35.aarch64"
+      "evra": "0.5.0-50.fc36.aarch64"
     },
     "libeconf": {
-      "evra": "0.4.0-2.fc35.aarch64"
+      "evra": "0.4.0-3.fc36.aarch64"
     },
     "libedit": {
-      "evra": "3.1-40.20210910cvs.fc35.aarch64"
+      "evra": "3.1-41.20210910cvs.fc36.aarch64"
     },
     "libevent": {
-      "evra": "2.1.12-4.fc35.aarch64"
+      "evra": "2.1.12-6.fc36.aarch64"
     },
     "libfdisk": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "libffi": {
-      "evra": "3.1-29.fc35.aarch64"
+      "evra": "3.4.2-8.fc36.aarch64"
     },
     "libfido2": {
-      "evra": "1.8.0-1.fc35.aarch64"
+      "evra": "1.10.0-3.fc36.aarch64"
     },
     "libgcab1": {
-      "evra": "1.4-5.fc35.aarch64"
+      "evra": "1.4-6.fc36.aarch64"
     },
     "libgcc": {
-      "evra": "11.3.1-2.fc35.aarch64"
+      "evra": "12.0.1-0.16.fc36.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.9.4-1.fc35.aarch64"
+      "evra": "1.10.1-2.fc36.aarch64"
     },
     "libgomp": {
-      "evra": "11.3.1-2.fc35.aarch64"
+      "evra": "12.0.1-0.16.fc36.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.43-1.fc35.aarch64"
+      "evra": "1.45-1.fc36.aarch64"
     },
     "libgudev": {
-      "evra": "237-1.fc35.aarch64"
+      "evra": "237-2.fc36.aarch64"
     },
     "libgusb": {
-      "evra": "0.3.9-1.fc35.aarch64"
+      "evra": "0.3.10-2.fc36.aarch64"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc35.aarch64"
+      "evra": "39.0-1.fc36.aarch64"
     },
     "libicu": {
-      "evra": "69.1-2.fc35.aarch64"
+      "evra": "69.1-5.fc36.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.2-3.fc35.aarch64"
+      "evra": "2.3.2-4.fc36.aarch64"
     },
     "libini_config": {
-      "evra": "1.3.1-48.fc35.aarch64"
+      "evra": "1.3.1-50.fc36.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.9-1.fc35.aarch64"
+      "evra": "0.1.10-1.fc36.aarch64"
     },
     "libjose": {
-      "evra": "11-3.fc35.aarch64"
+      "evra": "11-5.fc36.aarch64"
     },
     "libkcapi": {
-      "evra": "1.3.1-3.fc35.aarch64"
+      "evra": "1.3.1-4.fc36.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-3.fc35.aarch64"
+      "evra": "1.3.1-4.fc36.aarch64"
     },
     "libksba": {
-      "evra": "1.6.0-2.fc35.aarch64"
+      "evra": "1.6.0-3.fc36.aarch64"
     },
     "libldb": {
-      "evra": "2.4.2-1.fc35.aarch64"
+      "evra": "2.5.0-1.fc36.aarch64"
     },
     "libluksmeta": {
-      "evra": "9-12.fc35.aarch64"
+      "evra": "9-13.fc36.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-1.fc35.aarch64"
+      "evra": "1.6.0-2.fc36.aarch64"
     },
     "libmnl": {
-      "evra": "1.0.4-14.fc35.aarch64"
+      "evra": "1.0.4-15.fc36.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-1.fc35.aarch64"
+      "evra": "2.14.0-2.fc36.aarch64"
     },
     "libmount": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "libndp": {
-      "evra": "1.8-2.fc35.aarch64"
+      "evra": "1.8-3.fc36.aarch64"
     },
     "libnet": {
-      "evra": "1.2-4.fc35.aarch64"
+      "evra": "1.2-5.fc36.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-3.fc35.aarch64"
+      "evra": "1.0.8-4.fc36.aarch64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-20.fc35.aarch64"
+      "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-2.rc3.fc35.aarch64"
+      "evra": "1:2.6.1-2.rc4.fc36.aarch64"
     },
     "libnftnl": {
-      "evra": "1.2.0-2.fc35.aarch64"
+      "evra": "1.2.1-2.fc36.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.45.1-1.fc35.aarch64"
+      "evra": "1.46.0-2.fc36.aarch64"
     },
     "libnl3": {
-      "evra": "3.5.0-8.fc35.aarch64"
+      "evra": "3.5.0-9.fc36.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-8.fc35.aarch64"
+      "evra": "3.5.0-9.fc36.aarch64"
     },
     "libnsl2": {
-      "evra": "1.3.0-4.fc35.aarch64"
+      "evra": "2.0.0-3.fc36.aarch64"
+    },
+    "libnvme": {
+      "evra": "1.0-1.fc36.aarch64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-48.fc35.aarch64"
+      "evra": "0.2.1-50.fc36.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-2.fc35.aarch64"
+      "evra": "14:1.10.1-3.fc36.aarch64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-1.fc35.aarch64"
+      "evra": "1.8.0-2.fc36.aarch64"
     },
     "libpsl": {
-      "evra": "0.21.1-4.fc35.aarch64"
+      "evra": "0.21.1-5.fc36.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.4-6.fc35.aarch64"
+      "evra": "1.4.4-7.fc36.aarch64"
     },
     "libref_array": {
-      "evra": "0.1.5-48.fc35.aarch64"
+      "evra": "0.1.5-50.fc36.aarch64"
     },
     "librepo": {
-      "evra": "1.14.2-1.fc35.aarch64"
+      "evra": "1.14.2-2.fc36.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-8.fc35.noarch"
+      "evra": "2.17.1-1.fc36.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-1.fc35.aarch64"
+      "evra": "2.5.3-2.fc36.aarch64"
     },
     "libselinux": {
-      "evra": "3.3-1.fc35.aarch64"
+      "evra": "3.3-4.fc36.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.3-1.fc35.aarch64"
+      "evra": "3.3-4.fc36.aarch64"
     },
     "libsemanage": {
-      "evra": "3.3-1.fc35.aarch64"
+      "evra": "3.3-3.fc36.aarch64"
     },
     "libsepol": {
-      "evra": "3.3-2.fc35.aarch64"
+      "evra": "3.3-3.fc36.aarch64"
     },
     "libsigsegv": {
-      "evra": "2.13-3.fc35.aarch64"
+      "evra": "2.14-2.fc36.aarch64"
     },
     "libslirp": {
-      "evra": "4.6.1-2.fc35.aarch64"
+      "evra": "4.6.1-3.fc36.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.7-0.fc35.aarch64"
+      "evra": "2:4.16.1-0.fc36.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc35.aarch64"
+      "evra": "0.7.22-1.fc36.aarch64"
     },
     "libss": {
-      "evra": "1.46.3-1.fc35.aarch64"
+      "evra": "1.46.5-2.fc36.aarch64"
     },
     "libssh": {
-      "evra": "0.9.6-1.fc35.aarch64"
+      "evra": "0.9.6-4.fc36.aarch64"
     },
     "libssh-config": {
-      "evra": "0.9.6-1.fc35.noarch"
+      "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "libstdc++": {
-      "evra": "11.3.1-2.fc35.aarch64"
+      "evra": "12.0.1-0.16.fc36.aarch64"
     },
     "libtalloc": {
-      "evra": "2.3.3-2.fc35.aarch64"
+      "evra": "2.3.3-3.fc36.aarch64"
     },
     "libtasn1": {
-      "evra": "4.16.0-6.fc35.aarch64"
+      "evra": "4.18.0-2.fc36.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.4-3.fc35.aarch64"
+      "evra": "1.4.6-1.fc36.aarch64"
     },
     "libteam": {
-      "evra": "1.31-4.fc35.aarch64"
+      "evra": "1.31-5.fc36.aarch64"
     },
     "libtevent": {
-      "evra": "0.11.0-1.fc35.aarch64"
+      "evra": "0.12.0-0.fc36.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.fc35.aarch64"
+      "evra": "1.3.2-1.rc1.fc36.1.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-50.fc35.aarch64"
+      "evra": "2.4.6-50.fc36.aarch64"
     },
     "libunistring": {
-      "evra": "0.9.10-14.fc35.aarch64"
+      "evra": "1.0-1.fc36.aarch64"
     },
     "libusb1": {
-      "evra": "1.0.25-8.fc35.aarch64"
+      "evra": "1.0.25-8.fc36.aarch64"
     },
     "libuser": {
-      "evra": "0.63-7.fc35.aarch64"
+      "evra": "0.63-10.fc36.aarch64"
     },
     "libutempter": {
-      "evra": "1.2.1-5.fc35.aarch64"
+      "evra": "1.2.1-6.fc36.aarch64"
     },
     "libuuid": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "libuv": {
-      "evra": "1:1.44.1-1.fc35.aarch64"
+      "evra": "1:1.44.1-1.fc36.aarch64"
     },
     "libverto": {
-      "evra": "0.3.2-2.fc35.aarch64"
+      "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.15.7-0.fc35.aarch64"
+      "evra": "2:4.16.1-0.fc36.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc35.aarch64"
+      "evra": "4.4.28-1.fc36.aarch64"
     },
     "libxml2": {
-      "evra": "2.9.13-1.fc35.aarch64"
+      "evra": "2.9.14-1.fc36.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.6-1.fc35.aarch64"
+      "evra": "0.3.7-1.fc36.aarch64"
     },
     "libyaml": {
-      "evra": "0.2.5-6.fc35.aarch64"
+      "evra": "0.2.5-7.fc36.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.2-1.fc35.aarch64"
+      "evra": "1.5.2-1.fc36.aarch64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-30.fc35.aarch64"
+      "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220411-131.fc35.noarch"
+      "evra": "20220411-131.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220411-131.fc35.noarch"
+      "evra": "20220411-131.fc36.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-2.fc35.aarch64"
+      "evra": "0.9.29-3.fc36.aarch64"
     },
     "logrotate": {
-      "evra": "3.18.1-2.fc35.aarch64"
+      "evra": "3.19.0-2.fc36.aarch64"
     },
     "lsof": {
-      "evra": "4.94.0-2.fc35.aarch64"
+      "evra": "4.94.0-3.fc36.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-1.fc35.aarch64"
+      "evra": "5.4.4-1.fc36.aarch64"
     },
     "luksmeta": {
-      "evra": "9-12.fc35.aarch64"
+      "evra": "9-13.fc36.aarch64"
     },
     "lvm2": {
-      "evra": "2.03.11-6.fc35.aarch64"
+      "evra": "2.03.11-7.fc36.aarch64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-6.fc35.aarch64"
+      "evra": "2.03.11-7.fc36.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-3.fc35.aarch64"
+      "evra": "1.9.3-4.fc36.aarch64"
     },
     "lzo": {
-      "evra": "2.10-5.fc35.aarch64"
+      "evra": "2.10-6.fc36.aarch64"
     },
     "mdadm": {
-      "evra": "4.2-1.fc35.aarch64"
+      "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.14-1.fc35.aarch64"
+      "evra": "20.10.14-1.fc36.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.5.0-1.fc35.aarch64"
+      "evra": "2:0.5.0-2.fc36.aarch64"
     },
-    "mozjs78": {
-      "evra": "78.15.0-1.fc35.aarch64"
+    "mozjs91": {
+      "evra": "91.8.0-1.fc36.aarch64"
     },
     "mpfr": {
-      "evra": "4.1.0-8.fc35.aarch64"
+      "evra": "4.1.0-9.fc36.aarch64"
     },
     "nano": {
-      "evra": "5.8-4.fc35.aarch64"
+      "evra": "6.0-2.fc36.aarch64"
     },
     "nano-default-editor": {
-      "evra": "5.8-4.fc35.noarch"
+      "evra": "6.0-2.fc36.noarch"
     },
     "ncurses": {
-      "evra": "6.2-8.20210508.fc35.aarch64"
+      "evra": "6.2-9.20210508.fc36.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.2-8.20210508.fc35.noarch"
+      "evra": "6.2-9.20210508.fc36.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-8.20210508.fc35.aarch64"
+      "evra": "6.2-9.20210508.fc36.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.60.20160912git.fc35.aarch64"
+      "evra": "2.0-0.61.20160912git.fc36.aarch64"
+    },
+    "netavark": {
+      "evra": "1.0.2-1.fc36.aarch64"
     },
     "nettle": {
-      "evra": "3.7.3-2.fc35.aarch64"
+      "evra": "3.7.3-3.fc36.aarch64"
     },
     "newt": {
-      "evra": "0.52.21-11.fc35.aarch64"
+      "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-2.rc3.fc35.aarch64"
+      "evra": "1:2.6.1-2.rc4.fc36.aarch64"
     },
     "nftables": {
-      "evra": "1:1.0.0-1.fc35.aarch64"
+      "evra": "1:1.0.1-3.fc36.aarch64"
     },
     "npth": {
-      "evra": "1.6-7.fc35.aarch64"
+      "evra": "1.6-8.fc36.aarch64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-19.fc35.aarch64"
+      "evra": "2.18.1-20.fc36.aarch64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-4.fc35.aarch64"
+      "evra": "2.0.14-5.fc36.aarch64"
     },
     "nvme-cli": {
-      "evra": "1.11.1-4.fc35.aarch64"
+      "evra": "2.0-1.fc36.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc35.aarch64"
+      "evra": "6.9.8-1.fc36.aarch64"
     },
     "openldap": {
-      "evra": "2.4.59-3.fc35.aarch64"
+      "evra": "2.6.1-2.fc36.aarch64"
+    },
+    "openldap-compat": {
+      "evra": "2.6.1-2.fc36.aarch64"
     },
     "openssh": {
-      "evra": "8.7p1-3.fc35.aarch64"
+      "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.7p1-3.fc35.aarch64"
+      "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssh-server": {
-      "evra": "8.7p1-3.fc35.aarch64"
+      "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssl": {
-      "evra": "1:1.1.1n-1.fc35.aarch64"
+      "evra": "1:3.0.2-5.fc36.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1n-1.fc35.aarch64"
+      "evra": "1:3.0.2-5.fc36.aarch64"
     },
     "os-prober": {
-      "evra": "1.77-8.fc35.aarch64"
+      "evra": "1.77-9.fc36.aarch64"
     },
     "ostree": {
-      "evra": "2022.2-1.fc35.aarch64"
+      "evra": "2022.2-1.fc36.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.2-1.fc35.aarch64"
+      "evra": "2022.2-1.fc36.aarch64"
     },
     "p11-kit": {
-      "evra": "0.23.22-4.fc35.aarch64"
+      "evra": "0.24.1-2.fc36.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-4.fc35.aarch64"
+      "evra": "0.24.1-2.fc36.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-7.fc35.aarch64"
+      "evra": "1.5.2-12.fc36.aarch64"
+    },
+    "pam-libs": {
+      "evra": "1.5.2-12.fc36.aarch64"
     },
     "passwd": {
-      "evra": "0.80-11.fc35.aarch64"
+      "evra": "0.80-12.fc36.aarch64"
     },
     "pcre": {
-      "evra": "8.45-1.fc35.aarch64"
+      "evra": "8.45-1.fc36.1.aarch64"
     },
     "pcre2": {
-      "evra": "10.39-1.fc35.aarch64"
+      "evra": "10.39-1.fc36.1.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.39-1.fc35.noarch"
+      "evra": "10.39-1.fc36.1.noarch"
     },
     "pigz": {
-      "evra": "2.5-2.fc35.aarch64"
+      "evra": "2.7-1.fc36.aarch64"
     },
     "pkgconf": {
-      "evra": "1.8.0-1.fc35.aarch64"
+      "evra": "1.8.0-2.fc36.aarch64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-1.fc35.noarch"
+      "evra": "1.8.0-2.fc36.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-1.fc35.aarch64"
+      "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:3.4.7-1.fc35.aarch64"
+      "evra": "3:4.0.3-1.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.7-1.fc35.aarch64"
+      "evra": "3:4.0.3-1.fc36.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.3-1.fc35.aarch64"
+      "evra": "3.3-4.fc36.aarch64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.2.aarch64"
+      "evra": "0.120-5.fc36.aarch64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.2.aarch64"
+      "evra": "0.120-5.fc36.aarch64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-20.fc35.aarch64"
+      "evra": "0.1-21.fc36.aarch64"
     },
     "popt": {
-      "evra": "1.18-6.fc35.aarch64"
+      "evra": "1.18-7.fc36.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-3.fc35.aarch64"
+      "evra": "3.3.17-4.fc36.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.4.0-1.fc35.aarch64"
+      "evra": "1.4.0-4.fc36.aarch64"
     },
     "psmisc": {
-      "evra": "23.4-2.fc35.aarch64"
+      "evra": "23.4-3.fc36.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-2.fc35.noarch"
+      "evra": "20210518-4.fc36.noarch"
     },
     "readline": {
-      "evra": "8.1-3.fc35.aarch64"
+      "evra": "8.1-6.fc36.aarch64"
     },
     "rpcbind": {
-      "evra": "1.2.6-1.fc35.aarch64"
+      "evra": "1.2.6-2.fc36.aarch64"
     },
     "rpm": {
-      "evra": "4.17.0-4.fc35.aarch64"
+      "evra": "4.17.0-10.fc36.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-4.fc35.aarch64"
+      "evra": "4.17.0-10.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.8-1.fc35.aarch64"
+      "evra": "2022.8-1.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.8-1.fc35.aarch64"
+      "evra": "2022.8-1.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-4.fc35.aarch64"
+      "evra": "4.17.0-10.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.3-9.fc35.aarch64"
+      "evra": "3.2.3-15.fc36.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.1-1.fc35.aarch64"
+      "evra": "2:1.1.1-1.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.7-0.fc35.aarch64"
+      "evra": "2:4.16.1-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.15.7-0.fc35.noarch"
+      "evra": "2:4.16.1-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.7-0.fc35.aarch64"
+      "evra": "2:4.16.1-0.fc36.aarch64"
     },
     "sed": {
-      "evra": "4.8-8.fc35.aarch64"
+      "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "35.17-1.fc35.noarch"
+      "evra": "36.8-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.17-1.fc35.noarch"
+      "evra": "36.8-1.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.9.1-2.fc35.noarch"
+      "evra": "2.13.9.1-3.fc36.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-2.fc35.aarch64"
+      "evra": "1.46-3.fc36.aarch64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-2.fc35.aarch64"
+      "evra": "1.46-3.fc36.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-9.fc35.aarch64"
+      "evra": "2:4.11.1-2.fc36.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-9.fc35.aarch64"
+      "evra": "2:4.11.1-2.fc36.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1063,158 +1084,161 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.7.0-1.fc35.aarch64"
+      "evra": "1:1.7.0-1.fc36.aarch64"
     },
     "slang": {
-      "evra": "2.3.2-10.fc35.aarch64"
+      "evra": "2.3.2-11.fc36.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.1.12-2.fc35.aarch64"
+      "evra": "1.2.0-0.2.beta.0.fc36.aarch64"
     },
     "snappy": {
-      "evra": "1.1.9-3.fc35.aarch64"
+      "evra": "1.1.9-4.fc36.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.2-1.fc35.aarch64"
+      "evra": "1.7.4.2-2.fc36.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-3.fc35.aarch64"
+      "evra": "3.36.0-5.fc36.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc35.aarch64"
+      "evra": "4.5.1-1.fc36.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.2-8.fc35.aarch64"
+      "evra": "0.1.3-2.fc36.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-idp": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.0-1.fc35.aarch64"
+      "evra": "2.7.0-1.fc36.aarch64"
     },
     "stalld": {
-      "evra": "1.14.1-1.fc35.aarch64"
+      "evra": "1.15-2.fc36.aarch64"
     },
     "sudo": {
-      "evra": "1.9.7p2-2.fc35.aarch64"
+      "evra": "1.9.8-5.p2.fc36.aarch64"
     },
     "systemd": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "systemd-container": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "systemd-libs": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "systemd-pam": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "systemd-resolved": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "systemd-udev": {
-      "evra": "249.12-3.fc35.aarch64"
+      "evra": "250.3-8.fc36.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-2.fc35.aarch64"
+      "evra": "2:1.34-3.fc36.aarch64"
     },
     "teamd": {
-      "evra": "1.31-4.fc35.aarch64"
+      "evra": "1.31-5.fc36.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-2.fc35.aarch64"
+      "evra": "0.0.99.3-4.fc36.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.2-1.fc35.aarch64"
+      "evra": "5.2-2.fc36.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.1.0-3.fc35.aarch64"
+      "evra": "3.2.0-1.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022a-2.fc35.noarch"
+      "evra": "2022a-2.fc36.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-3.fc35.aarch64"
+      "evra": "0.13.0-4.fc36.aarch64"
     },
     "util-linux": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.37.4-1.fc35.aarch64"
+      "evra": "2.38-0.2.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4845-1.fc35.noarch"
+      "evra": "2:8.2.4845-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4845-1.fc35.aarch64"
+      "evra": "2:8.2.4845-1.fc36.aarch64"
     },
     "which": {
-      "evra": "2.21-27.fc35.aarch64"
+      "evra": "2.21-32.fc36.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-1.fc35.aarch64"
+      "evra": "1.0.20210914-2.fc36.aarch64"
     },
     "xfsprogs": {
-      "evra": "5.12.0-2.fc35.aarch64"
+      "evra": "5.14.2-2.fc36.aarch64"
+    },
+    "xxhash-libs": {
+      "evra": "0.8.1-2.fc36.aarch64"
     },
     "xz": {
-      "evra": "5.2.5-9.fc35.aarch64"
+      "evra": "5.2.5-9.fc36.aarch64"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc35.aarch64"
+      "evra": "5.2.5-9.fc36.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-17.fc35.aarch64"
+      "evra": "2.1.0-18.fc36.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc35.aarch64"
+      "evra": "1.2.2-1.fc36.aarch64"
     },
     "zincati": {
-      "evra": "0.0.24-1.fc35.aarch64"
+      "evra": "0.0.24-3.fc36.aarch64"
     },
     "zlib": {
-      "evra": "1.2.11-30.fc35.aarch64"
+      "evra": "1.2.11-31.fc36.aarch64"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc35.aarch64"
+      "evra": "1.1.2-1.fc36.aarch64"
     }
   },
   "metadata": {
-    "generated": "2022-05-09T20:53:07Z",
+    "generated": "2022-05-09T20:52:59Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2021-10-26T05:31:21Z"
-      },
       "fedora-coreos-pool": {
         "generated": "2022-05-08T22:06:35Z"
       },
-      "fedora-updates": {
-        "generated": "2022-05-09T13:07:21Z"
+      "fedora-next": {
+        "generated": "2022-05-06T10:02:00Z"
+      },
+      "fedora-next-updates": {
+        "generated": "2022-05-09T01:28:30Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5ad9627dd6..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,40 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  systemd:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
-  systemd-container:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
-  systemd-libs:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
-  systemd-pam:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
-  systemd-resolved:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
-  systemd-udev:
-    evr: 249.12-3.fc35
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1108
-      type: fast-track
+packages: {}
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7067b91ee6..d365d41e47 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1072 +1,1093 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.32.12-2.fc35.x86_64"
+      "evra": "1:1.36.4-1.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.32.12-2.fc35.x86_64"
+      "evra": "1:1.36.4-1.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.32.12-2.fc35.x86_64"
+      "evra": "1:1.36.4-1.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.32.12-2.fc35.x86_64"
+      "evra": "1:1.36.4-1.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.32.12-2.fc35.x86_64"
+      "evra": "1:1.36.4-1.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.3.1.1-2.fc35.noarch"
+      "evra": "2.5.0.2-2.fc36.noarch"
+    },
+    "aardvark-dns": {
+      "evra": "1.0.2-1.fc36.x86_64"
     },
     "acl": {
-      "evra": "2.3.1-2.fc35.x86_64"
+      "evra": "2.3.1-3.fc36.x86_64"
     },
     "adcli": {
-      "evra": "0.9.1-9.fc35.x86_64"
+      "evra": "0.9.1-10.fc36.x86_64"
     },
     "afterburn": {
-      "evra": "5.3.0-1.fc35.x86_64"
+      "evra": "5.3.0-1.fc36.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-1.fc35.x86_64"
+      "evra": "5.3.0-1.fc36.x86_64"
     },
     "alternatives": {
-      "evra": "1.19-1.fc35.x86_64"
+      "evra": "1.19-2.fc36.x86_64"
     },
     "attr": {
-      "evra": "2.5.1-3.fc35.x86_64"
+      "evra": "2.5.1-4.fc36.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc35.x86_64"
+      "evra": "3.0.8-1.fc36.x86_64"
+    },
+    "authselect": {
+      "evra": "1.3.0-10.fc36.x86_64"
+    },
+    "authselect-libs": {
+      "evra": "1.3.0-10.fc36.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-14.fc35.x86_64"
+      "evra": "0.8-15.fc36.x86_64"
     },
     "basesystem": {
-      "evra": "11-12.fc35.noarch"
+      "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.8-2.fc35.x86_64"
+      "evra": "5.1.16-2.fc36.x86_64"
     },
     "bash-completion": {
-      "evra": "1:2.11-3.fc35.noarch"
+      "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.28-1.fc35.x86_64"
+      "evra": "32:9.16.28-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.28-1.fc35.noarch"
+      "evra": "32:9.16.28-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.28-1.fc35.x86_64"
+      "evra": "32:9.16.28-1.fc36.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.6-1.fc35.x86_64"
+      "evra": "0.2.6-2.fc36.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.3-1.fc35.x86_64"
+      "evra": "3.5.3-1.fc36.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.16.2-1.fc35.x86_64"
+      "evra": "5.16.2-1.fc36.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-1.fc35.x86_64"
+      "evra": "0.5.0-2.fc36.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-9.fc35.x86_64"
+      "evra": "1.0.8-11.fc36.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-9.fc35.x86_64"
+      "evra": "1.0.8-11.fc36.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.2-1.fc35.x86_64"
+      "evra": "1.17.2-2.fc36.x86_64"
     },
     "ca-certificates": {
-      "evra": "2021.2.52-1.0.fc35.noarch"
+      "evra": "2021.2.52-3.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-1.fc35.x86_64"
+      "evra": "0.1.7-5.fc36.x86_64"
     },
     "chrony": {
-      "evra": "4.2-1.fc35.x86_64"
+      "evra": "4.2-5.fc36.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc35.x86_64"
+      "evra": "6.15-1.fc36.x86_64"
     },
     "clevis": {
-      "evra": "18-4.fc35.x86_64"
+      "evra": "18-6.fc36.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-4.fc35.x86_64"
+      "evra": "18-6.fc36.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-4.fc35.x86_64"
+      "evra": "18-6.fc36.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-4.fc35.x86_64"
+      "evra": "18-6.fc36.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-9.fc35.noarch"
+      "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc35.x86_64"
+      "evra": "2:2.1.0-2.fc36.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-3.fc35.noarch"
+      "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-3.fc35.noarch"
+      "evra": "2:2.183.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-2.fc35.x86_64"
+      "evra": "1.6.2-2.fc36.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc35.x86_64"
+      "evra": "1.1.0-1.fc36.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-45.fc35.noarch"
+      "evra": "4:1-56.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.14.0-1.fc35.x86_64"
+      "evra": "0.14.0-1.fc36.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.14.0-1.fc35.x86_64"
+      "evra": "0.14.0-1.fc36.x86_64"
     },
     "coreutils": {
-      "evra": "8.32-33.fc35.x86_64"
+      "evra": "9.0-5.fc36.x86_64"
     },
     "coreutils-common": {
-      "evra": "8.32-33.fc35.x86_64"
+      "evra": "9.0-5.fc36.x86_64"
     },
     "cpio": {
-      "evra": "2.13-11.fc35.x86_64"
+      "evra": "2.13-12.fc36.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.6-27.fc35.x86_64"
+      "evra": "2.9.6-28.fc36.x86_64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-27.fc35.x86_64"
+      "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.16.1-2.fc35.x86_64"
+      "evra": "3.16.1-12.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.16.1-2.fc35.x86_64"
+      "evra": "3.16.1-12.fc36.x86_64"
     },
     "crun": {
-      "evra": "1.4.4-1.fc35.x86_64"
+      "evra": "1.4.4-1.fc36.x86_64"
     },
     "crypto-policies": {
-      "evra": "20210819-1.gitd0fdcfb.fc35.noarch"
+      "evra": "20220203-2.git112f859.fc36.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-1.fc35.x86_64"
+      "evra": "2.4.3-2.fc36.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-1.fc35.x86_64"
-    },
-    "cups-libs": {
-      "evra": "1:2.3.3op2-17.fc35.x86_64"
+      "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.79.1-1.fc35.x86_64"
+      "evra": "7.82.0-4.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-14.fc35.x86_64"
+      "evra": "2.1.27-18.fc36.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-14.fc35.x86_64"
+      "evra": "2.1.27-18.fc36.x86_64"
     },
     "dbus": {
-      "evra": "1:1.12.22-1.fc35.x86_64"
+      "evra": "1:1.14.0-1.fc36.x86_64"
     },
     "dbus-broker": {
-      "evra": "29-4.fc35.x86_64"
+      "evra": "29-5.fc36.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.12.22-1.fc35.noarch"
+      "evra": "1:1.14.0-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.12.22-1.fc35.x86_64"
+      "evra": "1:1.14.0-1.fc36.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.175-6.fc35.x86_64"
+      "evra": "1.02.175-7.fc36.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-6.fc35.x86_64"
+      "evra": "1.02.175-7.fc36.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-6.fc35.x86_64"
+      "evra": "1.02.175-7.fc36.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-6.fc35.x86_64"
+      "evra": "1.02.175-7.fc36.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.6-5.fc35.x86_64"
+      "evra": "0.8.7-8.fc36.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.6-5.fc35.x86_64"
+      "evra": "0.8.7-8.fc36.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-6.fc35.x86_64"
+      "evra": "0.9.0-7.fc36.x86_64"
     },
     "diffutils": {
-      "evra": "3.8-1.fc35.x86_64"
+      "evra": "3.8-2.fc36.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-5.fc35.x86_64"
+      "evra": "2.86-6.fc36.x86_64"
     },
     "dosfstools": {
-      "evra": "4.2-2.fc35.x86_64"
+      "evra": "4.2-3.fc36.x86_64"
     },
     "dracut": {
-      "evra": "055-6.fc35.x86_64"
+      "evra": "056-1.fc36.x86_64"
     },
     "dracut-network": {
-      "evra": "055-6.fc35.x86_64"
+      "evra": "056-1.fc36.x86_64"
     },
     "dracut-squash": {
-      "evra": "055-6.fc35.x86_64"
+      "evra": "056-1.fc36.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.46.3-1.fc35.x86_64"
+      "evra": "1.46.5-2.fc36.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.3-1.fc35.x86_64"
+      "evra": "1.46.5-2.fc36.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-4.fc35.noarch"
+      "evra": "5-5.fc36.noarch"
     },
     "efibootmgr": {
-      "evra": "16-11.fc35.x86_64"
+      "evra": "16-12.fc36.x86_64"
     },
     "efivar-libs": {
-      "evra": "37-17.fc35.x86_64"
+      "evra": "38-2.fc36.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.186-1.fc35.noarch"
+      "evra": "0.187-2.fc36.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.186-1.fc35.x86_64"
+      "evra": "0.187-2.fc36.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.186-1.fc35.x86_64"
+      "evra": "0.187-2.fc36.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.17-1.fc35.x86_64"
+      "evra": "2:5.17-1.fc36.x86_64"
     },
     "expat": {
-      "evra": "2.4.7-1.fc35.x86_64"
+      "evra": "2.4.7-1.fc36.x86_64"
     },
     "fedora-coreos-pinger": {
-      "evra": "0.0.4-12.fc35.x86_64"
+      "evra": "0.0.4-13.fc36.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "35-36.noarch"
+      "evra": "36-17.noarch"
     },
     "fedora-repos": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "35-1.noarch"
+      "evra": "36-1.noarch"
     },
     "file": {
-      "evra": "5.40-9.fc35.x86_64"
+      "evra": "5.41-4.fc36.x86_64"
     },
     "file-libs": {
-      "evra": "5.40-9.fc35.x86_64"
+      "evra": "5.41-4.fc36.x86_64"
     },
     "filesystem": {
-      "evra": "3.14-7.fc35.x86_64"
+      "evra": "3.16-2.fc36.x86_64"
     },
     "findutils": {
-      "evra": "1:4.8.0-4.fc35.x86_64"
+      "evra": "1:4.9.0-1.fc36.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-2.fc35.x86_64"
+      "evra": "1.12.7-2.fc36.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-3.fc35.x86_64"
+      "evra": "0.6.1-4.fc36.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-13.fc35.x86_64"
+      "evra": "2.9.9-14.fc36.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.5-1.fc35.x86_64"
+      "evra": "3.10.5-2.fc36.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-13.fc35.x86_64"
+      "evra": "2.9.9-14.fc36.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.7.1-2.fc35.x86_64"
+      "evra": "1.8.1-3.fc36.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-2.fc35.x86_64"
+      "evra": "3.7.2-3.fc36.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.5-1.fc35.x86_64"
+      "evra": "3.10.5-2.fc36.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-1.fc35.x86_64"
+      "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.7-1.fc35.x86_64"
+      "evra": "1.7.7-1.fc36.x86_64"
     },
     "gawk": {
-      "evra": "5.1.0-4.fc35.x86_64"
+      "evra": "5.1.1-2.fc36.x86_64"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-1.fc35.x86_64"
+      "evra": "1:1.22-2.fc36.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.9-1.fc35.x86_64"
+      "evra": "1.0.9-1.fc36.x86_64"
     },
     "gettext": {
-      "evra": "0.21-8.fc35.x86_64"
+      "evra": "0.21-9.fc36.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21-8.fc35.x86_64"
+      "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.35.3-1.fc35.x86_64"
+      "evra": "2.36.0-1.fc36.x86_64"
     },
     "glib2": {
-      "evra": "2.70.5-1.fc35.x86_64"
+      "evra": "2.72.1-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.34-32.fc35.x86_64"
+      "evra": "2.35-5.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.34-32.fc35.x86_64"
+      "evra": "2.35-5.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.34-32.fc35.x86_64"
+      "evra": "2.35-5.fc36.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.0-7.fc35.x86_64"
+      "evra": "1:6.2.1-2.fc36.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.4-1.fc35.x86_64"
+      "evra": "2.3.6-1.fc36.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.2-3.fc35.x86_64"
+      "evra": "3.7.4-1.fc36.x86_64"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc35.x86_64"
+      "evra": "1.15.1-6.fc36.x86_64"
     },
     "grep": {
-      "evra": "3.6-4.fc35.x86_64"
+      "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-10.fc35.noarch"
+      "evra": "1:2.06-38.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-10.fc35.x86_64"
+      "evra": "1:2.06-38.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-10.fc35.x86_64"
+      "evra": "1:2.06-38.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-10.fc35.noarch"
+      "evra": "1:2.06-38.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-10.fc35.x86_64"
+      "evra": "1:2.06-38.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-10.fc35.x86_64"
+      "evra": "1:2.06-38.fc36.x86_64"
     },
     "gzip": {
-      "evra": "1.10-6.fc35.x86_64"
+      "evra": "1.11-3.fc36.x86_64"
     },
     "hostname": {
-      "evra": "3.23-5.fc35.x86_64"
+      "evra": "3.23-6.fc36.x86_64"
     },
     "ignition": {
-      "evra": "2.13.0-5.fc35.x86_64"
+      "evra": "2.13.0-5.fc36.x86_64"
     },
     "inih": {
-      "evra": "55-1.fc35.x86_64"
+      "evra": "55-1.fc36.x86_64"
     },
     "iproute": {
-      "evra": "5.13.0-2.fc35.x86_64"
+      "evra": "5.15.0-2.fc36.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.13.0-2.fc35.x86_64"
+      "evra": "5.15.0-2.fc36.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-13.fc35.x86_64"
+      "evra": "1.8.7-15.fc36.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-13.fc35.x86_64"
+      "evra": "1.8.7-15.fc36.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-13.fc35.x86_64"
+      "evra": "1.8.7-15.fc36.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-13.fc35.x86_64"
+      "evra": "1.8.7-15.fc36.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.7-13.fc35.noarch"
+      "evra": "1.8.7-15.fc36.noarch"
     },
     "iputils": {
-      "evra": "20210722-1.fc35.x86_64"
+      "evra": "20211215-2.fc36.x86_64"
     },
     "irqbalance": {
       "evra": "2:1.7.0-8.fc35.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-0.git095f59c.fc35.2.x86_64"
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-0.git095f59c.fc35.2.x86_64"
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-2.fc35.x86_64"
+      "evra": "0.101-4.fc36.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-3.fc35.x86_64"
+      "evra": "2.13.1-4.fc36.x86_64"
     },
     "jose": {
-      "evra": "11-3.fc35.x86_64"
+      "evra": "11-5.fc36.x86_64"
     },
     "jq": {
-      "evra": "1.6-10.fc35.x86_64"
+      "evra": "1.6-13.fc36.x86_64"
     },
     "json-c": {
-      "evra": "0.15-2.fc35.x86_64"
+      "evra": "0.15-3.fc36.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.6-1.fc35.x86_64"
+      "evra": "1.6.6-2.fc36.x86_64"
     },
     "kbd": {
-      "evra": "2.4.0-8.fc35.x86_64"
+      "evra": "2.4.0-9.fc36.x86_64"
     },
     "kbd-misc": {
-      "evra": "2.4.0-8.fc35.noarch"
+      "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.5-200.fc35.x86_64"
+      "evra": "5.17.5-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.5-200.fc35.x86_64"
+      "evra": "5.17.5-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.5-200.fc35.x86_64"
+      "evra": "5.17.5-300.fc36.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.22-7.fc35.x86_64"
+      "evra": "2.0.23-6.fc36.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-3.fc35.x86_64"
+      "evra": "1.6.1-4.fc36.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-3.fc35.x86_64"
+      "evra": "1.6.1-4.fc36.x86_64"
     },
     "kmod": {
-      "evra": "29-4.fc35.x86_64"
+      "evra": "29-7.fc36.x86_64"
     },
     "kmod-libs": {
-      "evra": "29-4.fc35.x86_64"
+      "evra": "29-7.fc36.x86_64"
     },
     "kpartx": {
-      "evra": "0.8.6-5.fc35.x86_64"
+      "evra": "0.8.7-8.fc36.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-6.fc35.x86_64"
+      "evra": "1.19.2-9.fc36.x86_64"
     },
     "less": {
-      "evra": "590-2.fc35.x86_64"
+      "evra": "590-3.fc36.x86_64"
     },
     "libacl": {
-      "evra": "2.3.1-2.fc35.x86_64"
+      "evra": "2.3.1-3.fc36.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-12.fc35.x86_64"
+      "evra": "0.3.111-13.fc36.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.3-1.fc35.x86_64"
+      "evra": "3.5.3-1.fc36.x86_64"
     },
     "libargon2": {
-      "evra": "20171227-7.fc35.x86_64"
+      "evra": "20171227-9.fc36.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.5-3.fc35.x86_64"
+      "evra": "2.5.5-4.fc36.x86_64"
     },
     "libattr": {
-      "evra": "2.5.1-3.fc35.x86_64"
+      "evra": "2.5.1-4.fc36.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-48.fc35.x86_64"
+      "evra": "0.1.1-50.fc36.x86_64"
     },
     "libblkid": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
+    },
+    "libbpf": {
+      "evra": "2:0.5.0-2.fc36.x86_64"
     },
     "libbrotli": {
-      "evra": "1.0.9-6.fc35.x86_64"
+      "evra": "1.0.9-7.fc36.x86_64"
     },
     "libbsd": {
-      "evra": "0.10.0-8.fc35.x86_64"
+      "evra": "0.10.0-9.fc36.x86_64"
     },
     "libcap": {
-      "evra": "2.48-3.fc35.x86_64"
+      "evra": "2.48-4.fc36.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-8.fc35.x86_64"
+      "evra": "0.8.2-9.fc36.x86_64"
     },
     "libcbor": {
-      "evra": "0.7.0-4.fc35.x86_64"
+      "evra": "0.7.0-5.fc36.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-48.fc35.x86_64"
+      "evra": "0.7.0-50.fc36.x86_64"
     },
     "libcom_err": {
-      "evra": "1.46.3-1.fc35.x86_64"
+      "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.79.1-1.fc35.x86_64"
+      "evra": "7.82.0-4.fc36.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-22.fc35.x86_64"
+      "evra": "0.14-23.fc36.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-50.fc35.x86_64"
+      "evra": "5.3.28-51.fc36.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-48.fc35.x86_64"
+      "evra": "0.5.0-50.fc36.x86_64"
     },
     "libeconf": {
-      "evra": "0.4.0-2.fc35.x86_64"
+      "evra": "0.4.0-3.fc36.x86_64"
     },
     "libedit": {
-      "evra": "3.1-40.20210910cvs.fc35.x86_64"
+      "evra": "3.1-41.20210910cvs.fc36.x86_64"
     },
     "libevent": {
-      "evra": "2.1.12-4.fc35.x86_64"
+      "evra": "2.1.12-6.fc36.x86_64"
     },
     "libfdisk": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "libffi": {
-      "evra": "3.1-29.fc35.x86_64"
+      "evra": "3.4.2-8.fc36.x86_64"
     },
     "libfido2": {
-      "evra": "1.8.0-1.fc35.x86_64"
+      "evra": "1.10.0-3.fc36.x86_64"
     },
     "libgcab1": {
-      "evra": "1.4-5.fc35.x86_64"
+      "evra": "1.4-6.fc36.x86_64"
     },
     "libgcc": {
-      "evra": "11.3.1-2.fc35.x86_64"
+      "evra": "12.0.1-0.16.fc36.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.9.4-1.fc35.x86_64"
+      "evra": "1.10.1-2.fc36.x86_64"
     },
     "libgomp": {
-      "evra": "11.3.1-2.fc35.x86_64"
+      "evra": "12.0.1-0.16.fc36.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.43-1.fc35.x86_64"
+      "evra": "1.45-1.fc36.x86_64"
     },
     "libgudev": {
-      "evra": "237-1.fc35.x86_64"
+      "evra": "237-2.fc36.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.9-1.fc35.x86_64"
+      "evra": "0.3.10-2.fc36.x86_64"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc35.x86_64"
+      "evra": "39.0-1.fc36.x86_64"
     },
     "libicu": {
-      "evra": "69.1-2.fc35.x86_64"
+      "evra": "69.1-5.fc36.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.2-3.fc35.x86_64"
+      "evra": "2.3.2-4.fc36.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-48.fc35.x86_64"
+      "evra": "1.3.1-50.fc36.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.9-1.fc35.x86_64"
+      "evra": "0.1.10-1.fc36.x86_64"
     },
     "libjose": {
-      "evra": "11-3.fc35.x86_64"
+      "evra": "11-5.fc36.x86_64"
     },
     "libkcapi": {
-      "evra": "1.3.1-3.fc35.x86_64"
+      "evra": "1.3.1-4.fc36.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-3.fc35.x86_64"
+      "evra": "1.3.1-4.fc36.x86_64"
     },
     "libksba": {
-      "evra": "1.6.0-2.fc35.x86_64"
+      "evra": "1.6.0-3.fc36.x86_64"
     },
     "libldb": {
-      "evra": "2.4.2-1.fc35.x86_64"
+      "evra": "2.5.0-1.fc36.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-12.fc35.x86_64"
+      "evra": "9-13.fc36.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-1.fc35.x86_64"
+      "evra": "1.6.0-2.fc36.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.4-14.fc35.x86_64"
+      "evra": "1.0.4-15.fc36.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-1.fc35.x86_64"
+      "evra": "2.14.0-2.fc36.x86_64"
     },
     "libmount": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "libndp": {
-      "evra": "1.8-2.fc35.x86_64"
+      "evra": "1.8-3.fc36.x86_64"
     },
     "libnet": {
-      "evra": "1.2-4.fc35.x86_64"
+      "evra": "1.2-5.fc36.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-3.fc35.x86_64"
+      "evra": "1.0.8-4.fc36.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-20.fc35.x86_64"
+      "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.5.4-2.rc3.fc35.x86_64"
+      "evra": "1:2.6.1-2.rc4.fc36.x86_64"
     },
     "libnftnl": {
-      "evra": "1.2.0-2.fc35.x86_64"
+      "evra": "1.2.1-2.fc36.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.45.1-1.fc35.x86_64"
+      "evra": "1.46.0-2.fc36.x86_64"
     },
     "libnl3": {
-      "evra": "3.5.0-8.fc35.x86_64"
+      "evra": "3.5.0-9.fc36.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-8.fc35.x86_64"
+      "evra": "3.5.0-9.fc36.x86_64"
     },
     "libnsl2": {
-      "evra": "1.3.0-4.fc35.x86_64"
+      "evra": "2.0.0-3.fc36.x86_64"
+    },
+    "libnvme": {
+      "evra": "1.0-1.fc36.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-48.fc35.x86_64"
+      "evra": "0.2.1-50.fc36.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-2.fc35.x86_64"
+      "evra": "14:1.10.1-3.fc36.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-1.fc35.x86_64"
+      "evra": "1.8.0-2.fc36.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.1-4.fc35.x86_64"
+      "evra": "0.21.1-5.fc36.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-6.fc35.x86_64"
+      "evra": "1.4.4-7.fc36.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-48.fc35.x86_64"
+      "evra": "0.1.5-50.fc36.x86_64"
     },
     "librepo": {
-      "evra": "1.14.2-1.fc35.x86_64"
+      "evra": "1.14.2-2.fc36.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.15.2-8.fc35.noarch"
+      "evra": "2.17.1-1.fc36.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-1.fc35.x86_64"
+      "evra": "2.5.3-2.fc36.x86_64"
     },
     "libselinux": {
-      "evra": "3.3-1.fc35.x86_64"
+      "evra": "3.3-4.fc36.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.3-1.fc35.x86_64"
+      "evra": "3.3-4.fc36.x86_64"
     },
     "libsemanage": {
-      "evra": "3.3-1.fc35.x86_64"
+      "evra": "3.3-3.fc36.x86_64"
     },
     "libsepol": {
-      "evra": "3.3-2.fc35.x86_64"
+      "evra": "3.3-3.fc36.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.13-3.fc35.x86_64"
+      "evra": "2.14-2.fc36.x86_64"
     },
     "libslirp": {
-      "evra": "4.6.1-2.fc35.x86_64"
+      "evra": "4.6.1-3.fc36.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.15.7-0.fc35.x86_64"
+      "evra": "2:4.16.1-0.fc36.x86_64"
     },
     "libsmbios": {
-      "evra": "2.4.3-4.fc35.x86_64"
+      "evra": "2.4.3-5.fc36.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc35.x86_64"
+      "evra": "0.7.22-1.fc36.x86_64"
     },
     "libss": {
-      "evra": "1.46.3-1.fc35.x86_64"
+      "evra": "1.46.5-2.fc36.x86_64"
     },
     "libssh": {
-      "evra": "0.9.6-1.fc35.x86_64"
+      "evra": "0.9.6-4.fc36.x86_64"
     },
     "libssh-config": {
-      "evra": "0.9.6-1.fc35.noarch"
+      "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "libstdc++": {
-      "evra": "11.3.1-2.fc35.x86_64"
+      "evra": "12.0.1-0.16.fc36.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.3-2.fc35.x86_64"
+      "evra": "2.3.3-3.fc36.x86_64"
     },
     "libtasn1": {
-      "evra": "4.16.0-6.fc35.x86_64"
+      "evra": "4.18.0-2.fc36.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.4-3.fc35.x86_64"
+      "evra": "1.4.6-1.fc36.x86_64"
     },
     "libteam": {
-      "evra": "1.31-4.fc35.x86_64"
+      "evra": "1.31-5.fc36.x86_64"
     },
     "libtevent": {
-      "evra": "0.11.0-1.fc35.x86_64"
+      "evra": "0.12.0-0.fc36.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.fc35.x86_64"
+      "evra": "1.3.2-1.rc1.fc36.1.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-50.fc35.x86_64"
+      "evra": "2.4.6-50.fc36.x86_64"
     },
     "libunistring": {
-      "evra": "0.9.10-14.fc35.x86_64"
+      "evra": "1.0-1.fc36.x86_64"
     },
     "libusb1": {
-      "evra": "1.0.25-8.fc35.x86_64"
+      "evra": "1.0.25-8.fc36.x86_64"
     },
     "libuser": {
-      "evra": "0.63-7.fc35.x86_64"
+      "evra": "0.63-10.fc36.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-5.fc35.x86_64"
+      "evra": "1.2.1-6.fc36.x86_64"
     },
     "libuuid": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "libuv": {
-      "evra": "1:1.44.1-1.fc35.x86_64"
+      "evra": "1:1.44.1-1.fc36.x86_64"
     },
     "libverto": {
-      "evra": "0.3.2-2.fc35.x86_64"
+      "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.15.7-0.fc35.x86_64"
+      "evra": "2:4.16.1-0.fc36.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc35.x86_64"
+      "evra": "4.4.28-1.fc36.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.13-1.fc35.x86_64"
+      "evra": "2.9.14-1.fc36.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.6-1.fc35.x86_64"
+      "evra": "0.3.7-1.fc36.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-6.fc35.x86_64"
+      "evra": "0.2.5-7.fc36.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.2-1.fc35.x86_64"
+      "evra": "1.5.2-1.fc36.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-30.fc35.x86_64"
+      "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220411-131.fc35.noarch"
+      "evra": "20220411-131.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220411-131.fc35.noarch"
+      "evra": "20220411-131.fc36.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-2.fc35.x86_64"
+      "evra": "0.9.29-3.fc36.x86_64"
     },
     "logrotate": {
-      "evra": "3.18.1-2.fc35.x86_64"
+      "evra": "3.19.0-2.fc36.x86_64"
     },
     "lsof": {
-      "evra": "4.94.0-2.fc35.x86_64"
+      "evra": "4.94.0-3.fc36.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-1.fc35.x86_64"
+      "evra": "5.4.4-1.fc36.x86_64"
     },
     "luksmeta": {
-      "evra": "9-12.fc35.x86_64"
+      "evra": "9-13.fc36.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.11-6.fc35.x86_64"
+      "evra": "2.03.11-7.fc36.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-6.fc35.x86_64"
+      "evra": "2.03.11-7.fc36.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-3.fc35.x86_64"
+      "evra": "1.9.3-4.fc36.x86_64"
     },
     "lzo": {
-      "evra": "2.10-5.fc35.x86_64"
+      "evra": "2.10-6.fc36.x86_64"
     },
     "mdadm": {
-      "evra": "4.2-1.fc35.x86_64"
+      "evra": "4.2-1.fc36.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-47.1.fc35.x86_64"
+      "evra": "2:2.1-49.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.14-1.fc35.x86_64"
+      "evra": "20.10.14-1.fc36.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.5.0-1.fc35.x86_64"
+      "evra": "2:0.5.0-2.fc36.x86_64"
     },
-    "mozjs78": {
-      "evra": "78.15.0-1.fc35.x86_64"
+    "mozjs91": {
+      "evra": "91.8.0-1.fc36.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-8.fc35.x86_64"
+      "evra": "4.1.0-9.fc36.x86_64"
     },
     "nano": {
-      "evra": "5.8-4.fc35.x86_64"
+      "evra": "6.0-2.fc36.x86_64"
     },
     "nano-default-editor": {
-      "evra": "5.8-4.fc35.noarch"
+      "evra": "6.0-2.fc36.noarch"
     },
     "ncurses": {
-      "evra": "6.2-8.20210508.fc35.x86_64"
+      "evra": "6.2-9.20210508.fc36.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.2-8.20210508.fc35.noarch"
+      "evra": "6.2-9.20210508.fc36.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-8.20210508.fc35.x86_64"
+      "evra": "6.2-9.20210508.fc36.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.60.20160912git.fc35.x86_64"
+      "evra": "2.0-0.61.20160912git.fc36.x86_64"
+    },
+    "netavark": {
+      "evra": "1.0.2-1.fc36.x86_64"
     },
     "nettle": {
-      "evra": "3.7.3-2.fc35.x86_64"
+      "evra": "3.7.3-3.fc36.x86_64"
     },
     "newt": {
-      "evra": "0.52.21-11.fc35.x86_64"
+      "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.5.4-2.rc3.fc35.x86_64"
+      "evra": "1:2.6.1-2.rc4.fc36.x86_64"
     },
     "nftables": {
-      "evra": "1:1.0.0-1.fc35.x86_64"
+      "evra": "1:1.0.1-3.fc36.x86_64"
     },
     "npth": {
-      "evra": "1.6-7.fc35.x86_64"
+      "evra": "1.6-8.fc36.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-19.fc35.x86_64"
+      "evra": "2.18.1-20.fc36.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-4.fc35.x86_64"
+      "evra": "2.0.14-5.fc36.x86_64"
     },
     "nvme-cli": {
-      "evra": "1.11.1-4.fc35.x86_64"
+      "evra": "2.0-1.fc36.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc35.x86_64"
+      "evra": "6.9.8-1.fc36.x86_64"
     },
     "openldap": {
-      "evra": "2.4.59-3.fc35.x86_64"
+      "evra": "2.6.1-2.fc36.x86_64"
+    },
+    "openldap-compat": {
+      "evra": "2.6.1-2.fc36.x86_64"
     },
     "openssh": {
-      "evra": "8.7p1-3.fc35.x86_64"
+      "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.7p1-3.fc35.x86_64"
+      "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssh-server": {
-      "evra": "8.7p1-3.fc35.x86_64"
+      "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssl": {
-      "evra": "1:1.1.1n-1.fc35.x86_64"
+      "evra": "1:3.0.2-5.fc36.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:1.1.1n-1.fc35.x86_64"
+      "evra": "1:3.0.2-5.fc36.x86_64"
     },
     "os-prober": {
-      "evra": "1.77-8.fc35.x86_64"
+      "evra": "1.77-9.fc36.x86_64"
     },
     "ostree": {
-      "evra": "2022.2-1.fc35.x86_64"
+      "evra": "2022.2-1.fc36.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.2-1.fc35.x86_64"
+      "evra": "2022.2-1.fc36.x86_64"
     },
     "p11-kit": {
-      "evra": "0.23.22-4.fc35.x86_64"
+      "evra": "0.24.1-2.fc36.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.23.22-4.fc35.x86_64"
+      "evra": "0.24.1-2.fc36.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-7.fc35.x86_64"
+      "evra": "1.5.2-12.fc36.x86_64"
+    },
+    "pam-libs": {
+      "evra": "1.5.2-12.fc36.x86_64"
     },
     "passwd": {
-      "evra": "0.80-11.fc35.x86_64"
+      "evra": "0.80-12.fc36.x86_64"
     },
     "pcre": {
-      "evra": "8.45-1.fc35.x86_64"
+      "evra": "8.45-1.fc36.1.x86_64"
     },
     "pcre2": {
-      "evra": "10.39-1.fc35.x86_64"
+      "evra": "10.39-1.fc36.1.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.39-1.fc35.noarch"
+      "evra": "10.39-1.fc36.1.noarch"
     },
     "pigz": {
-      "evra": "2.5-2.fc35.x86_64"
+      "evra": "2.7-1.fc36.x86_64"
     },
     "pkgconf": {
-      "evra": "1.8.0-1.fc35.x86_64"
+      "evra": "1.8.0-2.fc36.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-1.fc35.noarch"
+      "evra": "1.8.0-2.fc36.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-1.fc35.x86_64"
+      "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:3.4.7-1.fc35.x86_64"
+      "evra": "3:4.0.3-1.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:3.4.7-1.fc35.x86_64"
+      "evra": "3:4.0.3-1.fc36.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.3-1.fc35.x86_64"
+      "evra": "3.3-4.fc36.x86_64"
     },
     "polkit": {
-      "evra": "0.120-1.fc35.2.x86_64"
+      "evra": "0.120-5.fc36.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.120-1.fc35.2.x86_64"
+      "evra": "0.120-5.fc36.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-20.fc35.x86_64"
+      "evra": "0.1-21.fc36.x86_64"
     },
     "popt": {
-      "evra": "1.18-6.fc35.x86_64"
+      "evra": "1.18-7.fc36.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-3.fc35.x86_64"
+      "evra": "3.3.17-4.fc36.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.4.0-1.fc35.x86_64"
+      "evra": "1.4.0-4.fc36.x86_64"
     },
     "psmisc": {
-      "evra": "23.4-2.fc35.x86_64"
+      "evra": "23.4-3.fc36.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-2.fc35.noarch"
+      "evra": "20210518-4.fc36.noarch"
     },
     "readline": {
-      "evra": "8.1-3.fc35.x86_64"
+      "evra": "8.1-6.fc36.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.6-1.fc35.x86_64"
+      "evra": "1.2.6-2.fc36.x86_64"
     },
     "rpm": {
-      "evra": "4.17.0-4.fc35.x86_64"
+      "evra": "4.17.0-10.fc36.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-4.fc35.x86_64"
+      "evra": "4.17.0-10.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.8-1.fc35.x86_64"
+      "evra": "2022.8-1.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.8-1.fc35.x86_64"
+      "evra": "2022.8-1.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-4.fc35.x86_64"
+      "evra": "4.17.0-10.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.3-9.fc35.x86_64"
+      "evra": "3.2.3-15.fc36.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.1-1.fc35.x86_64"
+      "evra": "2:1.1.1-1.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.15.7-0.fc35.x86_64"
+      "evra": "2:4.16.1-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.15.7-0.fc35.noarch"
+      "evra": "2:4.16.1-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.15.7-0.fc35.x86_64"
+      "evra": "2:4.16.1-0.fc36.x86_64"
     },
     "sed": {
-      "evra": "4.8-8.fc35.x86_64"
+      "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "35.17-1.fc35.noarch"
+      "evra": "36.8-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "35.17-1.fc35.noarch"
+      "evra": "36.8-1.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.9.1-2.fc35.noarch"
+      "evra": "2.13.9.1-3.fc36.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-2.fc35.x86_64"
+      "evra": "1.46-3.fc36.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-2.fc35.x86_64"
+      "evra": "1.46-3.fc36.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.9-9.fc35.x86_64"
+      "evra": "2:4.11.1-2.fc36.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.9-9.fc35.x86_64"
+      "evra": "2:4.11.1-2.fc36.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1075,158 +1096,161 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.7.0-1.fc35.x86_64"
+      "evra": "1:1.7.0-1.fc36.x86_64"
     },
     "slang": {
-      "evra": "2.3.2-10.fc35.x86_64"
+      "evra": "2.3.2-11.fc36.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.1.12-2.fc35.x86_64"
+      "evra": "1.2.0-0.2.beta.0.fc36.x86_64"
     },
     "snappy": {
-      "evra": "1.1.9-3.fc35.x86_64"
+      "evra": "1.1.9-4.fc36.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.2-1.fc35.x86_64"
+      "evra": "1.7.4.2-2.fc36.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-3.fc35.x86_64"
+      "evra": "3.36.0-5.fc36.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc35.x86_64"
+      "evra": "4.5.1-1.fc36.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.2-8.fc35.x86_64"
+      "evra": "0.1.3-2.fc36.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-idp": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.0-1.fc35.x86_64"
+      "evra": "2.7.0-1.fc36.x86_64"
     },
     "stalld": {
-      "evra": "1.14.1-1.fc35.x86_64"
+      "evra": "1.15-2.fc36.x86_64"
     },
     "sudo": {
-      "evra": "1.9.7p2-2.fc35.x86_64"
+      "evra": "1.9.8-5.p2.fc36.x86_64"
     },
     "systemd": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "systemd-container": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "systemd-libs": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "systemd-pam": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "systemd-resolved": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "systemd-udev": {
-      "evra": "249.12-3.fc35.x86_64"
+      "evra": "250.3-8.fc36.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-2.fc35.x86_64"
+      "evra": "2:1.34-3.fc36.x86_64"
     },
     "teamd": {
-      "evra": "1.31-4.fc35.x86_64"
+      "evra": "1.31-5.fc36.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-2.fc35.x86_64"
+      "evra": "0.0.99.3-4.fc36.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.2-1.fc35.x86_64"
+      "evra": "5.2-2.fc36.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.1.0-3.fc35.x86_64"
+      "evra": "3.2.0-1.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022a-2.fc35.noarch"
+      "evra": "2022a-2.fc36.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-3.fc35.x86_64"
+      "evra": "0.13.0-4.fc36.x86_64"
     },
     "util-linux": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.37.4-1.fc35.x86_64"
+      "evra": "2.38-0.2.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4845-1.fc35.noarch"
+      "evra": "2:8.2.4845-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4845-1.fc35.x86_64"
+      "evra": "2:8.2.4845-1.fc36.x86_64"
     },
     "which": {
-      "evra": "2.21-27.fc35.x86_64"
+      "evra": "2.21-32.fc36.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-1.fc35.x86_64"
+      "evra": "1.0.20210914-2.fc36.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.12.0-2.fc35.x86_64"
+      "evra": "5.14.2-2.fc36.x86_64"
+    },
+    "xxhash-libs": {
+      "evra": "0.8.1-2.fc36.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-9.fc35.x86_64"
+      "evra": "5.2.5-9.fc36.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc35.x86_64"
+      "evra": "5.2.5-9.fc36.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-17.fc35.x86_64"
+      "evra": "2.1.0-18.fc36.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc35.x86_64"
+      "evra": "1.2.2-1.fc36.x86_64"
     },
     "zincati": {
-      "evra": "0.0.24-1.fc35.x86_64"
+      "evra": "0.0.24-3.fc36.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-30.fc35.x86_64"
+      "evra": "1.2.11-31.fc36.x86_64"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc35.x86_64"
+      "evra": "1.1.2-1.fc36.x86_64"
     }
   },
   "metadata": {
-    "generated": "2022-05-09T20:52:28Z",
+    "generated": "2022-05-09T20:52:26Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2021-10-26T05:31:27Z"
-      },
       "fedora-coreos-pool": {
         "generated": "2022-05-08T22:06:23Z"
       },
-      "fedora-updates": {
-        "generated": "2022-05-09T13:07:55Z"
+      "fedora-next": {
+        "generated": "2022-05-06T10:02:00Z"
+      },
+      "fedora-next-updates": {
+        "generated": "2022-05-09T01:28:41Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index d3e321a656..ca74f3d47a 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -2,7 +2,7 @@ variables:
   stream: testing-devel
   prod: false
 
-releasever: 35
+releasever: 36
 
 repos:
   # These repos are there to make it easier to add new packages to the OS and to

From 569ec4f13b95ccb1ebb8955a34194243a7f1420e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 14:23:07 -0400
Subject: [PATCH 0950/2157] manifests: remove podman-v4.yaml, merge into
 fedora-coreos-base

Now that everything has switched over to Fedora 36 let's drop
the podman v4 conditional include and merge it over into the main
fedora-coreos-base.yaml manifest file.
---
 manifests/fedora-coreos-base.yaml | 15 ++++++++++++---
 manifests/podman-v4.yaml          | 14 --------------
 2 files changed, 12 insertions(+), 17 deletions(-)
 delete mode 100644 manifests/podman-v4.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index c5146ae5cb..c8280ec6d3 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -21,9 +21,6 @@ conditional-include:
   # https://github.com/coreos/fedora-coreos-tracker/issues/676
   - if: releasever >= 36
     include: iptables-nft.yaml
-  # https://github.com/coreos/fedora-coreos-config/pull/1519
-  - if: releasever >= 36
-    include: podman-v4.yaml
 
 initramfs-args:
   - --no-hostonly
@@ -140,6 +137,18 @@ packages:
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
   # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071338097
   - containernetworking-plugins podman-plugins dnsmasq
+  # For podman v4 netavark gets pulled in but it only recommends
+  # aardvark-dns (which provides name resolution based on container
+  # names). This functionality was previously provided by dnsname from
+  # podman-plugins in the podman v3 stack.
+  # See https://github.com/containers/netavark/pull/217
+  - aardvark-dns
+  # Since we need `containernetworking-plugins` installed to continue
+  # to support CNI networks we need to also explicitly install
+  # `netavark` so we get both of them installed since both of them
+  # provide `container-network-stack`.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071458717
+  - netavark
   # Minimal NFS client
   - nfs-utils-coreos
   # Active Directory support
diff --git a/manifests/podman-v4.yaml b/manifests/podman-v4.yaml
deleted file mode 100644
index f4e34897ac..0000000000
--- a/manifests/podman-v4.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-# Extra tweaks needed for podman v4
-packages:
-  # For podman v4 netavark gets pulled in but it only recommends
-  # aardvark-dns (which provides name resolution based on container
-  # names). This functionality was previously provided by dnsname from
-  # podman-plugins in the podman v3 stack.
-  # See https://github.com/containers/netavark/pull/217
-  - aardvark-dns
-  # Since we need `containernetworking-plugins` installed to continue
-  # to support CNI networks we need to also explicitly install
-  # `netavark` so we get both of them installed since both of them
-  # provide `container-network-stack`.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071458717
-  - netavark

From 513d60ed032b433cf645401f273869a638403073 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 15:37:01 -0400
Subject: [PATCH 0951/2157] manifests: drop service for staying on
 iptables-legacy

This service was used for people who wanted to stay on
iptables-legacy. Now that there has been a barrier release
it is no longer needed.

Also move the iptables-nft enablement into fedora-coreos-base
and delete related tests.
---
 manifests/fedora-coreos-base.yaml             | 19 +++--
 manifests/iptables-nft.yaml                   | 17 ----
 .../coreos-enable-iptables-legacy.service     | 18 ----
 .../coreos-enable-iptables-legacy.sh          | 82 -------------------
 .../35coreos-iptables/module-setup.sh         | 17 ----
 overlay.d/README.md                           | 13 ---
 tests/kola/firewall/iptables/test.sh          | 19 +----
 .../tests/kola/already-migrated/config.bu     | 28 -------
 .../kola/already-migrated/data/common.sh      |  1 -
 .../tests/kola/already-migrated/test.sh       | 21 -----
 .../tests/kola/data/common.sh                 | 22 -----
 .../tests/kola/migrate-to-nft                 | 21 -----
 .../tests/kola/stay-on-legacy.day1/config.bu  |  6 --
 .../kola/stay-on-legacy.day1/data/common.sh   |  1 -
 .../tests/kola/stay-on-legacy.day1/test.sh    | 21 -----
 .../tests/kola/stay-on-legacy.day2            | 23 ------
 16 files changed, 18 insertions(+), 311 deletions(-)
 delete mode 100644 manifests/iptables-nft.yaml
 delete mode 100644 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
 delete mode 100755 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
 delete mode 100644 overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh
 delete mode 100644 tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
 delete mode 120000 tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
 delete mode 100755 tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
 delete mode 100644 tests/manual/iptables-nft-migration/tests/kola/data/common.sh
 delete mode 100755 tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
 delete mode 100644 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
 delete mode 120000 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
 delete mode 100755 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
 delete mode 100755 tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index c8280ec6d3..e032a787dd 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -17,11 +17,6 @@ ostree-layers:
   - overlay/14NetworkManager-plugins
   - overlay/20platform-chrony
 
-conditional-include:
-  # https://github.com/coreos/fedora-coreos-tracker/issues/676
-  - if: releasever >= 36
-    include: iptables-nft.yaml
-
 initramfs-args:
   - --no-hostonly
   # We don't support root on NFS, so we don't need it in the initramfs. It also
@@ -121,6 +116,20 @@ postprocess:
         chmod +x /usr/lib/dracut/modules.d/95nvmf/nvmf-autoconnect.sh
     fi
 
+  # Default to iptables-nft. Otherwise, legacy wins. We can drop this once/if we
+  # remove iptables-legacy. This is needed because alternatives don't work
+  # https://github.com/coreos/fedora-coreos-tracker/issues/677
+  # https://github.com/coreos/fedora-coreos-tracker/issues/676
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    ln -sf /usr/sbin/ip6tables-nft         /etc/alternatives/ip6tables
+    ln -sf /usr/sbin/ip6tables-nft-restore /etc/alternatives/ip6tables-restore
+    ln -sf /usr/sbin/ip6tables-nft-save    /etc/alternatives/ip6tables-save
+    ln -sf /usr/sbin/iptables-nft          /etc/alternatives/iptables
+    ln -sf /usr/sbin/iptables-nft-restore  /etc/alternatives/iptables-restore
+    ln -sf /usr/sbin/iptables-nft-save     /etc/alternatives/iptables-save
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.
diff --git a/manifests/iptables-nft.yaml b/manifests/iptables-nft.yaml
deleted file mode 100644
index ff6e15b850..0000000000
--- a/manifests/iptables-nft.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-# Scripts for opting into staying on iptables-legacy after migration. Remove
-# after the next barrier release.
-ostree-layers:
-  - overlay/35coreos-iptables
-
-# Default to iptables-nft. Otherwise, legacy wins. We can drop this once/if we
-# remove iptables-legacy.
-postprocess:
-- |
-  #!/usr/bin/env bash
-  set -xeuo pipefail
-  ln -sf /usr/sbin/ip6tables-nft         /etc/alternatives/ip6tables
-  ln -sf /usr/sbin/ip6tables-nft-restore /etc/alternatives/ip6tables-restore
-  ln -sf /usr/sbin/ip6tables-nft-save    /etc/alternatives/ip6tables-save
-  ln -sf /usr/sbin/iptables-nft          /etc/alternatives/iptables
-  ln -sf /usr/sbin/iptables-nft-restore  /etc/alternatives/iptables-restore
-  ln -sf /usr/sbin/iptables-nft-save     /etc/alternatives/iptables-save
diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
deleted file mode 100644
index a59bc10531..0000000000
--- a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.service
+++ /dev/null
@@ -1,18 +0,0 @@
-[Unit]
-Description=CoreOS Enable iptables-legacy
-ConditionPathExists=/etc/initrd-release
-DefaultDependencies=false
-ConditionPathExists=/sysroot/etc/coreos/iptables-legacy.stamp
-
-# On first boot, allow Ignition config to install stamp file.
-After=ignition-files.service
-
-# On subsequent boots, just make sure the deployment is accessible.
-After=ostree-prepare-root.service
-
-Before=initrd.target
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/sbin/coreos-enable-iptables-legacy
diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
deleted file mode 100755
index 4f364510bf..0000000000
--- a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/coreos-enable-iptables-legacy.sh
+++ /dev/null
@@ -1,82 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-declare -A SYMLINKS=(
-    [ip6tables]=ip6tables-legacy
-    [ip6tables-restore]=ip6tables-legacy-restore
-    [ip6tables-save]=ip6tables-legacy-save
-    [iptables]=iptables-legacy
-    [iptables-restore]=iptables-legacy-restore
-    [iptables-save]=iptables-legacy-save
-)
-
-STAMP=/sysroot/etc/coreos/iptables-legacy.stamp
-IGNITION_RESULT=/sysroot/etc/.ignition-result.json
-
-# sanity-check the stamp file is present
-if [ ! -e "${STAMP}" ]; then
-    echo "File ${STAMP} not found; exiting."
-    exit 0
-fi
-
-# We only want to run once.
-rm "${STAMP}"
-
-# Ignore firstboot. We don't want the stamp file to be a long-term
-# provisioning-time API for moving to iptables-legacy, so explicitly check for
-# this and don't support it. We use the Ignition report file because it's less
-# hacky than parsing the kernel commandline for `ignition.firstboot`.
-if [ -e "${IGNITION_RESULT}" ]; then
-    ignition_boot=$(jq -r .provisioningBootID "${IGNITION_RESULT}")
-    if [ "$(cat /proc/sys/kernel/random/boot_id)" = "${ignition_boot}" ]; then
-        echo "First boot detected; exiting."
-        exit 0
-    fi
-fi
-
-# if legacy doesn't exist on the host anymore, do nothing
-for legacy in "${SYMLINKS[@]}"; do
-    path=/sysroot/usr/sbin/$legacy
-    if [ ! -e "$path" ]; then
-        echo "Executable $path no longer present; exiting."
-        exit 0
-    fi
-done
-
-symlink_is_default() {
-    local symlinkpath=$1; shift
-    # check that the deployment is still using the symlink (i.e. the user didn't
-    # do something funky), and that the OSTree default is still symlink-based
-    # (i.e. that we didn't change strategy and forgot to update this script)
-    if [ ! -L "/sysroot/$symlinkpath" ] || [ ! -L "/sysroot/usr/$symlinkpath" ]; then
-        return 1
-    fi
-    # compare symlink targets between deployment and OSTree default
-    if [ "$(readlink "/sysroot/$symlinkpath")" != "$(readlink "/sysroot/usr/$symlinkpath")" ]; then
-        return 1
-    fi
-    # it's the default
-    return 0
-}
-
-# If there are any modifications to the symlinks, do nothing. This is basically
-# like `ostree admin config-diff` but more focused and lighter/safer than doing
-# a bwrap call and grepping output.
-for symlink in "${!SYMLINKS[@]}"; do
-    symlinkpath=/etc/alternatives/$symlink
-    if ! symlink_is_default "$symlinkpath"; then
-        echo "Symlink $symlinkpath is not default; exiting without modifying."
-        exit 0
-    fi
-done
-
-# Update symlinks for legacy backend!
-for symlink in "${!SYMLINKS[@]}"; do
-    target=${SYMLINKS[$symlink]}
-    symlink=/etc/alternatives/$symlink
-    ln -vsf "/usr/sbin/$target" "/sysroot/$symlink"
-    # symlink labels don't matter, but relabel to appease unlabeled_t scanners
-    coreos-relabel "$symlink"
-done
-
-echo "Updated /sysroot to use iptables-legacy."
diff --git a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh b/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh
deleted file mode 100644
index 677f3f6188..0000000000
--- a/overlay.d/35coreos-iptables/usr/lib/dracut/modules.d/35coreos-iptables/module-setup.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-install_and_enable_unit() {
-    unit="$1"; shift
-    target="$1"; shift
-    inst_simple "$moddir/$unit" "$systemdsystemunitdir/$unit"
-    # note we `|| exit 1` here so we error out if e.g. the units are missing
-    # see https://github.com/coreos/fedora-coreos-config/issues/799
-    systemctl -q --root="$initdir" add-requires "$target" "$unit" || exit 1
-}
-
-install() {
-    inst_simple readlink
-
-    inst_simple "$moddir/coreos-enable-iptables-legacy.sh" \
-        "/usr/sbin/coreos-enable-iptables-legacy"
-    install_and_enable_unit "coreos-enable-iptables-legacy.service" \
-        "initrd.target"
-}
diff --git a/overlay.d/README.md b/overlay.d/README.md
index bf7960e97a..85bb10df38 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -52,16 +52,3 @@ Add static chrony configuration for NTP servers provided on platforms
 such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
 should override other chrony configuration (e.g. DHCP-provided)
 configuration.
-
-35coreos-iptables
------------------
-
-Contains systemd service and script for remaining on iptables-nft after
-the migration to nft.
-
-Split out because (1) it will roll out to next first, and (2) it can
-more easily be deleted after the barrier release.
-
-For more details, see:
-https://github.com/coreos/fedora-coreos-tracker/issues/676
-https://github.com/coreos/fedora-coreos-config/pull/1324
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index 84f178d8e0..d255c4a426 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -6,19 +6,8 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# rollout is tied to f36+ on FCOS
-# RHCOS is already in nft
-# once all of FCOS is on f36, we can drop this branching
-if is_rhcos || [ "$(get_fedora_ver)" -ge 36 ]; then
-    if ! iptables --version | grep nf_tables; then
-        iptables --version # output for logs
-        fatal "iptables version is not nft"
-    fi
-    ok "iptables in nft mode"
-else
-    if ! iptables --version | grep legacy; then
-        iptables --version # output for logs
-        fatal "iptables version is not legacy"
-    fi
-    ok "iptables in legacy mode"
+if ! iptables --version | grep nf_tables; then
+    iptables --version # output for logs
+    fatal "iptables version is not nft"
 fi
+ok "iptables in nft mode"
diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
deleted file mode 100644
index 2692db6c75..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/config.bu
+++ /dev/null
@@ -1,28 +0,0 @@
-variant: fcos
-version: 1.4.0
-storage:
-  links:
-    - path: /etc/alternatives/iptables
-      target: /usr/sbin/iptables-nft
-      overwrite: true
-      hard: false
-    - path: /etc/alternatives/iptables-restore
-      target: /usr/sbin/iptables-nft-restore
-      overwrite: true
-      hard: false
-    - path: /etc/alternatives/iptables-save
-      target: /usr/sbin/iptables-nft-save
-      overwrite: true
-      hard: false
-    - path: /etc/alternatives/ip6tables
-      target: /usr/sbin/ip6tables-nft
-      overwrite: true
-      hard: false
-    - path: /etc/alternatives/ip6tables-restore
-      target: /usr/sbin/ip6tables-nft-restore
-      overwrite: true
-      hard: false
-    - path: /etc/alternatives/ip6tables-save
-      target: /usr/sbin/ip6tables-nft-save
-      overwrite: true
-      hard: false
diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
deleted file mode 120000
index e232e75550..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/data/common.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/common.sh
\ No newline at end of file
diff --git a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh b/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
deleted file mode 100755
index 76984b55e9..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/already-migrated/test.sh
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-# kola: { "tags": "needs-internet" }
-
-. $KOLA_EXT_DATA/common.sh
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      assert_iptables_nft
-      assert_iptables_differs_from_default
-      upgrade
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      assert_iptables_nft
-      assert_iptables_matches_default
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/data/common.sh
deleted file mode 100644
index 7b9b98e516..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/data/common.sh
+++ /dev/null
@@ -1,22 +0,0 @@
-OCIARCHIVE_URL=http://192.168.0.13:8000/fedora-coreos-35.20220210.dev.0-ostree.x86_64.ociarchive
-
-upgrade() {
-    curl -Lo /var/tmp/update.ociarchive "${OCIARCHIVE_URL}"
-    rpm-ostree rebase --experimental ostree-unverified-image:oci-archive:/var/tmp/update.ociarchive
-}
-
-assert_iptables_legacy() {
-    iptables --version | grep legacy
-}
-
-assert_iptables_nft() {
-    iptables --version | grep nf_tables
-}
-
-assert_iptables_differs_from_default() {
-    ostree admin config-diff | grep alternatives/iptables
-}
-
-assert_iptables_matches_default() {
-    ! ostree admin config-diff | grep alternatives/iptables
-}
diff --git a/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft b/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
deleted file mode 100755
index 919df443b1..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/migrate-to-nft
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-# kola: { "tags": "needs-internet" }
-
-. $KOLA_EXT_DATA/common.sh
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      assert_iptables_legacy
-      assert_iptables_matches_default
-      upgrade
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      assert_iptables_nft
-      assert_iptables_matches_default
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
deleted file mode 100644
index 81e9d43319..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/config.bu
+++ /dev/null
@@ -1,6 +0,0 @@
-variant: fcos
-version: 1.4.0
-storage:
-  files:
-    - path: /etc/coreos/iptables-legacy.stamp
-      mode: 0644
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
deleted file mode 120000
index e232e75550..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/data/common.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/common.sh
\ No newline at end of file
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
deleted file mode 100755
index 2d263ea1a5..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day1/test.sh
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-# kola: { "tags": "needs-internet" }
-
-. $KOLA_EXT_DATA/common.sh
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      assert_iptables_legacy
-      assert_iptables_matches_default
-      upgrade
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      assert_iptables_legacy
-      assert_iptables_differs_from_default
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac
diff --git a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2 b/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2
deleted file mode 100755
index 85035164e3..0000000000
--- a/tests/manual/iptables-nft-migration/tests/kola/stay-on-legacy.day2
+++ /dev/null
@@ -1,23 +0,0 @@
-#!/bin/bash
-set -xeuo pipefail
-
-# kola: { "tags": "needs-internet" }
-
-. $KOLA_EXT_DATA/common.sh
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      assert_iptables_legacy
-      assert_iptables_matches_default
-      mkdir -m 755 /etc/coreos/
-      touch /etc/coreos/iptables-legacy.stamp
-      upgrade
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      assert_iptables_legacy
-      assert_iptables_differs_from_default
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac

From ec86c40044411f9cdc7968089a47cb1d88870f2f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 15:46:22 -0400
Subject: [PATCH 0952/2157] manifests/shared-workarounds: drop multipath socket
 fix/test

This has landed in all Fedora/RHEL that we care about now so we can
drop the workaround and the test.
---
 manifests/shared-workarounds.yaml          | 27 ----------------------
 tests/kola/multipath/multipathd-socket-fix | 22 ------------------
 2 files changed, 49 deletions(-)
 delete mode 100755 tests/kola/multipath/multipathd-socket-fix

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index a2928d0db1..b55174f496 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -2,33 +2,6 @@
 # and downstreams (i.e. Red Hat CoreOS).
 
 postprocess:
-  # Put in the fix for multipathd.socket on releases that haven't been fixed yet.
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2008098
-  # https://github.com/coreos/fedora-coreos-config/pull/1246
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    # Operate on RHCOS and FCOS.
-    source /etc/os-release
-    if [[ ${NAME} =~ "Fedora" ]]; then
-        # FCOS: Only operate on releases before F36. The fix has landed
-        # in F36+ and there is no need for a workaround.
-        [ ${VERSION_ID} -le 35 ] || exit 0
-    elif [[ "${ID}" == "rhel" ]]; then
-        # RHCOS: The fix has landed in RHEL 8.6, 8.5.z, 8.4.z EUS, so we should
-        # be able to just exit out safely.
-        exit 0
-    fi
-    mkdir /usr/lib/systemd/system/multipathd.socket.d
-    cat > /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf <<'EOF'
-    # Temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2008098
-    [Unit]
-    ConditionKernelCommandLine=!multipath=off
-    ConditionKernelCommandLine=!nompath
-    ConditionPathExists=/etc/multipath.conf
-    ConditionVirtualization=!container
-    EOF
-
   # Put in the fix for multipathd.service in dracut on releases that haven't
   # been fixed yet.
   # https://github.com/dracutdevs/dracut/pull/1606
diff --git a/tests/kola/multipath/multipathd-socket-fix b/tests/kola/multipath/multipathd-socket-fix
deleted file mode 100755
index ae58123a20..0000000000
--- a/tests/kola/multipath/multipathd-socket-fix
+++ /dev/null
@@ -1,22 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
-# Just run on qemu since the answer is the same everywhere
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# We need either a fixed multipathd.socket or temporary workaround, no need for both.
-# See https://bugzilla.redhat.com/show_bug.cgi?id=2008098.
-has_fixed_multipathd_socket=1
-grep -q 'ConditionPathExists=/etc/multipath.conf' /usr/lib/systemd/system/multipathd.socket || has_fixed_multipathd_socket=0
-has_overlay_multipathd_socket_quickfix=1
-test -f /usr/lib/systemd/system/multipathd.socket.d/50-start-conditions.conf || has_overlay_multipathd_socket_quickfix=0
-if test "${has_fixed_multipathd_socket}" -eq "${has_overlay_multipathd_socket_quickfix}"; then
-    if test "${has_fixed_multipathd_socket}" -eq 1; then
-        fatal "Found fixed multipathd.socket but quickfix is present too"
-    else
-        fatal "Found buggy multipathd.socket but quickfix is missing too"
-    fi
-fi
-ok "either multipathd.socket fixed or quickfix present"

From f3d1dfe6b2660db406e6fa99d1410ead608d66ad Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 15:47:14 -0400
Subject: [PATCH 0953/2157] manifests/shared-workarounds: drop Fedora version
 condition for multipath service fix

We are now on Fedora 36 and don't need to check versions any longer.
---
 manifests/shared-workarounds.yaml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index b55174f496..06c1ca685f 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -10,12 +10,9 @@ postprocess:
     #!/usr/bin/env bash
     set -xeuo pipefail
     source /etc/os-release
-    if [[ ${NAME} =~ "Fedora" ]]; then
-        # FCOS: This fix has landed in F36+
-        [ ${VERSION_ID} -le 35 ] || exit 0
-    else
-        # RHCOS: The fix hasn't landed in any version of RHEL yet
-        true
+    # This has landed in Fedora but not in any version of RHEL yet
+    if [[ ${ID} != "rhel" ]]; then
+        exit 0
     fi
     mkdir /usr/lib/dracut/modules.d/36coreos-multipath-fix
     cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf <<'EOF'

From 09576ecdec6c3b210d863efb52fe4e83e2a6a385 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 15:50:37 -0400
Subject: [PATCH 0954/2157] manifests/fedora-coreos-base: remove masking of
 systemd-network-generator

No longer a problem in F36. See
https://github.com/coreos/fedora-coreos-tracker/issues/1059#issuecomment-1090602396
---
 manifests/fedora-coreos-base.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index e032a787dd..03a207710d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -78,16 +78,6 @@ postprocess:
   - |
     #!/usr/bin/env bash
     systemctl mask systemd-repart.service
-  # Mask systemd-network-generator. We need it for some things in the future
-  # (https://github.com/systemd/systemd/pull/21766/files), but for now it's
-  # just failing for Fedora 35 on boot because of SELinux:
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1059#issuecomment-1090602396
-  - |
-    #!/usr/bin/env bash
-    source /etc/os-release
-    if [ "$VERSION_ID" -eq "35" ]; then
-      systemctl mask systemd-network-generator.service
-    fi
 
   # Set the fallback hostname to `localhost`. This was needed in F33/F34
   # because a fallback hostname of `fedora` + systemd-resolved broke

From 24d61df9db44e1e8e6052fa13e4579754664eacc Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 16:03:20 -0400
Subject: [PATCH 0955/2157] tests: remove Fedora 35 case from
 default-network-behavior-change test

We are on Fedora 36+ now.
---
 .../networking/default-network-behavior-change/test.sh     | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 876d1ca1df..bc0559b796 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -13,7 +13,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG1
-#   - used on Fedora 35 and RHEL 8.5 release
+#   - used on RHEL 8.5 release
 EXPECTED_INITRD_NETWORK_CFG1="[connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -94,7 +94,7 @@ method=auto
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
 # EXPECTED_REALROOT_NETWORK_CFG1:
-#   - used on F35 and RHEL <= 8.5
+#   - used on RHEL <= 8.5
 EXPECTED_REALROOT_NETWORK_CFG1="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -159,9 +159,6 @@ if [ "$ID" == "fedora" ]; then
     if [ "$VERSION_ID" -ge "36" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2
-    elif [ "$VERSION_ID" -eq "35" ]; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
-        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     else
         fatal "fail: not operating on expected OS version"
     fi

From d92d451358607f5e25bc0890292987cbe5d5c653 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 16:11:41 -0400
Subject: [PATCH 0956/2157] tests: put stub-resolve selinux context check under
 selinux

Seems more appropriate to be under the selinux category since
we're just checking the selinux contexts of a file there.
---
 .../{networking/stub-resolve.sh => selinux/stub-resolve-context}  | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename tests/kola/{networking/stub-resolve.sh => selinux/stub-resolve-context} (100%)

diff --git a/tests/kola/networking/stub-resolve.sh b/tests/kola/selinux/stub-resolve-context
similarity index 100%
rename from tests/kola/networking/stub-resolve.sh
rename to tests/kola/selinux/stub-resolve-context

From fb93af6489bacd17e274bf26483809f8e5e7a9ea Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 16:14:39 -0400
Subject: [PATCH 0957/2157] tests: combine two systemd-resolved tests into one

They both test systemd-resolved so let's just combine them.

- kola/networking/resolv/resolv
- kola/networking/resolv/systemd-resolved-service

now become:

- kola/networking/resolv/systemd-resolved
---
 tests/kola/networking/resolv/resolv                | 14 --------------
 .../{systemd-resolved-service => systemd-resolved} |  6 ++++++
 2 files changed, 6 insertions(+), 14 deletions(-)
 delete mode 100755 tests/kola/networking/resolv/resolv
 rename tests/kola/networking/resolv/{systemd-resolved-service => systemd-resolved} (59%)

diff --git a/tests/kola/networking/resolv/resolv b/tests/kola/networking/resolv/resolv
deleted file mode 100755
index c6e20cf227..0000000000
--- a/tests/kola/networking/resolv/resolv
+++ /dev/null
@@ -1,14 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false }
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# systemd-resolved should be fully functional on f35+
-source /etc/os-release
-if [ "$VERSION_ID" -ge "35" ]; then
-    if ! grep 'nameserver 127.0.0.53' /etc/resolv.conf; then
-        fatal "systemd-resolved stub listener isn't enabled"
-    fi
-fi
-ok services
diff --git a/tests/kola/networking/resolv/systemd-resolved-service b/tests/kola/networking/resolv/systemd-resolved
similarity index 59%
rename from tests/kola/networking/resolv/systemd-resolved-service
rename to tests/kola/networking/resolv/systemd-resolved
index 4bb37b99f0..fff9b96117 100755
--- a/tests/kola/networking/resolv/systemd-resolved-service
+++ b/tests/kola/networking/resolv/systemd-resolved
@@ -10,3 +10,9 @@ set -xeuo pipefail
 if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
     fatal "Unit systemd-resolved should be enabled"
 fi
+
+# systemd-resolved should be fully functional on f35+
+if ! grep 'nameserver 127.0.0.53' /etc/resolv.conf; then
+    fatal "systemd-resolved stub listener isn't enabled"
+fi
+ok "systemd-resolved is enabled and the stub listener is enabled"

From 3fc122f4730f7bfc7fa53bb705a1fbbc55f2eb31 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 16:17:05 -0400
Subject: [PATCH 0958/2157] tests: remove Fedora 35 check in security.passwd
 test

Not needed any longer now that we are on Fedora 35+ everywhere.
---
 tests/kola/security/passwd/test.sh | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index f4433e837c..92e2ff4938 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -13,16 +13,12 @@ OUTPUT=$(echo 'foobar' | setsid su - tester -c id)
 if [[ $OUTPUT != "uid=1001(tester) gid=1001(tester) groups=1001(tester) context=system_u:system_r:unconfined_service_t:s0" ]]; then
     fatal "Failure when checking command output running with specified username and password"
 fi
-# yescrypt was changed to the default in Fedora 35
 # https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow
 # Testing that passwd command creates a yescrypt password hash(starting with '$y$')
-source /etc/os-release
-if [ "$VERSION_ID" -ge "35" ]; then
-    sudo useradd tester2
-    echo "42abcdef" | sudo passwd tester2 --stdin
-    PASSWD_CONFIRMATION=$(sudo grep tester2 /etc/shadow)
-    if [[ ${PASSWD_CONFIRMATION:0:11} != 'tester2:$y$' ]]; then
-        fatal "passwd did not create a yescrypt password hash"
-    fi
+sudo useradd tester2
+echo "42abcdef" | sudo passwd tester2 --stdin
+PASSWD_CONFIRMATION=$(sudo grep tester2 /etc/shadow)
+if [[ ${PASSWD_CONFIRMATION:0:11} != 'tester2:$y$' ]]; then
+    fatal "passwd did not create a yescrypt password hash"
 fi
 ok "User-password provisioned and passwd command successfully tested"

From 803cd14b7fcafaea892033a909c4d765339a85f8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 10 May 2022 16:19:14 -0400
Subject: [PATCH 0959/2157] tests: update container pulls to be Fedora 36

Now that Fedora 36 is out let's use containers based on Fedora 36.
---
 tests/kola/chrony/dhcp-propagation | 2 +-
 tests/kola/podman/dns/test.sh      | 2 +-
 tests/kola/podman/rootless-systemd | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 1a469ce382..4d5d026d37 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -42,7 +42,7 @@ test_setup() {
     pushd "$(mktemp -d)"
     NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:35
+FROM registry.fedoraproject.org/fedora:36
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 05a6f98fe5..47cf04f194 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -24,7 +24,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:35 getent hosts google.com
+podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:36 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 21cd94ef15..2be9af0583 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -34,7 +34,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:35
+FROM registry.fedoraproject.org/fedora:36
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \

From ad326e2ba9d51bf77e8489f82abe431e22206c3a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 11 May 2022 16:50:01 -0400
Subject: [PATCH 0960/2157] overrides: fast-track ostree-2022.3-2.fc36

Has fixes for selinux UX. See
https://github.com/coreos/fedora-coreos-tracker/issues/701
---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..dda797414a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ostree:
+    evr: 2022.3-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-893b870b9b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
+      type: fast-track
+  ostree-libs:
+    evr: 2022.3-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-893b870b9b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
+      type: fast-track

From 18cedb5af4b3e779c84533b76ec9058171a75ae0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 May 2022 01:14:47 +0000
Subject: [PATCH 0961/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/225/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 72 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 76 +++++++++++++++++++-------------------
 2 files changed, 74 insertions(+), 74 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 440951ab7a..5bcab4f2e3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -259,13 +259,13 @@
       "evra": "38-2.fc36.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-2.fc36.noarch"
+      "evra": "0.187-4.fc36.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-2.fc36.aarch64"
+      "evra": "0.187-4.fc36.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.187-2.fc36.aarch64"
+      "evra": "0.187-4.fc36.aarch64"
     },
     "ethtool": {
       "evra": "2:5.17-1.fc36.aarch64"
@@ -349,7 +349,7 @@
       "evra": "1:1.22-2.fc36.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.9-1.fc36.aarch64"
+      "evra": "1.0.9-2.fc36.aarch64"
     },
     "gettext": {
       "evra": "0.21-9.fc36.aarch64"
@@ -358,7 +358,7 @@
       "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.36.0-1.fc36.aarch64"
+      "evra": "2.36.1-1.fc36.aarch64"
     },
     "glib2": {
       "evra": "2.72.1-1.fc36.aarch64"
@@ -388,16 +388,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-38.fc36.noarch"
+      "evra": "1:2.06-40.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-38.fc36.aarch64"
+      "evra": "1:2.06-40.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-38.fc36.aarch64"
+      "evra": "1:2.06-40.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-38.fc36.aarch64"
+      "evra": "1:2.06-40.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.5-300.fc36.aarch64"
+      "evra": "5.17.6-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.5-300.fc36.aarch64"
+      "evra": "5.17.6-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.5-300.fc36.aarch64"
+      "evra": "5.17.6-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -583,13 +583,13 @@
       "evra": "1.4-6.fc36.aarch64"
     },
     "libgcc": {
-      "evra": "12.0.1-0.16.fc36.aarch64"
+      "evra": "12.1.1-1.fc36.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.1-2.fc36.aarch64"
     },
     "libgomp": {
-      "evra": "12.0.1-0.16.fc36.aarch64"
+      "evra": "12.1.1-1.fc36.aarch64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.aarch64"
@@ -604,7 +604,7 @@
       "evra": "39.0-1.fc36.aarch64"
     },
     "libicu": {
-      "evra": "69.1-5.fc36.aarch64"
+      "evra": "69.1-6.fc36.aarch64"
     },
     "libidn2": {
       "evra": "2.3.2-4.fc36.aarch64"
@@ -700,7 +700,7 @@
       "evra": "0.1.5-50.fc36.aarch64"
     },
     "librepo": {
-      "evra": "1.14.2-2.fc36.aarch64"
+      "evra": "1.14.3-1.fc36.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.1-1.fc36.noarch"
@@ -730,7 +730,7 @@
       "evra": "2.38-0.2.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.1-0.fc36.aarch64"
+      "evra": "2:4.16.1-4.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -757,7 +757,7 @@
       "evra": "2.7.0-1.fc36.aarch64"
     },
     "libstdc++": {
-      "evra": "12.0.1-0.16.fc36.aarch64"
+      "evra": "12.1.1-1.fc36.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.3-3.fc36.aarch64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.1-0.fc36.aarch64"
+      "evra": "2:4.16.1-4.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
@@ -865,7 +865,7 @@
       "evra": "2:0.5.0-2.fc36.aarch64"
     },
     "mozjs91": {
-      "evra": "91.8.0-1.fc36.aarch64"
+      "evra": "91.9.0-1.fc36.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.aarch64"
@@ -943,10 +943,10 @@
       "evra": "1.77-9.fc36.aarch64"
     },
     "ostree": {
-      "evra": "2022.2-1.fc36.aarch64"
+      "evra": "2022.3-2.fc36.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.2-1.fc36.aarch64"
+      "evra": "2022.3-2.fc36.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.aarch64"
@@ -1045,22 +1045,22 @@
       "evra": "2:1.1.1-1.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.1-0.fc36.aarch64"
+      "evra": "2:4.16.1-4.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.1-0.fc36.noarch"
+      "evra": "2:4.16.1-4.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.1-0.fc36.aarch64"
+      "evra": "2:4.16.1-4.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.8-1.fc36.noarch"
+      "evra": "36.7-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.8-1.fc36.noarch"
+      "evra": "36.7-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-3.fc36.noarch"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-0.2.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4845-1.fc36.noarch"
+      "evra": "2:8.2.4927-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4845-1.fc36.aarch64"
+      "evra": "2:8.2.4927-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-09T20:52:59Z",
+    "generated": "2022-05-12T00:04:21Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-05-08T22:06:35Z"
+      "fedora": {
+        "generated": "2022-05-04T21:15:55Z"
       },
-      "fedora-next": {
-        "generated": "2022-05-06T10:02:00Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-05-11T21:23:23Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-05-09T01:28:30Z"
+      "fedora-updates": {
+        "generated": "2022-05-11T01:05:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d365d41e47..301726d486 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -259,13 +259,13 @@
       "evra": "38-2.fc36.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-2.fc36.noarch"
+      "evra": "0.187-4.fc36.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-2.fc36.x86_64"
+      "evra": "0.187-4.fc36.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.187-2.fc36.x86_64"
+      "evra": "0.187-4.fc36.x86_64"
     },
     "ethtool": {
       "evra": "2:5.17-1.fc36.x86_64"
@@ -349,7 +349,7 @@
       "evra": "1:1.22-2.fc36.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.9-1.fc36.x86_64"
+      "evra": "1.0.9-2.fc36.x86_64"
     },
     "gettext": {
       "evra": "0.21-9.fc36.x86_64"
@@ -358,7 +358,7 @@
       "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.36.0-1.fc36.x86_64"
+      "evra": "2.36.1-1.fc36.x86_64"
     },
     "glib2": {
       "evra": "2.72.1-1.fc36.x86_64"
@@ -388,22 +388,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-38.fc36.noarch"
+      "evra": "1:2.06-40.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-38.fc36.x86_64"
+      "evra": "1:2.06-40.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-38.fc36.x86_64"
+      "evra": "1:2.06-40.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-38.fc36.noarch"
+      "evra": "1:2.06-40.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-38.fc36.x86_64"
+      "evra": "1:2.06-40.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-38.fc36.x86_64"
+      "evra": "1:2.06-40.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.5-300.fc36.x86_64"
+      "evra": "5.17.6-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.5-300.fc36.x86_64"
+      "evra": "5.17.6-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.5-300.fc36.x86_64"
+      "evra": "5.17.6-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -589,13 +589,13 @@
       "evra": "1.4-6.fc36.x86_64"
     },
     "libgcc": {
-      "evra": "12.0.1-0.16.fc36.x86_64"
+      "evra": "12.1.1-1.fc36.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.1-2.fc36.x86_64"
     },
     "libgomp": {
-      "evra": "12.0.1-0.16.fc36.x86_64"
+      "evra": "12.1.1-1.fc36.x86_64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.x86_64"
@@ -610,7 +610,7 @@
       "evra": "39.0-1.fc36.x86_64"
     },
     "libicu": {
-      "evra": "69.1-5.fc36.x86_64"
+      "evra": "69.1-6.fc36.x86_64"
     },
     "libidn2": {
       "evra": "2.3.2-4.fc36.x86_64"
@@ -706,7 +706,7 @@
       "evra": "0.1.5-50.fc36.x86_64"
     },
     "librepo": {
-      "evra": "1.14.2-2.fc36.x86_64"
+      "evra": "1.14.3-1.fc36.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.1-1.fc36.noarch"
@@ -736,7 +736,7 @@
       "evra": "2.38-0.2.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.1-0.fc36.x86_64"
+      "evra": "2:4.16.1-4.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -766,7 +766,7 @@
       "evra": "2.7.0-1.fc36.x86_64"
     },
     "libstdc++": {
-      "evra": "12.0.1-0.16.fc36.x86_64"
+      "evra": "12.1.1-1.fc36.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.3-3.fc36.x86_64"
@@ -811,7 +811,7 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.1-0.fc36.x86_64"
+      "evra": "2:4.16.1-4.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:0.5.0-2.fc36.x86_64"
     },
     "mozjs91": {
-      "evra": "91.8.0-1.fc36.x86_64"
+      "evra": "91.9.0-1.fc36.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.x86_64"
@@ -955,10 +955,10 @@
       "evra": "1.77-9.fc36.x86_64"
     },
     "ostree": {
-      "evra": "2022.2-1.fc36.x86_64"
+      "evra": "2022.3-2.fc36.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.2-1.fc36.x86_64"
+      "evra": "2022.3-2.fc36.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.x86_64"
@@ -1057,22 +1057,22 @@
       "evra": "2:1.1.1-1.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.1-0.fc36.x86_64"
+      "evra": "2:4.16.1-4.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.1-0.fc36.noarch"
+      "evra": "2:4.16.1-4.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.1-0.fc36.x86_64"
+      "evra": "2:4.16.1-4.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.8-1.fc36.noarch"
+      "evra": "36.7-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.8-1.fc36.noarch"
+      "evra": "36.7-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.9.1-3.fc36.noarch"
@@ -1201,10 +1201,10 @@
       "evra": "2.38-0.2.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4845-1.fc36.noarch"
+      "evra": "2:8.2.4927-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4845-1.fc36.x86_64"
+      "evra": "2:8.2.4927-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-09T20:52:26Z",
+    "generated": "2022-05-12T00:03:47Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-05-08T22:06:23Z"
+      "fedora": {
+        "generated": "2022-05-04T21:16:11Z"
       },
-      "fedora-next": {
-        "generated": "2022-05-06T10:02:00Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-05-11T21:25:58Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-05-09T01:28:41Z"
+      "fedora-updates": {
+        "generated": "2022-05-11T01:06:01Z"
       }
     }
   }

From 4755ce47ec82659e945a4979ecd9e27af23848b0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 May 2022 21:59:35 +0000
Subject: [PATCH 0962/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/226/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 2 files changed, 33 insertions(+), 33 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5bcab4f2e3..d6169cb217 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.5.0.2-2.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.2-1.fc36.aarch64"
+      "evra": "1.0.3-1.fc36.aarch64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.aarch64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-4.fc36.aarch64"
+      "evra": "7.82.0-5.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.aarch64"
@@ -550,7 +550,7 @@
       "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.82.0-4.fc36.aarch64"
+      "evra": "7.82.0-5.fc36.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.aarch64"
@@ -859,10 +859,10 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.14-1.fc36.aarch64"
+      "evra": "20.10.15-1.fc36.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.5.0-2.fc36.aarch64"
+      "evra": "2:0.6.0-1.fc36.aarch64"
     },
     "mozjs91": {
       "evra": "91.9.0-1.fc36.aarch64"
@@ -889,7 +889,7 @@
       "evra": "2.0-0.61.20160912git.fc36.aarch64"
     },
     "netavark": {
-      "evra": "1.0.2-1.fc36.aarch64"
+      "evra": "1.0.3-3.fc36.aarch64"
     },
     "nettle": {
       "evra": "3.7.3-3.fc36.aarch64"
@@ -967,10 +967,10 @@
       "evra": "8.45-1.fc36.1.aarch64"
     },
     "pcre2": {
-      "evra": "10.39-1.fc36.1.aarch64"
+      "evra": "10.40-1.fc36.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.39-1.fc36.1.noarch"
+      "evra": "10.40-1.fc36.noarch"
     },
     "pigz": {
       "evra": "2.7-1.fc36.aarch64"
@@ -985,10 +985,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:4.0.3-1.fc36.aarch64"
+      "evra": "3:4.1.0-1.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:4.0.3-1.fc36.aarch64"
+      "evra": "3:4.1.0-1.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1057,13 +1057,13 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.7-1.fc36.noarch"
+      "evra": "36.8-2.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.7-1.fc36.noarch"
+      "evra": "36.8-2.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.9.1-3.fc36.noarch"
+      "evra": "2.13.10-1.fc36.noarch"
     },
     "sg3_utils": {
       "evra": "1.46-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-12T00:04:21Z",
+    "generated": "2022-05-12T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-11T21:23:23Z"
+        "generated": "2022-05-12T01:19:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-11T01:05:50Z"
+        "generated": "2022-05-12T20:17:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 301726d486..adf709989d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.5.0.2-2.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.2-1.fc36.x86_64"
+      "evra": "1.0.3-1.fc36.x86_64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.x86_64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-4.fc36.x86_64"
+      "evra": "7.82.0-5.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.x86_64"
@@ -556,7 +556,7 @@
       "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.82.0-4.fc36.x86_64"
+      "evra": "7.82.0-5.fc36.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.x86_64"
@@ -868,13 +868,13 @@
       "evra": "4.2-1.fc36.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-49.fc36.x86_64"
+      "evra": "2:2.1-51.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.14-1.fc36.x86_64"
+      "evra": "20.10.15-1.fc36.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.5.0-2.fc36.x86_64"
+      "evra": "2:0.6.0-1.fc36.x86_64"
     },
     "mozjs91": {
       "evra": "91.9.0-1.fc36.x86_64"
@@ -901,7 +901,7 @@
       "evra": "2.0-0.61.20160912git.fc36.x86_64"
     },
     "netavark": {
-      "evra": "1.0.2-1.fc36.x86_64"
+      "evra": "1.0.3-3.fc36.x86_64"
     },
     "nettle": {
       "evra": "3.7.3-3.fc36.x86_64"
@@ -979,10 +979,10 @@
       "evra": "8.45-1.fc36.1.x86_64"
     },
     "pcre2": {
-      "evra": "10.39-1.fc36.1.x86_64"
+      "evra": "10.40-1.fc36.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.39-1.fc36.1.noarch"
+      "evra": "10.40-1.fc36.noarch"
     },
     "pigz": {
       "evra": "2.7-1.fc36.x86_64"
@@ -997,10 +997,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:4.0.3-1.fc36.x86_64"
+      "evra": "3:4.1.0-1.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:4.0.3-1.fc36.x86_64"
+      "evra": "3:4.1.0-1.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1069,13 +1069,13 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.7-1.fc36.noarch"
+      "evra": "36.8-2.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.7-1.fc36.noarch"
+      "evra": "36.8-2.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.9.1-3.fc36.noarch"
+      "evra": "2.13.10-1.fc36.noarch"
     },
     "sg3_utils": {
       "evra": "1.46-3.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-12T00:03:47Z",
+    "generated": "2022-05-12T20:52:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-11T21:25:58Z"
+        "generated": "2022-05-12T01:21:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-11T01:06:01Z"
+        "generated": "2022-05-12T20:17:47Z"
       }
     }
   }

From dbe8d88cfd36ec8a096bbce9afa7525c43c99d48 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 13 May 2022 03:47:55 -0400
Subject: [PATCH 0963/2157] workflows: fix override-handling jobs with current
 Git

When running Git in a containerized job, we need to tell it that repos
not owned by the current user are safe.
---
 .github/workflows/add-override.yml               | 3 +++
 .github/workflows/remove-graduated-overrides.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/add-override.yml b/.github/workflows/add-override.yml
index 185c4246e6..a1e088d5bf 100644
--- a/.github/workflows/add-override.yml
+++ b/.github/workflows/add-override.yml
@@ -48,6 +48,9 @@ jobs:
           # We need an unbroken commit chain when pushing to the fork.  Don't
           # make assumptions about which commits are already available there.
           fetch-depth: 0
+      # https://github.com/actions/checkout/issues/766
+      - name: Mark git checkout as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Update metadata
         env:
           TARGET: ${{ github.event.inputs.target }}
diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 494639250b..05a9a8abde 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -34,6 +34,9 @@ jobs:
         uses: actions/checkout@v2
         with:
           ref: ${{ matrix.branch }}
+      # https://github.com/actions/checkout/issues/766
+      - name: Mark git checkout as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Remove graduated overrides
         run: |
           git config user.name 'CoreOS Bot'

From 651625e577f7e22ca9d84f52fe88cb4079c52c0d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 14 May 2022 09:28:27 -0400
Subject: [PATCH 0964/2157] tests/kdump.crash: check kdump service success

Let's make sure the kdump service was started without issue before
continuing. I saw this fail in a test on s390x (kdumpctl has issues
there).
---
 tests/kola/kdump/crash/test.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index d481e40695..940540c061 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -19,6 +19,9 @@ set -xeuo pipefail
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
+      if [ $(systemctl show -p Result kdump.service) != "Result=success" ]; then
+          fatal "kdump.service failed to start"
+      fi
       /tmp/autopkgtest-reboot-prepare aftercrash
       echo "Triggering sysrq"
       sync

From 738540302951582e75a42f0e847d0f44b4601823 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 14 May 2022 09:31:47 -0400
Subject: [PATCH 0965/2157] tests/kdump.crash: add in sleep to workaround XFS
 race condition

This seems to make the test no longer fail. We still need to investigate
the root cause. See https://github.com/coreos/fedora-coreos-tracker/issues/1195
---
 tests/kola/kdump/crash/test.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 940540c061..bdc7d6d7b2 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -23,6 +23,10 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
           fatal "kdump.service failed to start"
       fi
       /tmp/autopkgtest-reboot-prepare aftercrash
+      # Add in a sleep to workaround race condition where XFS/kernel errors happen
+      # during crash kernel boot.
+      # https://github.com/coreos/fedora-coreos-tracker/issues/1195
+      sleep 5
       echo "Triggering sysrq"
       sync
       echo 1 > /proc/sys/kernel/sysrq

From aeb9019aaa9f1b6e96ce823d0f1dd20037a22351 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 13 May 2022 17:20:10 +0000
Subject: [PATCH 0966/2157] overrides: fast-track containerd-1.6.4-1.fc36

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index dda797414a..c9e9f2f890 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,12 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  containerd:
+    evr: 1.6.4-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aa2f62aabd
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1138
+      type: fast-track
   ostree:
     evr: 2022.3-2.fc36
     metadata:

From e78fcfac85668fc5ee6e8dddb78af9952ae0d537 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 13 May 2022 23:37:28 -0400
Subject: [PATCH 0967/2157] ci/overrides: srpms: report only SRPMs relevant to
 lockfiles

The srpms subcommand was reporting all SRPMs attached to the specified
Bodhi update, even if some of those didn't have any binary RPMs included
in our lockfiles.  This was causing add-override.yml to put spurious
SRPM names in its commit titles.  Report only SRPMs that are relevant to
us.
---
 ci/overrides.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 18f5cf171d..392eee4c4f 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -74,7 +74,7 @@ def main():
     pin.set_defaults(func=do_pin)
 
     srpms = subcommands.add_parser('srpms',
-            description='Name the source RPMs for a Bodhi update.')
+            description='Name the relevant source RPMs for a Bodhi update.')
     srpms.add_argument('update', help='ID or URL of Bodhi update')
     srpms.set_defaults(func=do_srpms)
 
@@ -133,8 +133,13 @@ def do_pin(args):
 
 
 def do_srpms(args):
+    printed = False
     for nvr in get_source_nvrs(get_bodhi_update(args.update)):
-        print(nvr)
+        if get_binary_packages([nvr]):
+            print(nvr)
+            printed = True
+    if not printed:
+        raise Exception('specified update contains no binary packages listed in lockfiles')
 
 
 def do_graduate(_args):

From 8b70d20844f04ee3f2a376840981afd202dfb096 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 7 May 2022 02:01:35 -0400
Subject: [PATCH 0968/2157] tests/kola/ignition: test fetching from Google
 Cloud Storage

---
 .../resource/authenticated-gs/config.bu       | 14 +++++++++
 .../authenticated-gs/data/commonlib.sh        |  1 +
 .../authenticated-gs/data/expected/gs-auth    |  1 +
 .../authenticated-gs/data/expected/gs-config  |  1 +
 .../resource/authenticated-gs/test.sh         | 30 +++++++++++++++++++
 tests/kola/ignition/resource/remote/config.bu |  5 +++-
 .../resource/remote/data/expected/gs-anon     |  1 +
 7 files changed, 52 insertions(+), 1 deletion(-)
 create mode 100644 tests/kola/ignition/resource/authenticated-gs/config.bu
 create mode 120000 tests/kola/ignition/resource/authenticated-gs/data/commonlib.sh
 create mode 100644 tests/kola/ignition/resource/authenticated-gs/data/expected/gs-auth
 create mode 100644 tests/kola/ignition/resource/authenticated-gs/data/expected/gs-config
 create mode 100755 tests/kola/ignition/resource/authenticated-gs/test.sh
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/gs-anon

diff --git a/tests/kola/ignition/resource/authenticated-gs/config.bu b/tests/kola/ignition/resource/authenticated-gs/config.bu
new file mode 100644
index 0000000000..cd7e032062
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/config.bu
@@ -0,0 +1,14 @@
+# Objects accessible by any authenticated GS user, such as the credentials
+# associated with the GCE instance
+
+variant: fcos
+version: 1.2.0
+ignition:
+  config:
+    merge:
+      - source: "gs://ignition-test-fixtures/resources/authenticated-var.ign"
+storage:
+  files:
+    - path: /var/resource/gs-auth
+      contents:
+        source: "gs://ignition-test-fixtures/resources/authenticated"
diff --git a/tests/kola/ignition/resource/authenticated-gs/data/commonlib.sh b/tests/kola/ignition/resource/authenticated-gs/data/commonlib.sh
new file mode 120000
index 0000000000..7028449b11
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/data/commonlib.sh
@@ -0,0 +1 @@
+../../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-auth b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-auth
new file mode 100644
index 0000000000..f4253bde46
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-auth
@@ -0,0 +1 @@
+kola-authenticated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-config b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-config
new file mode 100644
index 0000000000..9433f22dd3
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-config
@@ -0,0 +1 @@
+kola-config
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-gs/test.sh b/tests/kola/ignition/resource/authenticated-gs/test.sh
new file mode 100755
index 0000000000..a3d3b50125
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/test.sh
@@ -0,0 +1,30 @@
+#!/bin/bash
+# kola: { "tags": "needs-internet", "platforms": "gce" }
+# - tags: needs-internet
+#   - We fetch resources from GCS.
+# - platforms: gce
+#   - We authenticate to GCS with the GCE instance's credentials.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
+    fatal "fetched data mismatch"
+else
+    ok "fetched data ok"
+fi
+
+# verify that the objects are inaccessible anonymously
+for obj in authenticated authenticated-var.ign; do
+    if curl -sf "https://storage.googleapis.com/ignition-test-fixtures/resources/$obj"; then
+        fatal "anonymously fetching authenticated resource should have failed, but did not"
+    fi
+done
+
+# ...but that the anonymous object is accessible
+if ! curl -sf "https://storage.googleapis.com/ignition-test-fixtures/resources/anonymous" > /dev/null; then
+    fatal "anonymous resource is inaccessible"
+fi
+
+ok "resource checks ok"
diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index dad3214cf3..d36eaf8482 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.0.0
+version: 1.2.0
 storage:
   files:
     - path: /var/resource/http
@@ -8,6 +8,9 @@ storage:
     - path: /var/resource/https
       contents:
         source: "https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous"
+    - path: /var/resource/gs-anon
+      contents:
+        source: "gs://ignition-test-fixtures/resources/anonymous"
     - path: /var/resource/s3-anon
       contents:
         source: "s3://ignition-test-fixtures/resources/anonymous"
diff --git a/tests/kola/ignition/resource/remote/data/expected/gs-anon b/tests/kola/ignition/resource/remote/data/expected/gs-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/gs-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file

From 6e013487e0406d3078dd7b7a07b4b27dcffb2734 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 16 May 2022 17:46:18 +0000
Subject: [PATCH 0969/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/231/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 2 files changed, 34 insertions(+), 34 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d6169cb217..6c0d24db8d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.36.4-1.fc36.aarch64"
+      "evra": "1:1.38.0-1.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.36.4-1.fc36.aarch64"
+      "evra": "1:1.38.0-1.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.36.4-1.fc36.aarch64"
+      "evra": "1:1.38.0-1.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.36.4-1.fc36.aarch64"
+      "evra": "1:1.38.0-1.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.36.4-1.fc36.aarch64"
+      "evra": "1:1.38.0-1.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.5.0.2-2.fc36.noarch"
@@ -136,7 +136,7 @@
       "evra": "2:2.183.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-2.fc36.aarch64"
+      "evra": "1.6.4-1.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.16.1-12.fc36.aarch64"
+      "evra": "3.17-1.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.16.1-12.fc36.aarch64"
+      "evra": "3.17-1.fc36.aarch64"
     },
     "crun": {
       "evra": "1.4.4-1.fc36.aarch64"
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-5.fc36.aarch64"
+      "evra": "2.35-6.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-5.fc36.aarch64"
+      "evra": "2.35-6.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-5.fc36.aarch64"
+      "evra": "2.35-6.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -859,7 +859,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.15-1.fc36.aarch64"
+      "evra": "20.10.16-1.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-1.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.0-10.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.8-1.fc36.aarch64"
+      "evra": "2022.9-1.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.8-1.fc36.aarch64"
+      "evra": "2022.9-1.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-12T20:53:06Z",
+    "generated": "2022-05-16T16:27:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-12T01:19:14Z"
+        "generated": "2022-05-16T16:08:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-12T20:17:36Z"
+        "generated": "2022-05-16T01:00:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index adf709989d..c890fe6f15 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.36.4-1.fc36.x86_64"
+      "evra": "1:1.38.0-1.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.36.4-1.fc36.x86_64"
+      "evra": "1:1.38.0-1.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.36.4-1.fc36.x86_64"
+      "evra": "1:1.38.0-1.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.36.4-1.fc36.x86_64"
+      "evra": "1:1.38.0-1.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.36.4-1.fc36.x86_64"
+      "evra": "1:1.38.0-1.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.5.0.2-2.fc36.noarch"
@@ -136,7 +136,7 @@
       "evra": "2:2.183.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.2-2.fc36.x86_64"
+      "evra": "1.6.4-1.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.16.1-12.fc36.x86_64"
+      "evra": "3.17-1.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.16.1-12.fc36.x86_64"
+      "evra": "3.17-1.fc36.x86_64"
     },
     "crun": {
       "evra": "1.4.4-1.fc36.x86_64"
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-5.fc36.x86_64"
+      "evra": "2.35-6.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-5.fc36.x86_64"
+      "evra": "2.35-6.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-5.fc36.x86_64"
+      "evra": "2.35-6.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -871,7 +871,7 @@
       "evra": "2:2.1-51.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.15-1.fc36.x86_64"
+      "evra": "20.10.16-1.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-1.fc36.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.17.0-10.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.8-1.fc36.x86_64"
+      "evra": "2022.9-1.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.8-1.fc36.x86_64"
+      "evra": "2022.9-1.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-12T20:52:32Z",
+    "generated": "2022-05-16T16:26:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-12T01:21:27Z"
+        "generated": "2022-05-16T16:09:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-12T20:17:47Z"
+        "generated": "2022-05-16T01:00:22Z"
       }
     }
   }

From c44f50ea8bcb8d32ef90ead53e69d53db277c096 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 17 May 2022 21:12:35 +0000
Subject: [PATCH 0970/2157] overrides: fast-track ignition-2.14.0-1.fc36

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index c9e9f2f890..edf9b67b0a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,6 +15,11 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aa2f62aabd
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1138
       type: fast-track
+  ignition:
+    evr: 2.14.0-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-5df5dc8ec5
+      type: fast-track
   ostree:
     evr: 2022.3-2.fc36
     metadata:

From 4b759f55dfedd2d7e2bba1cb08fe4166cd2d3495 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 18 May 2022 03:10:23 +0000
Subject: [PATCH 0971/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/234/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6c0d24db8d..cc563ec6f8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -43,10 +43,10 @@
       "evra": "3.0.8-1.fc36.aarch64"
     },
     "authselect": {
-      "evra": "1.3.0-10.fc36.aarch64"
+      "evra": "1.4.0-1.fc36.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.3.0-10.fc36.aarch64"
+      "evra": "1.4.0-1.fc36.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-15.fc36.aarch64"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.0-1.fc36.aarch64"
     },
     "dbus-broker": {
-      "evra": "29-5.fc36.aarch64"
+      "evra": "31-1.fc36.aarch64"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -406,7 +406,7 @@
       "evra": "3.23-6.fc36.aarch64"
     },
     "ignition": {
-      "evra": "2.13.0-5.fc36.aarch64"
+      "evra": "2.14.0-1.fc36.aarch64"
     },
     "inih": {
       "evra": "55-1.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.6-300.fc36.aarch64"
+      "evra": "5.17.7-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.6-300.fc36.aarch64"
+      "evra": "5.17.7-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.6-300.fc36.aarch64"
+      "evra": "5.17.7-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -526,7 +526,7 @@
       "evra": "2.38-0.2.fc36.aarch64"
     },
     "libbpf": {
-      "evra": "2:0.5.0-2.fc36.aarch64"
+      "evra": "2:0.7.0-3.fc36.aarch64"
     },
     "libbrotli": {
       "evra": "1.0.9-7.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-16T16:27:33Z",
+    "generated": "2022-05-18T01:50:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-16T16:08:59Z"
+        "generated": "2022-05-17T21:45:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-16T01:00:10Z"
+        "generated": "2022-05-18T01:04:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c890fe6f15..00311f7fe6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -43,10 +43,10 @@
       "evra": "3.0.8-1.fc36.x86_64"
     },
     "authselect": {
-      "evra": "1.3.0-10.fc36.x86_64"
+      "evra": "1.4.0-1.fc36.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.3.0-10.fc36.x86_64"
+      "evra": "1.4.0-1.fc36.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-15.fc36.x86_64"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.0-1.fc36.x86_64"
     },
     "dbus-broker": {
-      "evra": "29-5.fc36.x86_64"
+      "evra": "31-1.fc36.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -412,7 +412,7 @@
       "evra": "3.23-6.fc36.x86_64"
     },
     "ignition": {
-      "evra": "2.13.0-5.fc36.x86_64"
+      "evra": "2.14.0-1.fc36.x86_64"
     },
     "inih": {
       "evra": "55-1.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.6-300.fc36.x86_64"
+      "evra": "5.17.7-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.6-300.fc36.x86_64"
+      "evra": "5.17.7-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.6-300.fc36.x86_64"
+      "evra": "5.17.7-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -532,7 +532,7 @@
       "evra": "2.38-0.2.fc36.x86_64"
     },
     "libbpf": {
-      "evra": "2:0.5.0-2.fc36.x86_64"
+      "evra": "2:0.7.0-3.fc36.x86_64"
     },
     "libbrotli": {
       "evra": "1.0.9-7.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-16T16:26:55Z",
+    "generated": "2022-05-18T01:49:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-16T16:09:27Z"
+        "generated": "2022-05-17T21:45:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-16T01:00:22Z"
+        "generated": "2022-05-18T01:04:16Z"
       }
     }
   }

From 96eb8ccea86e457ba4fddecdc703e0a6cf0e64e0 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 17 May 2022 17:30:45 -0400
Subject: [PATCH 0972/2157] tests/kola/ignition: update comment

---
 tests/kola/ignition/resource/remote/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 72e15b7555..4fbb1aaf28 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 # kola: { "tags": "needs-internet" }
 # - tags: needs-internet
-#   - We fetch resources from S3.
+#   - We fetch resources from S3 and GCS.
 
 set -xeuo pipefail
 

From 948ae6c66409418e142f11e2666a792d0859f122 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 6 May 2022 06:42:41 -0400
Subject: [PATCH 0973/2157] tests/kola/ignition: add S3 ARN tests

Test the new ARN support in Ignition 2.14.0.

S3 access points can't be accessed anonymously, so even the public objects
need to be tested from inside an EC2 instance.
---
 .../resource/authenticated-s3/config.bu       | 19 ++++++++++++++++++-
 .../data/expected/arn-ap-anon                 |  1 +
 .../data/expected/arn-ap-auth                 |  1 +
 .../data/expected/arn-ap-versioned-latest     |  1 +
 .../data/expected/arn-ap-versioned-original   |  1 +
 .../authenticated-s3/data/expected/arn-auth   |  1 +
 tests/kola/ignition/resource/remote/config.bu | 11 ++++++++++-
 .../resource/remote/data/expected/arn-anon    |  1 +
 .../remote/data/expected/arn-versioned-latest |  1 +
 .../data/expected/arn-versioned-original      |  1 +
 10 files changed, 36 insertions(+), 2 deletions(-)
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-anon
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-auth
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-latest
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-original
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/arn-auth
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/arn-anon
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/arn-versioned-latest
 create mode 100644 tests/kola/ignition/resource/remote/data/expected/arn-versioned-original

diff --git a/tests/kola/ignition/resource/authenticated-s3/config.bu b/tests/kola/ignition/resource/authenticated-s3/config.bu
index d55b1f1d2a..85305476cd 100644
--- a/tests/kola/ignition/resource/authenticated-s3/config.bu
+++ b/tests/kola/ignition/resource/authenticated-s3/config.bu
@@ -2,7 +2,7 @@
 # associated with the instance
 
 variant: fcos
-version: 1.0.0
+version: 1.5.0-experimental
 ignition:
   config:
     merge:
@@ -12,3 +12,20 @@ storage:
     - path: /var/resource/s3-auth
       contents:
         source: "s3://ignition-test-fixtures/resources/authenticated"
+    - path: /var/resource/arn-auth
+      contents:
+        source: "arn:aws:s3:::ignition-test-fixtures/resources/authenticated"
+    # Publicly-readable object, fetched via an access point.  Access points
+    # don't allow anonymous access.
+    - path: /var/resource/arn-ap-anon
+      contents:
+        source: "arn:aws:s3:us-east-1:460538899914:accesspoint/ignition-test-fixtures-ap/object/resources/anonymous"
+    - path: /var/resource/arn-ap-auth
+      contents:
+        source: "arn:aws:s3:us-east-1:460538899914:accesspoint/ignition-test-fixtures-ap/object/resources/authenticated"
+    - path: /var/resource/arn-ap-versioned-original
+      contents:
+        source: "arn:aws:s3:us-east-1:460538899914:accesspoint/ignition-test-fixtures-ap/object/resources/versioned?versionId=Y9YqVujoLyHHSHJ4DslyXoaLvcilQJnU"
+    - path: /var/resource/arn-ap-versioned-latest
+      contents:
+        source: "arn:aws:s3:us-east-1:460538899914:accesspoint/ignition-test-fixtures-ap/object/resources/versioned"
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-anon b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-auth b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-auth
new file mode 100644
index 0000000000..f4253bde46
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-auth
@@ -0,0 +1 @@
+kola-authenticated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-latest b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-latest
new file mode 100644
index 0000000000..f55556eed1
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-latest
@@ -0,0 +1 @@
+updated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-original b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-original
new file mode 100644
index 0000000000..94f3610c08
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-ap-versioned-original
@@ -0,0 +1 @@
+original
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-auth b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-auth
new file mode 100644
index 0000000000..f4253bde46
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/arn-auth
@@ -0,0 +1 @@
+kola-authenticated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index d36eaf8482..b9e0b15f1e 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.2.0
+version: 1.5.0-experimental
 storage:
   files:
     - path: /var/resource/http
@@ -26,3 +26,12 @@ storage:
     - path: /var/resource/s3-versioned-https-latest
       contents:
         source: "https://ignition-test-fixtures.s3.amazonaws.com/resources/versioned"
+    - path: /var/resource/arn-anon
+      contents:
+        source: "arn:aws:s3:::ignition-test-fixtures/resources/anonymous"
+    - path: /var/resource/arn-versioned-original
+      contents:
+        source: "arn:aws:s3:::ignition-test-fixtures/resources/versioned?versionId=Y9YqVujoLyHHSHJ4DslyXoaLvcilQJnU"
+    - path: /var/resource/arn-versioned-latest
+      contents:
+        source: "arn:aws:s3:::ignition-test-fixtures/resources/versioned"
diff --git a/tests/kola/ignition/resource/remote/data/expected/arn-anon b/tests/kola/ignition/resource/remote/data/expected/arn-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/arn-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/arn-versioned-latest b/tests/kola/ignition/resource/remote/data/expected/arn-versioned-latest
new file mode 100644
index 0000000000..f55556eed1
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/arn-versioned-latest
@@ -0,0 +1 @@
+updated
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/data/expected/arn-versioned-original b/tests/kola/ignition/resource/remote/data/expected/arn-versioned-original
new file mode 100644
index 0000000000..94f3610c08
--- /dev/null
+++ b/tests/kola/ignition/resource/remote/data/expected/arn-versioned-original
@@ -0,0 +1 @@
+original
\ No newline at end of file

From 284c7f434736be39d6c17c9af2e1ed1c30062de0 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 9 May 2022 21:05:14 -0400
Subject: [PATCH 0974/2157] tests/kola/ignition: test intra-cloud anonymous
 S3/GCS object fetching

Have ext.config.ignition.resource.remote use the new noInstanceCreds flag
to disable instance credentials in EC2 and GCE instances, so the test
fetches resources anonymously.  Move the checks for authenticated access
of public objects into the authenticated-* tests.
---
 tests/kola/ignition/resource/authenticated-gs/config.bu     | 4 ++++
 .../resource/authenticated-gs/data/expected/gs-anon         | 1 +
 tests/kola/ignition/resource/authenticated-s3/config.bu     | 4 ++++
 .../resource/authenticated-s3/data/expected/s3-anon         | 1 +
 tests/kola/ignition/resource/remote/test.sh                 | 6 +++++-
 5 files changed, 15 insertions(+), 1 deletion(-)
 create mode 100644 tests/kola/ignition/resource/authenticated-gs/data/expected/gs-anon
 create mode 100644 tests/kola/ignition/resource/authenticated-s3/data/expected/s3-anon

diff --git a/tests/kola/ignition/resource/authenticated-gs/config.bu b/tests/kola/ignition/resource/authenticated-gs/config.bu
index cd7e032062..7453a016fb 100644
--- a/tests/kola/ignition/resource/authenticated-gs/config.bu
+++ b/tests/kola/ignition/resource/authenticated-gs/config.bu
@@ -9,6 +9,10 @@ ignition:
       - source: "gs://ignition-test-fixtures/resources/authenticated-var.ign"
 storage:
   files:
+    # Check that anonymous access works with credentials
+    - path: /var/resource/gs-anon
+      contents:
+        source: "gs://ignition-test-fixtures/resources/anonymous"
     - path: /var/resource/gs-auth
       contents:
         source: "gs://ignition-test-fixtures/resources/authenticated"
diff --git a/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-anon b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-gs/data/expected/gs-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/authenticated-s3/config.bu b/tests/kola/ignition/resource/authenticated-s3/config.bu
index 85305476cd..73921033ec 100644
--- a/tests/kola/ignition/resource/authenticated-s3/config.bu
+++ b/tests/kola/ignition/resource/authenticated-s3/config.bu
@@ -9,6 +9,10 @@ ignition:
       - source: "s3://ignition-test-fixtures/resources/authenticated-var-v3.ign"
 storage:
   files:
+    # Check that anonymous access works with credentials
+    - path: /var/resource/s3-anon
+      contents:
+        source: "s3://ignition-test-fixtures/resources/anonymous"
     - path: /var/resource/s3-auth
       contents:
         source: "s3://ignition-test-fixtures/resources/authenticated"
diff --git a/tests/kola/ignition/resource/authenticated-s3/data/expected/s3-anon b/tests/kola/ignition/resource/authenticated-s3/data/expected/s3-anon
new file mode 100644
index 0000000000..bfebec6131
--- /dev/null
+++ b/tests/kola/ignition/resource/authenticated-s3/data/expected/s3-anon
@@ -0,0 +1 @@
+kola-anonymous
\ No newline at end of file
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 4fbb1aaf28..44d1ab2ee1 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -1,7 +1,11 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet" }
+# kola: { "tags": "needs-internet", "noInstanceCreds": true }
 # - tags: needs-internet
 #   - We fetch resources from S3 and GCS.
+# - noInstanceCreds: don't pass AWS or GCP credentials to instance
+#   - This test verifies that Ignition can fetch anonymous resources within
+#     a cloud platform (S3 -> EC2, GCS -> GCE) when no credentials are
+#     supplied
 
 set -xeuo pipefail
 

From 8e08f7bb3d681d4761ad63253633cb8a675f3cc2 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 13 May 2022 01:17:41 -0400
Subject: [PATCH 0975/2157] 05core: add coreos-ignition-delete-config.service
 for upgrade boots

Ignition 2.14.0 adds ignition-delete-config.service, which deletes
Ignition configs from VMware and VirtualBox on first boot.  Add
coreos-ignition-delete-config.service to do the same thing on existing
machines on upgrade, using a stamp file in /var/lib to avoid multiple
runs.

Add a drop-in for ignition-delete-config.service that creates a stamp
file in /run, and then chain from that stamp to the long-term stamp in
/var/lib, ensuring that we don't delete configs twice on newly-
provisioned machines.  The upstream service can't create the stamp
directly in /var/lib because it runs before /var is mounted.

Prevent coreos-ignition-delete-config.service from running if
ignition-delete-config.service is masked, ensuring that the mask operation
documented upstream prevents the config from ever being deleted, as
intended.

We can remove this after the next barrier release in FCOS and barrier
equivalent in RHCOS.
---
 .../systemd/system-preset/40-coreos.preset    |  2 +
 .../coreos-ignition-delete-config.service     | 28 ++++++
 .../10-flag-file.conf                         |  7 ++
 .../usr/libexec/coreos-ignition-delete-config | 23 +++++
 tests/kola/ignition/delete-config/config.bu   | 36 ++++++++
 .../ignition/delete-config/data/commonlib.sh  |  1 +
 tests/kola/ignition/delete-config/test.sh     | 88 +++++++++++++++++++
 7 files changed, 185 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/coreos-ignition-delete-config.service
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/ignition-delete-config.service.d/10-flag-file.conf
 create mode 100755 overlay.d/05core/usr/libexec/coreos-ignition-delete-config
 create mode 100644 tests/kola/ignition/delete-config/config.bu
 create mode 120000 tests/kola/ignition/delete-config/data/commonlib.sh
 create mode 100755 tests/kola/ignition/delete-config/test.sh

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 9c0a2761c4..4f332211f4 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -10,6 +10,8 @@ enable coreos-ignition-firstboot-complete.service
 # Delete Ignition config from provider on platforms where it's possible
 # https://github.com/coreos/ignition/pull/1350
 enable ignition-delete-config.service
+# Delete Ignition config from provider when upgrading existing nodes
+enable coreos-ignition-delete-config.service
 # Boot checkin services for cloud providers.
 enable afterburn-checkin.service
 enable afterburn-firstboot-checkin.service
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-delete-config.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-delete-config.service
new file mode 100644
index 0000000000..cdcea6200a
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-delete-config.service
@@ -0,0 +1,28 @@
+# Can be removed from FCOS in Fedora 37 or after the next barrier release,
+# whichever comes first.  Can be removed from RHCOS in the first release
+# after every node is guaranteed to have booted at least once with 4.11 or
+# higher.
+
+[Unit]
+Description=CoreOS Delete Ignition Config From Hypervisor
+Documentation=https://coreos.github.io/ignition/
+
+ConditionKernelCommandLine=|ignition.platform.id=virtualbox
+ConditionKernelCommandLine=|ignition.platform.id=vmware
+ConditionPathExists=!/var/lib/coreos-ignition-delete-config.stamp
+# Hack: if the user masked ignition-delete-config.service, we shouldn't run
+# either.
+ConditionPathIsSymbolicLink=!/etc/systemd/system/ignition-delete-config.service
+
+# We check a stamp file written by ignition-delete-config.service.  That
+# service runs Before=sysinit.target, on which we have a default dependency,
+# so this is really just documentation.
+After=ignition-delete-config.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-ignition-delete-config
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/05core/usr/lib/systemd/system/ignition-delete-config.service.d/10-flag-file.conf b/overlay.d/05core/usr/lib/systemd/system/ignition-delete-config.service.d/10-flag-file.conf
new file mode 100644
index 0000000000..e501d74dab
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/ignition-delete-config.service.d/10-flag-file.conf
@@ -0,0 +1,7 @@
+# Create a flag file to notify coreos-ignition-delete-config.service that
+# we've run, and put it in /run because /var isn't mounted yet.
+# coreos-ignition-delete-config.service will then avoid trying to delete
+# the config again, and will create a persistent stamp file in /var/lib.
+
+[Service]
+ExecStart=/bin/touch /run/coreos-ignition-delete-config.stamp
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-delete-config b/overlay.d/05core/usr/libexec/coreos-ignition-delete-config
new file mode 100755
index 0000000000..59d4f0cf60
--- /dev/null
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-delete-config
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+set -euo pipefail
+
+cmdline=( $(</proc/cmdline) )
+cmdline_arg() {
+    local name="$1" value
+    for arg in "${cmdline[@]}"; do
+        if [[ "${arg%%=*}" == "${name}" ]]; then
+            value="${arg#*=}"
+        fi
+    done
+    echo "${value}"
+}
+
+# Avoid running again if ignition-delete-config.service has run, but still
+# create our own stamp file now that /var is mounted.
+if [ ! -e /run/coreos-ignition-delete-config.stamp ]; then
+    PLATFORM_ID=$(cmdline_arg ignition.platform.id)
+    /usr/libexec/ignition-rmcfg --platform=${PLATFORM_ID}
+fi
+
+touch /var/lib/coreos-ignition-delete-config.stamp
diff --git a/tests/kola/ignition/delete-config/config.bu b/tests/kola/ignition/delete-config/config.bu
new file mode 100644
index 0000000000..3faa264000
--- /dev/null
+++ b/tests/kola/ignition/delete-config/config.bu
@@ -0,0 +1,36 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/fake-ignition-rmcfg
+      mode: 0755
+      contents:
+        inline: |
+          #!/bin/bash
+          # Mocked replacement for ignition-rmcfg that just records that
+          # we ran it, and fails if we run it twice.  We can't run
+          # ignition-rmcfg directly because it doesn't succeed on any
+          # platform we test on.
+          if [ -e /run/ignition-rmcfg-ran ]; then
+              echo "ignition-rmcfg ran twice"
+              exit 1
+          fi
+          touch /run/ignition-rmcfg-ran
+systemd:
+  units:
+    - name: ignition-delete-config.service
+      dropins:
+        - name: 50-kola.conf
+          contents: |
+            [Unit]
+            ConditionKernelCommandLine=|ignition.platform.id=qemu
+            [Service]
+            ExecStartPre=mount --bind /etc/fake-ignition-rmcfg /usr/libexec/ignition-rmcfg
+    - name: coreos-ignition-delete-config.service
+      dropins:
+        - name: 50-kola.conf
+          contents: |
+            [Unit]
+            ConditionKernelCommandLine=|ignition.platform.id=qemu
+            [Service]
+            ExecStartPre=mount --bind /etc/fake-ignition-rmcfg /usr/libexec/ignition-rmcfg
diff --git a/tests/kola/ignition/delete-config/data/commonlib.sh b/tests/kola/ignition/delete-config/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/delete-config/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
new file mode 100755
index 0000000000..185377e7b6
--- /dev/null
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -0,0 +1,88 @@
+#!/bin/bash
+# kola: { "platforms": "qemu-unpriv" }
+# - platforms: qemu-unpriv
+#   - Ideally we'd test on virtualbox and vmware, but we don't have tests
+#     there, so we mock specifically for ignition.platform.id=qemu
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+"")
+    # Ignition boot
+
+    if [ ! -e /run/ignition-rmcfg-ran ]; then
+        fatal "mocked ignition-rmcfg did not run on first boot"
+    fi
+
+    if [ $(systemctl is-active ignition-delete-config ||:) != active ]; then
+        fatal "ignition-delete-config didn't succeed on first boot"
+    fi
+    if [ $(systemctl is-active coreos-ignition-delete-config ||:) != active ]; then
+        fatal "coreos-ignition-delete-config didn't succeed on first boot"
+    fi
+    ok "First boot OK"
+
+    # Reset state and reboot
+    rm /var/lib/coreos-ignition-delete-config.stamp
+    /tmp/autopkgtest-reboot upgrade
+    ;;
+
+upgrade)
+    # Simulated upgrade from Ignition < 2.14.0
+
+    if [ ! -e /run/ignition-rmcfg-ran ]; then
+        fatal "mocked ignition-rmcfg did not run on upgrade boot"
+    fi
+
+    if [ $(systemctl is-active ignition-delete-config ||:) != inactive ]; then
+        fatal "ignition-delete-config ran on upgrade boot"
+    fi
+    if [ $(systemctl is-active coreos-ignition-delete-config ||:) != active ]; then
+        fatal "coreos-ignition-delete-config didn't succeed on upgrade boot"
+    fi
+    ok "Upgrade boot OK"
+
+    /tmp/autopkgtest-reboot steady-state
+    ;;
+
+steady-state)
+    # Steady-state boot; nothing should run
+
+    if [ -e /run/ignition-rmcfg-ran ]; then
+        fatal "mocked ignition-rmcfg ran on steady-state boot"
+    fi
+
+    if [ $(systemctl is-active ignition-delete-config ||:) != inactive ]; then
+        fatal "ignition-delete-config ran on steady-state boot"
+    fi
+    if [ $(systemctl is-active coreos-ignition-delete-config ||:) != inactive ]; then
+        fatal "coreos-ignition-delete-config ran on steady-state boot"
+    fi
+    ok "Steady-state boot OK"
+
+    # Reset state for masked unit and reboot
+    rm /var/lib/coreos-ignition-delete-config.stamp
+    systemctl mask ignition-delete-config.service
+    /tmp/autopkgtest-reboot masked
+    ;;
+
+masked)
+    # Simulated upgrade with masked ignition-delete-config.service
+
+    if [ -e /run/ignition-rmcfg-ran ]; then
+        fatal "mocked ignition-rmcfg ran on masked boot"
+    fi
+
+    if [ $(systemctl is-active ignition-delete-config ||:) != inactive ]; then
+        fatal "ignition-delete-config ran on masked boot"
+    fi
+    if [ $(systemctl is-active coreos-ignition-delete-config ||:) != inactive ]; then
+        fatal "coreos-ignition-delete-config ran on masked boot"
+    fi
+    ok "Masked unit OK"
+    ;;
+
+*) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}" ;;
+esac

From b862d0f956324cc4403f48eddecbbf7a24bb9cda Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 12 May 2022 15:04:19 +0200
Subject: [PATCH 0976/2157] test/kola: Test disabling units via Ignition

Test for: https://github.com/coreos/fedora-coreos-tracker/issues/392
---
 tests/kola/ignition/systemd-disable/config.bu |  6 ++++++
 .../systemd-disable/data/commonlib.sh         |  1 +
 tests/kola/ignition/systemd-disable/test.sh   | 19 +++++++++++++++++++
 3 files changed, 26 insertions(+)
 create mode 100644 tests/kola/ignition/systemd-disable/config.bu
 create mode 120000 tests/kola/ignition/systemd-disable/data/commonlib.sh
 create mode 100755 tests/kola/ignition/systemd-disable/test.sh

diff --git a/tests/kola/ignition/systemd-disable/config.bu b/tests/kola/ignition/systemd-disable/config.bu
new file mode 100644
index 0000000000..5b198c4128
--- /dev/null
+++ b/tests/kola/ignition/systemd-disable/config.bu
@@ -0,0 +1,6 @@
+variant: fcos
+version: 1.4.0
+systemd:
+  units:
+    - name: zincati.service
+      enabled: false
diff --git a/tests/kola/ignition/systemd-disable/data/commonlib.sh b/tests/kola/ignition/systemd-disable/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ignition/systemd-disable/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
new file mode 100755
index 0000000000..404ce44595
--- /dev/null
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
+# This test makes sure that ignition is able to disable units
+# https://github.com/coreos/fedora-coreos-tracker/issues/392
+
+# We don't need to test this on every platform. If it passes in
+# one place it will pass everywhere.
+# This test is currently scoped to FCOS because `zincati` is only available on
+# FCOS.
+# TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [ "$(systemctl is-enabled zincati.service)" != 'disabled' ]; then
+    fatal "zincati.service systemd unit should be disabled"
+fi
+ok "zincati.service systemd unit is enabled"

From 0ee938926d463d39404264e6fdfa7998348a6cdf Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 May 2022 05:12:47 +0000
Subject: [PATCH 0977/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/237/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cc563ec6f8..05f90a1e64 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1189,10 +1189,10 @@
       "evra": "2.38-0.2.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4927-1.fc36.noarch"
+      "evra": "2:8.2.4969-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4927-1.fc36.aarch64"
+      "evra": "2:8.2.4969-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-18T01:50:02Z",
+    "generated": "2022-05-19T03:47:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-17T21:45:08Z"
+        "generated": "2022-05-18T18:50:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-18T01:04:04Z"
+        "generated": "2022-05-19T00:55:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 00311f7fe6..ff19a53484 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1201,10 +1201,10 @@
       "evra": "2.38-0.2.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4927-1.fc36.noarch"
+      "evra": "2:8.2.4969-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4927-1.fc36.x86_64"
+      "evra": "2:8.2.4969-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-18T01:49:24Z",
+    "generated": "2022-05-19T03:46:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-17T21:45:41Z"
+        "generated": "2022-05-18T18:50:42Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-18T01:04:16Z"
+        "generated": "2022-05-19T00:55:50Z"
       }
     }
   }

From 4f012056bf95e2983e4b756182c2eac7af000eb2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 19 May 2022 14:00:35 -0400
Subject: [PATCH 0978/2157] overrides: fast-track kernel-5.17.9-300.fc36

Fixes an issue in ceph.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1167
---
 manifest-lock.overrides.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index edf9b67b0a..d5dcbd463e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -20,6 +20,24 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-5df5dc8ec5
       type: fast-track
+  kernel:
+    evr: 5.17.9-300.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
+      type: fast-track
+  kernel-core:
+    evr: 5.17.9-300.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
+      type: fast-track
+  kernel-modules:
+    evr: 5.17.9-300.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
+      type: fast-track
   ostree:
     evr: 2022.3-2.fc36
     metadata:

From 021a74f1af0726e6b8d9c077be050925992ed5e0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 19 May 2022 14:04:05 -0400
Subject: [PATCH 0979/2157] overrides: fast-track ostree-2022.3-3.fc36

The update for ostree-2022.3-2.fc36 [1] was obsoleted in bodhi.

[1] https://bodhi.fedoraproject.org/updates/FEDORA-2022-893b870b9b
---
 manifest-lock.overrides.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d5dcbd463e..83671a489a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -39,14 +39,14 @@ packages:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
       type: fast-track
   ostree:
-    evr: 2022.3-2.fc36
+    evr: 2022.3-3.fc36
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-893b870b9b
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9971c4e47
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
       type: fast-track
   ostree-libs:
-    evr: 2022.3-2.fc36
+    evr: 2022.3-3.fc36
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-893b870b9b
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9971c4e47
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
       type: fast-track

From 2ba52a8ca6d13d9f4f7962f20f15f2eb2e91b955 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 18 May 2022 13:06:21 -0400
Subject: [PATCH 0980/2157] ci/overrides.py: use stderr for logging

Some commands are designed to output parseable data on stdout. Let's
consistently use stderr for informational output.
---
 ci/overrides.py | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 392eee4c4f..7097f291ae 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -206,7 +206,7 @@ def get_manifest_packages(arch):
     versions = [b['id'] for b in get_build_list() if arch in b['arches']]
     if not versions:
         return {}
-    print(f'Reading generated lockfile from build {versions[0]} on {arch}')
+    eprint(f'Reading generated lockfile from build {versions[0]} on {arch}')
     lockfile_url = GENERATED_LOCKFILE_URL_TEMPLATE.format(stream=get_stream(),
             version=versions[0], arch=arch)
     resp = requests.get(lockfile_url)
@@ -272,12 +272,12 @@ def setup_repos(base, treefile):
     for repo in base.repos.values():
         repo.disable()
 
-    print("Enabled repos:")
+    eprint("Enabled repos:")
     for repo in treefile['repos']:
         base.repos[repo].enable()
-        print(f"- {repo}")
+        eprint(f"- {repo}")
 
-    print("Downloading metadata")
+    eprint("Downloading metadata")
     base.fill_sack(load_system_repo=False)
 
 
@@ -316,13 +316,13 @@ def graduate_lockfile(base, fn):
         if not graduated:
             new_packages[name] = lock
         else:
-            print(f"{fn}: {nevra} has graduated")
+            eprint(f"{fn}: {nevra} has graduated")
 
     if lockfile['packages'] != new_packages:
         lockfile['packages'] = new_packages
         write_lockfile(fn, lockfile)
     else:
-        print(f"{fn}: no packages graduated")
+        eprint(f"{fn}: no packages graduated")
 
 
 def sack_has_nevra_greater_or_equal(base, nevra):
@@ -334,7 +334,7 @@ def sack_has_nevra_greater_or_equal(base, nevra):
         # Odd... the only way I can imagine this happen is if we fast-track a
         # brand new package from Koji which hasn't hit the updates repo yet.
         # Corner-case, but let's be nice.
-        print(f"couldn't find package {nevra.name}; assuming not graduated")
+        eprint(f"couldn't find package {nevra.name}; assuming not graduated")
         return False
 
     nevra_latest = hawkey.split_nevra(str(pkgs[0]))
@@ -375,5 +375,9 @@ def check_dist_tag(name, info, dist):
         raise Exception(f"Package {name}-{info['evra']} doesn't match expected dist tag {dist}")
 
 
+def eprint(*args, **kwargs):
+    print(*args, file=sys.stderr, **kwargs)
+
+
 if __name__ == "__main__":
     sys.exit(main())

From 1f714b044e36e54bb8281239cbbb66dec3a7f695 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 May 2022 22:14:03 +0000
Subject: [PATCH 0981/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/238/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 05f90a1e64..3eb2e282f1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.7-300.fc36.aarch64"
+      "evra": "5.17.9-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.7-300.fc36.aarch64"
+      "evra": "5.17.9-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.7-300.fc36.aarch64"
+      "evra": "5.17.9-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -943,10 +943,10 @@
       "evra": "1.77-9.fc36.aarch64"
     },
     "ostree": {
-      "evra": "2022.3-2.fc36.aarch64"
+      "evra": "2022.3-3.fc36.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.3-2.fc36.aarch64"
+      "evra": "2022.3-3.fc36.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.aarch64"
@@ -1229,13 +1229,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-19T03:47:53Z",
+    "generated": "2022-05-19T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-18T18:50:05Z"
+        "generated": "2022-05-19T19:27:09Z"
       },
       "fedora-updates": {
         "generated": "2022-05-19T00:55:38Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ff19a53484..4765e8c4cd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.7-300.fc36.x86_64"
+      "evra": "5.17.9-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.7-300.fc36.x86_64"
+      "evra": "5.17.9-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.7-300.fc36.x86_64"
+      "evra": "5.17.9-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -955,10 +955,10 @@
       "evra": "1.77-9.fc36.x86_64"
     },
     "ostree": {
-      "evra": "2022.3-2.fc36.x86_64"
+      "evra": "2022.3-3.fc36.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.3-2.fc36.x86_64"
+      "evra": "2022.3-3.fc36.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.x86_64"
@@ -1241,13 +1241,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-19T03:46:44Z",
+    "generated": "2022-05-19T20:52:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-18T18:50:42Z"
+        "generated": "2022-05-19T19:27:55Z"
       },
       "fedora-updates": {
         "generated": "2022-05-19T00:55:50Z"

From 6181d7f2a61d5426b78575804f82fa1867204899 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 20 May 2022 22:13:25 +0000
Subject: [PATCH 0982/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/239/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3eb2e282f1..fe63288b96 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-1.fc36.noarch"
+      "evra": "2:2.183.0-4.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.4-1.fc36.aarch64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220411-131.fc36.noarch"
+      "evra": "20220509-132.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220411-131.fc36.noarch"
+      "evra": "20220509-132.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -1039,7 +1039,7 @@
       "evra": "4.17.0-10.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.3-15.fc36.aarch64"
+      "evra": "3.2.4-1.fc36.aarch64"
     },
     "runc": {
       "evra": "2:1.1.1-1.fc36.aarch64"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-0.2.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4969-1.fc36.noarch"
+      "evra": "2:8.2.4975-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4969-1.fc36.aarch64"
+      "evra": "2:8.2.4975-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,7 +1229,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-19T20:53:02Z",
+    "generated": "2022-05-20T20:53:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1238,7 +1238,7 @@
         "generated": "2022-05-19T19:27:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-19T00:55:38Z"
+        "generated": "2022-05-20T01:09:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4765e8c4cd..12ffff6700 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-1.fc36.noarch"
+      "evra": "2:2.183.0-4.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.4-1.fc36.x86_64"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220411-131.fc36.noarch"
+      "evra": "20220509-132.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220411-131.fc36.noarch"
+      "evra": "20220509-132.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -1051,7 +1051,7 @@
       "evra": "4.17.0-10.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.3-15.fc36.x86_64"
+      "evra": "3.2.4-1.fc36.x86_64"
     },
     "runc": {
       "evra": "2:1.1.1-1.fc36.x86_64"
@@ -1201,10 +1201,10 @@
       "evra": "2.38-0.2.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4969-1.fc36.noarch"
+      "evra": "2:8.2.4975-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4969-1.fc36.x86_64"
+      "evra": "2:8.2.4975-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1241,7 +1241,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-19T20:52:22Z",
+    "generated": "2022-05-20T20:52:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1250,7 +1250,7 @@
         "generated": "2022-05-19T19:27:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-19T00:55:50Z"
+        "generated": "2022-05-20T01:09:20Z"
       }
     }
   }

From 974f225cc4590b80b96e8f4ed1d58716098b3099 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 22 May 2022 22:12:42 +0000
Subject: [PATCH 0983/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/241/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fe63288b96..2d913877c3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-6.fc36.aarch64"
+      "evra": "2.35-9.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-6.fc36.aarch64"
+      "evra": "2.35-9.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-6.fc36.aarch64"
+      "evra": "2.35-9.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-20T20:53:12Z",
+    "generated": "2022-05-22T20:52:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-19T19:27:09Z"
+        "generated": "2022-05-20T22:15:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-20T01:09:01Z"
+        "generated": "2022-05-22T00:59:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 12ffff6700..9a23cdda26 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-6.fc36.x86_64"
+      "evra": "2.35-9.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-6.fc36.x86_64"
+      "evra": "2.35-9.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-6.fc36.x86_64"
+      "evra": "2.35-9.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-20T20:52:33Z",
+    "generated": "2022-05-22T20:52:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-19T19:27:55Z"
+        "generated": "2022-05-20T22:16:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-20T01:09:20Z"
+        "generated": "2022-05-22T01:00:09Z"
       }
     }
   }

From 67c7b76248509f9c638488628bb895053a0f171f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 23 May 2022 00:16:43 +0000
Subject: [PATCH 0984/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 83671a489a..ad7acb36b4 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,12 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  containerd:
-    evr: 1.6.4-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-aa2f62aabd
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1138
-      type: fast-track
   ignition:
     evr: 2.14.0-1.fc36
     metadata:
@@ -38,15 +32,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
       type: fast-track
-  ostree:
-    evr: 2022.3-3.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9971c4e47
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
-      type: fast-track
-  ostree-libs:
-    evr: 2022.3-3.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9971c4e47
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/701
-      type: fast-track

From 34029040361cc181da798d298931044c1aef98b1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 23 May 2022 22:12:19 +0000
Subject: [PATCH 0985/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/242/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2d913877c3..c9d79a4f53 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,7 +73,7 @@
       "evra": "0.2.6-2.fc36.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.3-1.fc36.aarch64"
+      "evra": "3.5.3-2.fc36.aarch64"
     },
     "btrfs-progs": {
       "evra": "5.16.2-1.fc36.aarch64"
@@ -508,7 +508,7 @@
       "evra": "0.3.111-13.fc36.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.3-1.fc36.aarch64"
+      "evra": "3.5.3-2.fc36.aarch64"
     },
     "libargon2": {
       "evra": "20171227-9.fc36.aarch64"
@@ -817,7 +817,7 @@
       "evra": "0.2.5-7.fc36.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.2-1.fc36.aarch64"
+      "evra": "1.5.2-2.fc36.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-31.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-22T20:52:49Z",
+    "generated": "2022-05-23T20:52:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-20T22:15:38Z"
+        "generated": "2022-05-22T22:15:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-22T00:59:56Z"
+        "generated": "2022-05-23T01:03:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9a23cdda26..089f4218cb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,7 +73,7 @@
       "evra": "0.2.6-2.fc36.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.3-1.fc36.x86_64"
+      "evra": "3.5.3-2.fc36.x86_64"
     },
     "btrfs-progs": {
       "evra": "5.16.2-1.fc36.x86_64"
@@ -514,7 +514,7 @@
       "evra": "0.3.111-13.fc36.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.3-1.fc36.x86_64"
+      "evra": "3.5.3-2.fc36.x86_64"
     },
     "libargon2": {
       "evra": "20171227-9.fc36.x86_64"
@@ -826,7 +826,7 @@
       "evra": "0.2.5-7.fc36.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.2-1.fc36.x86_64"
+      "evra": "1.5.2-2.fc36.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-31.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-22T20:52:16Z",
+    "generated": "2022-05-23T20:52:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-20T22:16:07Z"
+        "generated": "2022-05-22T22:15:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-22T01:00:09Z"
+        "generated": "2022-05-23T01:03:21Z"
       }
     }
   }

From fd8527c824d4d92e4e8583f40d013af031834bc9 Mon Sep 17 00:00:00 2001
From: LakshmiRavichandran1 <Lakshmi.Ravichandran1@ibm.com>
Date: Mon, 23 May 2022 15:06:27 +0200
Subject: [PATCH 0986/2157] adding tests to be skipped for s390x

---
 kola-denylist.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d4edd432d2..d4b27bb6d8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,3 +17,19 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le
+- pattern: rpmostree.install-uninstall
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1204
+  arches:
+  - s390x
+- pattern: rpmostree.upgrade-rollback
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1205
+  arches:
+  - s390x
+- pattern: ostree.hotfix
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1207
+  arches:
+  - s390x
+- pattern: multipath.day2
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
+  arches:
+  - s390x

From c452af04d86af6bed58fa9bd0543025d5fe3a3f6 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 2 May 2022 20:14:33 -0400
Subject: [PATCH 0987/2157] ci/continuous: New container that pulls from
 continuous COPR
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

History goes in cycles.  One of the key original raison d'être of
ostree was having people consume git main/master of projects.  But...
because RPM doesn't make it easy to revert things, we really
end up going only at the same speed as the rest of Fedora sadly.

Anyways, we've talked about this a few times in FCOS; xref
https://github.com/coreos/fedora-coreos-tracker/issues/910

This adds a container image that is built *as* a container layering
on top of the base image, using the recently landed
https://github.com/coreos/rpm-ostree/pull/3605/

My plan is to add build automation (in the pipeline? or OCP Prow?)
that sticks this at e.g. `quay.io/coreos-assembler/fcos:35-continous`.
---
 ci/continuous/Dockerfile           |  4 ++++
 ci/continuous/fcos-continuous.repo | 10 ++++++++++
 ci/continuous/overrides.yaml       | 11 +++++++++++
 3 files changed, 25 insertions(+)
 create mode 100644 ci/continuous/Dockerfile
 create mode 100644 ci/continuous/fcos-continuous.repo
 create mode 100644 ci/continuous/overrides.yaml

diff --git a/ci/continuous/Dockerfile b/ci/continuous/Dockerfile
new file mode 100644
index 0000000000..65a0f293e3
--- /dev/null
+++ b/ci/continuous/Dockerfile
@@ -0,0 +1,4 @@
+FROM quay.io/coreos-assembler/fcos:testing-devel
+ADD fcos-continuous.repo /etc/yum.repos.d
+ADD overrides.yaml /etc/rpm-ostree/origin.d/overrides.yaml
+RUN rpm-ostree ex rebuild
diff --git a/ci/continuous/fcos-continuous.repo b/ci/continuous/fcos-continuous.repo
new file mode 100644
index 0000000000..82a0683540
--- /dev/null
+++ b/ci/continuous/fcos-continuous.repo
@@ -0,0 +1,10 @@
+[copr:copr.fedorainfracloud.org:group_CoreOS:continuous]
+name=Copr repo for continuous owned by @CoreOS
+baseurl=https://download.copr.fedorainfracloud.org/results/@CoreOS/continuous/fedora-$releasever-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/@CoreOS/continuous/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1
diff --git a/ci/continuous/overrides.yaml b/ci/continuous/overrides.yaml
new file mode 100644
index 0000000000..4e55de029a
--- /dev/null
+++ b/ci/continuous/overrides.yaml
@@ -0,0 +1,11 @@
+ex-override-replace:
+  - from:
+      repo: copr:copr.fedorainfracloud.org:group_CoreOS:continuous
+    packages:
+      - ostree
+      - ostree-libs
+      - rpm-ostree
+      - rpm-ostree-libs
+      - ignition
+      - coreos-installer
+      - coreos-installer-bootinfra

From 69f3b0325ccae309105f379bfdd27e487afcb4f6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 24 May 2022 06:05:25 +0000
Subject: [PATCH 0988/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ad7acb36b4..34f0cda66f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,21 +14,3 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-5df5dc8ec5
       type: fast-track
-  kernel:
-    evr: 5.17.9-300.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
-      type: fast-track
-  kernel-core:
-    evr: 5.17.9-300.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
-      type: fast-track
-  kernel-modules:
-    evr: 5.17.9-300.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1167
-      type: fast-track

From 4cab6ed0553637bd4cc67d251f0d68b25a60edbf Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 24 May 2022 16:24:18 -0400
Subject: [PATCH 0989/2157] tests/kdump.crash: bump crashkernel size, add check
 for future

It turns out kdump has a tool that can be used to estimate the
appropriate size for the crashkernel reserved memory known as
`kdumpctl estimate`. On FCOS/RHCOS here are the numbers I saw
for the architectures in our universe:

- 161M aarch64 FCOS
- 448M aarch64 RHCOS

- 134M ppc64le FCOS
- 384M ppc64le RHCOS

- 192M s390x FCOS
- 160M s390x RHCOS

- 157M x86_64 FCOS
- 165M x86_64 RHCOS

Bump the crashkernel here to 500M to handle our worst case and also
add a check to make sure that if we ever are under the minimum
recommended size we'll get notified.
---
 tests/kola/kdump/crash/config.bu | 5 ++++-
 tests/kola/kdump/crash/test.sh   | 5 +++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/kola/kdump/crash/config.bu b/tests/kola/kdump/crash/config.bu
index 909e91e4d3..67c229b420 100644
--- a/tests/kola/kdump/crash/config.bu
+++ b/tests/kola/kdump/crash/config.bu
@@ -2,7 +2,10 @@ variant: fcos
 version: 1.4.0
 kernel_arguments:
   should_exist:
-    - crashkernel=300M
+    # We need to make sure we have a large enough crashkernel for FCOS
+    # and RHCOS here. Currently the worst case is aarch64 RHCOS where
+    # the `kdumpctl estimate` says "Recommended crashkernel: 448M"
+    - crashkernel=500M
 systemd:
   units:
     - name: kdump.service
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index bdc7d6d7b2..4d32b59021 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -22,6 +22,11 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       if [ $(systemctl show -p Result kdump.service) != "Result=success" ]; then
           fatal "kdump.service failed to start"
       fi
+      # Verify that the crashkernel reserved memory is large enough
+      output=$(kdumpctl estimate)
+      if grep -q "WARNING: Current crashkernel size is lower than recommended size" <<< "$output"; then
+          fatal "The reserved crashkernel size is lower than recommended."
+      fi
       /tmp/autopkgtest-reboot-prepare aftercrash
       # Add in a sleep to workaround race condition where XFS/kernel errors happen
       # during crash kernel boot.

From 287bd74af88c20e30c319da7d1aa21aeed6f2f38 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 25 May 2022 20:53:09 +0000
Subject: [PATCH 0990/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/244/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c9d79a4f53..c355daa3a4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-23T20:52:48Z",
+    "generated": "2022-05-25T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-22T22:15:38Z"
+        "generated": "2022-05-23T22:14:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-23T01:03:07Z"
+        "generated": "2022-05-25T00:56:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 089f4218cb..08652c1c85 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-23T20:52:15Z",
+    "generated": "2022-05-25T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-22T22:15:53Z"
+        "generated": "2022-05-23T22:15:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-23T01:03:21Z"
+        "generated": "2022-05-25T00:56:30Z"
       }
     }
   }

From 01ffbac69c14a540b0e9c19a8ca2cadc9b2be818 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 26 May 2022 06:05:46 +0000
Subject: [PATCH 0991/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 34f0cda66f..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ignition:
-    evr: 2.14.0-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-5df5dc8ec5
-      type: fast-track
+packages: {}

From bb205d9e5cc111196a05dcd11bc15e3cacb74470 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 25 May 2022 15:12:07 -0400
Subject: [PATCH 0992/2157] ci/overrides: don't load sack if overrides empty

Right now, `next-devel` and `branched` are inactive. But to reduce
churn, the `remove-graduated-overrides` GitHub Action is left running on
those branches since it's harmless. However, the repos on inactive
branches might not be valid, causing workflow failures.

But anyway, there are no active overrides on these branches, so we can
work around this by exiting earlier.

I think a more appropriate fix for this is to query whether `next-devel`
is open or closed (though we'd need something similar for `branched`
too), but we do also want this optimization anyway.
---
 ci/overrides.py | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 7097f291ae..0056c89b39 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -277,9 +277,6 @@ def setup_repos(base, treefile):
         base.repos[repo].enable()
         eprint(f"- {repo}")
 
-    eprint("Downloading metadata")
-    base.fill_sack(load_system_repo=False)
-
 
 def get_lockfiles():
     lockfiles = ['manifest-lock.overrides.yaml']
@@ -296,9 +293,13 @@ def graduate_lockfile(base, fn):
 
     with open(fn) as f:
         lockfile = yaml.safe_load(f)
-    if 'packages' not in lockfile:
+    if len(lockfile.get('packages', {})) == 0:
         return
 
+    if base.sack is None:
+        eprint("Downloading metadata")
+        base.fill_sack(load_system_repo=False)
+
     new_packages = {}
     for name, lock in lockfile['packages'].items():
         if ('metadata' not in lock or

From 13b95602de9a2b70bf29475a2c290dde01c08219 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Fri, 27 May 2022 09:39:26 -0400
Subject: [PATCH 0993/2157] kola-denylist.yaml: disable
 ext.config.files.trust-cpu on rawhide

see https://github.com/coreos/fedora-coreos-tracker/issues/1209
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d4b27bb6d8..991be0bc84 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -33,3 +33,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
   - s390x
+- pattern: ext.config.files.trust-cpu
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1209
+  streams:
+  - rawhide

From 964d681c9b4e0fe8ef75580a9bfdf26a0474976c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 May 2022 22:12:42 +0000
Subject: [PATCH 0994/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/245/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c355daa3a4..277824ab21 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -76,7 +76,7 @@
       "evra": "3.5.3-2.fc36.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.16.2-1.fc36.aarch64"
+      "evra": "5.18-1.fc36.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.aarch64"
@@ -172,7 +172,7 @@
       "evra": "3.17-1.fc36.aarch64"
     },
     "crun": {
-      "evra": "1.4.4-1.fc36.aarch64"
+      "evra": "1.4.5-1.fc36.aarch64"
     },
     "crypto-policies": {
       "evra": "20220203-2.git112f859.fc36.noarch"
@@ -1144,22 +1144,22 @@
       "evra": "1.9.8-5.p2.fc36.aarch64"
     },
     "systemd": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "systemd-container": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "systemd-libs": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "systemd-pam": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "systemd-resolved": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "systemd-udev": {
-      "evra": "250.3-8.fc36.aarch64"
+      "evra": "250.6-1.fc36.aarch64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.aarch64"
@@ -1229,7 +1229,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-25T20:53:02Z",
+    "generated": "2022-05-27T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1238,7 +1238,7 @@
         "generated": "2022-05-23T22:14:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-25T00:56:17Z"
+        "generated": "2022-05-27T00:58:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 08652c1c85..1890126403 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -76,7 +76,7 @@
       "evra": "3.5.3-2.fc36.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.16.2-1.fc36.x86_64"
+      "evra": "5.18-1.fc36.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.x86_64"
@@ -172,7 +172,7 @@
       "evra": "3.17-1.fc36.x86_64"
     },
     "crun": {
-      "evra": "1.4.4-1.fc36.x86_64"
+      "evra": "1.4.5-1.fc36.x86_64"
     },
     "crypto-policies": {
       "evra": "20220203-2.git112f859.fc36.noarch"
@@ -1156,22 +1156,22 @@
       "evra": "1.9.8-5.p2.fc36.x86_64"
     },
     "systemd": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "systemd-container": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "systemd-libs": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "systemd-pam": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "systemd-resolved": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "systemd-udev": {
-      "evra": "250.3-8.fc36.x86_64"
+      "evra": "250.6-1.fc36.x86_64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.x86_64"
@@ -1241,7 +1241,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-25T20:52:24Z",
+    "generated": "2022-05-27T20:52:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1250,7 +1250,7 @@
         "generated": "2022-05-23T22:15:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-25T00:56:30Z"
+        "generated": "2022-05-27T00:58:13Z"
       }
     }
   }

From 9b2bddb2193c73aa1ffec05b71900623e5668627 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 28 May 2022 22:12:49 +0000
Subject: [PATCH 0995/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/246/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 277824ab21..3ce322d827 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.17-1.fc36.aarch64"
+      "evra": "3.17-2.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17-1.fc36.aarch64"
+      "evra": "3.17-2.fc36.aarch64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.9-300.fc36.aarch64"
+      "evra": "5.17.11-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.9-300.fc36.aarch64"
+      "evra": "5.17.11-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.9-300.fc36.aarch64"
+      "evra": "5.17.11-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -811,7 +811,7 @@
       "evra": "2.9.14-1.fc36.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.7-1.fc36.aarch64"
+      "evra": "0.3.9-1.fc36.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.aarch64"
@@ -832,7 +832,7 @@
       "evra": "0.9.29-3.fc36.aarch64"
     },
     "logrotate": {
-      "evra": "3.19.0-2.fc36.aarch64"
+      "evra": "3.20.1-1.fc36.aarch64"
     },
     "lsof": {
       "evra": "4.94.0-3.fc36.aarch64"
@@ -1057,10 +1057,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.8-2.fc36.noarch"
+      "evra": "36.9-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.8-2.fc36.noarch"
+      "evra": "36.9-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.10-1.fc36.noarch"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-27T20:53:01Z",
+    "generated": "2022-05-28T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-23T22:14:52Z"
+        "generated": "2022-05-27T22:15:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-27T00:58:00Z"
+        "generated": "2022-05-28T01:02:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1890126403..7bf13c291e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.17-1.fc36.x86_64"
+      "evra": "3.17-2.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17-1.fc36.x86_64"
+      "evra": "3.17-2.fc36.x86_64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.9-300.fc36.x86_64"
+      "evra": "5.17.11-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.9-300.fc36.x86_64"
+      "evra": "5.17.11-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.9-300.fc36.x86_64"
+      "evra": "5.17.11-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -820,7 +820,7 @@
       "evra": "2.9.14-1.fc36.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.7-1.fc36.x86_64"
+      "evra": "0.3.9-1.fc36.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.x86_64"
@@ -841,7 +841,7 @@
       "evra": "0.9.29-3.fc36.x86_64"
     },
     "logrotate": {
-      "evra": "3.19.0-2.fc36.x86_64"
+      "evra": "3.20.1-1.fc36.x86_64"
     },
     "lsof": {
       "evra": "4.94.0-3.fc36.x86_64"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.8-2.fc36.noarch"
+      "evra": "36.9-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.8-2.fc36.noarch"
+      "evra": "36.9-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.10-1.fc36.noarch"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-27T20:52:25Z",
+    "generated": "2022-05-28T20:52:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-23T22:15:20Z"
+        "generated": "2022-05-27T22:15:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-27T00:58:13Z"
+        "generated": "2022-05-28T01:03:02Z"
       }
     }
   }

From 4b8c185999f0510988e76db866347f4b0e58c4ca Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 30 May 2022 22:13:02 +0000
Subject: [PATCH 0996/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/248/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3ce322d827..996a0271c0 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -670,10 +670,10 @@
       "evra": "1.46.0-2.fc36.aarch64"
     },
     "libnl3": {
-      "evra": "3.5.0-9.fc36.aarch64"
+      "evra": "3.6.0-3.fc36.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-9.fc36.aarch64"
+      "evra": "3.6.0-3.fc36.aarch64"
     },
     "libnsl2": {
       "evra": "2.0.0-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-28T20:52:51Z",
+    "generated": "2022-05-30T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-27T22:15:40Z"
+        "generated": "2022-05-28T22:15:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-28T01:02:48Z"
+        "generated": "2022-05-30T04:45:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7bf13c291e..20098c0003 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -676,10 +676,10 @@
       "evra": "1.46.0-2.fc36.x86_64"
     },
     "libnl3": {
-      "evra": "3.5.0-9.fc36.x86_64"
+      "evra": "3.6.0-3.fc36.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.5.0-9.fc36.x86_64"
+      "evra": "3.6.0-3.fc36.x86_64"
     },
     "libnsl2": {
       "evra": "2.0.0-3.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-28T20:52:16Z",
+    "generated": "2022-05-30T20:52:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-27T22:15:25Z"
+        "generated": "2022-05-28T22:16:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-28T01:03:02Z"
+        "generated": "2022-05-30T04:45:29Z"
       }
     }
   }

From a4231a155275b712a7a5989b5da3298acbe24111 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Mon, 30 May 2022 12:05:24 -0400
Subject: [PATCH 0997/2157] tests: fix trust-cpu

As mentioned in https://github.com/coreos/fedora-coreos-tracker/issues/1209,
due to upstream changes, our current mechanism for testing
if RANDOM_TRUST_CPU is enabled is no longer valid. Lets instead
check the kernel config file to get the same information.

fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1209
---
 tests/kola/files/trust-cpu | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
index 5b942108c3..3c7bbf337c 100755
--- a/tests/kola/files/trust-cpu
+++ b/tests/kola/files/trust-cpu
@@ -6,16 +6,12 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1830280
-tmpd=$(mktemp -d)
-cd "${tmpd}"
 case "$(arch)" in
     x86_64)
-        dmesg | grep ' random:' > random.txt
-        if ! grep -qe 'crng.*done.*trust.*CPU' <random.txt; then
-            sed -e 's/^/# /' < random.txt
+        config=$(grep ^CONFIG_RANDOM_TRUST_CPU /lib/modules/$(uname -r)/config)
+        if [ "$config" != "CONFIG_RANDOM_TRUST_CPU=y" ]; then
             fatal "Error: Failed to find crng trusting CPU"
         fi
         ok "random trust cpu" ;;
     *) echo "Don't know how to test hardware RNG state on arch=$(arch)" ;;
 esac
-rm -r "${tmpd}"

From d063ab011c519b513ad1c99d9e59c33d29a9cafe Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Tue, 31 May 2022 10:24:36 -0400
Subject: [PATCH 0998/2157] Revert "kola-denylist.yaml: disable
 ext.config.files.trust-cpu on rawhide"

This reverts commit 13b95602de9a2b70bf29475a2c290dde01c08219.
https://github.com/coreos/fedora-coreos-tracker/issues/1209 has been fixed by
https://github.com/coreos/fedora-coreos-config/pull/1764. We can once again
enable this test on rawhide.
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 991be0bc84..d4b27bb6d8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -33,7 +33,3 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
   - s390x
-- pattern: ext.config.files.trust-cpu
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1209
-  streams:
-  - rawhide

From e458bfa311622f9e169e89b5b84be7065ff7484e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 31 May 2022 22:12:44 +0000
Subject: [PATCH 0999/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/249/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 996a0271c0..9fe299db44 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-9.fc36.aarch64"
+      "evra": "2.35-10.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-9.fc36.aarch64"
+      "evra": "2.35-10.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-9.fc36.aarch64"
+      "evra": "2.35-10.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-30T20:53:06Z",
+    "generated": "2022-05-31T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-28T22:15:22Z"
+        "generated": "2022-05-30T22:15:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-30T04:45:15Z"
+        "generated": "2022-05-31T15:40:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 20098c0003..2b0a50b4b8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-9.fc36.x86_64"
+      "evra": "2.35-10.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-9.fc36.x86_64"
+      "evra": "2.35-10.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-9.fc36.x86_64"
+      "evra": "2.35-10.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-30T20:52:31Z",
+    "generated": "2022-05-31T20:52:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-28T22:16:22Z"
+        "generated": "2022-05-30T22:15:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-30T04:45:29Z"
+        "generated": "2022-05-31T15:40:39Z"
       }
     }
   }

From 179628cabc4811e40841f4d0a319c54d03203d3b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 2 Jun 2022 01:53:43 +0000
Subject: [PATCH 1000/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/250/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 2 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9fe299db44..1afffbb56f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.28-1.fc36.aarch64"
+      "evra": "32:9.16.29-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.28-1.fc36.noarch"
+      "evra": "32:9.16.29-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.28-1.fc36.aarch64"
+      "evra": "32:9.16.29-1.fc36.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.aarch64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.7.7-1.fc36.aarch64"
+      "evra": "1.8.1-1.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -379,7 +379,7 @@
       "evra": "2.3.6-1.fc36.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.4-1.fc36.aarch64"
+      "evra": "3.7.6-1.fc36.aarch64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.aarch64"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc4.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc5.fc36.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.aarch64"
@@ -832,7 +832,7 @@
       "evra": "0.9.29-3.fc36.aarch64"
     },
     "logrotate": {
-      "evra": "3.20.1-1.fc36.aarch64"
+      "evra": "3.20.1-2.fc36.aarch64"
     },
     "lsof": {
       "evra": "4.94.0-3.fc36.aarch64"
@@ -862,7 +862,7 @@
       "evra": "20.10.16-1.fc36.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-1.fc36.aarch64"
+      "evra": "2:0.6.0-3.fc36.aarch64"
     },
     "mozjs91": {
       "evra": "91.9.0-1.fc36.aarch64"
@@ -898,7 +898,7 @@
       "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc4.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc5.fc36.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.aarch64"
@@ -919,10 +919,10 @@
       "evra": "6.9.8-1.fc36.aarch64"
     },
     "openldap": {
-      "evra": "2.6.1-2.fc36.aarch64"
+      "evra": "2.6.2-1.fc36.aarch64"
     },
     "openldap-compat": {
-      "evra": "2.6.1-2.fc36.aarch64"
+      "evra": "2.6.2-1.fc36.aarch64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-31T20:52:58Z",
+    "generated": "2022-06-02T00:34:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-30T22:15:26Z"
+        "generated": "2022-05-31T22:16:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-31T15:40:24Z"
+        "generated": "2022-06-01T00:55:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2b0a50b4b8..1f5ca4c1b5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.28-1.fc36.x86_64"
+      "evra": "32:9.16.29-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.28-1.fc36.noarch"
+      "evra": "32:9.16.29-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.28-1.fc36.x86_64"
+      "evra": "32:9.16.29-1.fc36.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.x86_64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.7.7-1.fc36.x86_64"
+      "evra": "1.8.1-1.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -379,7 +379,7 @@
       "evra": "2.3.6-1.fc36.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.4-1.fc36.x86_64"
+      "evra": "3.7.6-1.fc36.x86_64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.x86_64"
@@ -667,7 +667,7 @@
       "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc4.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc5.fc36.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.x86_64"
@@ -841,7 +841,7 @@
       "evra": "0.9.29-3.fc36.x86_64"
     },
     "logrotate": {
-      "evra": "3.20.1-1.fc36.x86_64"
+      "evra": "3.20.1-2.fc36.x86_64"
     },
     "lsof": {
       "evra": "4.94.0-3.fc36.x86_64"
@@ -874,7 +874,7 @@
       "evra": "20.10.16-1.fc36.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-1.fc36.x86_64"
+      "evra": "2:0.6.0-3.fc36.x86_64"
     },
     "mozjs91": {
       "evra": "91.9.0-1.fc36.x86_64"
@@ -910,7 +910,7 @@
       "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc4.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc5.fc36.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.x86_64"
@@ -931,10 +931,10 @@
       "evra": "6.9.8-1.fc36.x86_64"
     },
     "openldap": {
-      "evra": "2.6.1-2.fc36.x86_64"
+      "evra": "2.6.2-1.fc36.x86_64"
     },
     "openldap-compat": {
-      "evra": "2.6.1-2.fc36.x86_64"
+      "evra": "2.6.2-1.fc36.x86_64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-05-31T20:52:22Z",
+    "generated": "2022-06-02T00:33:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-30T22:15:45Z"
+        "generated": "2022-05-31T22:17:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-05-31T15:40:39Z"
+        "generated": "2022-06-01T00:55:42Z"
       }
     }
   }

From 56548e1416f3aafd90cdabd7763ea9e3cec60dc3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 1 Jun 2022 22:07:27 -0400
Subject: [PATCH 1001/2157] denylist: deny ext.config.ignition.resource.remote
 on s390x

We're seeing a weird failure there. Let's denylist it for now while
it is investigated.

See https://github.com/coreos/fedora-coreos-tracker/issues/1215
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d4b27bb6d8..7964459e81 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -33,3 +33,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
   - s390x
+- pattern: ext.config.ignition.resource.remote
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  arches:
+  - s390x

From 33ec2eb3e564b498290833ce0608bcbd19c82b0f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 2 Jun 2022 11:01:09 -0400
Subject: [PATCH 1002/2157] coreos-teardown-initramfs: handle new .txt file in
 ifcfg dir

Upstream NM started adding a readme-ifcfg-rh.txt file to explain
and encourage people to use keyfiles instead. This file doesn't
do anything, but breaks our logic that tries to determine if the
user provided networking config to the machine.

This file was added upstream in
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/96d7362
---
 .../35coreos-ignition/coreos-teardown-initramfs.sh          | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 9fd1720dc1..855f15efb6 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -94,9 +94,11 @@ are_default_NM_configs() {
 propagate_initramfs_networking() {
     # Check for any real root config in the two locations where a user could have
     # provided network configuration. On FCOS we only support keyfiles, but on RHCOS
-    # we support keyfiles and ifcfg
+    # we support keyfiles and ifcfg. We also need to ignore readme-ifcfg-rh.txt
+    # which is a cosmetic file added in
+    # https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/96d7362
     if [ -n "$(ls -A /sysroot/etc/NetworkManager/system-connections/)" -o \
-         -n "$(ls -A /sysroot/etc/sysconfig/network-scripts/)" ]; then
+         -n "$(ls -A -I readme-ifcfg-rh.txt /sysroot/etc/sysconfig/network-scripts/)" ]; then
         echo "info: networking config is defined in the real root"
         realrootconfig=1
     else

From 835fde8ed2cc52c522a49c8d2488a409c2a3ad5e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 2 Jun 2022 12:30:19 -0400
Subject: [PATCH 1003/2157] tests: verify no unknown files in
 /etc/sysconfig/network-scripts/

Add a check to the no-default-initramfs-net-propagation test to make
sure there aren't any unknown files in /etc/sysconfig/network-scripts/.
This will allow us to drop the a corresponding test from mantle/kola [1].

[1] https://github.com/coreos/coreos-assembler/blob/5ee768b7ea069c08a7fa0b5b36dbb03bc9cd19ee/mantle/kola/tests/coretest/core.go#L251-L264
---
 .../data/test-net-propagation.sh                           | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh b/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
index 8cf263ee4a..5370905969 100644
--- a/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/data/test-net-propagation.sh
@@ -10,3 +10,10 @@ if [ -n "$(ls -A /etc/NetworkManager/system-connections/)" ]; then
     fail=1
 fi
 
+# Also check /etc/sysconfig/network-scripts/ because ifcfg files are
+# supported downstream. Need to ignore readme-ifcfg-rh.txt here because of
+# https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/96d7362
+if [ -n "$(ls -A -I readme-ifcfg-rh.txt /etc/sysconfig/network-scripts/)" ]; then
+    echo "configs exist in /etc/sysconfig/network-scripts/, but shouldn't" >&2
+    fail=1
+fi

From 7615672ca1da1c6b2efd67de586587c35941de5f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 2 Jun 2022 16:09:02 -0400
Subject: [PATCH 1004/2157] 05core: print warnings to secondary consoles

This allows us to print the helpful messages that we have added
for our users before they enter dracut's emergency shell to all
configured consoles on the machine.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/954
---
 .../99emergency-shell-setup/emergency-shell.sh       | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
index a0884a7583..8a810a20d6 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
@@ -64,13 +64,15 @@ EOF
             echo "Displaying logs from failed units: ${failed}"
             for unit in ${failed}; do
                 # 10 lines should be enough for everyone
-                journalctl -b --no-pager --no-hostname -u ${unit} -n 10
+                SYSTEMD_COLORS=true journalctl -b --no-pager --no-hostname -u ${unit} -n 10
             done
         fi
     fi
 }
 
-# If we're invoked from a dracut breakpoint rather than
-# dracut-emergency.service, we won't have a controlling terminal and stdio
-# won't be connected to it. Explicitly read/write /dev/console.
-_display_relevant_errors < /dev/console > /dev/console
+# Print warnings/informational messages to all configured consoles on the
+# machine. Code inspired by https://github.com/dracutdevs/dracut/commit/32f68c1
+MESSAGE="$(_display_relevant_errors)"
+while read -r _tty rest; do
+    echo -e "$MESSAGE" > /dev/"$_tty"
+done < /proc/consoles

From 662aac5688fc2b718ae5a523ff2f1e14b07a44e1 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Wed, 11 May 2022 14:03:40 +0200
Subject: [PATCH 1005/2157] udev: don't create 'coreos-boot-disk' symlink on
 subsequent boots

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator     | 5 +++++
 .../modules.d/35coreos-ignition/coreos-teardown-initramfs.sh | 3 ++-
 .../lib/dracut/modules.d/35coreos-ignition/module-setup.sh   | 4 +++-
 3 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 8c41621331..a4fc4d22ac 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -57,4 +57,9 @@ After=dev-disk-by\x2dlabel-boot.device
 Requires=coreos-gpt-setup.service
 After=coreos-gpt-setup.service
 EOF
+
+    # create symlink for udev rule
+    mkdir -p /run/udev/rules.d/
+    ln -s /usr/lib/coreos/80-coreos-boot-disk.rules \
+          /run/udev/rules.d/80-coreos-boot-disk.rules
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 855f15efb6..bfc9320059 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -233,7 +233,8 @@ main() {
     # real root is passed on to NetworkManager in the real root
     rm -rf /run/NetworkManager/
 
-    rm -rf /dev/disk/by-id/coreos-boot-disk
+    rm -f /run/udev/rules.d/80-coreos-boot-disk.rules
+    rm -f /dev/disk/by-id/coreos-boot-disk
 }
 
 main
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 74490c2e71..d71093186c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -31,8 +31,10 @@ install() {
     inst_script "$moddir/coreos-gpt-setup.sh" \
         "/usr/sbin/coreos-gpt-setup"
 
+    # This has to work only on diskful systems during firstboot.
+    # coreos-diskful-generator will create a symlink
     inst_simple "$moddir/80-coreos-boot-disk.rules" \
-        "/usr/lib/udev/rules.d/80-coreos-boot-disk.rules"
+        "/usr/lib/coreos/80-coreos-boot-disk.rules"
 
     inst_script "$moddir/coreos-disk-contains-fs.sh" \
         "/usr/lib/udev/coreos-disk-contains-fs"

From 44e59adce5c97e2e7b220e7c049d9c9ca0c463d2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 Jun 2022 22:14:00 +0000
Subject: [PATCH 1006/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/253/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 2 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1afffbb56f..a6ded3832f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-4.fc36.noarch"
+      "evra": "2:2.187.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.4-1.fc36.aarch64"
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-10.fc36.aarch64"
+      "evra": "2.35-11.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-10.fc36.aarch64"
+      "evra": "2.35-11.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-10.fc36.aarch64"
+      "evra": "2.35-11.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -523,7 +523,7 @@
       "evra": "0.1.1-50.fc36.aarch64"
     },
     "libblkid": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "libbpf": {
       "evra": "2:0.7.0-3.fc36.aarch64"
@@ -538,7 +538,7 @@
       "evra": "2.48-4.fc36.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-9.fc36.aarch64"
+      "evra": "0.8.3-1.fc36.aarch64"
     },
     "libcbor": {
       "evra": "0.7.0-5.fc36.aarch64"
@@ -571,7 +571,7 @@
       "evra": "2.1.12-6.fc36.aarch64"
     },
     "libfdisk": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "libffi": {
       "evra": "3.4.2-8.fc36.aarch64"
@@ -586,7 +586,7 @@
       "evra": "12.1.1-1.fc36.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-2.fc36.aarch64"
+      "evra": "1.10.1-3.fc36.aarch64"
     },
     "libgomp": {
       "evra": "12.1.1-1.fc36.aarch64"
@@ -646,7 +646,7 @@
       "evra": "2.14.0-2.fc36.aarch64"
     },
     "libmount": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "libndp": {
       "evra": "1.8-3.fc36.aarch64"
@@ -727,7 +727,7 @@
       "evra": "4.6.1-3.fc36.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
       "evra": "2:4.16.1-4.fc36.aarch64"
@@ -793,7 +793,7 @@
       "evra": "1.2.1-6.fc36.aarch64"
     },
     "libuuid": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "libuv": {
       "evra": "1:1.44.1-1.fc36.aarch64"
@@ -934,10 +934,10 @@
       "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.2-5.fc36.aarch64"
+      "evra": "1:3.0.3-1.fc36.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.2-5.fc36.aarch64"
+      "evra": "1:3.0.3-1.fc36.aarch64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.aarch64"
@@ -1057,10 +1057,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.9-1.fc36.noarch"
+      "evra": "36.10-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.9-1.fc36.noarch"
+      "evra": "36.10-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.10-1.fc36.noarch"
@@ -1183,16 +1183,16 @@
       "evra": "0.13.0-4.fc36.aarch64"
     },
     "util-linux": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.38-0.2.fc36.aarch64"
+      "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.4975-1.fc36.noarch"
+      "evra": "2:8.2.5046-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4975-1.fc36.aarch64"
+      "evra": "2:8.2.5046-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-02T00:34:08Z",
+    "generated": "2022-06-03T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-31T22:16:08Z"
+        "generated": "2022-06-02T01:57:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-01T00:55:27Z"
+        "generated": "2022-06-03T02:54:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1f5ca4c1b5..58f0133938 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.183.0-4.fc36.noarch"
+      "evra": "2:2.187.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.4-1.fc36.x86_64"
@@ -364,13 +364,13 @@
       "evra": "2.72.1-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-10.fc36.x86_64"
+      "evra": "2.35-11.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-10.fc36.x86_64"
+      "evra": "2.35-11.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-10.fc36.x86_64"
+      "evra": "2.35-11.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -529,7 +529,7 @@
       "evra": "0.1.1-50.fc36.x86_64"
     },
     "libblkid": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "libbpf": {
       "evra": "2:0.7.0-3.fc36.x86_64"
@@ -544,7 +544,7 @@
       "evra": "2.48-4.fc36.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.2-9.fc36.x86_64"
+      "evra": "0.8.3-1.fc36.x86_64"
     },
     "libcbor": {
       "evra": "0.7.0-5.fc36.x86_64"
@@ -577,7 +577,7 @@
       "evra": "2.1.12-6.fc36.x86_64"
     },
     "libfdisk": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "libffi": {
       "evra": "3.4.2-8.fc36.x86_64"
@@ -592,7 +592,7 @@
       "evra": "12.1.1-1.fc36.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-2.fc36.x86_64"
+      "evra": "1.10.1-3.fc36.x86_64"
     },
     "libgomp": {
       "evra": "12.1.1-1.fc36.x86_64"
@@ -652,7 +652,7 @@
       "evra": "2.14.0-2.fc36.x86_64"
     },
     "libmount": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "libndp": {
       "evra": "1.8-3.fc36.x86_64"
@@ -733,7 +733,7 @@
       "evra": "4.6.1-3.fc36.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
       "evra": "2:4.16.1-4.fc36.x86_64"
@@ -802,7 +802,7 @@
       "evra": "1.2.1-6.fc36.x86_64"
     },
     "libuuid": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "libuv": {
       "evra": "1:1.44.1-1.fc36.x86_64"
@@ -946,10 +946,10 @@
       "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.2-5.fc36.x86_64"
+      "evra": "1:3.0.3-1.fc36.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.2-5.fc36.x86_64"
+      "evra": "1:3.0.3-1.fc36.x86_64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.x86_64"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.9-1.fc36.noarch"
+      "evra": "36.10-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.9-1.fc36.noarch"
+      "evra": "36.10-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.13.10-1.fc36.noarch"
@@ -1195,16 +1195,16 @@
       "evra": "0.13.0-4.fc36.x86_64"
     },
     "util-linux": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.38-0.2.fc36.x86_64"
+      "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.4975-1.fc36.noarch"
+      "evra": "2:8.2.5046-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.4975-1.fc36.x86_64"
+      "evra": "2:8.2.5046-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-02T00:33:34Z",
+    "generated": "2022-06-03T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-05-31T22:17:03Z"
+        "generated": "2022-06-02T01:58:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-01T00:55:42Z"
+        "generated": "2022-06-03T02:54:24Z"
       }
     }
   }

From 28e8573bb741dd5d68e0717c913999178b860f1a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 5 Jun 2022 22:12:07 +0000
Subject: [PATCH 1007/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/255/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a6ded3832f..28afead016 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,7 +361,7 @@
       "evra": "2.36.1-1.fc36.aarch64"
     },
     "glib2": {
-      "evra": "2.72.1-1.fc36.aarch64"
+      "evra": "2.72.2-1.fc36.aarch64"
     },
     "glibc": {
       "evra": "2.35-11.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.11-300.fc36.aarch64"
+      "evra": "5.17.12-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.11-300.fc36.aarch64"
+      "evra": "5.17.12-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.11-300.fc36.aarch64"
+      "evra": "5.17.12-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.5046-1.fc36.noarch"
+      "evra": "2:8.2.5052-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5046-1.fc36.aarch64"
+      "evra": "2:8.2.5052-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-03T20:53:06Z",
+    "generated": "2022-06-05T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-02T01:57:18Z"
+        "generated": "2022-06-03T22:17:34Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-03T02:54:05Z"
+        "generated": "2022-06-05T01:04:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 58f0133938..30029c2ba1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,7 +361,7 @@
       "evra": "2.36.1-1.fc36.x86_64"
     },
     "glib2": {
-      "evra": "2.72.1-1.fc36.x86_64"
+      "evra": "2.72.2-1.fc36.x86_64"
     },
     "glibc": {
       "evra": "2.35-11.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.11-300.fc36.x86_64"
+      "evra": "5.17.12-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.11-300.fc36.x86_64"
+      "evra": "5.17.12-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.11-300.fc36.x86_64"
+      "evra": "5.17.12-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -1201,10 +1201,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.5046-1.fc36.noarch"
+      "evra": "2:8.2.5052-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5046-1.fc36.x86_64"
+      "evra": "2:8.2.5052-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-03T20:52:24Z",
+    "generated": "2022-06-05T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-02T01:58:29Z"
+        "generated": "2022-06-03T22:18:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-03T02:54:24Z"
+        "generated": "2022-06-05T01:04:52Z"
       }
     }
   }

From f99e2b78224c3c4fbc64da9a03e27665d4487f09 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 6 Jun 2022 22:15:46 +0000
Subject: [PATCH 1008/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/256/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 28afead016..da94c15198 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1144,22 +1144,22 @@
       "evra": "1.9.8-5.p2.fc36.aarch64"
     },
     "systemd": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "systemd-container": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "systemd-libs": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "systemd-pam": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "systemd-resolved": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "systemd-udev": {
-      "evra": "250.6-1.fc36.aarch64"
+      "evra": "250.7-1.fc36.aarch64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-05T20:52:58Z",
+    "generated": "2022-06-06T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-03T22:17:34Z"
+        "generated": "2022-06-05T22:14:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-05T01:04:36Z"
+        "generated": "2022-06-06T02:03:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 30029c2ba1..1605ded5d7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1156,22 +1156,22 @@
       "evra": "1.9.8-5.p2.fc36.x86_64"
     },
     "systemd": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "systemd-container": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "systemd-libs": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "systemd-pam": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "systemd-resolved": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "systemd-udev": {
-      "evra": "250.6-1.fc36.x86_64"
+      "evra": "250.7-1.fc36.x86_64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.x86_64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-05T20:52:24Z",
+    "generated": "2022-06-06T20:52:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-03T22:18:33Z"
+        "generated": "2022-06-05T22:15:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-05T01:04:52Z"
+        "generated": "2022-06-06T02:03:36Z"
       }
     }
   }

From d7da7ae4685f7d8db849c0043203f2bf54c6e0b5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Jun 2022 18:12:09 +0000
Subject: [PATCH 1009/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/258/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json |    6 +-
 manifest-lock.s390x.json   | 1173 ++++++++++++++++++++++++++++++++++++
 manifest-lock.x86_64.json  |    6 +-
 3 files changed, 1179 insertions(+), 6 deletions(-)
 create mode 100644 manifest-lock.s390x.json

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index da94c15198..b8e3e33c05 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-06T20:52:56Z",
+    "generated": "2022-06-07T16:54:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-05T22:14:22Z"
+        "generated": "2022-06-06T22:18:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-06T02:03:20Z"
+        "generated": "2022-06-07T02:15:30Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
new file mode 100644
index 0000000000..7b52097f23
--- /dev/null
+++ b/manifest-lock.s390x.json
@@ -0,0 +1,1173 @@
+{
+  "packages": {
+    "NetworkManager": {
+      "evra": "1:1.38.0-1.fc36.s390x"
+    },
+    "NetworkManager-cloud-setup": {
+      "evra": "1:1.38.0-1.fc36.s390x"
+    },
+    "NetworkManager-libnm": {
+      "evra": "1:1.38.0-1.fc36.s390x"
+    },
+    "NetworkManager-team": {
+      "evra": "1:1.38.0-1.fc36.s390x"
+    },
+    "NetworkManager-tui": {
+      "evra": "1:1.38.0-1.fc36.s390x"
+    },
+    "WALinuxAgent-udev": {
+      "evra": "2.5.0.2-2.fc36.noarch"
+    },
+    "aardvark-dns": {
+      "evra": "1.0.3-1.fc36.s390x"
+    },
+    "acl": {
+      "evra": "2.3.1-3.fc36.s390x"
+    },
+    "adcli": {
+      "evra": "0.9.1-10.fc36.s390x"
+    },
+    "afterburn": {
+      "evra": "5.3.0-1.fc36.s390x"
+    },
+    "afterburn-dracut": {
+      "evra": "5.3.0-1.fc36.s390x"
+    },
+    "alternatives": {
+      "evra": "1.19-2.fc36.s390x"
+    },
+    "attr": {
+      "evra": "2.5.1-4.fc36.s390x"
+    },
+    "audit-libs": {
+      "evra": "3.0.8-1.fc36.s390x"
+    },
+    "authselect": {
+      "evra": "1.4.0-1.fc36.s390x"
+    },
+    "authselect-libs": {
+      "evra": "1.4.0-1.fc36.s390x"
+    },
+    "avahi-libs": {
+      "evra": "0.8-15.fc36.s390x"
+    },
+    "basesystem": {
+      "evra": "11-13.fc36.noarch"
+    },
+    "bash": {
+      "evra": "5.1.16-2.fc36.s390x"
+    },
+    "bash-completion": {
+      "evra": "1:2.11-6.fc36.noarch"
+    },
+    "bind-libs": {
+      "evra": "32:9.16.29-1.fc36.s390x"
+    },
+    "bind-license": {
+      "evra": "32:9.16.29-1.fc36.noarch"
+    },
+    "bind-utils": {
+      "evra": "32:9.16.29-1.fc36.s390x"
+    },
+    "bsdtar": {
+      "evra": "3.5.3-2.fc36.s390x"
+    },
+    "btrfs-progs": {
+      "evra": "5.18-1.fc36.s390x"
+    },
+    "bubblewrap": {
+      "evra": "0.5.0-2.fc36.s390x"
+    },
+    "bzip2": {
+      "evra": "1.0.8-11.fc36.s390x"
+    },
+    "bzip2-libs": {
+      "evra": "1.0.8-11.fc36.s390x"
+    },
+    "c-ares": {
+      "evra": "1.17.2-2.fc36.s390x"
+    },
+    "ca-certificates": {
+      "evra": "2021.2.52-3.fc36.noarch"
+    },
+    "catatonit": {
+      "evra": "0.1.7-5.fc36.s390x"
+    },
+    "chrony": {
+      "evra": "4.2-5.fc36.s390x"
+    },
+    "cifs-utils": {
+      "evra": "6.15-1.fc36.s390x"
+    },
+    "clevis": {
+      "evra": "18-6.fc36.s390x"
+    },
+    "clevis-dracut": {
+      "evra": "18-6.fc36.s390x"
+    },
+    "clevis-luks": {
+      "evra": "18-6.fc36.s390x"
+    },
+    "clevis-systemd": {
+      "evra": "18-6.fc36.s390x"
+    },
+    "cloud-utils-growpart": {
+      "evra": "0.31-10.fc36.noarch"
+    },
+    "conmon": {
+      "evra": "2:2.1.0-2.fc36.s390x"
+    },
+    "console-login-helper-messages": {
+      "evra": "0.21.2-4.fc36.noarch"
+    },
+    "console-login-helper-messages-issuegen": {
+      "evra": "0.21.2-4.fc36.noarch"
+    },
+    "console-login-helper-messages-motdgen": {
+      "evra": "0.21.2-4.fc36.noarch"
+    },
+    "console-login-helper-messages-profile": {
+      "evra": "0.21.2-4.fc36.noarch"
+    },
+    "container-selinux": {
+      "evra": "2:2.187.0-1.fc36.noarch"
+    },
+    "containerd": {
+      "evra": "1.6.4-1.fc36.s390x"
+    },
+    "containernetworking-plugins": {
+      "evra": "1.1.0-1.fc36.s390x"
+    },
+    "containers-common": {
+      "evra": "4:1-56.fc36.noarch"
+    },
+    "coreos-installer": {
+      "evra": "0.14.0-1.fc36.s390x"
+    },
+    "coreos-installer-bootinfra": {
+      "evra": "0.14.0-1.fc36.s390x"
+    },
+    "coreutils": {
+      "evra": "9.0-5.fc36.s390x"
+    },
+    "coreutils-common": {
+      "evra": "9.0-5.fc36.s390x"
+    },
+    "cpio": {
+      "evra": "2.13-12.fc36.s390x"
+    },
+    "cracklib": {
+      "evra": "2.9.6-28.fc36.s390x"
+    },
+    "cracklib-dicts": {
+      "evra": "2.9.6-28.fc36.s390x"
+    },
+    "criu": {
+      "evra": "3.17-2.fc36.s390x"
+    },
+    "criu-libs": {
+      "evra": "3.17-2.fc36.s390x"
+    },
+    "crun": {
+      "evra": "1.4.5-1.fc36.s390x"
+    },
+    "crypto-policies": {
+      "evra": "20220203-2.git112f859.fc36.noarch"
+    },
+    "cryptsetup": {
+      "evra": "2.4.3-2.fc36.s390x"
+    },
+    "cryptsetup-libs": {
+      "evra": "2.4.3-2.fc36.s390x"
+    },
+    "curl": {
+      "evra": "7.82.0-5.fc36.s390x"
+    },
+    "cyrus-sasl-gssapi": {
+      "evra": "2.1.27-18.fc36.s390x"
+    },
+    "cyrus-sasl-lib": {
+      "evra": "2.1.27-18.fc36.s390x"
+    },
+    "dbus": {
+      "evra": "1:1.14.0-1.fc36.s390x"
+    },
+    "dbus-broker": {
+      "evra": "31-1.fc36.s390x"
+    },
+    "dbus-common": {
+      "evra": "1:1.14.0-1.fc36.noarch"
+    },
+    "dbus-libs": {
+      "evra": "1:1.14.0-1.fc36.s390x"
+    },
+    "device-mapper": {
+      "evra": "1.02.175-7.fc36.s390x"
+    },
+    "device-mapper-event": {
+      "evra": "1.02.175-7.fc36.s390x"
+    },
+    "device-mapper-event-libs": {
+      "evra": "1.02.175-7.fc36.s390x"
+    },
+    "device-mapper-libs": {
+      "evra": "1.02.175-7.fc36.s390x"
+    },
+    "device-mapper-multipath": {
+      "evra": "0.8.7-8.fc36.s390x"
+    },
+    "device-mapper-multipath-libs": {
+      "evra": "0.8.7-8.fc36.s390x"
+    },
+    "device-mapper-persistent-data": {
+      "evra": "0.9.0-7.fc36.s390x"
+    },
+    "diffutils": {
+      "evra": "3.8-2.fc36.s390x"
+    },
+    "dnsmasq": {
+      "evra": "2.86-6.fc36.s390x"
+    },
+    "dosfstools": {
+      "evra": "4.2-3.fc36.s390x"
+    },
+    "dracut": {
+      "evra": "056-1.fc36.s390x"
+    },
+    "dracut-network": {
+      "evra": "056-1.fc36.s390x"
+    },
+    "dracut-squash": {
+      "evra": "056-1.fc36.s390x"
+    },
+    "e2fsprogs": {
+      "evra": "1.46.5-2.fc36.s390x"
+    },
+    "e2fsprogs-libs": {
+      "evra": "1.46.5-2.fc36.s390x"
+    },
+    "elfutils-default-yama-scope": {
+      "evra": "0.187-4.fc36.noarch"
+    },
+    "elfutils-libelf": {
+      "evra": "0.187-4.fc36.s390x"
+    },
+    "elfutils-libs": {
+      "evra": "0.187-4.fc36.s390x"
+    },
+    "ethtool": {
+      "evra": "2:5.17-1.fc36.s390x"
+    },
+    "expat": {
+      "evra": "2.4.7-1.fc36.s390x"
+    },
+    "fedora-coreos-pinger": {
+      "evra": "0.0.4-13.fc36.s390x"
+    },
+    "fedora-gpg-keys": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-release-common": {
+      "evra": "36-17.noarch"
+    },
+    "fedora-release-coreos": {
+      "evra": "36-17.noarch"
+    },
+    "fedora-release-identity-coreos": {
+      "evra": "36-17.noarch"
+    },
+    "fedora-repos": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-archive": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-modular": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-ostree": {
+      "evra": "36-1.noarch"
+    },
+    "file-libs": {
+      "evra": "5.41-4.fc36.s390x"
+    },
+    "filesystem": {
+      "evra": "3.16-2.fc36.s390x"
+    },
+    "findutils": {
+      "evra": "1:4.9.0-1.fc36.s390x"
+    },
+    "flatpak-session-helper": {
+      "evra": "1.12.7-2.fc36.s390x"
+    },
+    "fstrm": {
+      "evra": "0.6.1-4.fc36.s390x"
+    },
+    "fuse": {
+      "evra": "2.9.9-14.fc36.s390x"
+    },
+    "fuse-common": {
+      "evra": "3.10.5-2.fc36.s390x"
+    },
+    "fuse-libs": {
+      "evra": "2.9.9-14.fc36.s390x"
+    },
+    "fuse-overlayfs": {
+      "evra": "1.8.1-3.fc36.s390x"
+    },
+    "fuse-sshfs": {
+      "evra": "3.7.2-3.fc36.s390x"
+    },
+    "fuse3": {
+      "evra": "3.10.5-2.fc36.s390x"
+    },
+    "fuse3-libs": {
+      "evra": "3.10.5-2.fc36.s390x"
+    },
+    "gawk": {
+      "evra": "5.1.1-2.fc36.s390x"
+    },
+    "gdbm-libs": {
+      "evra": "1:1.22-2.fc36.s390x"
+    },
+    "gdisk": {
+      "evra": "1.0.9-2.fc36.s390x"
+    },
+    "git-core": {
+      "evra": "2.36.1-1.fc36.s390x"
+    },
+    "glib2": {
+      "evra": "2.72.2-1.fc36.s390x"
+    },
+    "glibc": {
+      "evra": "2.35-11.fc36.s390x"
+    },
+    "glibc-common": {
+      "evra": "2.35-11.fc36.s390x"
+    },
+    "glibc-minimal-langpack": {
+      "evra": "2.35-11.fc36.s390x"
+    },
+    "gmp": {
+      "evra": "1:6.2.1-2.fc36.s390x"
+    },
+    "gnupg2": {
+      "evra": "2.3.6-1.fc36.s390x"
+    },
+    "gnutls": {
+      "evra": "3.7.6-1.fc36.s390x"
+    },
+    "gpgme": {
+      "evra": "1.15.1-6.fc36.s390x"
+    },
+    "grep": {
+      "evra": "3.7-2.fc36.s390x"
+    },
+    "gzip": {
+      "evra": "1.11-3.fc36.s390x"
+    },
+    "hostname": {
+      "evra": "3.23-6.fc36.s390x"
+    },
+    "ignition": {
+      "evra": "2.14.0-1.fc36.s390x"
+    },
+    "inih": {
+      "evra": "55-1.fc36.s390x"
+    },
+    "iproute": {
+      "evra": "5.15.0-2.fc36.s390x"
+    },
+    "iproute-tc": {
+      "evra": "5.15.0-2.fc36.s390x"
+    },
+    "iptables-legacy": {
+      "evra": "1.8.7-15.fc36.s390x"
+    },
+    "iptables-legacy-libs": {
+      "evra": "1.8.7-15.fc36.s390x"
+    },
+    "iptables-libs": {
+      "evra": "1.8.7-15.fc36.s390x"
+    },
+    "iptables-nft": {
+      "evra": "1.8.7-15.fc36.s390x"
+    },
+    "iptables-services": {
+      "evra": "1.8.7-15.fc36.noarch"
+    },
+    "iputils": {
+      "evra": "20211215-2.fc36.s390x"
+    },
+    "iscsi-initiator-utils": {
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.s390x"
+    },
+    "iscsi-initiator-utils-iscsiuio": {
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.s390x"
+    },
+    "isns-utils-libs": {
+      "evra": "0.101-4.fc36.s390x"
+    },
+    "jansson": {
+      "evra": "2.13.1-4.fc36.s390x"
+    },
+    "jose": {
+      "evra": "11-5.fc36.s390x"
+    },
+    "jq": {
+      "evra": "1.6-13.fc36.s390x"
+    },
+    "json-c": {
+      "evra": "0.15-3.fc36.s390x"
+    },
+    "json-glib": {
+      "evra": "1.6.6-2.fc36.s390x"
+    },
+    "kbd": {
+      "evra": "2.4.0-9.fc36.s390x"
+    },
+    "kbd-misc": {
+      "evra": "2.4.0-9.fc36.noarch"
+    },
+    "kernel": {
+      "evra": "5.17.12-300.fc36.s390x"
+    },
+    "kernel-core": {
+      "evra": "5.17.12-300.fc36.s390x"
+    },
+    "kernel-modules": {
+      "evra": "5.17.12-300.fc36.s390x"
+    },
+    "kexec-tools": {
+      "evra": "2.0.23-6.fc36.s390x"
+    },
+    "keyutils": {
+      "evra": "1.6.1-4.fc36.s390x"
+    },
+    "keyutils-libs": {
+      "evra": "1.6.1-4.fc36.s390x"
+    },
+    "kmod": {
+      "evra": "29-7.fc36.s390x"
+    },
+    "kmod-libs": {
+      "evra": "29-7.fc36.s390x"
+    },
+    "kpartx": {
+      "evra": "0.8.7-8.fc36.s390x"
+    },
+    "krb5-libs": {
+      "evra": "1.19.2-9.fc36.s390x"
+    },
+    "less": {
+      "evra": "590-3.fc36.s390x"
+    },
+    "libacl": {
+      "evra": "2.3.1-3.fc36.s390x"
+    },
+    "libaio": {
+      "evra": "0.3.111-13.fc36.s390x"
+    },
+    "libarchive": {
+      "evra": "3.5.3-2.fc36.s390x"
+    },
+    "libargon2": {
+      "evra": "20171227-9.fc36.s390x"
+    },
+    "libassuan": {
+      "evra": "2.5.5-4.fc36.s390x"
+    },
+    "libattr": {
+      "evra": "2.5.1-4.fc36.s390x"
+    },
+    "libbasicobjects": {
+      "evra": "0.1.1-50.fc36.s390x"
+    },
+    "libblkid": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "libbpf": {
+      "evra": "2:0.7.0-3.fc36.s390x"
+    },
+    "libbrotli": {
+      "evra": "1.0.9-7.fc36.s390x"
+    },
+    "libbsd": {
+      "evra": "0.10.0-9.fc36.s390x"
+    },
+    "libcap": {
+      "evra": "2.48-4.fc36.s390x"
+    },
+    "libcap-ng": {
+      "evra": "0.8.3-1.fc36.s390x"
+    },
+    "libcbor": {
+      "evra": "0.7.0-5.fc36.s390x"
+    },
+    "libcollection": {
+      "evra": "0.7.0-50.fc36.s390x"
+    },
+    "libcom_err": {
+      "evra": "1.46.5-2.fc36.s390x"
+    },
+    "libcurl": {
+      "evra": "7.82.0-5.fc36.s390x"
+    },
+    "libdaemon": {
+      "evra": "0.14-23.fc36.s390x"
+    },
+    "libdb": {
+      "evra": "5.3.28-51.fc36.s390x"
+    },
+    "libdhash": {
+      "evra": "0.5.0-50.fc36.s390x"
+    },
+    "libeconf": {
+      "evra": "0.4.0-3.fc36.s390x"
+    },
+    "libedit": {
+      "evra": "3.1-41.20210910cvs.fc36.s390x"
+    },
+    "libevent": {
+      "evra": "2.1.12-6.fc36.s390x"
+    },
+    "libfdisk": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "libffi": {
+      "evra": "3.4.2-8.fc36.s390x"
+    },
+    "libfido2": {
+      "evra": "1.10.0-3.fc36.s390x"
+    },
+    "libgcc": {
+      "evra": "12.1.1-1.fc36.s390x"
+    },
+    "libgcrypt": {
+      "evra": "1.10.1-3.fc36.s390x"
+    },
+    "libgpg-error": {
+      "evra": "1.45-1.fc36.s390x"
+    },
+    "libibverbs": {
+      "evra": "39.0-1.fc36.s390x"
+    },
+    "libicu": {
+      "evra": "69.1-6.fc36.s390x"
+    },
+    "libidn2": {
+      "evra": "2.3.2-4.fc36.s390x"
+    },
+    "libini_config": {
+      "evra": "1.3.1-50.fc36.s390x"
+    },
+    "libipa_hbac": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "libjose": {
+      "evra": "11-5.fc36.s390x"
+    },
+    "libkcapi": {
+      "evra": "1.3.1-4.fc36.s390x"
+    },
+    "libkcapi-hmaccalc": {
+      "evra": "1.3.1-4.fc36.s390x"
+    },
+    "libksba": {
+      "evra": "1.6.0-3.fc36.s390x"
+    },
+    "libldb": {
+      "evra": "2.5.0-1.fc36.s390x"
+    },
+    "libluksmeta": {
+      "evra": "9-13.fc36.s390x"
+    },
+    "libmaxminddb": {
+      "evra": "1.6.0-2.fc36.s390x"
+    },
+    "libmnl": {
+      "evra": "1.0.4-15.fc36.s390x"
+    },
+    "libmodulemd": {
+      "evra": "2.14.0-2.fc36.s390x"
+    },
+    "libmount": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "libndp": {
+      "evra": "1.8-3.fc36.s390x"
+    },
+    "libnet": {
+      "evra": "1.2-5.fc36.s390x"
+    },
+    "libnetfilter_conntrack": {
+      "evra": "1.0.8-4.fc36.s390x"
+    },
+    "libnfnetlink": {
+      "evra": "1.0.1-21.fc36.s390x"
+    },
+    "libnfsidmap": {
+      "evra": "1:2.6.1-2.rc5.fc36.s390x"
+    },
+    "libnftnl": {
+      "evra": "1.2.1-2.fc36.s390x"
+    },
+    "libnghttp2": {
+      "evra": "1.46.0-2.fc36.s390x"
+    },
+    "libnl3": {
+      "evra": "3.6.0-3.fc36.s390x"
+    },
+    "libnl3-cli": {
+      "evra": "3.6.0-3.fc36.s390x"
+    },
+    "libnsl2": {
+      "evra": "2.0.0-3.fc36.s390x"
+    },
+    "libnvme": {
+      "evra": "1.0-1.fc36.s390x"
+    },
+    "libpath_utils": {
+      "evra": "0.2.1-50.fc36.s390x"
+    },
+    "libpcap": {
+      "evra": "14:1.10.1-3.fc36.s390x"
+    },
+    "libpkgconf": {
+      "evra": "1.8.0-2.fc36.s390x"
+    },
+    "libpsl": {
+      "evra": "0.21.1-5.fc36.s390x"
+    },
+    "libpwquality": {
+      "evra": "1.4.4-7.fc36.s390x"
+    },
+    "libref_array": {
+      "evra": "0.1.5-50.fc36.s390x"
+    },
+    "librepo": {
+      "evra": "1.14.3-1.fc36.s390x"
+    },
+    "libreport-filesystem": {
+      "evra": "2.17.1-1.fc36.noarch"
+    },
+    "libseccomp": {
+      "evra": "2.5.3-2.fc36.s390x"
+    },
+    "libselinux": {
+      "evra": "3.3-4.fc36.s390x"
+    },
+    "libselinux-utils": {
+      "evra": "3.3-4.fc36.s390x"
+    },
+    "libsemanage": {
+      "evra": "3.3-3.fc36.s390x"
+    },
+    "libsepol": {
+      "evra": "3.3-3.fc36.s390x"
+    },
+    "libsigsegv": {
+      "evra": "2.14-2.fc36.s390x"
+    },
+    "libslirp": {
+      "evra": "4.6.1-3.fc36.s390x"
+    },
+    "libsmartcols": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "libsmbclient": {
+      "evra": "2:4.16.1-4.fc36.s390x"
+    },
+    "libsolv": {
+      "evra": "0.7.22-1.fc36.s390x"
+    },
+    "libss": {
+      "evra": "1.46.5-2.fc36.s390x"
+    },
+    "libssh": {
+      "evra": "0.9.6-4.fc36.s390x"
+    },
+    "libssh-config": {
+      "evra": "0.9.6-4.fc36.noarch"
+    },
+    "libsss_certmap": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "libsss_idmap": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "libsss_nss_idmap": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "libsss_sudo": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "libstdc++": {
+      "evra": "12.1.1-1.fc36.s390x"
+    },
+    "libtalloc": {
+      "evra": "2.3.3-3.fc36.s390x"
+    },
+    "libtasn1": {
+      "evra": "4.18.0-2.fc36.s390x"
+    },
+    "libtdb": {
+      "evra": "1.4.6-1.fc36.s390x"
+    },
+    "libteam": {
+      "evra": "1.31-5.fc36.s390x"
+    },
+    "libtevent": {
+      "evra": "0.12.0-0.fc36.s390x"
+    },
+    "libtirpc": {
+      "evra": "1.3.2-1.rc1.fc36.1.s390x"
+    },
+    "libtool-ltdl": {
+      "evra": "2.4.6-50.fc36.s390x"
+    },
+    "libunistring": {
+      "evra": "1.0-1.fc36.s390x"
+    },
+    "libuser": {
+      "evra": "0.63-10.fc36.s390x"
+    },
+    "libutempter": {
+      "evra": "1.2.1-6.fc36.s390x"
+    },
+    "libuuid": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "libuv": {
+      "evra": "1:1.44.1-1.fc36.s390x"
+    },
+    "libverto": {
+      "evra": "0.3.2-3.fc36.s390x"
+    },
+    "libwbclient": {
+      "evra": "2:4.16.1-4.fc36.s390x"
+    },
+    "libxcrypt": {
+      "evra": "4.4.28-1.fc36.s390x"
+    },
+    "libxml2": {
+      "evra": "2.9.14-1.fc36.s390x"
+    },
+    "libyaml": {
+      "evra": "0.2.5-7.fc36.s390x"
+    },
+    "libzstd": {
+      "evra": "1.5.2-2.fc36.s390x"
+    },
+    "linux-atm-libs": {
+      "evra": "2.5.1-31.fc36.s390x"
+    },
+    "linux-firmware": {
+      "evra": "20220509-132.fc36.noarch"
+    },
+    "linux-firmware-whence": {
+      "evra": "20220509-132.fc36.noarch"
+    },
+    "lmdb-libs": {
+      "evra": "0.9.29-3.fc36.s390x"
+    },
+    "logrotate": {
+      "evra": "3.20.1-2.fc36.s390x"
+    },
+    "lsof": {
+      "evra": "4.94.0-3.fc36.s390x"
+    },
+    "lua-libs": {
+      "evra": "5.4.4-1.fc36.s390x"
+    },
+    "luksmeta": {
+      "evra": "9-13.fc36.s390x"
+    },
+    "lvm2": {
+      "evra": "2.03.11-7.fc36.s390x"
+    },
+    "lvm2-libs": {
+      "evra": "2.03.11-7.fc36.s390x"
+    },
+    "lz4-libs": {
+      "evra": "1.9.3-4.fc36.s390x"
+    },
+    "lzo": {
+      "evra": "2.10-6.fc36.s390x"
+    },
+    "mdadm": {
+      "evra": "4.2-1.fc36.s390x"
+    },
+    "moby-engine": {
+      "evra": "20.10.16-1.fc36.s390x"
+    },
+    "mozjs91": {
+      "evra": "91.9.0-1.fc36.s390x"
+    },
+    "mpfr": {
+      "evra": "4.1.0-9.fc36.s390x"
+    },
+    "nano": {
+      "evra": "6.0-2.fc36.s390x"
+    },
+    "nano-default-editor": {
+      "evra": "6.0-2.fc36.noarch"
+    },
+    "ncurses": {
+      "evra": "6.2-9.20210508.fc36.s390x"
+    },
+    "ncurses-base": {
+      "evra": "6.2-9.20210508.fc36.noarch"
+    },
+    "ncurses-libs": {
+      "evra": "6.2-9.20210508.fc36.s390x"
+    },
+    "net-tools": {
+      "evra": "2.0-0.61.20160912git.fc36.s390x"
+    },
+    "netavark": {
+      "evra": "1.0.3-3.fc36.s390x"
+    },
+    "nettle": {
+      "evra": "3.7.3-3.fc36.s390x"
+    },
+    "newt": {
+      "evra": "0.52.21-12.fc36.s390x"
+    },
+    "nfs-utils-coreos": {
+      "evra": "1:2.6.1-2.rc5.fc36.s390x"
+    },
+    "nftables": {
+      "evra": "1:1.0.1-3.fc36.s390x"
+    },
+    "npth": {
+      "evra": "1.6-8.fc36.s390x"
+    },
+    "nss-altfiles": {
+      "evra": "2.18.1-20.fc36.s390x"
+    },
+    "nvme-cli": {
+      "evra": "2.0-1.fc36.s390x"
+    },
+    "oniguruma": {
+      "evra": "6.9.8-1.fc36.s390x"
+    },
+    "openldap": {
+      "evra": "2.6.2-1.fc36.s390x"
+    },
+    "openldap-compat": {
+      "evra": "2.6.2-1.fc36.s390x"
+    },
+    "openssh": {
+      "evra": "8.8p1-1.fc36.1.s390x"
+    },
+    "openssh-clients": {
+      "evra": "8.8p1-1.fc36.1.s390x"
+    },
+    "openssh-server": {
+      "evra": "8.8p1-1.fc36.1.s390x"
+    },
+    "openssl": {
+      "evra": "1:3.0.3-1.fc36.s390x"
+    },
+    "openssl-libs": {
+      "evra": "1:3.0.3-1.fc36.s390x"
+    },
+    "ostree": {
+      "evra": "2022.3-3.fc36.s390x"
+    },
+    "ostree-libs": {
+      "evra": "2022.3-3.fc36.s390x"
+    },
+    "p11-kit": {
+      "evra": "0.24.1-2.fc36.s390x"
+    },
+    "p11-kit-trust": {
+      "evra": "0.24.1-2.fc36.s390x"
+    },
+    "pam": {
+      "evra": "1.5.2-12.fc36.s390x"
+    },
+    "pam-libs": {
+      "evra": "1.5.2-12.fc36.s390x"
+    },
+    "passwd": {
+      "evra": "0.80-12.fc36.s390x"
+    },
+    "pcre": {
+      "evra": "8.45-1.fc36.1.s390x"
+    },
+    "pcre2": {
+      "evra": "10.40-1.fc36.s390x"
+    },
+    "pcre2-syntax": {
+      "evra": "10.40-1.fc36.noarch"
+    },
+    "pigz": {
+      "evra": "2.7-1.fc36.s390x"
+    },
+    "pkgconf": {
+      "evra": "1.8.0-2.fc36.s390x"
+    },
+    "pkgconf-m4": {
+      "evra": "1.8.0-2.fc36.noarch"
+    },
+    "pkgconf-pkg-config": {
+      "evra": "1.8.0-2.fc36.s390x"
+    },
+    "podman": {
+      "evra": "3:4.1.0-1.fc36.s390x"
+    },
+    "podman-plugins": {
+      "evra": "3:4.1.0-1.fc36.s390x"
+    },
+    "policycoreutils": {
+      "evra": "3.3-4.fc36.s390x"
+    },
+    "polkit": {
+      "evra": "0.120-5.fc36.s390x"
+    },
+    "polkit-libs": {
+      "evra": "0.120-5.fc36.s390x"
+    },
+    "polkit-pkla-compat": {
+      "evra": "0.1-21.fc36.s390x"
+    },
+    "popt": {
+      "evra": "1.18-7.fc36.s390x"
+    },
+    "procps-ng": {
+      "evra": "3.3.17-4.fc36.s390x"
+    },
+    "protobuf-c": {
+      "evra": "1.4.0-4.fc36.s390x"
+    },
+    "psmisc": {
+      "evra": "23.4-3.fc36.s390x"
+    },
+    "publicsuffix-list-dafsa": {
+      "evra": "20210518-4.fc36.noarch"
+    },
+    "readline": {
+      "evra": "8.1-6.fc36.s390x"
+    },
+    "rpcbind": {
+      "evra": "1.2.6-2.fc36.s390x"
+    },
+    "rpm": {
+      "evra": "4.17.0-10.fc36.s390x"
+    },
+    "rpm-libs": {
+      "evra": "4.17.0-10.fc36.s390x"
+    },
+    "rpm-ostree": {
+      "evra": "2022.9-1.fc36.s390x"
+    },
+    "rpm-ostree-libs": {
+      "evra": "2022.9-1.fc36.s390x"
+    },
+    "rpm-plugin-selinux": {
+      "evra": "4.17.0-10.fc36.s390x"
+    },
+    "rsync": {
+      "evra": "3.2.4-1.fc36.s390x"
+    },
+    "runc": {
+      "evra": "2:1.1.1-1.fc36.s390x"
+    },
+    "s390utils-core": {
+      "evra": "2:2.20.0-1.fc36.s390x"
+    },
+    "samba-client-libs": {
+      "evra": "2:4.16.1-4.fc36.s390x"
+    },
+    "samba-common": {
+      "evra": "2:4.16.1-4.fc36.noarch"
+    },
+    "samba-common-libs": {
+      "evra": "2:4.16.1-4.fc36.s390x"
+    },
+    "sed": {
+      "evra": "4.8-10.fc36.s390x"
+    },
+    "selinux-policy": {
+      "evra": "36.10-1.fc36.noarch"
+    },
+    "selinux-policy-targeted": {
+      "evra": "36.10-1.fc36.noarch"
+    },
+    "setup": {
+      "evra": "2.13.10-1.fc36.noarch"
+    },
+    "sg3_utils": {
+      "evra": "1.46-3.fc36.s390x"
+    },
+    "sg3_utils-libs": {
+      "evra": "1.46-3.fc36.s390x"
+    },
+    "shadow-utils": {
+      "evra": "2:4.11.1-2.fc36.s390x"
+    },
+    "shadow-utils-subid": {
+      "evra": "2:4.11.1-2.fc36.s390x"
+    },
+    "skopeo": {
+      "evra": "1:1.7.0-1.fc36.s390x"
+    },
+    "slang": {
+      "evra": "2.3.2-11.fc36.s390x"
+    },
+    "slirp4netns": {
+      "evra": "1.2.0-0.2.beta.0.fc36.s390x"
+    },
+    "snappy": {
+      "evra": "1.1.9-4.fc36.s390x"
+    },
+    "socat": {
+      "evra": "1.7.4.2-2.fc36.s390x"
+    },
+    "sqlite-libs": {
+      "evra": "3.36.0-5.fc36.s390x"
+    },
+    "squashfs-tools": {
+      "evra": "4.5.1-1.fc36.s390x"
+    },
+    "ssh-key-dir": {
+      "evra": "0.1.3-2.fc36.s390x"
+    },
+    "sssd-ad": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-client": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-common": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-common-pac": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-idp": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-ipa": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-krb5": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-krb5-common": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-ldap": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "sssd-nfs-idmap": {
+      "evra": "2.7.0-1.fc36.s390x"
+    },
+    "stalld": {
+      "evra": "1.15-2.fc36.s390x"
+    },
+    "sudo": {
+      "evra": "1.9.8-5.p2.fc36.s390x"
+    },
+    "systemd": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "systemd-container": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "systemd-libs": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "systemd-pam": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "systemd-resolved": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "systemd-udev": {
+      "evra": "250.7-1.fc36.s390x"
+    },
+    "tar": {
+      "evra": "2:1.34-3.fc36.s390x"
+    },
+    "teamd": {
+      "evra": "1.31-5.fc36.s390x"
+    },
+    "toolbox": {
+      "evra": "0.0.99.3-4.fc36.s390x"
+    },
+    "tpm2-tools": {
+      "evra": "5.2-2.fc36.s390x"
+    },
+    "tpm2-tss": {
+      "evra": "3.2.0-1.fc36.s390x"
+    },
+    "tzdata": {
+      "evra": "2022a-2.fc36.noarch"
+    },
+    "userspace-rcu": {
+      "evra": "0.13.0-4.fc36.s390x"
+    },
+    "util-linux": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "util-linux-core": {
+      "evra": "2.38-1.fc36.s390x"
+    },
+    "vim-data": {
+      "evra": "2:8.2.5052-1.fc36.noarch"
+    },
+    "vim-minimal": {
+      "evra": "2:8.2.5052-1.fc36.s390x"
+    },
+    "which": {
+      "evra": "2.21-32.fc36.s390x"
+    },
+    "wireguard-tools": {
+      "evra": "1.0.20210914-2.fc36.s390x"
+    },
+    "xfsprogs": {
+      "evra": "5.14.2-2.fc36.s390x"
+    },
+    "xxhash-libs": {
+      "evra": "0.8.1-2.fc36.s390x"
+    },
+    "xz": {
+      "evra": "5.2.5-9.fc36.s390x"
+    },
+    "xz-libs": {
+      "evra": "5.2.5-9.fc36.s390x"
+    },
+    "yajl": {
+      "evra": "2.1.0-18.fc36.s390x"
+    },
+    "zchunk-libs": {
+      "evra": "1.2.2-1.fc36.s390x"
+    },
+    "zincati": {
+      "evra": "0.0.24-3.fc36.s390x"
+    },
+    "zlib": {
+      "evra": "1.2.11-31.fc36.s390x"
+    },
+    "zram-generator": {
+      "evra": "1.1.2-1.fc36.s390x"
+    }
+  },
+  "metadata": {
+    "generated": "2022-06-07T16:54:09Z",
+    "rpmmd_repos": {
+      "fedora": {
+        "generated": "2022-05-04T21:15:53Z"
+      },
+      "fedora-coreos-pool": {
+        "generated": "2022-06-06T22:18:28Z"
+      },
+      "fedora-updates": {
+        "generated": "2022-06-07T02:15:42Z"
+      }
+    }
+  }
+}
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1605ded5d7..3f04adf2cc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-06T20:52:22Z",
+    "generated": "2022-06-07T16:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-05T22:15:09Z"
+        "generated": "2022-06-06T22:19:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-06T02:03:36Z"
+        "generated": "2022-06-07T02:15:46Z"
       }
     }
   }

From 1c177f75042b8b7781283a893e678fd871b19c33 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 7 Jun 2022 21:02:37 -0400
Subject: [PATCH 1010/2157] workflows: add scheduled job to sync openshift/os
 submodule

We've been hand-maintaining the fedora-coreos-config submodule in
openshift/os, but updating it is usually completely mechanical.  Add a
workflow that maintains an openshift/os PR with the latest changes,
updating it daily or on demand.  We can merge the PR whenever we'd like,
and the job will open a new one once there are additional changes.

Omit CoreOS Bot changes from the log summary, since those involve
lockfiles and overrides that don't apply to RHCOS.  Likewise, if the only
changes are from CoreOS Bot, skip opening a PR.

When the workflow is manually invoked, allow overriding the PR branch.
This can be used to create a one-off PR that won't be maintained by the
bot afterward, for cases where a sync needs complementary changes
elsewhere in openshift/os.

Ideally the job would run inside the openshift/os repo, but GitHub Actions
isn't available there.
---
 .github/workflows/openshift-os.yml | 83 ++++++++++++++++++++++++++++++
 1 file changed, 83 insertions(+)
 create mode 100644 .github/workflows/openshift-os.yml

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
new file mode 100644
index 0000000000..8d655ecced
--- /dev/null
+++ b/.github/workflows/openshift-os.yml
@@ -0,0 +1,83 @@
+name: Sync to openshift/os
+on:
+  # We could do push: branches: [testing-devel] but that would restart
+  # downstream CI a lot
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+    inputs:
+      branch:
+        # Allow overriding branch for syncs that need manual fixups
+        description: PR branch
+        required: true
+        default: fcc-sync
+
+permissions:
+  # none at all
+  contents: none
+
+jobs:
+  update-submodule:
+    name: Update fedora-coreos-config submodule
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v2
+        with:
+          repository: openshift/os
+          # We need an unbroken commit chain when pushing to the fork.  Don't
+          # make assumptions about which commits are already available there.
+          fetch-depth: 0
+
+      - name: Update submodule
+        env:
+          BRANCH_NAME: ${{ github.event.inputs.branch }}
+        run: |
+          set -euxo pipefail
+
+          # Default branch name for on.schedule case
+          echo "BRANCH_NAME=${BRANCH_NAME:-fcc-sync}" >> $GITHUB_ENV
+
+          git submodule init
+          git submodule update
+
+          cd fedora-coreos-config
+          # Omit CoreOS Bot commits from the log message, since they generally
+          # only affect FCOS
+          git shortlog "HEAD..testing-devel" --perl-regexp \
+              --author='^((?!CoreOS Bot <coreosbot@fedoraproject.org>).*)$' \
+              > $RUNNER_TEMP/shortlog
+
+          if [ ! -s $RUNNER_TEMP/shortlog ]; then
+              # Any changes have been made by CoreOS Bot.  Ignore.
+              echo "No non-trivial changes; exiting"
+              exit 0
+          fi
+          git checkout testing-devel
+
+          marker=OPENSHIFT-OS-END-OF-LOG-MARKER-$RANDOM$RANDOM$RANDOM
+          cat >> $GITHUB_ENV <<EOF
+          SHORTLOG<<$marker
+          $(cat $RUNNER_TEMP/shortlog)
+          $marker
+          EOF
+
+      - name: Open pull request
+        uses: peter-evans/create-pull-request@v4.0.4
+        with:
+          token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
+          push-to-fork: coreosbot-releng/os
+          branch: ${{ env.BRANCH_NAME }}
+          commit-message: |
+            Bump fedora-coreos-config
+
+            ${{ env.SHORTLOG }}
+          title: Bump fedora-coreos-config
+          body: |
+            Created by [GitHub workflow](${{ github.server_url }}/${{ github.repository }}/actions/workflows/openshift-os.yml) ([source](${{ github.server_url }}/${{ github.repository }}/blob/testing-devel/.github/workflows/openshift-os.yml)).
+
+            ```
+            ${{ env.SHORTLOG }}
+            ```
+          committer: "CoreOS Bot <coreosbot@fedoraproject.org>"
+          author: "CoreOS Bot <coreosbot@fedoraproject.org>"

From c51aa4747ca59e6c894785451c0f131c22cb135e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Jun 2022 03:02:21 +0000
Subject: [PATCH 1011/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/261/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 41 +++++++++++++++++-------------------
 manifest-lock.s390x.json   | 43 ++++++++++++++++++--------------------
 manifest-lock.x86_64.json  | 41 +++++++++++++++++-------------------
 3 files changed, 58 insertions(+), 67 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b8e3e33c05..2a6eb2e2b9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -331,7 +331,7 @@
       "evra": "1.8.1-3.fc36.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-3.fc36.aarch64"
+      "evra": "3.7.3-1.fc36.aarch64"
     },
     "fuse3": {
       "evra": "3.10.5-2.fc36.aarch64"
@@ -613,7 +613,7 @@
       "evra": "1.3.1-50.fc36.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.aarch64"
@@ -745,16 +745,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.aarch64"
@@ -985,10 +985,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:4.1.0-1.fc36.aarch64"
+      "evra": "3:4.1.0-8.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-1.fc36.aarch64"
+      "evra": "3:4.1.0-8.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1108,34 +1108,31 @@
       "evra": "0.1.3-2.fc36.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.0-1.fc36.aarch64"
-    },
-    "sssd-idp": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.0-1.fc36.aarch64"
+      "evra": "2.7.1-1.fc36.aarch64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.aarch64"
@@ -1229,7 +1226,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-07T16:54:09Z",
+    "generated": "2022-06-09T01:45:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1238,7 +1235,7 @@
         "generated": "2022-06-06T22:18:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-07T02:15:30Z"
+        "generated": "2022-06-09T00:56:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7b52097f23..c4a58222d3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -316,7 +316,7 @@
       "evra": "1.8.1-3.fc36.s390x"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-3.fc36.s390x"
+      "evra": "3.7.3-1.fc36.s390x"
     },
     "fuse3": {
       "evra": "3.10.5-2.fc36.s390x"
@@ -562,7 +562,7 @@
       "evra": "1.3.1-50.fc36.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "libjose": {
       "evra": "11-5.fc36.s390x"
@@ -691,16 +691,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.s390x"
@@ -916,10 +916,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "3:4.1.0-1.fc36.s390x"
+      "evra": "3:4.1.0-8.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-1.fc36.s390x"
+      "evra": "3:4.1.0-8.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -1036,34 +1036,31 @@
       "evra": "0.1.3-2.fc36.s390x"
     },
     "sssd-ad": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-client": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-common": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.7.0-1.fc36.s390x"
-    },
-    "sssd-idp": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.0-1.fc36.s390x"
+      "evra": "2.7.1-1.fc36.s390x"
     },
     "stalld": {
       "evra": "1.15-2.fc36.s390x"
@@ -1157,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-07T16:54:09Z",
+    "generated": "2022-06-09T01:45:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-06T22:18:28Z"
+        "generated": "2022-06-07T18:13:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-07T02:15:42Z"
+        "generated": "2022-06-09T00:57:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3f04adf2cc..da0f89a2b4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -331,7 +331,7 @@
       "evra": "1.8.1-3.fc36.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.2-3.fc36.x86_64"
+      "evra": "3.7.3-1.fc36.x86_64"
     },
     "fuse3": {
       "evra": "3.10.5-2.fc36.x86_64"
@@ -619,7 +619,7 @@
       "evra": "1.3.1-50.fc36.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.x86_64"
@@ -754,16 +754,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.x86_64"
@@ -997,10 +997,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:4.1.0-1.fc36.x86_64"
+      "evra": "3:4.1.0-8.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-1.fc36.x86_64"
+      "evra": "3:4.1.0-8.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1120,34 +1120,31 @@
       "evra": "0.1.3-2.fc36.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.0-1.fc36.x86_64"
-    },
-    "sssd-idp": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.0-1.fc36.x86_64"
+      "evra": "2.7.1-1.fc36.x86_64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.x86_64"
@@ -1241,7 +1238,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-07T16:53:35Z",
+    "generated": "2022-06-09T01:44:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1250,7 +1247,7 @@
         "generated": "2022-06-06T22:19:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-07T02:15:46Z"
+        "generated": "2022-06-09T00:57:10Z"
       }
     }
   }

From 2dfcd0f842f40d97ee16b4ba20a121e3fea17250 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 8 Jun 2022 19:36:21 -0400
Subject: [PATCH 1012/2157] workflows: add stamp file in openshift/os to ensure
 we push rebases

The create-pull-request action currently only force-pushes branches if
their diff has changed.  However, if we've meanwhile landed a parallel
fedora-coreos-config update PR via a different branch, the diff might
be the same but the base commit will be different.  We need to push the
branch in this case too, or else the PR will be left unmergeable due to
conflicts.  As a workaround, write the base commit ID into a stamp file
in the root of openshift/os, so the diff will change whenever the base
does.
---
 .github/workflows/openshift-os.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index 8d655ecced..ff19cf6a5a 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -53,7 +53,14 @@ jobs:
               echo "No non-trivial changes; exiting"
               exit 0
           fi
+
+          base=$(git rev-parse HEAD)
           git checkout testing-devel
+          # Hack: update a stamp to force create-pull-request to update the
+          # branch, even if we're just rebasing on a previous manual
+          # fedora-coreos-config sync
+          # https://github.com/peter-evans/create-pull-request/issues/1191
+          echo $base > ../.fedora-coreos-config-base
 
           marker=OPENSHIFT-OS-END-OF-LOG-MARKER-$RANDOM$RANDOM$RANDOM
           cat >> $GITHUB_ENV <<EOF

From 7c0eaa88e83fd9d0d329c3495e65752d8310ccd6 Mon Sep 17 00:00:00 2001
From: LakshmiRavichandran1 <Lakshmi.Ravichandran1@ibm.com>
Date: Thu, 9 Jun 2022 15:21:56 +0200
Subject: [PATCH 1013/2157] add ostree-overrides-fc36 for s390x

---
 manifest-lock.overrides.yaml | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..5b1bb6abf2 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,24 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ostree:
+    evr: 2022.4-2.fc36
+    metadata:
+      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1204'
+      type: fast-track
+  ostree-devel:
+    evr: 2022.4-2.fc36
+    metadata:
+      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1205'
+      type: fast-track
+  ostree-libs:
+    evr: 2022.4-2.fc36
+    metadata:
+      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1207'
+      type: fast-track
+  ostree-tests:
+    evr: 2022.4-2.fc36
+    metadata:
+      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1207'
+      type: fast-track

From c0afd29cc6ae477077d6a53aee8b443877df9fce Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 9 Jun 2022 15:20:40 +0800
Subject: [PATCH 1014/2157] tests: verify /etc release symlinks are valid

See:
- https://bugzilla.redhat.com/show_bug.cgi?id=2068148
- https://github.com/openshift/os/pull/815
---
 tests/kola/files/check-symlink | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100755 tests/kola/files/check-symlink

diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
new file mode 100755
index 0000000000..3c8614a5a9
--- /dev/null
+++ b/tests/kola/files/check-symlink
@@ -0,0 +1,19 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+# Verify /etc release symlinks are valid
+# See:
+# - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
+# - https://github.com/openshift/os/pull/815
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+for file_name in /etc/system-release-cpe /etc/system-release /etc/redhat-release /etc/os-release
+do
+    real_path=$(readlink -f ${file_name})
+    if ! test -f "${real_path}"; then
+        fatal "Error: ${file_name} symlink to ${real_path} which not exists"
+    fi
+    ok "${file_name} symlink to valid file ${real_path}"
+done

From 50112a657113b205ba0b2b2d5a18a6236e3376e8 Mon Sep 17 00:00:00 2001
From: LakshmiRavichandran1 <Lakshmi.Ravichandran1@ibm.com>
Date: Thu, 9 Jun 2022 17:33:59 +0200
Subject: [PATCH 1015/2157] denylist: drop denials for some s390x tests

The tests
- kola: s390x: test rpmostree.install-uninstall fails fedora-coreos-tracker#1204 ,
- kola: s390x: test rpmostree.upgrade-rollback fails fedora-coreos-tracker#1205,
- kola: s390x: ostree.hotfix test fails fedora-coreos-tracker#1207
no longer fail because of an ostree-2022.4-2.fc36 update.

The ext.config.ignition.resource.remote (coreos/fedora-coreos-tracker#1215) seems to be passing now as well (Not sure what changed there, but happy to see it passing.)
---
 kola-denylist.yaml | 16 ----------------
 1 file changed, 16 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7964459e81..3530dc8173 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,23 +17,7 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
   - ppc64le
-- pattern: rpmostree.install-uninstall
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1204
-  arches:
-  - s390x
-- pattern: rpmostree.upgrade-rollback
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1205
-  arches:
-  - s390x
-- pattern: ostree.hotfix
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1207
-  arches:
-  - s390x
 - pattern: multipath.day2
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
   - s390x
-- pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  arches:
-  - s390x

From b130d11b842b6b812a765b90a8ed8475edb8ca7a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Jun 2022 22:10:15 +0000
Subject: [PATCH 1016/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/262/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2a6eb2e2b9..9b64df0be9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -943,10 +943,10 @@
       "evra": "1.77-9.fc36.aarch64"
     },
     "ostree": {
-      "evra": "2022.3-3.fc36.aarch64"
+      "evra": "2022.4-2.fc36.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.3-3.fc36.aarch64"
+      "evra": "2022.4-2.fc36.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.aarch64"
@@ -1226,13 +1226,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T01:45:22Z",
+    "generated": "2022-06-09T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-06T22:18:39Z"
+        "generated": "2022-06-09T14:21:00Z"
       },
       "fedora-updates": {
         "generated": "2022-06-09T00:56:54Z"
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c4a58222d3..f861aa7760 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -874,10 +874,10 @@
       "evra": "1:3.0.3-1.fc36.s390x"
     },
     "ostree": {
-      "evra": "2022.3-3.fc36.s390x"
+      "evra": "2022.4-2.fc36.s390x"
     },
     "ostree-libs": {
-      "evra": "2022.3-3.fc36.s390x"
+      "evra": "2022.4-2.fc36.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.s390x"
@@ -1154,13 +1154,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T01:45:22Z",
+    "generated": "2022-06-09T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-07T18:13:53Z"
+        "generated": "2022-06-09T14:20:38Z"
       },
       "fedora-updates": {
         "generated": "2022-06-09T00:57:06Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index da0f89a2b4..a02e277648 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -955,10 +955,10 @@
       "evra": "1.77-9.fc36.x86_64"
     },
     "ostree": {
-      "evra": "2022.3-3.fc36.x86_64"
+      "evra": "2022.4-2.fc36.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.3-3.fc36.x86_64"
+      "evra": "2022.4-2.fc36.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.x86_64"
@@ -1238,13 +1238,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T01:44:54Z",
+    "generated": "2022-06-09T20:52:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-06T22:19:47Z"
+        "generated": "2022-06-09T14:21:35Z"
       },
       "fedora-updates": {
         "generated": "2022-06-09T00:57:10Z"

From 50e6b7bb0c8aa5aafe31335e01c84abe6b24a4a6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 1 Jun 2022 22:07:27 -0400
Subject: [PATCH 1017/2157] denylist: deny ext.config.ignition.resource.remote
 on s390x

Turns out the issue is a race condition and we need to denylist it
again while we investigate it more.

See https://github.com/coreos/fedora-coreos-tracker/issues/1215
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3530dc8173..6f2b29308b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,3 +21,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
   - s390x
+- pattern: ext.config.ignition.resource.remote
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  arches:
+  - s390x

From 1ac0fe61175869a1c25c787d01a8971d0c793844 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Jun 2022 14:19:12 +0000
Subject: [PATCH 1018/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/266/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 64 +++++++++++++++++------------------
 manifest-lock.s390x.json   | 56 +++++++++++++++----------------
 manifest-lock.x86_64.json  | 68 +++++++++++++++++++-------------------
 3 files changed, 94 insertions(+), 94 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9b64df0be9..bb3b5c2a9e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-1.fc36.aarch64"
+      "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-1.fc36.aarch64"
+      "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-1.fc36.aarch64"
+      "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-1.fc36.aarch64"
+      "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-1.fc36.aarch64"
+      "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.5.0.2-2.fc36.noarch"
@@ -175,7 +175,7 @@
       "evra": "1.4.5-1.fc36.aarch64"
     },
     "crypto-policies": {
-      "evra": "20220203-2.git112f859.fc36.noarch"
+      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
     },
     "cryptsetup": {
       "evra": "2.4.3-2.fc36.aarch64"
@@ -388,16 +388,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-40.fc36.noarch"
+      "evra": "1:2.06-42.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-40.fc36.aarch64"
+      "evra": "1:2.06-42.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-40.fc36.aarch64"
+      "evra": "1:2.06-42.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-40.fc36.aarch64"
+      "evra": "1:2.06-42.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.12-300.fc36.aarch64"
+      "evra": "5.17.13-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.12-300.fc36.aarch64"
+      "evra": "5.17.13-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.12-300.fc36.aarch64"
+      "evra": "5.17.13-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -613,7 +613,7 @@
       "evra": "1.3.1-50.fc36.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.aarch64"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc5.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc6.fc36.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.aarch64"
@@ -745,16 +745,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.aarch64"
@@ -898,7 +898,7 @@
       "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc5.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc6.fc36.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.aarch64"
@@ -1108,31 +1108,31 @@
       "evra": "0.1.3-2.fc36.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-1.fc36.aarch64"
+      "evra": "2.7.1-2.fc36.aarch64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T20:53:01Z",
+    "generated": "2022-06-13T13:00:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-09T14:21:00Z"
+        "generated": "2022-06-10T14:13:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-09T00:56:54Z"
+        "generated": "2022-06-13T01:22:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f861aa7760..589298d6b3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-1.fc36.s390x"
+      "evra": "1:1.38.0-2.fc36.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-1.fc36.s390x"
+      "evra": "1:1.38.0-2.fc36.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-1.fc36.s390x"
+      "evra": "1:1.38.0-2.fc36.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-1.fc36.s390x"
+      "evra": "1:1.38.0-2.fc36.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-1.fc36.s390x"
+      "evra": "1:1.38.0-2.fc36.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.5.0.2-2.fc36.noarch"
@@ -172,7 +172,7 @@
       "evra": "1.4.5-1.fc36.s390x"
     },
     "crypto-policies": {
-      "evra": "20220203-2.git112f859.fc36.noarch"
+      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
     },
     "cryptsetup": {
       "evra": "2.4.3-2.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.12-300.fc36.s390x"
+      "evra": "5.17.13-300.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.17.12-300.fc36.s390x"
+      "evra": "5.17.13-300.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.17.12-300.fc36.s390x"
+      "evra": "5.17.13-300.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -562,7 +562,7 @@
       "evra": "1.3.1-50.fc36.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "libjose": {
       "evra": "11-5.fc36.s390x"
@@ -607,7 +607,7 @@
       "evra": "1.0.1-21.fc36.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc5.fc36.s390x"
+      "evra": "1:2.6.1-2.rc6.fc36.s390x"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.s390x"
@@ -691,16 +691,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.s390x"
@@ -835,7 +835,7 @@
       "evra": "0.52.21-12.fc36.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc5.fc36.s390x"
+      "evra": "1:2.6.1-2.rc6.fc36.s390x"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.s390x"
@@ -1036,31 +1036,31 @@
       "evra": "0.1.3-2.fc36.s390x"
     },
     "sssd-ad": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-client": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-common": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-1.fc36.s390x"
+      "evra": "2.7.1-2.fc36.s390x"
     },
     "stalld": {
       "evra": "1.15-2.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T20:52:58Z",
+    "generated": "2022-06-13T13:00:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-09T14:20:38Z"
+        "generated": "2022-06-10T14:12:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-09T00:57:06Z"
+        "generated": "2022-06-13T01:22:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a02e277648..e2eff99f42 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-1.fc36.x86_64"
+      "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-1.fc36.x86_64"
+      "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-1.fc36.x86_64"
+      "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-1.fc36.x86_64"
+      "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-1.fc36.x86_64"
+      "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.5.0.2-2.fc36.noarch"
@@ -175,7 +175,7 @@
       "evra": "1.4.5-1.fc36.x86_64"
     },
     "crypto-policies": {
-      "evra": "20220203-2.git112f859.fc36.noarch"
+      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
     },
     "cryptsetup": {
       "evra": "2.4.3-2.fc36.x86_64"
@@ -388,22 +388,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-40.fc36.noarch"
+      "evra": "1:2.06-42.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-40.fc36.x86_64"
+      "evra": "1:2.06-42.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-40.fc36.x86_64"
+      "evra": "1:2.06-42.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-40.fc36.noarch"
+      "evra": "1:2.06-42.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-40.fc36.x86_64"
+      "evra": "1:2.06-42.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-40.fc36.x86_64"
+      "evra": "1:2.06-42.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.12-300.fc36.x86_64"
+      "evra": "5.17.13-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.12-300.fc36.x86_64"
+      "evra": "5.17.13-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.12-300.fc36.x86_64"
+      "evra": "5.17.13-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -619,7 +619,7 @@
       "evra": "1.3.1-50.fc36.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.x86_64"
@@ -667,7 +667,7 @@
       "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc5.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc6.fc36.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.x86_64"
@@ -754,16 +754,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.x86_64"
@@ -910,7 +910,7 @@
       "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc5.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc6.fc36.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.x86_64"
@@ -1120,31 +1120,31 @@
       "evra": "0.1.3-2.fc36.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-1.fc36.x86_64"
+      "evra": "2.7.1-2.fc36.x86_64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-09T20:52:25Z",
+    "generated": "2022-06-13T12:59:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-09T14:21:35Z"
+        "generated": "2022-06-10T14:14:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-09T00:57:10Z"
+        "generated": "2022-06-13T01:22:32Z"
       }
     }
   }

From f651e8fbc39cf8cf43f242d858b6b5d0595c9757 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Jun 2022 18:22:47 +0000
Subject: [PATCH 1019/2157] overrides: fast-track rust-afterburn-5.3.0-2.fc36

---
 manifest-lock.overrides.yaml | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5b1bb6abf2..fdecb612f5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,23 +9,33 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  afterburn:
+    evr: 5.3.0-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
+      type: fast-track
+  afterburn-dracut:
+    evr: 5.3.0-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
+      type: fast-track
   ostree:
     evr: 2022.4-2.fc36
     metadata:
-      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1204'
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1204
       type: fast-track
   ostree-devel:
     evr: 2022.4-2.fc36
     metadata:
-      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1205'
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1205
       type: fast-track
   ostree-libs:
     evr: 2022.4-2.fc36
     metadata:
-      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1207'
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1207
       type: fast-track
   ostree-tests:
     evr: 2022.4-2.fc36
     metadata:
-      reason: 'https://github.com/coreos/fedora-coreos-tracker/issues/1207'
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1207
       type: fast-track

From ba4d91dcd6574a98419c98586d579a2bd862b721 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Jun 2022 22:10:08 +0000
Subject: [PATCH 1020/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/267/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bb3b5c2a9e..31a22bcaaa 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-10.fc36.aarch64"
     },
     "afterburn": {
-      "evra": "5.3.0-1.fc36.aarch64"
+      "evra": "5.3.0-2.fc36.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-1.fc36.aarch64"
+      "evra": "5.3.0-2.fc36.aarch64"
     },
     "alternatives": {
       "evra": "1.19-2.fc36.aarch64"
@@ -1226,13 +1226,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T13:00:27Z",
+    "generated": "2022-06-13T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-10T14:13:09Z"
+        "generated": "2022-06-13T18:53:28Z"
       },
       "fedora-updates": {
         "generated": "2022-06-13T01:22:16Z"
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 589298d6b3..b5c1f3337f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-10.fc36.s390x"
     },
     "afterburn": {
-      "evra": "5.3.0-1.fc36.s390x"
+      "evra": "5.3.0-2.fc36.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-1.fc36.s390x"
+      "evra": "5.3.0-2.fc36.s390x"
     },
     "alternatives": {
       "evra": "1.19-2.fc36.s390x"
@@ -1154,13 +1154,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T13:00:27Z",
+    "generated": "2022-06-13T20:52:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-10T14:12:58Z"
+        "generated": "2022-06-13T18:53:48Z"
       },
       "fedora-updates": {
         "generated": "2022-06-13T01:22:28Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e2eff99f42..6236ddc470 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-10.fc36.x86_64"
     },
     "afterburn": {
-      "evra": "5.3.0-1.fc36.x86_64"
+      "evra": "5.3.0-2.fc36.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-1.fc36.x86_64"
+      "evra": "5.3.0-2.fc36.x86_64"
     },
     "alternatives": {
       "evra": "1.19-2.fc36.x86_64"
@@ -1238,13 +1238,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T12:59:49Z",
+    "generated": "2022-06-13T20:52:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-10T14:14:13Z"
+        "generated": "2022-06-13T18:54:31Z"
       },
       "fedora-updates": {
         "generated": "2022-06-13T01:22:32Z"

From 56150876003ce030b0c38fed534556444ca15d99 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Tue, 14 Jun 2022 08:39:14 -0400
Subject: [PATCH 1021/2157] kola-denylist.yaml: denylist
 ext.config.extensions.module

The test is failing in rawhide so let's
denylist it there.

see: https://github.com/coreos/fedora-coreos-tracker/issues/1229
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6f2b29308b..3db5a8cfa1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,3 +25,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:
   - s390x
+- pattern: ext.config.extension.module
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1229
+  streams:
+  - rawhide

From 43f585f73d4bfe0853be930e19fef863cddbf4f2 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Tue, 14 Jun 2022 11:00:08 -0400
Subject: [PATCH 1022/2157] kola-denylist: fix typo in 5615087

Made a typo in https://github.com/coreos/fedora-coreos-config/pull/1789
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3db5a8cfa1..31a308cd75 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,7 +25,7 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:
   - s390x
-- pattern: ext.config.extension.module
+- pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1229
   streams:
   - rawhide

From 0b913eed25cc904b10033e190ebbaed253cbea0e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Jun 2022 22:12:29 +0000
Subject: [PATCH 1023/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/268/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 31a22bcaaa..8ac40d7060 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -859,7 +859,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.16-1.fc36.aarch64"
+      "evra": "20.10.17-2.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T20:52:54Z",
+    "generated": "2022-06-14T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-13T18:53:28Z"
+        "generated": "2022-06-14T16:13:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-13T01:22:16Z"
+        "generated": "2022-06-14T01:27:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b5c1f3337f..5f7e3ca5b8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -799,7 +799,7 @@
       "evra": "4.2-1.fc36.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.16-1.fc36.s390x"
+      "evra": "20.10.17-2.fc36.s390x"
     },
     "mozjs91": {
       "evra": "91.9.0-1.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T20:52:50Z",
+    "generated": "2022-06-14T20:52:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-13T18:53:48Z"
+        "generated": "2022-06-14T16:13:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-13T01:22:28Z"
+        "generated": "2022-06-14T01:27:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6236ddc470..d6ed9d06e3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -871,7 +871,7 @@
       "evra": "2:2.1-51.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.16-1.fc36.x86_64"
+      "evra": "20.10.17-2.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-13T20:52:18Z",
+    "generated": "2022-06-14T20:52:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-13T18:54:31Z"
+        "generated": "2022-06-14T16:13:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-13T01:22:32Z"
+        "generated": "2022-06-14T01:27:30Z"
       }
     }
   }

From 3b888c4f0d47a8a1abd850a4bf66d4b8e2ae7ee8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Jun 2022 06:05:16 +0000
Subject: [PATCH 1024/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fdecb612f5..bf856be802 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,23 +19,3 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
       type: fast-track
-  ostree:
-    evr: 2022.4-2.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1204
-      type: fast-track
-  ostree-devel:
-    evr: 2022.4-2.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1205
-      type: fast-track
-  ostree-libs:
-    evr: 2022.4-2.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1207
-      type: fast-track
-  ostree-tests:
-    evr: 2022.4-2.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1207
-      type: fast-track

From 2bdfc0ed0e3fa8acb18422102a36b9754c651ec6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Jun 2022 02:33:25 +0000
Subject: [PATCH 1025/2157] overrides: fast-track rpm-ostree-2022.10-2.fc36

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index bf856be802..77055654b4 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,13 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
       type: fast-track
+  rpm-ostree:
+    evr: 2022.10-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-39143d1c3e
+      type: fast-track
+  rpm-ostree-libs:
+    evr: 2022.10-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-39143d1c3e
+      type: fast-track

From a9a8e2a4423c52f96ab4407574a8738ce463e79e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Jun 2022 15:00:13 +0000
Subject: [PATCH 1026/2157] overrides: fast-track kernel-5.18.4-201.fc36

Let's get some advance testing on the 5.18 kernel in F36.
---
 manifest-lock.overrides.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 77055654b4..14efb41fad 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,21 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 5.18.4-201.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
+      type: fast-track
+  kernel-core:
+    evr: 5.18.4-201.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
+      type: fast-track
+  kernel-modules:
+    evr: 5.18.4-201.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
+      type: fast-track
   afterburn:
     evr: 5.3.0-2.fc36
     metadata:

From e07ddeb07e5f150dc1b1865d1f14d7e61619fb03 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 15 Jun 2022 22:13:53 -0400
Subject: [PATCH 1027/2157] Revert "overrides: fast-track
 kernel-5.18.4-201.fc36"

This reverts commit a9a8e2a4423c52f96ab4407574a8738ce463e79e.

It was only a test to see if the 5.18 kernel would pass all pipeline
tests on various platforms. It passed! Now we can go back to tracking
what is in bodhi stable for the kernel.
---
 manifest-lock.overrides.yaml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 14efb41fad..77055654b4 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,21 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 5.18.4-201.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
-      type: fast-track
-  kernel-core:
-    evr: 5.18.4-201.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
-      type: fast-track
-  kernel-modules:
-    evr: 5.18.4-201.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-4810298c00
-      type: fast-track
   afterburn:
     evr: 5.3.0-2.fc36
     metadata:

From 00161c76f0bd9a0ecdb06544d4d33ab815bbcb04 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 16 Jun 2022 08:22:02 -0400
Subject: [PATCH 1028/2157] denylist: deny rpmostree.install-uninstall on s390x
 on F36 streams

See https://github.com/coreos/fedora-coreos-tracker/issues/1215#issuecomment-1157595900
---
 kola-denylist.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 31a308cd75..c2206b7d3d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,6 +25,16 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:
   - s390x
+- pattern: rpmostree.install-uninstall
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  arches:
+  - s390x
+  streams:
+  - next
+  - next-devel
+  - testing
+  - testing-devel
+  - stable
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1229
   streams:

From e4d594397e2e999a6bddb9494b98b9d791610273 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 16 Jun 2022 08:27:04 -0400
Subject: [PATCH 1029/2157] denylist: limit the
 ext.config.ignition.resource.remote denial

Only run it on F36 streams where we know we observe the problem.
IIUC currently we don't see the problem on rawhide.
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c2206b7d3d..599353d60f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,6 +25,12 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:
   - s390x
+  streams:
+  - next
+  - next-devel
+  - testing
+  - testing-devel
+  - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 25e4372d158c86eb24fbc975156ec101ea37931f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 16 Jun 2022 15:50:06 +0000
Subject: [PATCH 1030/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/272/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 3 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8ac40d7060..873075030c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.187.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.4-1.fc36.aarch64"
+      "evra": "1.6.6-1.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.13-300.fc36.aarch64"
+      "evra": "5.17.14-300.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.13-300.fc36.aarch64"
+      "evra": "5.17.14-300.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.13-300.fc36.aarch64"
+      "evra": "5.17.14-300.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -778,7 +778,7 @@
       "evra": "1.3.2-1.rc1.fc36.1.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-50.fc36.aarch64"
+      "evra": "2.4.7-1.fc36.aarch64"
     },
     "libunistring": {
       "evra": "1.0-1.fc36.aarch64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -865,7 +865,7 @@
       "evra": "2:0.6.0-3.fc36.aarch64"
     },
     "mozjs91": {
-      "evra": "91.9.0-1.fc36.aarch64"
+      "evra": "91.10.0-1.fc36.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.0-10.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.9-1.fc36.aarch64"
+      "evra": "2022.10-2.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.9-1.fc36.aarch64"
+      "evra": "2022.10-2.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "15.4-5.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.7.0-1.fc36.aarch64"
+      "evra": "1:1.8.0-8.fc36.aarch64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.5052-1.fc36.noarch"
+      "evra": "2:8.2.5085-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5052-1.fc36.aarch64"
+      "evra": "2:8.2.5085-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-14T20:53:07Z",
+    "generated": "2022-06-16T14:33:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-14T16:13:22Z"
+        "generated": "2022-06-15T18:44:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-14T01:27:13Z"
+        "generated": "2022-06-16T01:02:04Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5f7e3ca5b8..30c84fb18e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "2:2.187.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.4-1.fc36.s390x"
+      "evra": "1.6.6-1.fc36.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.13-300.fc36.s390x"
+      "evra": "5.17.14-300.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.17.13-300.fc36.s390x"
+      "evra": "5.17.14-300.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.17.13-300.fc36.s390x"
+      "evra": "5.17.14-300.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -724,7 +724,7 @@
       "evra": "1.3.2-1.rc1.fc36.1.s390x"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-50.fc36.s390x"
+      "evra": "2.4.7-1.fc36.s390x"
     },
     "libunistring": {
       "evra": "1.0-1.fc36.s390x"
@@ -763,10 +763,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -802,7 +802,7 @@
       "evra": "20.10.17-2.fc36.s390x"
     },
     "mozjs91": {
-      "evra": "91.9.0-1.fc36.s390x"
+      "evra": "91.10.0-1.fc36.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.s390x"
@@ -961,10 +961,10 @@
       "evra": "4.17.0-10.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.9-1.fc36.s390x"
+      "evra": "2022.10-2.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.9-1.fc36.s390x"
+      "evra": "2022.10-2.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.s390x"
@@ -1012,7 +1012,7 @@
       "evra": "2:4.11.1-2.fc36.s390x"
     },
     "skopeo": {
-      "evra": "1:1.7.0-1.fc36.s390x"
+      "evra": "1:1.8.0-8.fc36.s390x"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.s390x"
@@ -1114,10 +1114,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:8.2.5052-1.fc36.noarch"
+      "evra": "2:8.2.5085-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5052-1.fc36.s390x"
+      "evra": "2:8.2.5085-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-14T20:52:50Z",
+    "generated": "2022-06-16T14:33:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-14T16:13:24Z"
+        "generated": "2022-06-15T18:44:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-14T01:27:26Z"
+        "generated": "2022-06-16T01:02:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d6ed9d06e3..14a1106a99 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.187.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.4-1.fc36.x86_64"
+      "evra": "1.6.6-1.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.13-300.fc36.x86_64"
+      "evra": "5.17.14-300.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.13-300.fc36.x86_64"
+      "evra": "5.17.14-300.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.13-300.fc36.x86_64"
+      "evra": "5.17.14-300.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -787,7 +787,7 @@
       "evra": "1.3.2-1.rc1.fc36.1.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.6-50.fc36.x86_64"
+      "evra": "2.4.7-1.fc36.x86_64"
     },
     "libunistring": {
       "evra": "1.0-1.fc36.x86_64"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220509-132.fc36.noarch"
+      "evra": "20220610-135.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:0.6.0-3.fc36.x86_64"
     },
     "mozjs91": {
-      "evra": "91.9.0-1.fc36.x86_64"
+      "evra": "91.10.0-1.fc36.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.x86_64"
@@ -1042,10 +1042,10 @@
       "evra": "4.17.0-10.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.9-1.fc36.x86_64"
+      "evra": "2022.10-2.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.9-1.fc36.x86_64"
+      "evra": "2022.10-2.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.x86_64"
@@ -1096,7 +1096,7 @@
       "evra": "15.4-5.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.7.0-1.fc36.x86_64"
+      "evra": "1:1.8.0-8.fc36.x86_64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.x86_64"
@@ -1198,10 +1198,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.5052-1.fc36.noarch"
+      "evra": "2:8.2.5085-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5052-1.fc36.x86_64"
+      "evra": "2:8.2.5085-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-14T20:52:19Z",
+    "generated": "2022-06-16T14:32:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-14T16:13:45Z"
+        "generated": "2022-06-15T18:45:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-14T01:27:30Z"
+        "generated": "2022-06-16T01:02:22Z"
       }
     }
   }

From fabb4848fd5a970a3541ad96b9cbc956b3498a14 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 17 Jun 2022 06:05:08 +0000
Subject: [PATCH 1031/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 77055654b4..bf856be802 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,13 +19,3 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
       type: fast-track
-  rpm-ostree:
-    evr: 2022.10-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-39143d1c3e
-      type: fast-track
-  rpm-ostree-libs:
-    evr: 2022.10-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-39143d1c3e
-      type: fast-track

From 70640ddf4d55f4efe052e05209b8061f0b6a3918 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 17 Jun 2022 16:46:06 -0400
Subject: [PATCH 1032/2157] ci/overrides: fix Bodhi lookup with bodhi-client
 6.x

We were assuming that bodhi.client re-exported bodhi.client.bindings, but
apparently that wasn't contractual.  Import the module we actually need.

Fixes error:

    AttributeError: module 'bodhi.client' has no attribute 'bindings'
---
 ci/overrides.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/overrides.py b/ci/overrides.py
index 0056c89b39..59d0f19b9b 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -10,7 +10,7 @@
 import yaml
 import subprocess
 
-import bodhi.client
+import bodhi.client.bindings
 import dnf
 import hawkey
 import koji

From e0b74db9b5456fe82d524bf68580c1582f052bf7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 17 Jun 2022 20:50:33 +0000
Subject: [PATCH 1033/2157] overrides: fast-track
 rust-coreos-installer-0.15.0-1.fc36

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index bf856be802..d6b7e7bfcf 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,13 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
       type: fast-track
+  coreos-installer:
+    evr: 0.15.0-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-43b2c3f2b0
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.15.0-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-43b2c3f2b0
+      type: fast-track

From 4a2140b51a54c9c6c1a1a51eef26dc1a24e48db0 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 17 Jun 2022 17:51:22 -0400
Subject: [PATCH 1034/2157] overlay/coreos-diskful-generator: make symlink
 creation idempotent

A generator can be run multiple times. This symlink is a bit of an abuse
of systemd generators because it writes things outside of the expected
output directories. So we need to make sure that we're idempotent.
---
 .../dracut/modules.d/35coreos-ignition/coreos-diskful-generator | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index a4fc4d22ac..5cb233ca7c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -60,6 +60,6 @@ EOF
 
     # create symlink for udev rule
     mkdir -p /run/udev/rules.d/
-    ln -s /usr/lib/coreos/80-coreos-boot-disk.rules \
+    ln -sf /usr/lib/coreos/80-coreos-boot-disk.rules \
           /run/udev/rules.d/80-coreos-boot-disk.rules
 fi

From 86d08f20ce5b489fcfdea7aa711942dec5b8dbb3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 18 Jun 2022 05:29:54 +0000
Subject: [PATCH 1035/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/280/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 3 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 873075030c..1426200c74 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -145,10 +145,10 @@
       "evra": "4:1-56.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.14.0-1.fc36.aarch64"
+      "evra": "0.15.0-1.fc36.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.14.0-1.fc36.aarch64"
+      "evra": "0.15.0-1.fc36.aarch64"
     },
     "coreutils": {
       "evra": "9.0-5.fc36.aarch64"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.14-300.fc36.aarch64"
+      "evra": "5.18.5-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.17.14-300.fc36.aarch64"
+      "evra": "5.18.5-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.17.14-300.fc36.aarch64"
+      "evra": "5.18.5-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -1081,7 +1081,7 @@
       "evra": "2.1-3.fc35.aarch64"
     },
     "shim-aa64": {
-      "evra": "15.4-5.aarch64"
+      "evra": "15.6-1.aarch64"
     },
     "skopeo": {
       "evra": "1:1.8.0-8.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-16T14:33:04Z",
+    "generated": "2022-06-18T04:03:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-15T18:44:14Z"
+        "generated": "2022-06-17T21:24:42Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-16T01:02:04Z"
+        "generated": "2022-06-18T00:29:37Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 30c84fb18e..ee1eb6001a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -142,10 +142,10 @@
       "evra": "4:1-56.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.14.0-1.fc36.s390x"
+      "evra": "0.15.0-1.fc36.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.14.0-1.fc36.s390x"
+      "evra": "0.15.0-1.fc36.s390x"
     },
     "coreutils": {
       "evra": "9.0-5.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.14-300.fc36.s390x"
+      "evra": "5.18.5-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.17.14-300.fc36.s390x"
+      "evra": "5.18.5-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.17.14-300.fc36.s390x"
+      "evra": "5.18.5-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-16T14:33:04Z",
+    "generated": "2022-06-18T04:03:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-15T18:44:23Z"
+        "generated": "2022-06-17T21:24:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-16T01:02:18Z"
+        "generated": "2022-06-18T00:29:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 14a1106a99..cdfb0a00fb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "4:1-56.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.14.0-1.fc36.x86_64"
+      "evra": "0.15.0-1.fc36.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.14.0-1.fc36.x86_64"
+      "evra": "0.15.0-1.fc36.x86_64"
     },
     "coreutils": {
       "evra": "9.0-5.fc36.x86_64"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.17.14-300.fc36.x86_64"
+      "evra": "5.18.5-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.17.14-300.fc36.x86_64"
+      "evra": "5.18.5-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.17.14-300.fc36.x86_64"
+      "evra": "5.18.5-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -1093,7 +1093,7 @@
       "evra": "2.1-3.fc35.x86_64"
     },
     "shim-x64": {
-      "evra": "15.4-5.x86_64"
+      "evra": "15.6-1.x86_64"
     },
     "skopeo": {
       "evra": "1:1.8.0-8.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-16T14:32:27Z",
+    "generated": "2022-06-18T04:03:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-15T18:45:27Z"
+        "generated": "2022-06-17T21:25:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-16T01:02:22Z"
+        "generated": "2022-06-18T00:29:57Z"
       }
     }
   }

From 45c0154f0fd9fdef146e7a0e6b395becc311b644 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Jun 2022 04:53:41 +0000
Subject: [PATCH 1036/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/286/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 3 files changed, 66 insertions(+), 66 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1426200c74..092afe8940 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.29-1.fc36.aarch64"
+      "evra": "32:9.16.30-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.29-1.fc36.noarch"
+      "evra": "32:9.16.30-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.29-1.fc36.aarch64"
+      "evra": "32:9.16.30-1.fc36.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.aarch64"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.17-2.fc36.aarch64"
+      "evra": "3.17-4.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17-2.fc36.aarch64"
+      "evra": "3.17-4.fc36.aarch64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.aarch64"
@@ -229,7 +229,7 @@
       "evra": "3.8-2.fc36.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-6.fc36.aarch64"
+      "evra": "2.86-9.fc36.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.aarch64"
@@ -496,7 +496,7 @@
       "evra": "0.8.7-8.fc36.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-9.fc36.aarch64"
+      "evra": "1.19.2-11.fc36.aarch64"
     },
     "less": {
       "evra": "590-3.fc36.aarch64"
@@ -631,7 +631,7 @@
       "evra": "1.6.0-3.fc36.aarch64"
     },
     "libldb": {
-      "evra": "2.5.0-1.fc36.aarch64"
+      "evra": "2.5.1-1.fc36.aarch64"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.aarch64"
@@ -730,7 +730,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.1-4.fc36.aarch64"
+      "evra": "2:4.16.2-0.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -760,19 +760,19 @@
       "evra": "12.1.1-1.fc36.aarch64"
     },
     "libtalloc": {
-      "evra": "2.3.3-3.fc36.aarch64"
+      "evra": "2.3.4-1.fc36.aarch64"
     },
     "libtasn1": {
       "evra": "4.18.0-2.fc36.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.6-1.fc36.aarch64"
+      "evra": "1.4.7-1.fc36.aarch64"
     },
     "libteam": {
       "evra": "1.31-5.fc36.aarch64"
     },
     "libtevent": {
-      "evra": "0.12.0-0.fc36.aarch64"
+      "evra": "0.12.1-1.fc36.aarch64"
     },
     "libtirpc": {
       "evra": "1.3.2-1.rc1.fc36.1.aarch64"
@@ -802,7 +802,7 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.1-4.fc36.aarch64"
+      "evra": "2:4.16.2-0.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
@@ -892,7 +892,7 @@
       "evra": "1.0.3-3.fc36.aarch64"
     },
     "nettle": {
-      "evra": "3.7.3-3.fc36.aarch64"
+      "evra": "3.8-1.fc36.aarch64"
     },
     "newt": {
       "evra": "0.52.21-12.fc36.aarch64"
@@ -985,10 +985,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:4.1.0-8.fc36.aarch64"
+      "evra": "3:4.1.1-1.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-8.fc36.aarch64"
+      "evra": "3:4.1.1-1.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1045,13 +1045,13 @@
       "evra": "2:1.1.1-1.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.1-4.fc36.aarch64"
+      "evra": "2:4.16.2-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.1-4.fc36.noarch"
+      "evra": "2:4.16.2-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.1-4.fc36.aarch64"
+      "evra": "2:4.16.2-0.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-18T04:03:44Z",
+    "generated": "2022-06-22T03:25:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-17T21:24:42Z"
+        "generated": "2022-06-18T05:31:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-18T00:29:37Z"
+        "generated": "2022-06-22T00:38:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ee1eb6001a..071c1200b7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.29-1.fc36.s390x"
+      "evra": "32:9.16.30-1.fc36.s390x"
     },
     "bind-license": {
-      "evra": "32:9.16.29-1.fc36.noarch"
+      "evra": "32:9.16.30-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.29-1.fc36.s390x"
+      "evra": "32:9.16.30-1.fc36.s390x"
     },
     "bsdtar": {
       "evra": "3.5.3-2.fc36.s390x"
@@ -163,10 +163,10 @@
       "evra": "2.9.6-28.fc36.s390x"
     },
     "criu": {
-      "evra": "3.17-2.fc36.s390x"
+      "evra": "3.17-4.fc36.s390x"
     },
     "criu-libs": {
-      "evra": "3.17-2.fc36.s390x"
+      "evra": "3.17-4.fc36.s390x"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.s390x"
@@ -226,7 +226,7 @@
       "evra": "3.8-2.fc36.s390x"
     },
     "dnsmasq": {
-      "evra": "2.86-6.fc36.s390x"
+      "evra": "2.86-9.fc36.s390x"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.s390x"
@@ -457,7 +457,7 @@
       "evra": "0.8.7-8.fc36.s390x"
     },
     "krb5-libs": {
-      "evra": "1.19.2-9.fc36.s390x"
+      "evra": "1.19.2-11.fc36.s390x"
     },
     "less": {
       "evra": "590-3.fc36.s390x"
@@ -577,7 +577,7 @@
       "evra": "1.6.0-3.fc36.s390x"
     },
     "libldb": {
-      "evra": "2.5.0-1.fc36.s390x"
+      "evra": "2.5.1-1.fc36.s390x"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.s390x"
@@ -676,7 +676,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.1-4.fc36.s390x"
+      "evra": "2:4.16.2-0.fc36.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.s390x"
@@ -706,19 +706,19 @@
       "evra": "12.1.1-1.fc36.s390x"
     },
     "libtalloc": {
-      "evra": "2.3.3-3.fc36.s390x"
+      "evra": "2.3.4-1.fc36.s390x"
     },
     "libtasn1": {
       "evra": "4.18.0-2.fc36.s390x"
     },
     "libtdb": {
-      "evra": "1.4.6-1.fc36.s390x"
+      "evra": "1.4.7-1.fc36.s390x"
     },
     "libteam": {
       "evra": "1.31-5.fc36.s390x"
     },
     "libtevent": {
-      "evra": "0.12.0-0.fc36.s390x"
+      "evra": "0.12.1-1.fc36.s390x"
     },
     "libtirpc": {
       "evra": "1.3.2-1.rc1.fc36.1.s390x"
@@ -745,7 +745,7 @@
       "evra": "0.3.2-3.fc36.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.1-4.fc36.s390x"
+      "evra": "2:4.16.2-0.fc36.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.s390x"
@@ -829,7 +829,7 @@
       "evra": "1.0.3-3.fc36.s390x"
     },
     "nettle": {
-      "evra": "3.7.3-3.fc36.s390x"
+      "evra": "3.8-1.fc36.s390x"
     },
     "newt": {
       "evra": "0.52.21-12.fc36.s390x"
@@ -916,10 +916,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "3:4.1.0-8.fc36.s390x"
+      "evra": "3:4.1.1-1.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-8.fc36.s390x"
+      "evra": "3:4.1.1-1.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -979,13 +979,13 @@
       "evra": "2:2.20.0-1.fc36.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.1-4.fc36.s390x"
+      "evra": "2:4.16.2-0.fc36.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.1-4.fc36.noarch"
+      "evra": "2:4.16.2-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.1-4.fc36.s390x"
+      "evra": "2:4.16.2-0.fc36.s390x"
     },
     "sed": {
       "evra": "4.8-10.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-18T04:03:55Z",
+    "generated": "2022-06-22T03:25:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-17T21:24:20Z"
+        "generated": "2022-06-18T05:31:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-18T00:29:52Z"
+        "generated": "2022-06-22T00:38:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cdfb0a00fb..f0db4629da 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.29-1.fc36.x86_64"
+      "evra": "32:9.16.30-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.29-1.fc36.noarch"
+      "evra": "32:9.16.30-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.29-1.fc36.x86_64"
+      "evra": "32:9.16.30-1.fc36.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.x86_64"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.17-2.fc36.x86_64"
+      "evra": "3.17-4.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17-2.fc36.x86_64"
+      "evra": "3.17-4.fc36.x86_64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.x86_64"
@@ -229,7 +229,7 @@
       "evra": "3.8-2.fc36.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-6.fc36.x86_64"
+      "evra": "2.86-9.fc36.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.x86_64"
@@ -502,7 +502,7 @@
       "evra": "0.8.7-8.fc36.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-9.fc36.x86_64"
+      "evra": "1.19.2-11.fc36.x86_64"
     },
     "less": {
       "evra": "590-3.fc36.x86_64"
@@ -637,7 +637,7 @@
       "evra": "1.6.0-3.fc36.x86_64"
     },
     "libldb": {
-      "evra": "2.5.0-1.fc36.x86_64"
+      "evra": "2.5.1-1.fc36.x86_64"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.x86_64"
@@ -736,7 +736,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.1-4.fc36.x86_64"
+      "evra": "2:4.16.2-0.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -769,19 +769,19 @@
       "evra": "12.1.1-1.fc36.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.3-3.fc36.x86_64"
+      "evra": "2.3.4-1.fc36.x86_64"
     },
     "libtasn1": {
       "evra": "4.18.0-2.fc36.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.6-1.fc36.x86_64"
+      "evra": "1.4.7-1.fc36.x86_64"
     },
     "libteam": {
       "evra": "1.31-5.fc36.x86_64"
     },
     "libtevent": {
-      "evra": "0.12.0-0.fc36.x86_64"
+      "evra": "0.12.1-1.fc36.x86_64"
     },
     "libtirpc": {
       "evra": "1.3.2-1.rc1.fc36.1.x86_64"
@@ -811,7 +811,7 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.1-4.fc36.x86_64"
+      "evra": "2:4.16.2-0.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
@@ -904,7 +904,7 @@
       "evra": "1.0.3-3.fc36.x86_64"
     },
     "nettle": {
-      "evra": "3.7.3-3.fc36.x86_64"
+      "evra": "3.8-1.fc36.x86_64"
     },
     "newt": {
       "evra": "0.52.21-12.fc36.x86_64"
@@ -997,10 +997,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:4.1.0-8.fc36.x86_64"
+      "evra": "3:4.1.1-1.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.0-8.fc36.x86_64"
+      "evra": "3:4.1.1-1.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1057,13 +1057,13 @@
       "evra": "2:1.1.1-1.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.1-4.fc36.x86_64"
+      "evra": "2:4.16.2-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.1-4.fc36.noarch"
+      "evra": "2:4.16.2-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.1-4.fc36.x86_64"
+      "evra": "2:4.16.2-0.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-18T04:03:09Z",
+    "generated": "2022-06-22T03:24:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-17T21:25:03Z"
+        "generated": "2022-06-18T05:33:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-18T00:29:57Z"
+        "generated": "2022-06-22T00:38:47Z"
       }
     }
   }

From c048af0980da12cf6d339f5d8b27e62eb1259c4d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Jun 2022 06:05:29 +0000
Subject: [PATCH 1037/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d6b7e7bfcf..ef5cd2dece 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  afterburn:
-    evr: 5.3.0-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.3.0-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-28295ab6c4
-      type: fast-track
   coreos-installer:
     evr: 0.15.0-1.fc36
     metadata:

From 0b03cef07d5a95b905a62261a172ec8fc57b1de4 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 22 Jun 2022 14:29:32 -0400
Subject: [PATCH 1038/2157] Drop fedora-coreos-pinger

It's a stub service that only parses a config file, and we never
adequately documented the config file.  We have no current plans to
finish implementing the service, so let's drop it.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/770.
---
 ci/overrides.py                                          | 1 -
 manifests/disable-zincati-and-pinger.yaml                | 2 --
 manifests/disable-zincati.yaml                           | 2 ++
 manifests/fedora-coreos.yaml                             | 9 +++------
 .../15fcos/usr/lib/systemd/system-preset/45-fcos.preset  | 2 --
 .../config.d/90-disable-on-non-production-stream.toml    | 2 --
 .../config.d/90-disable-on-non-production-stream.toml    | 0
 overlay.d/README.md                                      | 8 ++++----
 8 files changed, 9 insertions(+), 17 deletions(-)
 delete mode 100644 manifests/disable-zincati-and-pinger.yaml
 create mode 100644 manifests/disable-zincati.yaml
 delete mode 100644 overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
 rename overlay.d/{16disable-zincati-and-pinger => 16disable-zincati}/etc/zincati/config.d/90-disable-on-non-production-stream.toml (100%)

diff --git a/ci/overrides.py b/ci/overrides.py
index 59d0f19b9b..5b8612a093 100755
--- a/ci/overrides.py
+++ b/ci/overrides.py
@@ -26,7 +26,6 @@
     'rust-afterburn',
     'rust-bootupd',
     'rust-coreos-installer',
-    'rust-fedora-coreos-pinger',
     'rust-ignition-config',
     'rust-zincati',
 ]
diff --git a/manifests/disable-zincati-and-pinger.yaml b/manifests/disable-zincati-and-pinger.yaml
deleted file mode 100644
index c756f3ff6b..0000000000
--- a/manifests/disable-zincati-and-pinger.yaml
+++ /dev/null
@@ -1,2 +0,0 @@
-ostree-layers:
-  - overlay/16disable-zincati-and-pinger
diff --git a/manifests/disable-zincati.yaml b/manifests/disable-zincati.yaml
new file mode 100644
index 0000000000..e7c58fdf2a
--- /dev/null
+++ b/manifests/disable-zincati.yaml
@@ -0,0 +1,2 @@
+ostree-layers:
+  - overlay/16disable-zincati
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index a7bef6b85d..a015f413e7 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -16,7 +16,7 @@ include: fedora-coreos-base.yaml
 conditional-include:
   - if: prod == false
     # long-term, would be good to support specifying a nested TreeComposeConfig
-    include: disable-zincati-and-pinger.yaml
+    include: disable-zincati.yaml
   - if: basearch == "aarch64"
     # Fixup for kdump on aarch64 AWS instances
     include: kdump-aarch64-aws-workaround.yaml
@@ -47,8 +47,6 @@ packages:
   - moby-engine
   # Already pulled in by moby-engine, but let's be explicit. Typhoon uses it.
   - containerd
-  # User metrics
-  - fedora-coreos-pinger
   # Updates
   - zincati
   # Include and set the default editor
@@ -64,15 +62,14 @@ etc-group-members:
 # ⚠⚠⚠ ONLY TEMPORARY HACKS ALLOWED HERE; ALL ENTRIES NEED TRACKER LINKS ⚠⚠⚠
 # See also the version of this in fedora-coreos-base.yaml
 postprocess:
-  # Disable Zincati and fedora-coreos-pinger on non-release builds
+  # Disable Zincati on non-release builds
   # https://github.com/coreos/fedora-coreos-tracker/issues/212
   - |
     #!/usr/bin/env bash
     set -xeuo pipefail
     source /etc/os-release
     if [[ $OSTREE_VERSION = *.dev* ]]; then
-      mkdir -p /etc/fedora-coreos-pinger/config.d /etc/zincati/config.d
-      echo -e '# https://github.com/coreos/fedora-coreos-tracker/issues/212\nreporting.enabled = false' > /etc/fedora-coreos-pinger/config.d/95-disable-on-dev.toml
+      mkdir -p /etc/zincati/config.d
       echo -e '# https://github.com/coreos/fedora-coreos-tracker/issues/212\nupdates.enabled = false' > /etc/zincati/config.d/95-disable-on-dev.toml
     fi
   # Users shouldn't be configuring `rpm-ostreed.conf`
diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index c1d3e4dc9a..fd18bec843 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,5 +1,3 @@
-# User metrics client
-enable fedora-coreos-pinger.service
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
diff --git a/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml b/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
deleted file mode 100644
index 20e6b5a5c2..0000000000
--- a/overlay.d/16disable-zincati-and-pinger/etc/fedora-coreos-pinger/config.d/90-disable-on-non-production-stream.toml
+++ /dev/null
@@ -1,2 +0,0 @@
-# https://github.com/coreos/fedora-coreos-tracker/issues/163
-reporting.enabled = false
diff --git a/overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml b/overlay.d/16disable-zincati/etc/zincati/config.d/90-disable-on-non-production-stream.toml
similarity index 100%
rename from overlay.d/16disable-zincati-and-pinger/etc/zincati/config.d/90-disable-on-non-production-stream.toml
rename to overlay.d/16disable-zincati/etc/zincati/config.d/90-disable-on-non-production-stream.toml
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 85bb10df38..65f08c236a 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -35,14 +35,14 @@ Things that are more closely "Fedora CoreOS":
 * disable password logins by default over SSH
 * enable SSH keys written by Ignition and Afterburn
 * branding (MOTD)
-* enable services by default (fedora-coreos-pinger)
+* enable FCOS-specific services by default
 * display warnings on the console if no ignition config was provided or no ssh
   key found.
 
-16disable-zincati-and-pinger
-------------------------
+16disable-zincati
+-----------------
 
-Disable Zincati and fedora-coreos-pinger on non-production streams:
+Disable Zincati on non-production streams:
 https://github.com/coreos/fedora-coreos-tracker/issues/163
 
 20platform-chrony

From afbf9448e8a90df46ae4b797e555caeae9689b07 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 Jun 2022 14:10:05 +0000
Subject: [PATCH 1039/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/289/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 9 +++------
 manifest-lock.s390x.json   | 9 +++------
 manifest-lock.x86_64.json  | 9 +++------
 3 files changed, 9 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 092afe8940..798ce35923 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -273,9 +273,6 @@
     "expat": {
       "evra": "2.4.7-1.fc36.aarch64"
     },
-    "fedora-coreos-pinger": {
-      "evra": "0.0.4-13.fc36.aarch64"
-    },
     "fedora-gpg-keys": {
       "evra": "36-1.noarch"
     },
@@ -1226,16 +1223,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-22T03:25:25Z",
+    "generated": "2022-06-23T12:41:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-18T05:31:59Z"
+        "generated": "2022-06-22T04:59:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-22T00:38:28Z"
+        "generated": "2022-06-23T00:36:49Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 071c1200b7..0ea15a8e31 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -261,9 +261,6 @@
     "expat": {
       "evra": "2.4.7-1.fc36.s390x"
     },
-    "fedora-coreos-pinger": {
-      "evra": "0.0.4-13.fc36.s390x"
-    },
     "fedora-gpg-keys": {
       "evra": "36-1.noarch"
     },
@@ -1154,16 +1151,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-22T03:25:25Z",
+    "generated": "2022-06-23T12:41:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-18T05:31:56Z"
+        "generated": "2022-06-22T04:59:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-22T00:38:42Z"
+        "generated": "2022-06-23T00:37:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f0db4629da..ef125083cb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -273,9 +273,6 @@
     "expat": {
       "evra": "2.4.7-1.fc36.x86_64"
     },
-    "fedora-coreos-pinger": {
-      "evra": "0.0.4-13.fc36.x86_64"
-    },
     "fedora-gpg-keys": {
       "evra": "36-1.noarch"
     },
@@ -1238,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-22T03:24:49Z",
+    "generated": "2022-06-23T12:41:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-18T05:33:09Z"
+        "generated": "2022-06-22T05:00:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-22T00:38:47Z"
+        "generated": "2022-06-23T00:37:08Z"
       }
     }
   }

From 47a1364d18a0a388dab8d5c8012cac31c991cece Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 23 Jun 2022 14:38:39 -0700
Subject: [PATCH 1040/2157] Add and test x86_64 emulator support on s390x and
 aarch64 Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1088

---
 manifests/fedora-coreos-base.yaml   |  7 +++++++
 tests/kola/binfmt/data/commonlib.sh |  1 +
 tests/kola/binfmt/qemu              | 31 +++++++++++++++++++++++++++++
 3 files changed, 39 insertions(+)
 create mode 120000 tests/kola/binfmt/data/commonlib.sh
 create mode 100755 tests/kola/binfmt/qemu

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 03a207710d..53c63dec81 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -195,6 +195,10 @@ packages:
 # Anyways, it was requested by the Red Hat perf team for RHCOS, so we have it here.
 # https://serverfault.com/questions/513807/is-there-still-a-use-for-irqbalance-on-modern-hardware
 # https://access.redhat.com/solutions/41535
+# 
+# Include the qemu-user-static-x86 package on aarch64 and s390x FCOS images
+# to allow access to the large inventory of containers only built for x86_64.
+# https://github.com/coreos/fedora-coreos-tracker/issues/1237
 packages-x86_64:
   - irqbalance
 packages-ppc64le:
@@ -204,6 +208,9 @@ packages-ppc64le:
   - ppc64-diag-rtas
 packages-aarch64:
   - irqbalance
+  - qemu-user-static-x86
+packages-s390x:
+  - qemu-user-static-x86
 
 # See https://github.com/coreos/bootupd
 arch-include:
diff --git a/tests/kola/binfmt/data/commonlib.sh b/tests/kola/binfmt/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/binfmt/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
new file mode 100755
index 0000000000..674c108400
--- /dev/null
+++ b/tests/kola/binfmt/qemu
@@ -0,0 +1,31 @@
+#!/bin/bash
+# kola: {"platforms": "qemu", "exclusive": false, "tags": "needs-internet", "architectures": "aarch64 s390x"}
+# Test the x86_64 emulator on aarch64 and s390x images for now
+# https://github.com/coreos/fedora-coreos-tracker/issues/1237
+# 
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - exclusive: false
+#   - This test doesn't make meaningful changes to the system and
+#     should be able to be combined with other tests.
+# - tags: needs-internet
+#   - This test pulls a container from a registry.
+# - architectures: aarch64 s390x
+#   - We decided to ship x86_64 emulator to only these arches for now.
+#   - Refer to the above referenced issue for more details
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+case "$(arch)" in
+    aarch64|s390x)
+        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:36 arch)
+        if [ "$containerArch" != "x86_64" ]; then 
+            fatal "Test failed: x86_64 qemu emulator failed to run" 
+        fi
+        ok "Test passed: x86_64 qemu emulator works on $(arch)" ;;
+    *)
+    # We shouldn't reach this point
+    fatal "No qemu-user-static support for $(arch)" ;;
+esac

From 401c56bac7b5d369554e5ba4f36a1c5b5fa94015 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 24 Jun 2022 15:01:11 +0000
Subject: [PATCH 1041/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/291/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 9 ++++++---
 manifest-lock.s390x.json   | 9 ++++++---
 manifest-lock.x86_64.json  | 6 +++---
 3 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 798ce35923..dd8ff60800 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -376,7 +376,7 @@
       "evra": "2.3.6-1.fc36.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.6-1.fc36.aarch64"
+      "evra": "3.7.6-3.fc36.aarch64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.aarch64"
@@ -1014,6 +1014,9 @@
     "publicsuffix-list-dafsa": {
       "evra": "20210518-4.fc36.noarch"
     },
+    "qemu-user-static-x86": {
+      "evra": "2:6.2.0-12.fc36.aarch64"
+    },
     "readline": {
       "evra": "8.1-6.fc36.aarch64"
     },
@@ -1223,7 +1226,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-23T12:41:36Z",
+    "generated": "2022-06-24T13:34:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1232,7 +1235,7 @@
         "generated": "2022-06-22T04:59:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-23T00:36:49Z"
+        "generated": "2022-06-24T00:47:14Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0ea15a8e31..59e91a1a87 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -352,7 +352,7 @@
       "evra": "2.3.6-1.fc36.s390x"
     },
     "gnutls": {
-      "evra": "3.7.6-1.fc36.s390x"
+      "evra": "3.7.6-3.fc36.s390x"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.s390x"
@@ -945,6 +945,9 @@
     "publicsuffix-list-dafsa": {
       "evra": "20210518-4.fc36.noarch"
     },
+    "qemu-user-static-x86": {
+      "evra": "2:6.2.0-12.fc36.s390x"
+    },
     "readline": {
       "evra": "8.1-6.fc36.s390x"
     },
@@ -1151,7 +1154,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-23T12:41:32Z",
+    "generated": "2022-06-24T13:34:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
@@ -1160,7 +1163,7 @@
         "generated": "2022-06-22T04:59:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-23T00:37:03Z"
+        "generated": "2022-06-24T00:47:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef125083cb..9038db295f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -376,7 +376,7 @@
       "evra": "2.3.6-1.fc36.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.6-1.fc36.x86_64"
+      "evra": "3.7.6-3.fc36.x86_64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.x86_64"
@@ -1235,7 +1235,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-23T12:41:09Z",
+    "generated": "2022-06-24T13:34:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1244,7 +1244,7 @@
         "generated": "2022-06-22T05:00:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-23T00:37:08Z"
+        "generated": "2022-06-24T00:47:34Z"
       }
     }
   }

From f62e87d9eeff5152a49d05e7f21f0ef044cabc67 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Jun 2022 06:05:37 +0000
Subject: [PATCH 1042/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ef5cd2dece..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,14 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.15.0-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-43b2c3f2b0
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.15.0-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-43b2c3f2b0
-      type: fast-track
+packages: {}

From a1c59642db33eeee5feae529cdb1b0324803e581 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Jun 2022 16:25:50 +0000
Subject: [PATCH 1043/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/294/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 3 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index dd8ff60800..7d0bb2ebad 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,13 +361,13 @@
       "evra": "2.72.2-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-11.fc36.aarch64"
+      "evra": "2.35-12.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-11.fc36.aarch64"
+      "evra": "2.35-12.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-11.fc36.aarch64"
+      "evra": "2.35-12.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.5-200.fc36.aarch64"
+      "evra": "5.18.6-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.5-200.fc36.aarch64"
+      "evra": "5.18.6-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.5-200.fc36.aarch64"
+      "evra": "5.18.6-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -658,7 +658,7 @@
       "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc6.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc7.fc36.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.aarch64"
@@ -895,7 +895,7 @@
       "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc6.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc7.fc36.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.0-10.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.10-2.fc36.aarch64"
+      "evra": "2022.10-3.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-2.fc36.aarch64"
+      "evra": "2022.10-3.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-24T13:34:44Z",
+    "generated": "2022-06-26T14:57:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-22T04:59:10Z"
+        "generated": "2022-06-24T15:05:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-24T00:47:14Z"
+        "generated": "2022-06-26T01:00:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 59e91a1a87..9e67454eff 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,13 +337,13 @@
       "evra": "2.72.2-1.fc36.s390x"
     },
     "glibc": {
-      "evra": "2.35-11.fc36.s390x"
+      "evra": "2.35-12.fc36.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-11.fc36.s390x"
+      "evra": "2.35-12.fc36.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-11.fc36.s390x"
+      "evra": "2.35-12.fc36.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.s390x"
@@ -427,13 +427,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.5-200.fc36.s390x"
+      "evra": "5.18.6-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.5-200.fc36.s390x"
+      "evra": "5.18.6-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.5-200.fc36.s390x"
+      "evra": "5.18.6-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -604,7 +604,7 @@
       "evra": "1.0.1-21.fc36.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc6.fc36.s390x"
+      "evra": "1:2.6.1-2.rc7.fc36.s390x"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.s390x"
@@ -832,7 +832,7 @@
       "evra": "0.52.21-12.fc36.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc6.fc36.s390x"
+      "evra": "1:2.6.1-2.rc7.fc36.s390x"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.s390x"
@@ -961,10 +961,10 @@
       "evra": "4.17.0-10.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.10-2.fc36.s390x"
+      "evra": "2022.10-3.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-2.fc36.s390x"
+      "evra": "2022.10-3.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-24T13:34:45Z",
+    "generated": "2022-06-26T14:57:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-22T04:59:21Z"
+        "generated": "2022-06-24T15:05:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-24T00:47:29Z"
+        "generated": "2022-06-26T01:00:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9038db295f..0355c06b0a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,13 +361,13 @@
       "evra": "2.72.2-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-11.fc36.x86_64"
+      "evra": "2.35-12.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-11.fc36.x86_64"
+      "evra": "2.35-12.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-11.fc36.x86_64"
+      "evra": "2.35-12.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.5-200.fc36.x86_64"
+      "evra": "5.18.6-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.5-200.fc36.x86_64"
+      "evra": "5.18.6-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.5-200.fc36.x86_64"
+      "evra": "5.18.6-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -664,7 +664,7 @@
       "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc6.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc7.fc36.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.x86_64"
@@ -907,7 +907,7 @@
       "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc6.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc7.fc36.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.0-10.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.10-2.fc36.x86_64"
+      "evra": "2022.10-3.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-2.fc36.x86_64"
+      "evra": "2022.10-3.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.0-10.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-24T13:34:04Z",
+    "generated": "2022-06-26T14:56:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-22T05:00:04Z"
+        "generated": "2022-06-24T15:06:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-24T00:47:34Z"
+        "generated": "2022-06-26T01:01:05Z"
       }
     }
   }

From f9111e36ddcaefb8cab47486f79e96c536122485 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 26 Jun 2022 16:29:24 -0400
Subject: [PATCH 1044/2157] denylist: add snooze for ext.config.binfmt.qemu on
 aarch64/rawhide

This recently added test is failing in on aarch64/rawhide. Let's
snooze while the investigation continues.

xref: https://github.com/coreos/fedora-coreos-tracker/issues/1241
---
 kola-denylist.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 599353d60f..f17516b662 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -45,3 +45,10 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1229
   streams:
   - rawhide
+- pattern: ext.config.binfmt.qemu
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
+  snooze: 2022-07-06
+  arches:
+  - aarch64
+  streams:
+  - rawhide

From 0f46f8048816a98b5a5b39ecdb1d18b09553503e Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 2 Sep 2021 11:39:33 +0200
Subject: [PATCH 1045/2157] s390x: add 'genprotimg' tool to base image

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 manifests/bootable-rpm-ostree.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 4fd63c0faf..8c41320cd4 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -28,6 +28,7 @@ packages-s390x:
   # On Fedora, this is provided by s390utils-core. on RHEL, this is for now
   # provided by s390utils-base, but soon will be -core too.
   - /usr/sbin/zipl
+  - /usr/bin/genprotimg
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl

From e3309ad07ca959d7acda2f2c95f08ac0b4673018 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 7 Apr 2022 17:27:14 +0200
Subject: [PATCH 1046/2157] s390x: coreos-gpt-setup: add suport for LUKS
 encrypted 'boot' partition

---
 .../modules.d/35coreos-ignition/coreos-gpt-setup.sh       | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index dc55409429..3261e2a99e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -7,11 +7,15 @@ set -euo pipefail
 UNINITIALIZED_GUID='00000000-0000-4000-a000-000000000001'
 
 # If it's on multipath, get the parent device from udev properties.
-DM_MPATH=$(eval $(udevadm info --query property --export "$1") && echo "${DM_MPATH:-}")
+# If it's LUKS2 encrypted, UUID woud start with "CRYPT-LUKS2"
+eval $(udevadm info --query property --export "$1" | grep -e DM_NAME -e DM_UUID -e DM_MAPTH)
 
-if [ -n "${DM_MPATH:-}" ]; then
+if [[ -n "${DM_MPATH:-}" ]]; then
     PKNAME=/dev/mapper/$DM_MPATH
     PTUUID=$(eval $(udevadm info --query property --export "$PKNAME") && echo "${ID_PART_TABLE_UUID:-}")
+elif [[ "${DM_UUID:-}" =~ 'CRYPT-LUKS2' ]] && [[ -n "${DM_NAME:-}" ]]; then
+    eval $(lsblk --output PKNAME --pairs --paths --nodeps /dev/mapper/$DM_NAME)
+    PTUUID=$(eval $(udevadm info --query property --export /dev/mapper/$DM_NAME) && echo "${ID_PART_TABLE_UUID:-}")
 else
     # On RHEL 8 the version of lsblk doesn't have PTUUID. Let's detect
     # if lsblk supports it. In the future we can remove the 'if' and

From 073d52528583239ddf0a499e1771d17f1292afac Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 14 Apr 2022 17:15:48 +0200
Subject: [PATCH 1047/2157] s390x: ignition-ostree-growfs: resize LUKS
 encrypted rootfs

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../ignition-ostree-growfs.sh                 | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index d20b6a08d9..483c83b60f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -17,8 +17,21 @@ path=/sysroot
 # this shouldn't happen for us but we're being conservative.
 src=$(findmnt -nvr -o SOURCE "$path" | tail -n1)
 
+# IBM SecureExecution
+secure_execution=0
+if [[ $(uname -m) == s390x ]] && [[ -e /sys/firmware/uv/prot_virt_guest ]]; then
+    secure_execution=$(cat /sys/firmware/uv/prot_virt_guest)
+fi
+
 if [ ! -f "${saved_partstate}" ]; then
     partition=$(realpath /dev/disk/by-label/root)
+    # in the Secure Execution case, the rootfs is pre-baked on LUKS, so
+    # `partition` is actually the device mapper device; get its parent
+    if [[ "${secure_execution}" != "0" ]]; then
+        # lsblk doesn't print PKNAME of crypt devices with --nodeps
+        MAJMIN=$(echo $(lsblk -dno MAJ:MIN "${partition}"))
+        partition=/dev/$(ls "/sys/dev/block/${MAJMIN}/slaves")
+    fi
 else
     # The rootfs was reprovisioned. Our rule in this case is: we only grow if
     # the partition backing the rootfs is the same and its size didn't change
@@ -85,7 +98,11 @@ while true; do
              eval $(udevadm info --query=property --export "${NAME}")
              # lsblk doesn't print PKNAME of crypt devices with --nodeps
              PKNAME=/dev/$(ls "/sys/dev/block/${MAJMIN}/slaves")
-             clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
+             if [[ "${secure_execution}" != "0" ]]; then
+                 cryptsetup resize --key-file=/etc/luks/root "${DM_NAME}"
+             else
+                 clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
+             fi
             )
             ;;
         # already checked

From ecc9497d61e43c98b1c8656cadd42328ff5889bc Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 14 Apr 2022 18:06:22 +0200
Subject: [PATCH 1048/2157] coreos-ignition-firstboot-complete: call 'rdcore
 zipl' instead of 'zipl'

This brings Secure Execution support.

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../usr/libexec/coreos-ignition-firstboot-complete       | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
index 3973d11e04..e1963f08d8 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-firstboot-complete
@@ -3,10 +3,6 @@ set -euo pipefail
 
 mount -o remount,rw /boot
 
-if [[ $(uname -m) = s390x ]]; then
-    zipl
-fi
-
 # We're done provisioning. Remove the whole /boot/ignition directory if present,
 # which may include a baked Ignition config. See
 # https://github.com/coreos/fedora-coreos-tracker/issues/889.
@@ -16,3 +12,8 @@ rm -rf /boot/ignition
 # this file. Fail if we are unable to remove it, rather than risking rerunning
 # Ignition at next boot.
 rm /boot/ignition.firstboot
+
+# rdcore zipl checks for /boot/ignition.firstboot
+if [[ $(uname -m) = s390x ]]; then
+    /usr/lib/dracut/modules.d/50rdcore/rdcore zipl --boot-mount=/boot
+fi

From b7e8b8d659ab7ff1556d577a1074523028ec6dda Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Tue, 28 Jun 2022 08:37:09 +0200
Subject: [PATCH 1049/2157] s390x: update manifest-lock

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 manifest-lock.s390x.json | 144 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 144 insertions(+)

diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9e67454eff..6eaf6df5e8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -285,6 +285,9 @@
     "fedora-repos-ostree": {
       "evra": "36-1.noarch"
     },
+    "file": {
+      "evra": "5.41-4.fc36.s390x"
+    },
     "file-libs": {
       "evra": "5.41-4.fc36.s390x"
     },
@@ -360,6 +363,9 @@
     "grep": {
       "evra": "3.7-2.fc36.s390x"
     },
+    "groff-base": {
+      "evra": "1.22.4-9.fc36.s390x"
+    },
     "gzip": {
       "evra": "1.11-3.fc36.s390x"
     },
@@ -900,6 +906,141 @@
     "pcre2-syntax": {
       "evra": "10.40-1.fc36.noarch"
     },
+    "perl-Carp": {
+      "evra": "1.52-479.fc36.noarch"
+    },
+    "perl-Class-Struct": {
+      "evra": "0.66-486.fc36.noarch"
+    },
+    "perl-DynaLoader": {
+      "evra": "1.50-486.fc36.s390x"
+    },
+    "perl-Encode": {
+      "evra": "4:3.17-485.fc36.s390x"
+    },
+    "perl-English": {
+      "evra": "1.11-486.fc36.noarch"
+    },
+    "perl-Errno": {
+      "evra": "1.33-486.fc36.s390x"
+    },
+    "perl-Exporter": {
+      "evra": "5.76-480.fc36.noarch"
+    },
+    "perl-Fcntl": {
+      "evra": "1.14-486.fc36.s390x"
+    },
+    "perl-File-Basename": {
+      "evra": "2.85-486.fc36.noarch"
+    },
+    "perl-File-Path": {
+      "evra": "2.18-479.fc36.noarch"
+    },
+    "perl-File-Temp": {
+      "evra": "1:0.231.100-479.fc36.noarch"
+    },
+    "perl-File-stat": {
+      "evra": "1.09-486.fc36.noarch"
+    },
+    "perl-Getopt-Long": {
+      "evra": "1:2.52-479.fc36.noarch"
+    },
+    "perl-Getopt-Std": {
+      "evra": "1.13-486.fc36.noarch"
+    },
+    "perl-HTTP-Tiny": {
+      "evra": "0.080-2.fc36.noarch"
+    },
+    "perl-IO": {
+      "evra": "1.46-486.fc36.s390x"
+    },
+    "perl-IPC-Open3": {
+      "evra": "1.21-486.fc36.noarch"
+    },
+    "perl-MIME-Base64": {
+      "evra": "3.16-479.fc36.s390x"
+    },
+    "perl-POSIX": {
+      "evra": "1.97-486.fc36.s390x"
+    },
+    "perl-PathTools": {
+      "evra": "3.80-479.fc36.s390x"
+    },
+    "perl-Pod-Escapes": {
+      "evra": "1:1.07-479.fc36.noarch"
+    },
+    "perl-Pod-Perldoc": {
+      "evra": "3.28.01-480.fc36.noarch"
+    },
+    "perl-Pod-Simple": {
+      "evra": "1:3.43-3.fc36.noarch"
+    },
+    "perl-Pod-Usage": {
+      "evra": "4:2.01-479.fc36.noarch"
+    },
+    "perl-Scalar-List-Utils": {
+      "evra": "5:1.62-464.fc36.s390x"
+    },
+    "perl-SelectSaver": {
+      "evra": "1.02-486.fc36.noarch"
+    },
+    "perl-Socket": {
+      "evra": "4:2.033-1.fc36.s390x"
+    },
+    "perl-Storable": {
+      "evra": "1:3.25-2.fc36.s390x"
+    },
+    "perl-Symbol": {
+      "evra": "1.09-486.fc36.noarch"
+    },
+    "perl-Term-ANSIColor": {
+      "evra": "5.01-480.fc36.noarch"
+    },
+    "perl-Term-Cap": {
+      "evra": "1.17-479.fc36.noarch"
+    },
+    "perl-Text-ParseWords": {
+      "evra": "3.31-1.fc36.noarch"
+    },
+    "perl-Text-Tabs+Wrap": {
+      "evra": "2021.0814-2.fc36.noarch"
+    },
+    "perl-Time-Local": {
+      "evra": "2:1.300-479.fc36.noarch"
+    },
+    "perl-constant": {
+      "evra": "1.33-480.fc36.noarch"
+    },
+    "perl-if": {
+      "evra": "0.60.900-486.fc36.noarch"
+    },
+    "perl-interpreter": {
+      "evra": "4:5.34.1-486.fc36.s390x"
+    },
+    "perl-libs": {
+      "evra": "4:5.34.1-486.fc36.s390x"
+    },
+    "perl-mro": {
+      "evra": "1.25-486.fc36.s390x"
+    },
+    "perl-overload": {
+      "evra": "1.33-486.fc36.noarch"
+    },
+    "perl-overloading": {
+      "evra": "0.02-486.fc36.noarch"
+    },
+    "perl-parent": {
+      "evra": "1:0.238-479.fc36.noarch"
+    },
+    "perl-podlators": {
+      "evra": "1:4.14-479.fc36.noarch"
+    },
+    "perl-subs": {
+      "evra": "1.04-486.fc36.noarch"
+    },
+    "perl-vars": {
+      "evra": "1.05-486.fc36.noarch"
+    },
     "pigz": {
       "evra": "2.7-1.fc36.s390x"
     },
@@ -975,6 +1116,9 @@
     "runc": {
       "evra": "2:1.1.1-1.fc36.s390x"
     },
+    "s390utils-base": {
+      "evra": "2:2.20.0-1.fc36.s390x"
+    },
     "s390utils-core": {
       "evra": "2:2.20.0-1.fc36.s390x"
     },

From b4c81c4b6e95bec52b2c5cda750df63f3ff7be6f Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Tue, 22 Feb 2022 17:10:51 +0100
Subject: [PATCH 1050/2157] overlay.d: add service to check for unique-boot
 after ignition

After ignition's stages partition table could be modified, and therefore
kernel may have an old picture of disks and partitions. During verification
we force kernel to reread the partition table for each disk and call udevsettle,
which in turn leads to modification of "/dev/disk/by-*/*" symlinks and systemd
may send SIGTERM to services with "Require=dev-disk-by\x2dlabel-boot.device".
To avoid that this checks for the unique fs labeled 'boot' after ignition's
disks stage was finished but before mounting stage.

Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1105

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../coreos-ignition-unique-boot.service       | 19 +++++++++++++++++++
 .../35coreos-ignition/module-setup.sh         |  1 +
 2 files changed, 20 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service
new file mode 100644
index 0000000000..fb56661caf
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=CoreOS Ensure Unique Boot Filesystem
+ConditionPathExists=/etc/initrd-release
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+# That's a weak dependency, so service won't fail if boot dissaperears
+Wants=dev-disk-by\x2dlabel-boot.device
+After=dev-disk-by\x2dlabel-boot.device
+
+# Start after ignition has finished with disks but before mounting them
+After=ignition-disks.service
+Before=ignition-mount.service
+Before=ignition-ostree-uuid-root.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/rdcore verify-unique-fs-label --rereadpt boot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index d71093186c..02e16bca68 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -64,6 +64,7 @@ install() {
     install_ignition_unit "coreos-boot-edit.service" \
         "ignition-diskful.target"
 
+    install_ignition_unit coreos-ignition-unique-boot.service ignition-diskful.target
     install_ignition_unit coreos-unique-boot.service ignition-diskful.target
     install_ignition_unit coreos-ignition-setup-user.service
 }

From 1c61389570dc9afc2f36a41843829c27a3481794 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 21 Jun 2022 12:10:51 -0400
Subject: [PATCH 1051/2157] ci/buildroot: install rpm-ostree test deps

Right now, the buildroot image only includes build deps. It's natural to
want to include test deps in there too so that devs can both build and
test.

Add a new file which lists URLs to upstream project files containing
test dependencies. Switch rpm-ostree to use that.

Delete entries for packages that are covered by the rpm-ostree test
deps.
---
 ci/buildroot/buildroot-reqs.txt   |  7 ++-----
 ci/buildroot/install-buildroot.sh | 13 ++++++++++---
 ci/buildroot/testdeps.txt         |  2 ++
 3 files changed, 14 insertions(+), 8 deletions(-)
 create mode 100644 ci/buildroot/testdeps.txt

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index fdacd64c8b..54bec118f7 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -37,12 +37,9 @@ jq
 # For golang projects like mantle and gangplank
 golang
 
-# Used by ostree/rpm-ostree CI (TODO: add to something like TestBuildRequires in spec files)
+# Used by ostree tests (TODO: add to something like TestBuildRequires in spec files)
 attr
-rsync
-python3-pyyaml
-parallel gjs
-createrepo_c
+gjs
 
 # Also, add clang since it's useful at least in CI for C/C++ projects
 clang lld
diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
index ab13d5c76f..6de1d78a57 100755
--- a/ci/buildroot/install-buildroot.sh
+++ b/ci/buildroot/install-buildroot.sh
@@ -1,10 +1,11 @@
 #!/bin/bash
 set -euo pipefail
 
-dn=$(dirname "$0")
-
 # This is invoked by Dockerfile
 
+dn=$(dirname "$0")
+tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
+
 echo "Installing base build requirements"
 dnf -y install /usr/bin/xargs 'dnf-command(builddep)'
 deps=$(grep -v '^#' "${dn}"/buildroot-reqs.txt)
@@ -16,8 +17,14 @@ echo "${brs}" | xargs dnf -y builddep
 
 echo "Installing build dependencies from canonical spec files"
 specs=$(grep -v '^#' "${dn}"/buildroot-specs.txt)
-tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
 (cd "${tmpd}" && echo "${specs}" | xargs curl -L --remote-name-all)
 (cd "${tmpd}" && find . -type f -print0 | xargs -0 dnf -y builddep --spec)
+rm -rf "${tmpd:?}"/*
+
+echo "Installing test dependencies from canonical upstream files"
+testdep_urls=$(grep -v '^#' "${dn}"/testdeps.txt)
+(cd "${tmpd}" && echo "${testdep_urls}" | xargs curl -L --remote-name-all)
+grep -hrv '^#' "${tmpd}" | xargs dnf -y install
+rm -rf "${tmpd:?}"/*
 
 echo 'Done!'
diff --git a/ci/buildroot/testdeps.txt b/ci/buildroot/testdeps.txt
new file mode 100644
index 0000000000..59f7a716b1
--- /dev/null
+++ b/ci/buildroot/testdeps.txt
@@ -0,0 +1,2 @@
+# for projects which have their canonical list of test deps upstream
+https://raw.githubusercontent.com/coreos/rpm-ostree/main/ci/testdeps.txt

From 3bf12af6d040e6789683cb4cc3eab8e04c2a10b6 Mon Sep 17 00:00:00 2001
From: LakshmiRavichandran1 <Lakshmi.Ravichandran1@ibm.com>
Date: Tue, 28 Jun 2022 23:04:58 +0200
Subject: [PATCH 1052/2157] denylist:
 ext.config.files.file-directory-permissions on s390x

some files added by s390utils base have write permission by default.
we need to denylist now and later the package be skipped once we have https://github.com/coreos/fedora-coreos-tracker/issues/1217.
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f17516b662..5de94e630a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -52,3 +52,7 @@
   - aarch64
   streams:
   - rawhide
+- pattern: ext.config.files.file-directory-permissions
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1243
+  arches:
+  - s390x

From e5cc18c41f5086dd42edcd9cf14d08e127b61e3b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 29 Jun 2022 22:23:38 +0000
Subject: [PATCH 1053/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/301/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 3 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7d0bb2ebad..285b6c0aeb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -268,7 +268,7 @@
       "evra": "0.187-4.fc36.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.17-1.fc36.aarch64"
+      "evra": "2:5.18-1.fc36.aarch64"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.aarch64"
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-2.fc36.aarch64"
+      "evra": "1.12.7-3.fc36.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.aarch64"
@@ -862,7 +862,7 @@
       "evra": "2:0.6.0-3.fc36.aarch64"
     },
     "mozjs91": {
-      "evra": "91.10.0-1.fc36.aarch64"
+      "evra": "91.11.0-1.fc36.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-26T14:57:23Z",
+    "generated": "2022-06-29T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-24T15:05:56Z"
+        "generated": "2022-06-28T13:39:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-26T01:00:45Z"
+        "generated": "2022-06-29T01:58:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6eaf6df5e8..46246e4fde 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -256,7 +256,7 @@
       "evra": "0.187-4.fc36.s390x"
     },
     "ethtool": {
-      "evra": "2:5.17-1.fc36.s390x"
+      "evra": "2:5.18-1.fc36.s390x"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.s390x"
@@ -298,7 +298,7 @@
       "evra": "1:4.9.0-1.fc36.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-2.fc36.s390x"
+      "evra": "1.12.7-3.fc36.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.s390x"
@@ -805,7 +805,7 @@
       "evra": "20.10.17-2.fc36.s390x"
     },
     "mozjs91": {
-      "evra": "91.10.0-1.fc36.s390x"
+      "evra": "91.11.0-1.fc36.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.s390x"
@@ -1298,16 +1298,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-26T14:57:19Z",
+    "generated": "2022-06-29T20:52:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-24T15:05:48Z"
+        "generated": "2022-06-28T13:39:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-26T01:00:59Z"
+        "generated": "2022-06-29T01:59:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0355c06b0a..0fef82cdf3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -268,7 +268,7 @@
       "evra": "0.187-4.fc36.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.17-1.fc36.x86_64"
+      "evra": "2:5.18-1.fc36.x86_64"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.x86_64"
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-2.fc36.x86_64"
+      "evra": "1.12.7-3.fc36.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.x86_64"
@@ -874,7 +874,7 @@
       "evra": "2:0.6.0-3.fc36.x86_64"
     },
     "mozjs91": {
-      "evra": "91.10.0-1.fc36.x86_64"
+      "evra": "91.11.0-1.fc36.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-26T14:56:51Z",
+    "generated": "2022-06-29T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-24T15:06:50Z"
+        "generated": "2022-06-28T13:40:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-26T01:01:05Z"
+        "generated": "2022-06-29T01:59:16Z"
       }
     }
   }

From 5755b9cf4557a85ea1e90eddb2790adbd349bc88 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Thu, 30 Jun 2022 13:47:36 +0200
Subject: [PATCH 1054/2157] tests/kola: Run qemu emulation test only in fcos

RHEL does not support emulation of other arches.

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/binfmt/qemu | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 674c108400..33bf0e45fd 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,8 +1,8 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "exclusive": false, "tags": "needs-internet", "architectures": "aarch64 s390x"}
+# kola: {"platforms": "qemu", "exclusive": false, "tags": "needs-internet", "distros": "fcos", "architectures": "aarch64 s390x"}
 # Test the x86_64 emulator on aarch64 and s390x images for now
 # https://github.com/coreos/fedora-coreos-tracker/issues/1237
-# 
+#
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
 # - exclusive: false
@@ -10,6 +10,8 @@
 #     should be able to be combined with other tests.
 # - tags: needs-internet
 #   - This test pulls a container from a registry.
+# - distros:
+#   - Only run on fcos, as rhel does not support emulation
 # - architectures: aarch64 s390x
 #   - We decided to ship x86_64 emulator to only these arches for now.
 #   - Refer to the above referenced issue for more details
@@ -21,8 +23,8 @@ set -xeuo pipefail
 case "$(arch)" in
     aarch64|s390x)
         containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:36 arch)
-        if [ "$containerArch" != "x86_64" ]; then 
-            fatal "Test failed: x86_64 qemu emulator failed to run" 
+        if [ "$containerArch" != "x86_64" ]; then
+            fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
         ok "Test passed: x86_64 qemu emulator works on $(arch)" ;;
     *)

From 375871ec3c454a1ed5495ebabdcf30e07b7ffb33 Mon Sep 17 00:00:00 2001
From: Steven Presti <prestist@gmail.com>
Date: Wed, 15 Jun 2022 13:39:58 -0400
Subject: [PATCH 1055/2157] add kola test to assert initrd files exist

---
 tests/kola/files/expected-initrd-files | 29 ++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100755 tests/kola/files/expected-initrd-files

diff --git a/tests/kola/files/expected-initrd-files b/tests/kola/files/expected-initrd-files
new file mode 100755
index 0000000000..ccbce6b9c7
--- /dev/null
+++ b/tests/kola/files/expected-initrd-files
@@ -0,0 +1,29 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+
+# This test runs on both, FCOS&RHCOS. The initrd includes specific files which,  
+# if omitted from the image will cause some failures with certain ingnition
+# configurations. This test doesnt assert the functionality of any files, it
+# simply gives a high level check to see if the files are available. 
+# See https://github.com/coreos/fedora-coreos-config/issues/1775
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+ 
+required_initrd_files=(
+    "/usr/lib/udev/rules.d/66-azure-storage.rules"
+    "/usr/lib/udev/rules.d/99-azure-product-uuid.rules"
+)
+
+tmpd=$(mktemp -d)
+trap "rm -r ${tmpd}" EXIT
+( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
+
+for file in ${required_initrd_files[@]}; do
+    if [ ! -e "${tmpd}/${file}" ]; then 
+        fatal "${file} was not found in initrd"
+    fi
+done
+
+ok "Found expected initrd files"

From 4a08db6984a23183b188fcb8961aaabdae1e8e9e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 3 Jul 2022 22:22:56 +0000
Subject: [PATCH 1056/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/305/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 3 files changed, 49 insertions(+), 49 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 285b6c0aeb..182a4aa3df 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.187.0-1.fc36.noarch"
+      "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.6-1.fc36.aarch64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-5.fc36.aarch64"
+      "evra": "7.82.0-6.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.aarch64"
@@ -325,7 +325,7 @@
       "evra": "2.9.9-14.fc36.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.8.1-3.fc36.aarch64"
+      "evra": "1.9-1.fc36.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.6-200.fc36.aarch64"
+      "evra": "5.18.7-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.6-200.fc36.aarch64"
+      "evra": "5.18.7-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.6-200.fc36.aarch64"
+      "evra": "5.18.7-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -547,7 +547,7 @@
       "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.82.0-5.fc36.aarch64"
+      "evra": "7.82.0-6.fc36.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.aarch64"
@@ -658,7 +658,7 @@
       "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc7.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc8.fc36.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.aarch64"
@@ -895,7 +895,7 @@
       "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc7.fc36.aarch64"
+      "evra": "1:2.6.1-2.rc8.fc36.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.aarch64"
@@ -916,10 +916,10 @@
       "evra": "6.9.8-1.fc36.aarch64"
     },
     "openldap": {
-      "evra": "2.6.2-1.fc36.aarch64"
+      "evra": "2.6.2-2.fc36.aarch64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-1.fc36.aarch64"
+      "evra": "2.6.2-2.fc36.aarch64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.5085-1.fc36.noarch"
+      "evra": "2:8.2.5172-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5085-1.fc36.aarch64"
+      "evra": "2:8.2.5172-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-29T20:53:01Z",
+    "generated": "2022-07-03T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-28T13:39:32Z"
+        "generated": "2022-06-29T22:27:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-29T01:58:56Z"
+        "generated": "2022-07-03T01:00:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 46246e4fde..a75e1c9acc 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -130,7 +130,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.187.0-1.fc36.noarch"
+      "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.6-1.fc36.s390x"
@@ -181,7 +181,7 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "curl": {
-      "evra": "7.82.0-5.fc36.s390x"
+      "evra": "7.82.0-6.fc36.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.s390x"
@@ -313,7 +313,7 @@
       "evra": "2.9.9-14.fc36.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.8.1-3.fc36.s390x"
+      "evra": "1.9-1.fc36.s390x"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.s390x"
@@ -433,13 +433,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.6-200.fc36.s390x"
+      "evra": "5.18.7-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.6-200.fc36.s390x"
+      "evra": "5.18.7-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.6-200.fc36.s390x"
+      "evra": "5.18.7-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -514,7 +514,7 @@
       "evra": "1.46.5-2.fc36.s390x"
     },
     "libcurl": {
-      "evra": "7.82.0-5.fc36.s390x"
+      "evra": "7.82.0-6.fc36.s390x"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.s390x"
@@ -610,7 +610,7 @@
       "evra": "1.0.1-21.fc36.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc7.fc36.s390x"
+      "evra": "1:2.6.1-2.rc8.fc36.s390x"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.s390x"
@@ -838,7 +838,7 @@
       "evra": "0.52.21-12.fc36.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc7.fc36.s390x"
+      "evra": "1:2.6.1-2.rc8.fc36.s390x"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.s390x"
@@ -856,10 +856,10 @@
       "evra": "6.9.8-1.fc36.s390x"
     },
     "openldap": {
-      "evra": "2.6.2-1.fc36.s390x"
+      "evra": "2.6.2-2.fc36.s390x"
     },
     "openldap-compat": {
-      "evra": "2.6.2-1.fc36.s390x"
+      "evra": "2.6.2-2.fc36.s390x"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.s390x"
@@ -985,7 +985,7 @@
       "evra": "1.02-486.fc36.noarch"
     },
     "perl-Socket": {
-      "evra": "4:2.033-1.fc36.s390x"
+      "evra": "4:2.034-1.fc36.s390x"
     },
     "perl-Storable": {
       "evra": "1:3.25-2.fc36.s390x"
@@ -1258,10 +1258,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:8.2.5085-1.fc36.noarch"
+      "evra": "2:8.2.5172-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5085-1.fc36.s390x"
+      "evra": "2:8.2.5172-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1298,16 +1298,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-29T20:52:56Z",
+    "generated": "2022-07-03T20:53:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-28T13:39:48Z"
+        "generated": "2022-06-29T22:26:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-29T01:59:11Z"
+        "generated": "2022-07-03T01:00:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0fef82cdf3..33e39d316e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -133,7 +133,7 @@
       "evra": "0.21.2-4.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.187.0-1.fc36.noarch"
+      "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.6-1.fc36.x86_64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-5.fc36.x86_64"
+      "evra": "7.82.0-6.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.x86_64"
@@ -325,7 +325,7 @@
       "evra": "2.9.9-14.fc36.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.8.1-3.fc36.x86_64"
+      "evra": "1.9-1.fc36.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.6-200.fc36.x86_64"
+      "evra": "5.18.7-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.6-200.fc36.x86_64"
+      "evra": "5.18.7-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.6-200.fc36.x86_64"
+      "evra": "5.18.7-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -553,7 +553,7 @@
       "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.82.0-5.fc36.x86_64"
+      "evra": "7.82.0-6.fc36.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.x86_64"
@@ -664,7 +664,7 @@
       "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc7.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc8.fc36.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.x86_64"
@@ -907,7 +907,7 @@
       "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc7.fc36.x86_64"
+      "evra": "1:2.6.1-2.rc8.fc36.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.x86_64"
@@ -928,10 +928,10 @@
       "evra": "6.9.8-1.fc36.x86_64"
     },
     "openldap": {
-      "evra": "2.6.2-1.fc36.x86_64"
+      "evra": "2.6.2-2.fc36.x86_64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-1.fc36.x86_64"
+      "evra": "2.6.2-2.fc36.x86_64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.5085-1.fc36.noarch"
+      "evra": "2:8.2.5172-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5085-1.fc36.x86_64"
+      "evra": "2:8.2.5172-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-06-29T20:52:24Z",
+    "generated": "2022-07-03T20:52:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-28T13:40:16Z"
+        "generated": "2022-06-29T22:27:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-06-29T01:59:16Z"
+        "generated": "2022-07-03T01:00:33Z"
       }
     }
   }

From 267d480610140babd24da6a9e1811d77dbe864e7 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 1 Jul 2022 10:19:35 +0000
Subject: [PATCH 1057/2157] tests/files: checks for FCOS system groups

This performs extensive checks on default FCOS system groups.
---
 tests/kola/files/fcos_groups | 111 +++++++++++++++++++++++++++++++++++
 1 file changed, 111 insertions(+)
 create mode 100755 tests/kola/files/fcos_groups

diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
new file mode 100755
index 0000000000..6174ee6d64
--- /dev/null
+++ b/tests/kola/files/fcos_groups
@@ -0,0 +1,111 @@
+#!/usr/bin/env bash
+# kola: { "distros": "fcos", "exclusive": false }
+#
+# This performs a sanity check on system groups that are shipped
+# as part of the base OS. Those groups come in different shapes
+# (with static or dynamic GIDs, from plain files or from scriptlets)
+# and each case is covered by a corresponding check here below.
+
+set -euo pipefail
+
+. "${KOLA_EXT_DATA}/commonlib.sh"
+
+# Check base system groups (from `setup` package).
+declare -A setup_groups=( \
+    ["root"]="0" \
+    ["bin"]="1" \
+    ["daemon"]="2" \
+    ["sys"]="3" \
+    ["adm"]="4" \
+    ["tty"]="5" \
+    ["disk"]="6" \
+    ["lp"]="7" \
+    ["mem"]="8" \
+    ["kmem"]="9" \
+    ["wheel"]="10" \
+    ["cdrom"]="11" \
+    ["mail"]="12" \
+    ["man"]="15" \
+    ["dialout"]="18" \
+    ["floppy"]="19" \
+    ["games"]="20" \
+# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
+#   ["tape"]="33" \
+    ["tape"]="30" \
+    ["video"]="39" \
+    ["ftp"]="50" \
+    ["lock"]="54" \
+    ["audio"]="63" \
+    ["users"]="100" \
+# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
+#   ["nobody"]="65534" \
+    ["nobody"]="99" \
+)
+for groupname in "${!setup_groups[@]}"; do
+    gid="${setup_groups[$groupname]}";
+    if [[ $(getent group "${groupname}") != ${groupname}:x:${gid}:* ]]; then
+        getent group
+        fatal "failure on setup_groups entry ${groupname}"
+    fi
+done
+echo "all expected base groups from 'setup' package are in place"
+
+# Check additional groups with static GIDs.
+declare -A extra_groups_static=( \
+    ["utmp"]="22" \
+    ["rpcuser"]="29" \
+    ["rpc"]="32" \
+    ["utempter"]="35" \
+    ["dip"]="40" \
+    ["tss"]="59" \
+    ["tcpdump"]="72" \
+    ["sshd"]="74" \
+    ["dbus"]="81" \
+    ["ceph"]="167" \
+    ["avahi-autoipd"]="170" \
+    ["systemd-journal"]="190" \
+)
+for groupname in "${!extra_groups_static[@]}"; do
+    gid="${extra_groups_static[$groupname]}";
+    if [[ $(getent group "${groupname}") != ${groupname}:x:${gid}:* ]]; then
+        getent group
+        fatal "failure on extra_group_static entry ${groupname}"
+    fi
+done
+echo "all expected extra static groups are in place"
+
+# Check CoreOS-specific static GIDs.
+declare -A coreos_groups_static=( \
+    ["sudo"]="16" \
+    ["dockerroot"]="986" \
+    ["cockpit-ws"]="987" \
+    ["systemd-bus-proxy"]="988" \
+    ["systemd-resolve"]="989" \
+    ["systemd-network"]="990" \
+    ["systemd-timesync"]="991" \
+    ["chrony"]="992" \
+    ["sssd"]="993" \
+    ["kube"]="994" \
+    ["input"]="995" \
+    ["cgred"]="996" \
+    ["etcd"]="997" \
+    ["polkitd"]="998" \
+    ["ssh_keys"]="999" \
+    ["nfsnobody"]="65534" \
+)
+for groupname in "${!coreos_groups_static[@]}"; do
+    gid="${coreos_groups_static[$groupname]}";
+    if [[ $(getent group "${groupname}") != ${groupname}:x:${gid}:* ]]; then
+        getent group
+        fatal "failure on coreos_group_static entry ${groupname}"
+    fi
+done
+echo "all expected CoreOS static groups are in place"
+
+# Check a dynamic group (from `clevis` package).
+if [[ $(getent group clevis) != clevis:x:* ]]; then
+    getent group
+    fatal "failure on group 'clevis'"
+fi
+echo "group 'clevis' from 'clevis' package is in place"
+

From 9d0f34691179450cde4975684a0398dc25a6aea4 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 1 Jul 2022 10:24:16 +0000
Subject: [PATCH 1058/2157] manifests/group: drop well-known groups with static
 IDs

This drops some groups that we do not strictly need to override.
All these groups are created by scriptlets in packages, and they
have been allocated a static group ID (GID) in the `uidgid` table.
There is no need to pin those GIDs through manifest files, as the
groupname <-> GID mapping does not change across builds.

Ref: https://pagure.io/setup/blob/master/f/uidgid
---
 manifests/group | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/manifests/group b/manifests/group
index 3ce8c357be..7059acde25 100644
--- a/manifests/group
+++ b/manifests/group
@@ -23,8 +23,6 @@ lock:x:54:
 audio:x:63:
 nobody:x:99:
 users:x:100:
-utmp:x:22:
-utempter:x:35:
 ssh_keys:x:999:
 systemd-journal:x:190:
 dbus:x:81:
@@ -34,13 +32,11 @@ dip:x:40:
 cgred:x:996:
 tss:x:59:
 avahi-autoipd:x:170:
-rpc:x:32:
 sssd:x:993:
 dockerroot:x:986:
 rpcuser:x:29:
 nfsnobody:x:65534:
 kube:x:994:
-sshd:x:74:
 chrony:x:992:
 tcpdump:x:72:
 ceph:x:167:

From 5f8117e9b9bc2c8e7b379daaf3c8f590f0a45abc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Jul 2022 16:02:33 +0000
Subject: [PATCH 1059/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/307/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 3 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 182a4aa3df..1d491ff8f6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-1.fc36.aarch64"
+      "evra": "1.6.6-4.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.7-200.fc36.aarch64"
+      "evra": "5.18.9-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.7-200.fc36.aarch64"
+      "evra": "5.18.9-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.7-200.fc36.aarch64"
+      "evra": "5.18.9-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -856,7 +856,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.17-2.fc36.aarch64"
+      "evra": "20.10.17-3.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.aarch64"
@@ -1165,7 +1165,7 @@
       "evra": "1.31-5.fc36.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-4.fc36.aarch64"
+      "evra": "0.0.99.3-5.fc36.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-03T20:53:05Z",
+    "generated": "2022-07-05T14:32:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-29T22:27:47Z"
+        "generated": "2022-07-03T22:26:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-03T01:00:13Z"
+        "generated": "2022-07-04T01:12:20Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a75e1c9acc..c58e05a16d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-1.fc36.s390x"
+      "evra": "1.6.6-4.fc36.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.s390x"
@@ -433,13 +433,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.7-200.fc36.s390x"
+      "evra": "5.18.9-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.7-200.fc36.s390x"
+      "evra": "5.18.9-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.7-200.fc36.s390x"
+      "evra": "5.18.9-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -802,7 +802,7 @@
       "evra": "4.2-1.fc36.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.17-2.fc36.s390x"
+      "evra": "20.10.17-3.fc36.s390x"
     },
     "mozjs91": {
       "evra": "91.11.0-1.fc36.s390x"
@@ -1237,7 +1237,7 @@
       "evra": "1.31-5.fc36.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.3-4.fc36.s390x"
+      "evra": "0.0.99.3-5.fc36.s390x"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.s390x"
@@ -1298,16 +1298,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-03T20:53:04Z",
+    "generated": "2022-07-05T14:33:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-29T22:26:54Z"
+        "generated": "2022-07-03T22:26:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-03T01:00:28Z"
+        "generated": "2022-07-04T01:12:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 33e39d316e..faa7a685e5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-1.fc36.x86_64"
+      "evra": "1.6.6-4.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.7-200.fc36.x86_64"
+      "evra": "5.18.9-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.7-200.fc36.x86_64"
+      "evra": "5.18.9-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.7-200.fc36.x86_64"
+      "evra": "5.18.9-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -868,7 +868,7 @@
       "evra": "2:2.1-51.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.17-2.fc36.x86_64"
+      "evra": "20.10.17-3.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.x86_64"
@@ -1174,7 +1174,7 @@
       "evra": "1.31-5.fc36.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-4.fc36.x86_64"
+      "evra": "0.0.99.3-5.fc36.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-03T20:52:27Z",
+    "generated": "2022-07-05T14:32:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-06-29T22:27:32Z"
+        "generated": "2022-07-03T22:27:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-03T01:00:33Z"
+        "generated": "2022-07-04T01:12:42Z"
       }
     }
   }

From 11d8b17f1203789b90335069e0dfb5ea2b19bc11 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 6 Jul 2022 10:34:39 -0400
Subject: [PATCH 1060/2157] 35coreos-multipath: improve config propagation
 logging

We were saying "no initramfs automatic multipath configuration to
propagate" even when there was an initramfs config but the file already
existed in the real root. Let's split out those no op conditions more
and log clearer explicit messages.

This should be a purely cosmetic change. Prompted by looking at logging
from this service to debug a multipath-related issue.
---
 .../coreos-propagate-multipath-conf.sh        | 26 ++++++++++++-------
 1 file changed, 17 insertions(+), 9 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
index ebf0113737..eb4440ae6b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
@@ -4,14 +4,22 @@ set -euo pipefail
 # Persist automatic multipath configuration, if any.
 # When booting with `rd.multipath=default`, the default multipath
 # configuration is written. We need to ensure that the multipath configuration
-# is persisted to the final target.
+# is persisted to the rootfs.
 
-if [ ! -f /sysroot/etc/multipath.conf ] && [ -f /etc/multipath.conf ]; then
-    echo "info: propagating automatic multipath configuration"
-    cp -v /etc/multipath.conf /sysroot/etc/
-    mkdir -p /sysroot/etc/multipath/multipath.conf.d
-    coreos-relabel /etc/multipath.conf
-    coreos-relabel /etc/multipath/multipath.conf.d
-else
-    echo "info: no initramfs automatic multipath configuration to propagate"
+if [ ! -f /etc/multipath.conf ]; then
+    echo "info: initrd file /etc/multipath.conf does not exist"
+    echo "info: no initrd multipath configuration to propagate"
+    exit 0
 fi
+
+if [ -f /sysroot/etc/multipath.conf ]; then
+    echo "info: real root file /etc/multipath.conf exists"
+    echo "info: not propagating initrd multipath configuration"
+    exit 0
+fi
+
+echo "info: propagating initrd multipath configuration"
+cp -v /etc/multipath.conf /sysroot/etc/
+mkdir -p /sysroot/etc/multipath/multipath.conf.d
+coreos-relabel /etc/multipath.conf
+coreos-relabel /etc/multipath/multipath.conf.d

From d3a0cf9ce6aafea633f7eedca622b6cf6882007c Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Mon, 4 Jul 2022 09:24:55 +0000
Subject: [PATCH 1061/2157] manifests/group: drop well-known static ID for
 "dbus" group

This drops a redundant override for the "dbus" group.
The group is created by the "dbus-common" package and has a static
group ID (GID) allocated in the `uidgid` table.
Out of an abundance of caution, it also temporarily removes a
buggy sysusers fragment which does not match Fedora allocation.

Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2090397
---
 manifests/fedora-coreos.yaml | 3 +++
 manifests/group              | 1 -
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index a015f413e7..df3640a931 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -94,6 +94,9 @@ remove-from-packages:
   # Drop NetworkManager support for ifcfg files, see also corresponding
   # overlay.d/14NetworkManager-plugins
   - [NetworkManager, /usr/lib64/NetworkManager/.*/libnm-settings-plugin-ifcfg-rh.so]
+  # Drop a buggy configuration fragment which does not match static ID allocation:
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2090397
+  - [dbus-common, /usr/lib/sysusers.d/dbus.conf]
 
 remove-files:
   # We don't ship man(1) or info(1)
diff --git a/manifests/group b/manifests/group
index 7059acde25..de611b997f 100644
--- a/manifests/group
+++ b/manifests/group
@@ -25,7 +25,6 @@ nobody:x:99:
 users:x:100:
 ssh_keys:x:999:
 systemd-journal:x:190:
-dbus:x:81:
 polkitd:x:998:
 etcd:x:997:
 dip:x:40:

From 70ab19c8e219a5c88aec2070c8ac0951112775aa Mon Sep 17 00:00:00 2001
From: Micah Abbott <miabbott@redhat.com>
Date: Thu, 7 Jul 2022 14:02:06 -0400
Subject: [PATCH 1062/2157] coreos-gpt-setup: fix DM_MPATH variable spelling

This was mis-spelled as part of e3309ad07ca959d7acda2f2c95f08ac0b4673018

I believe this is the root cause for the CI failure in
openshift/os#874
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index 3261e2a99e..7f3c225019 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -8,7 +8,7 @@ UNINITIALIZED_GUID='00000000-0000-4000-a000-000000000001'
 
 # If it's on multipath, get the parent device from udev properties.
 # If it's LUKS2 encrypted, UUID woud start with "CRYPT-LUKS2"
-eval $(udevadm info --query property --export "$1" | grep -e DM_NAME -e DM_UUID -e DM_MAPTH)
+eval $(udevadm info --query property --export "$1" | grep -e DM_NAME -e DM_UUID -e DM_MPATH)
 
 if [[ -n "${DM_MPATH:-}" ]]; then
     PKNAME=/dev/mapper/$DM_MPATH

From d1b4184428b5816d06f3c7d59985e7f659b9ade5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Jul 2022 23:57:58 +0000
Subject: [PATCH 1063/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/314/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 46 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 46 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 46 +++++++++++++++++++-------------------
 3 files changed, 69 insertions(+), 69 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1d491ff8f6..b54e0cab9a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.17-4.fc36.aarch64"
+      "evra": "3.17.1-1.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17-4.fc36.aarch64"
+      "evra": "3.17.1-1.fc36.aarch64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.aarch64"
@@ -361,19 +361,19 @@
       "evra": "2.72.2-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-12.fc36.aarch64"
+      "evra": "2.35-14.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-12.fc36.aarch64"
+      "evra": "2.35-14.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-12.fc36.aarch64"
+      "evra": "2.35-14.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.6-1.fc36.aarch64"
+      "evra": "2.3.6-2.fc36.aarch64"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.aarch64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-50.fc36.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.aarch64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.aarch64"
@@ -1108,31 +1108,31 @@
       "evra": "0.1.3-2.fc36.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-2.fc36.aarch64"
+      "evra": "2.7.3-1.fc36.aarch64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-05T14:32:56Z",
+    "generated": "2022-07-07T22:25:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-03T22:26:28Z"
+        "generated": "2022-07-05T16:30:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-04T01:12:20Z"
+        "generated": "2022-07-07T01:05:35Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c58e05a16d..65a6df458e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -163,10 +163,10 @@
       "evra": "2.9.6-28.fc36.s390x"
     },
     "criu": {
-      "evra": "3.17-4.fc36.s390x"
+      "evra": "3.17.1-1.fc36.s390x"
     },
     "criu-libs": {
-      "evra": "3.17-4.fc36.s390x"
+      "evra": "3.17.1-1.fc36.s390x"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.s390x"
@@ -340,19 +340,19 @@
       "evra": "2.72.2-1.fc36.s390x"
     },
     "glibc": {
-      "evra": "2.35-12.fc36.s390x"
+      "evra": "2.35-14.fc36.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-12.fc36.s390x"
+      "evra": "2.35-14.fc36.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-12.fc36.s390x"
+      "evra": "2.35-14.fc36.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.s390x"
     },
     "gnupg2": {
-      "evra": "2.3.6-1.fc36.s390x"
+      "evra": "2.3.6-2.fc36.s390x"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.s390x"
@@ -565,7 +565,7 @@
       "evra": "1.3.1-50.fc36.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "libjose": {
       "evra": "11-5.fc36.s390x"
@@ -694,16 +694,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.s390x"
@@ -1180,31 +1180,31 @@
       "evra": "0.1.3-2.fc36.s390x"
     },
     "sssd-ad": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-client": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-common": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-2.fc36.s390x"
+      "evra": "2.7.3-1.fc36.s390x"
     },
     "stalld": {
       "evra": "1.15-2.fc36.s390x"
@@ -1298,16 +1298,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-05T14:33:01Z",
+    "generated": "2022-07-07T22:25:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-03T22:26:07Z"
+        "generated": "2022-07-05T16:30:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-04T01:12:36Z"
+        "generated": "2022-07-07T01:06:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index faa7a685e5..80f140fd83 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.17-4.fc36.x86_64"
+      "evra": "3.17.1-1.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17-4.fc36.x86_64"
+      "evra": "3.17.1-1.fc36.x86_64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.x86_64"
@@ -361,19 +361,19 @@
       "evra": "2.72.2-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-12.fc36.x86_64"
+      "evra": "2.35-14.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-12.fc36.x86_64"
+      "evra": "2.35-14.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-12.fc36.x86_64"
+      "evra": "2.35-14.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.6-1.fc36.x86_64"
+      "evra": "2.3.6-2.fc36.x86_64"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.x86_64"
@@ -616,7 +616,7 @@
       "evra": "1.3.1-50.fc36.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.x86_64"
@@ -751,16 +751,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "libstdc++": {
       "evra": "12.1.1-1.fc36.x86_64"
@@ -1117,31 +1117,31 @@
       "evra": "0.1.3-2.fc36.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.1-2.fc36.x86_64"
+      "evra": "2.7.3-1.fc36.x86_64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-05T14:32:16Z",
+    "generated": "2022-07-07T22:25:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-03T22:27:03Z"
+        "generated": "2022-07-05T16:31:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-04T01:12:42Z"
+        "generated": "2022-07-07T01:06:11Z"
       }
     }
   }

From f3cbb35c669d512bd297f4173b2d6c6bd3c593ed Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Fri, 8 Jul 2022 08:17:43 +0200
Subject: [PATCH 1064/2157] s390x: drop 's390utils-base'

This package provides the `genprotimg` tool, but also depends on `perl-*` rpms,
which we don't want to be part of the image. As long as IBM Secure Execution
is targeted for RHCOS we can drop its support in FCOS for now.
RHCOS comes with a lot of `perl-*` rpms, so there `s390utils-base` wouldn't
bring new unwanted dependencies. For custom FCOS builds it's easier to:
```
$ mkdir -p overrides/rootfs/usr/bin/
$ mkdir -p overrides/rootfs/usr/share/s390-tools/genprotimg
$ cp /path/to/genprotimg overrides/rootfs/usr/bin/
$ cp /path/to/stage3a.bin overrides/rootfs/usr/share/s390-tools/genprotimg/
$ cp /path/to/stage3b_reloc.bin overrides/rootfs/usr/share/s390-tools/genprotimg/
```

https://github.com/coreos/fedora-coreos-tracker/issues/1217

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 manifest-lock.s390x.json           | 144 -----------------------------
 manifests/bootable-rpm-ostree.yaml |   1 -
 2 files changed, 145 deletions(-)

diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 65a6df458e..e279ac8528 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -285,9 +285,6 @@
     "fedora-repos-ostree": {
       "evra": "36-1.noarch"
     },
-    "file": {
-      "evra": "5.41-4.fc36.s390x"
-    },
     "file-libs": {
       "evra": "5.41-4.fc36.s390x"
     },
@@ -363,9 +360,6 @@
     "grep": {
       "evra": "3.7-2.fc36.s390x"
     },
-    "groff-base": {
-      "evra": "1.22.4-9.fc36.s390x"
-    },
     "gzip": {
       "evra": "1.11-3.fc36.s390x"
     },
@@ -906,141 +900,6 @@
     "pcre2-syntax": {
       "evra": "10.40-1.fc36.noarch"
     },
-    "perl-Carp": {
-      "evra": "1.52-479.fc36.noarch"
-    },
-    "perl-Class-Struct": {
-      "evra": "0.66-486.fc36.noarch"
-    },
-    "perl-DynaLoader": {
-      "evra": "1.50-486.fc36.s390x"
-    },
-    "perl-Encode": {
-      "evra": "4:3.17-485.fc36.s390x"
-    },
-    "perl-English": {
-      "evra": "1.11-486.fc36.noarch"
-    },
-    "perl-Errno": {
-      "evra": "1.33-486.fc36.s390x"
-    },
-    "perl-Exporter": {
-      "evra": "5.76-480.fc36.noarch"
-    },
-    "perl-Fcntl": {
-      "evra": "1.14-486.fc36.s390x"
-    },
-    "perl-File-Basename": {
-      "evra": "2.85-486.fc36.noarch"
-    },
-    "perl-File-Path": {
-      "evra": "2.18-479.fc36.noarch"
-    },
-    "perl-File-Temp": {
-      "evra": "1:0.231.100-479.fc36.noarch"
-    },
-    "perl-File-stat": {
-      "evra": "1.09-486.fc36.noarch"
-    },
-    "perl-Getopt-Long": {
-      "evra": "1:2.52-479.fc36.noarch"
-    },
-    "perl-Getopt-Std": {
-      "evra": "1.13-486.fc36.noarch"
-    },
-    "perl-HTTP-Tiny": {
-      "evra": "0.080-2.fc36.noarch"
-    },
-    "perl-IO": {
-      "evra": "1.46-486.fc36.s390x"
-    },
-    "perl-IPC-Open3": {
-      "evra": "1.21-486.fc36.noarch"
-    },
-    "perl-MIME-Base64": {
-      "evra": "3.16-479.fc36.s390x"
-    },
-    "perl-POSIX": {
-      "evra": "1.97-486.fc36.s390x"
-    },
-    "perl-PathTools": {
-      "evra": "3.80-479.fc36.s390x"
-    },
-    "perl-Pod-Escapes": {
-      "evra": "1:1.07-479.fc36.noarch"
-    },
-    "perl-Pod-Perldoc": {
-      "evra": "3.28.01-480.fc36.noarch"
-    },
-    "perl-Pod-Simple": {
-      "evra": "1:3.43-3.fc36.noarch"
-    },
-    "perl-Pod-Usage": {
-      "evra": "4:2.01-479.fc36.noarch"
-    },
-    "perl-Scalar-List-Utils": {
-      "evra": "5:1.62-464.fc36.s390x"
-    },
-    "perl-SelectSaver": {
-      "evra": "1.02-486.fc36.noarch"
-    },
-    "perl-Socket": {
-      "evra": "4:2.034-1.fc36.s390x"
-    },
-    "perl-Storable": {
-      "evra": "1:3.25-2.fc36.s390x"
-    },
-    "perl-Symbol": {
-      "evra": "1.09-486.fc36.noarch"
-    },
-    "perl-Term-ANSIColor": {
-      "evra": "5.01-480.fc36.noarch"
-    },
-    "perl-Term-Cap": {
-      "evra": "1.17-479.fc36.noarch"
-    },
-    "perl-Text-ParseWords": {
-      "evra": "3.31-1.fc36.noarch"
-    },
-    "perl-Text-Tabs+Wrap": {
-      "evra": "2021.0814-2.fc36.noarch"
-    },
-    "perl-Time-Local": {
-      "evra": "2:1.300-479.fc36.noarch"
-    },
-    "perl-constant": {
-      "evra": "1.33-480.fc36.noarch"
-    },
-    "perl-if": {
-      "evra": "0.60.900-486.fc36.noarch"
-    },
-    "perl-interpreter": {
-      "evra": "4:5.34.1-486.fc36.s390x"
-    },
-    "perl-libs": {
-      "evra": "4:5.34.1-486.fc36.s390x"
-    },
-    "perl-mro": {
-      "evra": "1.25-486.fc36.s390x"
-    },
-    "perl-overload": {
-      "evra": "1.33-486.fc36.noarch"
-    },
-    "perl-overloading": {
-      "evra": "0.02-486.fc36.noarch"
-    },
-    "perl-parent": {
-      "evra": "1:0.238-479.fc36.noarch"
-    },
-    "perl-podlators": {
-      "evra": "1:4.14-479.fc36.noarch"
-    },
-    "perl-subs": {
-      "evra": "1.04-486.fc36.noarch"
-    },
-    "perl-vars": {
-      "evra": "1.05-486.fc36.noarch"
-    },
     "pigz": {
       "evra": "2.7-1.fc36.s390x"
     },
@@ -1116,9 +975,6 @@
     "runc": {
       "evra": "2:1.1.1-1.fc36.s390x"
     },
-    "s390utils-base": {
-      "evra": "2:2.20.0-1.fc36.s390x"
-    },
     "s390utils-core": {
       "evra": "2:2.20.0-1.fc36.s390x"
     },
diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 8c41320cd4..4fd63c0faf 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -28,7 +28,6 @@ packages-s390x:
   # On Fedora, this is provided by s390utils-core. on RHEL, this is for now
   # provided by s390utils-base, but soon will be -core too.
   - /usr/sbin/zipl
-  - /usr/bin/genprotimg
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl

From 32699307baf04b16d4cf4bfe7c32d68237916a1b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 8 Jul 2022 11:30:01 -0400
Subject: [PATCH 1065/2157] denylist: extend snooze for ext.config.binfmt.qemu
 on rawhide/aarch64

It's still failing. Will try to followup with upstream.

See https://github.com/coreos/fedora-coreos-tracker/issues/1241
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5de94e630a..b22bd01bdd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -47,7 +47,7 @@
   - rawhide
 - pattern: ext.config.binfmt.qemu
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
-  snooze: 2022-07-06
+  snooze: 2022-07-14
   arches:
   - aarch64
   streams:

From b4304f4f895ed79ea69a0968b50c90cc8559cd0b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 8 Jul 2022 11:34:17 -0400
Subject: [PATCH 1066/2157] denylist: remove
 ext.config.files.file-directory-permissions denial

We temporarily reverted the inclusion of s390utils-base in f3cbb35
while we work on fixing up the packaging so we don't get a bunch of
extra things we don't want/need.

That means we should be able to drop this denial as well.
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b22bd01bdd..d36525464d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -52,7 +52,3 @@
   - aarch64
   streams:
   - rawhide
-- pattern: ext.config.files.file-directory-permissions
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1243
-  arches:
-  - s390x

From a4a073efa49cec2ad71700e8e92c8075138638b9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Jul 2022 22:07:58 +0000
Subject: [PATCH 1067/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/317/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 3 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b54e0cab9a..e86ab2e0fa 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,7 +358,7 @@
       "evra": "2.36.1-1.fc36.aarch64"
     },
     "glib2": {
-      "evra": "2.72.2-1.fc36.aarch64"
+      "evra": "2.72.3-1.fc36.aarch64"
     },
     "glibc": {
       "evra": "2.35-14.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.9-200.fc36.aarch64"
+      "evra": "5.18.10-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.9-200.fc36.aarch64"
+      "evra": "5.18.10-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.9-200.fc36.aarch64"
+      "evra": "5.18.10-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -931,10 +931,10 @@
       "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.3-1.fc36.aarch64"
+      "evra": "1:3.0.5-1.fc36.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.3-1.fc36.aarch64"
+      "evra": "1:3.0.5-1.fc36.aarch64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-07T22:25:59Z",
+    "generated": "2022-07-09T20:53:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-05T16:30:45Z"
+        "generated": "2022-07-08T00:05:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-07T01:05:35Z"
+        "generated": "2022-07-09T01:04:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e279ac8528..4a6c58137f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -334,7 +334,7 @@
       "evra": "2.36.1-1.fc36.s390x"
     },
     "glib2": {
-      "evra": "2.72.2-1.fc36.s390x"
+      "evra": "2.72.3-1.fc36.s390x"
     },
     "glibc": {
       "evra": "2.35-14.fc36.s390x"
@@ -427,13 +427,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.9-200.fc36.s390x"
+      "evra": "5.18.10-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.9-200.fc36.s390x"
+      "evra": "5.18.10-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.9-200.fc36.s390x"
+      "evra": "5.18.10-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -865,10 +865,10 @@
       "evra": "8.8p1-1.fc36.1.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.3-1.fc36.s390x"
+      "evra": "1:3.0.5-1.fc36.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.3-1.fc36.s390x"
+      "evra": "1:3.0.5-1.fc36.s390x"
     },
     "ostree": {
       "evra": "2022.4-2.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-07T22:25:14Z",
+    "generated": "2022-07-09T20:52:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-05T16:30:51Z"
+        "generated": "2022-07-08T00:04:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-07T01:06:06Z"
+        "generated": "2022-07-09T01:05:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 80f140fd83..31a92249b5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,7 +358,7 @@
       "evra": "2.36.1-1.fc36.x86_64"
     },
     "glib2": {
-      "evra": "2.72.2-1.fc36.x86_64"
+      "evra": "2.72.3-1.fc36.x86_64"
     },
     "glibc": {
       "evra": "2.35-14.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.9-200.fc36.x86_64"
+      "evra": "5.18.10-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.9-200.fc36.x86_64"
+      "evra": "5.18.10-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.9-200.fc36.x86_64"
+      "evra": "5.18.10-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -943,10 +943,10 @@
       "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.3-1.fc36.x86_64"
+      "evra": "1:3.0.5-1.fc36.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.3-1.fc36.x86_64"
+      "evra": "1:3.0.5-1.fc36.x86_64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-07T22:25:18Z",
+    "generated": "2022-07-09T20:52:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-05T16:31:24Z"
+        "generated": "2022-07-08T00:06:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-07T01:06:11Z"
+        "generated": "2022-07-09T01:05:31Z"
       }
     }
   }

From 2922bb60d71196f0c2c7bab5666ab5c1c2cb31e8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 10 Jul 2022 22:10:42 +0000
Subject: [PATCH 1068/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/318/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e86ab2e0fa..92e0d18122 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.38.0-2.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.5.0.2-2.fc36.noarch"
+      "evra": "2.7.1.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-09T20:53:01Z",
+    "generated": "2022-07-10T20:53:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-08T00:05:03Z"
+        "generated": "2022-07-09T22:10:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-09T01:04:56Z"
+        "generated": "2022-07-10T00:30:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4a6c58137f..a9fd9ffce9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -16,7 +16,7 @@
       "evra": "1:1.38.0-2.fc36.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.5.0.2-2.fc36.noarch"
+      "evra": "2.7.1.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-09T20:52:21Z",
+    "generated": "2022-07-10T20:52:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-08T00:04:49Z"
+        "generated": "2022-07-09T22:10:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-09T01:05:23Z"
+        "generated": "2022-07-10T00:30:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 31a92249b5..69ffd3cc80 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.38.0-2.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.5.0.2-2.fc36.noarch"
+      "evra": "2.7.1.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-09T20:52:25Z",
+    "generated": "2022-07-10T20:53:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-08T00:06:08Z"
+        "generated": "2022-07-09T22:11:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-09T01:05:31Z"
+        "generated": "2022-07-10T00:30:35Z"
       }
     }
   }

From 8bed550ec74cd1e692d1250f967d3c3597f90e64 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 8 Jul 2022 09:24:14 +0000
Subject: [PATCH 1069/2157] manifests/group: drop well-known static ID for
 "tss" group

This drops a redundant override for the "tss" group.
The group is created by the "tpm2-tss" package and has a static
group ID (GID) allocated in the `uidgid` table.
Out of an abundance of caution, it also temporarily removes a
buggy sysusers fragment which does not match Fedora allocation.

Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2103683
---
 manifests/fedora-coreos.yaml | 6 ++++--
 manifests/group              | 1 -
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index df3640a931..aacd825c51 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -94,9 +94,11 @@ remove-from-packages:
   # Drop NetworkManager support for ifcfg files, see also corresponding
   # overlay.d/14NetworkManager-plugins
   - [NetworkManager, /usr/lib64/NetworkManager/.*/libnm-settings-plugin-ifcfg-rh.so]
-  # Drop a buggy configuration fragment which does not match static ID allocation:
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2090397
+  # Drop some buggy sysusers fragments which do not match static IDs allocation:
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2105177
   - [dbus-common, /usr/lib/sysusers.d/dbus.conf]
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2103683
+  - [tpm2-tss, /usr/lib/sysusers.d/tpm2-tss.conf]
 
 remove-files:
   # We don't ship man(1) or info(1)
diff --git a/manifests/group b/manifests/group
index de611b997f..7e9c7d430c 100644
--- a/manifests/group
+++ b/manifests/group
@@ -29,7 +29,6 @@ polkitd:x:998:
 etcd:x:997:
 dip:x:40:
 cgred:x:996:
-tss:x:59:
 avahi-autoipd:x:170:
 sssd:x:993:
 dockerroot:x:986:

From 8772f97006d5d23b3eb840ff6d4afd4abd13033b Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Mon, 11 Jul 2022 09:20:09 +0000
Subject: [PATCH 1070/2157] manifests/group: fix static GID for "tape" group

This moves the "tape" group to GID 33.
Apparently the old GID is a typo/bug coming from F20 times, and it
conflicts with the actual static GID allocated to group "gopher".

Ref: https://pagure.io/setup/blob/289bc53aa97c0758d8cf910b99f3515e21a34a40/f/group#_18
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1179585
---
 manifests/group              | 2 +-
 tests/kola/files/fcos_groups | 4 +---
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/manifests/group b/manifests/group
index 7e9c7d430c..34ff37bcdc 100644
--- a/manifests/group
+++ b/manifests/group
@@ -16,7 +16,7 @@ sudo:x:16:
 dialout:x:18:
 floppy:x:19:
 games:x:20:
-tape:x:30:
+tape:x:33:
 video:x:39:
 ftp:x:50:
 lock:x:54:
diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
index 6174ee6d64..f3a9f0c325 100755
--- a/tests/kola/files/fcos_groups
+++ b/tests/kola/files/fcos_groups
@@ -29,9 +29,7 @@ declare -A setup_groups=( \
     ["dialout"]="18" \
     ["floppy"]="19" \
     ["games"]="20" \
-# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
-#   ["tape"]="33" \
-    ["tape"]="30" \
+    ["tape"]="33" \
     ["video"]="39" \
     ["ftp"]="50" \
     ["lock"]="54" \

From 9997df7bb9f0d5017adc0c94b809c03d7b4497c2 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 7 Jul 2022 17:32:25 -0400
Subject: [PATCH 1071/2157] Move from `initramfs-args` in manifest to
 `dracut.conf.d` files

See https://github.com/coreos/rpm-ostree/issues/3799

This way when we run dracut in a container build, we naturally
pick up the same config we used for server side builds.
---
 manifests/fedora-coreos-base.yaml                    | 12 ------------
 manifests/ignition-and-ostree.yaml                   |  4 ----
 .../lib/dracut/dracut.conf.d/fcos-nohostonly.conf    |  2 ++
 .../usr/lib/dracut/dracut.conf.d/fcos-omits.conf     |  7 +++++++
 4 files changed, 9 insertions(+), 16 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf
 create mode 100644 overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 53c63dec81..5cb12f288c 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -17,18 +17,6 @@ ostree-layers:
   - overlay/14NetworkManager-plugins
   - overlay/20platform-chrony
 
-initramfs-args:
-  - --no-hostonly
-  # We don't support root on NFS, so we don't need it in the initramfs. It also
-  # conflicts with /var mount support in ignition because NFS tries to mount stuff
-  # in /var/ and then ignition can't cleanly unmount it. For example:
-  # https://github.com/dracutdevs/dracut/blob/1856ae95c873a6fe855b3dccd0144f1a96b9e71c/modules.d/95nfs/nfs-start-rpc.sh#L7
-  # See also discussion in https://github.com/coreos/fedora-coreos-config/pull/60
-  - --omit=nfs
-  # Omit these since we don't use them
-  - --omit=lvm
-  - --omit=iscsi
-
 # Be minimal
 recommends: false
 
diff --git a/manifests/ignition-and-ostree.yaml b/manifests/ignition-and-ostree.yaml
index 668d8b2ffa..8416a6dbfc 100644
--- a/manifests/ignition-and-ostree.yaml
+++ b/manifests/ignition-and-ostree.yaml
@@ -8,10 +8,6 @@
 # Include rpm-ostree + kernel + bootloader
 include: bootable-rpm-ostree.yaml
 
-initramfs-args:
-  # make it a hard error if Ignition can't be included
-  - --add=ignition
-
 # Modern defaults we want
 boot-location: modules
 tmp-is-dir: true
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf
new file mode 100644
index 0000000000..cc65c87351
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf
@@ -0,0 +1,2 @@
+# Default rpm-ostree model is server-side generated initramfs
+hostonly=no
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
new file mode 100644
index 0000000000..8b2bc85e48
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
@@ -0,0 +1,7 @@
+# We don't support root on NFS, so we don't need it in the initramfs. It also
+# conflicts with /var mount support in ignition because NFS tries to mount stuff
+# in /var/ and then ignition can't cleanly unmount it. For example:
+# https://github.com/dracutdevs/dracut/blob/1856ae95c873a6fe855b3dccd0144f1a96b9e71c/modules.d/95nfs/nfs-start-rpc.sh#L7
+# See also discussion in https://github.com/coreos/fedora-coreos-config/pull/60
+# Further, we currently do not use LVM or iSCSI
+omit_dracutmodules+=" nfs lvm iscsi "

From 278d1a99d3e3b183fbb83cf37e6ffc2de46f9718 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 12 Jul 2022 03:37:43 +0000
Subject: [PATCH 1072/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/320/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 92e0d18122..9a7d6d32f9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-3.fc36.aarch64"
+      "evra": "1.12.7-4.fc36.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.aarch64"
@@ -1226,16 +1226,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-10T20:53:49Z",
+    "generated": "2022-07-12T02:21:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-09T22:10:14Z"
+        "generated": "2022-07-10T22:13:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-10T00:30:10Z"
+        "generated": "2022-07-11T01:49:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a9fd9ffce9..bf394f3e3e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -295,7 +295,7 @@
       "evra": "1:4.9.0-1.fc36.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-3.fc36.s390x"
+      "evra": "1.12.7-4.fc36.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.s390x"
@@ -1154,16 +1154,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-10T20:52:59Z",
+    "generated": "2022-07-12T02:20:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-09T22:10:21Z"
+        "generated": "2022-07-10T22:13:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-10T00:30:30Z"
+        "generated": "2022-07-11T01:49:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 69ffd3cc80..0f87b50cf1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-3.fc36.x86_64"
+      "evra": "1.12.7-4.fc36.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.x86_64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-10T20:53:04Z",
+    "generated": "2022-07-12T02:20:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-09T22:11:36Z"
+        "generated": "2022-07-10T22:13:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-10T00:30:35Z"
+        "generated": "2022-07-11T01:50:05Z"
       }
     }
   }

From f5ec625825ea4602fed4eb2320d1466ac511430d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 11 Jul 2022 11:09:56 -0400
Subject: [PATCH 1073/2157] 35coreos-multipath: stop creating incorrect dropin
 dir

The path used there is incorrect. The dropins dir is
`/etc/multipath/conf.d`:

https://github.com/opensvc/multipath-tools/blob/686797b7d0da4fc24fdfcb0fc6364df78a0b232d/Makefile.inc#L100

But anyway, we don't actually need to create that directory; it's
already in the base image. So just drop it.
---
 .../35coreos-multipath/coreos-propagate-multipath-conf.sh       | 2 --
 1 file changed, 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
index eb4440ae6b..eb6d12a1af 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.sh
@@ -20,6 +20,4 @@ fi
 
 echo "info: propagating initrd multipath configuration"
 cp -v /etc/multipath.conf /sysroot/etc/
-mkdir -p /sysroot/etc/multipath/multipath.conf.d
 coreos-relabel /etc/multipath.conf
-coreos-relabel /etc/multipath/multipath.conf.d

From 55c8d7ce9f29ef36cea9ca686bfee32787c10e95 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 11 Jul 2022 11:13:14 -0400
Subject: [PATCH 1074/2157] 35coreos-multipath: propagate after Ignition
 `files` stage

We didn't have a strong ordering between the propagation service and the
Ignition `files` stage. We need to run after it so that we only
propagate the multipath config if the Ignition config didn't create one.

In practice currently the propagation service runs before, which didn't
cause any issues because Ignition can still just clobber what we
propagated. But it could become racier in the future, and it's confusing
because the logic we run and messages we log assume the `files` stage
ran.
---
 .../35coreos-multipath/coreos-propagate-multipath-conf.service | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
index 27d1d5e7fa..9eefee8749 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-propagate-multipath-conf.service
@@ -5,6 +5,9 @@ Before=initrd.target
 # we write to the rootfs, so run after it's ready
 After=initrd-root-fs.target
 
+# we only propagate if multipath wasn't configured via Ignition
+After=ignition-files.service
+
 # That service starts initrd-cleanup.service which will race with us completing
 # before we get nuked. Need to get to the bottom of it, but for now we need
 # this (XXX: add link to systemd issue here).

From 19490353a267a5cc5f67b22522a2e7316b271795 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Wed, 13 Jul 2022 15:54:42 +0200
Subject: [PATCH 1075/2157] denylist: disable `fcos.filesystem` and
 `ext.config.files.setgid` tests on rawhide/s390x

Currently the files.setgid test is failling for rawhide.
See https://github.com/coreos/fedora-coreos-tracker/issues/1253

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 kola-denylist.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d36525464d..6468f5d4f3 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -52,3 +52,15 @@
   - aarch64
   streams:
   - rawhide
+- pattern: ext.config.files.setgid
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1253
+  arches:
+  - s390x
+  streams:
+  - rawhide
+- pattern: fcos.filesystem
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1253
+  arches:
+  - s390x
+  streams:
+  - rawhide

From aa97bcd18e71c28c3cb652a6fd438d3ba28432a4 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 13 Jul 2022 13:16:57 -0400
Subject: [PATCH 1076/2157] manifests: add zstd

We'll soon use this to compress our initrds.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1251.
---
 manifest-lock.aarch64.json     | 3 +++
 manifest-lock.s390x.json       | 3 +++
 manifest-lock.x86_64.json      | 3 +++
 manifests/user-experience.yaml | 1 +
 4 files changed, 10 insertions(+)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9a7d6d32f9..f0d53d1cab 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1223,6 +1223,9 @@
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.aarch64"
+    },
+    "zstd": {
+      "evra": "1.5.2-2.fc36.aarch64"
     }
   },
   "metadata": {
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bf394f3e3e..684c79ea16 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1151,6 +1151,9 @@
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.s390x"
+    },
+    "zstd": {
+      "evra": "1.5.2-2.fc36.s390x"
     }
   },
   "metadata": {
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0f87b50cf1..2b01137e3b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1232,6 +1232,9 @@
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.x86_64"
+    },
+    "zstd": {
+      "evra": "1.5.2-2.fc36.x86_64"
     }
   },
   "metadata": {
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 2cc28c6ef7..0a9f61dcfb 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -26,6 +26,7 @@ packages:
   - gzip
   - tar
   - xz
+  - zstd
   # Improved MOTD experience
   - console-login-helper-messages-issuegen
   - console-login-helper-messages-profile

From d505b53f6a209dd0e3780425763aa421493d6483 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Jul 2022 22:14:58 +0000
Subject: [PATCH 1077/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/322/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 3 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f0d53d1cab..0f14c1680f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -403,7 +403,7 @@
       "evra": "3.23-6.fc36.aarch64"
     },
     "ignition": {
-      "evra": "2.14.0-1.fc36.aarch64"
+      "evra": "2.14.0-2.fc36.aarch64"
     },
     "inih": {
       "evra": "55-1.fc36.aarch64"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:4.1.1-1.fc36.aarch64"
+      "evra": "3:4.1.1-2.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-1.fc36.aarch64"
+      "evra": "3:4.1.1-2.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1042,7 +1042,7 @@
       "evra": "3.2.4-1.fc36.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.1-1.fc36.aarch64"
+      "evra": "2:1.1.1-2.fc36.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.2-0.fc36.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "15.6-1.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.8.0-8.fc36.aarch64"
+      "evra": "1:1.8.0-9.fc36.aarch64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-12T02:21:22Z",
+    "generated": "2022-07-13T20:53:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-10T22:13:46Z"
+        "generated": "2022-07-12T03:40:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-11T01:49:42Z"
+        "generated": "2022-07-13T01:53:47Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 684c79ea16..6d6aa3b7d3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -367,7 +367,7 @@
       "evra": "3.23-6.fc36.s390x"
     },
     "ignition": {
-      "evra": "2.14.0-1.fc36.s390x"
+      "evra": "2.14.0-2.fc36.s390x"
     },
     "inih": {
       "evra": "55-1.fc36.s390x"
@@ -913,10 +913,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "3:4.1.1-1.fc36.s390x"
+      "evra": "3:4.1.1-2.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-1.fc36.s390x"
+      "evra": "3:4.1.1-2.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -973,7 +973,7 @@
       "evra": "3.2.4-1.fc36.s390x"
     },
     "runc": {
-      "evra": "2:1.1.1-1.fc36.s390x"
+      "evra": "2:1.1.1-2.fc36.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.20.0-1.fc36.s390x"
@@ -1012,7 +1012,7 @@
       "evra": "2:4.11.1-2.fc36.s390x"
     },
     "skopeo": {
-      "evra": "1:1.8.0-8.fc36.s390x"
+      "evra": "1:1.8.0-9.fc36.s390x"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.s390x"
@@ -1157,16 +1157,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-12T02:20:40Z",
+    "generated": "2022-07-13T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-10T22:13:32Z"
+        "generated": "2022-07-12T03:39:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-11T01:49:59Z"
+        "generated": "2022-07-13T01:54:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2b01137e3b..95f688a554 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -409,7 +409,7 @@
       "evra": "3.23-6.fc36.x86_64"
     },
     "ignition": {
-      "evra": "2.14.0-1.fc36.x86_64"
+      "evra": "2.14.0-2.fc36.x86_64"
     },
     "inih": {
       "evra": "55-1.fc36.x86_64"
@@ -994,10 +994,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:4.1.1-1.fc36.x86_64"
+      "evra": "3:4.1.1-2.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-1.fc36.x86_64"
+      "evra": "3:4.1.1-2.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1051,7 +1051,7 @@
       "evra": "3.2.4-1.fc36.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.1-1.fc36.x86_64"
+      "evra": "2:1.1.1-2.fc36.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.2-0.fc36.x86_64"
@@ -1093,7 +1093,7 @@
       "evra": "15.6-1.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.8.0-8.fc36.x86_64"
+      "evra": "1:1.8.0-9.fc36.x86_64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-12T02:20:47Z",
+    "generated": "2022-07-13T20:52:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-10T22:13:58Z"
+        "generated": "2022-07-12T03:41:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-11T01:50:05Z"
+        "generated": "2022-07-13T01:54:11Z"
       }
     }
   }

From 2f0b6eadcc5565d5c132f673f28ab8b2f655aaa4 Mon Sep 17 00:00:00 2001
From: Gursewak Mangat <gursmangat@gmail.com>
Date: Thu, 14 Jul 2022 11:15:38 -0700
Subject: [PATCH 1078/2157] denylist: extend snooze for ext.config.binfmt.qemu
 on rawhide/aarch64

See coreos/fedora-coreos-tracker#1241
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6468f5d4f3..f2736a2250 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -47,7 +47,7 @@
   - rawhide
 - pattern: ext.config.binfmt.qemu
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
-  snooze: 2022-07-14
+  snooze: 2022-07-21
   arches:
   - aarch64
   streams:

From 694b1e8947a80fd83f3823dea5f68681001b0676 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 14 Jul 2022 22:12:36 +0000
Subject: [PATCH 1079/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/323/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 3 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0f14c1680f..c4b4398191 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.1-1.fc36.aarch64"
+      "evra": "1.8.2-1.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.10-200.fc36.aarch64"
+      "evra": "5.18.11-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.10-200.fc36.aarch64"
+      "evra": "5.18.11-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.10-200.fc36.aarch64"
+      "evra": "5.18.11-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -667,10 +667,10 @@
       "evra": "1.46.0-2.fc36.aarch64"
     },
     "libnl3": {
-      "evra": "3.6.0-3.fc36.aarch64"
+      "evra": "3.7.0-1.fc36.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.6.0-3.fc36.aarch64"
+      "evra": "3.7.0-1.fc36.aarch64"
     },
     "libnsl2": {
       "evra": "2.0.0-3.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:8.2.5172-1.fc36.noarch"
+      "evra": "2:9.0.049-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5172-1.fc36.aarch64"
+      "evra": "2:9.0.049-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,7 +1229,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-13T20:53:07Z",
+    "generated": "2022-07-14T20:53:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1238,7 +1238,7 @@
         "generated": "2022-07-12T03:40:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-13T01:53:47Z"
+        "generated": "2022-07-14T01:32:36Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6d6aa3b7d3..ce595713a8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -427,13 +427,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.10-200.fc36.s390x"
+      "evra": "5.18.11-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.10-200.fc36.s390x"
+      "evra": "5.18.11-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.10-200.fc36.s390x"
+      "evra": "5.18.11-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -613,10 +613,10 @@
       "evra": "1.46.0-2.fc36.s390x"
     },
     "libnl3": {
-      "evra": "3.6.0-3.fc36.s390x"
+      "evra": "3.7.0-1.fc36.s390x"
     },
     "libnl3-cli": {
-      "evra": "3.6.0-3.fc36.s390x"
+      "evra": "3.7.0-1.fc36.s390x"
     },
     "libnsl2": {
       "evra": "2.0.0-3.fc36.s390x"
@@ -1114,10 +1114,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:8.2.5172-1.fc36.noarch"
+      "evra": "2:9.0.049-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5172-1.fc36.s390x"
+      "evra": "2:9.0.049-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1157,7 +1157,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-13T20:52:24Z",
+    "generated": "2022-07-14T20:52:22Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
@@ -1166,7 +1166,7 @@
         "generated": "2022-07-12T03:39:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-13T01:54:05Z"
+        "generated": "2022-07-14T01:32:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 95f688a554..1ba0e1f7c5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.1-1.fc36.x86_64"
+      "evra": "1.8.2-1.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.10-200.fc36.x86_64"
+      "evra": "5.18.11-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.10-200.fc36.x86_64"
+      "evra": "5.18.11-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.10-200.fc36.x86_64"
+      "evra": "5.18.11-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -673,10 +673,10 @@
       "evra": "1.46.0-2.fc36.x86_64"
     },
     "libnl3": {
-      "evra": "3.6.0-3.fc36.x86_64"
+      "evra": "3.7.0-1.fc36.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.6.0-3.fc36.x86_64"
+      "evra": "3.7.0-1.fc36.x86_64"
     },
     "libnsl2": {
       "evra": "2.0.0-3.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:8.2.5172-1.fc36.noarch"
+      "evra": "2:9.0.049-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:8.2.5172-1.fc36.x86_64"
+      "evra": "2:9.0.049-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,7 +1238,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-13T20:52:37Z",
+    "generated": "2022-07-14T20:52:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1247,7 +1247,7 @@
         "generated": "2022-07-12T03:41:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-13T01:54:11Z"
+        "generated": "2022-07-14T01:33:01Z"
       }
     }
   }

From 57395c7dd97f4d468c073bf85f0922a9d6978f60 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 12 Jul 2022 21:32:35 -0400
Subject: [PATCH 1080/2157] `coreos-printk-quiet.service`: Lower kernel log
 level to 4

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1244

A lot going on for this simple service.  See the tracker issue above
for more info, but briefly:

Anaconda has historically injected `quiet` into the kernel command
line in many cases, and this suppresses *both* kernel and systemd
output.  On computers in general, but particularly many bare metal
servers, the serial console can be slow.  This can cause reliability
issues.

However for servers, we usually *do* want to see informational
output when they boot.  For example, today the kernel "mitigations"
information for hardware vulnerabilities is output.

This change is a compromise; we boot up at the kernel's default
verbosity level (which for Fedora and derivatives is the upstream 7),
but switch to 4 very early on in the real root.  At that point, we've
gotten most of the boot time output, and our initramfs is not
extremely performance sensitive right now.

Also, we explicitly only *lower* the output log level, and only if
there isn't explicitly `debug` on the kernel command line.
---
 .../systemd/system-preset/40-coreos.preset    |  2 ++
 .../system/coreos-printk-quiet.service        | 27 +++++++++++++++++++
 tests/kola/logging/data/commonlib.sh          |  1 +
 tests/kola/logging/printk                     | 15 +++++++++++
 4 files changed, 45 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/systemd/system/coreos-printk-quiet.service
 create mode 120000 tests/kola/logging/data/commonlib.sh
 create mode 100755 tests/kola/logging/printk

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 4f332211f4..f4577d8fe9 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -5,6 +5,8 @@ enable console-login-helper-messages-gensnippet-os-release.service
 enable console-login-helper-messages-gensnippet-ssh-keys.service
 # CA certs (probably to add to base fedora eventually)
 enable coreos-update-ca-trust.service
+# Set kernel console log level
+enable coreos-printk-quiet.service
 # https://github.com/coreos/ignition/issues/1125
 enable coreos-ignition-firstboot-complete.service
 # Delete Ignition config from provider on platforms where it's possible
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-printk-quiet.service b/overlay.d/05core/usr/lib/systemd/system/coreos-printk-quiet.service
new file mode 100644
index 0000000000..d93a32ad28
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-printk-quiet.service
@@ -0,0 +1,27 @@
+[Unit]
+Description=CoreOS: Set printk To Level 4 (warn)
+Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1244
+# We can run right after `/proc` being mounted at least
+DefaultDependencies=no
+# We run as early as possible; the only dependency we have really
+# is the implicit After=systemd-journald.socket injected by the
+# default of our stdout writing to the journal.
+Conflicts=shutdown.target
+Before=sysinit.target shutdown.target
+# We want this service to read what we wrote
+Before=systemd-sysctl.service
+# Relatedly, we don't want to override an explicitly specified kernel argument
+ConditionKernelCommandLine=!debug
+ConditionKernelCommandLine=!quiet
+ConditionKernelCommandLine=!loglevel
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# We need to make /run/sysctl.d if it doesn't exist and also
+# ensure it has a SELinux label that works for systemd-sysctl.service.
+# Then we just generate a sysctl file which is read by systemd-sysctl.service.
+ExecStart=/bin/bash -euo pipefail -c 'mkdir -p /run/sysctl.d && chcon --reference=/etc/sysctl.d /run/sysctl.d && echo "kernel.printk = 4" > /run/sysctl.d/01-coreos-printk.conf'
+
+[Install]
+WantedBy=sysinit.target
diff --git a/tests/kola/logging/data/commonlib.sh b/tests/kola/logging/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/logging/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
new file mode 100755
index 0000000000..1996c60a38
--- /dev/null
+++ b/tests/kola/logging/printk
@@ -0,0 +1,15 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+# Verify default console log level; xref https://github.com/coreos/fedora-coreos-tracker/issues/1244
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+printk=$(cat /proc/sys/kernel/printk)
+
+if ! [[ "$printk" =~ ^4 ]]; then
+    fatal "printk: expected console log level 4, found ${printk}"
+fi
+
+ok "Found expected printk value "

From 0de03d7a4514f47863aeca11bacb338b62c1dff2 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Fri, 15 Jul 2022 15:35:14 -0400
Subject: [PATCH 1081/2157] kola-denylist.yaml: remove
 ext.config.extensions.module

The test is no longer failing as the issue has been fixed by Fedora Releng.
Let's start running the test in our CI again.
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f2736a2250..d268334497 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,10 +41,6 @@
   - testing
   - testing-devel
   - stable
-- pattern: ext.config.extensions.module
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1229
-  streams:
-  - rawhide
 - pattern: ext.config.binfmt.qemu
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
   snooze: 2022-07-21

From 7fc381ef599b08047eaf5def950cf318031e4428 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Jul 2022 22:10:07 +0000
Subject: [PATCH 1082/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/324/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c4b4398191..76ecf7a49d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -373,7 +373,7 @@
       "evra": "1:6.2.1-2.fc36.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.6-2.fc36.aarch64"
+      "evra": "2.3.7-1.fc36.aarch64"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-14T20:53:03Z",
+    "generated": "2022-07-15T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-12T03:40:32Z"
+        "generated": "2022-07-14T22:16:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-14T01:32:36Z"
+        "generated": "2022-07-15T01:07:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ce595713a8..476052a4b2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -349,7 +349,7 @@
       "evra": "1:6.2.1-2.fc36.s390x"
     },
     "gnupg2": {
-      "evra": "2.3.6-2.fc36.s390x"
+      "evra": "2.3.7-1.fc36.s390x"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.s390x"
@@ -1157,16 +1157,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-14T20:52:22Z",
+    "generated": "2022-07-15T20:52:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-12T03:39:49Z"
+        "generated": "2022-07-14T22:15:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-14T01:32:55Z"
+        "generated": "2022-07-15T01:07:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1ba0e1f7c5..d2b8769c21 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -373,7 +373,7 @@
       "evra": "1:6.2.1-2.fc36.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.6-2.fc36.x86_64"
+      "evra": "2.3.7-1.fc36.x86_64"
     },
     "gnutls": {
       "evra": "3.7.6-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-14T20:52:25Z",
+    "generated": "2022-07-15T20:52:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-12T03:41:08Z"
+        "generated": "2022-07-14T22:16:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-14T01:33:01Z"
+        "generated": "2022-07-15T01:07:54Z"
       }
     }
   }

From 30acfcd846fdecad9bd036161a17d50e96605da1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 16 Jul 2022 22:09:45 +0000
Subject: [PATCH 1083/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/325/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 3 files changed, 45 insertions(+), 45 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 76ecf7a49d..89415a7619 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,7 +73,7 @@
       "evra": "0.2.6-2.fc36.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.3-2.fc36.aarch64"
+      "evra": "3.5.3-3.fc36.aarch64"
     },
     "btrfs-progs": {
       "evra": "5.18-1.fc36.aarch64"
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-4.fc36.aarch64"
+      "evra": "1.12.7-5.fc36.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.aarch64"
@@ -406,7 +406,7 @@
       "evra": "2.14.0-2.fc36.aarch64"
     },
     "inih": {
-      "evra": "55-1.fc36.aarch64"
+      "evra": "56-1.fc36.aarch64"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.aarch64"
@@ -505,7 +505,7 @@
       "evra": "0.3.111-13.fc36.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.3-2.fc36.aarch64"
+      "evra": "3.5.3-3.fc36.aarch64"
     },
     "libargon2": {
       "evra": "20171227-9.fc36.aarch64"
@@ -604,7 +604,7 @@
       "evra": "69.1-6.fc36.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.2-4.fc36.aarch64"
+      "evra": "2.3.3-1.fc36.aarch64"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.aarch64"
@@ -793,7 +793,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libuv": {
-      "evra": "1:1.44.1-1.fc36.aarch64"
+      "evra": "1:1.44.2-1.fc36.aarch64"
     },
     "libverto": {
       "evra": "0.3.2-3.fc36.aarch64"
@@ -1141,22 +1141,22 @@
       "evra": "1.9.8-5.p2.fc36.aarch64"
     },
     "systemd": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "systemd-container": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "systemd-libs": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "systemd-pam": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "systemd-resolved": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "systemd-udev": {
-      "evra": "250.7-1.fc36.aarch64"
+      "evra": "250.8-1.fc36.aarch64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-15T20:53:02Z",
+    "generated": "2022-07-16T20:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-14T22:16:13Z"
+        "generated": "2022-07-15T22:12:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-15T01:07:31Z"
+        "generated": "2022-07-16T01:04:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 476052a4b2..73b11225be 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -70,7 +70,7 @@
       "evra": "32:9.16.30-1.fc36.s390x"
     },
     "bsdtar": {
-      "evra": "3.5.3-2.fc36.s390x"
+      "evra": "3.5.3-3.fc36.s390x"
     },
     "btrfs-progs": {
       "evra": "5.18-1.fc36.s390x"
@@ -295,7 +295,7 @@
       "evra": "1:4.9.0-1.fc36.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-4.fc36.s390x"
+      "evra": "1.12.7-5.fc36.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.s390x"
@@ -370,7 +370,7 @@
       "evra": "2.14.0-2.fc36.s390x"
     },
     "inih": {
-      "evra": "55-1.fc36.s390x"
+      "evra": "56-1.fc36.s390x"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.s390x"
@@ -466,7 +466,7 @@
       "evra": "0.3.111-13.fc36.s390x"
     },
     "libarchive": {
-      "evra": "3.5.3-2.fc36.s390x"
+      "evra": "3.5.3-3.fc36.s390x"
     },
     "libargon2": {
       "evra": "20171227-9.fc36.s390x"
@@ -553,7 +553,7 @@
       "evra": "69.1-6.fc36.s390x"
     },
     "libidn2": {
-      "evra": "2.3.2-4.fc36.s390x"
+      "evra": "2.3.3-1.fc36.s390x"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.s390x"
@@ -736,7 +736,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libuv": {
-      "evra": "1:1.44.1-1.fc36.s390x"
+      "evra": "1:1.44.2-1.fc36.s390x"
     },
     "libverto": {
       "evra": "0.3.2-3.fc36.s390x"
@@ -1069,22 +1069,22 @@
       "evra": "1.9.8-5.p2.fc36.s390x"
     },
     "systemd": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "systemd-container": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "systemd-libs": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "systemd-pam": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "systemd-resolved": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "systemd-udev": {
-      "evra": "250.7-1.fc36.s390x"
+      "evra": "250.8-1.fc36.s390x"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.s390x"
@@ -1157,16 +1157,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-15T20:52:20Z",
+    "generated": "2022-07-16T20:52:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-14T22:15:48Z"
+        "generated": "2022-07-15T22:12:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-15T01:07:48Z"
+        "generated": "2022-07-16T01:04:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d2b8769c21..604609f9f0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,7 +73,7 @@
       "evra": "0.2.6-2.fc36.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.3-2.fc36.x86_64"
+      "evra": "3.5.3-3.fc36.x86_64"
     },
     "btrfs-progs": {
       "evra": "5.18-1.fc36.x86_64"
@@ -310,7 +310,7 @@
       "evra": "1:4.9.0-1.fc36.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-4.fc36.x86_64"
+      "evra": "1.12.7-5.fc36.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-4.fc36.x86_64"
@@ -412,7 +412,7 @@
       "evra": "2.14.0-2.fc36.x86_64"
     },
     "inih": {
-      "evra": "55-1.fc36.x86_64"
+      "evra": "56-1.fc36.x86_64"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.x86_64"
@@ -511,7 +511,7 @@
       "evra": "0.3.111-13.fc36.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.3-2.fc36.x86_64"
+      "evra": "3.5.3-3.fc36.x86_64"
     },
     "libargon2": {
       "evra": "20171227-9.fc36.x86_64"
@@ -610,7 +610,7 @@
       "evra": "69.1-6.fc36.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.2-4.fc36.x86_64"
+      "evra": "2.3.3-1.fc36.x86_64"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.x86_64"
@@ -802,7 +802,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libuv": {
-      "evra": "1:1.44.1-1.fc36.x86_64"
+      "evra": "1:1.44.2-1.fc36.x86_64"
     },
     "libverto": {
       "evra": "0.3.2-3.fc36.x86_64"
@@ -1150,22 +1150,22 @@
       "evra": "1.9.8-5.p2.fc36.x86_64"
     },
     "systemd": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "systemd-container": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "systemd-libs": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "systemd-pam": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "systemd-resolved": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "systemd-udev": {
-      "evra": "250.7-1.fc36.x86_64"
+      "evra": "250.8-1.fc36.x86_64"
     },
     "tar": {
       "evra": "2:1.34-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-15T20:52:24Z",
+    "generated": "2022-07-16T20:52:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-14T22:16:54Z"
+        "generated": "2022-07-15T22:13:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-15T01:07:54Z"
+        "generated": "2022-07-16T01:04:32Z"
       }
     }
   }

From a32c5300595e842962419c4278d2a7bdfcb77db0 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 18 Jul 2022 09:39:39 -0400
Subject: [PATCH 1084/2157] manifests: exclude `perl-interpreter`

We were excluding `perl`, but that's just a metapackage. The actual
interpreter is in `perl-interpreter`. Let's add that to the list to make
sure no package can pull it in.

Related: https://github.com/coreos/fedora-coreos-tracker/issues/1217
---
 manifests/fedora-coreos.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index aacd825c51..ea1d222b8c 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -117,6 +117,7 @@ exclude-packages:
   - python3
   - python3-libs
   - perl
+  - perl-interpreter
   - nodejs
   - dnf
   - grubby

From 4a29c8fc329ef222e379cb5a640d4951bb930fa9 Mon Sep 17 00:00:00 2001
From: Saqib Ali <saqali@redhat.com>
Date: Mon, 20 Jun 2022 11:53:11 -0400
Subject: [PATCH 1085/2157] 35coreos-ignition: verify grub password directives

GRUB password directives should not be present in
/boot/grub2/user.cfg if the system is not using GRUB.
Let's add a check to verify this.
---
 .../coreos-post-ignition-checks.service        | 17 +++++++++++++++++
 .../coreos-post-ignition-checks.sh             | 18 ++++++++++++++++++
 .../35coreos-ignition/module-setup.sh          |  8 +++++++-
 3 files changed, 42 insertions(+), 1 deletion(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.service
new file mode 100644
index 0000000000..e37082268d
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.service
@@ -0,0 +1,17 @@
+# This unit will run late in the initrd process after the Ignition files
+# stage has completed successfully so that we may validate ignition changes
+
+[Unit]
+Description=CoreOS Post Ignition Checks
+ConditionPathExists=/usr/lib/initrd-release
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+# Start after Ignition has finished creating files and before ignition umount
+After=ignition-files.service
+Before=ignition-complete.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/sbin/coreos-post-ignition-checks
+RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh
new file mode 100755
index 0000000000..17b1a169a2
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+# See coreos-post-ignition-checks.service for more information about this script
+set -euo pipefail
+
+# Verify that GRUB password directives are only used when GRUB is being used
+arch=$(uname -p)
+# Butane sugar will tell ignition to mount /boot to /sysroot/boot. We can simply check if
+# the file exists to see whether the check needs to be performed.
+# It is possible that the user creates a config, which will mount /boot at a different path
+# but that case is not officially supported. 
+if [ -f /sysroot/boot/grub2/user.cfg ]; then
+    # s390x does not use GRUB, ppcle64 uses petitboot with a GRUB config parser which does not support passwords
+    # So in both these cases, GRUB password is not supported
+    if grep -q password_pbkdf2 /sysroot/boot/grub2/user.cfg && [[ "$arch" =~ ^(s390x|ppc64le)$ ]]; then
+        echo "Ignition config provisioned a GRUB password, which is not supported on $arch"
+        exit 1
+    fi
+fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 02e16bca68..efd4bad6ed 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -23,7 +23,8 @@ install() {
         lsblk \
         sed \
         grep \
-        sgdisk
+        sgdisk \
+        uname
 
     inst_simple "$moddir/coreos-diskful-generator" \
         "$systemdutildir/system-generators/coreos-diskful-generator"
@@ -42,6 +43,11 @@ install() {
     inst_script "$moddir/coreos-ignition-setup-user.sh" \
         "/usr/sbin/coreos-ignition-setup-user"
 
+    inst_script "$moddir/coreos-post-ignition-checks.sh" \
+        "/usr/sbin/coreos-post-ignition-checks"
+    
+    install_ignition_unit coreos-post-ignition-checks.service
+
     # For consistency tear down the network and persist multipath between the initramfs and
     # real root. See https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
     inst_script "$moddir/coreos-teardown-initramfs.sh" \

From 14c2dc3631b409612573fffd157d47b1956bab56 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 12 Jul 2022 16:57:37 -0400
Subject: [PATCH 1086/2157] overlay: Omit many more dracut modules explicitly

We're not actually shipping any of these today; the way dracut
works is it looks for them and emits a loud warning if they're not
found.

This is purely to quiet build time warnings.
---
 .../usr/lib/dracut/dracut.conf.d/fcos-omits.conf     | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
index 8b2bc85e48..b9a0cbe411 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
@@ -3,5 +3,13 @@
 # in /var/ and then ignition can't cleanly unmount it. For example:
 # https://github.com/dracutdevs/dracut/blob/1856ae95c873a6fe855b3dccd0144f1a96b9e71c/modules.d/95nfs/nfs-start-rpc.sh#L7
 # See also discussion in https://github.com/coreos/fedora-coreos-config/pull/60
-# Further, we currently do not use LVM or iSCSI
-omit_dracutmodules+=" nfs lvm iscsi "
+# Further, we currently do not use LVM, iSCSI or dmraid
+omit_dracutmodules+=" nfs lvm iscsi dmraid "
+# More storage modules we don't use
+omit_dracutmodules+=" fcoe fcoe-uefi nbd "
+# We use NetworkManager
+omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
+# We use systemd network naming
+omit_dracutmodules+=" biosdevname "
+# Random stuff we don't want
+omit_dracutmodules+=" rngd busybox dbus-daemon memstrack pcsc "

From 678d9ffcb97f8b421cce925170cc6fb34f3246eb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 19 Jul 2022 19:07:50 +0000
Subject: [PATCH 1087/2157] overrides: fast-track
 console-login-helper-messages-0.21.3-1.fc36

---
 manifest-lock.overrides.yaml | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..6427a5a564 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,28 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  console-login-helper-messages:
+    evra: 0.21.3-1.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
+      type: fast-track
+  console-login-helper-messages-issuegen:
+    evra: 0.21.3-1.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
+      type: fast-track
+  console-login-helper-messages-motdgen:
+    evra: 0.21.3-1.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
+      type: fast-track
+  console-login-helper-messages-profile:
+    evra: 0.21.3-1.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
+      type: fast-track

From dd8d2bf8a2d911305be2ecd325469eaea7132a31 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Jul 2022 02:27:23 +0000
Subject: [PATCH 1088/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/330/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 3 files changed, 50 insertions(+), 50 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 89415a7619..d0fc9296a8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -103,16 +103,16 @@
       "evra": "6.15-1.fc36.aarch64"
     },
     "clevis": {
-      "evra": "18-6.fc36.aarch64"
+      "evra": "18-8.fc36.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-6.fc36.aarch64"
+      "evra": "18-8.fc36.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-6.fc36.aarch64"
+      "evra": "18-8.fc36.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-6.fc36.aarch64"
+      "evra": "18-8.fc36.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -121,16 +121,16 @@
       "evra": "2:2.1.0-2.fc36.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
       "evra": "2:2.188.0-1.fc36.noarch"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.aarch64"
     },
     "criu": {
-      "evra": "3.17.1-1.fc36.aarch64"
+      "evra": "3.17.1-2.fc36.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17.1-1.fc36.aarch64"
+      "evra": "3.17.1-2.fc36.aarch64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.aarch64"
@@ -1024,10 +1024,10 @@
       "evra": "1.2.6-2.fc36.aarch64"
     },
     "rpm": {
-      "evra": "4.17.0-10.fc36.aarch64"
+      "evra": "4.17.1-2.fc36.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-10.fc36.aarch64"
+      "evra": "4.17.1-2.fc36.aarch64"
     },
     "rpm-ostree": {
       "evra": "2022.10-3.fc36.aarch64"
@@ -1036,7 +1036,7 @@
       "evra": "2022.10-3.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-10.fc36.aarch64"
+      "evra": "4.17.1-2.fc36.aarch64"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.aarch64"
@@ -1081,7 +1081,7 @@
       "evra": "2.1-3.fc35.aarch64"
     },
     "shim-aa64": {
-      "evra": "15.6-1.aarch64"
+      "evra": "15.6-2.aarch64"
     },
     "skopeo": {
       "evra": "1:1.8.0-9.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-16T20:53:10Z",
+    "generated": "2022-07-20T01:09:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-15T22:12:41Z"
+        "generated": "2022-07-19T19:47:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-16T01:04:09Z"
+        "generated": "2022-07-19T01:31:40Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 73b11225be..491e44c2e9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -100,16 +100,16 @@
       "evra": "6.15-1.fc36.s390x"
     },
     "clevis": {
-      "evra": "18-6.fc36.s390x"
+      "evra": "18-8.fc36.s390x"
     },
     "clevis-dracut": {
-      "evra": "18-6.fc36.s390x"
+      "evra": "18-8.fc36.s390x"
     },
     "clevis-luks": {
-      "evra": "18-6.fc36.s390x"
+      "evra": "18-8.fc36.s390x"
     },
     "clevis-systemd": {
-      "evra": "18-6.fc36.s390x"
+      "evra": "18-8.fc36.s390x"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -118,16 +118,16 @@
       "evra": "2:2.1.0-2.fc36.s390x"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
       "evra": "2:2.188.0-1.fc36.noarch"
@@ -163,10 +163,10 @@
       "evra": "2.9.6-28.fc36.s390x"
     },
     "criu": {
-      "evra": "3.17.1-1.fc36.s390x"
+      "evra": "3.17.1-2.fc36.s390x"
     },
     "criu-libs": {
-      "evra": "3.17.1-1.fc36.s390x"
+      "evra": "3.17.1-2.fc36.s390x"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.s390x"
@@ -955,10 +955,10 @@
       "evra": "1.2.6-2.fc36.s390x"
     },
     "rpm": {
-      "evra": "4.17.0-10.fc36.s390x"
+      "evra": "4.17.1-2.fc36.s390x"
     },
     "rpm-libs": {
-      "evra": "4.17.0-10.fc36.s390x"
+      "evra": "4.17.1-2.fc36.s390x"
     },
     "rpm-ostree": {
       "evra": "2022.10-3.fc36.s390x"
@@ -967,7 +967,7 @@
       "evra": "2022.10-3.fc36.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-10.fc36.s390x"
+      "evra": "4.17.1-2.fc36.s390x"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.s390x"
@@ -1157,16 +1157,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-16T20:52:21Z",
+    "generated": "2022-07-20T01:08:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-15T22:12:15Z"
+        "generated": "2022-07-19T19:47:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-16T01:04:26Z"
+        "generated": "2022-07-19T01:31:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 604609f9f0..0e1705a156 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -103,16 +103,16 @@
       "evra": "6.15-1.fc36.x86_64"
     },
     "clevis": {
-      "evra": "18-6.fc36.x86_64"
+      "evra": "18-8.fc36.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-6.fc36.x86_64"
+      "evra": "18-8.fc36.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-6.fc36.x86_64"
+      "evra": "18-8.fc36.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-6.fc36.x86_64"
+      "evra": "18-8.fc36.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -121,16 +121,16 @@
       "evra": "2:2.1.0-2.fc36.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.2-4.fc36.noarch"
+      "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
       "evra": "2:2.188.0-1.fc36.noarch"
@@ -166,10 +166,10 @@
       "evra": "2.9.6-28.fc36.x86_64"
     },
     "criu": {
-      "evra": "3.17.1-1.fc36.x86_64"
+      "evra": "3.17.1-2.fc36.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17.1-1.fc36.x86_64"
+      "evra": "3.17.1-2.fc36.x86_64"
     },
     "crun": {
       "evra": "1.4.5-1.fc36.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "1.2.6-2.fc36.x86_64"
     },
     "rpm": {
-      "evra": "4.17.0-10.fc36.x86_64"
+      "evra": "4.17.1-2.fc36.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.0-10.fc36.x86_64"
+      "evra": "4.17.1-2.fc36.x86_64"
     },
     "rpm-ostree": {
       "evra": "2022.10-3.fc36.x86_64"
@@ -1045,7 +1045,7 @@
       "evra": "2022.10-3.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.0-10.fc36.x86_64"
+      "evra": "4.17.1-2.fc36.x86_64"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.x86_64"
@@ -1090,7 +1090,7 @@
       "evra": "2.1-3.fc35.x86_64"
     },
     "shim-x64": {
-      "evra": "15.6-1.x86_64"
+      "evra": "15.6-2.x86_64"
     },
     "skopeo": {
       "evra": "1:1.8.0-9.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-16T20:52:27Z",
+    "generated": "2022-07-20T01:08:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-15T22:13:09Z"
+        "generated": "2022-07-19T19:47:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-16T01:04:32Z"
+        "generated": "2022-07-19T01:32:05Z"
       }
     }
   }

From 07b906dc1c41b572105267a188adc6076aed347c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 19 Jul 2022 15:34:42 -0400
Subject: [PATCH 1089/2157] overlay: omit bluetooth dracut module

We don't ship Bluetooth support. Should squash:

    dracut: 62bluetooth: Could not find any command of
    '/usr/lib/bluetooth/bluetoothd /usr/libexec/bluetooth/bluetoothd'!

Follow-up to #1838.
---
 overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
index b9a0cbe411..6a32713b9f 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
@@ -12,4 +12,4 @@ omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
 # We use systemd network naming
 omit_dracutmodules+=" biosdevname "
 # Random stuff we don't want
-omit_dracutmodules+=" rngd busybox dbus-daemon memstrack pcsc "
+omit_dracutmodules+=" rngd busybox dbus-daemon memstrack pcsc bluetooth "

From 6774eef660657d9c14c7e6e9dcfdbe02bce55822 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Tue, 28 Jun 2022 13:49:38 +0200
Subject: [PATCH 1090/2157] s390x: reencrypt boot- and rootfs if
 SecureExecution is enabled

Only for systems running with Secure Execution. During firstboot this reencryptes filesystems
labeled 'boot' and 'root'.

Co-authored-by: Jonathan Lebon <jonathan@jlebon.com>
---
 .../modules.d/35coreos-ignition/01-secex.ign  | 60 +++++++++++++++++++
 .../coreos-diskful-generator                  | 13 ++++
 .../35coreos-ignition/module-setup.sh         |  3 +
 .../ignition-ostree-close-luks.service        | 18 ++++++
 .../ignition-ostree-drop-luks.service         | 19 ++++++
 .../ignition-ostree-growfs.sh                 | 21 ++-----
 .../ignition-ostree-transposefs.sh            | 18 ++++++
 .../40ignition-ostree/module-setup.sh         |  3 +
 8 files changed, 139 insertions(+), 16 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
new file mode 100644
index 0000000000..f18d4b8b81
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -0,0 +1,60 @@
+{
+  "ignition": {
+    "version": "3.2.0"
+  },
+  "storage": {
+    "disks": [
+      {
+        "device": "/dev/disk/by-id/coreos-boot-disk",
+        "partitions": [
+          {
+            "label": "boot",
+            "number": 3
+          },
+          {
+            "label": "root",
+            "number": 4,
+            "resize": true,
+            "sizeMiB": 0
+          }
+        ]
+      }
+    ],
+    "filesystems": [
+      {
+        "device": "/dev/mapper/boot",
+        "format": "ext4",
+        "label": "boot",
+        "wipeFilesystem": true
+      },
+      {
+        "device": "/dev/mapper/root",
+        "format": "xfs",
+        "label": "root",
+        "wipeFilesystem": true
+      }
+    ],
+    "luks": [
+      {
+        "device": "/dev/disk/by-partlabel/boot",
+        "label": "crypt_bootfs",
+        "name": "boot",
+        "options": [
+          "--integrity",
+          "hmac-sha256"
+        ],
+        "wipeVolume": true
+      },
+      {
+        "device": "/dev/disk/by-partlabel/root",
+        "label": "crypt_rootfs",
+        "name": "root",
+        "options": [
+          "--integrity",
+          "hmac-sha256"
+        ],
+        "wipeVolume": true
+      }
+    ]
+  }
+}
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 5cb233ca7c..ccde57ce5b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -62,4 +62,17 @@ EOF
     mkdir -p /run/udev/rules.d/
     ln -sf /usr/lib/coreos/80-coreos-boot-disk.rules \
           /run/udev/rules.d/80-coreos-boot-disk.rules
+
+    # IBM Secure Execution case
+    # During firstboot we have to reencrypt '/boot' and '/', to do that an Ignition config
+    # is injected. 'coreos-boot-disk' is required for this
+    secure_execution=0
+    if [[ $(uname -m) == s390x ]] && [[ -e /sys/firmware/uv/prot_virt_guest ]]; then
+        secure_execution=$(cat /sys/firmware/uv/prot_virt_guest)
+    fi
+    if [[ "${secure_execution}" = "1" ]]; then
+        mkdir -p /run/coreos/
+        touch /run/coreos/secure-execution
+        mv /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
+    fi
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index efd4bad6ed..86b845eeb1 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -73,4 +73,7 @@ install() {
     install_ignition_unit coreos-ignition-unique-boot.service ignition-diskful.target
     install_ignition_unit coreos-unique-boot.service ignition-diskful.target
     install_ignition_unit coreos-ignition-setup-user.service
+
+    # IBM Secure Execution. Ignition config for reencryption of / and /boot
+    inst_simple "$moddir/01-secex.ign" /usr/lib/coreos/01-secex.ign
 }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
new file mode 100644
index 0000000000..94006a4a11
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=Ignition OSTree: Close Secure Execution LUKS
+DefaultDependencies=false
+After=ignition-ostree-transposefs-save.service
+Before=ignition-ostree-transposefs-restore.service
+Before=ignition-disks.service
+ConditionArchitecture=s390x
+ConditionKernelCommandLine=ostree
+ConditionPathExists=/run/coreos/secure-execution
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/sbin/cryptsetup luksClose crypt_bootfs
+ExecStart=/usr/sbin/cryptsetup luksClose crypt_rootfs
+
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service
new file mode 100644
index 0000000000..ab5ddbfda4
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service
@@ -0,0 +1,19 @@
+# This is to be removed once we switch to 'keyring' and custom 'init'.
+[Unit]
+Description=Ignition OSTree: Delete Secure Execution LUKS Keys
+ConditionArchitecture=s390x
+ConditionKernelCommandLine=ostree
+ConditionPathExists=/run/coreos/secure-execution
+DefaultDependencies=no
+
+# We should drop the keys once cryptsetup had opened both rootfs and bootfs
+After=dev-disk-by\x2dlabel-boot.device
+After=dev-disk-by\x2dlabel-root.device
+
+# Run as early as possible
+Before=cryptsetup.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/rm /etc/luks/boot /etc/luks/root /etc/crypttab
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 483c83b60f..0717c32420 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -17,21 +17,14 @@ path=/sysroot
 # this shouldn't happen for us but we're being conservative.
 src=$(findmnt -nvr -o SOURCE "$path" | tail -n1)
 
-# IBM SecureExecution
-secure_execution=0
-if [[ $(uname -m) == s390x ]] && [[ -e /sys/firmware/uv/prot_virt_guest ]]; then
-    secure_execution=$(cat /sys/firmware/uv/prot_virt_guest)
+# In the IBM Secure Execution case we use Ignition to grow and reencrypt rootfs
+# see overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+if [[ -f /run/coreos/secure-execution ]]; then
+    exit 0
 fi
 
 if [ ! -f "${saved_partstate}" ]; then
     partition=$(realpath /dev/disk/by-label/root)
-    # in the Secure Execution case, the rootfs is pre-baked on LUKS, so
-    # `partition` is actually the device mapper device; get its parent
-    if [[ "${secure_execution}" != "0" ]]; then
-        # lsblk doesn't print PKNAME of crypt devices with --nodeps
-        MAJMIN=$(echo $(lsblk -dno MAJ:MIN "${partition}"))
-        partition=/dev/$(ls "/sys/dev/block/${MAJMIN}/slaves")
-    fi
 else
     # The rootfs was reprovisioned. Our rule in this case is: we only grow if
     # the partition backing the rootfs is the same and its size didn't change
@@ -98,11 +91,7 @@ while true; do
              eval $(udevadm info --query=property --export "${NAME}")
              # lsblk doesn't print PKNAME of crypt devices with --nodeps
              PKNAME=/dev/$(ls "/sys/dev/block/${MAJMIN}/slaves")
-             if [[ "${secure_execution}" != "0" ]]; then
-                 cryptsetup resize --key-file=/etc/luks/root "${DM_NAME}"
-             else
-                 clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
-             fi
+             clevis_luks_unlock_device "${PKNAME}" | cryptsetup resize -d- "${DM_NAME}"
             )
             ;;
         # already checked
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 145a05c318..53a577f091 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -83,6 +83,24 @@ mount_and_restore_filesystem_by_label() {
     find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} \;
 }
 
+# In Secure Execution case user is not allowed to modify partition table
+check_and_set_secex_config() {
+    if [[ -f /run/coreos/secure-execution ]]; then
+        local wr=$(jq "$(query_fslabel root) | length" "${ignition_cfg}")
+        local wb=$(jq "$(query_fslabel boot) | length" "${ignition_cfg}")
+        if [ "${wr}${wb}" != "00" ]; then
+            echo "Modifying bootfs and rootfs is not supported in Secure Execution mode"
+            exit 1
+        fi
+        # Cached config isn't merged, so reset it and recheck again, just to make sure
+        ignition_cfg=/usr/lib/ignition/base.d/01-secex.ign
+    fi
+}
+
+# We could have done this during 'detect' below, but other cases also request
+# info from config, so just check cached one and reset to secex.ign now
+check_and_set_secex_config
+
 case "${1:-}" in
     detect)
         # Mounts are not in a private namespace so we can mount ${saved_data}
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index bf9a7872ab..a742b43555 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -101,4 +101,7 @@ install() {
         /usr/libexec/coreos-check-rootfs-size
 
     inst_script "$moddir/coreos-relabel" /usr/bin/coreos-relabel
+
+    install_ignition_unit ignition-ostree-close-luks.service
+    install_ignition_unit ignition-ostree-drop-luks.service
 }

From eee0d711116b1e0eeb971ee07df06cc6fd97f8c4 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Fri, 15 Jul 2022 09:17:45 +0200
Subject: [PATCH 1091/2157] s390x: workaround broken 'coreos-boot-disk' in
 01-secex.ign config for RHCOS

BZ: https://bugzilla.redhat.com/show_bug.cgi?id=2075085
RHCOS may have (and has now) kernel with a known issue, which makes not
possible to use 'coreos-boot-disk' symlink in the config. Once we have
kernel >= 4.18.0-387.el8.s390x we should revert this commit

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../modules.d/35coreos-ignition/01-secex.ign   |  6 +++---
 .../35coreos-ignition/coreos-diskful-generator |  1 -
 .../ignition-ostree-secex-config.service       | 18 ++++++++++++++++++
 .../ignition-ostree-secex-config.sh            |  7 +++++++
 .../40ignition-ostree/module-setup.sh          |  5 +++++
 5 files changed, 33 insertions(+), 4 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index f18d4b8b81..c1f5a39bb0 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -5,7 +5,7 @@
   "storage": {
     "disks": [
       {
-        "device": "/dev/disk/by-id/coreos-boot-disk",
+        "device": "${BOOTDEV}",
         "partitions": [
           {
             "label": "boot",
@@ -36,7 +36,7 @@
     ],
     "luks": [
       {
-        "device": "/dev/disk/by-partlabel/boot",
+        "device": "${BOOTDEV}3",
         "label": "crypt_bootfs",
         "name": "boot",
         "options": [
@@ -46,7 +46,7 @@
         "wipeVolume": true
       },
       {
-        "device": "/dev/disk/by-partlabel/root",
+        "device": "${BOOTDEV}4",
         "label": "crypt_rootfs",
         "name": "root",
         "options": [
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index ccde57ce5b..b8eab207c0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -73,6 +73,5 @@ EOF
     if [[ "${secure_execution}" = "1" ]]; then
         mkdir -p /run/coreos/
         touch /run/coreos/secure-execution
-        mv /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
     fi
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
new file mode 100644
index 0000000000..95384d51fc
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
@@ -0,0 +1,18 @@
+# RHOCS 4.12.s390x has an old kernel with a known issue: https://bugzilla.redhat.com/show_bug.cgi?id=2075085
+# Once we have kernel >= 4.18.0-387.el8.s390x we should drop this unit and copy config in coreos-diskful-generator
+[Unit]
+Description=Ignition OSTree: Inject secex config
+DefaultDependencies=false
+ConditionArchitecture=s390x
+ConditionKernelCommandLine=ostree
+ConditionPathExists=/run/coreos/secure-execution
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+After=cryptsetup.target
+Before=ignition-fetch-offline.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/libexec/ignition-ostree-secex-config
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
new file mode 100755
index 0000000000..a03e69f213
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+set -euo pipefail
+
+if [[ -f /run/coreos/secure-execution ]]; then
+    bootdev=$(blkid --list-one --output device --match-token PARTLABEL=boot | sed 's,[0-9]\+$,,')
+    sed "s,\${BOOTDEV},$bootdev," < /usr/lib/coreos/01-secex.ign > /usr/lib/ignition/base.d/01-secex.ign
+fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index a742b43555..6211135b4c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -104,4 +104,9 @@ install() {
 
     install_ignition_unit ignition-ostree-close-luks.service
     install_ignition_unit ignition-ostree-drop-luks.service
+
+    # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2075085
+    install_ignition_unit ignition-ostree-secex-config.service
+    inst_script "$moddir/ignition-ostree-secex-config.sh" \
+        /usr/libexec/ignition-ostree-secex-config
 }

From 27e0a8d46abba8989b628acac8ec449893c2f0a7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 20 Jul 2022 09:19:07 -0400
Subject: [PATCH 1092/2157] overlay: disable dracut stripping

While looking at the boot space issue[1], I tested whether stripping
binaries saved anything. Currently, dracut tries to strip binaries if
`strip` (or `eu-strip`) are available, which isn't the case in FCOS.

Adding it as a test, it turns out stripping barely saves anything
because we've already split out debug symbols into separate RPMs, and
the remaining symbols don't take much space.

So let's just tell dracut to stop trying to opportunistically strip
anything to be consistent. This then squashes a message emitted about
`strip` not being found.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1247
---
 .../05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf      | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf
new file mode 100644
index 0000000000..cad2269431
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf
@@ -0,0 +1,3 @@
+# We don't ship `strip` or `eu-strip` today, and even if we did, it doesn't
+# save much space. So let's disable it to avoid the error-looking message.
+do_strip=no

From 804365b333fadf329f935d547456d83b38aedce5 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 20 Jul 2022 11:34:49 -0400
Subject: [PATCH 1093/2157] overlay: rename dracut.conf.d dropins

These will be shared with RHCOS since they're in `05core`. Let's give
them more generic names.

See discussions in #1856.
---
 .../{fcos-nohostonly.conf => coreos-nohostonly.conf}              | 0
 .../dracut.conf.d/{fcos-nostrip.conf => coreos-nostrip.conf}      | 0
 .../dracut/dracut.conf.d/{fcos-omits.conf => coreos-omits.conf}   | 0
 3 files changed, 0 insertions(+), 0 deletions(-)
 rename overlay.d/05core/usr/lib/dracut/dracut.conf.d/{fcos-nohostonly.conf => coreos-nohostonly.conf} (100%)
 rename overlay.d/05core/usr/lib/dracut/dracut.conf.d/{fcos-nostrip.conf => coreos-nostrip.conf} (100%)
 rename overlay.d/05core/usr/lib/dracut/dracut.conf.d/{fcos-omits.conf => coreos-omits.conf} (100%)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-nohostonly.conf
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nohostonly.conf
rename to overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-nohostonly.conf
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-nostrip.conf
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-nostrip.conf
rename to overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-nostrip.conf
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/dracut.conf.d/fcos-omits.conf
rename to overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf

From f0077efe0a40872e7d2a3f39c305ee6bcba43322 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 20 Jul 2022 10:59:16 -0400
Subject: [PATCH 1094/2157] 40ignition-ostree: fix minor secex-related nits

Follow-up to #1819.

Tweak the description of `ignition-ostree-secex-config.service` for
consistency and drop an unnecessary conditional in the associated
script.
---
 .../40ignition-ostree/ignition-ostree-secex-config.service  | 2 +-
 .../40ignition-ostree/ignition-ostree-secex-config.sh       | 6 ++----
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
index 95384d51fc..6f70b5681a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
@@ -1,7 +1,7 @@
 # RHOCS 4.12.s390x has an old kernel with a known issue: https://bugzilla.redhat.com/show_bug.cgi?id=2075085
 # Once we have kernel >= 4.18.0-387.el8.s390x we should drop this unit and copy config in coreos-diskful-generator
 [Unit]
-Description=Ignition OSTree: Inject secex config
+Description=Ignition OSTree: Inject Secure Execution Config
 DefaultDependencies=false
 ConditionArchitecture=s390x
 ConditionKernelCommandLine=ostree
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
index a03e69f213..5a9736ebff 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
 set -euo pipefail
 
-if [[ -f /run/coreos/secure-execution ]]; then
-    bootdev=$(blkid --list-one --output device --match-token PARTLABEL=boot | sed 's,[0-9]\+$,,')
-    sed "s,\${BOOTDEV},$bootdev," < /usr/lib/coreos/01-secex.ign > /usr/lib/ignition/base.d/01-secex.ign
-fi
+bootdev=$(blkid --list-one --output device --match-token PARTLABEL=boot | sed 's,[0-9]\+$,,')
+sed "s,\${BOOTDEV},$bootdev," < /usr/lib/coreos/01-secex.ign > /usr/lib/ignition/base.d/01-secex.ign

From 1dd20ead99847356f08014af03c5ab3c0feae802 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 21 Jul 2022 14:15:03 -0400
Subject: [PATCH 1095/2157] manifests/user-experience: explicitly add file RPM

This is pulled in by GRUB on platforms that use GRUB, but we want
it even on platforms that don't use GRUB.

I noticed this when trying to run the ext.config.kdump.crash test
on s390x and it failed because `/usr/bin/file` didn't exist.
---
 manifests/user-experience.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 0a9f61dcfb..ca41ee0965 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -15,6 +15,7 @@ packages:
   ## jq - parsing/interacting with JSON data
   - bash-completion
   - coreutils
+  - file
   - jq
   - less
   - sudo

From 270428219b5c4fe85b72134ce0a9607d42b66af0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 21 Jul 2022 14:58:44 -0400
Subject: [PATCH 1096/2157] tests: enable kdump.crash test for rawhide on s390x

The fix has landed in rawhide [1]. Let's re-enable the test for
rawhide and set a snooze on the other branches to remind ourselves
to followup for the other branches.

[1] https://github.com/coreos/fedora-coreos-config/issues/1500#issuecomment-1191799541
---
 kola-denylist.yaml             | 11 +++++++++++
 tests/kola/kdump/crash/test.sh |  5 +----
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d268334497..d1e01a6ca6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -9,6 +9,17 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
   arches:
     - ppc64le
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-config/issues/1500
+  snooze: 2022-08-30
+  arches:
+    - s390x
+  streams:
+  - next
+  - next-devel
+  - testing
+  - testing-devel
+  - stable
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 4d32b59021..d3e90201e9 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -1,14 +1,11 @@
 #!/bin/bash
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# kola: {"minMemory": 4096, "tags": "skip-base-checks", "timeoutMin": 15, "architectures": "!s390x"}
+# kola: {"minMemory": 4096, "tags": "skip-base-checks", "timeoutMin": 15}
 # - minMemory: 4096
 #   - Testing kdump requires some reserved memory for the crashkernel.
 # - tags: skip-base-checks
 #   - Skip checks for things like kernel crashes in the console logs.
 #     For this test we trigger a kernel crash on purpose.
-# - architectures: !s390x
-#   - kdump.service is failing on s390x. See
-#     https://github.com/coreos/fedora-coreos-config/issues/1500
 # - timeoutMin: 15
 #   - This test includes a few reboots and the generation of a vmcore,
 #     which can take longer than the default 10 minute timeout.

From 9ba7ca8a9e2a2b2c3e2fa5a0ff3566b0ecab2f8b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 21 Jul 2022 15:01:01 -0400
Subject: [PATCH 1097/2157] denylist: use more appropriate link for ppc64le
 kdump.crash denial

The other issue was closed and this one looks more appropriate.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d1e01a6ca6..425424066a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -6,7 +6,7 @@
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1075
+  tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
     - ppc64le
 - pattern: ext.config.kdump.crash

From ec92d001822e77871cceeadf2ccf3148762ae2d7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 22 Jul 2022 11:40:39 -0400
Subject: [PATCH 1098/2157] denylist: extend snooze for ext.config.binfmt.qemu
 on rawhide/aarch64

See coreos/fedora-coreos-tracker#1241
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 425424066a..bcc0f8afcd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -54,7 +54,7 @@
   - stable
 - pattern: ext.config.binfmt.qemu
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
-  snooze: 2022-07-21
+  snooze: 2022-08-10
   arches:
   - aarch64
   streams:

From 30fc207b603d0923735505e763f4da0945c918d5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 23 Jul 2022 04:41:01 +0000
Subject: [PATCH 1099/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/351/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 33 ++++++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 3 files changed, 48 insertions(+), 45 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d0fc9296a8..69cc9bb321 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-6.fc36.aarch64"
+      "evra": "7.82.0-7.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.aarch64"
@@ -229,7 +229,7 @@
       "evra": "3.8-2.fc36.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-9.fc36.aarch64"
+      "evra": "2.86-10.fc36.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.aarch64"
@@ -277,13 +277,13 @@
       "evra": "36-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-repos": {
       "evra": "36-1.noarch"
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.36.1-1.fc36.aarch64"
+      "evra": "2.37.1-1.fc36.aarch64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.11-200.fc36.aarch64"
+      "evra": "5.18.13-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.11-200.fc36.aarch64"
+      "evra": "5.18.13-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.11-200.fc36.aarch64"
+      "evra": "5.18.13-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.aarch64"
@@ -547,7 +547,7 @@
       "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.82.0-6.fc36.aarch64"
+      "evra": "7.82.0-7.fc36.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.aarch64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-20T01:09:20Z",
+    "generated": "2022-07-23T03:34:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-19T19:47:00Z"
+        "generated": "2022-07-22T18:45:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-19T01:31:40Z"
+        "generated": "2022-07-23T01:48:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 491e44c2e9..b764cc53bb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -181,7 +181,7 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "curl": {
-      "evra": "7.82.0-6.fc36.s390x"
+      "evra": "7.82.0-7.fc36.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.s390x"
@@ -226,7 +226,7 @@
       "evra": "3.8-2.fc36.s390x"
     },
     "dnsmasq": {
-      "evra": "2.86-9.fc36.s390x"
+      "evra": "2.86-10.fc36.s390x"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.s390x"
@@ -265,13 +265,13 @@
       "evra": "36-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-repos": {
       "evra": "36-1.noarch"
@@ -285,6 +285,9 @@
     "fedora-repos-ostree": {
       "evra": "36-1.noarch"
     },
+    "file": {
+      "evra": "5.41-4.fc36.s390x"
+    },
     "file-libs": {
       "evra": "5.41-4.fc36.s390x"
     },
@@ -331,7 +334,7 @@
       "evra": "1.0.9-2.fc36.s390x"
     },
     "git-core": {
-      "evra": "2.36.1-1.fc36.s390x"
+      "evra": "2.37.1-1.fc36.s390x"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.s390x"
@@ -427,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.11-200.fc36.s390x"
+      "evra": "5.18.13-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.11-200.fc36.s390x"
+      "evra": "5.18.13-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.11-200.fc36.s390x"
+      "evra": "5.18.13-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.s390x"
@@ -508,7 +511,7 @@
       "evra": "1.46.5-2.fc36.s390x"
     },
     "libcurl": {
-      "evra": "7.82.0-6.fc36.s390x"
+      "evra": "7.82.0-7.fc36.s390x"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.s390x"
@@ -760,10 +763,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -1157,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-20T01:08:25Z",
+    "generated": "2022-07-23T03:34:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-19T19:47:05Z"
+        "generated": "2022-07-22T18:45:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-19T01:31:59Z"
+        "generated": "2022-07-23T01:48:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0e1705a156..884c47b350 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-6.fc36.x86_64"
+      "evra": "7.82.0-7.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.x86_64"
@@ -229,7 +229,7 @@
       "evra": "3.8-2.fc36.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-9.fc36.x86_64"
+      "evra": "2.86-10.fc36.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-3.fc36.x86_64"
@@ -277,13 +277,13 @@
       "evra": "36-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-17.noarch"
+      "evra": "36-18.noarch"
     },
     "fedora-repos": {
       "evra": "36-1.noarch"
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.36.1-1.fc36.x86_64"
+      "evra": "2.37.1-1.fc36.x86_64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.11-200.fc36.x86_64"
+      "evra": "5.18.13-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.11-200.fc36.x86_64"
+      "evra": "5.18.13-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.11-200.fc36.x86_64"
+      "evra": "5.18.13-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.23-6.fc36.x86_64"
@@ -553,7 +553,7 @@
       "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.82.0-6.fc36.x86_64"
+      "evra": "7.82.0-7.fc36.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.x86_64"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220610-135.fc36.noarch"
+      "evra": "20220708-136.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-20T01:08:31Z",
+    "generated": "2022-07-23T03:34:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-19T19:47:30Z"
+        "generated": "2022-07-22T18:46:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-19T01:32:05Z"
+        "generated": "2022-07-23T01:48:26Z"
       }
     }
   }

From 838aa03cde5f9d61a1d05f447f5c1d01853d0a46 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Mon, 25 Jul 2022 14:38:25 +0000
Subject: [PATCH 1100/2157] manifests/group: fix ID for "input" group

This fixes the static GID for the `input` group, properly using the
Fedora-wide reserved ID `104`.
This group is mostly used as the owner of ephemeral entries under
`/dev`, thus it should be safe to update (upon booting into the new
deployment, devices will get created from scratch with the new GID).

Ref: https://pagure.io/setup/blob/108f62338e57652bb3a37e9028572704f3f28c29/f/uidgid#_113
---
 manifests/group              | 2 +-
 tests/kola/files/fcos_groups | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/group b/manifests/group
index 34ff37bcdc..2fd197cb7c 100644
--- a/manifests/group
+++ b/manifests/group
@@ -38,7 +38,7 @@ kube:x:994:
 chrony:x:992:
 tcpdump:x:72:
 ceph:x:167:
-input:x:995:
+input:x:104:
 systemd-timesync:x:991:
 systemd-network:x:990:
 systemd-resolve:x:989:
diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
index f3a9f0c325..d2e637a063 100755
--- a/tests/kola/files/fcos_groups
+++ b/tests/kola/files/fcos_groups
@@ -35,6 +35,7 @@ declare -A setup_groups=( \
     ["lock"]="54" \
     ["audio"]="63" \
     ["users"]="100" \
+    ["input"]="104" \
 # CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
 #   ["nobody"]="65534" \
     ["nobody"]="99" \
@@ -84,7 +85,6 @@ declare -A coreos_groups_static=( \
     ["chrony"]="992" \
     ["sssd"]="993" \
     ["kube"]="994" \
-    ["input"]="995" \
     ["cgred"]="996" \
     ["etcd"]="997" \
     ["polkitd"]="998" \

From ab890a4a25c0aa9761d8f9f695a5be8388697d30 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 26 Jul 2022 15:56:39 -0400
Subject: [PATCH 1101/2157] tests/default-network-behavior-change: update for
 NM 1.39.8+

Upstream NM landed some rework [1] to the ipv6.addr-gen-mode
knob which changed slightly some of the generated NM keyfiles.
Let's update the test to account for that.

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/e6a33c04ebe1ac84e31628911e25bdfd7534dd3c
---
 .../default-network-behavior-change/test.sh   | 54 ++++++++++++++++++-
 1 file changed, 53 insertions(+), 1 deletion(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index bc0559b796..5f5022cbde 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -90,6 +90,32 @@ method=auto
 
 [proxy]
 
+[user]
+org.freedesktop.NetworkManager.origin=nm-initrd-generator"
+# EXPECTED_INITRD_NETWORK_CFG4
+#   - used on Fedora 37+
+EXPECTED_INITRD_NETWORK_CFG4="# Created by nm-initrd-generator
+
+[connection]
+id=Wired Connection
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-retries=1
+multi-connect=3
+
+[ethernet]
+
+[ipv4]
+dhcp-timeout=90
+method=auto
+required-timeout=20000
+
+[ipv6]
+dhcp-timeout=90
+method=auto
+
+[proxy]
+
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
@@ -141,6 +167,29 @@ method=auto
 
 [proxy]
 
+[.nmmeta]
+nm-generated=true"
+# EXPECTED_REALROOT_NETWORK_CFG3:
+#   - used on all Fedora 37+
+EXPECTED_REALROOT_NETWORK_CFG3="[connection]
+id=Wired connection 1
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-priority=-999
+interface-name=xxxx
+timestamp=xxxxxxxxxx
+
+[ethernet]
+
+[ipv4]
+method=auto
+
+[ipv6]
+addr-gen-mode=default
+method=auto
+
+[proxy]
+
 [.nmmeta]
 nm-generated=true"
 
@@ -156,7 +205,10 @@ source /etc/os-release
 # All current FCOS releases use the same config
 # https://github.com/coreos/fedora-coreos-config/pull/1533
 if [ "$ID" == "fedora" ]; then
-    if [ "$VERSION_ID" -ge "36" ]; then
+    if [ "$VERSION_ID" -ge "37" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
+    elif [ "$VERSION_ID" -eq "36" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2
     else

From 3d20dd2acf0f6391b6eca644ca122512c8a77072 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 27 Jul 2022 06:16:24 +0000
Subject: [PATCH 1102/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/359/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 38 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 38 +++++++++++++++++++-------------------
 3 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 69cc9bb321..618f5eeb7c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "1.17.2-2.fc36.aarch64"
     },
     "ca-certificates": {
-      "evra": "2021.2.52-3.fc36.noarch"
+      "evra": "2022.2.54-1.0.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.aarch64"
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.2-1.fc36.aarch64"
+      "evra": "1.8.3-1.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -361,13 +361,13 @@
       "evra": "2.72.3-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-14.fc36.aarch64"
+      "evra": "2.35-15.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-14.fc36.aarch64"
+      "evra": "2.35-15.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-14.fc36.aarch64"
+      "evra": "2.35-15.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -727,7 +727,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.2-0.fc36.aarch64"
+      "evra": "2:4.16.3-0.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.2-0.fc36.aarch64"
+      "evra": "2:4.16.3-0.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
@@ -835,7 +835,7 @@
       "evra": "4.94.0-3.fc36.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-1.fc36.aarch64"
+      "evra": "5.4.4-3.fc36.aarch64"
     },
     "luksmeta": {
       "evra": "9-13.fc36.aarch64"
@@ -952,10 +952,10 @@
       "evra": "0.24.1-2.fc36.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-12.fc36.aarch64"
+      "evra": "1.5.2-13.fc36.aarch64"
     },
     "pam-libs": {
-      "evra": "1.5.2-12.fc36.aarch64"
+      "evra": "1.5.2-13.fc36.aarch64"
     },
     "passwd": {
       "evra": "0.80-12.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.1-2.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.10-3.fc36.aarch64"
+      "evra": "2022.12-2.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-3.fc36.aarch64"
+      "evra": "2022.12-2.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-2.fc36.aarch64"
@@ -1045,13 +1045,13 @@
       "evra": "2:1.1.1-2.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.2-0.fc36.aarch64"
+      "evra": "2:4.16.3-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.2-0.fc36.noarch"
+      "evra": "2:4.16.3-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.2-0.fc36.aarch64"
+      "evra": "2:4.16.3-0.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
@@ -1063,7 +1063,7 @@
       "evra": "36.10-1.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.10-1.fc36.noarch"
+      "evra": "2.14.1-1.fc36.noarch"
     },
     "sg3_utils": {
       "evra": "1.46-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-23T03:34:40Z",
+    "generated": "2022-07-27T05:11:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-22T18:45:15Z"
+        "generated": "2022-07-23T05:00:42Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-23T01:48:01Z"
+        "generated": "2022-07-27T02:03:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b764cc53bb..6a1ad48663 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -88,7 +88,7 @@
       "evra": "1.17.2-2.fc36.s390x"
     },
     "ca-certificates": {
-      "evra": "2021.2.52-3.fc36.noarch"
+      "evra": "2022.2.54-1.0.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.s390x"
@@ -340,13 +340,13 @@
       "evra": "2.72.3-1.fc36.s390x"
     },
     "glibc": {
-      "evra": "2.35-14.fc36.s390x"
+      "evra": "2.35-15.fc36.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-14.fc36.s390x"
+      "evra": "2.35-15.fc36.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-14.fc36.s390x"
+      "evra": "2.35-15.fc36.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.s390x"
@@ -676,7 +676,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.2-0.fc36.s390x"
+      "evra": "2:4.16.3-0.fc36.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.s390x"
@@ -745,7 +745,7 @@
       "evra": "0.3.2-3.fc36.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.2-0.fc36.s390x"
+      "evra": "2:4.16.3-0.fc36.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.s390x"
@@ -778,7 +778,7 @@
       "evra": "4.94.0-3.fc36.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-1.fc36.s390x"
+      "evra": "5.4.4-3.fc36.s390x"
     },
     "luksmeta": {
       "evra": "9-13.fc36.s390x"
@@ -886,10 +886,10 @@
       "evra": "0.24.1-2.fc36.s390x"
     },
     "pam": {
-      "evra": "1.5.2-12.fc36.s390x"
+      "evra": "1.5.2-13.fc36.s390x"
     },
     "pam-libs": {
-      "evra": "1.5.2-12.fc36.s390x"
+      "evra": "1.5.2-13.fc36.s390x"
     },
     "passwd": {
       "evra": "0.80-12.fc36.s390x"
@@ -964,10 +964,10 @@
       "evra": "4.17.1-2.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.10-3.fc36.s390x"
+      "evra": "2022.12-2.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-3.fc36.s390x"
+      "evra": "2022.12-2.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-2.fc36.s390x"
@@ -982,13 +982,13 @@
       "evra": "2:2.20.0-1.fc36.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.2-0.fc36.s390x"
+      "evra": "2:4.16.3-0.fc36.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.2-0.fc36.noarch"
+      "evra": "2:4.16.3-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.2-0.fc36.s390x"
+      "evra": "2:4.16.3-0.fc36.s390x"
     },
     "sed": {
       "evra": "4.8-10.fc36.s390x"
@@ -1000,7 +1000,7 @@
       "evra": "36.10-1.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.10-1.fc36.noarch"
+      "evra": "2.14.1-1.fc36.noarch"
     },
     "sg3_utils": {
       "evra": "1.46-3.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-23T03:34:00Z",
+    "generated": "2022-07-27T05:10:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-22T18:45:56Z"
+        "generated": "2022-07-23T05:00:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-23T01:48:19Z"
+        "generated": "2022-07-27T02:04:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 884c47b350..45493daa89 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -91,7 +91,7 @@
       "evra": "1.17.2-2.fc36.x86_64"
     },
     "ca-certificates": {
-      "evra": "2021.2.52-3.fc36.noarch"
+      "evra": "2022.2.54-1.0.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.x86_64"
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.2-1.fc36.x86_64"
+      "evra": "1.8.3-1.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -361,13 +361,13 @@
       "evra": "2.72.3-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-14.fc36.x86_64"
+      "evra": "2.35-15.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-14.fc36.x86_64"
+      "evra": "2.35-15.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-14.fc36.x86_64"
+      "evra": "2.35-15.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -733,7 +733,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.2-0.fc36.x86_64"
+      "evra": "2:4.16.3-0.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.2-0.fc36.x86_64"
+      "evra": "2:4.16.3-0.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
@@ -844,7 +844,7 @@
       "evra": "4.94.0-3.fc36.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-1.fc36.x86_64"
+      "evra": "5.4.4-3.fc36.x86_64"
     },
     "luksmeta": {
       "evra": "9-13.fc36.x86_64"
@@ -964,10 +964,10 @@
       "evra": "0.24.1-2.fc36.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-12.fc36.x86_64"
+      "evra": "1.5.2-13.fc36.x86_64"
     },
     "pam-libs": {
-      "evra": "1.5.2-12.fc36.x86_64"
+      "evra": "1.5.2-13.fc36.x86_64"
     },
     "passwd": {
       "evra": "0.80-12.fc36.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.1-2.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.10-3.fc36.x86_64"
+      "evra": "2022.12-2.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.10-3.fc36.x86_64"
+      "evra": "2022.12-2.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-2.fc36.x86_64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.1-2.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.2-0.fc36.x86_64"
+      "evra": "2:4.16.3-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.2-0.fc36.noarch"
+      "evra": "2:4.16.3-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.2-0.fc36.x86_64"
+      "evra": "2:4.16.3-0.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
@@ -1072,7 +1072,7 @@
       "evra": "36.10-1.fc36.noarch"
     },
     "setup": {
-      "evra": "2.13.10-1.fc36.noarch"
+      "evra": "2.14.1-1.fc36.noarch"
     },
     "sg3_utils": {
       "evra": "1.46-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-23T03:34:00Z",
+    "generated": "2022-07-27T05:10:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-22T18:46:06Z"
+        "generated": "2022-07-23T05:01:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-23T01:48:26Z"
+        "generated": "2022-07-27T02:04:11Z"
       }
     }
   }

From ebe2edb7801a590045fd778043a2b0ae9ef49845 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 27 Jul 2022 02:24:36 -0400
Subject: [PATCH 1103/2157] 05core: fix permissions of
 /etc/sudoers.d/coreos-sudo-group

sudo wants them to be 440, not 600.

Also update the kola test to run "visudo -c" rather than checking the
perms ourselves.  This not only checks perms, but also ensures that the
files are syntactically valid.

Fixes https://github.com/coreos/fedora-coreos-config/issues/1872.
---
 overlay.d/05core/statoverride                     | 5 +++--
 tests/kola/files/{sudoers-permissions => sudoers} | 8 +++-----
 2 files changed, 6 insertions(+), 7 deletions(-)
 rename tests/kola/files/{sudoers-permissions => sudoers} (50%)

diff --git a/overlay.d/05core/statoverride b/overlay.d/05core/statoverride
index 9769b8ccb0..a726b7ff0a 100644
--- a/overlay.d/05core/statoverride
+++ b/overlay.d/05core/statoverride
@@ -1,6 +1,7 @@
 # Config file for overriding permission bits on overlay files/dirs
 # Format: =<file mode in decimal> <absolute path to a file or directory>
 
-# Some security scanners complain if /etc/sudoers.d files have 0044 mode bits
+# sudo prefers its config files to be mode 440, and some security scanners
+# complain if /etc/sudoers.d files are world-readable.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1981979
-=384 /etc/sudoers.d/coreos-sudo-group
+=288 /etc/sudoers.d/coreos-sudo-group
diff --git a/tests/kola/files/sudoers-permissions b/tests/kola/files/sudoers
similarity index 50%
rename from tests/kola/files/sudoers-permissions
rename to tests/kola/files/sudoers
index 58d9d8c61a..7e56a4c6cb 100755
--- a/tests/kola/files/sudoers-permissions
+++ b/tests/kola/files/sudoers
@@ -6,9 +6,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # Security scanners complain about world-readable files in /etc/sudoers.d.
-# Check that there aren't any.
+# Check file permissions and syntax of /etc/sudoers and /etc/sudoers.d/*.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1981979
-sudoers_files="$(find /etc/sudoers.d -type f ! -perm 600 2>&1)"
-if [ -n "$sudoers_files" ]; then
-    fatal "Found files in /etc/sudoers.d with unexpected permissions: $sudoers_files"
-fi
+visudo -c
+ok "sudoers files are valid"

From 371d844c3516d9c6d0df3262ee20f15251061c1c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Jul 2022 06:05:42 +0000
Subject: [PATCH 1104/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 26 +-------------------------
 1 file changed, 1 insertion(+), 25 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 6427a5a564..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,28 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  console-login-helper-messages:
-    evra: 0.21.3-1.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
-      type: fast-track
-  console-login-helper-messages-issuegen:
-    evra: 0.21.3-1.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
-      type: fast-track
-  console-login-helper-messages-motdgen:
-    evra: 0.21.3-1.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
-      type: fast-track
-  console-login-helper-messages-profile:
-    evra: 0.21.3-1.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b6af15c3b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1153
-      type: fast-track
+packages: {}

From 6f7e14f6e1f42f3fcde0a641eca7a9d3bc3e847d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 27 Jul 2022 15:59:29 -0400
Subject: [PATCH 1105/2157] overrides: fast-track kexec-tools-2.0.24-4.fc36 for
 s390x kdump fix

Also drop the denylist entry.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1267
---
 kola-denylist.yaml           | 11 -----------
 manifest-lock.overrides.yaml |  8 +++++++-
 2 files changed, 7 insertions(+), 12 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index bcc0f8afcd..0e34563ac2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -9,17 +9,6 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
     - ppc64le
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-config/issues/1500
-  snooze: 2022-08-30
-  arches:
-    - s390x
-  streams:
-  - next
-  - next-devel
-  - testing
-  - testing-devel
-  - stable
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..fc3eeb7b47 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,10 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kexec-tools:
+    evr: 2.0.24-4.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-dc7dac9507
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1267
+      type: fast-track

From ddd3d29c65dd2b9802e14a0fd904ba23a87d8bbd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Jul 2022 23:35:01 +0000
Subject: [PATCH 1106/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/362/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 3 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 618f5eeb7c..a35a1a59b5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-2.fc36.aarch64"
+      "evra": "1:1.38.2-1.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-2.fc36.aarch64"
+      "evra": "1:1.38.2-1.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-2.fc36.aarch64"
+      "evra": "1:1.38.2-1.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-2.fc36.aarch64"
+      "evra": "1:1.38.2-1.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-2.fc36.aarch64"
+      "evra": "1:1.38.2-1.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.1.0-1.fc36.noarch"
@@ -475,7 +475,7 @@
       "evra": "5.18.13-200.fc36.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.23-6.fc36.aarch64"
+      "evra": "2.0.24-4.fc36.aarch64"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.aarch64"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "3:4.1.1-2.fc36.aarch64"
+      "evra": "4:4.1.1-3.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-2.fc36.aarch64"
+      "evra": "4:4.1.1-3.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.049-1.fc36.noarch"
+      "evra": "2:9.0.077-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.049-1.fc36.aarch64"
+      "evra": "2:9.0.077-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-27T05:11:30Z",
+    "generated": "2022-07-28T22:27:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-23T05:00:42Z"
+        "generated": "2022-07-28T12:22:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-27T02:03:43Z"
+        "generated": "2022-07-28T01:18:04Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6a1ad48663..a75ac5d1a9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-2.fc36.s390x"
+      "evra": "1:1.38.2-1.fc36.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-2.fc36.s390x"
+      "evra": "1:1.38.2-1.fc36.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-2.fc36.s390x"
+      "evra": "1:1.38.2-1.fc36.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-2.fc36.s390x"
+      "evra": "1:1.38.2-1.fc36.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-2.fc36.s390x"
+      "evra": "1:1.38.2-1.fc36.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.1.0-1.fc36.noarch"
@@ -439,7 +439,7 @@
       "evra": "5.18.13-200.fc36.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.23-6.fc36.s390x"
+      "evra": "2.0.24-4.fc36.s390x"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.s390x"
@@ -916,10 +916,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "3:4.1.1-2.fc36.s390x"
+      "evra": "4:4.1.1-3.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-2.fc36.s390x"
+      "evra": "4:4.1.1-3.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -1117,10 +1117,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.049-1.fc36.noarch"
+      "evra": "2:9.0.077-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.049-1.fc36.s390x"
+      "evra": "2:9.0.077-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-27T05:10:43Z",
+    "generated": "2022-07-28T22:26:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-23T05:00:30Z"
+        "generated": "2022-07-28T12:23:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-27T02:04:04Z"
+        "generated": "2022-07-28T01:18:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 45493daa89..31c87f0a30 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.0-2.fc36.x86_64"
+      "evra": "1:1.38.2-1.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.0-2.fc36.x86_64"
+      "evra": "1:1.38.2-1.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.0-2.fc36.x86_64"
+      "evra": "1:1.38.2-1.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.0-2.fc36.x86_64"
+      "evra": "1:1.38.2-1.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.0-2.fc36.x86_64"
+      "evra": "1:1.38.2-1.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.1.0-1.fc36.noarch"
@@ -481,7 +481,7 @@
       "evra": "5.18.13-200.fc36.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.23-6.fc36.x86_64"
+      "evra": "2.0.24-4.fc36.x86_64"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.x86_64"
@@ -994,10 +994,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "3:4.1.1-2.fc36.x86_64"
+      "evra": "4:4.1.1-3.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "3:4.1.1-2.fc36.x86_64"
+      "evra": "4:4.1.1-3.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.049-1.fc36.noarch"
+      "evra": "2:9.0.077-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.049-1.fc36.x86_64"
+      "evra": "2:9.0.077-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-27T05:10:42Z",
+    "generated": "2022-07-28T22:26:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-23T05:01:19Z"
+        "generated": "2022-07-28T12:23:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-27T02:04:11Z"
+        "generated": "2022-07-28T01:18:49Z"
       }
     }
   }

From 3505072d16ad0074b0aa84f5a4043f204137b4e1 Mon Sep 17 00:00:00 2001
From: LakshmiRavichandran1 <Lakshmi.Ravichandran1@ibm.com>
Date: Fri, 29 Jul 2022 13:32:47 +0200
Subject: [PATCH 1107/2157] modify ext.config.files.setgid test as per upstream
 change to liblockfile ; fcos.filesystem test is deleted by #2986

---
 kola-denylist.yaml      | 12 ------------
 tests/kola/files/setgid |  1 +
 2 files changed, 1 insertion(+), 12 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0e34563ac2..647fa32900 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -48,15 +48,3 @@
   - aarch64
   streams:
   - rawhide
-- pattern: ext.config.files.setgid
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1253
-  arches:
-  - s390x
-  streams:
-  - rawhide
-- pattern: fcos.filesystem
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1253
-  arches:
-  - s390x
-  streams:
-  - rawhide
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index b777dd1326..4d555b6116 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -9,6 +9,7 @@ list_setgid_files=(
     '/usr/bin/write'
     '/usr/libexec/openssh/ssh-keysign'
     '/usr/libexec/utempter/utempter'
+    '/usr/bin/dotlockfile'
 )
 
 unknown_setgid_files=""

From a7640d91daf8a4c70c78cdf1ea049156379f4f58 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Jul 2022 21:58:03 +0000
Subject: [PATCH 1108/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/363/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 3 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a35a1a59b5..e978a98ce2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -172,7 +172,7 @@
       "evra": "3.17.1-2.fc36.aarch64"
     },
     "crun": {
-      "evra": "1.4.5-1.fc36.aarch64"
+      "evra": "1.5-1.fc36.aarch64"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -862,7 +862,7 @@
       "evra": "2:0.6.0-3.fc36.aarch64"
     },
     "mozjs91": {
-      "evra": "91.11.0-1.fc36.aarch64"
+      "evra": "91.12.0-1.fc36.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.aarch64"
@@ -940,10 +940,10 @@
       "evra": "1.77-9.fc36.aarch64"
     },
     "ostree": {
-      "evra": "2022.4-2.fc36.aarch64"
+      "evra": "2022.5-2.fc36.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.4-2.fc36.aarch64"
+      "evra": "2022.5-2.fc36.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-28T22:27:00Z",
+    "generated": "2022-07-29T20:54:15Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T12:22:58Z"
+        "generated": "2022-07-28T23:38:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-28T01:18:04Z"
+        "generated": "2022-07-29T02:19:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a75ac5d1a9..80f48fffa0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -169,7 +169,7 @@
       "evra": "3.17.1-2.fc36.s390x"
     },
     "crun": {
-      "evra": "1.4.5-1.fc36.s390x"
+      "evra": "1.5-1.fc36.s390x"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -802,7 +802,7 @@
       "evra": "20.10.17-3.fc36.s390x"
     },
     "mozjs91": {
-      "evra": "91.11.0-1.fc36.s390x"
+      "evra": "91.12.0-1.fc36.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.s390x"
@@ -874,10 +874,10 @@
       "evra": "1:3.0.5-1.fc36.s390x"
     },
     "ostree": {
-      "evra": "2022.4-2.fc36.s390x"
+      "evra": "2022.5-2.fc36.s390x"
     },
     "ostree-libs": {
-      "evra": "2022.4-2.fc36.s390x"
+      "evra": "2022.5-2.fc36.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-28T22:26:21Z",
+    "generated": "2022-07-29T20:53:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T12:23:55Z"
+        "generated": "2022-07-28T23:38:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-28T01:18:42Z"
+        "generated": "2022-07-29T02:19:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 31c87f0a30..7538ce2ec4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -172,7 +172,7 @@
       "evra": "3.17.1-2.fc36.x86_64"
     },
     "crun": {
-      "evra": "1.4.5-1.fc36.x86_64"
+      "evra": "1.5-1.fc36.x86_64"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -874,7 +874,7 @@
       "evra": "2:0.6.0-3.fc36.x86_64"
     },
     "mozjs91": {
-      "evra": "91.11.0-1.fc36.x86_64"
+      "evra": "91.12.0-1.fc36.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.x86_64"
@@ -952,10 +952,10 @@
       "evra": "1.77-9.fc36.x86_64"
     },
     "ostree": {
-      "evra": "2022.4-2.fc36.x86_64"
+      "evra": "2022.5-2.fc36.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.4-2.fc36.x86_64"
+      "evra": "2022.5-2.fc36.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-2.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-28T22:26:24Z",
+    "generated": "2022-07-29T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T12:23:19Z"
+        "generated": "2022-07-28T23:39:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-28T01:18:49Z"
+        "generated": "2022-07-29T02:19:48Z"
       }
     }
   }

From 2ec413511413457002cf5fc869a423abb991831e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 31 Jul 2022 03:19:23 +0000
Subject: [PATCH 1109/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/365/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 3 files changed, 54 insertions(+), 54 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e978a98ce2..6984ae1049 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-4.fc36.aarch64"
+      "evra": "1.6.6-5.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -376,7 +376,7 @@
       "evra": "2.3.7-1.fc36.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.6-3.fc36.aarch64"
+      "evra": "3.7.7-1.fc36.aarch64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.aarch64"
@@ -403,7 +403,7 @@
       "evra": "3.23-6.fc36.aarch64"
     },
     "ignition": {
-      "evra": "2.14.0-2.fc36.aarch64"
+      "evra": "2.14.0-3.fc36.aarch64"
     },
     "inih": {
       "evra": "56-1.fc36.aarch64"
@@ -628,7 +628,7 @@
       "evra": "1.6.0-3.fc36.aarch64"
     },
     "libldb": {
-      "evra": "2.5.1-1.fc36.aarch64"
+      "evra": "2.5.2-1.fc36.aarch64"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.aarch64"
@@ -727,7 +727,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.3-0.fc36.aarch64"
+      "evra": "2:4.16.4-0.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -772,7 +772,7 @@
       "evra": "0.12.1-1.fc36.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc1.fc36.1.aarch64"
+      "evra": "1.3.2-1.rc4.fc36.aarch64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.aarch64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.3-0.fc36.aarch64"
+      "evra": "2:4.16.4-0.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
@@ -856,7 +856,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.17-3.fc36.aarch64"
+      "evra": "20.10.17-5.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.aarch64"
@@ -1042,16 +1042,16 @@
       "evra": "3.2.4-1.fc36.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.1-2.fc36.aarch64"
+      "evra": "2:1.1.2-3.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.3-0.fc36.aarch64"
+      "evra": "2:4.16.4-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.3-0.fc36.noarch"
+      "evra": "2:4.16.4-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.3-0.fc36.aarch64"
+      "evra": "2:4.16.4-0.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.8.0-9.fc36.aarch64"
+      "evra": "1:1.9.0-4.fc36.aarch64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.aarch64"
@@ -1165,13 +1165,13 @@
       "evra": "1.31-5.fc36.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-5.fc36.aarch64"
+      "evra": "0.0.99.3-6.fc36.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-1.fc36.aarch64"
+      "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
       "evra": "2022a-2.fc36.noarch"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-29T20:54:15Z",
+    "generated": "2022-07-31T02:13:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T23:38:59Z"
+        "generated": "2022-07-29T22:00:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-29T02:19:21Z"
+        "generated": "2022-07-31T01:18:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 80f48fffa0..6400c61318 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-4.fc36.s390x"
+      "evra": "1.6.6-5.fc36.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.s390x"
@@ -355,7 +355,7 @@
       "evra": "2.3.7-1.fc36.s390x"
     },
     "gnutls": {
-      "evra": "3.7.6-3.fc36.s390x"
+      "evra": "3.7.7-1.fc36.s390x"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.s390x"
@@ -370,7 +370,7 @@
       "evra": "3.23-6.fc36.s390x"
     },
     "ignition": {
-      "evra": "2.14.0-2.fc36.s390x"
+      "evra": "2.14.0-3.fc36.s390x"
     },
     "inih": {
       "evra": "56-1.fc36.s390x"
@@ -577,7 +577,7 @@
       "evra": "1.6.0-3.fc36.s390x"
     },
     "libldb": {
-      "evra": "2.5.1-1.fc36.s390x"
+      "evra": "2.5.2-1.fc36.s390x"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.s390x"
@@ -676,7 +676,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.3-0.fc36.s390x"
+      "evra": "2:4.16.4-0.fc36.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.s390x"
@@ -721,7 +721,7 @@
       "evra": "0.12.1-1.fc36.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc1.fc36.1.s390x"
+      "evra": "1.3.2-1.rc4.fc36.s390x"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.s390x"
@@ -745,7 +745,7 @@
       "evra": "0.3.2-3.fc36.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.3-0.fc36.s390x"
+      "evra": "2:4.16.4-0.fc36.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.s390x"
@@ -799,7 +799,7 @@
       "evra": "4.2-1.fc36.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.17-3.fc36.s390x"
+      "evra": "20.10.17-5.fc36.s390x"
     },
     "mozjs91": {
       "evra": "91.12.0-1.fc36.s390x"
@@ -976,19 +976,19 @@
       "evra": "3.2.4-1.fc36.s390x"
     },
     "runc": {
-      "evra": "2:1.1.1-2.fc36.s390x"
+      "evra": "2:1.1.2-3.fc36.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.20.0-1.fc36.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.3-0.fc36.s390x"
+      "evra": "2:4.16.4-0.fc36.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.3-0.fc36.noarch"
+      "evra": "2:4.16.4-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.3-0.fc36.s390x"
+      "evra": "2:4.16.4-0.fc36.s390x"
     },
     "sed": {
       "evra": "4.8-10.fc36.s390x"
@@ -1015,7 +1015,7 @@
       "evra": "2:4.11.1-2.fc36.s390x"
     },
     "skopeo": {
-      "evra": "1:1.8.0-9.fc36.s390x"
+      "evra": "1:1.9.0-4.fc36.s390x"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.s390x"
@@ -1096,13 +1096,13 @@
       "evra": "1.31-5.fc36.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.3-5.fc36.s390x"
+      "evra": "0.0.99.3-6.fc36.s390x"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.s390x"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-1.fc36.s390x"
+      "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
       "evra": "2022a-2.fc36.noarch"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-29T20:53:26Z",
+    "generated": "2022-07-31T02:12:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T23:38:53Z"
+        "generated": "2022-07-29T22:00:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-29T02:19:41Z"
+        "generated": "2022-07-31T01:19:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7538ce2ec4..0d51a7e617 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-4.fc36.x86_64"
+      "evra": "1.6.6-5.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -376,7 +376,7 @@
       "evra": "2.3.7-1.fc36.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.6-3.fc36.x86_64"
+      "evra": "3.7.7-1.fc36.x86_64"
     },
     "gpgme": {
       "evra": "1.15.1-6.fc36.x86_64"
@@ -409,7 +409,7 @@
       "evra": "3.23-6.fc36.x86_64"
     },
     "ignition": {
-      "evra": "2.14.0-2.fc36.x86_64"
+      "evra": "2.14.0-3.fc36.x86_64"
     },
     "inih": {
       "evra": "56-1.fc36.x86_64"
@@ -634,7 +634,7 @@
       "evra": "1.6.0-3.fc36.x86_64"
     },
     "libldb": {
-      "evra": "2.5.1-1.fc36.x86_64"
+      "evra": "2.5.2-1.fc36.x86_64"
     },
     "libluksmeta": {
       "evra": "9-13.fc36.x86_64"
@@ -733,7 +733,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.3-0.fc36.x86_64"
+      "evra": "2:4.16.4-0.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -781,7 +781,7 @@
       "evra": "0.12.1-1.fc36.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc1.fc36.1.x86_64"
+      "evra": "1.3.2-1.rc4.fc36.x86_64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.x86_64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.3-0.fc36.x86_64"
+      "evra": "2:4.16.4-0.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
@@ -868,7 +868,7 @@
       "evra": "2:2.1-51.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.17-3.fc36.x86_64"
+      "evra": "20.10.17-5.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.x86_64"
@@ -1051,16 +1051,16 @@
       "evra": "3.2.4-1.fc36.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.1-2.fc36.x86_64"
+      "evra": "2:1.1.2-3.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.3-0.fc36.x86_64"
+      "evra": "2:4.16.4-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.3-0.fc36.noarch"
+      "evra": "2:4.16.4-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.3-0.fc36.x86_64"
+      "evra": "2:4.16.4-0.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
@@ -1093,7 +1093,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.8.0-9.fc36.x86_64"
+      "evra": "1:1.9.0-4.fc36.x86_64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.x86_64"
@@ -1174,13 +1174,13 @@
       "evra": "1.31-5.fc36.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-5.fc36.x86_64"
+      "evra": "0.0.99.3-6.fc36.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.2-2.fc36.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-1.fc36.x86_64"
+      "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
       "evra": "2022a-2.fc36.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-29T20:53:25Z",
+    "generated": "2022-07-31T02:12:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-28T23:39:36Z"
+        "generated": "2022-07-29T22:00:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-29T02:19:48Z"
+        "generated": "2022-07-31T01:19:28Z"
       }
     }
   }

From 3dee27d4487ee0a484858fe60e3c5b1a792d48b9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 1 Aug 2022 10:17:35 -0400
Subject: [PATCH 1110/2157] tests: bump memory for tests because of DNF issue

It appears there is some issue where DNF is getting OOM killed
with the current versions of DNF and the current updates repo.
Not sure what the issue is entirely, but let's bump the memory
required for the tests that run DNF inside a container.

xref: https://bugzilla.redhat.com/show_bug.cgi?id=1907030
xref: https://pagure.io/releng/issue/10935
---
 tests/kola/chrony/dhcp-propagation | 6 +++++-
 tests/kola/podman/rootless-systemd | 6 +++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 4d5d026d37..78d27a8a9f 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15 }
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
 # This script creates two veth interfaces i.e. one for the host machine 
 # and other for the container(dnsmasq server). This setup will be helpful
 # to verify the DHCP propagation of NTP servers. This will also avoid any 
@@ -16,6 +16,10 @@
 # - timeoutMin: 15
 #   - Pulling and building the container can take a long time if a
 #     slow mirror gets chosen.
+# - minMemory: 1536
+#   - There's a bug in dnf that is causing OOM on low memory systems:
+#     https://bugzilla.redhat.com/show_bug.cgi?id=1907030
+#     https://pagure.io/releng/issue/10935#comment-808601
 
 set -xeuo pipefail
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 2be9af0583..28de32e715 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15 }
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
 # It tests that rootless+systemd works. See issue:
@@ -21,6 +21,10 @@
 # - timeoutMin: 15
 #   - Pulling and building the container can take a long time if a
 #     slow mirror gets chosen.
+# - minMemory: 1536
+#   - There's a bug in dnf that is causing OOM on low memory systems:
+#     https://bugzilla.redhat.com/show_bug.cgi?id=1907030
+#     https://pagure.io/releng/issue/10935#comment-808601
 
 set -xeuo pipefail
 

From 651846ef11c49e040521fcfde74da95ce9808c09 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 1 Aug 2022 23:34:21 -0400
Subject: [PATCH 1111/2157] 05core: fix coreos-boot-edit.service race with
 switch-root

coreos-boot-edit.service wasn't sequenced Before anything, so under heavy
I/O contention it could race with services being terminated prior to
switching to the real root.  Before=initrd.target should fix this, so we
specify it, but it isn't enough for the same unknown reason as in
8b804863c6.  Also specify Before=initrd-parse-etc.service to avoid that
problem.

Fixes occasional multipath.day1 flakes in
https://github.com/coreos/fedora-coreos-tracker/issues/1105, which became
more frequent after https://github.com/coreos/coreos-ci-lib/pull/112
landed.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1105.
---
 .../modules.d/35coreos-ignition/coreos-boot-edit.service    | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
index b51059f008..bc2d9ec9ea 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.service
@@ -16,6 +16,12 @@ After=dev-disk-by\x2dlabel-boot.device
 After=ignition-files.service
 # As above, this isn't strictly necessary, but on principle.
 After=coreos-multipath-wait.target
+# Finish before systemd starts tearing down services
+Before=initrd.target
+# initrd-parse-etc.service starts initrd-cleanup.service which will race
+# with us completing before we get nuked.  Need to get to the bottom of it,
+# but for now we need this.
+Before=initrd-parse-etc.service
 
 [Service]
 Type=oneshot

From a9efb8664587a99acdb66b5d7df62f1aae50dbfb Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 2 Aug 2022 10:42:07 +0000
Subject: [PATCH 1112/2157] tests/files: checks for FCOS system users

This performs extensive checks on default FCOS system users.
---
 tests/kola/files/fcos_users | 91 +++++++++++++++++++++++++++++++++++++
 1 file changed, 91 insertions(+)
 create mode 100755 tests/kola/files/fcos_users

diff --git a/tests/kola/files/fcos_users b/tests/kola/files/fcos_users
new file mode 100755
index 0000000000..48716ecc4f
--- /dev/null
+++ b/tests/kola/files/fcos_users
@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+# kola: { "distros": "fcos", "exclusive": false }
+#
+# This performs a sanity check on system users that are shipped
+# as part of the base OS. Those users come in different shapes
+# (with static or dynamic IDs, from plain files or from scriptlets)
+# and each case is covered by a corresponding check here below.
+
+set -euo pipefail
+
+. "${KOLA_EXT_DATA}/commonlib.sh"
+
+# Check base system users (from `setup` package).
+declare -A setup_users=( \
+    ["root"]="0:0" \
+    ["bin"]="1:1" \
+    ["daemon"]="2:2" \
+    ["adm"]="3:4" \
+    ["lp"]="4:7" \
+    ["sync"]="5:0" \
+    ["shutdown"]="6:0" \
+    ["halt"]="7:0" \
+    ["mail"]="8:12" \
+    ["operator"]="11:0" \
+    ["games"]="12:100" \
+    ["ftp"]="14:50" \
+# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
+#   ["nobody"]="65534:65534" \
+    ["nobody"]="99:99" \
+)
+for username in "${!setup_users[@]}"; do
+    ids="${setup_users[$username]}";
+    if [[ $(getent passwd "${username}") != ${username}:x:${ids}:* ]]; then
+        getent passwd
+        fatal "failure on setup_users entry ${username}"
+    fi
+done
+echo "all expected base users from 'setup' package are in place"
+
+# Check additional users with static IDs.
+declare -A extra_users_static=( \
+    ["dbus"]="81:81" \
+    ["tcpdump"]="72:72" \
+    ["sshd"]="74:74" \
+    ["ceph"]="167:167"
+    ["tss"]="59:59" \
+    ["avahi-autoipd"]="170:170" \
+    ["rpc"]="32:32" \
+    ["rpcuser"]="29:29" \
+    ["nfsnobody"]="65534:65534" \
+)
+for username in "${!extra_users_static[@]}"; do
+    ids="${extra_users_static[$username]}";
+    if [[ $(getent passwd "${username}") != ${username}:x:${ids}:* ]]; then
+        getent passwd
+        fatal "failure on extra_user_static entry ${username}"
+    fi
+done
+echo "all expected extra static users are in place"
+
+
+# Check CoreOS-specific static UIDs.
+declare -A coreos_users_static=( \
+    ["dockerroot"]="997:986" \
+    ["kube"]="996:994" \
+    ["sssd"]="995:993" \
+    ["polkitd"]="999:998" \
+    ["etcd"]="998:997" \
+    ["chrony"]="994:992" \
+    ["systemd-timesync"]="993:991" \
+    ["systemd-network"]="991:990" \
+    ["systemd-resolve"]="990:989" \
+    ["systemd-bus-proxy"]="989:988" \
+    ["cockpit-ws"]="988:987" \
+)
+for username in "${!coreos_users_static[@]}"; do
+    ids="${coreos_users_static[$username]}";
+    if [[ $(getent passwd "${username}") != ${username}:x:${ids}:* ]]; then
+        getent passwd
+        fatal "failure on coreos_user_static entry ${username}"
+    fi
+done
+echo "all expected CoreOS static users are in place"
+
+# Check a dynamic user (from `clevis` package).
+if [[ $(getent passwd clevis) != clevis:x:* ]]; then
+    getent passwd
+    fatal "failure on user 'clevis'"
+fi
+echo "user 'clevis' from 'clevis' package is in place"
+

From ddd3db0f365e381709f78c6b5bc22fdf8de362f3 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 2 Aug 2022 13:52:14 +0000
Subject: [PATCH 1113/2157] manifests/passwd: align 'nologin' shell path with
 systemd defaults

This updates all relevant shell fields to use `/usr/sbin/nologin`.
After the `/usr` hierarchy merge that happened in Fedora 17, the
`nologin` binary is now effectively located under `/usr/sbin/`.
For this reason, `systemd-sysusers` directly uses the latter path
as the default shell for system users.
While semantically equivalent, updating all entries to the new
location ensures that defaults are matching across all components.
In turn, that allows packages to avoid specifying a custom `nologin`
shell in sysusers.d fragment, and just rely on systemd defaults.

Refs:
 * https://fedoraproject.org/wiki/Features/UsrMove
 * https://github.com/systemd/systemd/blob/v251/meson.build#L633
 * https://pagure.io/setup/pull-request/40
---
 manifests/passwd | 58 ++++++++++++++++++++++++------------------------
 1 file changed, 29 insertions(+), 29 deletions(-)

diff --git a/manifests/passwd b/manifests/passwd
index b05ebdbfe8..c8fabb7fe9 100644
--- a/manifests/passwd
+++ b/manifests/passwd
@@ -1,33 +1,33 @@
 root:x:0:0:root:/root:/bin/bash
-bin:x:1:1:bin:/bin:/sbin/nologin
-daemon:x:2:2:daemon:/sbin:/sbin/nologin
-adm:x:3:4:adm:/var/adm:/sbin/nologin
-lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
+bin:x:1:1:bin:/bin:/usr/sbin/nologin
+daemon:x:2:2:daemon:/sbin:/usr/sbin/nologin
+adm:x:3:4:adm:/var/adm:/usr/sbin/nologin
+lp:x:4:7:lp:/var/spool/lpd:/usr/sbin/nologin
 sync:x:5:0:sync:/sbin:/bin/sync
 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
 halt:x:7:0:halt:/sbin:/sbin/halt
-mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
-operator:x:11:0:operator:/root:/sbin/nologin
-games:x:12:100:games:/usr/games:/sbin/nologin
-ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
-nobody:x:99:99:Nobody:/:/sbin/nologin
-dbus:x:81:81:System message bus:/:/sbin/nologin
-polkitd:x:999:998:User for polkitd:/:/sbin/nologin
-etcd:x:998:997:etcd user:/var/lib/etcd:/sbin/nologin
-tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin
-avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin
-rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
-sssd:x:995:993:User for sssd:/:/sbin/nologin
-dockerroot:x:997:986:Docker User:/var/lib/docker:/sbin/nologin
-rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
-nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
-kube:x:996:994:Kubernetes user:/:/sbin/nologin
-sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
-chrony:x:994:992::/var/lib/chrony:/sbin/nologin
-tcpdump:x:72:72::/:/sbin/nologin
-ceph:x:167:167:Ceph daemons:/var/lib/ceph:/sbin/nologin
-systemd-timesync:x:993:991:systemd Time Synchronization:/:/sbin/nologin
-systemd-network:x:991:990:systemd Network Management:/:/sbin/nologin
-systemd-resolve:x:990:989:systemd Resolver:/:/sbin/nologin
-systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/sbin/nologin
-cockpit-ws:x:988:987:User for cockpit-ws:/:/sbin/nologin
+mail:x:8:12:mail:/var/spool/mail:/usr/sbin/nologin
+operator:x:11:0:operator:/root:/usr/sbin/nologin
+games:x:12:100:games:/usr/games:/usr/sbin/nologin
+ftp:x:14:50:FTP User:/var/ftp:/usr/sbin/nologin
+nobody:x:99:99:Nobody:/:/usr/sbin/nologin
+dbus:x:81:81:System message bus:/:/usr/sbin/nologin
+polkitd:x:999:998:User for polkitd:/:/usr/sbin/nologin
+etcd:x:998:997:etcd user:/var/lib/etcd:/usr/sbin/nologin
+tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/usr/sbin/nologin
+avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/usr/sbin/nologin
+rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/usr/sbin/nologin
+sssd:x:995:993:User for sssd:/:/usr/sbin/nologin
+dockerroot:x:997:986:Docker User:/var/lib/docker:/usr/sbin/nologin
+rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/usr/sbin/nologin
+nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/usr/sbin/nologin
+kube:x:996:994:Kubernetes user:/:/usr/sbin/nologin
+sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/usr/sbin/nologin
+chrony:x:994:992::/var/lib/chrony:/usr/sbin/nologin
+tcpdump:x:72:72::/:/usr/sbin/nologin
+ceph:x:167:167:Ceph daemons:/var/lib/ceph:/usr/sbin/nologin
+systemd-timesync:x:993:991:systemd Time Synchronization:/:/usr/sbin/nologin
+systemd-network:x:991:990:systemd Network Management:/:/usr/sbin/nologin
+systemd-resolve:x:990:989:systemd Resolver:/:/usr/sbin/nologin
+systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/usr/sbin/nologin
+cockpit-ws:x:988:987:User for cockpit-ws:/:/usr/sbin/nologin

From ece8449439efd3c4e95ef5386302c51a62ac952b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 Aug 2022 18:11:33 +0000
Subject: [PATCH 1114/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fc3eeb7b47..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  kexec-tools:
-    evr: 2.0.24-4.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-dc7dac9507
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1267
-      type: fast-track
+packages: {}

From 87110e9d713d814b12e7046abb843d3fd96114fa Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 Aug 2022 20:53:51 +0000
Subject: [PATCH 1115/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/368/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6984ae1049..6c6770ff86 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-31T02:13:17Z",
+    "generated": "2022-08-02T20:53:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-29T22:00:16Z"
+        "generated": "2022-07-31T03:24:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-31T01:18:59Z"
+        "generated": "2022-08-02T01:31:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6400c61318..157ea633e3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-31T02:12:28Z",
+    "generated": "2022-08-02T20:52:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-29T22:00:09Z"
+        "generated": "2022-07-31T03:26:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-31T01:19:21Z"
+        "generated": "2022-08-02T01:31:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0d51a7e617..80298b4d42 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-07-31T02:12:32Z",
+    "generated": "2022-08-02T20:52:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-29T22:00:41Z"
+        "generated": "2022-07-31T03:25:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-07-31T01:19:28Z"
+        "generated": "2022-08-02T01:31:33Z"
       }
     }
   }

From 8f02f010ff230b9221ee82f6a4dcbf9fce236b87 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 2 Aug 2022 10:33:12 +0800
Subject: [PATCH 1116/2157] tests/var-mount/scsi-id: add support for scos

---
 tests/kola/var-mount/scsi-id/test.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index b3aabc02e6..b65cb22e93 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -17,8 +17,8 @@ source /etc/os-release
 ostree_conf=""
 if [ "$ID" == "fedora" ]; then
     ostree_conf="/boot/loader.1/entries/ostree-1-fedora-coreos.conf"
-elif [ "$ID" == "rhcos" ]; then
-    ostree_conf="/boot/loader.1/entries/ostree-1-rhcos.conf"
+elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
+    ostree_conf="/boot/loader.1/entries/ostree-1-${ID}.conf"
 else
     fatal "fail: not operating on expected OS"
 fi

From d6d097fea9597f48427f613aa5426c307c8f286d Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 2 Aug 2022 10:36:30 +0800
Subject: [PATCH 1117/2157] tests/default-network-behavior-change: add support
 for scos

Upstream PR https://github.com/coreos/fedora-coreos-config/pull/1870
---
 .../default-network-behavior-change/test.sh   | 21 ++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 5f5022cbde..e1188ccfea 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -93,7 +93,7 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG4
-#   - used on Fedora 37+
+#   - used on Fedora 37+ and scos
 EXPECTED_INITRD_NETWORK_CFG4="# Created by nm-initrd-generator
 
 [connection]
@@ -170,7 +170,7 @@ method=auto
 [.nmmeta]
 nm-generated=true"
 # EXPECTED_REALROOT_NETWORK_CFG3:
-#   - used on all Fedora 37+
+#   - used on all Fedora 37+ and scos
 EXPECTED_REALROOT_NETWORK_CFG3="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -214,17 +214,24 @@ if [ "$ID" == "fedora" ]; then
     else
         fatal "fail: not operating on expected OS version"
     fi
-elif [ "$ID" == "rhcos" ]; then
+elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
+    
+    # scos does not have RHEL_VERSION variable in /etc/os-release
+    if [[ ${RHEL_VERSION:-} == "" ]]; then
+        RHEL_VERSION=$(echo $OSTREE_VERSION | cut -f2 -d.)
+    fi    
+    # scos includes NetworkManager-1.39.10-1.el9.x86_64, update scripts
+    # according to F37
+    if [ "${RHEL_VERSION/\./}" -ge 91 ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
     # RHEL8.6 includes NetworkManager-1.36.0-1.el8.x86_64, update scripts
     # according to F36
-    if [ "${RHEL_VERSION/\./}" -ge 86 ]; then
+    elif [ "${RHEL_VERSION/\./}" -ge 86 ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2
-    elif [ "${RHEL_VERSION/\./}" -eq 85 ]; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG1
-        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1
     elif [ "${RHEL_VERSION/\./}" -eq 84 ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG2
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG1

From 29e17afee695b6fe64eedbf48eef907b116ff0e6 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 2 Aug 2022 02:12:46 -0400
Subject: [PATCH 1118/2157] 05core: add Before= to some Dracut services

If initrd services don't sequence themselves Before anything, it's
possible that they won't be started before initrd-cleanup.service isolates
to initrd-switch-root.target and kills them off.  Add at least
Before=initrd.target to avoid this.
---
 .../40ignition-ostree/ignition-ostree-check-rootfs-size.service | 2 ++
 .../60coreos-agetty-workaround/coreos-touch-run-agetty.service  | 1 +
 .../ignition-virtio-dump-journal.service                        | 1 +
 3 files changed, 4 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
index 5802f49de9..610c469474 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
@@ -6,6 +6,8 @@ ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 After=ignition-ostree-growfs.service
 After=ostree-prepare-root.service
+# Allow Ignition config to blank out the warning
+Before=ignition-files.service
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
index 743670ea0b..b6984b18e3 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/60coreos-agetty-workaround/coreos-touch-run-agetty.service
@@ -5,6 +5,7 @@
 Description=CoreOS: Touch /run/agetty.reload
 Documentation=https://bugzilla.redhat.com/show_bug.cgi?id=1932053
 DefaultDependencies=false
+Before=initrd.target
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
index 18a964cef9..513043a6ff 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
@@ -7,6 +7,7 @@ ConditionVirtualization=|qemu
 Requires=systemd-journald.service
 After=systemd-journald.service
 After=basic.target
+Before=initrd.target
 
 [Service]
 Type=oneshot

From 05ca46753054ad6d94f739c96131b3f14e0c9fb0 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 2 Aug 2022 02:18:30 -0400
Subject: [PATCH 1119/2157] ci: check for Dracut services without Before=

If initrd services don't sequence themselves Before anything, it's
possible that they won't be started before initrd-cleanup.service isolates
to initrd-switch-root.target and kills them off.  This keeps coming up, so
add a CI check to test for it.
---
 ci/validate | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/ci/validate b/ci/validate
index d4ad1834bd..3aeeeb1c71 100755
--- a/ci/validate
+++ b/ci/validate
@@ -6,13 +6,37 @@ import stat
 import subprocess
 import yaml
 
+INITRD_SERVICES_WITHOUT_BEFORE = {
+    # Depended on by other services
+    'coreos-livepxe-rootfs.service',
+}
+
 validated=0
 
+def openat(dirfd, name, mode='r'):
+    def opener(path, flags):
+        return os.open(path, flags, dir_fd=dirfd)
+    return open(name, mode, opener=opener)
+
+
+def validate_initrd_service(rootfd, name):
+    with openat(rootfd, name) as fh:
+        if ([l for l in fh.readlines() if l.startswith('Before=')] or
+                name in INITRD_SERVICES_WITHOUT_BEFORE):
+            global validated
+            validated += 1
+        else:
+            raise Exception(
+                f'{name} has no Before= and may race with switch-root'
+            )
+
+
 def validate_shell(rootfd, name):
     subprocess.check_call(['bash', '-n', name], preexec_fn=lambda: os.fchdir(rootfd))
     global validated
     validated +=1
 
+
 for root, dirs, files, rootfd in os.fwalk('.'):
     # Skip .git
     if '.git' in dirs:
@@ -26,6 +50,8 @@ for root, dirs, files, rootfd in os.fwalk('.'):
         elif name.endswith('.sh'):
             validate_shell(rootfd, name)
             continue
+        elif 'dracut/modules.d' in root and name.endswith('.service'):
+            validate_initrd_service(rootfd, name)
         stbuf = os.lstat(name, dir_fd=rootfd)
         if not stat.S_ISREG(stbuf.st_mode):
             continue

From 5053bc7de68d2f7c8dca46558a049ba50f40859c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 2 Aug 2022 16:45:47 +0200
Subject: [PATCH 1120/2157] s390x: Remove SetGID dotlockfile from liblockfile

Adding a new SetUID/SetGID binary to FCOS must come with a security
review as well as a detailed and explicit purpose.

Remove the offending binaries until we confirm that this is really
needed.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
See: https://bugzilla.redhat.com/show_bug.cgi?id=2112857
Fixes: 3505072d modify ext.config.files.setgid test as per upstream change to liblockfile ; fcos.filesystem test is deleted by #2986
---
 manifests/bootable-rpm-ostree.yaml | 7 +++++++
 tests/kola/files/setgid            | 1 -
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 4fd63c0faf..0842b3c1e9 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -33,3 +33,10 @@ packages-x86_64:
   - microcode_ctl
   # firmware updates
   - fwupd
+
+# See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
+#      https://bugzilla.redhat.com/show_bug.cgi?id=2112857
+# Temporary workaround to remove the SetGID binary from liblockfile that is
+# pulled by the s390utils but not needed for /usr/sbin/zipl.
+remove-from-packages:
+  - ["liblockfile", "/usr/bin/dotlockfile"]
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index 4d555b6116..b777dd1326 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -9,7 +9,6 @@ list_setgid_files=(
     '/usr/bin/write'
     '/usr/libexec/openssh/ssh-keysign'
     '/usr/libexec/utempter/utempter'
-    '/usr/bin/dotlockfile'
 )
 
 unknown_setgid_files=""

From aafeaa719d169d08e7a3936d43cc0c2fa238d732 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Fri, 5 Aug 2022 10:10:22 -0700
Subject: [PATCH 1121/2157] overrides: pin grub2 kola basic tests aren't coming
 up and the machines aren't getting out of grub Relates to:
 https://github.com/coreos/fedora-coreos-tracker/issues/1271

---
 manifest-lock.overrides.aarch64.yaml | 31 +++++++++++++++++++++
 manifest-lock.overrides.x86_64.yaml  | 41 ++++++++++++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 manifest-lock.overrides.aarch64.yaml
 create mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
new file mode 100644
index 0000000000..c260f5fc17
--- /dev/null
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -0,0 +1,31 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  grub2-common:
+    evra: 1:2.06-42.fc36.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-tools-minimal:
+    evra: 1:2.06-42.fc36.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-efi-aa64:
+    evra: 1:2.06-42.fc36.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-tools:
+    evra: 1:2.06-42.fc36.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
new file mode 100644
index 0000000000..9dddca2fd5
--- /dev/null
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -0,0 +1,41 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  grub2-pc-modules:
+    evra: 1:2.06-42.fc36.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-common:
+    evra: 1:2.06-42.fc36.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-tools-minimal:
+    evra: 1:2.06-42.fc36.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-efi-x64:
+    evra: 1:2.06-42.fc36.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-pc:
+    evra: 1:2.06-42.fc36.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin
+  grub2-tools:
+    evra: 1:2.06-42.fc36.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
+      type: pin

From b7dd545536aa7f13f17dd87490aca25f06f569dd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Aug 2022 18:45:40 +0000
Subject: [PATCH 1122/2157] overrides: pin filesystem-3.16-2.fc36

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..03081783d0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  filesystem:
+    evr: 3.16-2.fc36
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1273
+      type: pin

From 10cc857b2e112991a20a5863378fcf3f62ba4fc7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Aug 2022 21:00:49 +0000
Subject: [PATCH 1123/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/2/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 3 files changed, 45 insertions(+), 45 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6c6770ff86..a3aceea403 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -151,10 +151,10 @@
       "evra": "0.15.0-1.fc36.aarch64"
     },
     "coreutils": {
-      "evra": "9.0-5.fc36.aarch64"
+      "evra": "9.0-7.fc36.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.0-5.fc36.aarch64"
+      "evra": "9.0-7.fc36.aarch64"
     },
     "cpio": {
       "evra": "2.13-12.fc36.aarch64"
@@ -373,7 +373,7 @@
       "evra": "1:6.2.1-2.fc36.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.7-1.fc36.aarch64"
+      "evra": "2.3.7-3.fc36.aarch64"
     },
     "gnutls": {
       "evra": "3.7.7-1.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.13-200.fc36.aarch64"
+      "evra": "5.18.15-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.13-200.fc36.aarch64"
+      "evra": "5.18.15-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.13-200.fc36.aarch64"
+      "evra": "5.18.15-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -496,7 +496,7 @@
       "evra": "1.19.2-11.fc36.aarch64"
     },
     "less": {
-      "evra": "590-3.fc36.aarch64"
+      "evra": "590-5.fc36.aarch64"
     },
     "libacl": {
       "evra": "2.3.1-3.fc36.aarch64"
@@ -1024,10 +1024,10 @@
       "evra": "1.2.6-2.fc36.aarch64"
     },
     "rpm": {
-      "evra": "4.17.1-2.fc36.aarch64"
+      "evra": "4.17.1-3.fc36.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.1-2.fc36.aarch64"
+      "evra": "4.17.1-3.fc36.aarch64"
     },
     "rpm-ostree": {
       "evra": "2022.12-2.fc36.aarch64"
@@ -1036,7 +1036,7 @@
       "evra": "2022.12-2.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-2.fc36.aarch64"
+      "evra": "4.17.1-3.fc36.aarch64"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.aarch64"
@@ -1057,10 +1057,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-02T20:53:28Z",
+    "generated": "2022-08-05T19:49:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-31T03:24:47Z"
+        "generated": "2022-08-05T18:53:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-02T01:31:03Z"
+        "generated": "2022-08-05T01:12:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 157ea633e3..f2bfa3fbf8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -148,10 +148,10 @@
       "evra": "0.15.0-1.fc36.s390x"
     },
     "coreutils": {
-      "evra": "9.0-5.fc36.s390x"
+      "evra": "9.0-7.fc36.s390x"
     },
     "coreutils-common": {
-      "evra": "9.0-5.fc36.s390x"
+      "evra": "9.0-7.fc36.s390x"
     },
     "cpio": {
       "evra": "2.13-12.fc36.s390x"
@@ -352,7 +352,7 @@
       "evra": "1:6.2.1-2.fc36.s390x"
     },
     "gnupg2": {
-      "evra": "2.3.7-1.fc36.s390x"
+      "evra": "2.3.7-3.fc36.s390x"
     },
     "gnutls": {
       "evra": "3.7.7-1.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.13-200.fc36.s390x"
+      "evra": "5.18.15-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.13-200.fc36.s390x"
+      "evra": "5.18.15-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.13-200.fc36.s390x"
+      "evra": "5.18.15-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -460,7 +460,7 @@
       "evra": "1.19.2-11.fc36.s390x"
     },
     "less": {
-      "evra": "590-3.fc36.s390x"
+      "evra": "590-5.fc36.s390x"
     },
     "libacl": {
       "evra": "2.3.1-3.fc36.s390x"
@@ -958,10 +958,10 @@
       "evra": "1.2.6-2.fc36.s390x"
     },
     "rpm": {
-      "evra": "4.17.1-2.fc36.s390x"
+      "evra": "4.17.1-3.fc36.s390x"
     },
     "rpm-libs": {
-      "evra": "4.17.1-2.fc36.s390x"
+      "evra": "4.17.1-3.fc36.s390x"
     },
     "rpm-ostree": {
       "evra": "2022.12-2.fc36.s390x"
@@ -970,7 +970,7 @@
       "evra": "2022.12-2.fc36.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-2.fc36.s390x"
+      "evra": "4.17.1-3.fc36.s390x"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.s390x"
@@ -994,10 +994,10 @@
       "evra": "4.8-10.fc36.s390x"
     },
     "selinux-policy": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-02T20:52:37Z",
+    "generated": "2022-08-05T19:48:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-31T03:26:04Z"
+        "generated": "2022-08-05T18:52:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-02T01:31:26Z"
+        "generated": "2022-08-05T01:12:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 80298b4d42..fc5a1e5f23 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -151,10 +151,10 @@
       "evra": "0.15.0-1.fc36.x86_64"
     },
     "coreutils": {
-      "evra": "9.0-5.fc36.x86_64"
+      "evra": "9.0-7.fc36.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.0-5.fc36.x86_64"
+      "evra": "9.0-7.fc36.x86_64"
     },
     "cpio": {
       "evra": "2.13-12.fc36.x86_64"
@@ -373,7 +373,7 @@
       "evra": "1:6.2.1-2.fc36.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.7-1.fc36.x86_64"
+      "evra": "2.3.7-3.fc36.x86_64"
     },
     "gnutls": {
       "evra": "3.7.7-1.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.13-200.fc36.x86_64"
+      "evra": "5.18.15-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.13-200.fc36.x86_64"
+      "evra": "5.18.15-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.13-200.fc36.x86_64"
+      "evra": "5.18.15-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -502,7 +502,7 @@
       "evra": "1.19.2-11.fc36.x86_64"
     },
     "less": {
-      "evra": "590-3.fc36.x86_64"
+      "evra": "590-5.fc36.x86_64"
     },
     "libacl": {
       "evra": "2.3.1-3.fc36.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "1.2.6-2.fc36.x86_64"
     },
     "rpm": {
-      "evra": "4.17.1-2.fc36.x86_64"
+      "evra": "4.17.1-3.fc36.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.1-2.fc36.x86_64"
+      "evra": "4.17.1-3.fc36.x86_64"
     },
     "rpm-ostree": {
       "evra": "2022.12-2.fc36.x86_64"
@@ -1045,7 +1045,7 @@
       "evra": "2022.12-2.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-2.fc36.x86_64"
+      "evra": "4.17.1-3.fc36.x86_64"
     },
     "rsync": {
       "evra": "3.2.4-1.fc36.x86_64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.10-1.fc36.noarch"
+      "evra": "36.13-3.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-02T20:52:43Z",
+    "generated": "2022-08-05T19:48:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-07-31T03:25:08Z"
+        "generated": "2022-08-05T18:55:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-02T01:31:33Z"
+        "generated": "2022-08-05T01:12:52Z"
       }
     }
   }

From c9849728f40aa763bf44ad6497f9811ecc396391 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 5 Aug 2022 11:16:58 -0400
Subject: [PATCH 1124/2157] tests/kola/root-reprovision: add `reprovision` tag

This can be used to conveniently skip those tests by tag.
---
 tests/kola/root-reprovision/filesystem-only/test.sh  | 4 +++-
 tests/kola/root-reprovision/linear/test.sh           | 4 +++-
 tests/kola/root-reprovision/luks/test.sh             | 4 +++-
 tests/kola/root-reprovision/raid1/test.sh            | 4 +++-
 tests/kola/root-reprovision/swap-before-root/test.sh | 4 +++-
 5 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 102a8a86f4..06a53d9ccc 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,8 +1,10 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15 }
+# kola: { "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "tags": "reprovision" }
 #
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
+# - tags: reprovision
+#   - This test reprovisions the rootfs.
 # - minMemory: 4096
 #   - Root reprovisioning requires at least 4GiB of memory.
 # - timeoutMin: 15
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index 7355ab3633..d9ca084b33 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -1,9 +1,11 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15 }
+# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15, "tags": "reprovision" }
 #
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
 #   - additionalDisks is only supported on qemu.
+# - tags: reprovision
+#   - This test reprovisions the rootfs.
 # - minMemory: 4096
 #   - Root reprovisioning requires at least 4GiB of memory.
 # - additionalDisks: ["5G", "5G"]
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 5ec6513792..42a162bbce 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,8 +1,10 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x", "timeoutMin": 15 }
+# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x", "timeoutMin": 15, "tags": "reprovision" }
 #
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
+# - tags: reprovision
+#   - This test reprovisions the rootfs.
 # - minMemory: 4096
 #   - Root reprovisioning requires at least 4GiB of memory.
 # - architectures: !s390x
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 1fb966ff45..3da3d74aea 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -1,9 +1,11 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15 }
+# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15, "tags": "reprovision" }
 #
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
 #   - additionalDisks is only supported on qemu.
+# - tags: reprovision
+#   - This test reprovisions the rootfs.
 # - minMemory: 4096
 #   - Root reprovisioning requires at least 4GiB of memory.
 # - additionalDisks: ["5G", "5G"]
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index ebe9fdaff6..b5ffb90599 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,11 +1,13 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "allowConfigWarnings": true }
+# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "allowConfigWarnings": true, "tags": "reprovision" }
 #
 # - distros: fcos
 #   - This test only runs on FCOS due to a problem enabling a swap partition on
 #     RHCOS. See: https://github.com/openshift/os/issues/665
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
+# - tags: reprovision
+#   - This test reprovisions the rootfs.
 # - minMemory: 4096
 #   - Root reprovisioning requires at least 4GiB of memory.
 # - timeoutMin: 15

From 09322353e31cca99270a2a5cc86478330afb52c3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 Aug 2022 22:00:02 +0000
Subject: [PATCH 1125/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/4/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 3 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a3aceea403..9c8c565181 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "1.17.2-2.fc36.aarch64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.0.fc36.noarch"
+      "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.15-200.fc36.aarch64"
+      "evra": "5.18.16-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.15-200.fc36.aarch64"
+      "evra": "5.18.16-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.15-200.fc36.aarch64"
+      "evra": "5.18.16-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.077-1.fc36.noarch"
+      "evra": "2:9.0.137-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.077-1.fc36.aarch64"
+      "evra": "2:9.0.137-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-05T19:49:10Z",
+    "generated": "2022-08-06T20:55:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T18:53:09Z"
+        "generated": "2022-08-05T21:05:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-05T01:12:24Z"
+        "generated": "2022-08-06T01:30:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f2bfa3fbf8..6ee2e20b1a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -88,7 +88,7 @@
       "evra": "1.17.2-2.fc36.s390x"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.0.fc36.noarch"
+      "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.15-200.fc36.s390x"
+      "evra": "5.18.16-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.15-200.fc36.s390x"
+      "evra": "5.18.16-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.15-200.fc36.s390x"
+      "evra": "5.18.16-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1117,10 +1117,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.077-1.fc36.noarch"
+      "evra": "2:9.0.137-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.077-1.fc36.s390x"
+      "evra": "2:9.0.137-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-05T19:48:09Z",
+    "generated": "2022-08-06T20:55:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T18:52:52Z"
+        "generated": "2022-08-05T21:05:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-05T01:12:45Z"
+        "generated": "2022-08-06T01:31:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fc5a1e5f23..9fbfe61f49 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -91,7 +91,7 @@
       "evra": "1.17.2-2.fc36.x86_64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.0.fc36.noarch"
+      "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-5.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.15-200.fc36.x86_64"
+      "evra": "5.18.16-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.15-200.fc36.x86_64"
+      "evra": "5.18.16-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.15-200.fc36.x86_64"
+      "evra": "5.18.16-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.077-1.fc36.noarch"
+      "evra": "2:9.0.137-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.077-1.fc36.x86_64"
+      "evra": "2:9.0.137-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-05T19:48:10Z",
+    "generated": "2022-08-06T20:55:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T18:55:25Z"
+        "generated": "2022-08-05T21:06:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-05T01:12:52Z"
+        "generated": "2022-08-06T01:31:10Z"
       }
     }
   }

From 8d774ea35a4553dca2af4c1da152c242cc547436 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Aug 2022 14:03:51 +0000
Subject: [PATCH 1126/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/7/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 3 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9c8c565181..e194eef233 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.30-1.fc36.aarch64"
+      "evra": "32:9.16.31-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.30-1.fc36.noarch"
+      "evra": "32:9.16.31-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.30-1.fc36.aarch64"
+      "evra": "32:9.16.31-1.fc36.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.aarch64"
@@ -1015,7 +1015,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-12.fc36.aarch64"
+      "evra": "2:6.2.0-13.fc36.aarch64"
     },
     "readline": {
       "evra": "8.1-6.fc36.aarch64"
@@ -1072,10 +1072,10 @@
       "evra": "1.46-3.fc36.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-2.fc36.aarch64"
+      "evra": "2:4.11.1-3.fc36.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-2.fc36.aarch64"
+      "evra": "2:4.11.1-3.fc36.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-06T20:55:55Z",
+    "generated": "2022-08-09T13:00:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T21:05:43Z"
+        "generated": "2022-08-08T02:58:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-06T01:30:43Z"
+        "generated": "2022-08-09T01:09:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6ee2e20b1a..8b4d6521bd 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.30-1.fc36.s390x"
+      "evra": "32:9.16.31-1.fc36.s390x"
     },
     "bind-license": {
-      "evra": "32:9.16.30-1.fc36.noarch"
+      "evra": "32:9.16.31-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.30-1.fc36.s390x"
+      "evra": "32:9.16.31-1.fc36.s390x"
     },
     "bsdtar": {
       "evra": "3.5.3-3.fc36.s390x"
@@ -949,7 +949,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-12.fc36.s390x"
+      "evra": "2:6.2.0-13.fc36.s390x"
     },
     "readline": {
       "evra": "8.1-6.fc36.s390x"
@@ -1009,10 +1009,10 @@
       "evra": "1.46-3.fc36.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-2.fc36.s390x"
+      "evra": "2:4.11.1-3.fc36.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-2.fc36.s390x"
+      "evra": "2:4.11.1-3.fc36.s390x"
     },
     "skopeo": {
       "evra": "1:1.9.0-4.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-06T20:55:14Z",
+    "generated": "2022-08-09T13:00:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T21:05:30Z"
+        "generated": "2022-08-08T03:00:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-06T01:31:04Z"
+        "generated": "2022-08-09T01:09:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9fbfe61f49..007b3206ba 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.30-1.fc36.x86_64"
+      "evra": "32:9.16.31-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.30-1.fc36.noarch"
+      "evra": "32:9.16.31-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.30-1.fc36.x86_64"
+      "evra": "32:9.16.31-1.fc36.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.x86_64"
@@ -1081,10 +1081,10 @@
       "evra": "1.46-3.fc36.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-2.fc36.x86_64"
+      "evra": "2:4.11.1-3.fc36.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-2.fc36.x86_64"
+      "evra": "2:4.11.1-3.fc36.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-06T20:55:14Z",
+    "generated": "2022-08-09T12:58:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-05T21:06:54Z"
+        "generated": "2022-08-08T03:00:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-06T01:31:10Z"
+        "generated": "2022-08-09T01:09:37Z"
       }
     }
   }

From 52718d9b34aae583c58f9c9980cab6d35d7c801e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 Aug 2022 09:38:44 -0400
Subject: [PATCH 1127/2157] overrides: fast-track grub2-2.06-47.fc36

This should fix
https://github.com/coreos/fedora-coreos-tracker/issues/1271
---
 manifest-lock.overrides.aarch64.yaml | 20 +++++++++++--------
 manifest-lock.overrides.x86_64.yaml  | 30 +++++++++++++++++-----------
 2 files changed, 30 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index c260f5fc17..f2983cbfa4 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -10,22 +10,26 @@
 
 packages:
   grub2-common:
-    evra: 1:2.06-42.fc36.noarch
+    evra: 1:2.06-47.fc36.noarch
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-tools-minimal:
-    evra: 1:2.06-42.fc36.aarch64
+    evra: 1:2.06-47.fc36.aarch64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-efi-aa64:
-    evra: 1:2.06-42.fc36.aarch64
+    evra: 1:2.06-47.fc36.aarch64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-tools:
-    evra: 1:2.06-42.fc36.aarch64
+    evra: 1:2.06-47.fc36.aarch64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index 9dddca2fd5..57a1816574 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -10,32 +10,38 @@
 
 packages:
   grub2-pc-modules:
-    evra: 1:2.06-42.fc36.noarch
+    evra: 1:2.06-47.fc36.noarch
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-common:
-    evra: 1:2.06-42.fc36.noarch
+    evra: 1:2.06-47.fc36.noarch
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-tools-minimal:
-    evra: 1:2.06-42.fc36.x86_64
+    evra: 1:2.06-47.fc36.x86_64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-efi-x64:
-    evra: 1:2.06-42.fc36.x86_64
+    evra: 1:2.06-47.fc36.x86_64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-pc:
-    evra: 1:2.06-42.fc36.x86_64
+    evra: 1:2.06-47.fc36.x86_64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
   grub2-tools:
-    evra: 1:2.06-42.fc36.x86_64
+    evra: 1:2.06-47.fc36.x86_64
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: pin
+      type: fast-track
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a

From cf9a5f1706fb2ac7042233b40ad9728500b90a1e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 Aug 2022 11:21:21 -0400
Subject: [PATCH 1128/2157] overrides: drop filesystem pin

A new rpm-ostree has been tagged that can handle the new lua
scriptlet in the filesystem package.

This reverts commit b7dd545536aa7f13f17dd87490aca25f06f569dd.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1273
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 03081783d0..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  filesystem:
-    evr: 3.16-2.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1273
-      type: pin
+packages: {}

From 8d6b9d6b2787fd2d03e838868921029f3b109ab9 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Tue, 9 Aug 2022 12:40:42 +0000
Subject: [PATCH 1129/2157] overlay/sysusers: add fragments for all FCOS system
 groups

This translates all Fedora CoreOS system groups (i.e. those coming
from group manifest) into equivalent sysusers.d fragments.

We currently ship four kinds of system groups:
 * basic groups coming from the `/etc/group` file in the `setup`
   package (10-groups-basic.conf)
 * the legacy GID for the `nobody` group (00-group-nobody.conf)
 * extra groups with static GIDs that adhere to the Fedora
   allocation table (10-groups-static-extra.conf)
 * extra groups with static GIDs that are specific to CoreOS
   (00-groups-coreos-static.conf)

These sysusers.d fragments are meant as a transitory measure to
help migrate the existing group entries from the current nss-altfiles
setup to a plain sysusers.d world.
---
 .../usr/lib/sysusers.d/00-group-nobody.conf   |  3 +++
 .../sysusers.d/00-groups-coreos-static.conf   | 16 +++++++++++++
 .../usr/lib/sysusers.d/10-groups-basic.conf   | 23 +++++++++++++++++++
 .../sysusers.d/10-groups-static-extra.conf    | 12 ++++++++++
 4 files changed, 54 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
 create mode 100644 overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
 create mode 100644 overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
 create mode 100644 overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf

diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
new file mode 100644
index 0000000000..a186791dd2
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
@@ -0,0 +1,3 @@
+# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
+# g nobody 65534
+g nobody 99
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
new file mode 100644
index 0000000000..1a51660445
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
@@ -0,0 +1,16 @@
+g cgred 996
+g chrony 992
+g cockpit-ws 987
+g dockerroot 986
+g etcd 997
+g input 104
+g kube 994
+g nfsnobody 65534
+g polkitd 998
+g ssh_keys 999
+g sssd 993
+g sudo 16
+g systemd-bus-proxy 988
+g systemd-network 990
+g systemd-resolve 989
+g systemd-timesync 991
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
new file mode 100644
index 0000000000..9faac4a665
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
@@ -0,0 +1,23 @@
+g adm 4
+g audio 63
+g bin 1
+g cdrom 11
+g daemon 2
+g dialout 18
+g disk 6
+g floppy 19
+g ftp 50
+g games 20
+g kmem 9
+g lock 54
+g lp 7
+g mail 12
+g man 15
+g mem 8
+g root 0
+g sys 3
+g tape 33
+g tty 5
+g users 100
+g video 39
+g wheel 10
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
new file mode 100644
index 0000000000..df8c48080b
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
@@ -0,0 +1,12 @@
+g avahi-autoipd 170
+g ceph 167
+g dbus 81
+g dip 40
+g rpc 32
+g rpcuser 29
+g sshd 74
+g systemd-journal 190
+g tcpdump 72
+g tss 59
+g utempter 35
+g utmp 22

From 8bd28666e0b06d47c5334cec654104682d20aee2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Aug 2022 22:00:39 +0000
Subject: [PATCH 1130/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/8/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.s390x.json   |  6 +++---
 manifest-lock.x86_64.json  | 18 +++++++++---------
 3 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e194eef233..6fe3c7e574 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -304,7 +304,7 @@
       "evra": "5.41-4.fc36.aarch64"
     },
     "filesystem": {
-      "evra": "3.16-2.fc36.aarch64"
+      "evra": "3.18-1.fc36.aarch64"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.aarch64"
@@ -385,16 +385,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-42.fc36.noarch"
+      "evra": "1:2.06-47.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-42.fc36.aarch64"
+      "evra": "1:2.06-47.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-42.fc36.aarch64"
+      "evra": "1:2.06-47.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-42.fc36.aarch64"
+      "evra": "1:2.06-47.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -1229,13 +1229,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T13:00:02Z",
+    "generated": "2022-08-09T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-08T02:58:44Z"
+        "generated": "2022-08-09T17:21:43Z"
       },
       "fedora-updates": {
         "generated": "2022-08-09T01:09:08Z"
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8b4d6521bd..68db702d4e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -292,7 +292,7 @@
       "evra": "5.41-4.fc36.s390x"
     },
     "filesystem": {
-      "evra": "3.16-2.fc36.s390x"
+      "evra": "3.18-1.fc36.s390x"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.s390x"
@@ -1160,13 +1160,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T13:00:06Z",
+    "generated": "2022-08-09T20:52:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-08T03:00:16Z"
+        "generated": "2022-08-09T17:21:21Z"
       },
       "fedora-updates": {
         "generated": "2022-08-09T01:09:29Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 007b3206ba..4d108788ba 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -304,7 +304,7 @@
       "evra": "5.41-4.fc36.x86_64"
     },
     "filesystem": {
-      "evra": "3.16-2.fc36.x86_64"
+      "evra": "3.18-1.fc36.x86_64"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.x86_64"
@@ -385,22 +385,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-42.fc36.noarch"
+      "evra": "1:2.06-47.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-42.fc36.x86_64"
+      "evra": "1:2.06-47.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-42.fc36.x86_64"
+      "evra": "1:2.06-47.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-42.fc36.noarch"
+      "evra": "1:2.06-47.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-42.fc36.x86_64"
+      "evra": "1:2.06-47.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-42.fc36.x86_64"
+      "evra": "1:2.06-47.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -1238,13 +1238,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T12:58:09Z",
+    "generated": "2022-08-09T20:52:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-08T03:00:03Z"
+        "generated": "2022-08-09T17:23:03Z"
       },
       "fedora-updates": {
         "generated": "2022-08-09T01:09:37Z"

From f257ee784130ad4b4273b61e9b381f5275b85a34 Mon Sep 17 00:00:00 2001
From: Christian Glombek <cglombek@redhat.com>
Date: Tue, 9 Aug 2022 19:01:45 +0200
Subject: [PATCH 1131/2157] Move ssh-key-dir to shared manifest for EL9

The new `shared-el9.yaml` manifest is intended for packages that are
shared between FCOS and RHCOS/SCOS 9+.
---
 manifests/fedora-coreos-base.yaml | 3 +--
 manifests/shared-el9.yaml         | 6 ++++++
 2 files changed, 7 insertions(+), 2 deletions(-)
 create mode 100644 manifests/shared-el9.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 5cb12f288c..5cbaaae25b 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -9,6 +9,7 @@ include:
   - system-configuration.yaml
   - user-experience.yaml
   - shared-workarounds.yaml
+  - shared-el9.yaml
 
 ostree-layers:
   - overlay/05core
@@ -114,8 +115,6 @@ postprocess:
 packages:
   # Security
   - polkit
-  # SSH
-  - ssh-key-dir
   # Containers
   - systemd-container catatonit
   - fuse-overlayfs slirp4netns
diff --git a/manifests/shared-el9.yaml b/manifests/shared-el9.yaml
new file mode 100644
index 0000000000..381dbda71b
--- /dev/null
+++ b/manifests/shared-el9.yaml
@@ -0,0 +1,6 @@
+# These are packages that are shared between FCOS and
+# RHCOS/SCOS 9+
+
+packages:
+  # SSH
+  - ssh-key-dir

From e79c4f17332614b392a2fba782d0a1e0bf447eb0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 8 Aug 2022 19:35:20 +0200
Subject: [PATCH 1132/2157] s390x: Remove SetGID dotlockfile from liblockfile
 (postprocess)

Moved from `remove-from-packages` to post-process due to a bug in
rpm-ostree.

See: https://github.com/coreos/rpm-ostree/issues/3918
See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
See: https://bugzilla.redhat.com/show_bug.cgi?id=2112857
Fixes: 5053bc7d s390x: Remove SetGID dotlockfile from liblockfile
Fixes: 3505072d modify ext.config.files.setgid test as per upstream change to liblockfile ; fcos.filesystem test is deleted by #2986
---
 manifests/bootable-rpm-ostree.yaml | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 0842b3c1e9..2f166e40dc 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -34,9 +34,13 @@ packages-x86_64:
   # firmware updates
   - fwupd
 
-# See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
-#      https://bugzilla.redhat.com/show_bug.cgi?id=2112857
-# Temporary workaround to remove the SetGID binary from liblockfile that is
-# pulled by the s390utils but not needed for /usr/sbin/zipl.
-remove-from-packages:
-  - ["liblockfile", "/usr/bin/dotlockfile"]
+postprocess:
+  # See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
+  #      https://bugzilla.redhat.com/show_bug.cgi?id=2112857
+  #      https://github.com/coreos/rpm-ostree/issues/3918
+  # Temporary workaround to remove the SetGID binary from liblockfile that is
+  # pulled by the s390utils but not needed for /usr/sbin/zipl.
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    rm -f /usr/bin/dotlockfile

From 82acc0832d03bb407cc0172316245a28f7271f02 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 10 Aug 2022 11:50:06 -0400
Subject: [PATCH 1133/2157] denylist: extend snooze for ext.config.binfmt.qemu

Still working with kernel team to get this one figured out. See
https://github.com/coreos/fedora-coreos-tracker/issues/1241
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 647fa32900..b8fdff772b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -43,7 +43,7 @@
   - stable
 - pattern: ext.config.binfmt.qemu
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
-  snooze: 2022-08-10
+  snooze: 2022-09-10
   arches:
   - aarch64
   streams:

From e6f2b6da62c339d5b7eff7ab7bc5907e4bedec78 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 11 Aug 2022 02:00:39 +0000
Subject: [PATCH 1134/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/10/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 3 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6fe3c7e574..4f5c3f7c77 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -151,10 +151,10 @@
       "evra": "0.15.0-1.fc36.aarch64"
     },
     "coreutils": {
-      "evra": "9.0-7.fc36.aarch64"
+      "evra": "9.0-8.fc36.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.0-7.fc36.aarch64"
+      "evra": "9.0-8.fc36.aarch64"
     },
     "cpio": {
       "evra": "2.13-12.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.12-2.fc36.aarch64"
+      "evra": "2022.12-4.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-2.fc36.aarch64"
+      "evra": "2022.12-4.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T20:53:35Z",
+    "generated": "2022-08-11T00:54:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T17:21:43Z"
+        "generated": "2022-08-09T22:02:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-09T01:09:08Z"
+        "generated": "2022-08-10T01:07:23Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 68db702d4e..16cebcdcb6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -148,10 +148,10 @@
       "evra": "0.15.0-1.fc36.s390x"
     },
     "coreutils": {
-      "evra": "9.0-7.fc36.s390x"
+      "evra": "9.0-8.fc36.s390x"
     },
     "coreutils-common": {
-      "evra": "9.0-7.fc36.s390x"
+      "evra": "9.0-8.fc36.s390x"
     },
     "cpio": {
       "evra": "2.13-12.fc36.s390x"
@@ -964,10 +964,10 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.12-2.fc36.s390x"
+      "evra": "2022.12-4.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-2.fc36.s390x"
+      "evra": "2022.12-4.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T20:52:34Z",
+    "generated": "2022-08-11T00:53:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T17:21:21Z"
+        "generated": "2022-08-09T22:02:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-09T01:09:29Z"
+        "generated": "2022-08-10T01:07:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4d108788ba..b45aaa90bd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -151,10 +151,10 @@
       "evra": "0.15.0-1.fc36.x86_64"
     },
     "coreutils": {
-      "evra": "9.0-7.fc36.x86_64"
+      "evra": "9.0-8.fc36.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.0-7.fc36.x86_64"
+      "evra": "9.0-8.fc36.x86_64"
     },
     "cpio": {
       "evra": "2.13-12.fc36.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.12-2.fc36.x86_64"
+      "evra": "2022.12-4.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-2.fc36.x86_64"
+      "evra": "2022.12-4.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-09T20:52:36Z",
+    "generated": "2022-08-11T00:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T17:23:03Z"
+        "generated": "2022-08-09T22:03:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-09T01:09:37Z"
+        "generated": "2022-08-10T01:07:52Z"
       }
     }
   }

From ce41c46ab104923a5da59bf5af2fc1461f509284 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 13 Aug 2022 00:50:50 +0000
Subject: [PATCH 1135/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/13/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 3 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4f5c3f7c77..c7a95fc245 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -304,7 +304,7 @@
       "evra": "5.41-4.fc36.aarch64"
     },
     "filesystem": {
-      "evra": "3.18-1.fc36.aarch64"
+      "evra": "3.18-2.fc36.aarch64"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.aarch64"
@@ -658,7 +658,7 @@
       "evra": "1.0.1-21.fc36.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc8.fc36.aarch64"
+      "evra": "1:2.6.2-0.fc36.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.aarch64"
@@ -772,7 +772,7 @@
       "evra": "0.12.1-1.fc36.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc4.fc36.aarch64"
+      "evra": "1.3.3-0.fc36.aarch64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.aarch64"
@@ -895,7 +895,7 @@
       "evra": "0.52.21-12.fc36.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc8.fc36.aarch64"
+      "evra": "1:2.6.2-0.fc36.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-11T00:54:08Z",
+    "generated": "2022-08-12T23:46:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T22:02:51Z"
+        "generated": "2022-08-11T02:03:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-10T01:07:23Z"
+        "generated": "2022-08-12T01:01:27Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 16cebcdcb6..dc52360cc1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -292,7 +292,7 @@
       "evra": "5.41-4.fc36.s390x"
     },
     "filesystem": {
-      "evra": "3.18-1.fc36.s390x"
+      "evra": "3.18-2.fc36.s390x"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.s390x"
@@ -607,7 +607,7 @@
       "evra": "1.0.1-21.fc36.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc8.fc36.s390x"
+      "evra": "1:2.6.2-0.fc36.s390x"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.s390x"
@@ -721,7 +721,7 @@
       "evra": "0.12.1-1.fc36.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc4.fc36.s390x"
+      "evra": "1.3.3-0.fc36.s390x"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.s390x"
@@ -835,7 +835,7 @@
       "evra": "0.52.21-12.fc36.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc8.fc36.s390x"
+      "evra": "1:2.6.2-0.fc36.s390x"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-11T00:53:09Z",
+    "generated": "2022-08-12T23:45:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T22:02:35Z"
+        "generated": "2022-08-11T02:03:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-10T01:07:44Z"
+        "generated": "2022-08-12T01:01:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b45aaa90bd..d16a5f817d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -304,7 +304,7 @@
       "evra": "5.41-4.fc36.x86_64"
     },
     "filesystem": {
-      "evra": "3.18-1.fc36.x86_64"
+      "evra": "3.18-2.fc36.x86_64"
     },
     "findutils": {
       "evra": "1:4.9.0-1.fc36.x86_64"
@@ -664,7 +664,7 @@
       "evra": "1.0.1-21.fc36.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.1-2.rc8.fc36.x86_64"
+      "evra": "1:2.6.2-0.fc36.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.1-2.fc36.x86_64"
@@ -781,7 +781,7 @@
       "evra": "0.12.1-1.fc36.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.2-1.rc4.fc36.x86_64"
+      "evra": "1.3.3-0.fc36.x86_64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-1.fc36.x86_64"
@@ -865,7 +865,7 @@
       "evra": "4.2-1.fc36.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-51.fc36.x86_64"
+      "evra": "2:2.1-51.1.fc36.x86_64"
     },
     "moby-engine": {
       "evra": "20.10.17-5.fc36.x86_64"
@@ -907,7 +907,7 @@
       "evra": "0.52.21-12.fc36.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.1-2.rc8.fc36.x86_64"
+      "evra": "1:2.6.2-0.fc36.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.1-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-11T00:53:10Z",
+    "generated": "2022-08-12T23:45:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-09T22:03:19Z"
+        "generated": "2022-08-11T02:04:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-10T01:07:52Z"
+        "generated": "2022-08-12T01:01:56Z"
       }
     }
   }

From 8544448da0a33224bbba103849fbff36bb2fabfc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 Aug 2022 22:01:23 +0000
Subject: [PATCH 1136/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/15/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 42 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 42 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 42 +++++++++++++++++++-------------------
 3 files changed, 63 insertions(+), 63 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c7a95fc245..aa9e461045 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,22 +1,22 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.2-1.fc36.aarch64"
+      "evra": "1:1.38.4-1.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.2-1.fc36.aarch64"
+      "evra": "1:1.38.4-1.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.2-1.fc36.aarch64"
+      "evra": "1:1.38.4-1.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.2-1.fc36.aarch64"
+      "evra": "1:1.38.4-1.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.2-1.fc36.aarch64"
+      "evra": "1:1.38.4-1.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.1.0-1.fc36.noarch"
+      "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.aarch64"
@@ -103,16 +103,16 @@
       "evra": "6.15-1.fc36.aarch64"
     },
     "clevis": {
-      "evra": "18-8.fc36.aarch64"
+      "evra": "18-9.fc36.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-8.fc36.aarch64"
+      "evra": "18-9.fc36.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-8.fc36.aarch64"
+      "evra": "18-9.fc36.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-8.fc36.aarch64"
+      "evra": "18-9.fc36.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.37.1-1.fc36.aarch64"
+      "evra": "2.37.2-1.fc36.aarch64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.16-200.fc36.aarch64"
+      "evra": "5.18.17-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.16-200.fc36.aarch64"
+      "evra": "5.18.17-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.16-200.fc36.aarch64"
+      "evra": "5.18.17-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.9.0-4.fc36.aarch64"
+      "evra": "1:1.9.2-1.fc36.aarch64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.137-1.fc36.noarch"
+      "evra": "2:9.0.189-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.137-1.fc36.aarch64"
+      "evra": "2:9.0.189-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1219,7 +1219,7 @@
       "evra": "0.0.24-3.fc36.aarch64"
     },
     "zlib": {
-      "evra": "1.2.11-31.fc36.aarch64"
+      "evra": "1.2.11-32.fc36.aarch64"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-12T23:46:08Z",
+    "generated": "2022-08-14T20:58:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-11T02:03:30Z"
+        "generated": "2022-08-13T00:53:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-12T01:01:27Z"
+        "generated": "2022-08-14T02:28:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dc52360cc1..7b7b8b4b6b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,22 +1,22 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.2-1.fc36.s390x"
+      "evra": "1:1.38.4-1.fc36.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.2-1.fc36.s390x"
+      "evra": "1:1.38.4-1.fc36.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.2-1.fc36.s390x"
+      "evra": "1:1.38.4-1.fc36.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.2-1.fc36.s390x"
+      "evra": "1:1.38.4-1.fc36.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.2-1.fc36.s390x"
+      "evra": "1:1.38.4-1.fc36.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.1.0-1.fc36.noarch"
+      "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.s390x"
@@ -100,16 +100,16 @@
       "evra": "6.15-1.fc36.s390x"
     },
     "clevis": {
-      "evra": "18-8.fc36.s390x"
+      "evra": "18-9.fc36.s390x"
     },
     "clevis-dracut": {
-      "evra": "18-8.fc36.s390x"
+      "evra": "18-9.fc36.s390x"
     },
     "clevis-luks": {
-      "evra": "18-8.fc36.s390x"
+      "evra": "18-9.fc36.s390x"
     },
     "clevis-systemd": {
-      "evra": "18-8.fc36.s390x"
+      "evra": "18-9.fc36.s390x"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -334,7 +334,7 @@
       "evra": "1.0.9-2.fc36.s390x"
     },
     "git-core": {
-      "evra": "2.37.1-1.fc36.s390x"
+      "evra": "2.37.2-1.fc36.s390x"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.16-200.fc36.s390x"
+      "evra": "5.18.17-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.16-200.fc36.s390x"
+      "evra": "5.18.17-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.16-200.fc36.s390x"
+      "evra": "5.18.17-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1015,7 +1015,7 @@
       "evra": "2:4.11.1-3.fc36.s390x"
     },
     "skopeo": {
-      "evra": "1:1.9.0-4.fc36.s390x"
+      "evra": "1:1.9.2-1.fc36.s390x"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.s390x"
@@ -1117,10 +1117,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.137-1.fc36.noarch"
+      "evra": "2:9.0.189-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.137-1.fc36.s390x"
+      "evra": "2:9.0.189-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1150,7 +1150,7 @@
       "evra": "0.0.24-3.fc36.s390x"
     },
     "zlib": {
-      "evra": "1.2.11-31.fc36.s390x"
+      "evra": "1.2.11-32.fc36.s390x"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-12T23:45:10Z",
+    "generated": "2022-08-14T20:57:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-11T02:03:23Z"
+        "generated": "2022-08-13T00:53:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-12T01:01:49Z"
+        "generated": "2022-08-14T02:28:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d16a5f817d..11f942fa61 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,22 +1,22 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.2-1.fc36.x86_64"
+      "evra": "1:1.38.4-1.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.2-1.fc36.x86_64"
+      "evra": "1:1.38.4-1.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.2-1.fc36.x86_64"
+      "evra": "1:1.38.4-1.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.2-1.fc36.x86_64"
+      "evra": "1:1.38.4-1.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.2-1.fc36.x86_64"
+      "evra": "1:1.38.4-1.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.1.0-1.fc36.noarch"
+      "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
       "evra": "1.0.3-1.fc36.x86_64"
@@ -103,16 +103,16 @@
       "evra": "6.15-1.fc36.x86_64"
     },
     "clevis": {
-      "evra": "18-8.fc36.x86_64"
+      "evra": "18-9.fc36.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-8.fc36.x86_64"
+      "evra": "18-9.fc36.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-8.fc36.x86_64"
+      "evra": "18-9.fc36.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-8.fc36.x86_64"
+      "evra": "18-9.fc36.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-10.fc36.noarch"
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.37.1-1.fc36.x86_64"
+      "evra": "2.37.2-1.fc36.x86_64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.16-200.fc36.x86_64"
+      "evra": "5.18.17-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.16-200.fc36.x86_64"
+      "evra": "5.18.17-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.16-200.fc36.x86_64"
+      "evra": "5.18.17-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1093,7 +1093,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.9.0-4.fc36.x86_64"
+      "evra": "1:1.9.2-1.fc36.x86_64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.137-1.fc36.noarch"
+      "evra": "2:9.0.189-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.137-1.fc36.x86_64"
+      "evra": "2:9.0.189-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1228,7 +1228,7 @@
       "evra": "0.0.24-3.fc36.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-31.fc36.x86_64"
+      "evra": "1.2.11-32.fc36.x86_64"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-12T23:45:13Z",
+    "generated": "2022-08-14T20:57:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-11T02:04:18Z"
+        "generated": "2022-08-13T00:56:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-12T01:01:56Z"
+        "generated": "2022-08-14T02:29:02Z"
       }
     }
   }

From a2d581782cbe5c071cb4a416019231e9c0aa1a0f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 15 Aug 2022 12:44:10 -0400
Subject: [PATCH 1137/2157] overrides: drop grub2 pin

The packages have graduated.

xref: https://github.com/coreos/fedora-coreos-tracker/issues/1271
---
 manifest-lock.overrides.aarch64.yaml | 35 ---------------------
 manifest-lock.overrides.x86_64.yaml  | 47 ----------------------------
 2 files changed, 82 deletions(-)
 delete mode 100644 manifest-lock.overrides.aarch64.yaml
 delete mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
deleted file mode 100644
index f2983cbfa4..0000000000
--- a/manifest-lock.overrides.aarch64.yaml
+++ /dev/null
@@ -1,35 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  grub2-common:
-    evra: 1:2.06-47.fc36.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-tools-minimal:
-    evra: 1:2.06-47.fc36.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-efi-aa64:
-    evra: 1:2.06-47.fc36.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-tools:
-    evra: 1:2.06-47.fc36.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
deleted file mode 100644
index 57a1816574..0000000000
--- a/manifest-lock.overrides.x86_64.yaml
+++ /dev/null
@@ -1,47 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  grub2-pc-modules:
-    evra: 1:2.06-47.fc36.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-common:
-    evra: 1:2.06-47.fc36.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-tools-minimal:
-    evra: 1:2.06-47.fc36.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-efi-x64:
-    evra: 1:2.06-47.fc36.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-pc:
-    evra: 1:2.06-47.fc36.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a
-  grub2-tools:
-    evra: 1:2.06-47.fc36.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1271
-      type: fast-track
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0c322d15a

From b9bac8e291b31ba2d2dcb98d040b5a3d824022a5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 15 Aug 2022 12:49:23 -0400
Subject: [PATCH 1138/2157] denylist: snooze ext.config.toolbox on rawhide

See https://github.com/coreos/fedora-coreos-tracker/issues/1277
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b8fdff772b..48c40f52a5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -48,3 +48,8 @@
   - aarch64
   streams:
   - rawhide
+- pattern: ext.config.toolbox
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1277
+  snooze: 2022-09-10
+  streams:
+  - rawhide

From 900c2e518ee4910619b894c972084eb478252fef Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 15 Aug 2022 12:49:52 -0400
Subject: [PATCH 1139/2157] denylist: snooze ext.config.extensions.* tests on
 rawhide

See https://github.com/coreos/fedora-coreos-tracker/issues/1278
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 48c40f52a5..3351709d58 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,3 +53,8 @@
   snooze: 2022-09-10
   streams:
   - rawhide
+- pattern: ext.config.extensions.*
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1278
+  snooze: 2022-09-10
+  streams:
+  - rawhide

From b53afb9f91f90e0c4fa0339981ad46a515e7d5ed Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 15 Aug 2022 12:56:35 -0400
Subject: [PATCH 1140/2157] tests/extensions: bump crio module to 1.24

Seems to pass tests. Not sure if we still need to pin or not.
---
 tests/kola/extensions/module | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index b23ceb0b51..e6b0f85ba1 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -15,7 +15,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # Note: This version must be kept up to date for now, since there currently is no 'latest' (or similar) stream
-CRIO_VERSION=1.22
+CRIO_VERSION=1.24
 
 declare -A commands=(
   ["cri-o:${CRIO_VERSION}/default"]="crio"

From bc3ab82f4a68c6fa776dc265cb6a94ab87011474 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 16 Aug 2022 16:04:30 +0000
Subject: [PATCH 1141/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/22/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json |    6 +-
 manifest-lock.ppc64le.json | 1248 ++++++++++++++++++++++++++++++++++++
 manifest-lock.s390x.json   |    6 +-
 manifest-lock.x86_64.json  |    6 +-
 4 files changed, 1257 insertions(+), 9 deletions(-)
 create mode 100644 manifest-lock.ppc64le.json

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index aa9e461045..7c791b43e1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-14T20:58:44Z",
+    "generated": "2022-08-16T14:48:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-13T00:53:25Z"
+        "generated": "2022-08-14T22:04:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-14T02:28:33Z"
+        "generated": "2022-08-16T01:23:55Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
new file mode 100644
index 0000000000..de144f1e1d
--- /dev/null
+++ b/manifest-lock.ppc64le.json
@@ -0,0 +1,1248 @@
+{
+  "packages": {
+    "NetworkManager": {
+      "evra": "1:1.38.4-1.fc36.ppc64le"
+    },
+    "NetworkManager-cloud-setup": {
+      "evra": "1:1.38.4-1.fc36.ppc64le"
+    },
+    "NetworkManager-libnm": {
+      "evra": "1:1.38.4-1.fc36.ppc64le"
+    },
+    "NetworkManager-team": {
+      "evra": "1:1.38.4-1.fc36.ppc64le"
+    },
+    "NetworkManager-tui": {
+      "evra": "1:1.38.4-1.fc36.ppc64le"
+    },
+    "WALinuxAgent-udev": {
+      "evra": "2.7.3.0-1.fc36.noarch"
+    },
+    "aardvark-dns": {
+      "evra": "1.0.3-1.fc36.ppc64le"
+    },
+    "acl": {
+      "evra": "2.3.1-3.fc36.ppc64le"
+    },
+    "adcli": {
+      "evra": "0.9.1-10.fc36.ppc64le"
+    },
+    "afterburn": {
+      "evra": "5.3.0-2.fc36.ppc64le"
+    },
+    "afterburn-dracut": {
+      "evra": "5.3.0-2.fc36.ppc64le"
+    },
+    "alternatives": {
+      "evra": "1.19-2.fc36.ppc64le"
+    },
+    "attr": {
+      "evra": "2.5.1-4.fc36.ppc64le"
+    },
+    "audit-libs": {
+      "evra": "3.0.8-1.fc36.ppc64le"
+    },
+    "authselect": {
+      "evra": "1.4.0-1.fc36.ppc64le"
+    },
+    "authselect-libs": {
+      "evra": "1.4.0-1.fc36.ppc64le"
+    },
+    "avahi-libs": {
+      "evra": "0.8-15.fc36.ppc64le"
+    },
+    "basesystem": {
+      "evra": "11-13.fc36.noarch"
+    },
+    "bash": {
+      "evra": "5.1.16-2.fc36.ppc64le"
+    },
+    "bash-completion": {
+      "evra": "1:2.11-6.fc36.noarch"
+    },
+    "bc": {
+      "evra": "1.07.1-15.fc36.ppc64le"
+    },
+    "bind-libs": {
+      "evra": "32:9.16.31-1.fc36.ppc64le"
+    },
+    "bind-license": {
+      "evra": "32:9.16.31-1.fc36.noarch"
+    },
+    "bind-utils": {
+      "evra": "32:9.16.31-1.fc36.ppc64le"
+    },
+    "bsdtar": {
+      "evra": "3.5.3-3.fc36.ppc64le"
+    },
+    "btrfs-progs": {
+      "evra": "5.18-1.fc36.ppc64le"
+    },
+    "bubblewrap": {
+      "evra": "0.5.0-2.fc36.ppc64le"
+    },
+    "bzip2": {
+      "evra": "1.0.8-11.fc36.ppc64le"
+    },
+    "bzip2-libs": {
+      "evra": "1.0.8-11.fc36.ppc64le"
+    },
+    "c-ares": {
+      "evra": "1.17.2-2.fc36.ppc64le"
+    },
+    "ca-certificates": {
+      "evra": "2022.2.54-1.2.fc36.noarch"
+    },
+    "catatonit": {
+      "evra": "0.1.7-5.fc36.ppc64le"
+    },
+    "chrony": {
+      "evra": "4.2-5.fc36.ppc64le"
+    },
+    "cifs-utils": {
+      "evra": "6.15-1.fc36.ppc64le"
+    },
+    "clevis": {
+      "evra": "18-9.fc36.ppc64le"
+    },
+    "clevis-dracut": {
+      "evra": "18-9.fc36.ppc64le"
+    },
+    "clevis-luks": {
+      "evra": "18-9.fc36.ppc64le"
+    },
+    "clevis-systemd": {
+      "evra": "18-9.fc36.ppc64le"
+    },
+    "cloud-utils-growpart": {
+      "evra": "0.31-10.fc36.noarch"
+    },
+    "conmon": {
+      "evra": "2:2.1.0-2.fc36.ppc64le"
+    },
+    "console-login-helper-messages": {
+      "evra": "0.21.3-1.fc36.noarch"
+    },
+    "console-login-helper-messages-issuegen": {
+      "evra": "0.21.3-1.fc36.noarch"
+    },
+    "console-login-helper-messages-motdgen": {
+      "evra": "0.21.3-1.fc36.noarch"
+    },
+    "console-login-helper-messages-profile": {
+      "evra": "0.21.3-1.fc36.noarch"
+    },
+    "container-selinux": {
+      "evra": "2:2.188.0-1.fc36.noarch"
+    },
+    "containerd": {
+      "evra": "1.6.6-5.fc36.ppc64le"
+    },
+    "containernetworking-plugins": {
+      "evra": "1.1.0-1.fc36.ppc64le"
+    },
+    "containers-common": {
+      "evra": "4:1-56.fc36.noarch"
+    },
+    "coreos-installer": {
+      "evra": "0.15.0-1.fc36.ppc64le"
+    },
+    "coreos-installer-bootinfra": {
+      "evra": "0.15.0-1.fc36.ppc64le"
+    },
+    "coreutils": {
+      "evra": "9.0-8.fc36.ppc64le"
+    },
+    "coreutils-common": {
+      "evra": "9.0-8.fc36.ppc64le"
+    },
+    "cpio": {
+      "evra": "2.13-12.fc36.ppc64le"
+    },
+    "cracklib": {
+      "evra": "2.9.6-28.fc36.ppc64le"
+    },
+    "cracklib-dicts": {
+      "evra": "2.9.6-28.fc36.ppc64le"
+    },
+    "criu": {
+      "evra": "3.17.1-2.fc36.ppc64le"
+    },
+    "criu-libs": {
+      "evra": "3.17.1-2.fc36.ppc64le"
+    },
+    "crun": {
+      "evra": "1.5-1.fc36.ppc64le"
+    },
+    "crypto-policies": {
+      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
+    },
+    "cryptsetup": {
+      "evra": "2.4.3-2.fc36.ppc64le"
+    },
+    "cryptsetup-libs": {
+      "evra": "2.4.3-2.fc36.ppc64le"
+    },
+    "curl": {
+      "evra": "7.82.0-7.fc36.ppc64le"
+    },
+    "cyrus-sasl-gssapi": {
+      "evra": "2.1.27-18.fc36.ppc64le"
+    },
+    "cyrus-sasl-lib": {
+      "evra": "2.1.27-18.fc36.ppc64le"
+    },
+    "dbus": {
+      "evra": "1:1.14.0-1.fc36.ppc64le"
+    },
+    "dbus-broker": {
+      "evra": "31-1.fc36.ppc64le"
+    },
+    "dbus-common": {
+      "evra": "1:1.14.0-1.fc36.noarch"
+    },
+    "dbus-libs": {
+      "evra": "1:1.14.0-1.fc36.ppc64le"
+    },
+    "device-mapper": {
+      "evra": "1.02.175-7.fc36.ppc64le"
+    },
+    "device-mapper-event": {
+      "evra": "1.02.175-7.fc36.ppc64le"
+    },
+    "device-mapper-event-libs": {
+      "evra": "1.02.175-7.fc36.ppc64le"
+    },
+    "device-mapper-libs": {
+      "evra": "1.02.175-7.fc36.ppc64le"
+    },
+    "device-mapper-multipath": {
+      "evra": "0.8.7-8.fc36.ppc64le"
+    },
+    "device-mapper-multipath-libs": {
+      "evra": "0.8.7-8.fc36.ppc64le"
+    },
+    "device-mapper-persistent-data": {
+      "evra": "0.9.0-7.fc36.ppc64le"
+    },
+    "diffutils": {
+      "evra": "3.8-2.fc36.ppc64le"
+    },
+    "dnsmasq": {
+      "evra": "2.86-10.fc36.ppc64le"
+    },
+    "dosfstools": {
+      "evra": "4.2-3.fc36.ppc64le"
+    },
+    "dracut": {
+      "evra": "056-1.fc36.ppc64le"
+    },
+    "dracut-network": {
+      "evra": "056-1.fc36.ppc64le"
+    },
+    "dracut-squash": {
+      "evra": "056-1.fc36.ppc64le"
+    },
+    "e2fsprogs": {
+      "evra": "1.46.5-2.fc36.ppc64le"
+    },
+    "e2fsprogs-libs": {
+      "evra": "1.46.5-2.fc36.ppc64le"
+    },
+    "elfutils-default-yama-scope": {
+      "evra": "0.187-4.fc36.noarch"
+    },
+    "elfutils-libelf": {
+      "evra": "0.187-4.fc36.ppc64le"
+    },
+    "elfutils-libs": {
+      "evra": "0.187-4.fc36.ppc64le"
+    },
+    "ethtool": {
+      "evra": "2:5.18-1.fc36.ppc64le"
+    },
+    "expat": {
+      "evra": "2.4.7-1.fc36.ppc64le"
+    },
+    "fedora-gpg-keys": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-release-common": {
+      "evra": "36-18.noarch"
+    },
+    "fedora-release-coreos": {
+      "evra": "36-18.noarch"
+    },
+    "fedora-release-identity-coreos": {
+      "evra": "36-18.noarch"
+    },
+    "fedora-repos": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-archive": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-modular": {
+      "evra": "36-1.noarch"
+    },
+    "fedora-repos-ostree": {
+      "evra": "36-1.noarch"
+    },
+    "file": {
+      "evra": "5.41-4.fc36.ppc64le"
+    },
+    "file-libs": {
+      "evra": "5.41-4.fc36.ppc64le"
+    },
+    "filesystem": {
+      "evra": "3.18-2.fc36.ppc64le"
+    },
+    "findutils": {
+      "evra": "1:4.9.0-1.fc36.ppc64le"
+    },
+    "flatpak-session-helper": {
+      "evra": "1.12.7-5.fc36.ppc64le"
+    },
+    "fstrm": {
+      "evra": "0.6.1-4.fc36.ppc64le"
+    },
+    "fuse": {
+      "evra": "2.9.9-14.fc36.ppc64le"
+    },
+    "fuse-common": {
+      "evra": "3.10.5-2.fc36.ppc64le"
+    },
+    "fuse-libs": {
+      "evra": "2.9.9-14.fc36.ppc64le"
+    },
+    "fuse-overlayfs": {
+      "evra": "1.9-1.fc36.ppc64le"
+    },
+    "fuse-sshfs": {
+      "evra": "3.7.3-1.fc36.ppc64le"
+    },
+    "fuse3": {
+      "evra": "3.10.5-2.fc36.ppc64le"
+    },
+    "fuse3-libs": {
+      "evra": "3.10.5-2.fc36.ppc64le"
+    },
+    "fwupd": {
+      "evra": "1.8.3-1.fc36.ppc64le"
+    },
+    "gawk": {
+      "evra": "5.1.1-2.fc36.ppc64le"
+    },
+    "gdbm-libs": {
+      "evra": "1:1.22-2.fc36.ppc64le"
+    },
+    "gdisk": {
+      "evra": "1.0.9-2.fc36.ppc64le"
+    },
+    "gettext": {
+      "evra": "0.21-9.fc36.ppc64le"
+    },
+    "gettext-libs": {
+      "evra": "0.21-9.fc36.ppc64le"
+    },
+    "git-core": {
+      "evra": "2.37.2-1.fc36.ppc64le"
+    },
+    "glib2": {
+      "evra": "2.72.3-1.fc36.ppc64le"
+    },
+    "glibc": {
+      "evra": "2.35-15.fc36.ppc64le"
+    },
+    "glibc-common": {
+      "evra": "2.35-15.fc36.ppc64le"
+    },
+    "glibc-minimal-langpack": {
+      "evra": "2.35-15.fc36.ppc64le"
+    },
+    "gmp": {
+      "evra": "1:6.2.1-2.fc36.ppc64le"
+    },
+    "gnupg2": {
+      "evra": "2.3.7-3.fc36.ppc64le"
+    },
+    "gnutls": {
+      "evra": "3.7.7-1.fc36.ppc64le"
+    },
+    "gpgme": {
+      "evra": "1.15.1-6.fc36.ppc64le"
+    },
+    "grep": {
+      "evra": "3.7-2.fc36.ppc64le"
+    },
+    "grub2-common": {
+      "evra": "1:2.06-47.fc36.noarch"
+    },
+    "grub2-ppc64le": {
+      "evra": "1:2.06-47.fc36.ppc64le"
+    },
+    "grub2-ppc64le-modules": {
+      "evra": "1:2.06-47.fc36.noarch"
+    },
+    "grub2-tools": {
+      "evra": "1:2.06-47.fc36.ppc64le"
+    },
+    "grub2-tools-minimal": {
+      "evra": "1:2.06-47.fc36.ppc64le"
+    },
+    "gzip": {
+      "evra": "1.11-3.fc36.ppc64le"
+    },
+    "hostname": {
+      "evra": "3.23-6.fc36.ppc64le"
+    },
+    "ignition": {
+      "evra": "2.14.0-3.fc36.ppc64le"
+    },
+    "inih": {
+      "evra": "56-1.fc36.ppc64le"
+    },
+    "iproute": {
+      "evra": "5.15.0-2.fc36.ppc64le"
+    },
+    "iproute-tc": {
+      "evra": "5.15.0-2.fc36.ppc64le"
+    },
+    "iptables-legacy": {
+      "evra": "1.8.7-15.fc36.ppc64le"
+    },
+    "iptables-legacy-libs": {
+      "evra": "1.8.7-15.fc36.ppc64le"
+    },
+    "iptables-libs": {
+      "evra": "1.8.7-15.fc36.ppc64le"
+    },
+    "iptables-nft": {
+      "evra": "1.8.7-15.fc36.ppc64le"
+    },
+    "iptables-services": {
+      "evra": "1.8.7-15.fc36.noarch"
+    },
+    "iputils": {
+      "evra": "20211215-2.fc36.ppc64le"
+    },
+    "irqbalance": {
+      "evra": "2:1.7.0-8.fc35.ppc64le"
+    },
+    "iscsi-initiator-utils": {
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.ppc64le"
+    },
+    "iscsi-initiator-utils-iscsiuio": {
+      "evra": "6.2.1.4-4.git2a8f9d8.fc36.ppc64le"
+    },
+    "isns-utils-libs": {
+      "evra": "0.101-4.fc36.ppc64le"
+    },
+    "jansson": {
+      "evra": "2.13.1-4.fc36.ppc64le"
+    },
+    "jose": {
+      "evra": "11-5.fc36.ppc64le"
+    },
+    "jq": {
+      "evra": "1.6-13.fc36.ppc64le"
+    },
+    "json-c": {
+      "evra": "0.15-3.fc36.ppc64le"
+    },
+    "json-glib": {
+      "evra": "1.6.6-2.fc36.ppc64le"
+    },
+    "kbd": {
+      "evra": "2.4.0-9.fc36.ppc64le"
+    },
+    "kbd-misc": {
+      "evra": "2.4.0-9.fc36.noarch"
+    },
+    "kernel": {
+      "evra": "5.18.17-200.fc36.ppc64le"
+    },
+    "kernel-core": {
+      "evra": "5.18.17-200.fc36.ppc64le"
+    },
+    "kernel-modules": {
+      "evra": "5.18.17-200.fc36.ppc64le"
+    },
+    "kexec-tools": {
+      "evra": "2.0.24-4.fc36.ppc64le"
+    },
+    "keyutils": {
+      "evra": "1.6.1-4.fc36.ppc64le"
+    },
+    "keyutils-libs": {
+      "evra": "1.6.1-4.fc36.ppc64le"
+    },
+    "kmod": {
+      "evra": "29-7.fc36.ppc64le"
+    },
+    "kmod-libs": {
+      "evra": "29-7.fc36.ppc64le"
+    },
+    "kpartx": {
+      "evra": "0.8.7-8.fc36.ppc64le"
+    },
+    "krb5-libs": {
+      "evra": "1.19.2-11.fc36.ppc64le"
+    },
+    "less": {
+      "evra": "590-5.fc36.ppc64le"
+    },
+    "libacl": {
+      "evra": "2.3.1-3.fc36.ppc64le"
+    },
+    "libaio": {
+      "evra": "0.3.111-13.fc36.ppc64le"
+    },
+    "libarchive": {
+      "evra": "3.5.3-3.fc36.ppc64le"
+    },
+    "libargon2": {
+      "evra": "20171227-9.fc36.ppc64le"
+    },
+    "libassuan": {
+      "evra": "2.5.5-4.fc36.ppc64le"
+    },
+    "libattr": {
+      "evra": "2.5.1-4.fc36.ppc64le"
+    },
+    "libbasicobjects": {
+      "evra": "0.1.1-50.fc36.ppc64le"
+    },
+    "libblkid": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "libbpf": {
+      "evra": "2:0.7.0-3.fc36.ppc64le"
+    },
+    "libbrotli": {
+      "evra": "1.0.9-7.fc36.ppc64le"
+    },
+    "libbsd": {
+      "evra": "0.10.0-9.fc36.ppc64le"
+    },
+    "libcap": {
+      "evra": "2.48-4.fc36.ppc64le"
+    },
+    "libcap-ng": {
+      "evra": "0.8.3-1.fc36.ppc64le"
+    },
+    "libcbor": {
+      "evra": "0.7.0-5.fc36.ppc64le"
+    },
+    "libcollection": {
+      "evra": "0.7.0-50.fc36.ppc64le"
+    },
+    "libcom_err": {
+      "evra": "1.46.5-2.fc36.ppc64le"
+    },
+    "libcurl": {
+      "evra": "7.82.0-7.fc36.ppc64le"
+    },
+    "libdaemon": {
+      "evra": "0.14-23.fc36.ppc64le"
+    },
+    "libdb": {
+      "evra": "5.3.28-51.fc36.ppc64le"
+    },
+    "libdhash": {
+      "evra": "0.5.0-50.fc36.ppc64le"
+    },
+    "libeconf": {
+      "evra": "0.4.0-3.fc36.ppc64le"
+    },
+    "libedit": {
+      "evra": "3.1-41.20210910cvs.fc36.ppc64le"
+    },
+    "libevent": {
+      "evra": "2.1.12-6.fc36.ppc64le"
+    },
+    "libfdisk": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "libffi": {
+      "evra": "3.4.2-8.fc36.ppc64le"
+    },
+    "libfido2": {
+      "evra": "1.10.0-3.fc36.ppc64le"
+    },
+    "libgcab1": {
+      "evra": "1.4-6.fc36.ppc64le"
+    },
+    "libgcc": {
+      "evra": "12.1.1-1.fc36.ppc64le"
+    },
+    "libgcrypt": {
+      "evra": "1.10.1-3.fc36.ppc64le"
+    },
+    "libgomp": {
+      "evra": "12.1.1-1.fc36.ppc64le"
+    },
+    "libgpg-error": {
+      "evra": "1.45-1.fc36.ppc64le"
+    },
+    "libgudev": {
+      "evra": "237-2.fc36.ppc64le"
+    },
+    "libgusb": {
+      "evra": "0.3.10-2.fc36.ppc64le"
+    },
+    "libibverbs": {
+      "evra": "39.0-1.fc36.ppc64le"
+    },
+    "libicu": {
+      "evra": "69.1-6.fc36.ppc64le"
+    },
+    "libidn2": {
+      "evra": "2.3.3-1.fc36.ppc64le"
+    },
+    "libini_config": {
+      "evra": "1.3.1-50.fc36.ppc64le"
+    },
+    "libipa_hbac": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "libjcat": {
+      "evra": "0.1.10-1.fc36.ppc64le"
+    },
+    "libjose": {
+      "evra": "11-5.fc36.ppc64le"
+    },
+    "libkcapi": {
+      "evra": "1.3.1-4.fc36.ppc64le"
+    },
+    "libkcapi-hmaccalc": {
+      "evra": "1.3.1-4.fc36.ppc64le"
+    },
+    "libksba": {
+      "evra": "1.6.0-3.fc36.ppc64le"
+    },
+    "libldb": {
+      "evra": "2.5.2-1.fc36.ppc64le"
+    },
+    "libluksmeta": {
+      "evra": "9-13.fc36.ppc64le"
+    },
+    "libmaxminddb": {
+      "evra": "1.6.0-2.fc36.ppc64le"
+    },
+    "libmnl": {
+      "evra": "1.0.4-15.fc36.ppc64le"
+    },
+    "libmodulemd": {
+      "evra": "2.14.0-2.fc36.ppc64le"
+    },
+    "libmount": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "libndp": {
+      "evra": "1.8-3.fc36.ppc64le"
+    },
+    "libnet": {
+      "evra": "1.2-5.fc36.ppc64le"
+    },
+    "libnetfilter_conntrack": {
+      "evra": "1.0.8-4.fc36.ppc64le"
+    },
+    "libnfnetlink": {
+      "evra": "1.0.1-21.fc36.ppc64le"
+    },
+    "libnfsidmap": {
+      "evra": "1:2.6.2-0.fc36.ppc64le"
+    },
+    "libnftnl": {
+      "evra": "1.2.1-2.fc36.ppc64le"
+    },
+    "libnghttp2": {
+      "evra": "1.46.0-2.fc36.ppc64le"
+    },
+    "libnl3": {
+      "evra": "3.7.0-1.fc36.ppc64le"
+    },
+    "libnl3-cli": {
+      "evra": "3.7.0-1.fc36.ppc64le"
+    },
+    "libnsl2": {
+      "evra": "2.0.0-3.fc36.ppc64le"
+    },
+    "libnvme": {
+      "evra": "1.0-1.fc36.ppc64le"
+    },
+    "libpath_utils": {
+      "evra": "0.2.1-50.fc36.ppc64le"
+    },
+    "libpcap": {
+      "evra": "14:1.10.1-3.fc36.ppc64le"
+    },
+    "libpkgconf": {
+      "evra": "1.8.0-2.fc36.ppc64le"
+    },
+    "libpsl": {
+      "evra": "0.21.1-5.fc36.ppc64le"
+    },
+    "libpwquality": {
+      "evra": "1.4.4-7.fc36.ppc64le"
+    },
+    "libref_array": {
+      "evra": "0.1.5-50.fc36.ppc64le"
+    },
+    "librepo": {
+      "evra": "1.14.3-1.fc36.ppc64le"
+    },
+    "libreport-filesystem": {
+      "evra": "2.17.1-1.fc36.noarch"
+    },
+    "librtas": {
+      "evra": "2.0.2-12.fc36.ppc64le"
+    },
+    "libseccomp": {
+      "evra": "2.5.3-2.fc36.ppc64le"
+    },
+    "libselinux": {
+      "evra": "3.3-4.fc36.ppc64le"
+    },
+    "libselinux-utils": {
+      "evra": "3.3-4.fc36.ppc64le"
+    },
+    "libsemanage": {
+      "evra": "3.3-3.fc36.ppc64le"
+    },
+    "libsepol": {
+      "evra": "3.3-3.fc36.ppc64le"
+    },
+    "libservicelog": {
+      "evra": "1.1.19-3.fc36.ppc64le"
+    },
+    "libsigsegv": {
+      "evra": "2.14-2.fc36.ppc64le"
+    },
+    "libslirp": {
+      "evra": "4.6.1-3.fc36.ppc64le"
+    },
+    "libsmartcols": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "libsmbclient": {
+      "evra": "2:4.16.4-0.fc36.ppc64le"
+    },
+    "libsolv": {
+      "evra": "0.7.22-1.fc36.ppc64le"
+    },
+    "libss": {
+      "evra": "1.46.5-2.fc36.ppc64le"
+    },
+    "libssh": {
+      "evra": "0.9.6-4.fc36.ppc64le"
+    },
+    "libssh-config": {
+      "evra": "0.9.6-4.fc36.noarch"
+    },
+    "libsss_certmap": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "libsss_idmap": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "libsss_nss_idmap": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "libsss_sudo": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "libstdc++": {
+      "evra": "12.1.1-1.fc36.ppc64le"
+    },
+    "libtalloc": {
+      "evra": "2.3.4-1.fc36.ppc64le"
+    },
+    "libtasn1": {
+      "evra": "4.18.0-2.fc36.ppc64le"
+    },
+    "libtdb": {
+      "evra": "1.4.7-1.fc36.ppc64le"
+    },
+    "libteam": {
+      "evra": "1.31-5.fc36.ppc64le"
+    },
+    "libtevent": {
+      "evra": "0.12.1-1.fc36.ppc64le"
+    },
+    "libtirpc": {
+      "evra": "1.3.3-0.fc36.ppc64le"
+    },
+    "libtool-ltdl": {
+      "evra": "2.4.7-1.fc36.ppc64le"
+    },
+    "libunistring": {
+      "evra": "1.0-1.fc36.ppc64le"
+    },
+    "libusb1": {
+      "evra": "1.0.25-8.fc36.ppc64le"
+    },
+    "libuser": {
+      "evra": "0.63-10.fc36.ppc64le"
+    },
+    "libutempter": {
+      "evra": "1.2.1-6.fc36.ppc64le"
+    },
+    "libuuid": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "libuv": {
+      "evra": "1:1.44.2-1.fc36.ppc64le"
+    },
+    "libverto": {
+      "evra": "0.3.2-3.fc36.ppc64le"
+    },
+    "libwbclient": {
+      "evra": "2:4.16.4-0.fc36.ppc64le"
+    },
+    "libxcrypt": {
+      "evra": "4.4.28-1.fc36.ppc64le"
+    },
+    "libxml2": {
+      "evra": "2.9.14-1.fc36.ppc64le"
+    },
+    "libxmlb": {
+      "evra": "0.3.9-1.fc36.ppc64le"
+    },
+    "libyaml": {
+      "evra": "0.2.5-7.fc36.ppc64le"
+    },
+    "libzstd": {
+      "evra": "1.5.2-2.fc36.ppc64le"
+    },
+    "linux-atm-libs": {
+      "evra": "2.5.1-31.fc36.ppc64le"
+    },
+    "linux-firmware": {
+      "evra": "20220708-136.fc36.noarch"
+    },
+    "linux-firmware-whence": {
+      "evra": "20220708-136.fc36.noarch"
+    },
+    "lmdb-libs": {
+      "evra": "0.9.29-3.fc36.ppc64le"
+    },
+    "logrotate": {
+      "evra": "3.20.1-2.fc36.ppc64le"
+    },
+    "lsof": {
+      "evra": "4.94.0-3.fc36.ppc64le"
+    },
+    "lua-libs": {
+      "evra": "5.4.4-3.fc36.ppc64le"
+    },
+    "luksmeta": {
+      "evra": "9-13.fc36.ppc64le"
+    },
+    "lvm2": {
+      "evra": "2.03.11-7.fc36.ppc64le"
+    },
+    "lvm2-libs": {
+      "evra": "2.03.11-7.fc36.ppc64le"
+    },
+    "lz4-libs": {
+      "evra": "1.9.3-4.fc36.ppc64le"
+    },
+    "lzo": {
+      "evra": "2.10-6.fc36.ppc64le"
+    },
+    "mdadm": {
+      "evra": "4.2-1.fc36.ppc64le"
+    },
+    "moby-engine": {
+      "evra": "20.10.17-5.fc36.ppc64le"
+    },
+    "mozjs91": {
+      "evra": "91.12.0-1.fc36.ppc64le"
+    },
+    "mpfr": {
+      "evra": "4.1.0-9.fc36.ppc64le"
+    },
+    "nano": {
+      "evra": "6.0-2.fc36.ppc64le"
+    },
+    "nano-default-editor": {
+      "evra": "6.0-2.fc36.noarch"
+    },
+    "ncurses": {
+      "evra": "6.2-9.20210508.fc36.ppc64le"
+    },
+    "ncurses-base": {
+      "evra": "6.2-9.20210508.fc36.noarch"
+    },
+    "ncurses-libs": {
+      "evra": "6.2-9.20210508.fc36.ppc64le"
+    },
+    "net-tools": {
+      "evra": "2.0-0.61.20160912git.fc36.ppc64le"
+    },
+    "netavark": {
+      "evra": "1.0.3-3.fc36.ppc64le"
+    },
+    "nettle": {
+      "evra": "3.8-1.fc36.ppc64le"
+    },
+    "newt": {
+      "evra": "0.52.21-12.fc36.ppc64le"
+    },
+    "nfs-utils-coreos": {
+      "evra": "1:2.6.2-0.fc36.ppc64le"
+    },
+    "nftables": {
+      "evra": "1:1.0.1-3.fc36.ppc64le"
+    },
+    "npth": {
+      "evra": "1.6-8.fc36.ppc64le"
+    },
+    "nss-altfiles": {
+      "evra": "2.18.1-20.fc36.ppc64le"
+    },
+    "numactl-libs": {
+      "evra": "2.0.14-5.fc36.ppc64le"
+    },
+    "nvme-cli": {
+      "evra": "2.0-1.fc36.ppc64le"
+    },
+    "oniguruma": {
+      "evra": "6.9.8-1.fc36.ppc64le"
+    },
+    "openldap": {
+      "evra": "2.6.2-2.fc36.ppc64le"
+    },
+    "openldap-compat": {
+      "evra": "2.6.2-2.fc36.ppc64le"
+    },
+    "openssh": {
+      "evra": "8.8p1-1.fc36.1.ppc64le"
+    },
+    "openssh-clients": {
+      "evra": "8.8p1-1.fc36.1.ppc64le"
+    },
+    "openssh-server": {
+      "evra": "8.8p1-1.fc36.1.ppc64le"
+    },
+    "openssl": {
+      "evra": "1:3.0.5-1.fc36.ppc64le"
+    },
+    "openssl-libs": {
+      "evra": "1:3.0.5-1.fc36.ppc64le"
+    },
+    "os-prober": {
+      "evra": "1.77-9.fc36.ppc64le"
+    },
+    "ostree": {
+      "evra": "2022.5-2.fc36.ppc64le"
+    },
+    "ostree-grub2": {
+      "evra": "2022.5-2.fc36.ppc64le"
+    },
+    "ostree-libs": {
+      "evra": "2022.5-2.fc36.ppc64le"
+    },
+    "p11-kit": {
+      "evra": "0.24.1-2.fc36.ppc64le"
+    },
+    "p11-kit-trust": {
+      "evra": "0.24.1-2.fc36.ppc64le"
+    },
+    "pam": {
+      "evra": "1.5.2-13.fc36.ppc64le"
+    },
+    "pam-libs": {
+      "evra": "1.5.2-13.fc36.ppc64le"
+    },
+    "passwd": {
+      "evra": "0.80-12.fc36.ppc64le"
+    },
+    "pcre": {
+      "evra": "8.45-1.fc36.1.ppc64le"
+    },
+    "pcre2": {
+      "evra": "10.40-1.fc36.ppc64le"
+    },
+    "pcre2-syntax": {
+      "evra": "10.40-1.fc36.noarch"
+    },
+    "pigz": {
+      "evra": "2.7-1.fc36.ppc64le"
+    },
+    "pkgconf": {
+      "evra": "1.8.0-2.fc36.ppc64le"
+    },
+    "pkgconf-m4": {
+      "evra": "1.8.0-2.fc36.noarch"
+    },
+    "pkgconf-pkg-config": {
+      "evra": "1.8.0-2.fc36.ppc64le"
+    },
+    "podman": {
+      "evra": "4:4.1.1-3.fc36.ppc64le"
+    },
+    "podman-plugins": {
+      "evra": "4:4.1.1-3.fc36.ppc64le"
+    },
+    "policycoreutils": {
+      "evra": "3.3-4.fc36.ppc64le"
+    },
+    "polkit": {
+      "evra": "0.120-5.fc36.ppc64le"
+    },
+    "polkit-libs": {
+      "evra": "0.120-5.fc36.ppc64le"
+    },
+    "polkit-pkla-compat": {
+      "evra": "0.1-21.fc36.ppc64le"
+    },
+    "popt": {
+      "evra": "1.18-7.fc36.ppc64le"
+    },
+    "powerpc-utils-core": {
+      "evra": "1.3.9-6.fc36.ppc64le"
+    },
+    "ppc64-diag-rtas": {
+      "evra": "2.7.6-12.fc36.ppc64le"
+    },
+    "procps-ng": {
+      "evra": "3.3.17-4.fc36.ppc64le"
+    },
+    "protobuf-c": {
+      "evra": "1.4.0-4.fc36.ppc64le"
+    },
+    "psmisc": {
+      "evra": "23.4-3.fc36.ppc64le"
+    },
+    "publicsuffix-list-dafsa": {
+      "evra": "20210518-4.fc36.noarch"
+    },
+    "readline": {
+      "evra": "8.1-6.fc36.ppc64le"
+    },
+    "rpcbind": {
+      "evra": "1.2.6-2.fc36.ppc64le"
+    },
+    "rpm": {
+      "evra": "4.17.1-3.fc36.ppc64le"
+    },
+    "rpm-libs": {
+      "evra": "4.17.1-3.fc36.ppc64le"
+    },
+    "rpm-ostree": {
+      "evra": "2022.12-4.fc36.ppc64le"
+    },
+    "rpm-ostree-libs": {
+      "evra": "2022.12-4.fc36.ppc64le"
+    },
+    "rpm-plugin-selinux": {
+      "evra": "4.17.1-3.fc36.ppc64le"
+    },
+    "rsync": {
+      "evra": "3.2.4-1.fc36.ppc64le"
+    },
+    "runc": {
+      "evra": "2:1.1.2-3.fc36.ppc64le"
+    },
+    "samba-client-libs": {
+      "evra": "2:4.16.4-0.fc36.ppc64le"
+    },
+    "samba-common": {
+      "evra": "2:4.16.4-0.fc36.noarch"
+    },
+    "samba-common-libs": {
+      "evra": "2:4.16.4-0.fc36.ppc64le"
+    },
+    "sed": {
+      "evra": "4.8-10.fc36.ppc64le"
+    },
+    "selinux-policy": {
+      "evra": "36.13-3.fc36.noarch"
+    },
+    "selinux-policy-targeted": {
+      "evra": "36.13-3.fc36.noarch"
+    },
+    "servicelog": {
+      "evra": "1.1.15-7.fc35.ppc64le"
+    },
+    "setup": {
+      "evra": "2.14.1-1.fc36.noarch"
+    },
+    "sg3_utils": {
+      "evra": "1.46-3.fc36.ppc64le"
+    },
+    "sg3_utils-libs": {
+      "evra": "1.46-3.fc36.ppc64le"
+    },
+    "shadow-utils": {
+      "evra": "2:4.11.1-3.fc36.ppc64le"
+    },
+    "shadow-utils-subid": {
+      "evra": "2:4.11.1-3.fc36.ppc64le"
+    },
+    "shared-mime-info": {
+      "evra": "2.1-3.fc35.ppc64le"
+    },
+    "skopeo": {
+      "evra": "1:1.9.2-1.fc36.ppc64le"
+    },
+    "slang": {
+      "evra": "2.3.2-11.fc36.ppc64le"
+    },
+    "slirp4netns": {
+      "evra": "1.2.0-0.2.beta.0.fc36.ppc64le"
+    },
+    "snappy": {
+      "evra": "1.1.9-4.fc36.ppc64le"
+    },
+    "socat": {
+      "evra": "1.7.4.2-2.fc36.ppc64le"
+    },
+    "sqlite-libs": {
+      "evra": "3.36.0-5.fc36.ppc64le"
+    },
+    "squashfs-tools": {
+      "evra": "4.5.1-1.fc36.ppc64le"
+    },
+    "ssh-key-dir": {
+      "evra": "0.1.3-2.fc36.ppc64le"
+    },
+    "sssd-ad": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-client": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-common": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-common-pac": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-ipa": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-krb5": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-krb5-common": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-ldap": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "sssd-nfs-idmap": {
+      "evra": "2.7.3-1.fc36.ppc64le"
+    },
+    "stalld": {
+      "evra": "1.15-2.fc36.ppc64le"
+    },
+    "sudo": {
+      "evra": "1.9.8-5.p2.fc36.ppc64le"
+    },
+    "systemd": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "systemd-container": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "systemd-libs": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "systemd-pam": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "systemd-resolved": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "systemd-udev": {
+      "evra": "250.8-1.fc36.ppc64le"
+    },
+    "tar": {
+      "evra": "2:1.34-3.fc36.ppc64le"
+    },
+    "teamd": {
+      "evra": "1.31-5.fc36.ppc64le"
+    },
+    "toolbox": {
+      "evra": "0.0.99.3-6.fc36.ppc64le"
+    },
+    "tpm2-tools": {
+      "evra": "5.2-2.fc36.ppc64le"
+    },
+    "tpm2-tss": {
+      "evra": "3.2.0-3.fc36.ppc64le"
+    },
+    "tzdata": {
+      "evra": "2022a-2.fc36.noarch"
+    },
+    "userspace-rcu": {
+      "evra": "0.13.0-4.fc36.ppc64le"
+    },
+    "util-linux": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "util-linux-core": {
+      "evra": "2.38-1.fc36.ppc64le"
+    },
+    "vim-data": {
+      "evra": "2:9.0.189-1.fc36.noarch"
+    },
+    "vim-minimal": {
+      "evra": "2:9.0.189-1.fc36.ppc64le"
+    },
+    "which": {
+      "evra": "2.21-32.fc36.ppc64le"
+    },
+    "wireguard-tools": {
+      "evra": "1.0.20210914-2.fc36.ppc64le"
+    },
+    "xfsprogs": {
+      "evra": "5.14.2-2.fc36.ppc64le"
+    },
+    "xxhash-libs": {
+      "evra": "0.8.1-2.fc36.ppc64le"
+    },
+    "xz": {
+      "evra": "5.2.5-9.fc36.ppc64le"
+    },
+    "xz-libs": {
+      "evra": "5.2.5-9.fc36.ppc64le"
+    },
+    "yajl": {
+      "evra": "2.1.0-18.fc36.ppc64le"
+    },
+    "zchunk-libs": {
+      "evra": "1.2.2-1.fc36.ppc64le"
+    },
+    "zincati": {
+      "evra": "0.0.24-3.fc36.ppc64le"
+    },
+    "zlib": {
+      "evra": "1.2.11-32.fc36.ppc64le"
+    },
+    "zram-generator": {
+      "evra": "1.1.2-1.fc36.ppc64le"
+    },
+    "zstd": {
+      "evra": "1.5.2-2.fc36.ppc64le"
+    }
+  },
+  "metadata": {
+    "generated": "2022-08-16T14:48:42Z",
+    "rpmmd_repos": {
+      "fedora": {
+        "generated": "2022-05-04T21:15:55Z"
+      },
+      "fedora-coreos-pool": {
+        "generated": "2022-08-14T22:04:14Z"
+      },
+      "fedora-updates": {
+        "generated": "2022-08-16T01:24:10Z"
+      }
+    }
+  }
+}
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7b7b8b4b6b..4342ff450f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-14T20:57:56Z",
+    "generated": "2022-08-16T14:47:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-13T00:53:06Z"
+        "generated": "2022-08-14T22:03:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-14T02:28:55Z"
+        "generated": "2022-08-16T01:24:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 11f942fa61..0c225642ce 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-14T20:57:56Z",
+    "generated": "2022-08-16T14:47:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-13T00:56:54Z"
+        "generated": "2022-08-14T22:05:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-14T02:29:02Z"
+        "generated": "2022-08-16T01:24:25Z"
       }
     }
   }

From 8e3a07ee13865611db7c925600441c4de80e15c7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 10 Aug 2022 13:19:11 -0400
Subject: [PATCH 1142/2157] 16disable-zincati: add stub statoverride file

We generally include this in every overlay to demonstrate that it can be
used.
---
 overlay.d/16disable-zincati/statoverride | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 overlay.d/16disable-zincati/statoverride

diff --git a/overlay.d/16disable-zincati/statoverride b/overlay.d/16disable-zincati/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/16disable-zincati/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>

From 8ee60ace212b891986e09fed1960e7a2ec814cb1 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 10 Aug 2022 13:18:43 -0400
Subject: [PATCH 1143/2157] overlay: add 06el9 overlay

Add overlay for content shared between FCOS and RHCOS/SCOS 9.

Discussion in https://github.com/coreos/fedora-coreos-config/issues/1878.
---
 manifests/shared-el9.yaml    | 3 +++
 overlay.d/06el9/statoverride | 2 ++
 overlay.d/README.md          | 8 +++++++-
 3 files changed, 12 insertions(+), 1 deletion(-)
 create mode 100644 overlay.d/06el9/statoverride

diff --git a/manifests/shared-el9.yaml b/manifests/shared-el9.yaml
index 381dbda71b..0c9e884b53 100644
--- a/manifests/shared-el9.yaml
+++ b/manifests/shared-el9.yaml
@@ -4,3 +4,6 @@
 packages:
   # SSH
   - ssh-key-dir
+
+ostree-layers:
+  - overlay/06el9
diff --git a/overlay.d/06el9/statoverride b/overlay.d/06el9/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/06el9/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 65f08c236a..f57d9e9e57 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -4,10 +4,16 @@ files via `ostree-layers` (this used to be done automatically, but that's no
 longer the case).
 
 05core
------
+------
 
 This overlay matches `fedora-coreos-base.yaml`; core Ignition+ostree bits.
 
+06el9
+-----
+
+This overlay includes content shared between FCOS and RHCOS/SCOS 9, but not
+RHCOS 8.
+
 08nouveau
 ---------
 

From ac01fb074b84173279ca8d3eb629d48554f91173 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Wed, 10 Aug 2022 15:16:30 +0000
Subject: [PATCH 1144/2157] manifests/passwd: update users details to resync
 with Fedora

---
 manifests/passwd | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifests/passwd b/manifests/passwd
index c8fabb7fe9..c9fac8faa2 100644
--- a/manifests/passwd
+++ b/manifests/passwd
@@ -10,11 +10,11 @@ mail:x:8:12:mail:/var/spool/mail:/usr/sbin/nologin
 operator:x:11:0:operator:/root:/usr/sbin/nologin
 games:x:12:100:games:/usr/games:/usr/sbin/nologin
 ftp:x:14:50:FTP User:/var/ftp:/usr/sbin/nologin
-nobody:x:99:99:Nobody:/:/usr/sbin/nologin
-dbus:x:81:81:System message bus:/:/usr/sbin/nologin
+nobody:x:99:99:Kernel Overflow User:/:/usr/sbin/nologin
+dbus:x:81:81:System Message Bus:/:/usr/sbin/nologin
 polkitd:x:999:998:User for polkitd:/:/usr/sbin/nologin
 etcd:x:998:997:etcd user:/var/lib/etcd:/usr/sbin/nologin
-tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/usr/sbin/nologin
+tss:x:59:59:Account used for TPM access:/:/usr/sbin/nologin
 avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/usr/sbin/nologin
 rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/usr/sbin/nologin
 sssd:x:995:993:User for sssd:/:/usr/sbin/nologin

From 1d776a10d9d704bc27c0ab262e01b22c377a2fb9 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Wed, 10 Aug 2022 15:35:38 +0000
Subject: [PATCH 1145/2157] manifests/passwd: sort users by name

This makes it easier to diff against systemd-sysusers output.
---
 manifests/passwd | 44 ++++++++++++++++++++++----------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifests/passwd b/manifests/passwd
index c9fac8faa2..9f2f065772 100644
--- a/manifests/passwd
+++ b/manifests/passwd
@@ -1,33 +1,33 @@
-root:x:0:0:root:/root:/bin/bash
+adm:x:3:4:adm:/var/adm:/usr/sbin/nologin
+avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/usr/sbin/nologin
 bin:x:1:1:bin:/bin:/usr/sbin/nologin
+ceph:x:167:167:Ceph daemons:/var/lib/ceph:/usr/sbin/nologin
+chrony:x:994:992::/var/lib/chrony:/usr/sbin/nologin
+cockpit-ws:x:988:987:User for cockpit-ws:/:/usr/sbin/nologin
 daemon:x:2:2:daemon:/sbin:/usr/sbin/nologin
-adm:x:3:4:adm:/var/adm:/usr/sbin/nologin
-lp:x:4:7:lp:/var/spool/lpd:/usr/sbin/nologin
-sync:x:5:0:sync:/sbin:/bin/sync
-shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
+dbus:x:81:81:System Message Bus:/:/usr/sbin/nologin
+dockerroot:x:997:986:Docker User:/var/lib/docker:/usr/sbin/nologin
+etcd:x:998:997:etcd user:/var/lib/etcd:/usr/sbin/nologin
+ftp:x:14:50:FTP User:/var/ftp:/usr/sbin/nologin
+games:x:12:100:games:/usr/games:/usr/sbin/nologin
 halt:x:7:0:halt:/sbin:/sbin/halt
+kube:x:996:994:Kubernetes user:/:/usr/sbin/nologin
+lp:x:4:7:lp:/var/spool/lpd:/usr/sbin/nologin
 mail:x:8:12:mail:/var/spool/mail:/usr/sbin/nologin
-operator:x:11:0:operator:/root:/usr/sbin/nologin
-games:x:12:100:games:/usr/games:/usr/sbin/nologin
-ftp:x:14:50:FTP User:/var/ftp:/usr/sbin/nologin
+nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/usr/sbin/nologin
 nobody:x:99:99:Kernel Overflow User:/:/usr/sbin/nologin
-dbus:x:81:81:System Message Bus:/:/usr/sbin/nologin
+operator:x:11:0:operator:/root:/usr/sbin/nologin
 polkitd:x:999:998:User for polkitd:/:/usr/sbin/nologin
-etcd:x:998:997:etcd user:/var/lib/etcd:/usr/sbin/nologin
-tss:x:59:59:Account used for TPM access:/:/usr/sbin/nologin
-avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/usr/sbin/nologin
+root:x:0:0:root:/root:/bin/bash
 rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/usr/sbin/nologin
-sssd:x:995:993:User for sssd:/:/usr/sbin/nologin
-dockerroot:x:997:986:Docker User:/var/lib/docker:/usr/sbin/nologin
 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/usr/sbin/nologin
-nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/usr/sbin/nologin
-kube:x:996:994:Kubernetes user:/:/usr/sbin/nologin
+shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/usr/sbin/nologin
-chrony:x:994:992::/var/lib/chrony:/usr/sbin/nologin
-tcpdump:x:72:72::/:/usr/sbin/nologin
-ceph:x:167:167:Ceph daemons:/var/lib/ceph:/usr/sbin/nologin
-systemd-timesync:x:993:991:systemd Time Synchronization:/:/usr/sbin/nologin
+sssd:x:995:993:User for sssd:/:/usr/sbin/nologin
+sync:x:5:0:sync:/sbin:/bin/sync
+systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/usr/sbin/nologin
 systemd-network:x:991:990:systemd Network Management:/:/usr/sbin/nologin
 systemd-resolve:x:990:989:systemd Resolver:/:/usr/sbin/nologin
-systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/usr/sbin/nologin
-cockpit-ws:x:988:987:User for cockpit-ws:/:/usr/sbin/nologin
+systemd-timesync:x:993:991:systemd Time Synchronization:/:/usr/sbin/nologin
+tcpdump:x:72:72::/:/usr/sbin/nologin
+tss:x:59:59:Account used for TPM access:/:/usr/sbin/nologin

From 721f896f6776f6fb38c15e86c7902954a4d651d0 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Thu, 11 Aug 2022 13:08:53 +0000
Subject: [PATCH 1146/2157] manifests/passwd: update description for the 'root'
 user

This updates the GECOS field of the `root` user, aligning to the
one used by systemd.

Ref: https://github.com/systemd/systemd/blob/v251/sysusers.d/basic.conf.in#L9
---
 manifests/passwd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/passwd b/manifests/passwd
index 9f2f065772..133283945d 100644
--- a/manifests/passwd
+++ b/manifests/passwd
@@ -18,7 +18,7 @@ nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/usr/sbin/nologin
 nobody:x:99:99:Kernel Overflow User:/:/usr/sbin/nologin
 operator:x:11:0:operator:/root:/usr/sbin/nologin
 polkitd:x:999:998:User for polkitd:/:/usr/sbin/nologin
-root:x:0:0:root:/root:/bin/bash
+root:x:0:0:Super User:/root:/bin/bash
 rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/usr/sbin/nologin
 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/usr/sbin/nologin
 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown

From 712ed1091bb7402d1774355b7d4f6bce1d581e06 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 18 Aug 2022 15:56:36 +0000
Subject: [PATCH 1147/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/25/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 54 insertions(+), 54 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7c791b43e1..6415dc5e5d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-5.fc36.aarch64"
+      "evra": "1.6.8-2.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -619,10 +619,10 @@
       "evra": "11-5.fc36.aarch64"
     },
     "libkcapi": {
-      "evra": "1.3.1-4.fc36.aarch64"
+      "evra": "1.4.0-2.fc36.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-4.fc36.aarch64"
+      "evra": "1.4.0-2.fc36.aarch64"
     },
     "libksba": {
       "evra": "1.6.0-3.fc36.aarch64"
@@ -916,10 +916,10 @@
       "evra": "6.9.8-1.fc36.aarch64"
     },
     "openldap": {
-      "evra": "2.6.2-2.fc36.aarch64"
+      "evra": "2.6.2-3.fc36.aarch64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-2.fc36.aarch64"
+      "evra": "2.6.2-3.fc36.aarch64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.aarch64"
@@ -1015,7 +1015,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-13.fc36.aarch64"
+      "evra": "2:6.2.0-14.fc36.aarch64"
     },
     "readline": {
       "evra": "8.1-6.fc36.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.4-1.fc36.aarch64"
+      "evra": "3.2.5-1.fc36.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.2-3.fc36.aarch64"
+      "evra": "2:1.1.3-1.fc36.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.4-0.fc36.aarch64"
@@ -1174,7 +1174,7 @@
       "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022a-2.fc36.noarch"
+      "evra": "2022b-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.189-1.fc36.noarch"
+      "evra": "2:9.0.213-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.189-1.fc36.aarch64"
+      "evra": "2:9.0.213-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-16T14:48:41Z",
+    "generated": "2022-08-18T14:38:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-14T22:04:20Z"
+        "generated": "2022-08-16T16:07:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-16T01:23:55Z"
+        "generated": "2022-08-18T01:54:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index de144f1e1d..306a778b4b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-5.fc36.ppc64le"
+      "evra": "1.6.8-2.fc36.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.ppc64le"
@@ -613,10 +613,10 @@
       "evra": "11-5.fc36.ppc64le"
     },
     "libkcapi": {
-      "evra": "1.3.1-4.fc36.ppc64le"
+      "evra": "1.4.0-2.fc36.ppc64le"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-4.fc36.ppc64le"
+      "evra": "1.4.0-2.fc36.ppc64le"
     },
     "libksba": {
       "evra": "1.6.0-3.fc36.ppc64le"
@@ -913,10 +913,10 @@
       "evra": "6.9.8-1.fc36.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.2-2.fc36.ppc64le"
+      "evra": "2.6.2-3.fc36.ppc64le"
     },
     "openldap-compat": {
-      "evra": "2.6.2-2.fc36.ppc64le"
+      "evra": "2.6.2-3.fc36.ppc64le"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.ppc64le"
@@ -1042,10 +1042,10 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.4-1.fc36.ppc64le"
+      "evra": "3.2.5-1.fc36.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.2-3.fc36.ppc64le"
+      "evra": "2:1.1.3-1.fc36.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.16.4-0.fc36.ppc64le"
@@ -1177,7 +1177,7 @@
       "evra": "3.2.0-3.fc36.ppc64le"
     },
     "tzdata": {
-      "evra": "2022a-2.fc36.noarch"
+      "evra": "2022b-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.ppc64le"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.189-1.fc36.noarch"
+      "evra": "2:9.0.213-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.189-1.fc36.ppc64le"
+      "evra": "2:9.0.213-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-16T14:48:42Z",
+    "generated": "2022-08-18T14:38:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-14T22:04:14Z"
+        "generated": "2022-08-16T16:07:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-16T01:24:10Z"
+        "generated": "2022-08-18T01:55:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4342ff450f..a2af56faaa 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-5.fc36.s390x"
+      "evra": "1.6.8-2.fc36.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.s390x"
@@ -568,10 +568,10 @@
       "evra": "11-5.fc36.s390x"
     },
     "libkcapi": {
-      "evra": "1.3.1-4.fc36.s390x"
+      "evra": "1.4.0-2.fc36.s390x"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-4.fc36.s390x"
+      "evra": "1.4.0-2.fc36.s390x"
     },
     "libksba": {
       "evra": "1.6.0-3.fc36.s390x"
@@ -853,10 +853,10 @@
       "evra": "6.9.8-1.fc36.s390x"
     },
     "openldap": {
-      "evra": "2.6.2-2.fc36.s390x"
+      "evra": "2.6.2-3.fc36.s390x"
     },
     "openldap-compat": {
-      "evra": "2.6.2-2.fc36.s390x"
+      "evra": "2.6.2-3.fc36.s390x"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.s390x"
@@ -949,7 +949,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-13.fc36.s390x"
+      "evra": "2:6.2.0-14.fc36.s390x"
     },
     "readline": {
       "evra": "8.1-6.fc36.s390x"
@@ -973,10 +973,10 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rsync": {
-      "evra": "3.2.4-1.fc36.s390x"
+      "evra": "3.2.5-1.fc36.s390x"
     },
     "runc": {
-      "evra": "2:1.1.2-3.fc36.s390x"
+      "evra": "2:1.1.3-1.fc36.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.20.0-1.fc36.s390x"
@@ -1105,7 +1105,7 @@
       "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
-      "evra": "2022a-2.fc36.noarch"
+      "evra": "2022b-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.s390x"
@@ -1117,10 +1117,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.189-1.fc36.noarch"
+      "evra": "2:9.0.213-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.189-1.fc36.s390x"
+      "evra": "2:9.0.213-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-16T14:47:52Z",
+    "generated": "2022-08-18T14:37:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-14T22:03:55Z"
+        "generated": "2022-08-16T16:06:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-16T01:24:18Z"
+        "generated": "2022-08-18T01:55:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0c225642ce..0083ce1d8f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.6-5.fc36.x86_64"
+      "evra": "1.6.8-2.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -625,10 +625,10 @@
       "evra": "11-5.fc36.x86_64"
     },
     "libkcapi": {
-      "evra": "1.3.1-4.fc36.x86_64"
+      "evra": "1.4.0-2.fc36.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.3.1-4.fc36.x86_64"
+      "evra": "1.4.0-2.fc36.x86_64"
     },
     "libksba": {
       "evra": "1.6.0-3.fc36.x86_64"
@@ -928,10 +928,10 @@
       "evra": "6.9.8-1.fc36.x86_64"
     },
     "openldap": {
-      "evra": "2.6.2-2.fc36.x86_64"
+      "evra": "2.6.2-3.fc36.x86_64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-2.fc36.x86_64"
+      "evra": "2.6.2-3.fc36.x86_64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.4-1.fc36.x86_64"
+      "evra": "3.2.5-1.fc36.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.2-3.fc36.x86_64"
+      "evra": "2:1.1.3-1.fc36.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.4-0.fc36.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022a-2.fc36.noarch"
+      "evra": "2022b-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.189-1.fc36.noarch"
+      "evra": "2:9.0.213-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.189-1.fc36.x86_64"
+      "evra": "2:9.0.213-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-16T14:47:57Z",
+    "generated": "2022-08-18T14:37:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-14T22:05:01Z"
+        "generated": "2022-08-16T16:07:34Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-16T01:24:25Z"
+        "generated": "2022-08-18T01:55:24Z"
       }
     }
   }

From f9b52ace362748b86fdb6b7429c01cfe52d9359a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 20 Aug 2022 22:10:33 +0000
Subject: [PATCH 1148/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/28/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 68 insertions(+), 68 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6415dc5e5d..ee48d7d9de 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "1.1.0-1.fc36.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-56.fc36.noarch"
+      "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.15.0-1.fc36.aarch64"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.0-1.fc36.aarch64"
     },
     "dbus-broker": {
-      "evra": "31-1.fc36.aarch64"
+      "evra": "32-1.fc36.aarch64"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -274,7 +274,7 @@
       "evra": "2.4.7-1.fc36.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-release-common": {
       "evra": "36-18.noarch"
@@ -286,16 +286,16 @@
       "evra": "36-18.noarch"
     },
     "fedora-repos": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "file": {
       "evra": "5.41-4.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.17-200.fc36.aarch64"
+      "evra": "5.18.18-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.17-200.fc36.aarch64"
+      "evra": "5.18.18-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.17-200.fc36.aarch64"
+      "evra": "5.18.18-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "4:4.1.1-3.fc36.aarch64"
+      "evra": "4:4.2.0-2.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.1.1-3.fc36.aarch64"
+      "evra": "4:4.2.0-2.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1057,10 +1057,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-18T14:38:23Z",
+    "generated": "2022-08-20T20:53:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-16T16:07:10Z"
+        "generated": "2022-08-18T16:01:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-18T01:54:53Z"
+        "generated": "2022-08-20T01:39:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 306a778b4b..ae5ba64d27 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "1.1.0-1.fc36.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-56.fc36.noarch"
+      "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.15.0-1.fc36.ppc64le"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.0-1.fc36.ppc64le"
     },
     "dbus-broker": {
-      "evra": "31-1.fc36.ppc64le"
+      "evra": "32-1.fc36.ppc64le"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -265,7 +265,7 @@
       "evra": "2.4.7-1.fc36.ppc64le"
     },
     "fedora-gpg-keys": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-release-common": {
       "evra": "36-18.noarch"
@@ -277,16 +277,16 @@
       "evra": "36-18.noarch"
     },
     "fedora-repos": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "file": {
       "evra": "5.41-4.fc36.ppc64le"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.17-200.fc36.ppc64le"
+      "evra": "5.18.18-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.18.17-200.fc36.ppc64le"
+      "evra": "5.18.18-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.18.17-200.fc36.ppc64le"
+      "evra": "5.18.18-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-2.fc36.ppc64le"
     },
     "podman": {
-      "evra": "4:4.1.1-3.fc36.ppc64le"
+      "evra": "4:4.2.0-2.fc36.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.1.1-3.fc36.ppc64le"
+      "evra": "4:4.2.0-2.fc36.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.ppc64le"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-10.fc36.ppc64le"
     },
     "selinux-policy": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "servicelog": {
       "evra": "1.1.15-7.fc35.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-18T14:38:14Z",
+    "generated": "2022-08-20T20:53:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-16T16:07:04Z"
+        "generated": "2022-08-18T16:01:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-18T01:55:09Z"
+        "generated": "2022-08-20T01:39:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a2af56faaa..d30f08ea5c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "1.1.0-1.fc36.s390x"
     },
     "containers-common": {
-      "evra": "4:1-56.fc36.noarch"
+      "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.15.0-1.fc36.s390x"
@@ -193,7 +193,7 @@
       "evra": "1:1.14.0-1.fc36.s390x"
     },
     "dbus-broker": {
-      "evra": "31-1.fc36.s390x"
+      "evra": "32-1.fc36.s390x"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -262,7 +262,7 @@
       "evra": "2.4.7-1.fc36.s390x"
     },
     "fedora-gpg-keys": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-release-common": {
       "evra": "36-18.noarch"
@@ -274,16 +274,16 @@
       "evra": "36-18.noarch"
     },
     "fedora-repos": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "file": {
       "evra": "5.41-4.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.17-200.fc36.s390x"
+      "evra": "5.18.18-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.17-200.fc36.s390x"
+      "evra": "5.18.18-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.17-200.fc36.s390x"
+      "evra": "5.18.18-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -916,10 +916,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "4:4.1.1-3.fc36.s390x"
+      "evra": "4:4.2.0-2.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.1.1-3.fc36.s390x"
+      "evra": "4:4.2.0-2.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -994,10 +994,10 @@
       "evra": "4.8-10.fc36.s390x"
     },
     "selinux-policy": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-18T14:37:49Z",
+    "generated": "2022-08-20T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-16T16:06:52Z"
+        "generated": "2022-08-18T16:01:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-18T01:55:16Z"
+        "generated": "2022-08-20T01:39:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0083ce1d8f..9c1634830f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "1.1.0-1.fc36.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-56.fc36.noarch"
+      "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.15.0-1.fc36.x86_64"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.0-1.fc36.x86_64"
     },
     "dbus-broker": {
-      "evra": "31-1.fc36.x86_64"
+      "evra": "32-1.fc36.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.14.0-1.fc36.noarch"
@@ -274,7 +274,7 @@
       "evra": "2.4.7-1.fc36.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-release-common": {
       "evra": "36-18.noarch"
@@ -286,16 +286,16 @@
       "evra": "36-18.noarch"
     },
     "fedora-repos": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-1.noarch"
+      "evra": "36-4.noarch"
     },
     "file": {
       "evra": "5.41-4.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.17-200.fc36.x86_64"
+      "evra": "5.18.18-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.17-200.fc36.x86_64"
+      "evra": "5.18.18-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.17-200.fc36.x86_64"
+      "evra": "5.18.18-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -994,10 +994,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "4:4.1.1-3.fc36.x86_64"
+      "evra": "4:4.2.0-2.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.1.1-3.fc36.x86_64"
+      "evra": "4:4.2.0-2.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.13-3.fc36.noarch"
+      "evra": "36.14-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-18T14:37:45Z",
+    "generated": "2022-08-20T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-16T16:07:34Z"
+        "generated": "2022-08-18T16:01:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-18T01:55:24Z"
+        "generated": "2022-08-20T01:39:37Z"
       }
     }
   }

From 865908fd0b535e903b26434a34639150b938ca49 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 19 Aug 2022 14:28:21 +0000
Subject: [PATCH 1149/2157] overlay/sysusers: add description comments to each
 fragment

---
 overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf     | 5 ++++-
 .../15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf   | 3 +++
 overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf     | 4 ++++
 .../15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf    | 4 ++++
 4 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
index a186791dd2..074658dd29 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
@@ -1,3 +1,6 @@
-# CoreOS mismatch: https://github.com/coreos/fedora-coreos-tracker/issues/1201
+# Legacy IDs for 'nobody' user/group. This is a CoreOS mismatched entry
+# which will need to be migrated:
+# https://github.com/coreos/fedora-coreos-tracker/issues/1201
+
 # g nobody 65534
 g nobody 99
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
index 1a51660445..71417a501e 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
@@ -1,3 +1,6 @@
+# These are pinned users/groups whose static IDs are only used
+# this way on CoreOS nodes.
+
 g cgred 996
 g chrony 992
 g cockpit-ws 987
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
index 9faac4a665..43728e1816 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
@@ -1,3 +1,7 @@
+# These are basic users/groups coming from the default entries
+# in the 'setup' package. They can be dropped once that package
+# starts shipping its own sysusers.d entries.
+
 g adm 4
 g audio 63
 g bin 1
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
index df8c48080b..382d4d9053 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
@@ -1,3 +1,7 @@
+# These are users/groups with static IDs which follow usual Fedora-wide
+# allocation. They are usually coming from relevant packages, but we also
+# pre-populate them on CoreOS.
+
 g avahi-autoipd 170
 g ceph 167
 g dbus 81

From df5f5fd5a25ac5d3254b6b2aab14691d65906815 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 19 Aug 2022 14:28:22 +0000
Subject: [PATCH 1150/2157] overlay/sysusers: add user entries

---
 .../usr/lib/sysusers.d/00-group-nobody.conf      |  3 +++
 .../lib/sysusers.d/00-groups-coreos-static.conf  | 13 +++++++++++++
 .../usr/lib/sysusers.d/10-groups-basic.conf      | 16 ++++++++++++++++
 .../lib/sysusers.d/10-groups-static-extra.conf   | 10 ++++++++++
 4 files changed, 42 insertions(+)

diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
index 074658dd29..86e5d56c39 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
@@ -3,4 +3,7 @@
 # https://github.com/coreos/fedora-coreos-tracker/issues/1201
 
 # g nobody 65534
+# u nobody 65534:65534 "Kernel Overflow User" - -
+
 g nobody 99
+u nobody 99:99 "Kernel Overflow User" - -
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
index 71417a501e..9678fe6fdf 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
@@ -17,3 +17,16 @@ g systemd-bus-proxy 988
 g systemd-network 990
 g systemd-resolve 989
 g systemd-timesync 991
+
+u chrony            994:992     -                              /var/lib/chrony -
+u cockpit-ws        988:987     "User for cockpit-ws"          -               -
+u dockerroot        997:986     "Docker User"                  /var/lib/docker -
+u etcd              998:997     "etcd user"                    /var/lib/etcd   -
+u kube              996:994     "Kubernetes user"              -               -
+u nfsnobody         65534:65534 "Anonymous NFS User"           /var/lib/nfs    -
+u polkitd           999:998     "User for polkitd"             -               -
+u sssd              995:993     "User for sssd"                -               -
+u systemd-bus-proxy 989:988     "systemd Bus Proxy"            -               -
+u systemd-network   991:990     "systemd Network Management"   -               -
+u systemd-resolve   990:989     "systemd Resolver"             -               -
+u systemd-timesync  993:991     "systemd Time Synchronization" -               -
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
index 43728e1816..597b8d28e7 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
@@ -25,3 +25,19 @@ g tty 5
 g users 100
 g video 39
 g wheel 10
+
+u adm      3:4      "adm"      /var/adm        -
+u bin      1:1      "bin"      /bin            -
+u daemon   2:2      "daemon"   /sbin           -
+u ftp      14:50    "FTP User" /var/ftp        -
+# Workaround for systemd-sysusers bug, will be fixed in v252:
+# https://github.com/systemd/systemd/issues/24217
+# u games  12:100   "games"    /usr/games      -
+u games    12:users "games"    /usr/games      -
+u halt     7:0      "halt"     /sbin           /sbin/halt
+u lp       4:7      "lp"       /var/spool/lpd  -
+u mail     8:12     "mail"     /var/spool/mail -
+u operator 11:0     "operator" /root           -
+u root     0:0      "root"     /root           /bin/bash
+u shutdown 6:0      "shutdown" /sbin           /sbin/shutdown
+u sync     5:0      "sync"     /sbin           /bin/sync
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
index 382d4d9053..f05644ede1 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
@@ -14,3 +14,13 @@ g tcpdump 72
 g tss 59
 g utempter 35
 g utmp 22
+
+u avahi-autoipd 170:170     "Avahi IPv4LL Stack"          /var/lib/avahi-autoipd -
+u ceph          167:167     "Ceph daemons"                /var/lib/ceph          -
+u dbus          81:81       "System Message Bus"          -                      -
+u nfsnobody     65534:65534 "Anonymous NFS User"          /var/lib/nfs           -
+u rpc           32:32       "Rpcbind Daemon"              /var/lib/rpcbind       -
+u rpcuser       29:29       "RPC Service User"            /var/lib/nfs           -
+u sshd          74:74       "Privilege-separated SSH"     /var/empty/sshd        -
+u tcpdump       72:72       -                             -                      -
+u tss           59:59       "Account used for TPM access" -                      -

From fd31e96b40798a22c352f849632d8b20daefd872 Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 19 Aug 2022 14:28:23 +0000
Subject: [PATCH 1151/2157] overlay/sysusers: rename fragments containing both
 groups and users

---
 .../sysusers.d/{00-group-nobody.conf => 00-coreos-nobody.conf}    | 0
 .../{00-groups-coreos-static.conf => 00-coreos-static.conf}       | 0
 .../lib/sysusers.d/{10-groups-basic.conf => 10-setup-basic.conf}  | 0
 .../{10-groups-static-extra.conf => 10-static-extra.conf}         | 0
 4 files changed, 0 insertions(+), 0 deletions(-)
 rename overlay.d/15fcos/usr/lib/sysusers.d/{00-group-nobody.conf => 00-coreos-nobody.conf} (100%)
 rename overlay.d/15fcos/usr/lib/sysusers.d/{00-groups-coreos-static.conf => 00-coreos-static.conf} (100%)
 rename overlay.d/15fcos/usr/lib/sysusers.d/{10-groups-basic.conf => 10-setup-basic.conf} (100%)
 rename overlay.d/15fcos/usr/lib/sysusers.d/{10-groups-static-extra.conf => 10-static-extra.conf} (100%)

diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-coreos-nobody.conf
similarity index 100%
rename from overlay.d/15fcos/usr/lib/sysusers.d/00-group-nobody.conf
rename to overlay.d/15fcos/usr/lib/sysusers.d/00-coreos-nobody.conf
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf b/overlay.d/15fcos/usr/lib/sysusers.d/00-coreos-static.conf
similarity index 100%
rename from overlay.d/15fcos/usr/lib/sysusers.d/00-groups-coreos-static.conf
rename to overlay.d/15fcos/usr/lib/sysusers.d/00-coreos-static.conf
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf
similarity index 100%
rename from overlay.d/15fcos/usr/lib/sysusers.d/10-groups-basic.conf
rename to overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf
similarity index 100%
rename from overlay.d/15fcos/usr/lib/sysusers.d/10-groups-static-extra.conf
rename to overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf

From 31e1e85576e4bba100d8b740d7d618c2a2966eb7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 22 Aug 2022 20:54:21 +0000
Subject: [PATCH 1152/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/30/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ee48d7d9de..2011a01a41 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-20T20:53:38Z",
+    "generated": "2022-08-22T20:54:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-18T16:01:33Z"
+        "generated": "2022-08-20T22:15:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-20T01:39:05Z"
+        "generated": "2022-08-22T00:58:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ae5ba64d27..2091736724 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-20T20:53:38Z",
+    "generated": "2022-08-22T20:53:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-18T16:01:24Z"
+        "generated": "2022-08-20T22:15:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-20T01:39:21Z"
+        "generated": "2022-08-22T00:59:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d30f08ea5c..3771890c63 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-20T20:53:05Z",
+    "generated": "2022-08-22T20:53:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-18T16:01:12Z"
+        "generated": "2022-08-20T22:14:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-20T01:39:29Z"
+        "generated": "2022-08-22T00:59:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9c1634830f..f9877cd9f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-20T20:53:00Z",
+    "generated": "2022-08-22T20:53:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-18T16:01:55Z"
+        "generated": "2022-08-20T22:15:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-20T01:39:37Z"
+        "generated": "2022-08-22T00:59:17Z"
       }
     }
   }

From 6fdf9349a7accafd3c2d9a71eafab02bb715065f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 22 Aug 2022 14:47:22 -0400
Subject: [PATCH 1153/2157] update fallback hostname handling; add test

In Fedora 37+ the fallback hostname provided at compile time to systemd
has been changed back to `localhost`. Let's update our modification of
/etc/os-release to insert DEFAULT_HOSTNAME to be F36 only and also add
a test to verify the fallback hostname is `localhost` everywhere.
---
 manifests/fallback-hostname.yaml              | 11 ++++
 manifests/fedora-coreos-base.yaml             | 17 ++---
 .../hostname/fallback-hostname/config.bu      | 10 +++
 .../fallback-hostname/data/commonlib.sh       |  1 +
 .../hostname/fallback-hostname/test.sh        | 63 +++++++++++++++++++
 5 files changed, 89 insertions(+), 13 deletions(-)
 create mode 100644 manifests/fallback-hostname.yaml
 create mode 100644 tests/kola/networking/hostname/fallback-hostname/config.bu
 create mode 120000 tests/kola/networking/hostname/fallback-hostname/data/commonlib.sh
 create mode 100755 tests/kola/networking/hostname/fallback-hostname/test.sh

diff --git a/manifests/fallback-hostname.yaml b/manifests/fallback-hostname.yaml
new file mode 100644
index 0000000000..f3bc6b409b
--- /dev/null
+++ b/manifests/fallback-hostname.yaml
@@ -0,0 +1,11 @@
+postprocess:
+  # Set the fallback hostname to `localhost`. This can be removed
+  # once we are based on Fedora 37+.
+  # See https://github.com/coreos/fedora-coreos-tracker/issues/902
+  - |
+    #!/usr/bin/env bash
+    set -euxo pipefail
+    source /etc/os-release
+    if [ -z "${DEFAULT_HOSTNAME:-}" ]; then
+      echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
+    fi
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 5cbaaae25b..a0903ae0b7 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -11,6 +11,10 @@ include:
   - shared-workarounds.yaml
   - shared-el9.yaml
 
+conditional-include:
+  - if: releasever <= 36
+    include: fallback-hostname.yaml
+
 ostree-layers:
   - overlay/05core
   - overlay/08nouveau
@@ -68,19 +72,6 @@ postprocess:
     #!/usr/bin/env bash
     systemctl mask systemd-repart.service
 
-  # Set the fallback hostname to `localhost`. This was needed in F33/F34
-  # because a fallback hostname of `fedora` + systemd-resolved broke
-  # rDNS. It's now fixed in F35+ NetworkManager to handle the corner cases
-  # around synthetized hostnames and systemd-resolved, but the question
-  # remains on what is a more appropriate default hostname for a server like
-  # host. https://github.com/coreos/fedora-coreos-tracker/issues/902
-  - |
-    #!/usr/bin/env bash
-    source /etc/os-release
-    if [ -z "${DEFAULT_HOSTNAME:-}" ]; then
-      echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
-    fi
-
   # Fedora 37 adds the nvmf dracut module to the initrd, causing
   # ext.config.files.dracut-executable to notice that the module puts a
   # non-executable file in /usr/sbin.  Dracut has been updated to fix the
diff --git a/tests/kola/networking/hostname/fallback-hostname/config.bu b/tests/kola/networking/hostname/fallback-hostname/config.bu
new file mode 100644
index 0000000000..de581ea483
--- /dev/null
+++ b/tests/kola/networking/hostname/fallback-hostname/config.bu
@@ -0,0 +1,10 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/NetworkManager/conf.d/90-no-dhcp-dns-hostname.conf
+      mode: 0600
+      contents:
+        inline: |
+          [main]
+          hostname-mode=none
diff --git a/tests/kola/networking/hostname/fallback-hostname/data/commonlib.sh b/tests/kola/networking/hostname/fallback-hostname/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/hostname/fallback-hostname/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
new file mode 100755
index 0000000000..b171c6a344
--- /dev/null
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -0,0 +1,63 @@
+#!/bin/bash
+set -xeuo pipefail
+
+# kola: { "platforms": "qemu" }
+#
+# Test that the fallback hostname is `localhost`. This test
+# validates that the fallback hostname is set to `localhost`
+# by first disabling NetworkManager from setting the hostname
+# via DHCP or DNS (see config.bu) and then verifying that the
+# hostname is set from the fallback hostname and is `localhost`.
+# https://github.com/coreos/fedora-coreos-tracker/issues/902
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Use the output of hostnamectl to gather information about how
+# the hostname is/was set. We're expecting something like this:
+#   {
+#       "Hostname" : "localhost",
+#       "StaticHostname" : null,
+#       "PrettyHostname" : null,
+#       "DefaultHostname" : "localhost",
+#       "HostnameSource" : "default",
+#       "IconName" : "computer-vm",
+#       "Chassis" : "vm",
+#       "Deployment" : null,
+#       "Location" : null,
+#       "KernelName" : "Linux",
+#       "KernelRelease" : "5.18.17-200.fc36.x86_64",
+#       "KernelVersion" : "#1 SMP PREEMPT_DYNAMIC Thu Aug 11 14:36:06 UTC 2022",
+#       "OperatingSystemPrettyName" : "Fedora CoreOS 36.20220814.20.0",
+#       "OperatingSystemCPEName" : "cpe:/o:fedoraproject:fedora:36",
+#       "OperatingSystemHomeURL" : "https://getfedora.org/coreos/",
+#       "HardwareVendor" : "QEMU",
+#       "HardwareModel" : "Standard PC _i440FX + PIIX, 1996_",
+#       "ProductUUID" : null
+#   }
+
+
+output=$(hostnamectl --json=pretty)
+hostname=$(echo "$output" | jq -r '.Hostname')
+fallback=$(echo "$output" | jq -r '.DefaultHostname')
+static=$(echo "$output" | jq -r '.StaticHostname')
+namesource=$(echo "$output" | jq -r '.HostnameSource')
+
+if [ "$hostname" != 'localhost' ]; then
+    fatal "hostname was not expected"
+fi
+if [ "$fallback" != 'localhost' ]; then
+    fatal "fallback hostname was not expected"
+fi
+if [ "$static" != 'null' ]; then
+    fatal "static hostname not expected to be set"
+fi
+if [ "$namesource" != 'default' ]; then
+    # For this test since we disabled NM setting the hostname we
+    # expect the hostname to have been set via the fallback/default
+    fatal "hostname was set from non-default/fallback source"
+fi
+
+ok "fallback hostname wired up correctly"

From fed19127624e7fda6118a91dd9e4a532cfc2c26d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 22 Aug 2022 23:11:46 -0400
Subject: [PATCH 1154/2157] denylist: drop ext.config.extensions.* denial on
 rawhide

The modules have been built and the F39 gpg key has been fixed.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1278
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3351709d58..48c40f52a5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,8 +53,3 @@
   snooze: 2022-09-10
   streams:
   - rawhide
-- pattern: ext.config.extensions.*
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1278
-  snooze: 2022-09-10
-  streams:
-  - rawhide

From 1b13ac1562987bb7078c33bcba49a09233f9e1b5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 22 Aug 2022 23:21:21 -0400
Subject: [PATCH 1155/2157] denylist: drop the ext.config.toolbox rawhide
 denial

The toolbox container for F38 has been built.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1277
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 48c40f52a5..b8fdff772b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -48,8 +48,3 @@
   - aarch64
   streams:
   - rawhide
-- pattern: ext.config.toolbox
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1277
-  snooze: 2022-09-10
-  streams:
-  - rawhide

From aa8d9e8e5877814516291a553f5ca7a7ff0977ad Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:00:09 -0400
Subject: [PATCH 1156/2157] transposefs: mount filesystems read-only by default

We should always default to mounting filesystemd read-only unless we
actually need write access.
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh     | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 53a577f091..7b78cf3b41 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -43,9 +43,10 @@ get_partlabels_for_parttype() {
 mount_verbose() {
     local srcdev=$1; shift
     local destdir=$1; shift
-    echo "Mounting ${srcdev} ($(realpath "$srcdev")) to $destdir"
+    local mode=${1:-ro}
+    echo "Mounting ${srcdev} ${mode} ($(realpath "$srcdev")) to $destdir"
     mkdir -p "${destdir}"
-    mount "${srcdev}" "${destdir}"
+    mount -o "${mode}" "${srcdev}" "${destdir}"
 }
 
 # Sometimes, for some reason the by-label symlinks aren't updated. Detect these
@@ -79,7 +80,7 @@ mount_and_restore_filesystem_by_label() {
     local new_dev
     new_dev=$(jq -r "$(query_fslabel "${label}") | .[0].device" "${ignition_cfg}")
     udev_trigger_on_label_mismatch "${label}" "${new_dev}"
-    mount_verbose "/dev/disk/by-label/${label}" "${mountpoint}"
+    mount_verbose "/dev/disk/by-label/${label}" "${mountpoint}" rw
     find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} \;
 }
 
@@ -221,7 +222,7 @@ case "${1:-}" in
                 # 3. We don't need the by-label symlink to be correct and
                 #    nothing later in boot will be mounting the filesystem
                 mountpoint="/mnt/esp-${label}"
-                mount_verbose "/dev/disk/by-partlabel/${label}" "${mountpoint}"
+                mount_verbose "/dev/disk/by-partlabel/${label}" "${mountpoint}" rw
                 find "${saved_esp}" -mindepth 1 -maxdepth 1 -exec cp -a {} "${mountpoint}" \;
             done
         fi

From 7d0952769d7b4633b7d5556bfe9c64691451ae7b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:06:04 -0400
Subject: [PATCH 1157/2157] transposefs: factor out function to save
 filesystems

Just like we have `mount_and_restore_filesystem_by_label`, add a
`mount_and_save_filesystem_by_label` that can be used to save both the
rootfs and bootfs.
---
 .../ignition-ostree-transposefs.sh                | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 7b78cf3b41..3e33754b5e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -84,6 +84,15 @@ mount_and_restore_filesystem_by_label() {
     find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} \;
 }
 
+mount_and_save_filesystem_by_label() {
+    local label=$1; shift
+    local saved_fs=$1; shift
+    local fs=/dev/disk/by-label/${label}
+    mount_verbose "${fs}" /var/tmp/mnt
+    cp -aT /var/tmp/mnt "${saved_fs}"
+    umount /var/tmp/mnt
+}
+
 # In Secure Execution case user is not allowed to modify partition table
 check_and_set_secex_config() {
     if [[ -f /run/coreos/secure-execution ]]; then
@@ -166,15 +175,13 @@ case "${1:-}" in
         # Mounts happen in a private mount namespace since we're not "offically" mounting
         if [ -d "${saved_root}" ]; then
             echo "Moving rootfs to RAM..."
-            mount_verbose "${root_part}" /sysroot
-            cp -aT /sysroot "${saved_root}"
+            mount_and_save_filesystem_by_label root "${saved_root}"
             # also store the state of the partition
             lsblk "${root_part}" --nodeps --pairs -b --paths -o NAME,TYPE,SIZE > "${partstate_root}"
         fi
         if [ -d "${saved_boot}" ]; then
             echo "Moving bootfs to RAM..."
-            mount_verbose "${boot_part}" /sysroot/boot
-            cp -aT /sysroot/boot "${saved_boot}"
+            mount_and_save_filesystem_by_label boot "${saved_boot}"
         fi
         if [ -d "${saved_esp}" ]; then
             echo "Moving EFI System Partition to RAM..."

From 4c85cb063968f88a6f6eb4d3d4405ab81d228edd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:08:18 -0400
Subject: [PATCH 1158/2157] transposefs: use stricter `find ... -exec ... {} +`
 variant

Unlike the default `\;` variant, this variant will actually cause `find`
to exit nonzero if the executed command failed. (Its main purpose is
actually to pass multiple items to the command rather than one at a
time, but we're more interested in the cleaner error-handling semantic.)
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 3e33754b5e..534536f625 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -81,7 +81,7 @@ mount_and_restore_filesystem_by_label() {
     new_dev=$(jq -r "$(query_fslabel "${label}") | .[0].device" "${ignition_cfg}")
     udev_trigger_on_label_mismatch "${label}" "${new_dev}"
     mount_verbose "/dev/disk/by-label/${label}" "${mountpoint}" rw
-    find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} \;
+    find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} +
 }
 
 mount_and_save_filesystem_by_label() {
@@ -230,7 +230,7 @@ case "${1:-}" in
                 #    nothing later in boot will be mounting the filesystem
                 mountpoint="/mnt/esp-${label}"
                 mount_verbose "/dev/disk/by-partlabel/${label}" "${mountpoint}" rw
-                find "${saved_esp}" -mindepth 1 -maxdepth 1 -exec cp -a {} "${mountpoint}" \;
+                find "${saved_esp}" -mindepth 1 -maxdepth 1 -exec cp -at "${mountpoint}" {} +
             done
         fi
         if [ -d "${saved_bios}" ]; then

From dd8325025efce7b11126d41d1492347d97e0763d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:20:58 -0400
Subject: [PATCH 1159/2157] 35coreos-ignition: fix LUKS device paths

Using `BOOTDEV` like this here will not be valid once we're able to
switch to relying on the boot link and drop
`ignition-ostree-secex-config.sh`. It's cleaner to just use the
`by-label/` symlink instead.
---
 .../usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index c1f5a39bb0..944e765153 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -36,7 +36,7 @@
     ],
     "luks": [
       {
-        "device": "${BOOTDEV}3",
+        "device": "/dev/disk/by-label/boot",
         "label": "crypt_bootfs",
         "name": "boot",
         "options": [
@@ -46,7 +46,7 @@
         "wipeVolume": true
       },
       {
-        "device": "${BOOTDEV}4",
+        "device": "/dev/disk/by-label/root",
         "label": "crypt_rootfs",
         "name": "root",
         "options": [

From d0414dcd659cfa11fcc6b4440a9009e61e5a14f8 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:23:24 -0400
Subject: [PATCH 1160/2157] 35coreos-ignition: swap order of `luks` and
 `filesystems` keys

Conceptually, I find it clearer to follow the Ignition config if the
`luks` section comes before the `filesystems` section since the latter
refers to things from the former and that's the order in which the
operations are carried out in practice (and in turn the block device
hierarchy).
---
 .../modules.d/35coreos-ignition/01-secex.ign  | 32 +++++++++----------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index 944e765153..b082184d26 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -20,23 +20,9 @@
         ]
       }
     ],
-    "filesystems": [
-      {
-        "device": "/dev/mapper/boot",
-        "format": "ext4",
-        "label": "boot",
-        "wipeFilesystem": true
-      },
-      {
-        "device": "/dev/mapper/root",
-        "format": "xfs",
-        "label": "root",
-        "wipeFilesystem": true
-      }
-    ],
     "luks": [
       {
-        "device": "/dev/disk/by-label/boot",
+        "device": "/dev/disk/by-partlabel/boot",
         "label": "crypt_bootfs",
         "name": "boot",
         "options": [
@@ -46,7 +32,7 @@
         "wipeVolume": true
       },
       {
-        "device": "/dev/disk/by-label/root",
+        "device": "/dev/disk/by-partlabel/root",
         "label": "crypt_rootfs",
         "name": "root",
         "options": [
@@ -55,6 +41,20 @@
         ],
         "wipeVolume": true
       }
+    ],
+    "filesystems": [
+      {
+        "device": "/dev/mapper/boot",
+        "format": "ext4",
+        "label": "boot",
+        "wipeFilesystem": true
+      },
+      {
+        "device": "/dev/mapper/root",
+        "format": "xfs",
+        "label": "root",
+        "wipeFilesystem": true
+      }
     ]
   }
 }

From ff35b6c3a092db289c95a57a49673d8113dfe71c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Aug 2022 22:06:26 +0000
Subject: [PATCH 1161/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/32/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2011a01a41..13780aae2b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.18-200.fc36.aarch64"
+      "evra": "5.18.19-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.18-200.fc36.aarch64"
+      "evra": "5.18.19-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.18-200.fc36.aarch64"
+      "evra": "5.18.19-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -580,13 +580,13 @@
       "evra": "1.4-6.fc36.aarch64"
     },
     "libgcc": {
-      "evra": "12.1.1-1.fc36.aarch64"
+      "evra": "12.2.1-1.fc36.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.aarch64"
     },
     "libgomp": {
-      "evra": "12.1.1-1.fc36.aarch64"
+      "evra": "12.2.1-1.fc36.aarch64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.aarch64"
@@ -754,7 +754,7 @@
       "evra": "2.7.3-1.fc36.aarch64"
     },
     "libstdc++": {
-      "evra": "12.1.1-1.fc36.aarch64"
+      "evra": "12.2.1-1.fc36.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-22T20:54:01Z",
+    "generated": "2022-08-24T20:56:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-20T22:15:08Z"
+        "generated": "2022-08-23T03:08:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-22T00:58:47Z"
+        "generated": "2022-08-24T20:11:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2091736724..7f12a37860 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -460,13 +460,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.18-200.fc36.ppc64le"
+      "evra": "5.18.19-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.18.18-200.fc36.ppc64le"
+      "evra": "5.18.19-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.18.18-200.fc36.ppc64le"
+      "evra": "5.18.19-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -574,13 +574,13 @@
       "evra": "1.4-6.fc36.ppc64le"
     },
     "libgcc": {
-      "evra": "12.1.1-1.fc36.ppc64le"
+      "evra": "12.2.1-1.fc36.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.ppc64le"
     },
     "libgomp": {
-      "evra": "12.1.1-1.fc36.ppc64le"
+      "evra": "12.2.1-1.fc36.ppc64le"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.ppc64le"
@@ -754,7 +754,7 @@
       "evra": "2.7.3-1.fc36.ppc64le"
     },
     "libstdc++": {
-      "evra": "12.1.1-1.fc36.ppc64le"
+      "evra": "12.2.1-1.fc36.ppc64le"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-22T20:53:26Z",
+    "generated": "2022-08-24T20:56:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-20T22:15:46Z"
+        "generated": "2022-08-23T03:07:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-22T00:59:02Z"
+        "generated": "2022-08-24T20:11:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3771890c63..b9cfaf4afc 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.18-200.fc36.s390x"
+      "evra": "5.18.19-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.18-200.fc36.s390x"
+      "evra": "5.18.19-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.18-200.fc36.s390x"
+      "evra": "5.18.19-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -541,7 +541,7 @@
       "evra": "1.10.0-3.fc36.s390x"
     },
     "libgcc": {
-      "evra": "12.1.1-1.fc36.s390x"
+      "evra": "12.2.1-1.fc36.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.s390x"
@@ -703,7 +703,7 @@
       "evra": "2.7.3-1.fc36.s390x"
     },
     "libstdc++": {
-      "evra": "12.1.1-1.fc36.s390x"
+      "evra": "12.2.1-1.fc36.s390x"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-22T20:53:10Z",
+    "generated": "2022-08-24T20:55:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-20T22:14:41Z"
+        "generated": "2022-08-23T03:08:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-22T00:59:10Z"
+        "generated": "2022-08-24T20:11:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f9877cd9f9..8b36406780 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.18-200.fc36.x86_64"
+      "evra": "5.18.19-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.18-200.fc36.x86_64"
+      "evra": "5.18.19-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.18-200.fc36.x86_64"
+      "evra": "5.18.19-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -586,13 +586,13 @@
       "evra": "1.4-6.fc36.x86_64"
     },
     "libgcc": {
-      "evra": "12.1.1-1.fc36.x86_64"
+      "evra": "12.2.1-1.fc36.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.x86_64"
     },
     "libgomp": {
-      "evra": "12.1.1-1.fc36.x86_64"
+      "evra": "12.2.1-1.fc36.x86_64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.x86_64"
@@ -763,7 +763,7 @@
       "evra": "2.7.3-1.fc36.x86_64"
     },
     "libstdc++": {
-      "evra": "12.1.1-1.fc36.x86_64"
+      "evra": "12.2.1-1.fc36.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-22T20:53:49Z",
+    "generated": "2022-08-24T20:55:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-20T22:15:40Z"
+        "generated": "2022-08-23T03:09:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-22T00:59:17Z"
+        "generated": "2022-08-24T20:12:07Z"
       }
     }
   }

From a816af4930ed4802f3c0f4978ed036abf73b36bb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 26 Aug 2022 14:42:34 +0000
Subject: [PATCH 1162/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/34/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 13780aae2b..99a2a0118d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -268,7 +268,7 @@
       "evra": "0.187-4.fc36.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.18-1.fc36.aarch64"
+      "evra": "2:5.19-1.fc36.aarch64"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.aarch64"
@@ -697,10 +697,10 @@
       "evra": "0.1.5-50.fc36.aarch64"
     },
     "librepo": {
-      "evra": "1.14.3-1.fc36.aarch64"
+      "evra": "1.14.4-1.fc36.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.1-1.fc36.noarch"
+      "evra": "2.17.2-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.aarch64"
@@ -862,7 +862,7 @@
       "evra": "2:0.6.0-3.fc36.aarch64"
     },
     "mozjs91": {
-      "evra": "91.12.0-1.fc36.aarch64"
+      "evra": "91.13.0-1.fc36.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.aarch64"
@@ -1174,7 +1174,7 @@
       "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022b-1.fc36.noarch"
+      "evra": "2022c-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.213-1.fc36.noarch"
+      "evra": "2:9.0.246-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.213-1.fc36.aarch64"
+      "evra": "2:9.0.246-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-24T20:56:00Z",
+    "generated": "2022-08-26T13:29:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-23T03:08:00Z"
+        "generated": "2022-08-25T04:01:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-24T20:11:36Z"
+        "generated": "2022-08-26T11:40:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7f12a37860..90da25aa3b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -259,7 +259,7 @@
       "evra": "0.187-4.fc36.ppc64le"
     },
     "ethtool": {
-      "evra": "2:5.18-1.fc36.ppc64le"
+      "evra": "2:5.19-1.fc36.ppc64le"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.ppc64le"
@@ -691,10 +691,10 @@
       "evra": "0.1.5-50.fc36.ppc64le"
     },
     "librepo": {
-      "evra": "1.14.3-1.fc36.ppc64le"
+      "evra": "1.14.4-1.fc36.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.1-1.fc36.noarch"
+      "evra": "2.17.2-1.fc36.noarch"
     },
     "librtas": {
       "evra": "2.0.2-12.fc36.ppc64le"
@@ -859,7 +859,7 @@
       "evra": "20.10.17-5.fc36.ppc64le"
     },
     "mozjs91": {
-      "evra": "91.12.0-1.fc36.ppc64le"
+      "evra": "91.13.0-1.fc36.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.ppc64le"
@@ -1177,7 +1177,7 @@
       "evra": "3.2.0-3.fc36.ppc64le"
     },
     "tzdata": {
-      "evra": "2022b-1.fc36.noarch"
+      "evra": "2022c-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.ppc64le"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.213-1.fc36.noarch"
+      "evra": "2:9.0.246-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.213-1.fc36.ppc64le"
+      "evra": "2:9.0.246-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-24T20:56:05Z",
+    "generated": "2022-08-26T13:29:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-23T03:07:54Z"
+        "generated": "2022-08-25T04:01:37Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-24T20:11:51Z"
+        "generated": "2022-08-26T11:40:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b9cfaf4afc..a8137e0899 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -256,7 +256,7 @@
       "evra": "0.187-4.fc36.s390x"
     },
     "ethtool": {
-      "evra": "2:5.18-1.fc36.s390x"
+      "evra": "2:5.19-1.fc36.s390x"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.s390x"
@@ -646,10 +646,10 @@
       "evra": "0.1.5-50.fc36.s390x"
     },
     "librepo": {
-      "evra": "1.14.3-1.fc36.s390x"
+      "evra": "1.14.4-1.fc36.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.1-1.fc36.noarch"
+      "evra": "2.17.2-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.s390x"
@@ -802,7 +802,7 @@
       "evra": "20.10.17-5.fc36.s390x"
     },
     "mozjs91": {
-      "evra": "91.12.0-1.fc36.s390x"
+      "evra": "91.13.0-1.fc36.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.s390x"
@@ -1105,7 +1105,7 @@
       "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
-      "evra": "2022b-1.fc36.noarch"
+      "evra": "2022c-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.s390x"
@@ -1117,10 +1117,10 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.213-1.fc36.noarch"
+      "evra": "2:9.0.246-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.213-1.fc36.s390x"
+      "evra": "2:9.0.246-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-24T20:55:28Z",
+    "generated": "2022-08-26T13:28:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-23T03:08:19Z"
+        "generated": "2022-08-25T04:01:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-24T20:11:59Z"
+        "generated": "2022-08-26T11:40:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8b36406780..76f9195bdc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -268,7 +268,7 @@
       "evra": "0.187-4.fc36.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.18-1.fc36.x86_64"
+      "evra": "2:5.19-1.fc36.x86_64"
     },
     "expat": {
       "evra": "2.4.7-1.fc36.x86_64"
@@ -703,10 +703,10 @@
       "evra": "0.1.5-50.fc36.x86_64"
     },
     "librepo": {
-      "evra": "1.14.3-1.fc36.x86_64"
+      "evra": "1.14.4-1.fc36.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.1-1.fc36.noarch"
+      "evra": "2.17.2-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.x86_64"
@@ -874,7 +874,7 @@
       "evra": "2:0.6.0-3.fc36.x86_64"
     },
     "mozjs91": {
-      "evra": "91.12.0-1.fc36.x86_64"
+      "evra": "91.13.0-1.fc36.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-9.fc36.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022b-1.fc36.noarch"
+      "evra": "2022c-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.213-1.fc36.noarch"
+      "evra": "2:9.0.246-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.213-1.fc36.x86_64"
+      "evra": "2:9.0.246-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-24T20:55:17Z",
+    "generated": "2022-08-26T13:30:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-23T03:09:25Z"
+        "generated": "2022-08-25T04:01:37Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-24T20:12:07Z"
+        "generated": "2022-08-26T11:40:37Z"
       }
     }
   }

From d27133aa221cbeafdb79e6e95730d8d79fb378f8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 26 Aug 2022 14:20:50 -0400
Subject: [PATCH 1163/2157] denylist: snooze coreos.boot-mirror* tests

They are failing because of a kernel regression and we are actively
working on getting a fix upstream and backported. Let's snooze these
tests for now.

See https://github.com/coreos/fedora-coreos-tracker/issues/1282
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b8fdff772b..eb1e583fa5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -48,3 +48,8 @@
   - aarch64
   streams:
   - rawhide
+- pattern: coreos.boot-mirror*
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+  snooze: 2022-09-01
+  streams:
+  - branched

From 7d8accc08f131390763b89b7bbfb7694f0b3d066 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 26 Aug 2022 15:06:45 -0400
Subject: [PATCH 1164/2157] manifests: drop explicit add of
 kernel-{core,modules}

kernel-{core,modules} get pulled in by the `kernel` meta package.
We previously named these explicitly because we saw some issues where
the `kernel-debug-core` RPM was getting chosen instead (see )

Let's solve the problem a different way by just naming `kernel` like we
did in the past, but include `kernel-debug-core` in the list of packages
we explicitly exclude. This has the benefit of making it simpler to run
kernel regression git bisect with the kernel rpm generated from
`make binrpm-pkg` in upstream kernle git, which just creates a single
RPM named `kernel`.

This has the benefits of simplifying our steps for how to build/test
an RPM from upstream kernel git [1] (permalink for example [2]) by
allowing us to not have to edit any manifest files as part of the process.

[1] https://github.com/coreos/fedora-coreos-tracker/blob/main/docs/fedora-coreos-kernel-bisect.md
[1] https://github.com/coreos/fedora-coreos-tracker/blob/e0a4c4fbec14248b4771ce30e0639996a2100153/docs/fedora-coreos-kernel-bisect.md#doing-a-build-with-cosa
---
 manifests/bootable-rpm-ostree.yaml | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 2f166e40dc..a9858a088e 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -5,9 +5,8 @@
 # We expect most people though using coreos-assembler to inherit from
 # fedora-coreos-base.yaml.
 packages:
- # Kernel + systemd.  Note we explicitly specify kernel-{core,modules}
- # because otherwise depsolving could bring in kernel-debug.
- - kernel kernel-core kernel-modules systemd
+ # Kernel + systemd.
+ - kernel systemd
  # linux-firmware now a recommends so let's explicitly include it
  # https://gitlab.com/cki-project/kernel-ark/-/commit/32271d0cd9bd52d386eb35497c4876a8f041f70b
  # https://src.fedoraproject.org/rpms/kernel/c/f55c3e9ed8605ff28cb9a922efbab1055947e213?branch=rawhide
@@ -44,3 +43,9 @@ postprocess:
     #!/usr/bin/env bash
     set -xeuo pipefail
     rm -f /usr/bin/dotlockfile
+
+exclude-packages:
+  # Exclude kernel-debug-core to make sure that it doesn't somehow get
+  # chosen as the package to satisfy the `kernel-core` dependency from
+  # the kernel package.
+  - kernel-debug-core

From 45434ed1c10aff419ff62cb647f41872e1165ff8 Mon Sep 17 00:00:00 2001
From: mohelt <meltayeb@redhat.com>
Date: Wed, 24 Aug 2022 13:49:08 +0100
Subject: [PATCH 1165/2157] manifests: Remove known broken symlinks

Make sure that we do not ship broken symlinks:
Remove known broken symlinks that point to
non-existing files or directories:
- Remove `.build-id` for binaries that we
  remove in other parts of the FCOS manifest
- Remove links to man pages that we remove
  in FCOS.
Man pages are removed in FCOS thus the links
in alternatives pointing to those are left there broken.
Docs removal comes from manifests/fedora-coreos.yaml
- systemd-firstboot comes from manifests/ignition-and-ostree.yaml
- systemd-gpt-auto-generator comes from ignition-and-ostree.yaml
- dotlockfile comes from bootable-rpm-ostree.yaml

See: https://github.com/coreos/fedora-coreos-config/issues/1782
---
 manifests/fedora-coreos.yaml | 41 ++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index ea1d222b8c..6eb7bfa313 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -88,6 +88,47 @@ postprocess:
     cat /usr/etc/rpm-ostreed.conf >> /tmp/rpm-ostreed.conf
     cp /tmp/rpm-ostreed.conf /usr/etc/rpm-ostreed.conf
     rm /tmp/rpm-ostreed.conf
+  # Make sure that we do not ship broken symlinks:
+  # https://github.com/coreos/fedora-coreos-config/issues/1782
+  # Remove known broken symlinks that point to non-existing files or directories:
+  # - Remove `.build-id` for binaries that we remove in other parts of the FCOS manifest
+  # - Remove links to man pages that we remove in FCOS
+  # Man pages are removed in FCOS thus the links in alternatives pointing to those are left there broken.
+  # Docs removal comes from manifests/fedora-coreos.yaml
+  # - systemd-firstboot comes from manifests/ignition-and-ostree.yaml
+  # - systemd-gpt-auto-generator comes from ignition-and-ostree.yaml
+  # - dotlockfile comes from bootable-rpm-ostree.yaml
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+  
+    list_broken_symlinks_folders=(
+      '/etc/alternatives/'
+      '/usr/lib/.build-id/'
+    )
+
+    # It is not possible to remove files from usr after first boot so that is 
+    # why we are removing them in the postprocess scripts here.
+    # The .build-id links are pointing to binaries that we remove in other parts of the FCOS manifest.
+    list_known_removed_folders=(
+      '/usr/bin/dotlockfile'
+      '/usr/bin/systemd-firstboot'
+      '/usr/lib/systemd/system-generators/systemd-gpt-auto-generator'
+      '/usr/share/doc/'
+      '/usr/share/info/'
+      '/usr/share/man/'
+      )
+    for folder in "${list_broken_symlinks_folders[@]}"
+    do
+        find "${folder}" -type l | while read -r file_name; do
+            real_path=$(realpath -m "${file_name}");
+            for element in "${list_known_removed_folders[@]}"; do
+              if [[ ! -e "${real_path}" ]] && [[ "${real_path}" == "${element}"* ]]; then
+                  rm -r "${file_name}"
+              fi
+            done
+        done
+    done
 
 
 remove-from-packages:

From 9370477f35464a19046e3314fb411bf17cae4792 Mon Sep 17 00:00:00 2001
From: mohelt <meltayeb@redhat.com>
Date: Wed, 24 Aug 2022 13:58:40 +0100
Subject: [PATCH 1166/2157] tests: Look for broken symlinks

There is also a list of known broken symlinks
that are skipped that need to be investigated
further:

Fixes: https://github.com/coreos/fedora-coreos-config/issues/1782
---
 tests/kola/files/validate-symlinks | 35 ++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100755 tests/kola/files/validate-symlinks

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
new file mode 100755
index 0000000000..75dc58fecd
--- /dev/null
+++ b/tests/kola/files/validate-symlinks
@@ -0,0 +1,35 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+# Checking if there are no broken symlinks from from /etc/ and /usr/ .
+# https://github.com/coreos/fedora-coreos-config/issues/1782
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Here is the list of known broken symlinks that need to be investigated further:
+list_broken_symlinks_skip=(
+    '/etc/mtab'
+    '/etc/ssl/'
+    '/etc/swid/swidtags.d/fedoraproject.org'
+    '/etc/xdg/systemd/user'
+    '/usr/lib/.build-id/'
+    '/usr/lib/firmware/brcm/brcmfmac43455-sdio.AW-CM256SM.txt.xz'
+    '/usr/lib/modules/'
+    '/usr/share/rhel/secrets/etc-pki-entitlement'
+    '/usr/share/rhel/secrets/redhat.repo'
+    '/usr/share/rhel/secrets/rhsm'
+)
+find /usr/ /etc/ -type l -not -path "/usr/etc*"| while read -r file_name; do
+    found="false"
+    for search_element in "${list_broken_symlinks_skip[@]}"; do
+        if [[ "${file_name}" == "${search_element}"* || "${file_name}" == "${search_element}" ]]; then
+            found="true"
+            break
+        fi
+    done
+    real_path=$(realpath -m "${file_name}");
+    if [[ ! -e "${real_path}" ]] && [[ "${found}" == "false" ]];  then
+        fatal "Error: ${file_name} symlink to ${real_path} which does not exist"
+    fi
+done

From e5e8a1cd6201f3f237e103cbc434d11953316571 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 29 Aug 2022 14:35:04 -0400
Subject: [PATCH 1167/2157] denylist: drop ext.config.binfmt.qemu on
 aarch64+rawhide

The issue appears to be resolved. See
https://bugzilla.redhat.com/show_bug.cgi?id=2105623#c7

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1241
---
 kola-denylist.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index eb1e583fa5..ab11a7a1ea 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,13 +41,6 @@
   - testing
   - testing-devel
   - stable
-- pattern: ext.config.binfmt.qemu
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1241
-  snooze: 2022-09-10
-  arches:
-  - aarch64
-  streams:
-  - rawhide
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
   snooze: 2022-09-01

From 59c9a94bf6700e3f2bed8d771e5e39b2b7cdd4d9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 29 Aug 2022 18:31:07 +0000
Subject: [PATCH 1168/2157] overrides: pin kernel-5.18.19-200.fc36

---
 manifest-lock.overrides.yaml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..750fee1f2d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,19 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kernel:
+    evr: 5.18.19-200.fc36
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: pin
+  kernel-core:
+    evr: 5.18.19-200.fc36
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: pin
+  kernel-modules:
+    evr: 5.18.19-200.fc36
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: pin

From afd1f7181fbb62b3d734af5461587727441f114a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 29 Aug 2022 21:23:56 +0000
Subject: [PATCH 1169/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/41/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 99a2a0118d..9f44ddbf3d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -910,7 +910,7 @@
       "evra": "2.0.14-5.fc36.aarch64"
     },
     "nvme-cli": {
-      "evra": "2.0-1.fc36.aarch64"
+      "evra": "2.0-2.fc36.aarch64"
     },
     "oniguruma": {
       "evra": "6.9.8-1.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-26T13:29:40Z",
+    "generated": "2022-08-29T20:11:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-25T04:01:58Z"
+        "generated": "2022-08-26T15:44:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-26T11:40:05Z"
+        "generated": "2022-08-29T08:48:51Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 90da25aa3b..12d948b10e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -907,7 +907,7 @@
       "evra": "2.0.14-5.fc36.ppc64le"
     },
     "nvme-cli": {
-      "evra": "2.0-1.fc36.ppc64le"
+      "evra": "2.0-2.fc36.ppc64le"
     },
     "oniguruma": {
       "evra": "6.9.8-1.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-26T13:29:13Z",
+    "generated": "2022-08-29T20:11:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-25T04:01:37Z"
+        "generated": "2022-08-26T15:44:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-26T11:40:21Z"
+        "generated": "2022-08-29T08:49:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a8137e0899..0ce9b52593 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -847,7 +847,7 @@
       "evra": "2.18.1-20.fc36.s390x"
     },
     "nvme-cli": {
-      "evra": "2.0-1.fc36.s390x"
+      "evra": "2.0-2.fc36.s390x"
     },
     "oniguruma": {
       "evra": "6.9.8-1.fc36.s390x"
@@ -1160,16 +1160,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-26T13:28:54Z",
+    "generated": "2022-08-29T20:10:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-25T04:01:15Z"
+        "generated": "2022-08-26T15:43:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-26T11:40:29Z"
+        "generated": "2022-08-29T08:49:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 76f9195bdc..97bde2f8ba 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -922,7 +922,7 @@
       "evra": "2.0.14-5.fc36.x86_64"
     },
     "nvme-cli": {
-      "evra": "2.0-1.fc36.x86_64"
+      "evra": "2.0-2.fc36.x86_64"
     },
     "oniguruma": {
       "evra": "6.9.8-1.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-26T13:30:27Z",
+    "generated": "2022-08-29T20:10:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-25T04:01:37Z"
+        "generated": "2022-08-26T15:44:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-26T11:40:37Z"
+        "generated": "2022-08-29T08:49:23Z"
       }
     }
   }

From 78506135fa51189c732c47f1b62570cb26d6f58d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 22 Aug 2022 17:12:54 -0400
Subject: [PATCH 1170/2157] Handle dm-verity-protected filesystems in s390x
 secex path

Instead of shipping the rootfs and bootfs using LUKS, we're pivoting to
verifying integrity using dm-verity instead.

Add `veritysetup` to the OS. Teach `transposefs` to transfer the
filesystem over dm-verity. Delete the root and boot hash partitions.
Delete some of the bits we previously added for LUKS enablement.

For more information, see:
https://github.com/coreos/coreos-assembler/pull/3039
---
 manifest-lock.s390x.json                      |  3 +++
 manifests/bootable-rpm-ostree.yaml            |  2 ++
 .../modules.d/35coreos-ignition/01-secex.ign  | 10 +++++++
 .../35coreos-ignition/coreos-gpt-setup.sh     |  8 ++----
 .../ignition-ostree-close-luks.service        | 18 -------------
 .../ignition-ostree-drop-luks.service         | 19 --------------
 .../ignition-ostree-transposefs.sh            | 26 +++++++++++++++++++
 .../ignition-ostree-uuid-boot.service         |  2 ++
 .../ignition-ostree-uuid-root.service         |  1 +
 .../40ignition-ostree/module-setup.sh         |  9 ++++---
 10 files changed, 52 insertions(+), 46 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service

diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0ce9b52593..1a53fb5df3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1116,6 +1116,9 @@
     "util-linux-core": {
       "evra": "2.38-1.fc36.s390x"
     },
+    "veritysetup": {
+      "evra": "2.4.3-2.fc36.s390x"
+    },
     "vim-data": {
       "evra": "2:9.0.246-1.fc36.noarch"
     },
diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index a9858a088e..c93ecbeec6 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -27,6 +27,8 @@ packages-s390x:
   # On Fedora, this is provided by s390utils-core. on RHEL, this is for now
   # provided by s390utils-base, but soon will be -core too.
   - /usr/sbin/zipl
+  # for Secure Execution
+  - veritysetup
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index b082184d26..215c179378 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -16,6 +16,16 @@
             "number": 4,
             "resize": true,
             "sizeMiB": 0
+          },
+          {
+            "number": 5,
+            "shouldExist": false,
+            "wipePartitionEntry": true
+          },
+          {
+            "number": 6,
+            "shouldExist": false,
+            "wipePartitionEntry": true
           }
         ]
       }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index 7f3c225019..dc55409429 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -7,15 +7,11 @@ set -euo pipefail
 UNINITIALIZED_GUID='00000000-0000-4000-a000-000000000001'
 
 # If it's on multipath, get the parent device from udev properties.
-# If it's LUKS2 encrypted, UUID woud start with "CRYPT-LUKS2"
-eval $(udevadm info --query property --export "$1" | grep -e DM_NAME -e DM_UUID -e DM_MPATH)
+DM_MPATH=$(eval $(udevadm info --query property --export "$1") && echo "${DM_MPATH:-}")
 
-if [[ -n "${DM_MPATH:-}" ]]; then
+if [ -n "${DM_MPATH:-}" ]; then
     PKNAME=/dev/mapper/$DM_MPATH
     PTUUID=$(eval $(udevadm info --query property --export "$PKNAME") && echo "${ID_PART_TABLE_UUID:-}")
-elif [[ "${DM_UUID:-}" =~ 'CRYPT-LUKS2' ]] && [[ -n "${DM_NAME:-}" ]]; then
-    eval $(lsblk --output PKNAME --pairs --paths --nodeps /dev/mapper/$DM_NAME)
-    PTUUID=$(eval $(udevadm info --query property --export /dev/mapper/$DM_NAME) && echo "${ID_PART_TABLE_UUID:-}")
 else
     # On RHEL 8 the version of lsblk doesn't have PTUUID. Let's detect
     # if lsblk supports it. In the future we can remove the 'if' and
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
deleted file mode 100644
index 94006a4a11..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-close-luks.service
+++ /dev/null
@@ -1,18 +0,0 @@
-[Unit]
-Description=Ignition OSTree: Close Secure Execution LUKS
-DefaultDependencies=false
-After=ignition-ostree-transposefs-save.service
-Before=ignition-ostree-transposefs-restore.service
-Before=ignition-disks.service
-ConditionArchitecture=s390x
-ConditionKernelCommandLine=ostree
-ConditionPathExists=/run/coreos/secure-execution
-OnFailure=emergency.target
-OnFailureJobMode=isolate
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/sbin/cryptsetup luksClose crypt_bootfs
-ExecStart=/usr/sbin/cryptsetup luksClose crypt_rootfs
-
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service
deleted file mode 100644
index ab5ddbfda4..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-drop-luks.service
+++ /dev/null
@@ -1,19 +0,0 @@
-# This is to be removed once we switch to 'keyring' and custom 'init'.
-[Unit]
-Description=Ignition OSTree: Delete Secure Execution LUKS Keys
-ConditionArchitecture=s390x
-ConditionKernelCommandLine=ostree
-ConditionPathExists=/run/coreos/secure-execution
-DefaultDependencies=no
-
-# We should drop the keys once cryptsetup had opened both rootfs and bootfs
-After=dev-disk-by\x2dlabel-boot.device
-After=dev-disk-by\x2dlabel-root.device
-
-# Run as early as possible
-Before=cryptsetup.target
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/bin/rm /etc/luks/boot /etc/luks/root /etc/crypttab
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 534536f625..4578531f24 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -73,6 +73,18 @@ get_partition_offset() {
     cat "/sys${devpath}/start"
 }
 
+# copied from generator-lib.sh
+karg() {
+    local name="$1" value="${2:-}"
+    local cmdline=( $(</proc/cmdline) )
+    for arg in "${cmdline[@]}"; do
+        if [[ "${arg%%=*}" == "${name}" ]]; then
+            value="${arg#*=}"
+        fi
+    done
+    echo "${value}"
+}
+
 mount_and_restore_filesystem_by_label() {
     local label=$1; shift
     local mountpoint=$1; shift
@@ -88,9 +100,23 @@ mount_and_save_filesystem_by_label() {
     local label=$1; shift
     local saved_fs=$1; shift
     local fs=/dev/disk/by-label/${label}
+    if [[ -f /run/coreos/secure-execution ]]; then
+        local roothash_karg=${label}fs.roothash
+        local roothash=$(karg "${roothash_karg}")
+        if [ -z "${roothash}" ]; then
+          echo "Missing kernel argument ${roothash_karg}; aborting"
+          exit 1
+        fi
+        local roothash_part=/dev/disk/by-partlabel/${label}hash
+        veritysetup open "${fs}" "${label}" "${roothash_part}" "${roothash}"
+        fs=/dev/mapper/${label}
+    fi
     mount_verbose "${fs}" /var/tmp/mnt
     cp -aT /var/tmp/mnt "${saved_fs}"
     umount /var/tmp/mnt
+    if [[ -f /run/coreos/secure-execution ]]; then
+        veritysetup close "${label}"
+    fi
 }
 
 # In Secure Execution case user is not allowed to modify partition table
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index cde3b16296..80415624ce 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -11,6 +11,8 @@ Before=ignition-fetch-offline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service
+# If we're going to reprovision the bootfs, then there's no need to restamp
+ConditionKernelCommandLine=!bootfs.roothash
 
 Before=systemd-fsck@dev-disk-by\x2dlabel-boot.service
 Requires=dev-disk-by\x2dlabel-boot.device
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index d4b78e3e0d..264801192e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -8,6 +8,7 @@ Before=sysroot.mount initrd-root-fs.target
 After=ignition-disks.service
 # If we've reprovisioned the rootfs, then there's no need to restamp
 ConditionPathExists=!/run/ignition-ostree-transposefs
+ConditionKernelCommandLine=!rootfs.roothash
 
 After=dev-disk-by\x2dlabel-root.device
 # Avoid racing with fsck
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 6211135b4c..f027b2c209 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -30,6 +30,12 @@ install() {
         sort \
         uniq
 
+    if [[ $(uname -m) = s390x ]]; then
+        # for Secure Execution
+        inst_multiple \
+            veritysetup
+    fi
+
     # ignition-ostree-growfs deps
     inst_multiple  \
         basename   \
@@ -102,9 +108,6 @@ install() {
 
     inst_script "$moddir/coreos-relabel" /usr/bin/coreos-relabel
 
-    install_ignition_unit ignition-ostree-close-luks.service
-    install_ignition_unit ignition-ostree-drop-luks.service
-
     # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2075085
     install_ignition_unit ignition-ostree-secex-config.service
     inst_script "$moddir/ignition-ostree-secex-config.sh" \

From b9fbbfaaac29124be64f06dbd78e648d6c20b052 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Wed, 24 Aug 2022 12:14:14 +0200
Subject: [PATCH 1171/2157] s390x: fix secex workaround unit dependency

Now that we no longer use LUKS, `cryptsetup.target` is no longer
activated. We do still need some ordering here though so that we don't
run too early when e.g. `virtio_blk` isn't even loaded yet.

Run after `coreos-gpt-setup.service` which also normally needs block
device access.
---
 .../40ignition-ostree/ignition-ostree-secex-config.service      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
index 6f70b5681a..292f571e6c 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
@@ -9,7 +9,7 @@ ConditionPathExists=/run/coreos/secure-execution
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
-After=cryptsetup.target
+After=coreos-gpt-setup.service
 Before=ignition-fetch-offline.service
 
 [Service]

From 75833daee5657be56865a3dd9ea2e753875137cf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 29 Aug 2022 21:21:45 +0200
Subject: [PATCH 1172/2157] manifest & tests: Test if a symlink is broken first

When looking for broken symlinks, test first if it is broken before
looking at the list of known broken links to skip.

Also remove set -x in postprocess to avoid being overly verbose.

Fixes: https://github.com/coreos/fedora-coreos-config/pull/1841
---
 manifests/fedora-coreos.yaml       | 12 +++++++-----
 tests/kola/files/validate-symlinks |  8 ++++++--
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 6eb7bfa313..cc3288012e 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -66,7 +66,7 @@ postprocess:
   # https://github.com/coreos/fedora-coreos-tracker/issues/212
   - |
     #!/usr/bin/env bash
-    set -xeuo pipefail
+    set -euo pipefail
     source /etc/os-release
     if [[ $OSTREE_VERSION = *.dev* ]]; then
       mkdir -p /etc/zincati/config.d
@@ -101,7 +101,7 @@ postprocess:
   - |
     #!/usr/bin/env bash
     set -xeuo pipefail
-  
+
     list_broken_symlinks_folders=(
       '/etc/alternatives/'
       '/usr/lib/.build-id/'
@@ -118,12 +118,14 @@ postprocess:
       '/usr/share/info/'
       '/usr/share/man/'
       )
-    for folder in "${list_broken_symlinks_folders[@]}"
-    do
+    for folder in "${list_broken_symlinks_folders[@]}"; do
         find "${folder}" -type l | while read -r file_name; do
             real_path=$(realpath -m "${file_name}");
+            if [[ -e "${real_path}" ]]; then
+              continue
+            fi
             for element in "${list_known_removed_folders[@]}"; do
-              if [[ ! -e "${real_path}" ]] && [[ "${real_path}" == "${element}"* ]]; then
+              if [[ "${real_path}" == "${element}"* ]]; then
                   rm -r "${file_name}"
               fi
             done
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 75dc58fecd..2b5d1b1532 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -20,7 +20,12 @@ list_broken_symlinks_skip=(
     '/usr/share/rhel/secrets/redhat.repo'
     '/usr/share/rhel/secrets/rhsm'
 )
+
 find /usr/ /etc/ -type l -not -path "/usr/etc*"| while read -r file_name; do
+    real_path=$(realpath -m "${file_name}");
+    if [[ -e "${real_path}" ]]; then
+        continue
+    fi
     found="false"
     for search_element in "${list_broken_symlinks_skip[@]}"; do
         if [[ "${file_name}" == "${search_element}"* || "${file_name}" == "${search_element}" ]]; then
@@ -28,8 +33,7 @@ find /usr/ /etc/ -type l -not -path "/usr/etc*"| while read -r file_name; do
             break
         fi
     done
-    real_path=$(realpath -m "${file_name}");
-    if [[ ! -e "${real_path}" ]] && [[ "${found}" == "false" ]];  then
+    if [[ "${found}" == "false" ]];  then
         fatal "Error: ${file_name} symlink to ${real_path} which does not exist"
     fi
 done

From ff9bf0e1768e70140de87dce585ecc83cb9985d6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 26 Aug 2022 13:01:51 -0400
Subject: [PATCH 1173/2157] Add fedora-rawhide-nodebug-kernel repo to
 fedora-rawhide.repo

We are choosing to use only nodebug kernels in Fedora CoreOS
for our testing. We've seen too many issues where an issue either
shows up only on the debug kernels OR a debug kernel gives us a
false positive or negative when trying to root cause a failure.
Thus we add the fedora-rawhide-nodebug-kernel repo here so that
we can use it in the rawhide manfest. This uses the nodebug kernel
repo [1].

[1] https://fedoraproject.org/wiki/RawhideKernelNodebug
---
 fedora-rawhide.repo | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo
index 674eea3332..197a46881f 100644
--- a/fedora-rawhide.repo
+++ b/fedora-rawhide.repo
@@ -14,3 +14,25 @@ type=rpm
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
+excludepkgs=kernel kernel-core kernel-modules
+
+# We are choosing to use only nodebug kernels in Fedora CoreOS
+# for our testing. We've seen too many issues where an issue either
+# shows up only on the debug kernels OR a debug kernel gives us a
+# false positive or negative when trying to root cause a failure.
+# Thus we use the nodebug kernel repo [1] and includepkgs=kernel
+# here and excludepkgs=kernel above.
+#
+# [1] https://fedoraproject.org/wiki/RawhideKernelNodebug
+[fedora-rawhide-nodebug-kernel]
+name=nodebug kernels for Rawhide
+baseurl=https://dl.fedoraproject.org/pub/alt/rawhide-kernel-nodebug/$basearch/
+enabled=1
+countme=1
+metadata_expire=6h
+repo_gpgcheck=0
+type=rpm
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
+skip_if_unavailable=False
+includepkgs=kernel kernel-core kernel-modules

From 9fd3ef47a13c605b778a291d4cd9ef71afa0283e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Aug 2022 11:27:20 -0400
Subject: [PATCH 1174/2157] denylist: extend denial/snooze for
 coreos.boot-mirror* to rawhide

See https://github.com/coreos/fedora-coreos-tracker/issues/1282#issuecomment-1231819414
---
 kola-denylist.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index ab11a7a1ea..91cf34096e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -43,6 +43,7 @@
   - stable
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-  snooze: 2022-09-01
+  snooze: 2022-09-10
   streams:
   - branched
+  - rawhide

From 1f3726502eee427484342511a4e6a172e518248e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Aug 2022 14:24:22 -0400
Subject: [PATCH 1175/2157] Make fedora-rawhide-nodebug-kernel repo gpgcheck=0

Apparently the kernels that get in this repo can be unsigned depending
on the time that they were submitted to the repo. Let's just disable gpg
checking on the repo.

This shouldn't be an issue since we don't ship rawhide images to users
anyway and this repo only applies to the rawhide stream.
---
 fedora-rawhide.repo | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo
index 197a46881f..05034e53e9 100644
--- a/fedora-rawhide.repo
+++ b/fedora-rawhide.repo
@@ -32,7 +32,7 @@ countme=1
 metadata_expire=6h
 repo_gpgcheck=0
 type=rpm
-gpgcheck=1
+gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
 includepkgs=kernel kernel-core kernel-modules

From 766108699241b4623c639aa1eeb1ffde2505e1cd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Aug 2022 15:49:35 -0400
Subject: [PATCH 1176/2157] denylist: extend denials to `branched` stream, set
 snooze

The denials related to [1] are now showing up in `branched` so
let's add it to the denylist and also convert to a snooze so we'll
follow up on this issue more regularly.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1215
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 91cf34096e..8003a85223 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,9 +23,11 @@
   - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  snooze: 2022-09-10
   arches:
   - s390x
   streams:
+  - branched
   - next
   - next-devel
   - testing
@@ -33,9 +35,11 @@
   - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  snooze: 2022-09-10
   arches:
   - s390x
   streams:
+  - branched
   - next
   - next-devel
   - testing

From 677995eaca5d6ae25d3b4e9cceee81d05a776d00 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Aug 2022 14:59:25 -0400
Subject: [PATCH 1177/2157] manifests/fedora-coreos: fix verbosity on
 postprocess script

In 75833da the intention was to silence the many messages printed
out by the symlink checking code but the wrong `set -` invocation
was updated. Let's update the correct one and re-set the one that
was erroneously updated.
---
 manifests/fedora-coreos.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index cc3288012e..0315d2c584 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -66,7 +66,7 @@ postprocess:
   # https://github.com/coreos/fedora-coreos-tracker/issues/212
   - |
     #!/usr/bin/env bash
-    set -euo pipefail
+    set -euxo pipefail
     source /etc/os-release
     if [[ $OSTREE_VERSION = *.dev* ]]; then
       mkdir -p /etc/zincati/config.d
@@ -100,7 +100,7 @@ postprocess:
   # - dotlockfile comes from bootable-rpm-ostree.yaml
   - |
     #!/usr/bin/env bash
-    set -xeuo pipefail
+    set -euo pipefail
 
     list_broken_symlinks_folders=(
       '/etc/alternatives/'

From c108a0e0cc2c5c7a096ff10e7a7860fc663789de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 30 Aug 2022 20:21:31 +0200
Subject: [PATCH 1178/2157] tests/validate-symlinks: QEMU & FCOS only

Let's resttrict this test to:
- QEMU only as we don't expect the result to be different on another
  platform
- FCOS only until we've tested it for RHCOS & SCOS

Fixes: https://github.com/coreos/fedora-coreos-config/pull/1938
---
 tests/kola/files/validate-symlinks | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 2b5d1b1532..7210970452 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -1,13 +1,19 @@
 #!/bin/bash
-# kola: { "exclusive": false }
-# Checking if there are no broken symlinks from from /etc/ and /usr/ .
-# https://github.com/coreos/fedora-coreos-config/issues/1782
+# kola: { "exclusive": false, "distros": "fcos", "platforms": "qemu" }
+#
+# Check if there are broken symlinks in /etc/ and /usr/.
+# See: https://github.com/coreos/fedora-coreos-config/issues/1782
+#
+# - distros: fcos
+#   - Only run on FCOS until we've tested it on RHCOS.
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Here is the list of known broken symlinks that need to be investigated further:
+# List of known broken symlinks that require further investigation:
 list_broken_symlinks_skip=(
     '/etc/mtab'
     '/etc/ssl/'

From fbc9f8c9a2dc312a1e05c9401da7067f496c73e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 30 Aug 2022 21:08:50 +0200
Subject: [PATCH 1179/2157] README: Update test template

---
 README.md | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 52ebb23d09..af09c028c6 100644
--- a/README.md
+++ b/README.md
@@ -160,16 +160,28 @@ Tests should follow the following format:
 
 ```bash
 #!/bin/bash
-# kola: { "exclusive": false }    <-- kola option comment. See all options in <https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson>
+# kola: { "exclusive": false, ... }
+# ^^----- kola option comment
+# ^^----- See all options in <https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson>
+#
 # Short summary of what the test does, why we need it, etc.
-# Should also explain the reasons behind the non-obvious options selected above.
-# Optional: Link to corresponding issue or PR
+#
+# Recommended: Link to corresponding issue or PR
+#
+# Explain the reasons behind all the kola options:
+# - distros: fcos
+#   - This test only runs on FCOS due to ...
+# - platforms: qemu
+#   - This test should ...
+# - etc.
 
 set -euxo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-foo_bar()    <-- Other function definitions
+foo_bar() <-- Other function definitions
 
-if ...    <-- Actual test code. Errors must be raised with `fatal()`. Does not need to end with a call to `ok()`
+if ...    <-- Actual test code
+          <-- Errors must be raised with `fatal()`
+          <-- Does not need to end with a call to `ok()`
 ```

From 5a990fc0ef783abf5e73d1e57139a7e1e32813a6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Aug 2022 16:37:10 -0400
Subject: [PATCH 1180/2157] denylist: also deny #1215 issues against rawhide

Looks like it's happening everywhere now. See
https://github.com/coreos/fedora-coreos-tracker/issues/1215#issuecomment-1232139740
---
 kola-denylist.yaml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8003a85223..f0ee1395ff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -26,25 +26,11 @@
   snooze: 2022-09-10
   arches:
   - s390x
-  streams:
-  - branched
-  - next
-  - next-devel
-  - testing
-  - testing-devel
-  - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   snooze: 2022-09-10
   arches:
   - s390x
-  streams:
-  - branched
-  - next
-  - next-devel
-  - testing
-  - testing-devel
-  - stable
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
   snooze: 2022-09-10

From 50ee01a89075d8ef204f1f40c5d89ab060748aac Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 31 Aug 2022 12:50:26 +0000
Subject: [PATCH 1181/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/46/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9f44ddbf3d..a1987690cc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -40,7 +40,7 @@
       "evra": "2.5.1-4.fc36.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc36.aarch64"
+      "evra": "3.0.9-1.fc36.aarch64"
     },
     "authselect": {
       "evra": "1.4.0-1.fc36.aarch64"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-50.fc36.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.aarch64"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "libstdc++": {
       "evra": "12.2.1-1.fc36.aarch64"
@@ -1108,31 +1108,31 @@
       "evra": "0.1.3-2.fc36.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.3-1.fc36.aarch64"
+      "evra": "2.7.4-1.fc36.aarch64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-29T20:11:36Z",
+    "generated": "2022-08-31T11:38:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-26T15:44:21Z"
+        "generated": "2022-08-29T21:32:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-29T08:48:51Z"
+        "generated": "2022-08-31T10:41:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 12d948b10e..de50a5f7c4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -40,7 +40,7 @@
       "evra": "2.5.1-4.fc36.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc36.ppc64le"
+      "evra": "3.0.9-1.fc36.ppc64le"
     },
     "authselect": {
       "evra": "1.4.0-1.fc36.ppc64le"
@@ -604,7 +604,7 @@
       "evra": "1.3.1-50.fc36.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.ppc64le"
@@ -742,16 +742,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libstdc++": {
       "evra": "12.2.1-1.fc36.ppc64le"
@@ -1111,31 +1111,31 @@
       "evra": "0.1.3-2.fc36.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.3-1.fc36.ppc64le"
+      "evra": "2.7.4-1.fc36.ppc64le"
     },
     "stalld": {
       "evra": "1.15-2.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-29T20:11:55Z",
+    "generated": "2022-08-31T11:37:40Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-26T15:44:08Z"
+        "generated": "2022-08-29T21:32:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-29T08:49:07Z"
+        "generated": "2022-08-31T10:41:36Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1a53fb5df3..34f5011c16 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -40,7 +40,7 @@
       "evra": "2.5.1-4.fc36.s390x"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc36.s390x"
+      "evra": "3.0.9-1.fc36.s390x"
     },
     "authselect": {
       "evra": "1.4.0-1.fc36.s390x"
@@ -562,7 +562,7 @@
       "evra": "1.3.1-50.fc36.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "libjose": {
       "evra": "11-5.fc36.s390x"
@@ -691,16 +691,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "libstdc++": {
       "evra": "12.2.1-1.fc36.s390x"
@@ -1039,31 +1039,31 @@
       "evra": "0.1.3-2.fc36.s390x"
     },
     "sssd-ad": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-client": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-common": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.3-1.fc36.s390x"
+      "evra": "2.7.4-1.fc36.s390x"
     },
     "stalld": {
       "evra": "1.15-2.fc36.s390x"
@@ -1163,16 +1163,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-29T20:10:52Z",
+    "generated": "2022-08-31T11:36:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-26T15:43:25Z"
+        "generated": "2022-08-29T21:32:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-29T08:49:15Z"
+        "generated": "2022-08-31T10:41:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 97bde2f8ba..bee09652f7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -40,7 +40,7 @@
       "evra": "2.5.1-4.fc36.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.8-1.fc36.x86_64"
+      "evra": "3.0.9-1.fc36.x86_64"
     },
     "authselect": {
       "evra": "1.4.0-1.fc36.x86_64"
@@ -616,7 +616,7 @@
       "evra": "1.3.1-50.fc36.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "libjcat": {
       "evra": "0.1.10-1.fc36.x86_64"
@@ -751,16 +751,16 @@
       "evra": "0.9.6-4.fc36.noarch"
     },
     "libsss_certmap": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "libstdc++": {
       "evra": "12.2.1-1.fc36.x86_64"
@@ -1117,31 +1117,31 @@
       "evra": "0.1.3-2.fc36.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.3-1.fc36.x86_64"
+      "evra": "2.7.4-1.fc36.x86_64"
     },
     "stalld": {
       "evra": "1.15-2.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-29T20:10:57Z",
+    "generated": "2022-08-31T11:36:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-26T15:44:16Z"
+        "generated": "2022-08-29T21:32:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-29T08:49:23Z"
+        "generated": "2022-08-31T10:41:52Z"
       }
     }
   }

From 254cf4f4e083b36f94a7008a620b59a069ce12c2 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 31 Aug 2022 15:33:26 -0400
Subject: [PATCH 1182/2157] tests/content-origins: Verify expected vendor for
 all RPM packages

As we move to support multiple streams (particularly for C9S versus RHEL)
we should ensure that we're not accidentally including content
from CentOS in official RHEL builds, and vice versa.  The RPM vendor
field is useful for this.

For now, this test just verifies Fedora and RHEL vendors, and I
tested on both.
---
 tests/kola/content-origins/data/commonlib.sh |  1 +
 tests/kola/content-origins/test.sh           | 28 ++++++++++++++++++++
 2 files changed, 29 insertions(+)
 create mode 120000 tests/kola/content-origins/data/commonlib.sh
 create mode 100755 tests/kola/content-origins/test.sh

diff --git a/tests/kola/content-origins/data/commonlib.sh b/tests/kola/content-origins/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/content-origins/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
new file mode 100755
index 0000000000..b67483d5ab
--- /dev/null
+++ b/tests/kola/content-origins/test.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+# kola: {"platforms": "qemu", "exclusive": false, "distros": "fcos rhcos" }
+# Verify the RPM %{vendor} flag for everything installed matches what we expect.
+#
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+# - distros: This only handles Fedora and RHEL today.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+. /usr/lib/os-release
+
+case "${ID}" in
+    fedora) vendor='Fedora Project';;
+    rhel|rhcos) vendor='Red Hat, Inc.';;
+    *) echo "Unknown operating system ID=${ID}; skipping this test"; exit 0;;
+esac
+
+cd $(mktemp -d)
+rpm -qa --queryformat='%{name},%{vendor}\n' > rpmvendors.txt
+if grep -vF ",${vendor}" rpmvendors.txt > unmatched.txt; then
+    cat unmatched.txt
+    fatal "Expected only vendor ${vendor} for all packages"
+fi
+echo "ok all RPMs produced by Vendor: ${vendor}"
+

From 7df2d569de9557524e09eef90e990caab4bda5ec Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Sep 2022 03:21:46 +0000
Subject: [PATCH 1183/2157] overrides: fast-track kernel-5.19.6-200.fc36

---
 manifest-lock.overrides.yaml | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 750fee1f2d..fd0527ded0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,17 +10,20 @@
 
 packages:
   kernel:
-    evr: 5.18.19-200.fc36
+    evr: 5.19.6-200.fc36
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: pin
+      type: fast-track
   kernel-core:
-    evr: 5.18.19-200.fc36
+    evr: 5.19.6-200.fc36
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: pin
+      type: fast-track
   kernel-modules:
-    evr: 5.18.19-200.fc36
+    evr: 5.19.6-200.fc36
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: pin
+      type: fast-track

From a116ea1757a52c35bd1aa732862bd80a065a818c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Sep 2022 18:06:12 +0000
Subject: [PATCH 1184/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 20 +-------------------
 1 file changed, 1 insertion(+), 19 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fd0527ded0..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,22 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  kernel:
-    evr: 5.19.6-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
-  kernel-core:
-    evr: 5.19.6-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
-  kernel-modules:
-    evr: 5.19.6-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-35c14ba5bb
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
+packages: {}

From e582f294e0a11cb8d1dbc61d9f6889d2d0655d30 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 2 Sep 2022 11:00:28 +0800
Subject: [PATCH 1185/2157] dhcp-propagation: add workaround for scos and
 rhcos9

This has no effect to fcos and rhcos8, revert this when bug2123246
is fixed
See:
- https://github.com/openshift/os/issues/964
- https://bugzilla.redhat.com/show_bug.cgi?id=2123246
---
 tests/kola/chrony/dhcp-propagation | 12 +++++++++++-
 tests/kola/data/commonlib.sh       |  6 ++++++
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 78d27a8a9f..5425f2b986 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -23,6 +23,8 @@
 
 set -xeuo pipefail
 
+. $KOLA_EXT_DATA/commonlib.sh
+
 # Just run on QEMU; it should work theoretically on cloud platforms, but many
 # of those have platform-specific sources which take precedence.
 
@@ -53,7 +55,15 @@ RUN dnf -y install systemd dnsmasq iproute iputils \
 RUN echo -e 'dhcp-range=172.16.0.10,172.16.0.20,12h\nbind-interfaces\ninterface=veth-container\ndhcp-option=option:ntp-server,$NTPHOSTIP' > /etc/dnsmasq.d/dhcp
 CMD [ "/sbin/init" ]
 EOF
-    podman build -t dnsmasq .
+
+    if is_fcos || is_rhcos8; then
+        podman build -t dnsmasq .
+    else
+        # only workaround for scos and rhel9
+        # https://github.com/openshift/os/issues/964
+        # https://bugzilla.redhat.com/show_bug.cgi?id=2123246 (revert PR when bug is fixed)
+        podman build --security-opt seccomp=/usr/share/containers/seccomp.json -t dnsmasq .
+    fi
     popd
     podman run -d --rm --name dnsmasq --privileged --network ns:/var/run/netns/container dnsmasq
 
diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 25dd0cc3e5..f4146c93d6 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -48,3 +48,9 @@ get_rhel_maj_ver() {
     source /etc/os-release
     echo "${RHEL_VERSION%%.*}"
 }
+
+# rhcos8
+is_rhcos8() (
+    source /etc/os-release
+    [ "${ID}" == "rhcos" ] && [ "${RHEL_VERSION%%.*}" -eq 8 ]
+)

From 6a0ef0c0af15a850fee546afe724bd713adfead6 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 2 Sep 2022 22:10:01 +0800
Subject: [PATCH 1186/2157] rootless-systemd: make it work on rhcos

---
 tests/kola/podman/data/commonlib.sh |  1 +
 tests/kola/podman/rootless-systemd  | 21 +++++++++++----------
 2 files changed, 12 insertions(+), 10 deletions(-)
 create mode 120000 tests/kola/podman/data/commonlib.sh

diff --git a/tests/kola/podman/data/commonlib.sh b/tests/kola/podman/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/podman/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 28de32e715..c85130e9a3 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
+# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
 # It tests that rootless+systemd works. See issue:
@@ -8,11 +8,6 @@
 # If it gets easy to change the kargs in the future we should try this
 # both on cgroups v1 and cgroups v2.
 #
-# - distros: fcos
-#   - The test is scoped to only FCOS because the `--retry-all-errors`
-#     flag passed to `curl` is not avaiable on RHEL8.
-#     TODO-RHCOS: adapt test to conditionally use the `-retry-all-errors`
-#     flag on only FCOS
 # - tags: needs-internet
 #   - This test builds a container from remote sources.
 #   - This test uses a remote NTP server.
@@ -27,6 +22,7 @@
 #     https://pagure.io/releng/issue/10935#comment-808601
 
 set -xeuo pipefail
+. $KOLA_EXT_DATA/commonlib.sh
 
 runascoreuserscript='
 #!/bin/bash
@@ -68,13 +64,18 @@ main() {
 
     sleep 5
 
+    retryflag="--retry-all-errors"
+    # --retry-all-errors flag passed to curl is not available on RHEL8
+    if is_rhcos8; then
+        retryflag="--retry-connrefused"
+    fi
     # Try to grab the web page. Retry as it might not be up fully yet.
-    if ! curl --silent --show-error --retry 5 --retry-all-errors http://localhost:8080 >/dev/null; then
-        echo TEST FAILED 1>&2
+    if ! curl --silent --show-error --retry 5 ${retryflag} http://localhost:8080 >/dev/null; then
         runascoreuser podman logs httpd
-        return 1
+        fatal "setup http server container failed"
     fi
+
+    ok "setup http server container successfully"
 }
 
 main
-exit $?

From d982427cd012acaaa48310a73929e0112ddb167c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Sep 2022 23:37:35 +0000
Subject: [PATCH 1187/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/54/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a1987690cc..68f2e6fbf9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -145,10 +145,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-1.fc36.aarch64"
+      "evra": "0.15.0-2.fc36.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-1.fc36.aarch64"
+      "evra": "0.15.0-2.fc36.aarch64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.aarch64"
@@ -385,16 +385,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-47.fc36.noarch"
+      "evra": "1:2.06-52.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-47.fc36.aarch64"
+      "evra": "1:2.06-52.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-47.fc36.aarch64"
+      "evra": "1:2.06-52.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-47.fc36.aarch64"
+      "evra": "1:2.06-52.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.19-200.fc36.aarch64"
+      "evra": "5.19.6-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.18.19-200.fc36.aarch64"
+      "evra": "5.19.6-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.18.19-200.fc36.aarch64"
+      "evra": "5.19.6-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1219,7 +1219,7 @@
       "evra": "0.0.24-3.fc36.aarch64"
     },
     "zlib": {
-      "evra": "1.2.11-32.fc36.aarch64"
+      "evra": "1.2.11-33.fc36.aarch64"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-31T11:38:07Z",
+    "generated": "2022-09-02T23:37:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-29T21:32:41Z"
+        "generated": "2022-09-02T17:45:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-31T10:41:19Z"
+        "generated": "2022-09-02T09:42:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index de50a5f7c4..082148e45e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -145,10 +145,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-1.fc36.ppc64le"
+      "evra": "0.15.0-2.fc36.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-1.fc36.ppc64le"
+      "evra": "0.15.0-2.fc36.ppc64le"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.ppc64le"
@@ -376,19 +376,19 @@
       "evra": "3.7-2.fc36.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-47.fc36.noarch"
+      "evra": "1:2.06-52.fc36.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-47.fc36.ppc64le"
+      "evra": "1:2.06-52.fc36.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-47.fc36.noarch"
+      "evra": "1:2.06-52.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-47.fc36.ppc64le"
+      "evra": "1:2.06-52.fc36.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-47.fc36.ppc64le"
+      "evra": "1:2.06-52.fc36.ppc64le"
     },
     "gzip": {
       "evra": "1.11-3.fc36.ppc64le"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.19-200.fc36.ppc64le"
+      "evra": "5.19.6-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.18.19-200.fc36.ppc64le"
+      "evra": "5.19.6-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.18.19-200.fc36.ppc64le"
+      "evra": "5.19.6-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1222,7 +1222,7 @@
       "evra": "0.0.24-3.fc36.ppc64le"
     },
     "zlib": {
-      "evra": "1.2.11-32.fc36.ppc64le"
+      "evra": "1.2.11-33.fc36.ppc64le"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-31T11:37:40Z",
+    "generated": "2022-09-02T23:37:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-29T21:32:01Z"
+        "generated": "2022-09-02T17:44:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-31T10:41:36Z"
+        "generated": "2022-09-02T09:43:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 34f5011c16..7f029711e6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -142,10 +142,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-1.fc36.s390x"
+      "evra": "0.15.0-2.fc36.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-1.fc36.s390x"
+      "evra": "0.15.0-2.fc36.s390x"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.19-200.fc36.s390x"
+      "evra": "5.19.6-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.18.19-200.fc36.s390x"
+      "evra": "5.19.6-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.18.19-200.fc36.s390x"
+      "evra": "5.19.6-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1153,7 +1153,7 @@
       "evra": "0.0.24-3.fc36.s390x"
     },
     "zlib": {
-      "evra": "1.2.11-32.fc36.s390x"
+      "evra": "1.2.11-33.fc36.s390x"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.s390x"
@@ -1163,16 +1163,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-31T11:36:52Z",
+    "generated": "2022-09-02T23:36:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-29T21:32:30Z"
+        "generated": "2022-09-02T17:45:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-31T10:41:44Z"
+        "generated": "2022-09-02T09:43:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bee09652f7..11a48625ae 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -145,10 +145,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-1.fc36.x86_64"
+      "evra": "0.15.0-2.fc36.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-1.fc36.x86_64"
+      "evra": "0.15.0-2.fc36.x86_64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.x86_64"
@@ -385,22 +385,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-47.fc36.noarch"
+      "evra": "1:2.06-52.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-47.fc36.x86_64"
+      "evra": "1:2.06-52.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-47.fc36.x86_64"
+      "evra": "1:2.06-52.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-47.fc36.noarch"
+      "evra": "1:2.06-52.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-47.fc36.x86_64"
+      "evra": "1:2.06-52.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-47.fc36.x86_64"
+      "evra": "1:2.06-52.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.18.19-200.fc36.x86_64"
+      "evra": "5.19.6-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.18.19-200.fc36.x86_64"
+      "evra": "5.19.6-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.18.19-200.fc36.x86_64"
+      "evra": "5.19.6-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1228,7 +1228,7 @@
       "evra": "0.0.24-3.fc36.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-32.fc36.x86_64"
+      "evra": "1.2.11-33.fc36.x86_64"
     },
     "zram-generator": {
       "evra": "1.1.2-1.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-08-31T11:36:54Z",
+    "generated": "2022-09-02T23:36:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-08-29T21:32:40Z"
+        "generated": "2022-09-02T17:46:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-08-31T10:41:52Z"
+        "generated": "2022-09-02T09:43:17Z"
       }
     }
   }

From cece0f5c18e34f931b9abb335a7c1329213bfbe1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 6 Sep 2022 03:15:06 +0000
Subject: [PATCH 1188/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/58/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 21 ++++++++++++---------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 36 insertions(+), 33 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 68f2e6fbf9..69736753e1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.37.2-1.fc36.aarch64"
+      "evra": "2.37.3-1.fc36.aarch64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.12-4.fc36.aarch64"
+      "evra": "2022.13-1.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-4.fc36.aarch64"
+      "evra": "2022.13-1.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.aarch64"
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.246-1.fc36.noarch"
+      "evra": "2:9.0.348-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.246-1.fc36.aarch64"
+      "evra": "2:9.0.348-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-02T23:37:20Z",
+    "generated": "2022-09-06T02:00:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T17:45:04Z"
+        "generated": "2022-09-02T23:40:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-02T09:42:46Z"
+        "generated": "2022-09-05T09:01:25Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 082148e45e..74dfb8ca2c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -346,7 +346,7 @@
       "evra": "0.21-9.fc36.ppc64le"
     },
     "git-core": {
-      "evra": "2.37.2-1.fc36.ppc64le"
+      "evra": "2.37.3-1.fc36.ppc64le"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.ppc64le"
@@ -1033,10 +1033,10 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.12-4.fc36.ppc64le"
+      "evra": "2022.13-1.fc36.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-4.fc36.ppc64le"
+      "evra": "2022.13-1.fc36.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.ppc64le"
@@ -1189,10 +1189,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.246-1.fc36.noarch"
+      "evra": "2:9.0.348-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.246-1.fc36.ppc64le"
+      "evra": "2:9.0.348-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-02T23:37:08Z",
+    "generated": "2022-09-06T02:00:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T17:44:58Z"
+        "generated": "2022-09-02T23:40:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-02T09:43:01Z"
+        "generated": "2022-09-05T09:01:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7f029711e6..7093b872f3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -334,7 +334,7 @@
       "evra": "1.0.9-2.fc36.s390x"
     },
     "git-core": {
-      "evra": "2.37.2-1.fc36.s390x"
+      "evra": "2.37.3-1.fc36.s390x"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.s390x"
@@ -579,6 +579,9 @@
     "libldb": {
       "evra": "2.5.2-1.fc36.s390x"
     },
+    "liblockfile": {
+      "evra": "1.17-2.fc36.s390x"
+    },
     "libluksmeta": {
       "evra": "9-13.fc36.s390x"
     },
@@ -964,10 +967,10 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.12-4.fc36.s390x"
+      "evra": "2022.13-1.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-4.fc36.s390x"
+      "evra": "2022.13-1.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.s390x"
@@ -979,7 +982,7 @@
       "evra": "2:1.1.3-1.fc36.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.20.0-1.fc36.s390x"
+      "evra": "2:2.23.0-1.fc36.s390x"
     },
     "samba-client-libs": {
       "evra": "2:4.16.4-0.fc36.s390x"
@@ -1120,10 +1123,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.246-1.fc36.noarch"
+      "evra": "2:9.0.348-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.246-1.fc36.s390x"
+      "evra": "2:9.0.348-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1163,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-02T23:36:50Z",
+    "generated": "2022-09-06T02:00:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T17:45:08Z"
+        "generated": "2022-09-02T23:39:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-02T09:43:09Z"
+        "generated": "2022-09-05T09:01:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 11a48625ae..7b0c51b3ef 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -355,7 +355,7 @@
       "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.37.2-1.fc36.x86_64"
+      "evra": "2.37.3-1.fc36.x86_64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.12-4.fc36.x86_64"
+      "evra": "2022.13-1.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.12-4.fc36.x86_64"
+      "evra": "2022.13-1.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.x86_64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.246-1.fc36.noarch"
+      "evra": "2:9.0.348-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.246-1.fc36.x86_64"
+      "evra": "2:9.0.348-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-02T23:36:43Z",
+    "generated": "2022-09-06T01:59:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T17:46:19Z"
+        "generated": "2022-09-02T23:41:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-02T09:43:17Z"
+        "generated": "2022-09-05T09:01:57Z"
       }
     }
   }

From 0574ec426c6bcd2b43006e9eddd53127b615524d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 6 Sep 2022 22:08:51 +0000
Subject: [PATCH 1189/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/59/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 69736753e1..f4cf469852 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.31-1.fc36.aarch64"
+      "evra": "32:9.16.32-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.31-1.fc36.noarch"
+      "evra": "32:9.16.32-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.31-1.fc36.aarch64"
+      "evra": "32:9.16.32-1.fc36.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.aarch64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-7.fc36.aarch64"
+      "evra": "7.82.0-8.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.aarch64"
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.3-1.fc36.aarch64"
+      "evra": "1.8.4-2.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -547,7 +547,7 @@
       "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.82.0-7.fc36.aarch64"
+      "evra": "7.82.0-8.fc36.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.aarch64"
@@ -1006,7 +1006,7 @@
       "evra": "3.3.17-4.fc36.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.4.0-4.fc36.aarch64"
+      "evra": "1.4.1-2.fc36.aarch64"
     },
     "psmisc": {
       "evra": "23.4-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T02:00:52Z",
+    "generated": "2022-09-06T20:54:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T23:40:48Z"
+        "generated": "2022-09-06T03:19:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-05T09:01:25Z"
+        "generated": "2022-09-06T09:56:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 74dfb8ca2c..c5bc0dc545 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -64,13 +64,13 @@
       "evra": "1.07.1-15.fc36.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.16.31-1.fc36.ppc64le"
+      "evra": "32:9.16.32-1.fc36.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.16.31-1.fc36.noarch"
+      "evra": "32:9.16.32-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.31-1.fc36.ppc64le"
+      "evra": "32:9.16.32-1.fc36.ppc64le"
     },
     "bsdtar": {
       "evra": "3.5.3-3.fc36.ppc64le"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.ppc64le"
     },
     "curl": {
-      "evra": "7.82.0-7.fc36.ppc64le"
+      "evra": "7.82.0-8.fc36.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.ppc64le"
@@ -328,7 +328,7 @@
       "evra": "3.10.5-2.fc36.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.3-1.fc36.ppc64le"
+      "evra": "1.8.4-2.fc36.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.ppc64le"
@@ -541,7 +541,7 @@
       "evra": "1.46.5-2.fc36.ppc64le"
     },
     "libcurl": {
-      "evra": "7.82.0-7.fc36.ppc64le"
+      "evra": "7.82.0-8.fc36.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.ppc64le"
@@ -1012,7 +1012,7 @@
       "evra": "3.3.17-4.fc36.ppc64le"
     },
     "protobuf-c": {
-      "evra": "1.4.0-4.fc36.ppc64le"
+      "evra": "1.4.1-2.fc36.ppc64le"
     },
     "psmisc": {
       "evra": "23.4-3.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T02:00:13Z",
+    "generated": "2022-09-06T20:54:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T23:40:00Z"
+        "generated": "2022-09-06T03:20:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-05T09:01:41Z"
+        "generated": "2022-09-06T09:56:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7093b872f3..0e20b2a548 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.31-1.fc36.s390x"
+      "evra": "32:9.16.32-1.fc36.s390x"
     },
     "bind-license": {
-      "evra": "32:9.16.31-1.fc36.noarch"
+      "evra": "32:9.16.32-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.31-1.fc36.s390x"
+      "evra": "32:9.16.32-1.fc36.s390x"
     },
     "bsdtar": {
       "evra": "3.5.3-3.fc36.s390x"
@@ -181,7 +181,7 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "curl": {
-      "evra": "7.82.0-7.fc36.s390x"
+      "evra": "7.82.0-8.fc36.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.s390x"
@@ -511,7 +511,7 @@
       "evra": "1.46.5-2.fc36.s390x"
     },
     "libcurl": {
-      "evra": "7.82.0-7.fc36.s390x"
+      "evra": "7.82.0-8.fc36.s390x"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.s390x"
@@ -943,7 +943,7 @@
       "evra": "3.3.17-4.fc36.s390x"
     },
     "protobuf-c": {
-      "evra": "1.4.0-4.fc36.s390x"
+      "evra": "1.4.1-2.fc36.s390x"
     },
     "psmisc": {
       "evra": "23.4-3.fc36.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T02:00:06Z",
+    "generated": "2022-09-06T20:53:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T23:39:43Z"
+        "generated": "2022-09-06T03:20:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-05T09:01:49Z"
+        "generated": "2022-09-06T09:56:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7b0c51b3ef..1e7cebeb52 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -61,13 +61,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.31-1.fc36.x86_64"
+      "evra": "32:9.16.32-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.31-1.fc36.noarch"
+      "evra": "32:9.16.32-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.31-1.fc36.x86_64"
+      "evra": "32:9.16.32-1.fc36.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.x86_64"
@@ -184,7 +184,7 @@
       "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-7.fc36.x86_64"
+      "evra": "7.82.0-8.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.x86_64"
@@ -337,7 +337,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.3-1.fc36.x86_64"
+      "evra": "1.8.4-2.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -553,7 +553,7 @@
       "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.82.0-7.fc36.x86_64"
+      "evra": "7.82.0-8.fc36.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.x86_64"
@@ -1018,7 +1018,7 @@
       "evra": "3.3.17-4.fc36.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.4.0-4.fc36.x86_64"
+      "evra": "1.4.1-2.fc36.x86_64"
     },
     "psmisc": {
       "evra": "23.4-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T01:59:54Z",
+    "generated": "2022-09-06T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-02T23:41:43Z"
+        "generated": "2022-09-06T03:20:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-05T09:01:57Z"
+        "generated": "2022-09-06T09:56:57Z"
       }
     }
   }

From f3b17c90b9c655276f56016dd2787f8358b771b4 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 6 Sep 2022 08:44:58 -0400
Subject: [PATCH 1190/2157] tests: Switch one test to use platform-independent
 + YAML

Since these two PRs

- https://github.com/coreos/coreos-assembler/pull/3064/commits/242e7149b8d57b5837238366bfcd70bd99b455a5
- https://github.com/coreos/coreos-assembler/pull/3059/commits/302130ec171d3d501310c40bd28db49c21459519

we support YAML for kola metadata, and there's a new `platform-independent`
tag.

Use both in a test I added recently to demonstrate usage, and
this also serves to cross-check that things work.

Motivation: I think semantic tags and inline comments are far
superior to duplicating the test metadata and I don't want to
have to do that again in a test I write.
---
 tests/kola/content-origins/test.sh | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index b67483d5ab..89213591b7 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "exclusive": false, "distros": "fcos rhcos" }
 # Verify the RPM %{vendor} flag for everything installed matches what we expect.
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - distros: This only handles Fedora and RHEL today.
-
+## kola:
+##   tags: "platform-independent"
+##   # This is a read-only, nondestructive test.
+##   exclusive: false
+##   # May support e.g. centos in the future
+##   distros: "fcos rhcos"
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh

From 546ca9bfb0cb991703fbb8171ecf010d42e83fb9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 7 Sep 2022 00:55:09 +0000
Subject: [PATCH 1191/2157] overrides: fast-track kernel-5.19.7-200.fc36

---
 manifest-lock.overrides.yaml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..327f77af2f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,22 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kernel:
+    evr: 5.19.7-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
+      type: fast-track
+  kernel-core:
+    evr: 5.19.7-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
+      type: fast-track
+  kernel-modules:
+    evr: 5.19.7-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
+      type: fast-track

From 8856624b5e6d11dcc9694338dd7cba08b9675f0b Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Fri, 2 Sep 2022 10:32:49 +0000
Subject: [PATCH 1192/2157] manifests: drop workaround for 'tss' user/group

The `tss` user/group entries have been fixed in `tpm2-tss-3.2.0-3`,
so this drops all existing workarounds.
Both are static entries and are already covered by kola tests.
---
 manifests/fedora-coreos.yaml                             | 2 --
 manifests/passwd                                         | 1 -
 overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf | 2 --
 3 files changed, 5 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 0315d2c584..9ee24ab9a2 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -140,8 +140,6 @@ remove-from-packages:
   # Drop some buggy sysusers fragments which do not match static IDs allocation:
   # https://bugzilla.redhat.com/show_bug.cgi?id=2105177
   - [dbus-common, /usr/lib/sysusers.d/dbus.conf]
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2103683
-  - [tpm2-tss, /usr/lib/sysusers.d/tpm2-tss.conf]
 
 remove-files:
   # We don't ship man(1) or info(1)
diff --git a/manifests/passwd b/manifests/passwd
index 133283945d..ea84802caa 100644
--- a/manifests/passwd
+++ b/manifests/passwd
@@ -30,4 +30,3 @@ systemd-network:x:991:990:systemd Network Management:/:/usr/sbin/nologin
 systemd-resolve:x:990:989:systemd Resolver:/:/usr/sbin/nologin
 systemd-timesync:x:993:991:systemd Time Synchronization:/:/usr/sbin/nologin
 tcpdump:x:72:72::/:/usr/sbin/nologin
-tss:x:59:59:Account used for TPM access:/:/usr/sbin/nologin
diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf
index f05644ede1..38f65ee6e4 100644
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf
+++ b/overlay.d/15fcos/usr/lib/sysusers.d/10-static-extra.conf
@@ -11,7 +11,6 @@ g rpcuser 29
 g sshd 74
 g systemd-journal 190
 g tcpdump 72
-g tss 59
 g utempter 35
 g utmp 22
 
@@ -23,4 +22,3 @@ u rpc           32:32       "Rpcbind Daemon"              /var/lib/rpcbind
 u rpcuser       29:29       "RPC Service User"            /var/lib/nfs           -
 u sshd          74:74       "Privilege-separated SSH"     /var/empty/sshd        -
 u tcpdump       72:72       -                             -                      -
-u tss           59:59       "Account used for TPM access" -                      -

From 22913cef0ffcddca22dec7cb356d36da05b8a4af Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 6 Sep 2022 22:28:39 -0400
Subject: [PATCH 1193/2157] overlay.d/35coreos-live: add workaround for stalled
 iso-live-login boot

We've found the system can stall waiting for run-media-iso.mount
and apparently any operation seems to be effective at reviving
the system. Let's add a workaround that will kick in after 10 seconds
and try to revive the boot.

A lot more context over in
https://github.com/coreos/fedora-coreos-tracker/issues/1233#issuecomment-1238814171

Here's an example of this working:

```
[    2.749303] systemd[1]: ignition-ostree-transposefs-restore.service - Ignition OSTree: Restore Partitions was skipped because of a failed condition check (ConditionPathIsDire
ctory=/run/ignition-ostree-transposefs).
[    2.750547] ignition[591]: disks: disks passed
[    2.750882] ignition[591]: Ignition finished successfully
[   12.645801] kauditd_printk_skb: 19 callbacks suppressed
[   12.645804] audit: type=1131 audit(1662520856.021:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=workaround-stalled-media-iso-mount comm="systemd" exe=
"/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[   12.647774] bash[564]: warn: tracker issue workaround engaged for https://github.com/coreos/fedora-coreos-tracker/issues/1233
[   12.648646] systemd[1]: workaround-stalled-media-iso-mount.service: Deactivated successfully.
[   12.649281] systemd[1]: Mounting run-media-iso.mount - /run/media/iso...
```
---
 .../dracut/modules.d/35coreos-live/live-generator  | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index 560b0b6af5..a755aa3625 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -118,6 +118,20 @@ Type=squashfs
 # is checked by coreos-assembler cmd-buildextend-live at build time.
 Options=loop,offset=124
 EOF
+
+    # And one more unit to workaround what we think is a systemd bug.
+    # We've found the system can stall waiting for run-media-iso.mount
+    # and apparently any operation seems to be effective at reviving
+    # the system.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1233#issuecomment-1238814171
+    cat >"${UNIT_DIR}/workaround-stalled-media-iso-mount.service" <<EOF
+[Service]
+Type=simple
+StandardOutput=journal
+StandardError=journal
+ExecStart=bash -c "sleep 10; echo 'warn: tracker issue workaround engaged for https://github.com/coreos/fedora-coreos-tracker/issues/1233'"
+EOF
+    add_requires workaround-stalled-media-iso-mount.service basic.target
 fi
 
 # It turns out that `tmpfs` currently munches all SELinux labels

From 0370e3c5c7797e47b53cc915775fb7a952d9ec2b Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 8 Sep 2022 11:43:46 +0800
Subject: [PATCH 1194/2157] tests: Make `default-network-behavior-change` works
 on scos

---
 tests/kola/data/commonlib.sh                  | 22 ++++++++++++-------
 .../default-network-behavior-change/test.sh   |  6 +----
 2 files changed, 15 insertions(+), 13 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index f4146c93d6..9390378ce8 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -26,23 +26,23 @@ get_fcos_stream() {
     rpm-ostree status -b --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]'
 }
 
-is_fcos() (
+is_fcos() {
     source /etc/os-release
     [ "${ID}" == "fedora" ] && [ "${VARIANT_ID}" == "coreos" ]
-)
+}
 
 # Note when using this, you probably also want to check `get_rhel_maj_ver`.
-is_rhcos() (
+is_rhcos() {
     source /etc/os-release
     [ "${ID}" == "rhcos" ]
-)
+}
 
-get_fedora_ver() (
+get_fedora_ver() {
     source /etc/os-release
     if is_fcos; then
         echo "${VERSION_ID}"
     fi
-)
+}
 
 get_rhel_maj_ver() {
     source /etc/os-release
@@ -50,7 +50,13 @@ get_rhel_maj_ver() {
 }
 
 # rhcos8
-is_rhcos8() (
+is_rhcos8() {
     source /etc/os-release
     [ "${ID}" == "rhcos" ] && [ "${RHEL_VERSION%%.*}" -eq 8 ]
-)
+}
+
+# scos
+is_scos() {
+    source /etc/os-release
+    [ "${ID}" == "scos" ] && [ "${VARIANT_ID}" == "coreos" ]
+}
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index e1188ccfea..9fc512eaca 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -218,13 +218,9 @@ elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
     
-    # scos does not have RHEL_VERSION variable in /etc/os-release
-    if [[ ${RHEL_VERSION:-} == "" ]]; then
-        RHEL_VERSION=$(echo $OSTREE_VERSION | cut -f2 -d.)
-    fi    
     # scos includes NetworkManager-1.39.10-1.el9.x86_64, update scripts
     # according to F37
-    if [ "${RHEL_VERSION/\./}" -ge 91 ]; then
+    if is_scos; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
     # RHEL8.6 includes NetworkManager-1.36.0-1.el8.x86_64, update scripts

From 8c07dcb7ad96d569dd1472fb2b13d5d2c6bbee27 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 16 Jun 2022 10:34:23 -0400
Subject: [PATCH 1195/2157] overlay.d/20platform-chrony: use generator-lib.sh
 for generator

In this case the generator-lib.sh handles the logging setup and
also offers a karg helper that we can use instead of the grep.
---
 .../lib/systemd/system-generators/coreos-platform-chrony  | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
index a87f6563a4..c917af2c0b 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
@@ -11,16 +11,12 @@ set -euo pipefail
 #
 # Originally spawned from discussion in https://github.com/openshift/installer/pull/3513
 
-# Generators don't have logging right now
-# https://github.com/systemd/systemd/issues/15638
-exec 1>/dev/kmsg; exec 2>&1
+. /usr/lib/coreos/generator-lib.sh
 
 self=$(basename $0)
 confpath=/run/coreos-platform-chrony.conf
 
-# Yeah this isn't a completely accurate kernel argument parser but
-# we don't have one shared across shell services at the moment.
-platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
+platform=$(karg ignition.platform.id)
 case "${platform}" in
     azure|azurestack|aws|gcp) ;;  # OK, this is a platform we know how to support
     *) exit 0 ;;

From 6395872c427df3b605c0f4b8cfafbc9fdd651bd1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Sep 2022 19:11:29 +0000
Subject: [PATCH 1196/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/63/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f4cf469852..b1a9d2ded2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -118,7 +118,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc36.aarch64"
+      "evra": "2:2.1.4-2.fc36.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.6-200.fc36.aarch64"
+      "evra": "5.19.7-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.6-200.fc36.aarch64"
+      "evra": "5.19.7-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.6-200.fc36.aarch64"
+      "evra": "5.19.7-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T20:54:21Z",
+    "generated": "2022-09-09T18:44:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-06T03:19:52Z"
+        "generated": "2022-09-07T04:21:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-06T09:56:24Z"
+        "generated": "2022-09-09T11:17:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c5bc0dc545..d6fbc3a07c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -118,7 +118,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc36.ppc64le"
+      "evra": "2:2.1.4-2.fc36.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.6-200.fc36.ppc64le"
+      "evra": "5.19.7-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.6-200.fc36.ppc64le"
+      "evra": "5.19.7-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.6-200.fc36.ppc64le"
+      "evra": "5.19.7-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-31.fc36.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T20:54:03Z",
+    "generated": "2022-09-09T18:44:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-06T03:20:10Z"
+        "generated": "2022-09-07T04:22:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-06T09:56:41Z"
+        "generated": "2022-09-09T11:17:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0e20b2a548..b30bc1e144 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -115,7 +115,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc36.s390x"
+      "evra": "2:2.1.4-2.fc36.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.6-200.fc36.s390x"
+      "evra": "5.19.7-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.6-200.fc36.s390x"
+      "evra": "5.19.7-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.6-200.fc36.s390x"
+      "evra": "5.19.7-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -766,10 +766,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T20:53:26Z",
+    "generated": "2022-09-09T18:43:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-06T03:20:01Z"
+        "generated": "2022-09-07T04:21:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-06T09:56:49Z"
+        "generated": "2022-09-09T11:17:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1e7cebeb52..acafee9820 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -118,7 +118,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.0-2.fc36.x86_64"
+      "evra": "2:2.1.4-2.fc36.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.6-200.fc36.x86_64"
+      "evra": "5.19.7-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.6-200.fc36.x86_64"
+      "evra": "5.19.7-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.6-200.fc36.x86_64"
+      "evra": "5.19.7-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220708-136.fc36.noarch"
+      "evra": "20220815-138.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-06T20:53:20Z",
+    "generated": "2022-09-09T18:43:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-06T03:20:11Z"
+        "generated": "2022-09-07T04:22:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-06T09:56:57Z"
+        "generated": "2022-09-09T11:17:44Z"
       }
     }
   }

From 2ff8a6f6f81329de421241adbbc2a7f45600af8f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 10 Sep 2022 00:20:04 +0000
Subject: [PATCH 1197/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 20 +-------------------
 1 file changed, 1 insertion(+), 19 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 327f77af2f..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,22 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  kernel:
-    evr: 5.19.7-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
-      type: fast-track
-  kernel-core:
-    evr: 5.19.7-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
-      type: fast-track
-  kernel-modules:
-    evr: 5.19.7-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85445af488
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1292
-      type: fast-track
+packages: {}

From 22c80cb6bf784aa84f03709ffc5bf7a7af094811 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 10 Sep 2022 22:05:05 +0000
Subject: [PATCH 1198/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/70/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b1a9d2ded2..1d2d97126c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,13 +361,13 @@
       "evra": "2.72.3-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-15.fc36.aarch64"
+      "evra": "2.35-17.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-15.fc36.aarch64"
+      "evra": "2.35-17.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-15.fc36.aarch64"
+      "evra": "2.35-17.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -385,16 +385,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-52.fc36.noarch"
+      "evra": "1:2.06-53.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-52.fc36.aarch64"
+      "evra": "1:2.06-53.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-52.fc36.aarch64"
+      "evra": "1:2.06-53.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-52.fc36.aarch64"
+      "evra": "1:2.06-53.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.7-200.fc36.aarch64"
+      "evra": "5.19.8-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.7-200.fc36.aarch64"
+      "evra": "5.19.8-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.7-200.fc36.aarch64"
+      "evra": "5.19.8-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-09T18:44:51Z",
+    "generated": "2022-09-10T20:53:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-07T04:21:41Z"
+        "generated": "2022-09-10T02:05:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-09T11:17:12Z"
+        "generated": "2022-09-10T20:39:35Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d6fbc3a07c..b73ac03d1a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -352,13 +352,13 @@
       "evra": "2.72.3-1.fc36.ppc64le"
     },
     "glibc": {
-      "evra": "2.35-15.fc36.ppc64le"
+      "evra": "2.35-17.fc36.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.35-15.fc36.ppc64le"
+      "evra": "2.35-17.fc36.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-15.fc36.ppc64le"
+      "evra": "2.35-17.fc36.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.ppc64le"
@@ -376,19 +376,19 @@
       "evra": "3.7-2.fc36.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-52.fc36.noarch"
+      "evra": "1:2.06-53.fc36.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-52.fc36.ppc64le"
+      "evra": "1:2.06-53.fc36.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-52.fc36.noarch"
+      "evra": "1:2.06-53.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-52.fc36.ppc64le"
+      "evra": "1:2.06-53.fc36.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-52.fc36.ppc64le"
+      "evra": "1:2.06-53.fc36.ppc64le"
     },
     "gzip": {
       "evra": "1.11-3.fc36.ppc64le"
@@ -460,13 +460,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.7-200.fc36.ppc64le"
+      "evra": "5.19.8-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.7-200.fc36.ppc64le"
+      "evra": "5.19.8-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.7-200.fc36.ppc64le"
+      "evra": "5.19.8-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-09T18:44:27Z",
+    "generated": "2022-09-10T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-07T04:22:29Z"
+        "generated": "2022-09-10T02:05:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-09T11:17:28Z"
+        "generated": "2022-09-10T20:39:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b30bc1e144..17ac3c925b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -340,13 +340,13 @@
       "evra": "2.72.3-1.fc36.s390x"
     },
     "glibc": {
-      "evra": "2.35-15.fc36.s390x"
+      "evra": "2.35-17.fc36.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-15.fc36.s390x"
+      "evra": "2.35-17.fc36.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-15.fc36.s390x"
+      "evra": "2.35-17.fc36.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.s390x"
@@ -430,13 +430,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.7-200.fc36.s390x"
+      "evra": "5.19.8-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.7-200.fc36.s390x"
+      "evra": "5.19.8-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.7-200.fc36.s390x"
+      "evra": "5.19.8-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-09T18:43:53Z",
+    "generated": "2022-09-10T20:52:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-07T04:21:10Z"
+        "generated": "2022-09-10T02:04:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-09T11:17:36Z"
+        "generated": "2022-09-10T20:39:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index acafee9820..0541d84ed2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,13 +361,13 @@
       "evra": "2.72.3-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-15.fc36.x86_64"
+      "evra": "2.35-17.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-15.fc36.x86_64"
+      "evra": "2.35-17.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-15.fc36.x86_64"
+      "evra": "2.35-17.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -385,22 +385,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-52.fc36.noarch"
+      "evra": "1:2.06-53.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-52.fc36.x86_64"
+      "evra": "1:2.06-53.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-52.fc36.x86_64"
+      "evra": "1:2.06-53.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-52.fc36.noarch"
+      "evra": "1:2.06-53.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-52.fc36.x86_64"
+      "evra": "1:2.06-53.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-52.fc36.x86_64"
+      "evra": "1:2.06-53.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.7-200.fc36.x86_64"
+      "evra": "5.19.8-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.7-200.fc36.x86_64"
+      "evra": "5.19.8-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.7-200.fc36.x86_64"
+      "evra": "5.19.8-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-09T18:43:59Z",
+    "generated": "2022-09-10T20:52:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-07T04:22:12Z"
+        "generated": "2022-09-10T02:06:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-09T11:17:44Z"
+        "generated": "2022-09-10T20:40:07Z"
       }
     }
   }

From c0aea3baa2dc4f1cdec986e63478f877d7044400 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 9 Sep 2022 20:22:14 +0200
Subject: [PATCH 1199/2157] *: Remove whitespace at EOL

---
 live/README-devel.md                          |  4 +--
 live/isolinux/isolinux.cfg                    |  2 +-
 manifests/fedora-coreos-base.yaml             |  2 +-
 manifests/fedora-coreos.yaml                  |  2 +-
 manifests/networking-tools.yaml               |  2 +-
 manifests/user-experience.yaml                |  2 +-
 .../coreos-kargs-reboot.service               |  6 ++---
 .../coreos-post-ignition-checks.sh            |  2 +-
 .../35coreos-ignition/module-setup.sh         |  2 +-
 .../emergency-shell.sh                        |  2 +-
 .../00-journal-log-forwarding.conf            |  4 +--
 .../coreos-ignition-write-issues.service      |  6 ++---
 .../coreos-sulogin-force.conf                 |  2 +-
 .../usr/libexec/coreos-ignition-write-issues  | 26 +++++++++----------
 .../conf.d/10-disable-default-plugins.conf    |  2 +-
 .../system/coreos-check-ssh-keys.service      |  2 +-
 .../15fcos/usr/libexec/coreos-check-ssh-keys  | 10 +++----
 tests/kola/chrony/dhcp-propagation            |  6 ++---
 tests/kola/clhm/ignition-warnings/config.bu   |  2 +-
 tests/kola/files/expected-initrd-files        |  8 +++---
 .../default-network-behavior-change/test.sh   |  2 +-
 tests/kola/podman/dns/test.sh                 |  8 +++---
 tests/kola/var-mount/scsi-id/test.sh          |  2 +-
 tests/manual/coreos-docs-net-testing.sh       |  2 +-
 tests/manual/coreos-network-testing.sh        | 20 +++++++-------
 25 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/live/README-devel.md b/live/README-devel.md
index 6a123986fa..373b17ff19 100644
--- a/live/README-devel.md
+++ b/live/README-devel.md
@@ -1,7 +1,7 @@
 These files will be copied to the target live ISO
 via the CoreOS Assembler buildextend-live call. It
 picks up all files in the coreos/fedora-coreos-config/live/
-directory and copies them to the base of the ISO. 
+directory and copies them to the base of the ISO.
 
 Files currently copied are:
 
@@ -10,4 +10,4 @@ Files currently copied are:
 
 Files that get copied into efiboot.img in the ISO:
 
-- EFI/grub.cfg 
+- EFI/grub.cfg
diff --git a/live/isolinux/isolinux.cfg b/live/isolinux/isolinux.cfg
index bd3d30c345..d4f159fa51 100644
--- a/live/isolinux/isolinux.cfg
+++ b/live/isolinux/isolinux.cfg
@@ -1,4 +1,4 @@
-# Note this file mostly matches the isolinux.cfg file from the Fedora 
+# Note this file mostly matches the isolinux.cfg file from the Fedora
 # Server DVD iso. Diff this file with that file in the future to pick up
 # changes.
 serial 0
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index a0903ae0b7..ba39393294 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -173,7 +173,7 @@ packages:
 # Anyways, it was requested by the Red Hat perf team for RHCOS, so we have it here.
 # https://serverfault.com/questions/513807/is-there-still-a-use-for-irqbalance-on-modern-hardware
 # https://access.redhat.com/solutions/41535
-# 
+#
 # Include the qemu-user-static-x86 package on aarch64 and s390x FCOS images
 # to allow access to the large inventory of containers only built for x86_64.
 # https://github.com/coreos/fedora-coreos-tracker/issues/1237
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 9ee24ab9a2..ed3eac3c47 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -107,7 +107,7 @@ postprocess:
       '/usr/lib/.build-id/'
     )
 
-    # It is not possible to remove files from usr after first boot so that is 
+    # It is not possible to remove files from usr after first boot so that is
     # why we are removing them in the postprocess scripts here.
     # The .build-id links are pointing to binaries that we remove in other parts of the FCOS manifest.
     list_known_removed_folders=(
diff --git a/manifests/networking-tools.yaml b/manifests/networking-tools.yaml
index 2221aa7bca..ffb51ee70d 100644
--- a/manifests/networking-tools.yaml
+++ b/manifests/networking-tools.yaml
@@ -7,7 +7,7 @@ packages:
   - NetworkManager hostname
   # Interactive Networking configuration during coreos-install
   - NetworkManager-tui
-  # Teaming https://github.com/coreos/fedora-coreos-config/pull/289 
+  # Teaming https://github.com/coreos/fedora-coreos-config/pull/289
   # and http://bugzilla.redhat.com/1758162
   - NetworkManager-team teamd
   # Support for cloud quirks and dynamic config in real rootfs:
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index ca41ee0965..d0c57a7b13 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -6,7 +6,7 @@
 container-cmd:
   - /usr/bin/bash
 
-# These packages are either widely used utilities/services or 
+# These packages are either widely used utilities/services or
 # are targeted for improving the general CoreOS user experience.
 # It is intended to be kept generic so that it may be shared downstream with
 # RHCOS.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
index 6ac57ff7b7..23906732bb 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-kargs-reboot.service
@@ -4,17 +4,17 @@ ConditionPathExists=/etc/initrd-release
 ConditionPathExists=/run/coreos-kargs-reboot
 DefaultDependencies=false
 Before=ignition-complete.target
- 
+
 # This runs after ignition-kargs & before ignition-disks so that it can optionally reboot
 # if kargs were modified via Ignition. This is done in a two-stage fashion so that other
 # mechanisms which may want to reboot (e.x. FIPS) can also hook in here and only reboot
 # once from the initrd.
 After=ignition-kargs.service
 Before=ignition-disks.service
- 
+
 OnFailure=emergency.target
 OnFailureJobMode=isolate
- 
+
 [Service]
 Type=oneshot
 RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh
index 17b1a169a2..12a492618e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-post-ignition-checks.sh
@@ -7,7 +7,7 @@ arch=$(uname -p)
 # Butane sugar will tell ignition to mount /boot to /sysroot/boot. We can simply check if
 # the file exists to see whether the check needs to be performed.
 # It is possible that the user creates a config, which will mount /boot at a different path
-# but that case is not officially supported. 
+# but that case is not officially supported.
 if [ -f /sysroot/boot/grub2/user.cfg ]; then
     # s390x does not use GRUB, ppcle64 uses petitboot with a GRUB config parser which does not support passwords
     # So in both these cases, GRUB password is not supported
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 86b845eeb1..f53564dd7c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -45,7 +45,7 @@ install() {
 
     inst_script "$moddir/coreos-post-ignition-checks.sh" \
         "/usr/sbin/coreos-post-ignition-checks"
-    
+
     install_ignition_unit coreos-post-ignition-checks.service
 
     # For consistency tear down the network and persist multipath between the initramfs and
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
index 8a810a20d6..8fa214e269 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
@@ -19,7 +19,7 @@ _wait_for_journalctl_to_stop() {
     done
 }
 
-_display_relevant_errors() { 
+_display_relevant_errors() {
     failed=$(systemctl --failed --no-legend --plain | cut -f 1 -d ' ')
     if [ -n "${failed}" ]; then
         # Something failed, suppress kernel logs so that it's more likely
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99journal-conf/00-journal-log-forwarding.conf b/overlay.d/05core/usr/lib/dracut/modules.d/99journal-conf/00-journal-log-forwarding.conf
index 091a114d5c..c7654af70e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99journal-conf/00-journal-log-forwarding.conf
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99journal-conf/00-journal-log-forwarding.conf
@@ -1,12 +1,12 @@
 [Journal]
 # For now we are using kmsg for multiplexing output to
 # multiple console devices during early boot.
-# 
+#
 # We do not want to use kmsg in the future as there may be sensitive
 # ignition data that leaks to non-root users (by reading the kernel
 # ring buffer using `dmesg`). In the future we will rely on kernel
 # console multiplexing (link below) for this and will not use kmsg.
-# 
+#
 # https://github.com/coreos/fedora-coreos-tracker/issues/136
 ForwardToKMsg=yes
 MaxLevelKMsg=info
diff --git a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
index 048c9f798f..a6268b85ac 100644
--- a/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
+++ b/overlay.d/05core/usr/lib/systemd/system/coreos-ignition-write-issues.service
@@ -1,6 +1,6 @@
-# This service writes issue files describing status 
-# information about the Ignition run, which includes 
-# Ignition warnings and information if no Ignition 
+# This service writes issue files describing status
+# information about the Ignition run, which includes
+# Ignition warnings and information if no Ignition
 # config is provided.
 [Unit]
 Description=Create Ignition Status Issue Files
diff --git a/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf b/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
index 390f72723f..d58bda6af4 100644
--- a/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
+++ b/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
@@ -1,6 +1,6 @@
 # https://github.com/coreos/coreos-installer/commit/15a79263d0bd5d72056a6080f6687dc10cba2dda
 # https://github.com/systemd/systemd/pull/10397
-# We want things like `systemd.unit=emergency.target` and `single` on the 
+# We want things like `systemd.unit=emergency.target` and `single` on the
 # kernel command line to just work even with our locked root account.
 # This file is used as an override for both emergency.target and rescue.target.
 [Service]
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-write-issues b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
index 9ae7413f81..958ec31370 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-write-issues
@@ -21,32 +21,32 @@ if [ $(cat /proc/sys/kernel/random/boot_id) = "${ignitionBoot}" ]; then
         cat << EOF > /etc/issue.d/30_coreos_ignition_run_more_than_once.issue
 ${WARN}
 ############################################################################
-WARNING: Ignition previously ran on ${prevdate}. Unexpected 
+WARNING: Ignition previously ran on ${prevdate}. Unexpected
 behavior may occur. Ignition is not designed to run more than once per system.
 ############################################################################
 ${RESET}
 EOF
     fi
-    # In Ignition, we've two config validation checks, the one after 
-    # fetching a config and the second after merging configs. Sometimes, 
-    # a warning goes away after merging, however, it's possible that a 
-    # warning appears in case merging creates a contradiction between 
-    # two fields. So this workflow eventually sends duplicate warnings 
-    # in journal entries. Hence, we need to avoid displaying duplicate 
+    # In Ignition, we've two config validation checks, the one after
+    # fetching a config and the second after merging configs. Sometimes,
+    # a warning goes away after merging, however, it's possible that a
+    # warning appears in case merging creates a contradiction between
+    # two fields. So this workflow eventually sends duplicate warnings
+    # in journal entries. Hence, we need to avoid displaying duplicate
     # Ignition warnings on the console.
     # For e.g. In the journal entries, we might see the following logs:
     #
-    # warning at $.systemd.units.0.contents, line 1 col 997: unit "echo@.service" is enabled, but has no install section so enable does nothing 
+    # warning at $.systemd.units.0.contents, line 1 col 997: unit "echo@.service" is enabled, but has no install section so enable does nothing
     # warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing
-    # 
-    # In order to normalize these logs, we'd need to get rid of the line 
-    # and column numbers entirely using the sed command, and then use 
-    # `sort -u` to remove duplicate content. After this, we'd see the 
+    #
+    # In order to normalize these logs, we'd need to get rid of the line
+    # and column numbers entirely using the sed command, and then use
+    # `sort -u` to remove duplicate content. After this, we'd see the
     # following warning on the console:
     #
     # warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing
     #
-    # TODO: find a way to query journal entries recorded before the 
+    # TODO: find a way to query journal entries recorded before the
     # system switches to real root
     journalctl -t ignition -o cat -p warning | sed -r 's/, line [0-9]+ col [0-9]+//g' | sort -u | while read line; do
         echo -e "${WARN}Ignition: $line${RESET}" >> /etc/issue.d/30_coreos_ignition_warnings.issue
diff --git a/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf b/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf
index 3182f67027..cabc5bb7f1 100644
--- a/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf
+++ b/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf
@@ -1,6 +1,6 @@
 # Stop NetworkManager from trying to load the ifcfg-rh plugin by default,
 # which we don't ship.  This actually disables all default plugins, of which
-# ifcfg-rh is currently the only one.  
+# ifcfg-rh is currently the only one.
 #
 # Note that we must do this for now because `-=` syntax doesn't work
 # with compiled-in defaults. Proposed upstream fix:
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index 858e7ed693..6c97fa1b90 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -1,4 +1,4 @@
-# This service is used for printing a message if no ssh keys were added 
+# This service is used for printing a message if no ssh keys were added
 # by Ignition/Afterburn
 [Unit]
 Description=Check that ssh-keys are added by Afterburn/Ignition
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
index 438ca9bc7f..fc8d4b90a0 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-ssh-keys
@@ -1,5 +1,5 @@
 #!/usr/bin/bash
-# This script will print a message in the serial console 
+# This script will print a message in the serial console
 # if no ssh keys were added by Ignition/Afterburn.
 main() {
     # Change the output color to yellow
@@ -7,8 +7,8 @@ main() {
     # No color
     nc='\033[0m'
 
-    # See https://github.com/coreos/ignition/pull/964 for the MESSAGE_ID 
-    # source. It will track the authorized-ssh-keys entries in journald 
+    # See https://github.com/coreos/ignition/pull/964 for the MESSAGE_ID
+    # source. It will track the authorized-ssh-keys entries in journald
     # provided via Ignition. Limit journal output to the most recent boot
     # so we don't get output from re-used /var/ partitions.
     ignitionusers=$(
@@ -16,8 +16,8 @@ main() {
             jq -r '.MESSAGE' | \
             xargs -I{} echo "Ignition: {}")
 
-    # See https://github.com/coreos/afterburn/pull/397 for the MESSAGE_ID 
-    # source. It will track the authorized-ssh-keys entries in journald  
+    # See https://github.com/coreos/afterburn/pull/397 for the MESSAGE_ID
+    # source. It will track the authorized-ssh-keys entries in journald
     # provided via Afterburn.Limit journal output to the most recent boot
     # so we don't get output from re-used /var/ partitions.
 
diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/chrony/dhcp-propagation
index 5425f2b986..61bba23035 100755
--- a/tests/kola/chrony/dhcp-propagation
+++ b/tests/kola/chrony/dhcp-propagation
@@ -1,9 +1,9 @@
 #!/bin/bash
 # kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
-# This script creates two veth interfaces i.e. one for the host machine 
+# This script creates two veth interfaces i.e. one for the host machine
 # and other for the container(dnsmasq server). This setup will be helpful
-# to verify the DHCP propagation of NTP servers. This will also avoid any 
-# regression that might cause in RHCOS or FCOS when the upstream changes 
+# to verify the DHCP propagation of NTP servers. This will also avoid any
+# regression that might cause in RHCOS or FCOS when the upstream changes
 # come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 #
 # - tags: needs-internet
diff --git a/tests/kola/clhm/ignition-warnings/config.bu b/tests/kola/clhm/ignition-warnings/config.bu
index c5cddac199..3b0ab78a3f 100644
--- a/tests/kola/clhm/ignition-warnings/config.bu
+++ b/tests/kola/clhm/ignition-warnings/config.bu
@@ -2,7 +2,7 @@ variant: fcos
 version: 1.1.0
 systemd:
   # This systemd unit doesn't have the Install
-  # section in it, so as part of the validation 
+  # section in it, so as part of the validation
   # step, Ignition will throw the following warning:
   # 'warning at $.systemd.units.0.contents: unit "echo@.service" is enabled, but has no install section so enable does nothing'
   units:
diff --git a/tests/kola/files/expected-initrd-files b/tests/kola/files/expected-initrd-files
index ccbce6b9c7..c705daa028 100755
--- a/tests/kola/files/expected-initrd-files
+++ b/tests/kola/files/expected-initrd-files
@@ -1,16 +1,16 @@
 #!/bin/bash
 # kola: { "exclusive": false }
 
-# This test runs on both, FCOS&RHCOS. The initrd includes specific files which,  
+# This test runs on both, FCOS&RHCOS. The initrd includes specific files which,
 # if omitted from the image will cause some failures with certain ingnition
 # configurations. This test doesnt assert the functionality of any files, it
-# simply gives a high level check to see if the files are available. 
+# simply gives a high level check to see if the files are available.
 # See https://github.com/coreos/fedora-coreos-config/issues/1775
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
- 
+
 required_initrd_files=(
     "/usr/lib/udev/rules.d/66-azure-storage.rules"
     "/usr/lib/udev/rules.d/99-azure-product-uuid.rules"
@@ -21,7 +21,7 @@ trap "rm -r ${tmpd}" EXIT
 ( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
 
 for file in ${required_initrd_files[@]}; do
-    if [ ! -e "${tmpd}/${file}" ]; then 
+    if [ ! -e "${tmpd}/${file}" ]; then
         fatal "${file} was not found in initrd"
     fi
 done
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 9fc512eaca..49e9f9df5c 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -217,7 +217,7 @@ if [ "$ID" == "fedora" ]; then
 elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
-    
+
     # scos includes NetworkManager-1.39.10-1.el9.x86_64, update scripts
     # according to F37
     if is_scos; then
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 47cf04f194..771e76fb56 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -37,10 +37,10 @@ runascoreuser() {
 main() {
     echo "$runascoreuserscript" > /tmp/runascoreuserscript
     chmod +x /tmp/runascoreuserscript
-    if ! runascoreuser /tmp/runascoreuserscript ; then 
-        fatal "DNS in rootless podman testnetwork failed. Test Fails" 
-    else 
-        ok "DNS in rootless podman testnetwork Suceeded. Test Passes" 
+    if ! runascoreuser /tmp/runascoreuserscript ; then
+        fatal "DNS in rootless podman testnetwork failed. Test Fails"
+    else
+        ok "DNS in rootless podman testnetwork Suceeded. Test Passes"
     fi
 }
 
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index b65cb22e93..b02eaf2a0d 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 set -xeuo pipefail
-# This is to verify udev rules /dev/disk/by-id/scsi-* 
+# This is to verify udev rules /dev/disk/by-id/scsi-*
 # symlinks present in initramfs
 # https://bugzilla.redhat.com/show_bug.cgi?id=1990506
 
diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 5f6438d13d..112e7ca979 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -392,7 +392,7 @@ main() {
     local ignitionfile="${PWD}/coreos-nettest-config.ign"
     local sshpubkey
     local butane
-     
+
     check_requirements
 
     # Find out which partition is the boot partition
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index bf1268343b..bc72f29dba 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -398,22 +398,22 @@ check_vm() {
     # verify that there are the right number of ipv4 devices "up"
     if [ $(jq length <<< $ipinfo) != "$((interfaces+1))" ]; then
         rc=1
-        echo "ERROR: More interfaces up than expected" 1>&2 
+        echo "ERROR: More interfaces up than expected" 1>&2
     fi
     # verify that the first one in loopback
     if [ $(jq -r .[0].addr_info[0].dev <<< $ipinfo) != 'lo' ]; then
         rc=1
-        echo "ERROR: The first active interface is not 'lo'" 1>&2 
+        echo "ERROR: The first active interface is not 'lo'" 1>&2
     fi
     # verify that the second one is the expected device
     if [ $(jq -r .[1].addr_info[0].dev <<< $ipinfo) != "${dev}" ]; then
         rc=1
-        echo "ERROR: The second active interface is not ${dev}" 1>&2 
+        echo "ERROR: The second active interface is not ${dev}" 1>&2
     fi
     # verify that the second one has the IP we assigned
     if [ $(jq -r .[1].addr_info[0].local <<< $ipinfo) != "${ip}" ]; then
         rc=1
-        echo "ERROR: The second active interface does not have expected ip" 1>&2 
+        echo "ERROR: The second active interface does not have expected ip" 1>&2
     fi
 
     if [ "$rc" != '0' ]; then
@@ -473,7 +473,7 @@ main() {
     local ignitionfile="${PWD}/coreos-nettest-config.ign"
     local sshpubkey
     local butane
-     
+
     check_requirements
 
     # generate an ssh key to use:
@@ -633,13 +633,13 @@ EOF
     # namesever= before ip= kargs doesn't yield an extra default.nm_connection
     # file. The second is to verify that the nameserver entry gets placed into
     # all connections that get created (i.e. ens2.nm_connection and ens3.nm_connection).
-    # 
+    #
     # We'll perform the first check automatically in check_vm by verifying the
     # number of keyfiles is 2, along with checking that the dns server did make
     # it into the resolv.conf or resolvectl (systemd-resolvd). We won't
     # automatically check that each file has the dns entry for now, but anyone
     # can manually run this and grab a console to the VM and verify that.
-    # 
+    #
     # [1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/issues/391
     echo -e "\n###### Testing initramfs nameserver= option\n"
     create_ignition_file "$butane_none" $ignitionfile
@@ -674,17 +674,17 @@ EOF
         static_team0
         static_br0
     )
-        
+
     for initramfsnet in ${initramfsloop[@]}; do
         for butanenet in ${butaneloop[@]}; do
             method='none'; interfaces=1;
             nameserver=${nameserverstatic}
             numkeyfiles=3
             if [ "${butanenet}" == 'none' ]; then
-                # because we propagate initramfs networking if no real root networking 
+                # because we propagate initramfs networking if no real root networking
                 devname=${initramfsnet##*_}
                 hostname=${initramfshostname}
-                # If we're using dhcp for initramfs and not providing any real root 
+                # If we're using dhcp for initramfs and not providing any real root
                 # networking then we need to tell check_vm we're using DHCP and set
                 # a few other values.
                 if [ "${initramfsnet}" == 'dhcp_nic0' ]; then

From eb3d40da8cda3658516867cc6c3636bf6eca4d7f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 9 Sep 2022 20:23:51 +0200
Subject: [PATCH 1200/2157] *: ShellCheck fixes

---
 tests/kola/files/expected-initrd-files  |  7 +++-
 tests/kola/reboot/test.sh               | 14 +++++--
 tests/manual/coreos-docs-net-testing.sh | 32 +++++++-------
 tests/manual/coreos-network-testing.sh  | 56 ++++++++++++-------------
 4 files changed, 60 insertions(+), 49 deletions(-)

diff --git a/tests/kola/files/expected-initrd-files b/tests/kola/files/expected-initrd-files
index c705daa028..93de9ac040 100755
--- a/tests/kola/files/expected-initrd-files
+++ b/tests/kola/files/expected-initrd-files
@@ -17,10 +17,13 @@ required_initrd_files=(
 )
 
 tmpd=$(mktemp -d)
-trap "rm -r ${tmpd}" EXIT
+cleanup() {
+    rm -r "${tmpd}"
+}
+trap cleanup EXIT
 ( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
 
-for file in ${required_initrd_files[@]}; do
+for file in "${required_initrd_files[@]}"; do
     if [ ! -e "${tmpd}/${file}" ]; then
         fatal "${file} was not found in initrd"
     fi
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 2f55be75eb..f4164f0d76 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -31,7 +31,15 @@ else
   # check for the UUID dropins
   [ -f /boot/grub2/bootuuid.cfg ]
   mount -o ro /dev/disk/by-label/EFI-SYSTEM /boot/efi
-  [ -f /boot/efi/EFI/*/bootuuid.cfg ]
+  found_bootuuid="false"
+  for f in /boot/efi/EFI/*/bootuuid.cfg; do
+      if [ -f "$f" ]; then
+          found_bootuuid="true"
+      fi
+  done
+  if [[ "${found_bootuuid}" == "false" ]]; then
+      fatal "No /boot/efi/EFI/*/bootuuid.cfg found"
+  fi
   umount /boot/efi
 fi
 
@@ -43,12 +51,12 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 
   rebooted)
       # check for expected default kargs
-      grep root=UUID=$(cat /boot/.root_uuid) /proc/cmdline
+      grep root=UUID="$(cat /boot/.root_uuid)" /proc/cmdline
       ok "found root karg"
 
       bootsrc=$(findmnt -nvr /boot -o SOURCE)
       eval $(blkid -o export "${bootsrc}")
-      grep boot=UUID=${UUID} /proc/cmdline
+      grep boot=UUID="${UUID}" /proc/cmdline
       ok "found boot karg"
 
       ok "second boot"
diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index 112e7ca979..e9633bf172 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -313,7 +313,7 @@ butane_dhcpvlanbond='
 
 check_requirement() {
     req=$1
-    if ! which $req &>/dev/null; then
+    if ! which "$req" &>/dev/null; then
         echo "No $req. Can't continue" 1>&2
         return 1
     fi
@@ -332,8 +332,8 @@ check_requirements() {
         virt-install
         virt-ls
     )
-    for req in ${reqs[@]}; do
-        check_requirement $req
+    for req in "${reqs[@]}"; do
+        check_requirement "$req"
     done
 }
 
@@ -343,11 +343,11 @@ start_vm() {
     local ignitionfile=$1; shift
     local kernel=$1; shift
     local initramfs=$1; shift
-    local kernel_args=$@
+    local kernel_args=$*
     virt-install --name $vmname --ram 3096 --vcpus 2 --graphics=none \
                    --quiet --network bridge=virbr0 --network bridge=virbr0 \
-                   --disk size=20,backing_store=${disk} \
-                   --install kernel=${kernel},initrd=${initramfs},kernel_args_overwrite=yes,kernel_args="${kernel_args}" \
+                   --disk size=20,backing_store="${disk}" \
+                   --install kernel="${kernel}",initrd="${initramfs}",kernel_args_overwrite=yes,kernel_args="${kernel_args}" \
                    --qemu-commandline="-fw_cfg name=opt/com.coreos/config,file=$ignitionfile"
 }
 
@@ -365,8 +365,8 @@ create_ignition_file() {
     local ignitionfile=$2
     # uncomment and use ign-converter instead if on rhcos less than 4.6
     #echo "$butaneconfig" | butane --strict | ign-converter -downtranslate -output $ignitionfile
-    echo "$butaneconfig" | butane --strict --output $ignitionfile
-    chcon --verbose unconfined_u:object_r:svirt_home_t:s0 $ignitionfile &>/dev/null
+    echo "$butaneconfig" | butane --strict --output "$ignitionfile"
+    chcon --verbose unconfined_u:object_r:svirt_home_t:s0 "$ignitionfile" &>/dev/null
 }
 
 main() {
@@ -396,7 +396,7 @@ main() {
     check_requirements
 
     # Find out which partition is the boot partition
-    partition=$(guestfish --ro -a $qcow <<EOF
+    partition=$(guestfish --ro -a "$qcow" <<EOF
     run
     findfs-label boot
     exit
@@ -404,17 +404,17 @@ EOF
     )
 
     # Grab kernel/initramfs from the disk
-    files=$(virt-ls -a $qcow -m $partition -R /ostree/)
+    files=$(virt-ls -a "$qcow" -m "$partition" -R /ostree/)
     for f in $files; do
         if [[ "${f}" =~ hmac$ ]]; then
             # ignore .vmlinuz-5.5.9-200.fc31.x86_64.hmac
             true
         elif [[ "${f}" =~ img$ ]]; then
             # grab initramfs in the form initramfs-5.5.9-200.fc31.x86_64.img
-            virt-cat -a $qcow -m $partition "/ostree/${f}" > $initramfs
+            virt-cat -a "$qcow" -m "$partition" "/ostree/${f}" > "$initramfs"
         elif [[ "${f}" =~ '/vmlinuz' ]]; then
             # grab kernel in the form vmlinuz-5.5.9-200.fc31.x86_64
-            virt-cat -a $qcow -m $partition "/ostree/${f}" > $kernel
+            virt-cat -a "$qcow" -m "$partition" "/ostree/${f}" > "$kernel"
         fi
     done
 
@@ -435,7 +435,7 @@ EOF
     # Grab kernel arguments from the disk and use them
     # - strip `options ` from the front of the line
     # - strip `$ignition_firstboot`
-    common_args=$(virt-cat -a $qcow -m $partition "/loader.1/entries/${bls_file}" | \
+    common_args=$(virt-cat -a "$qcow" -m "$partition" "/loader.1/entries/${bls_file}" | \
                   grep -P '^options' | \
                   sed -e 's/options //' | \
                   sed -e 's/$ignition_firstboot//')
@@ -512,7 +512,7 @@ EOF
     )
 
     create_ignition_file "$butane_none" $ignitionfile
-    for net in ${loopitems[@]}; do
+    for net in "${loopitems[@]}"; do
         var="initramfs_${net}"
         kernel_args=${!var}
         var="butane_initramfs_${net}"
@@ -522,7 +522,7 @@ EOF
         destroy_vm
     done
 
-    for net in ${loopitems[@]}; do
+    for net in "${loopitems[@]}"; do
         var="butane_${net}"
         butaneconfig=${!var}
         kernel_args=${common_args}
@@ -539,5 +539,5 @@ EOF
 }
 
 
-main $@
+main "$@"
 
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index bc72f29dba..a192559158 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -238,7 +238,7 @@ butane_static_br0='
 
 check_requirement() {
     req=$1
-    if ! which $req &>/dev/null; then
+    if ! which "$req" &>/dev/null; then
         echo "No $req. Can't continue" 1>&2
         return 1
     fi
@@ -257,8 +257,8 @@ check_requirements() {
         virt-install
         virt-ls
     )
-    for req in ${reqs[@]}; do
-        check_requirement $req
+    for req in "${reqs[@]}"; do
+        check_requirement "$req"
     done
 }
 
@@ -268,11 +268,11 @@ start_vm() {
     local ignitionfile=$1; shift
     local kernel=$1; shift
     local initramfs=$1; shift
-    local kernel_args=$@
+    local kernel_args=$*
     virt-install --name $vmname --ram 3096 --vcpus 2 --graphics=none --noautoconsole \
                    --quiet --network bridge=virbr0 --network bridge=virbr0 \
-                   --disk size=20,backing_store=${disk} \
-                   --install kernel=${kernel},initrd=${initramfs},kernel_args_overwrite=yes,kernel_args="${kernel_args}" \
+                   --disk size=20,backing_store="${disk}" \
+                   --install kernel="${kernel}",initrd="${initramfs}",kernel_args_overwrite=yes,kernel_args="${kernel_args}" \
                    --qemu-commandline="-fw_cfg name=opt/com.coreos/config,file=$ignitionfile"
 }
 
@@ -290,7 +290,7 @@ check_vm() {
     ssh_config+=' -o StrictHostKeyChecking=no'
     ssh_config+=" -i $sshkeyfile"
 
-    if [ $dhcp == 'dhcp' ]; then
+    if [ "$dhcp" == 'dhcp' ]; then
         macinfo=$(virsh dumpxml $vmname | grep 'mac address' | head -n 1)
         macregex='(..:..:..:..:..:..)'
         if ! [[ $macinfo =~ $macregex ]]; then
@@ -379,7 +379,7 @@ check_vm() {
     # verify that the right number of NetworkManager keyfiles got created
     # use `echo -n | wc -l` so we can properly detect 0. Wasn't working
     # with `wc -l <<< $keyfiles`.
-    if [ ${detectedkeyfiles} != ${numkeyfiles} ]; then
+    if [ "${detectedkeyfiles}" != "${numkeyfiles}" ]; then
         rc=1
         echo "ERROR: Expected ${numkeyfiles} NM keyfiles, found ${detectedkeyfiles}" 1>&2
     fi
@@ -390,28 +390,28 @@ check_vm() {
     else
         nameserverinfo="$resolvedotconf"
     fi
-    if ! grep $nameserver &>/dev/null <<< "$nameserverinfo"; then
+    if ! grep "$nameserver" &>/dev/null <<< "$nameserverinfo"; then
         rc=1
         echo "ERROR: Nameserver information was not what was expected" 1>&2
     fi
 
     # verify that there are the right number of ipv4 devices "up"
-    if [ $(jq length <<< $ipinfo) != "$((interfaces+1))" ]; then
+    if [ "$(jq length <<< "$ipinfo")" != "$((interfaces+1))" ]; then
         rc=1
         echo "ERROR: More interfaces up than expected" 1>&2
     fi
     # verify that the first one in loopback
-    if [ $(jq -r .[0].addr_info[0].dev <<< $ipinfo) != 'lo' ]; then
+    if [ "$(jq -r .[0].addr_info[0].dev <<< "$ipinfo")" != 'lo' ]; then
         rc=1
         echo "ERROR: The first active interface is not 'lo'" 1>&2
     fi
     # verify that the second one is the expected device
-    if [ $(jq -r .[1].addr_info[0].dev <<< $ipinfo) != "${dev}" ]; then
+    if [ "$(jq -r .[1].addr_info[0].dev <<< "$ipinfo")" != "${dev}" ]; then
         rc=1
         echo "ERROR: The second active interface is not ${dev}" 1>&2
     fi
     # verify that the second one has the IP we assigned
-    if [ $(jq -r .[1].addr_info[0].local <<< $ipinfo) != "${ip}" ]; then
+    if [ "$(jq -r .[1].addr_info[0].local <<< "$ipinfo")" != "${ip}" ]; then
         rc=1
         echo "ERROR: The second active interface does not have expected ip" 1>&2
     fi
@@ -420,8 +420,8 @@ check_vm() {
         echo "$hostnameinfo"
         echo "$nameserverinfo"
         echo "$keyfiles"
-        jq -r .[].addr_info[].dev 1>&2 <<< $ipinfo
-        jq -r .[].addr_info[].local 1>&2 <<< $ipinfo
+        jq -r .[].addr_info[].dev 1>&2 <<< "$ipinfo"
+        jq -r .[].addr_info[].local 1>&2 <<< "$ipinfo"
         true
     else
         echo "Check for ${hostname} + dns:${nameserver} + ${dev}/${ip} passed!"
@@ -452,8 +452,8 @@ create_ignition_file() {
     local ignitionfile=$2
     # uncomment and use ign-converter instead if on rhcos less than 4.6
     #echo "$butaneconfig" | butane --strict | ign-converter -downtranslate -output $ignitionfile
-    echo "$butaneconfig" | butane --strict --output $ignitionfile
-    chcon --verbose unconfined_u:object_r:svirt_home_t:s0 $ignitionfile &>/dev/null
+    echo "$butaneconfig" | butane --strict --output "$ignitionfile"
+    chcon --verbose unconfined_u:object_r:svirt_home_t:s0 "$ignitionfile" &>/dev/null
 }
 
 
@@ -477,12 +477,12 @@ main() {
     check_requirements
 
     # generate an ssh key to use:
-    rm -f $sshkeyfile $sshpubkeyfile
-    ssh-keygen -N '' -C '' -f $sshkeyfile &>/dev/null
-    sshpubkey=$(cat $sshpubkeyfile)
+    rm -f "$sshkeyfile" "$sshpubkeyfile"
+    ssh-keygen -N '' -C '' -f "$sshkeyfile" &>/dev/null
+    sshpubkey="$(cat "$sshpubkeyfile")"
 
     # Find out which partition is the boot partition
-    partition=$(guestfish --ro -a $qcow <<EOF
+    partition=$(guestfish --ro -a "$qcow" <<EOF
     run
     findfs-label boot
     exit
@@ -490,17 +490,17 @@ EOF
     )
 
     # Grab kernel/initramfs from the disk
-    files=$(virt-ls -a $qcow -m $partition -R /ostree/)
+    files=$(virt-ls -a "$qcow" -m "$partition" -R /ostree/)
     for f in $files; do
         if [[ "${f}" =~ hmac$ ]]; then
             # ignore .vmlinuz-5.5.9-200.fc31.x86_64.hmac
             true
         elif [[ "${f}" =~ img$ ]]; then
             # grab initramfs in the form initramfs-5.5.9-200.fc31.x86_64.img
-            virt-cat -a $qcow -m $partition "/ostree/${f}" > $initramfs
+            virt-cat -a "$qcow" -m "$partition" "/ostree/${f}" > "$initramfs"
         elif [[ "${f}" =~ '/vmlinuz' ]]; then
             # grab kernel in the form vmlinuz-5.5.9-200.fc31.x86_64
-            virt-cat -a $qcow -m $partition "/ostree/${f}" > $kernel
+            virt-cat -a "$qcow" -m "$partition" "/ostree/${f}" > "$kernel"
         fi
     done
 
@@ -530,7 +530,7 @@ EOF
     # Grab kernel arguments from the disk and use them
     # - strip `options ` from the front of the line
     # - strip `$ignition_firstboot`
-    common_args=$(virt-cat -a $qcow -m $partition "/loader.1/entries/${bls_file}" | \
+    common_args=$(virt-cat -a "$qcow" -m "$partition" "/loader.1/entries/${bls_file}" | \
                   grep -P '^options' | \
                   sed -e 's/options //' | \
                   sed -e 's/$ignition_firstboot//')
@@ -675,8 +675,8 @@ EOF
         static_br0
     )
 
-    for initramfsnet in ${initramfsloop[@]}; do
-        for butanenet in ${butaneloop[@]}; do
+    for initramfsnet in "${initramfsloop[@]}"; do
+        for butanenet in "${butaneloop[@]}"; do
             method='none'; interfaces=1;
             nameserver=${nameserverstatic}
             numkeyfiles=3
@@ -734,5 +734,5 @@ EOF
 }
 
 
-main $@
+main "$@"
 

From ee6db94363076ed0166cb0410f5729bc01ce7688 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 10 Sep 2022 11:13:24 -0400
Subject: [PATCH 1201/2157] denylist: extend snooze on a few tests

---
 kola-denylist.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f0ee1395ff..b2ad588981 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,17 +23,17 @@
   - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-09-10
+  snooze: 2022-09-27
   arches:
   - s390x
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-09-10
+  snooze: 2022-09-27
   arches:
   - s390x
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-  snooze: 2022-09-10
+  snooze: 2022-09-27
   streams:
   - branched
   - rawhide

From b11722295ff831ba3092cec2a24776d66be62f56 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 10 Sep 2022 11:19:23 -0400
Subject: [PATCH 1202/2157] denylist: drop denial of boot mirror tests on
 branched

The kernel there has the revert now so we should be good.
---
 kola-denylist.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b2ad588981..6145912d7d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -35,5 +35,4 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
   snooze: 2022-09-27
   streams:
-  - branched
   - rawhide

From bef41270ba1b53f2f0fdb40e6e2100e6ee9a6b13 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 8 Sep 2022 16:21:12 +0800
Subject: [PATCH 1203/2157] tests: Make `hostname.fallback-hostname` works on
 rhcos8

"hostnamectl --json=pretty" is not supported on rhel8 yet, need to
do some tweaks.
See upstream patch https://github.com/coreos/fedora-coreos-config/pull/1920
---
 .../hostname/fallback-hostname/test.sh        | 59 +++++++++++++------
 1 file changed, 41 insertions(+), 18 deletions(-)

diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index b171c6a344..f54bc818bb 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -38,26 +38,49 @@ set -xeuo pipefail
 #       "ProductUUID" : null
 #   }
 
+# "hostnamectl --json=pretty" is not supported on rhel8 yet, the 
+# expected output like this:
+#    Static hostname: n/a
+# Transient hostname: localhost
+#          Icon name: computer-vm
+#            Chassis: vm
+#         Machine ID: d9d6dbacde8345f2a275e1d6dca81b78
+#            Boot ID: a47ef11ca938496985d5d85a4274c664
+#     Virtualization: kvm
+#   Operating System: Red Hat Enterprise Linux CoreOS 412.86.202209030446-0 (Ootpa)
+#        CPE OS Name: cpe:/o:redhat:enterprise_linux:8::coreos
+#             Kernel: Linux 4.18.0-372.19.1.el8_6.x86_64
+#       Architecture: x86-64
 
-output=$(hostnamectl --json=pretty)
-hostname=$(echo "$output" | jq -r '.Hostname')
-fallback=$(echo "$output" | jq -r '.DefaultHostname')
-static=$(echo "$output" | jq -r '.StaticHostname')
-namesource=$(echo "$output" | jq -r '.HostnameSource')
 
-if [ "$hostname" != 'localhost' ]; then
-    fatal "hostname was not expected"
-fi
-if [ "$fallback" != 'localhost' ]; then
-    fatal "fallback hostname was not expected"
-fi
-if [ "$static" != 'null' ]; then
-    fatal "static hostname not expected to be set"
-fi
-if [ "$namesource" != 'default' ]; then
-    # For this test since we disabled NM setting the hostname we
-    # expect the hostname to have been set via the fallback/default
-    fatal "hostname was set from non-default/fallback source"
+if is_rhcos8; then
+    if [ $(hostnamectl --transient) != 'localhost' ]; then
+        fatal "transient hostname was not expected"
+    fi
+    if [ ! -z $(hostnamectl --static) ]; then
+        fatal "static hostname not expected to be set"
+    fi
+else
+    output=$(hostnamectl --json=pretty)
+    hostname=$(echo "$output" | jq -r '.Hostname')
+    fallback=$(echo "$output" | jq -r '.DefaultHostname')
+    static=$(echo "$output" | jq -r '.StaticHostname')
+    namesource=$(echo "$output" | jq -r '.HostnameSource')
+
+    if [ "$hostname" != 'localhost' ]; then
+        fatal "hostname was not expected"
+    fi
+    if [ "$fallback" != 'localhost' ]; then
+        fatal "fallback hostname was not expected"
+    fi
+    if [ "$static" != 'null' ]; then
+        fatal "static hostname not expected to be set"
+    fi
+    if [ "$namesource" != 'default' ]; then
+        # For this test since we disabled NM setting the hostname we
+        # expect the hostname to have been set via the fallback/default
+        fatal "hostname was set from non-default/fallback source"
+    fi
 fi
 
 ok "fallback hostname wired up correctly"

From c59320a7a1937123a16e0be5093d6c13e11c253f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 13 Sep 2022 03:30:26 +0000
Subject: [PATCH 1204/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/74/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1d2d97126c..06e2c1d7ab 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -727,7 +727,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.4-0.fc36.aarch64"
+      "evra": "2:4.16.5-0.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.4-0.fc36.aarch64"
+      "evra": "2:4.16.5-0.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
@@ -1045,13 +1045,13 @@
       "evra": "2:1.1.3-1.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.4-0.fc36.aarch64"
+      "evra": "2:4.16.5-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.4-0.fc36.noarch"
+      "evra": "2:4.16.5-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.4-0.fc36.aarch64"
+      "evra": "2:4.16.5-0.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-10T20:53:19Z",
+    "generated": "2022-09-13T03:02:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-10T02:05:19Z"
+        "generated": "2022-09-12T09:11:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-10T20:39:35Z"
+        "generated": "2022-09-13T01:14:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b73ac03d1a..bb05da8bfe 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -727,7 +727,7 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.16.4-0.fc36.ppc64le"
+      "evra": "2:4.16.5-0.fc36.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.ppc64le"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-3.fc36.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.16.4-0.fc36.ppc64le"
+      "evra": "2:4.16.5-0.fc36.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.ppc64le"
@@ -1048,13 +1048,13 @@
       "evra": "2:1.1.3-1.fc36.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.4-0.fc36.ppc64le"
+      "evra": "2:4.16.5-0.fc36.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.16.4-0.fc36.noarch"
+      "evra": "2:4.16.5-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.4-0.fc36.ppc64le"
+      "evra": "2:4.16.5-0.fc36.ppc64le"
     },
     "sed": {
       "evra": "4.8-10.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-10T20:52:54Z",
+    "generated": "2022-09-13T03:01:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-10T02:05:14Z"
+        "generated": "2022-09-12T09:11:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-10T20:39:51Z"
+        "generated": "2022-09-13T01:14:27Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 17ac3c925b..bb36a46caa 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -679,7 +679,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.4-0.fc36.s390x"
+      "evra": "2:4.16.5-0.fc36.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.s390x"
@@ -748,7 +748,7 @@
       "evra": "0.3.2-3.fc36.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.4-0.fc36.s390x"
+      "evra": "2:4.16.5-0.fc36.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.s390x"
@@ -985,13 +985,13 @@
       "evra": "2:2.23.0-1.fc36.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.4-0.fc36.s390x"
+      "evra": "2:4.16.5-0.fc36.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.4-0.fc36.noarch"
+      "evra": "2:4.16.5-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.4-0.fc36.s390x"
+      "evra": "2:4.16.5-0.fc36.s390x"
     },
     "sed": {
       "evra": "4.8-10.fc36.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-10T20:52:35Z",
+    "generated": "2022-09-13T03:01:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-10T02:04:59Z"
+        "generated": "2022-09-12T09:11:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-10T20:39:59Z"
+        "generated": "2022-09-13T01:14:35Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0541d84ed2..4641161c5c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -733,7 +733,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.4-0.fc36.x86_64"
+      "evra": "2:4.16.5-0.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.4-0.fc36.x86_64"
+      "evra": "2:4.16.5-0.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.3-1.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.4-0.fc36.x86_64"
+      "evra": "2:4.16.5-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.4-0.fc36.noarch"
+      "evra": "2:4.16.5-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.4-0.fc36.x86_64"
+      "evra": "2:4.16.5-0.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-10T20:52:34Z",
+    "generated": "2022-09-13T03:01:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-10T02:06:50Z"
+        "generated": "2022-09-12T09:11:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-10T20:40:07Z"
+        "generated": "2022-09-13T01:14:43Z"
       }
     }
   }

From 80f0619037704bb5fdc71ccb5b4cc916bb7b979b Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 25 Aug 2022 08:55:24 -0400
Subject: [PATCH 1205/2157] tests:  Move skopeo test to
 rpm-ostree/container-deps

And verify that `ostree container encapsulate` exists.  This
would have caught https://issues.redhat.com/browse/OCPBUGS-553
---
 tests/kola/rpm-ostree/container-deps             | 16 ++++++++++++++++
 .../{skopeo => rpm-ostree}/data/commonlib.sh     |  0
 tests/kola/skopeo/proxy                          | 11 -----------
 3 files changed, 16 insertions(+), 11 deletions(-)
 create mode 100755 tests/kola/rpm-ostree/container-deps
 rename tests/kola/{skopeo => rpm-ostree}/data/commonlib.sh (100%)
 delete mode 100755 tests/kola/skopeo/proxy

diff --git a/tests/kola/rpm-ostree/container-deps b/tests/kola/rpm-ostree/container-deps
new file mode 100755
index 0000000000..a6c8473ef9
--- /dev/null
+++ b/tests/kola/rpm-ostree/container-deps
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Verify some dependencies of the rpm-ostree container stack.
+# kola: { "exclusive": false }
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Verify this command exists since it's a hard dependency of ostree's container bits.
+skopeo experimental-image-proxy --help
+
+# Also this one verifies the linkage between ostree and rpm-ostree via extensions
+h=$(ostree container encapsulate --help)
+[[ "$h" =~ --copymeta ]] || fatal "missing ostree container"
+
+ok skopeo
diff --git a/tests/kola/skopeo/data/commonlib.sh b/tests/kola/rpm-ostree/data/commonlib.sh
similarity index 100%
rename from tests/kola/skopeo/data/commonlib.sh
rename to tests/kola/rpm-ostree/data/commonlib.sh
diff --git a/tests/kola/skopeo/proxy b/tests/kola/skopeo/proxy
deleted file mode 100755
index 48d04d1247..0000000000
--- a/tests/kola/skopeo/proxy
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/bin/bash
-# kola: { "exclusive": false }
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# Verify this command exists since it's a hard dependency of ostree's container bits.
-skopeo experimental-image-proxy --help
-
-ok skopeo

From 35c359e8193c8f7aa095d739020b588e0b6eb8e7 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 13 Sep 2022 09:31:15 -0400
Subject: [PATCH 1206/2157] kola test to check the network device info Ref:
 https://github.com/coreos/fedora-coreos-tracker/issues/1153 BZ :
 https://bugzilla.redhat.com/show_bug.cgi?id=2080043

---
 tests/kola/clhm/network-device-info | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100755 tests/kola/clhm/network-device-info

diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
new file mode 100755
index 0000000000..174211c9ca
--- /dev/null
+++ b/tests/kola/clhm/network-device-info
@@ -0,0 +1,15 @@
+#!/bin/bash
+## kola:
+##   # This is a read-only test that can be run with other tests.
+##   exclusive: false
+# This test makes sure CLHM wrote a snippet for the NIC IP info.
+# See - https://github.com/coreos/fedora-coreos-tracker/issues/1153
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [ ! -f /etc/issue.d/22*.issue ]; then
+    fatal "Network Device info does not exist"
+fi
+ok "Network Device info exists"

From 2f0a72d2db5b108dbe0e8618b8f45168508b1804 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 13 Sep 2022 17:20:08 -0400
Subject: [PATCH 1207/2157] added denial and snooze on network-device-info test

Created symlink
---
 kola-denylist.yaml                | 7 +++++++
 tests/kola/clhm/data/commonlib.sh | 1 +
 2 files changed, 8 insertions(+)
 create mode 120000 tests/kola/clhm/data/commonlib.sh

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6145912d7d..55b451c4ff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -36,3 +36,10 @@
   snooze: 2022-09-27
   streams:
   - rawhide
+- pattern: ext.config.clhm.network-device-info
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1153
+  snooze: 2022-10-04
+  streams:
+  - testing-devel
+  - testing
+  - stable
diff --git a/tests/kola/clhm/data/commonlib.sh b/tests/kola/clhm/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/clhm/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file

From d43e961058ec667b64934bc2c8b9637de01781a9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Sep 2022 22:44:16 +0000
Subject: [PATCH 1208/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/80/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 06e2c1d7ab..f1d7268f20 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1186,10 +1186,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.348-1.fc36.noarch"
+      "evra": "2:9.0.412-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.348-1.fc36.aarch64"
+      "evra": "2:9.0.412-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-13T03:02:09Z",
+    "generated": "2022-09-14T21:29:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-12T09:11:24Z"
+        "generated": "2022-09-14T03:52:31Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-13T01:14:11Z"
+        "generated": "2022-09-14T01:17:51Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bb05da8bfe..142f33efcf 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1189,10 +1189,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.348-1.fc36.noarch"
+      "evra": "2:9.0.412-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.348-1.fc36.ppc64le"
+      "evra": "2:9.0.412-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-13T03:01:54Z",
+    "generated": "2022-09-14T21:29:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-12T09:11:59Z"
+        "generated": "2022-09-14T03:52:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-13T01:14:27Z"
+        "generated": "2022-09-14T01:18:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bb36a46caa..d136682f3e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1123,10 +1123,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.348-1.fc36.noarch"
+      "evra": "2:9.0.412-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.348-1.fc36.s390x"
+      "evra": "2:9.0.412-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-13T03:01:30Z",
+    "generated": "2022-09-14T21:29:04Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-12T09:11:43Z"
+        "generated": "2022-09-14T03:51:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-13T01:14:35Z"
+        "generated": "2022-09-14T01:18:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4641161c5c..25aba7bad7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.348-1.fc36.noarch"
+      "evra": "2:9.0.412-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.348-1.fc36.x86_64"
+      "evra": "2:9.0.412-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-13T03:01:28Z",
+    "generated": "2022-09-14T21:29:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-12T09:11:51Z"
+        "generated": "2022-09-14T03:53:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-13T01:14:43Z"
+        "generated": "2022-09-14T01:18:27Z"
       }
     }
   }

From ed57df1c836b3c43ece45fcf0ecd8e8e10bbcddd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Sep 2022 03:30:22 +0000
Subject: [PATCH 1209/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/87/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 31 ++++++++++++++++++++-----------
 manifest-lock.ppc64le.json | 31 ++++++++++++++++++++-----------
 manifest-lock.s390x.json   | 27 ++++++++++++++++++---------
 manifest-lock.x86_64.json  | 31 ++++++++++++++++++++-----------
 4 files changed, 78 insertions(+), 42 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f1d7268f20..165a83a6e3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.19-2.fc36.aarch64"
     },
+    "amd-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "attr": {
       "evra": "2.5.1-4.fc36.aarch64"
     },
@@ -172,7 +175,7 @@
       "evra": "3.17.1-2.fc36.aarch64"
     },
     "crun": {
-      "evra": "1.5-1.fc36.aarch64"
+      "evra": "1.6-2.fc36.aarch64"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -379,7 +382,7 @@
       "evra": "3.7.7-1.fc36.aarch64"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc36.aarch64"
+      "evra": "1.17.0-4.fc36.aarch64"
     },
     "grep": {
       "evra": "3.7-2.fc36.aarch64"
@@ -408,6 +411,9 @@
     "inih": {
       "evra": "56-1.fc36.aarch64"
     },
+    "intel-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "iproute": {
       "evra": "5.15.0-2.fc36.aarch64"
     },
@@ -613,7 +619,7 @@
       "evra": "2.7.4-1.fc36.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.10-1.fc36.aarch64"
+      "evra": "0.1.12-1.fc36.aarch64"
     },
     "libjose": {
       "evra": "11-5.fc36.aarch64"
@@ -808,7 +814,7 @@
       "evra": "2.9.14-1.fc36.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.9-1.fc36.aarch64"
+      "evra": "0.3.10-1.fc36.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.aarch64"
@@ -820,10 +826,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -856,7 +862,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.17-5.fc36.aarch64"
+      "evra": "20.10.18-1.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.aarch64"
@@ -909,6 +915,9 @@
     "numactl-libs": {
       "evra": "2.0.14-5.fc36.aarch64"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "nvme-cli": {
       "evra": "2.0-2.fc36.aarch64"
     },
@@ -1039,7 +1048,7 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.5-1.fc36.aarch64"
+      "evra": "3.2.6-1.fc36.aarch64"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.aarch64"
@@ -1229,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-14T21:29:59Z",
+    "generated": "2022-09-16T02:11:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-14T03:52:31Z"
+        "generated": "2022-09-15T00:58:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-14T01:17:51Z"
+        "generated": "2022-09-16T01:08:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 142f33efcf..1f4aa285a7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.19-2.fc36.ppc64le"
     },
+    "amd-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "attr": {
       "evra": "2.5.1-4.fc36.ppc64le"
     },
@@ -172,7 +175,7 @@
       "evra": "3.17.1-2.fc36.ppc64le"
     },
     "crun": {
-      "evra": "1.5-1.fc36.ppc64le"
+      "evra": "1.6-2.fc36.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -370,7 +373,7 @@
       "evra": "3.7.7-1.fc36.ppc64le"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc36.ppc64le"
+      "evra": "1.17.0-4.fc36.ppc64le"
     },
     "grep": {
       "evra": "3.7-2.fc36.ppc64le"
@@ -402,6 +405,9 @@
     "inih": {
       "evra": "56-1.fc36.ppc64le"
     },
+    "intel-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "iproute": {
       "evra": "5.15.0-2.fc36.ppc64le"
     },
@@ -607,7 +613,7 @@
       "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libjcat": {
-      "evra": "0.1.10-1.fc36.ppc64le"
+      "evra": "0.1.12-1.fc36.ppc64le"
     },
     "libjose": {
       "evra": "11-5.fc36.ppc64le"
@@ -808,7 +814,7 @@
       "evra": "2.9.14-1.fc36.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.9-1.fc36.ppc64le"
+      "evra": "0.3.10-1.fc36.ppc64le"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.ppc64le"
@@ -820,10 +826,10 @@
       "evra": "2.5.1-31.fc36.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.ppc64le"
@@ -856,7 +862,7 @@
       "evra": "4.2-1.fc36.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.17-5.fc36.ppc64le"
+      "evra": "20.10.18-1.fc36.ppc64le"
     },
     "mozjs91": {
       "evra": "91.13.0-1.fc36.ppc64le"
@@ -906,6 +912,9 @@
     "numactl-libs": {
       "evra": "2.0.14-5.fc36.ppc64le"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "nvme-cli": {
       "evra": "2.0-2.fc36.ppc64le"
     },
@@ -1042,7 +1051,7 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.5-1.fc36.ppc64le"
+      "evra": "3.2.6-1.fc36.ppc64le"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.ppc64le"
@@ -1232,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-14T21:29:49Z",
+    "generated": "2022-09-16T02:11:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-14T03:52:22Z"
+        "generated": "2022-09-15T00:58:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-14T01:18:10Z"
+        "generated": "2022-09-16T01:08:26Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d136682f3e..2569a9187a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.19-2.fc36.s390x"
     },
+    "amd-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "attr": {
       "evra": "2.5.1-4.fc36.s390x"
     },
@@ -169,7 +172,7 @@
       "evra": "3.17.1-2.fc36.s390x"
     },
     "crun": {
-      "evra": "1.5-1.fc36.s390x"
+      "evra": "1.6-2.fc36.s390x"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -358,7 +361,7 @@
       "evra": "3.7.7-1.fc36.s390x"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc36.s390x"
+      "evra": "1.17.0-4.fc36.s390x"
     },
     "grep": {
       "evra": "3.7-2.fc36.s390x"
@@ -375,6 +378,9 @@
     "inih": {
       "evra": "56-1.fc36.s390x"
     },
+    "intel-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "iproute": {
       "evra": "5.15.0-2.fc36.s390x"
     },
@@ -766,10 +772,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -802,7 +808,7 @@
       "evra": "4.2-1.fc36.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.17-5.fc36.s390x"
+      "evra": "20.10.18-1.fc36.s390x"
     },
     "mozjs91": {
       "evra": "91.13.0-1.fc36.s390x"
@@ -849,6 +855,9 @@
     "nss-altfiles": {
       "evra": "2.18.1-20.fc36.s390x"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "nvme-cli": {
       "evra": "2.0-2.fc36.s390x"
     },
@@ -976,7 +985,7 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rsync": {
-      "evra": "3.2.5-1.fc36.s390x"
+      "evra": "3.2.6-1.fc36.s390x"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.s390x"
@@ -1166,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-14T21:29:04Z",
+    "generated": "2022-09-16T02:14:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-14T03:51:25Z"
+        "generated": "2022-09-15T00:58:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-14T01:18:18Z"
+        "generated": "2022-09-16T01:08:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 25aba7bad7..0ad1620437 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.19-2.fc36.x86_64"
     },
+    "amd-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "attr": {
       "evra": "2.5.1-4.fc36.x86_64"
     },
@@ -172,7 +175,7 @@
       "evra": "3.17.1-2.fc36.x86_64"
     },
     "crun": {
-      "evra": "1.5-1.fc36.x86_64"
+      "evra": "1.6-2.fc36.x86_64"
     },
     "crypto-policies": {
       "evra": "20220428-1.gitdfb10ea.fc36.noarch"
@@ -379,7 +382,7 @@
       "evra": "3.7.7-1.fc36.x86_64"
     },
     "gpgme": {
-      "evra": "1.15.1-6.fc36.x86_64"
+      "evra": "1.17.0-4.fc36.x86_64"
     },
     "grep": {
       "evra": "3.7-2.fc36.x86_64"
@@ -414,6 +417,9 @@
     "inih": {
       "evra": "56-1.fc36.x86_64"
     },
+    "intel-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "iproute": {
       "evra": "5.15.0-2.fc36.x86_64"
     },
@@ -619,7 +625,7 @@
       "evra": "2.7.4-1.fc36.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.10-1.fc36.x86_64"
+      "evra": "0.1.12-1.fc36.x86_64"
     },
     "libjose": {
       "evra": "11-5.fc36.x86_64"
@@ -817,7 +823,7 @@
       "evra": "2.9.14-1.fc36.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.9-1.fc36.x86_64"
+      "evra": "0.3.10-1.fc36.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.x86_64"
@@ -829,10 +835,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-138.fc36.noarch"
+      "evra": "20220815-139.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -868,7 +874,7 @@
       "evra": "2:2.1-51.1.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.17-5.fc36.x86_64"
+      "evra": "20.10.18-1.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.x86_64"
@@ -921,6 +927,9 @@
     "numactl-libs": {
       "evra": "2.0.14-5.fc36.x86_64"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20220815-139.fc36.noarch"
+    },
     "nvme-cli": {
       "evra": "2.0-2.fc36.x86_64"
     },
@@ -1048,7 +1057,7 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.5-1.fc36.x86_64"
+      "evra": "3.2.6-1.fc36.x86_64"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.x86_64"
@@ -1238,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-14T21:29:06Z",
+    "generated": "2022-09-16T02:11:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-14T03:53:30Z"
+        "generated": "2022-09-15T00:59:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-14T01:18:27Z"
+        "generated": "2022-09-16T01:08:43Z"
       }
     }
   }

From 961b0132df6aedfedd53604f9475895a988c706f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Sep 2022 05:15:07 +0000
Subject: [PATCH 1210/2157] overrides: fast-track
 rust-coreos-installer-0.16.0-1.fc36

---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..838eb4c322 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.16.0-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-90e83711b5
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.16.0-1.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-90e83711b5
+      type: fast-track

From 1f6b8b8a1e148f0d0e6e0500a80d8bad8fc9bbda Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 13 Jul 2022 22:33:32 -0400
Subject: [PATCH 1211/2157] tests/kola: move initrd tests into a subdirectory

Clean up comments a bit and switch to YAML metadata.
---
 tests/kola/files/initrd/data/commonlib.sh                | 1 +
 .../kola/files/{dracut-executable => initrd/executables} | 7 +++++--
 .../{expected-initrd-files => initrd/expected-contents}  | 9 +++++----
 3 files changed, 11 insertions(+), 6 deletions(-)
 create mode 120000 tests/kola/files/initrd/data/commonlib.sh
 rename tests/kola/files/{dracut-executable => initrd/executables} (86%)
 rename tests/kola/files/{expected-initrd-files => initrd/expected-contents} (70%)

diff --git a/tests/kola/files/initrd/data/commonlib.sh b/tests/kola/files/initrd/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/files/initrd/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/files/dracut-executable b/tests/kola/files/initrd/executables
similarity index 86%
rename from tests/kola/files/dracut-executable
rename to tests/kola/files/initrd/executables
index 95265953d3..b8535c9c4e 100755
--- a/tests/kola/files/dracut-executable
+++ b/tests/kola/files/initrd/executables
@@ -1,11 +1,14 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
+#
+# It's easy for dracut modules to accidentally ship scripts without +x set.
+# Check for those.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# It's easy for dracut modules to accidentally ship scripts without +x set
 tmpd=$(mktemp -d)
 ( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
 if find "${tmpd}/usr/"{bin,sbin,libexec} ! -perm -0111 | grep -v clevis-luks-common-functions; then
diff --git a/tests/kola/files/expected-initrd-files b/tests/kola/files/initrd/expected-contents
similarity index 70%
rename from tests/kola/files/expected-initrd-files
rename to tests/kola/files/initrd/expected-contents
index 93de9ac040..12ea672fdd 100755
--- a/tests/kola/files/expected-initrd-files
+++ b/tests/kola/files/initrd/expected-contents
@@ -1,9 +1,10 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
-# This test runs on both, FCOS&RHCOS. The initrd includes specific files which,
-# if omitted from the image will cause some failures with certain ingnition
-# configurations. This test doesnt assert the functionality of any files, it
+# This test runs on both FCOS & RHCOS. The initrd includes specific files which,
+# if omitted from the image, will cause some failures with certain Ignition
+# configs. This test doesn't assert the functionality of any files, it
 # simply gives a high level check to see if the files are available.
 # See https://github.com/coreos/fedora-coreos-config/issues/1775
 

From dbe16a169cdd32ba263bad308e1294c9a27c01c6 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 13 Jul 2022 22:29:52 -0400
Subject: [PATCH 1212/2157] overlay: compress initrd with zstd -19 on FCOS and
 RHCOS/SCOS 9

On my system, relative to gzip -9, it roughly halves decompression time at
boot while also reducing initrd size.

RHCOS 8 can't inherit this because the RHEL 8 kernel doesn't enable
CONFIG_RD_ZSTD.

This requires coreos-installer to support decoding zstd (for
`coreos-installer pxe customize`), which is
https://github.com/coreos/coreos-installer/pull/920.

For https://github.com/coreos/fedora-coreos-tracker/issues/1247.
---
 .../lib/dracut/dracut.conf.d/coreos-zstd.conf |  8 ++++++++
 tests/kola/files/initrd/compression           | 20 +++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
 create mode 100755 tests/kola/files/initrd/compression

diff --git a/overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf b/overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
new file mode 100644
index 0000000000..9a9c0678d8
--- /dev/null
+++ b/overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
@@ -0,0 +1,8 @@
+# Compress initrd with zstd.  dracut defaults to -15, but we want the
+# maximum reasonable compression, so override the command line to use
+# dracut's defaults along with -19.
+#
+# We can't use this in RHCOS 8 because the kernel doesn't enable
+# CONFIG_RD_ZSTD.
+
+compress="zstd -19 -q -T0"
diff --git a/tests/kola/files/initrd/compression b/tests/kola/files/initrd/compression
new file mode 100755
index 0000000000..5944a3b216
--- /dev/null
+++ b/tests/kola/files/initrd/compression
@@ -0,0 +1,20 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+#
+# If dracut can't find the configured compressor, it warns and falls back to
+# gzip (!).  Fail if the initrd isn't compressed with zstd.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Check initrd for zstd magic number
+if is_rhcos8; then
+    ok "Skipping initrd zstd compression test on RHCOS 8"
+else
+    if ! LANG=C grep -aUPq "\x28\xb5\x2f\xfd" /boot/ostree/*/init*; then
+        fatal "Didn't find zstd compression in initrd"
+    fi
+    ok "Found zstd compression in initrd"
+fi

From d70204eea0750262b0bcd5f837e066e517cad081 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 13 Sep 2022 23:26:10 -0400
Subject: [PATCH 1213/2157] tests/kola/commonlib: add function for extracting
 karg value

---
 tests/kola/chrony/coreos-platform-chrony-generator |  4 +++-
 tests/kola/data/commonlib.sh                       | 11 +++++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/chrony/coreos-platform-chrony-generator
index 5a955933d9..6b881e685c 100755
--- a/tests/kola/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/chrony/coreos-platform-chrony-generator
@@ -4,7 +4,9 @@
 
 set -xeuo pipefail
 
-platform="$(grep -Eo ' ignition.platform.id=[a-z]+' /proc/cmdline | cut -f 2 -d =)"
+. $KOLA_EXT_DATA/commonlib.sh
+
+platform=$(cmdline_arg ignition.platform.id)
 case "${platform}" in
     aws) chronyc sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
     azure) chronyc sources |grep 'PHC'; echo "ok chrony azure" ;;
diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 9390378ce8..c9d2fc1bbe 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -60,3 +60,14 @@ is_scos() {
     source /etc/os-release
     [ "${ID}" == "scos" ] && [ "${VARIANT_ID}" == "coreos" ]
 }
+
+cmdline=( $(</proc/cmdline) )
+cmdline_arg() {
+    local name="$1" value=""
+    for arg in "${cmdline[@]}"; do
+        if [[ "${arg%%=*}" == "${name}" ]]; then
+            value="${arg#*=}"
+        fi
+    done
+    echo "${value}"
+}

From 2c56db3e7073f5474b8fa5b7e71671f6cee97b8d Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 3 Jun 2022 02:14:43 -0400
Subject: [PATCH 1214/2157] tests: check platforms.json against kargs/grub.cfg
 and ground truth

Hardcode the expected cutover dates for each FCOS stream, to ensure we
don't cut over too early or too late.
---
 tests/kola/files/console-config | 99 +++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100755 tests/kola/files/console-config

diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
new file mode 100755
index 0000000000..08fce3450e
--- /dev/null
+++ b/tests/kola/files/console-config
@@ -0,0 +1,99 @@
+#!/bin/bash
+## kola:
+##   # We don't need a special Ignition config and we don't modify the VM
+##   exclusive: false
+##   # s390x doesn't have any configuration in platforms.yaml, so
+##   # platforms.json is not included in the image
+##   architectures: "!s390x"
+#
+# Verify that the kargs and grub.cfg commands specified in platforms.json
+# have been properly applied to the image.  Also check that cosa correctly
+# translated platforms.yaml to platforms.json, by spot-checking certain
+# expected platforms.json values.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+platform_json_kargs() {
+    jq -r ".$1.kernel_arguments // [] | join(\" \")" < /boot/coreos/platforms.json
+}
+
+platform_json_grub_cmds() {
+    jq -r ".$1.grub_commands // [] | join(\"\\\\n\")" < /boot/coreos/platforms.json
+}
+
+check_platforms_json() {
+    local platform="$1" expected_kargs="$2" expected_grub_cmds="$3"
+    found_kargs=$(platform_json_kargs "$platform")
+    found_grub_cmds=$(platform_json_grub_cmds "$platform")
+    if [ "$expected_kargs" != "$found_kargs" ]; then
+        fatal "platforms.json incorrect kargs for $platform"
+    fi
+    if [ "$expected_grub_cmds" != "$found_grub_cmds" ]; then
+        fatal "platforms.json incorrect GRUB commands for $platform"
+    fi
+    ok "platforms.json for $platform"
+}
+
+# Check whether platforms.json exists
+if is_fcos; then
+    # Schedule based on:
+    # https://lists.fedoraproject.org/archives/list/coreos-status@lists.fedoraproject.org/message/GHLXX4MXNHUEAXQLK6BZN45IQYHRVQB4/
+    case "$(get_fcos_stream)" in
+    next-devel) threshold=20220923 ;;
+    next) threshold=20220930 ;;
+    testing-devel|rawhide|branched) threshold=20221118 ;;
+    testing) threshold=20221125 ;;
+    stable) threshold=20221209 ;;
+    *) fatal "Unknown stream" ;;
+    esac
+    datecode=$(echo "$VERSION" | cut -f2 -d.)
+    expect_config=$([ $datecode -ge $threshold ] && echo 1 || echo 0)
+else
+    threshold=none
+    expect_config=1
+fi
+have_config=$([ -e /boot/coreos/platforms.json ] && echo 1 || echo 0)
+if [ "$have_config" != "$expect_config" ]; then
+    fatal "platforms.json exists=$have_config expected=$expect_config threshold=$threshold"
+fi
+ok "platforms.json exists=$have_config"
+if [ "$have_config" != 1 ]; then
+    # We don't automatically test whether the legacy code injects the
+    # correct parameters
+    exit 0
+fi
+
+# Check that platforms.json matches grub.cfg and kargs
+platform=$(cmdline_arg ignition.platform.id)
+expected_kargs=$(platform_json_kargs "$platform")
+expected_grub_cmds=$(platform_json_grub_cmds "$platform")
+if [ -n "$expected_kargs" ] && ! grep -Eq " ${expected_kargs}( |$)" /proc/cmdline; then
+    fatal "Didn't find $expected_kargs in $(cat /proc/cmdline)"
+fi
+if [ -n "$expected_grub_cmds" ] && ! grep -qzP "\n${expected_grub_cmds}\n" /boot/grub2/grub.cfg; then
+    fatal "Didn't find platform grub commands in /boot/grub2/grub.cfg"
+fi
+ok "platforms.json matches grub.cfg and kargs"
+
+# Check that platforms.json has reasonable contents (i.e. that cosa
+# properly forwarded it from platforms.yaml).
+# Check at least one platform on each architecture.
+case $(uname -m) in
+x86_64)
+    # Matches the legacy defaults
+    check_platforms_json qemu "console=tty0 console=ttyS0,115200n8" "serial --speed=115200\nterminal_input serial console\nterminal_output serial console"
+    # Different from legacy defaults
+    check_platforms_json packet "console=ttyS1,115200n8" "serial --unit=1 --speed=115200\nterminal_input serial\nterminal_output serial"
+    ;;
+aarch64)
+    # GRUB commands but no kargs
+    check_platforms_json qemu "" "serial --speed=115200\nterminal_input serial console\nterminal_output serial console"
+    ;;
+ppc64le)
+    # Kargs but no GRUB commands
+    check_platforms_json qemu "console=hvc0 console=tty0" ""
+    ;;
+esac
+ok "platforms.json has expected contents"

From 65a43c8b70aa5d34cfe2e9744347e353551bd81f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Sep 2022 13:35:01 +0000
Subject: [PATCH 1215/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/92/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 165a83a6e3..24493ce751 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-2.fc36.aarch64"
+      "evra": "0.16.0-1.fc36.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-2.fc36.aarch64"
+      "evra": "0.16.0-1.fc36.aarch64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.aarch64"
@@ -586,13 +586,13 @@
       "evra": "1.4-6.fc36.aarch64"
     },
     "libgcc": {
-      "evra": "12.2.1-1.fc36.aarch64"
+      "evra": "12.2.1-2.fc36.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.aarch64"
     },
     "libgomp": {
-      "evra": "12.2.1-1.fc36.aarch64"
+      "evra": "12.2.1-2.fc36.aarch64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.aarch64"
@@ -760,7 +760,7 @@
       "evra": "2.7.4-1.fc36.aarch64"
     },
     "libstdc++": {
-      "evra": "12.2.1-1.fc36.aarch64"
+      "evra": "12.2.1-2.fc36.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.aarch64"
@@ -1081,10 +1081,10 @@
       "evra": "1.46-3.fc36.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-3.fc36.aarch64"
+      "evra": "2:4.11.1-4.fc36.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-3.fc36.aarch64"
+      "evra": "2:4.11.1-4.fc36.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-16T02:11:50Z",
+    "generated": "2022-09-17T12:34:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-15T00:58:52Z"
+        "generated": "2022-09-17T02:20:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-16T01:08:09Z"
+        "generated": "2022-09-17T01:31:13Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1f4aa285a7..985445a054 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-2.fc36.ppc64le"
+      "evra": "0.16.0-1.fc36.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-2.fc36.ppc64le"
+      "evra": "0.16.0-1.fc36.ppc64le"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.ppc64le"
@@ -580,13 +580,13 @@
       "evra": "1.4-6.fc36.ppc64le"
     },
     "libgcc": {
-      "evra": "12.2.1-1.fc36.ppc64le"
+      "evra": "12.2.1-2.fc36.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.ppc64le"
     },
     "libgomp": {
-      "evra": "12.2.1-1.fc36.ppc64le"
+      "evra": "12.2.1-2.fc36.ppc64le"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.ppc64le"
@@ -760,7 +760,7 @@
       "evra": "2.7.4-1.fc36.ppc64le"
     },
     "libstdc++": {
-      "evra": "12.2.1-1.fc36.ppc64le"
+      "evra": "12.2.1-2.fc36.ppc64le"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.ppc64le"
@@ -1087,10 +1087,10 @@
       "evra": "1.46-3.fc36.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-3.fc36.ppc64le"
+      "evra": "2:4.11.1-4.fc36.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-3.fc36.ppc64le"
+      "evra": "2:4.11.1-4.fc36.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-16T02:11:42Z",
+    "generated": "2022-09-17T12:33:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-15T00:58:52Z"
+        "generated": "2022-09-17T02:20:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-16T01:08:26Z"
+        "generated": "2022-09-17T01:31:29Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2569a9187a..b008813a44 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -145,10 +145,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-2.fc36.s390x"
+      "evra": "0.16.0-1.fc36.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-2.fc36.s390x"
+      "evra": "0.16.0-1.fc36.s390x"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.s390x"
@@ -547,7 +547,7 @@
       "evra": "1.10.0-3.fc36.s390x"
     },
     "libgcc": {
-      "evra": "12.2.1-1.fc36.s390x"
+      "evra": "12.2.1-2.fc36.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.s390x"
@@ -712,7 +712,7 @@
       "evra": "2.7.4-1.fc36.s390x"
     },
     "libstdc++": {
-      "evra": "12.2.1-1.fc36.s390x"
+      "evra": "12.2.1-2.fc36.s390x"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.s390x"
@@ -1021,10 +1021,10 @@
       "evra": "1.46-3.fc36.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-3.fc36.s390x"
+      "evra": "2:4.11.1-4.fc36.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-3.fc36.s390x"
+      "evra": "2:4.11.1-4.fc36.s390x"
     },
     "skopeo": {
       "evra": "1:1.9.2-1.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-16T02:14:10Z",
+    "generated": "2022-09-17T12:33:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-15T00:58:35Z"
+        "generated": "2022-09-17T02:21:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-16T01:08:34Z"
+        "generated": "2022-09-17T01:31:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0ad1620437..3d08198633 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.15.0-2.fc36.x86_64"
+      "evra": "0.16.0-1.fc36.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.15.0-2.fc36.x86_64"
+      "evra": "0.16.0-1.fc36.x86_64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.x86_64"
@@ -592,13 +592,13 @@
       "evra": "1.4-6.fc36.x86_64"
     },
     "libgcc": {
-      "evra": "12.2.1-1.fc36.x86_64"
+      "evra": "12.2.1-2.fc36.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.1-3.fc36.x86_64"
     },
     "libgomp": {
-      "evra": "12.2.1-1.fc36.x86_64"
+      "evra": "12.2.1-2.fc36.x86_64"
     },
     "libgpg-error": {
       "evra": "1.45-1.fc36.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.7.4-1.fc36.x86_64"
     },
     "libstdc++": {
-      "evra": "12.2.1-1.fc36.x86_64"
+      "evra": "12.2.1-2.fc36.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.4-1.fc36.x86_64"
@@ -1090,10 +1090,10 @@
       "evra": "1.46-3.fc36.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-3.fc36.x86_64"
+      "evra": "2:4.11.1-4.fc36.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-3.fc36.x86_64"
+      "evra": "2:4.11.1-4.fc36.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-16T02:11:05Z",
+    "generated": "2022-09-17T12:33:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-15T00:59:23Z"
+        "generated": "2022-09-17T02:20:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-16T01:08:43Z"
+        "generated": "2022-09-17T01:31:45Z"
       }
     }
   }

From 98a3f011efe3412ab293c2c19651c91c6ae74679 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Sep 2022 22:12:57 +0000
Subject: [PATCH 1216/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/95/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 24493ce751..c98f4b7355 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.8-200.fc36.aarch64"
+      "evra": "5.19.9-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.8-200.fc36.aarch64"
+      "evra": "5.19.9-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.8-200.fc36.aarch64"
+      "evra": "5.19.9-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -706,7 +706,7 @@
       "evra": "1.14.4-1.fc36.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.2-1.fc36.noarch"
+      "evra": "2.17.4-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.412-1.fc36.noarch"
+      "evra": "2:9.0.475-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.412-1.fc36.aarch64"
+      "evra": "2:9.0.475-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-17T12:34:18Z",
+    "generated": "2022-09-18T20:53:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T02:20:57Z"
+        "generated": "2022-09-17T22:09:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-17T01:31:13Z"
+        "generated": "2022-09-18T01:08:01Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 985445a054..0f43db317c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.8-200.fc36.ppc64le"
+      "evra": "5.19.9-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.8-200.fc36.ppc64le"
+      "evra": "5.19.9-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.8-200.fc36.ppc64le"
+      "evra": "5.19.9-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -700,7 +700,7 @@
       "evra": "1.14.4-1.fc36.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.2-1.fc36.noarch"
+      "evra": "2.17.4-1.fc36.noarch"
     },
     "librtas": {
       "evra": "2.0.2-12.fc36.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.412-1.fc36.noarch"
+      "evra": "2:9.0.475-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.412-1.fc36.ppc64le"
+      "evra": "2:9.0.475-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-17T12:33:58Z",
+    "generated": "2022-09-18T20:53:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T02:20:08Z"
+        "generated": "2022-09-17T22:09:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-17T01:31:29Z"
+        "generated": "2022-09-18T01:08:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b008813a44..1319b54bfb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.8-200.fc36.s390x"
+      "evra": "5.19.9-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.8-200.fc36.s390x"
+      "evra": "5.19.9-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.8-200.fc36.s390x"
+      "evra": "5.19.9-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -658,7 +658,7 @@
       "evra": "1.14.4-1.fc36.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.2-1.fc36.noarch"
+      "evra": "2.17.4-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.s390x"
@@ -1132,10 +1132,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.412-1.fc36.noarch"
+      "evra": "2:9.0.475-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.412-1.fc36.s390x"
+      "evra": "2:9.0.475-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-17T12:33:42Z",
+    "generated": "2022-09-18T20:54:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T02:21:11Z"
+        "generated": "2022-09-17T22:09:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-17T01:31:37Z"
+        "generated": "2022-09-18T01:08:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3d08198633..5d14f514bd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.8-200.fc36.x86_64"
+      "evra": "5.19.9-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.8-200.fc36.x86_64"
+      "evra": "5.19.9-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.8-200.fc36.x86_64"
+      "evra": "5.19.9-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -712,7 +712,7 @@
       "evra": "1.14.4-1.fc36.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.2-1.fc36.noarch"
+      "evra": "2.17.4-1.fc36.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-2.fc36.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.412-1.fc36.noarch"
+      "evra": "2:9.0.475-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.412-1.fc36.x86_64"
+      "evra": "2:9.0.475-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-17T12:33:36Z",
+    "generated": "2022-09-18T20:52:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T02:20:56Z"
+        "generated": "2022-09-17T22:11:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-17T01:31:45Z"
+        "generated": "2022-09-18T01:08:36Z"
       }
     }
   }

From e9698b206ec6bc4463baa70edef6926139f0eba9 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 19 Sep 2022 17:35:21 -0400
Subject: [PATCH 1217/2157] tests/kola: update threshold for next-devel console
 switch

The console change has landed now, so update the threshold to keep tests
green.
---
 tests/kola/files/console-config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index 08fce3450e..9460ac417e 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -41,7 +41,7 @@ if is_fcos; then
     # Schedule based on:
     # https://lists.fedoraproject.org/archives/list/coreos-status@lists.fedoraproject.org/message/GHLXX4MXNHUEAXQLK6BZN45IQYHRVQB4/
     case "$(get_fcos_stream)" in
-    next-devel) threshold=20220923 ;;
+    next-devel) threshold=20220919 ;;
     next) threshold=20220930 ;;
     testing-devel|rawhide|branched) threshold=20221118 ;;
     testing) threshold=20221125 ;;

From e9ea2831f41bfb5456312774ba79649b1d2c25e1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 21 Sep 2022 02:21:21 +0000
Subject: [PATCH 1218/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/102/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c98f4b7355..81feef460a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -139,7 +139,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-2.fc36.aarch64"
+      "evra": "1.6.8-4.fc36.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.aarch64"
@@ -1222,7 +1222,7 @@
       "evra": "2.1.0-18.fc36.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc36.aarch64"
+      "evra": "1.2.3-1.fc36.aarch64"
     },
     "zincati": {
       "evra": "0.0.24-3.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-18T20:53:28Z",
+    "generated": "2022-09-21T01:45:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T22:09:38Z"
+        "generated": "2022-09-18T22:30:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-18T01:08:01Z"
+        "generated": "2022-09-21T01:03:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0f43db317c..e83282cb90 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -139,7 +139,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-2.fc36.ppc64le"
+      "evra": "1.6.8-4.fc36.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.ppc64le"
@@ -1225,7 +1225,7 @@
       "evra": "2.1.0-18.fc36.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc36.ppc64le"
+      "evra": "1.2.3-1.fc36.ppc64le"
     },
     "zincati": {
       "evra": "0.0.24-3.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-18T20:53:20Z",
+    "generated": "2022-09-21T01:45:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T22:09:27Z"
+        "generated": "2022-09-18T22:30:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-18T01:08:18Z"
+        "generated": "2022-09-21T01:03:38Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1319b54bfb..958bf805dd 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -136,7 +136,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-2.fc36.s390x"
+      "evra": "1.6.8-4.fc36.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.s390x"
@@ -1159,7 +1159,7 @@
       "evra": "2.1.0-18.fc36.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc36.s390x"
+      "evra": "1.2.3-1.fc36.s390x"
     },
     "zincati": {
       "evra": "0.0.24-3.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-18T20:54:16Z",
+    "generated": "2022-09-21T01:45:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T22:09:51Z"
+        "generated": "2022-09-18T22:30:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-18T01:08:28Z"
+        "generated": "2022-09-21T01:03:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5d14f514bd..936df1446b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,7 +139,7 @@
       "evra": "2:2.188.0-1.fc36.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-2.fc36.x86_64"
+      "evra": "1.6.8-4.fc36.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.0-1.fc36.x86_64"
@@ -1231,7 +1231,7 @@
       "evra": "2.1.0-18.fc36.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.2-1.fc36.x86_64"
+      "evra": "1.2.3-1.fc36.x86_64"
     },
     "zincati": {
       "evra": "0.0.24-3.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-18T20:52:45Z",
+    "generated": "2022-09-21T01:45:01Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-17T22:11:15Z"
+        "generated": "2022-09-18T22:31:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-18T01:08:36Z"
+        "generated": "2022-09-21T01:03:55Z"
       }
     }
   }

From eae10b1128fe868671bc4a711ed8f08338b226e4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 24 Sep 2022 22:06:07 +0000
Subject: [PATCH 1219/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/110/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 81feef460a..b75352abaa 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.188.0-1.fc36.noarch"
+      "evra": "2:2.190.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.aarch64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.9-200.fc36.aarch64"
+      "evra": "5.19.10-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.9-200.fc36.aarch64"
+      "evra": "5.19.10-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.9-200.fc36.aarch64"
+      "evra": "5.19.10-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1024,7 +1024,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-14.fc36.aarch64"
+      "evra": "2:6.2.0-15.fc36.aarch64"
     },
     "readline": {
       "evra": "8.1-6.fc36.aarch64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-21T01:45:53Z",
+    "generated": "2022-09-24T20:53:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-18T22:30:40Z"
+        "generated": "2022-09-23T22:18:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-21T01:03:21Z"
+        "generated": "2022-09-24T01:13:18Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e83282cb90..bd880909cc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.188.0-1.fc36.noarch"
+      "evra": "2:2.190.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.ppc64le"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.9-200.fc36.ppc64le"
+      "evra": "5.19.10-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.9-200.fc36.ppc64le"
+      "evra": "5.19.10-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.9-200.fc36.ppc64le"
+      "evra": "5.19.10-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-10.fc36.ppc64le"
     },
     "selinux-policy": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "servicelog": {
       "evra": "1.1.15-7.fc35.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-21T01:45:50Z",
+    "generated": "2022-09-24T20:53:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-18T22:30:22Z"
+        "generated": "2022-09-23T22:18:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-21T01:03:38Z"
+        "generated": "2022-09-24T01:13:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 958bf805dd..28438597f1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.188.0-1.fc36.noarch"
+      "evra": "2:2.190.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.s390x"
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.9-200.fc36.s390x"
+      "evra": "5.19.10-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.9-200.fc36.s390x"
+      "evra": "5.19.10-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.9-200.fc36.s390x"
+      "evra": "5.19.10-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -961,7 +961,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-14.fc36.s390x"
+      "evra": "2:6.2.0-15.fc36.s390x"
     },
     "readline": {
       "evra": "8.1-6.fc36.s390x"
@@ -1006,10 +1006,10 @@
       "evra": "4.8-10.fc36.s390x"
     },
     "selinux-policy": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-21T01:45:07Z",
+    "generated": "2022-09-24T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-18T22:30:53Z"
+        "generated": "2022-09-23T22:17:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-21T01:03:46Z"
+        "generated": "2022-09-24T01:13:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 936df1446b..b6aea91cfc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.188.0-1.fc36.noarch"
+      "evra": "2:2.190.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.x86_64"
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.9-200.fc36.x86_64"
+      "evra": "5.19.10-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.9-200.fc36.x86_64"
+      "evra": "5.19.10-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.9-200.fc36.x86_64"
+      "evra": "5.19.10-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.14-1.fc36.noarch"
+      "evra": "36.15-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-21T01:45:01Z",
+    "generated": "2022-09-24T20:52:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-18T22:31:22Z"
+        "generated": "2022-09-23T22:18:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-21T01:03:55Z"
+        "generated": "2022-09-24T01:13:51Z"
       }
     }
   }

From d384daf9a82c5844a4100bcbe8d1a77e46757c97 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 25 Sep 2022 06:08:20 +0000
Subject: [PATCH 1220/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 838eb4c322..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,14 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  coreos-installer:
-    evr: 0.16.0-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-90e83711b5
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.16.0-1.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-90e83711b5
-      type: fast-track
+packages: {}

From 0b48236f2737a0e6d65c04b2272445fc3d3e75ca Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 26 Sep 2022 21:40:04 +0000
Subject: [PATCH 1221/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/114/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b75352abaa..3812d95fec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.10-200.fc36.aarch64"
+      "evra": "5.19.11-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.10-200.fc36.aarch64"
+      "evra": "5.19.11-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.10-200.fc36.aarch64"
+      "evra": "5.19.11-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-24T20:53:37Z",
+    "generated": "2022-09-26T20:27:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-23T22:18:23Z"
+        "generated": "2022-09-25T22:08:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-24T01:13:18Z"
+        "generated": "2022-09-26T01:39:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bd880909cc..eb9f099188 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.10-200.fc36.ppc64le"
+      "evra": "5.19.11-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.10-200.fc36.ppc64le"
+      "evra": "5.19.11-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.10-200.fc36.ppc64le"
+      "evra": "5.19.11-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-24T20:53:32Z",
+    "generated": "2022-09-26T20:27:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-23T22:18:07Z"
+        "generated": "2022-09-25T22:08:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-24T01:13:34Z"
+        "generated": "2022-09-26T01:39:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 28438597f1..67dcba52c6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.10-200.fc36.s390x"
+      "evra": "5.19.11-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.10-200.fc36.s390x"
+      "evra": "5.19.11-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.10-200.fc36.s390x"
+      "evra": "5.19.11-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-24T20:52:51Z",
+    "generated": "2022-09-26T20:26:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-23T22:17:10Z"
+        "generated": "2022-09-25T22:07:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-24T01:13:42Z"
+        "generated": "2022-09-26T01:39:36Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b6aea91cfc..af58cf7398 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.10-200.fc36.x86_64"
+      "evra": "5.19.11-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.10-200.fc36.x86_64"
+      "evra": "5.19.11-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.10-200.fc36.x86_64"
+      "evra": "5.19.11-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-24T20:52:53Z",
+    "generated": "2022-09-26T20:26:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-23T22:18:57Z"
+        "generated": "2022-09-25T22:10:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-24T01:13:51Z"
+        "generated": "2022-09-26T01:39:45Z"
       }
     }
   }

From c20be07e5ef9971dbf3e4b371fe0a782edd59bb2 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 27 Sep 2022 12:57:05 -0400
Subject: [PATCH 1222/2157] denylist: drop denials for clhm.network-device-info

Drop denial as the test no longer fails because of
selinux-policy-36.13-3.fc36 update.

Closes coreos/fedora-coreos-tracker#1153
---
 kola-denylist.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 55b451c4ff..6145912d7d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -36,10 +36,3 @@
   snooze: 2022-09-27
   streams:
   - rawhide
-- pattern: ext.config.clhm.network-device-info
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1153
-  snooze: 2022-10-04
-  streams:
-  - testing-devel
-  - testing
-  - stable

From 3481a8c70b3ef16f6e31b84e9d5fd9313c2a7d87 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 23 Sep 2022 16:36:34 -0400
Subject: [PATCH 1223/2157] live-generator: Use a loop to work around potential
 races with udev on el8

This is a bigger hammer for the same issue as
https://github.com/coreos/fedora-coreos-config/pull/411/commits/170df10014e853bdfb5e82e484583d8c70db628c

While I haven't been able to reproduce the problem in synthetic
testing with qemu, I am increasingly confident that there *are*
other udev rules running concurrently with our mounting attempt.

This was motivated by https://issues.redhat.com/browse/OCPBUGS-1505
where I specifically noticed that the ISO appears as a USB
device (which is really itself virtual and provided by the iLO),
and appears much later system bootup than I see with qemu, even
with emulated USB CD-ROM.

A possibly concrete culprit is `cdrom_id`, which on RHEL8 does
`open(O_EXCL)` on the CD-ROM device. For more information, see:

https://github.com/coreos/fedora-coreos-config/pull/1986#pullrequestreview-1120840529

Co-authored-by: Jonathan Lebon <jonathan@jlebon.com>
---
 .../coreos-liveiso-persist-osmet.service      |  2 ++
 .../modules.d/35coreos-live/live-generator    | 36 ++++++++++++++++++-
 2 files changed, 37 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
index 95684102df..ea82d77430 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
@@ -4,6 +4,8 @@ DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionKernelCommandLine=coreos.liveiso
 RequiresMountsFor=/run/media/iso
+# on el8, the ISO is mounted by our own systemd unit
+After=run-media-iso-mount.service
 Before=initrd-switch-root.target
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index a755aa3625..dfca3469b7 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -51,6 +51,12 @@ ExecStartPost=/usr/sbin/ostree-cmdline stop
 EOF
 
 isoroot=$(getarg coreos.liveiso= ||:)
+is_rhcos8() {
+    # Unfortunately we can't rely on /etc/os-release since el8 doesn't seem to
+    # have https://github.com/dracutdevs/dracut/pull/655.
+    [[ "${isoroot}" == rhcos-* ]] && [[ $(uname -r) == *.el8* ]]
+}
+
 if [ -z "${isoroot}" ]; then
     # In this case, the rootfs is already unpacked into the initrd, or we need
     # to retrieve it
@@ -81,7 +87,32 @@ else
 After=${isosrc_escaped}
 Requires=${isosrc_escaped}
 EOF
-    cat >"${UNIT_DIR}/run-media-iso.mount" <<EOF
+    # Temporary hack for rhel8, where our mount unit can race with udev's
+    # cdrom_id using open(O_EXCL). See:
+    # https://github.com/coreos/fedora-coreos-config/pull/1986#pullrequestreview-1120840529
+    # https://issues.redhat.com/browse/OCPBUGS-1505
+    if is_rhcos8; then
+        cat >"${UNIT_DIR}/run-media-iso-mount.service" <<EOF
+# Automatically generated by live-generator
+
+[Unit]
+DefaultDependencies=false
+# Note that bootup(7) implies that initrd-root-device is After=basic.target
+# but that appears to not be the case.  We explicitly order after sysinit.target
+After=sysinit.target
+After=initrd-root-device.target
+Before=initrd-root-fs.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# See https://issues.redhat.com/browse/OCPBUGS-1505
+# and https://github.com/coreos/fedora-coreos-config/pull/411
+ExecStart=/bin/sh -c 'for x in {0..60}; do if mount -o ro -t iso9660 /${isosrc} /run/media/iso; then break; fi; sleep 1; done'
+EOF
+        add_requires run-media-iso-mount.service initrd-root-fs.target
+    else
+        cat >"${UNIT_DIR}/run-media-iso.mount" <<EOF
 # Automatically generated by live-generator
 
 [Unit]
@@ -100,6 +131,7 @@ Where=/run/media/iso
 Options=ro
 Type=iso9660
 EOF
+    fi
 
     cat >"${UNIT_DIR}/sysroot.mount" <<EOF
 # Automatically generated by live-generator
@@ -108,6 +140,8 @@ EOF
 DefaultDependencies=false
 Before=initrd-root-fs.target
 RequiresMountsFor=/run/media/iso
+# on el8, the ISO is mounted by our own systemd unit
+After=run-media-iso-mount.service
 
 [Mount]
 What=/run/media/iso/images/pxeboot/rootfs.img

From 472aa3e5fa6ae3246a402a5bdbb7b097c98c8a51 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Sep 2022 23:56:44 +0000
Subject: [PATCH 1224/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/124/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3812d95fec..27da6961b8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.32-1.fc36.aarch64"
+      "evra": "32:9.16.33-1.fc36.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.32-1.fc36.noarch"
+      "evra": "32:9.16.33-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.32-1.fc36.aarch64"
+      "evra": "32:9.16.33-1.fc36.aarch64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.aarch64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.4-2.fc36.aarch64"
+      "evra": "1.8.5-1.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-26T20:27:48Z",
+    "generated": "2022-09-28T23:28:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-25T22:08:27Z"
+        "generated": "2022-09-26T21:43:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-26T01:39:12Z"
+        "generated": "2022-09-28T11:58:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index eb9f099188..e3b0ba54e9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -67,13 +67,13 @@
       "evra": "1.07.1-15.fc36.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.16.32-1.fc36.ppc64le"
+      "evra": "32:9.16.33-1.fc36.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.16.32-1.fc36.noarch"
+      "evra": "32:9.16.33-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.32-1.fc36.ppc64le"
+      "evra": "32:9.16.33-1.fc36.ppc64le"
     },
     "bsdtar": {
       "evra": "3.5.3-3.fc36.ppc64le"
@@ -331,7 +331,7 @@
       "evra": "3.10.5-2.fc36.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.4-2.fc36.ppc64le"
+      "evra": "1.8.5-1.fc36.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-26T20:27:23Z",
+    "generated": "2022-09-28T23:28:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-25T22:08:13Z"
+        "generated": "2022-09-26T21:43:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-26T01:39:28Z"
+        "generated": "2022-09-28T11:59:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 67dcba52c6..e064f75d54 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.32-1.fc36.s390x"
+      "evra": "32:9.16.33-1.fc36.s390x"
     },
     "bind-license": {
-      "evra": "32:9.16.32-1.fc36.noarch"
+      "evra": "32:9.16.33-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.32-1.fc36.s390x"
+      "evra": "32:9.16.33-1.fc36.s390x"
     },
     "bsdtar": {
       "evra": "3.5.3-3.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-26T20:26:48Z",
+    "generated": "2022-09-28T23:27:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-25T22:07:59Z"
+        "generated": "2022-09-26T21:43:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-26T01:39:36Z"
+        "generated": "2022-09-28T11:59:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index af58cf7398..5a85300ef8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-6.fc36.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.32-1.fc36.x86_64"
+      "evra": "32:9.16.33-1.fc36.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.32-1.fc36.noarch"
+      "evra": "32:9.16.33-1.fc36.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.32-1.fc36.x86_64"
+      "evra": "32:9.16.33-1.fc36.x86_64"
     },
     "bootupd": {
       "evra": "0.2.6-2.fc36.x86_64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.4-2.fc36.x86_64"
+      "evra": "1.8.5-1.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-26T20:26:52Z",
+    "generated": "2022-09-28T23:27:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-25T22:10:12Z"
+        "generated": "2022-09-26T21:44:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-26T01:39:45Z"
+        "generated": "2022-09-28T11:59:19Z"
       }
     }
   }

From 2dbcb7f3b88a47e5d22db604b3d7705230dfc761 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 29 Sep 2022 15:13:34 -0400
Subject: [PATCH 1225/2157] denylist: extend snooze for systemd-tmpfiles issue
 tests

The fix has landed upstream but not been backported yet.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6145912d7d..e5bad45dbd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,12 +23,12 @@
   - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-09-27
+  snooze: 2022-10-27
   arches:
   - s390x
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-09-27
+  snooze: 2022-10-27
   arches:
   - s390x
 - pattern: coreos.boot-mirror*

From 8c8c269603eb7de884e70a1e2eb27e52e5e71105 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 29 Sep 2022 15:16:16 -0400
Subject: [PATCH 1226/2157] overrides: fast-track kernel-5.19.12-200.fc36

The revert of the problematic commit that caused the hung reboots
in our `coreos.boot-mirror` tests landed upstream in the 6.0 development
cycle and was backported to 5.19.12. This means the Fedora kernel
maintainer has dropped his manual revert of the commit and also that
rawhide should no longer see the issue (since it's already on 6.0 rc
kernels.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1282
---
 kola-denylist.yaml           |  5 -----
 manifest-lock.overrides.yaml | 20 +++++++++++++++++++-
 2 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e5bad45dbd..942a279207 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -31,8 +31,3 @@
   snooze: 2022-10-27
   arches:
   - s390x
-- pattern: coreos.boot-mirror*
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-  snooze: 2022-09-27
-  streams:
-  - rawhide
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..68a0228825 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,22 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  kernel:
+    evr: 5.19.12-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: fast-track
+  kernel-core:
+    evr: 5.19.12-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: fast-track
+  kernel-modules:
+    evr: 5.19.12-200.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
+      type: fast-track

From a890ab0aa5073fdc4053f83271aabca18e7c83b9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Sep 2022 22:05:06 +0000
Subject: [PATCH 1227/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/126/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 27da6961b8..924de0bda9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.11-200.fc36.aarch64"
+      "evra": "5.19.12-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.11-200.fc36.aarch64"
+      "evra": "5.19.12-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.11-200.fc36.aarch64"
+      "evra": "5.19.12-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1225,7 +1225,7 @@
       "evra": "1.2.3-1.fc36.aarch64"
     },
     "zincati": {
-      "evra": "0.0.24-3.fc36.aarch64"
+      "evra": "0.0.24-4.fc36.aarch64"
     },
     "zlib": {
       "evra": "1.2.11-33.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-28T23:28:16Z",
+    "generated": "2022-09-29T20:53:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-26T21:43:58Z"
+        "generated": "2022-09-29T20:13:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-28T11:58:46Z"
+        "generated": "2022-09-29T03:11:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e3b0ba54e9..a9b7e1fd10 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.11-200.fc36.ppc64le"
+      "evra": "5.19.12-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.11-200.fc36.ppc64le"
+      "evra": "5.19.12-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.11-200.fc36.ppc64le"
+      "evra": "5.19.12-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1228,7 +1228,7 @@
       "evra": "1.2.3-1.fc36.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.24-3.fc36.ppc64le"
+      "evra": "0.0.24-4.fc36.ppc64le"
     },
     "zlib": {
       "evra": "1.2.11-33.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-28T23:28:42Z",
+    "generated": "2022-09-29T20:53:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-26T21:43:05Z"
+        "generated": "2022-09-29T20:13:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-28T11:59:03Z"
+        "generated": "2022-09-29T03:12:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e064f75d54..a7d6811cf0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.11-200.fc36.s390x"
+      "evra": "5.19.12-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.11-200.fc36.s390x"
+      "evra": "5.19.12-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.11-200.fc36.s390x"
+      "evra": "5.19.12-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1162,7 +1162,7 @@
       "evra": "1.2.3-1.fc36.s390x"
     },
     "zincati": {
-      "evra": "0.0.24-3.fc36.s390x"
+      "evra": "0.0.24-4.fc36.s390x"
     },
     "zlib": {
       "evra": "1.2.11-33.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-28T23:27:31Z",
+    "generated": "2022-09-29T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-26T21:43:24Z"
+        "generated": "2022-09-29T20:11:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-28T11:59:11Z"
+        "generated": "2022-09-29T03:12:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5a85300ef8..6f353bdc05 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.11-200.fc36.x86_64"
+      "evra": "5.19.12-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.11-200.fc36.x86_64"
+      "evra": "5.19.12-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.11-200.fc36.x86_64"
+      "evra": "5.19.12-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1234,7 +1234,7 @@
       "evra": "1.2.3-1.fc36.x86_64"
     },
     "zincati": {
-      "evra": "0.0.24-3.fc36.x86_64"
+      "evra": "0.0.24-4.fc36.x86_64"
     },
     "zlib": {
       "evra": "1.2.11-33.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-28T23:27:35Z",
+    "generated": "2022-09-29T20:53:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-26T21:44:48Z"
+        "generated": "2022-09-29T20:13:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-28T11:59:19Z"
+        "generated": "2022-09-29T03:12:18Z"
       }
     }
   }

From 9d11bb7b9370fcb6ac1217789940d68533a1103d Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 27 Sep 2022 14:16:12 +0800
Subject: [PATCH 1228/2157] commonlib: add func to make sure unit is active

The code in tests will always return true if the unit does not exist:
`if [ $(systemctl show -p Result kdump.service) != "Result=success" ]; then`
See https://github.com/coreos/fedora-coreos-config/issues/1743

Make sure service is active, and wait for 20s if service is activating
---
 tests/kola/data/commonlib.sh   | 11 +++++++++++
 tests/kola/kdump/crash/test.sh |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index c9d2fc1bbe..09f5b4e941 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -71,3 +71,14 @@ cmdline_arg() {
     done
     echo "${value}"
 }
+
+# wait for 20s when in activating status
+is_service_active() {
+    local service="$1"
+    for x in {0..20}; do
+        [ $(systemctl is-active "${service}") != "activating" ] && break
+        sleep 1
+    done
+    # return actual result
+    systemctl is-active "${service}"
+}
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index d3e90201e9..02406e59a4 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -16,7 +16,7 @@ set -xeuo pipefail
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      if [ $(systemctl show -p Result kdump.service) != "Result=success" ]; then
+      if ! is_service_active kdump.service; then
           fatal "kdump.service failed to start"
       fi
       # Verify that the crashkernel reserved memory is large enough

From f706a4f66ad94e3424378423fd87245b5495d9bd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 30 Sep 2022 11:14:39 +0200
Subject: [PATCH 1229/2157] manifest: Exclude support for NM legacy ifcfg
 config format

Since Fedora 36, the ifcfg-rh plugin implementing support for reading
network configuration files in the legacy ifcfg format has been split
out into its own RPM subpackage.

We can now remove our configuration workaround and instead ensure that
we do not ship this plugin at all.

See: https://github.com/coreos/fedora-coreos-config/pull/1991
---
 manifests/fedora-coreos-base.yaml                        | 1 -
 manifests/fedora-coreos.yaml                             | 6 +++---
 overlay.d/14NetworkManager-plugins/statoverride          | 2 --
 .../conf.d/10-disable-default-plugins.conf               | 9 ---------
 overlay.d/README.md                                      | 5 -----
 5 files changed, 3 insertions(+), 20 deletions(-)
 delete mode 100644 overlay.d/14NetworkManager-plugins/statoverride
 delete mode 100644 overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index ba39393294..5f428b1858 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -19,7 +19,6 @@ ostree-layers:
   - overlay/05core
   - overlay/08nouveau
   - overlay/09misc
-  - overlay/14NetworkManager-plugins
   - overlay/20platform-chrony
 
 # Be minimal
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index ed3eac3c47..bc2d203551 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -134,9 +134,6 @@ postprocess:
 
 
 remove-from-packages:
-  # Drop NetworkManager support for ifcfg files, see also corresponding
-  # overlay.d/14NetworkManager-plugins
-  - [NetworkManager, /usr/lib64/NetworkManager/.*/libnm-settings-plugin-ifcfg-rh.so]
   # Drop some buggy sysusers fragments which do not match static IDs allocation:
   # https://bugzilla.redhat.com/show_bug.cgi?id=2105177
   - [dbus-common, /usr/lib/sysusers.d/dbus.conf]
@@ -169,3 +166,6 @@ exclude-packages:
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth
+  # Do not use legacy ifcfg config format in NetworkManager
+  # See https://github.com/coreos/fedora-coreos-config/pull/1991
+  - NetworkManager-initscripts-ifcfg-rh
diff --git a/overlay.d/14NetworkManager-plugins/statoverride b/overlay.d/14NetworkManager-plugins/statoverride
deleted file mode 100644
index 27a95affe2..0000000000
--- a/overlay.d/14NetworkManager-plugins/statoverride
+++ /dev/null
@@ -1,2 +0,0 @@
-# Config file for overriding permission bits on overlay files/dirs
-# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf b/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf
deleted file mode 100644
index cabc5bb7f1..0000000000
--- a/overlay.d/14NetworkManager-plugins/usr/lib/NetworkManager/conf.d/10-disable-default-plugins.conf
+++ /dev/null
@@ -1,9 +0,0 @@
-# Stop NetworkManager from trying to load the ifcfg-rh plugin by default,
-# which we don't ship.  This actually disables all default plugins, of which
-# ifcfg-rh is currently the only one.
-#
-# Note that we must do this for now because `-=` syntax doesn't work
-# with compiled-in defaults. Proposed upstream fix:
-# https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/491
-[main]
-plugins=
diff --git a/overlay.d/README.md b/overlay.d/README.md
index f57d9e9e57..ece8485284 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -28,11 +28,6 @@ https://bugzilla.redhat.com/show_bug.cgi?id=1700056
 
 Warning about `/etc/sysconfig`.
 
-14NetworkManager-plugins
-------------------------
-
-Disables the Red Hat Linux legacy `ifcfg` format.
-
 15fcos
 ------
 

From b2b636bf0c1ad64f3616855af690141b489adfb3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 1 Oct 2022 17:19:36 +0000
Subject: [PATCH 1230/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/131/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 924de0bda9..d5c82917a5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.3-1.fc36.aarch64"
+      "evra": "1.1.0-1.fc36.aarch64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.aarch64"
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-2.fc36.aarch64"
+      "evra": "5.1.16-3.fc36.aarch64"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -892,7 +892,7 @@
       "evra": "2.0-0.61.20160912git.fc36.aarch64"
     },
     "netavark": {
-      "evra": "1.0.3-3.fc36.aarch64"
+      "evra": "1.1.0-1.fc36.aarch64"
     },
     "nettle": {
       "evra": "3.8-1.fc36.aarch64"
@@ -991,10 +991,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "4:4.2.0-2.fc36.aarch64"
+      "evra": "4:4.2.1-2.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.2.0-2.fc36.aarch64"
+      "evra": "4:4.2.1-2.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-29T20:53:38Z",
+    "generated": "2022-10-01T16:08:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-29T20:13:02Z"
+        "generated": "2022-09-30T22:58:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-29T03:11:45Z"
+        "generated": "2022-10-01T01:04:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a9b7e1fd10..43e70bb430 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.3-1.fc36.ppc64le"
+      "evra": "1.1.0-1.fc36.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.ppc64le"
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-2.fc36.ppc64le"
+      "evra": "5.1.16-3.fc36.ppc64le"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -889,7 +889,7 @@
       "evra": "2.0-0.61.20160912git.fc36.ppc64le"
     },
     "netavark": {
-      "evra": "1.0.3-3.fc36.ppc64le"
+      "evra": "1.1.0-1.fc36.ppc64le"
     },
     "nettle": {
       "evra": "3.8-1.fc36.ppc64le"
@@ -991,10 +991,10 @@
       "evra": "1.8.0-2.fc36.ppc64le"
     },
     "podman": {
-      "evra": "4:4.2.0-2.fc36.ppc64le"
+      "evra": "4:4.2.1-2.fc36.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.2.0-2.fc36.ppc64le"
+      "evra": "4:4.2.1-2.fc36.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-29T20:53:16Z",
+    "generated": "2022-10-01T16:08:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-29T20:13:02Z"
+        "generated": "2022-09-30T23:00:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-29T03:12:02Z"
+        "generated": "2022-10-01T01:05:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a7d6811cf0..ce422bfe71 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.3-1.fc36.s390x"
+      "evra": "1.1.0-1.fc36.s390x"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.s390x"
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-2.fc36.s390x"
+      "evra": "5.1.16-3.fc36.s390x"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -835,7 +835,7 @@
       "evra": "2.0-0.61.20160912git.fc36.s390x"
     },
     "netavark": {
-      "evra": "1.0.3-3.fc36.s390x"
+      "evra": "1.1.0-1.fc36.s390x"
     },
     "nettle": {
       "evra": "3.8-1.fc36.s390x"
@@ -928,10 +928,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "4:4.2.0-2.fc36.s390x"
+      "evra": "4:4.2.1-2.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.2.0-2.fc36.s390x"
+      "evra": "4:4.2.1-2.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-29T20:53:02Z",
+    "generated": "2022-10-01T16:07:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-29T20:11:56Z"
+        "generated": "2022-09-30T22:58:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-29T03:12:10Z"
+        "generated": "2022-10-01T01:05:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6f353bdc05..fa9e001729 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.0.3-1.fc36.x86_64"
+      "evra": "1.1.0-1.fc36.x86_64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.x86_64"
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-2.fc36.x86_64"
+      "evra": "5.1.16-3.fc36.x86_64"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -904,7 +904,7 @@
       "evra": "2.0-0.61.20160912git.fc36.x86_64"
     },
     "netavark": {
-      "evra": "1.0.3-3.fc36.x86_64"
+      "evra": "1.1.0-1.fc36.x86_64"
     },
     "nettle": {
       "evra": "3.8-1.fc36.x86_64"
@@ -1003,10 +1003,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "4:4.2.0-2.fc36.x86_64"
+      "evra": "4:4.2.1-2.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.2.0-2.fc36.x86_64"
+      "evra": "4:4.2.1-2.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-09-29T20:53:00Z",
+    "generated": "2022-10-01T16:07:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-29T20:13:52Z"
+        "generated": "2022-09-30T22:59:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-09-29T03:12:18Z"
+        "generated": "2022-10-01T01:05:27Z"
       }
     }
   }

From cf9a54f05d61da905d4485bb9dedaa0c7fdd0386 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 1 Oct 2022 18:06:27 +0000
Subject: [PATCH 1231/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 20 +-------------------
 1 file changed, 1 insertion(+), 19 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 68a0228825..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,22 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  kernel:
-    evr: 5.19.12-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
-  kernel-core:
-    evr: 5.19.12-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
-  kernel-modules:
-    evr: 5.19.12-200.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee88ba9ed6
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1282
-      type: fast-track
+packages: {}

From f95da88b4fb35c4ab60718b5362903c15921ec59 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 3 Oct 2022 12:54:48 -0700
Subject: [PATCH 1232/2157] kola/validate-symlink: Update broken symlink list

Add qcom/LENOVO/21BX.xz to the broken symlinks list.
Ref issue: https://github.com/coreos/fedora-coreos-tracker/issues/1310
---
 tests/kola/files/validate-symlinks | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 7210970452..79c3ffe1ea 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -21,6 +21,7 @@ list_broken_symlinks_skip=(
     '/etc/xdg/systemd/user'
     '/usr/lib/.build-id/'
     '/usr/lib/firmware/brcm/brcmfmac43455-sdio.AW-CM256SM.txt.xz'
+    '/usr/lib/firmware/qcom/LENOVO/21BX.xz'
     '/usr/lib/modules/'
     '/usr/share/rhel/secrets/etc-pki-entitlement'
     '/usr/share/rhel/secrets/redhat.repo'

From db2ddc6c4fd9cb8d03a78ae261268ef6c1e63472 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 3 Oct 2022 22:12:03 +0000
Subject: [PATCH 1233/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/139/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d5c82917a5..192b1f9bd8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.19-2.fc36.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.aarch64"
@@ -238,13 +238,13 @@
       "evra": "4.2-3.fc36.aarch64"
     },
     "dracut": {
-      "evra": "056-1.fc36.aarch64"
+      "evra": "057-3.fc36.aarch64"
     },
     "dracut-network": {
-      "evra": "056-1.fc36.aarch64"
+      "evra": "057-3.fc36.aarch64"
     },
     "dracut-squash": {
-      "evra": "056-1.fc36.aarch64"
+      "evra": "057-3.fc36.aarch64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-2.fc36.aarch64"
@@ -412,7 +412,7 @@
       "evra": "56-1.fc36.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.aarch64"
@@ -826,10 +826,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -916,7 +916,7 @@
       "evra": "2.0.14-5.fc36.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-01T16:08:43Z",
+    "generated": "2022-10-03T20:54:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-30T22:58:40Z"
+        "generated": "2022-10-03T02:19:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-01T01:04:53Z"
+        "generated": "2022-10-03T01:01:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 43e70bb430..404a7045e2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.19-2.fc36.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.ppc64le"
@@ -238,13 +238,13 @@
       "evra": "4.2-3.fc36.ppc64le"
     },
     "dracut": {
-      "evra": "056-1.fc36.ppc64le"
+      "evra": "057-3.fc36.ppc64le"
     },
     "dracut-network": {
-      "evra": "056-1.fc36.ppc64le"
+      "evra": "057-3.fc36.ppc64le"
     },
     "dracut-squash": {
-      "evra": "056-1.fc36.ppc64le"
+      "evra": "057-3.fc36.ppc64le"
     },
     "e2fsprogs": {
       "evra": "1.46.5-2.fc36.ppc64le"
@@ -406,7 +406,7 @@
       "evra": "56-1.fc36.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.ppc64le"
@@ -826,10 +826,10 @@
       "evra": "2.5.1-31.fc36.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.ppc64le"
@@ -913,7 +913,7 @@
       "evra": "2.0.14-5.fc36.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-01T16:08:41Z",
+    "generated": "2022-10-03T20:54:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-30T23:00:11Z"
+        "generated": "2022-10-03T02:19:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-01T01:05:10Z"
+        "generated": "2022-10-03T01:01:23Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ce422bfe71..badff9e643 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.19-2.fc36.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.s390x"
@@ -235,13 +235,13 @@
       "evra": "4.2-3.fc36.s390x"
     },
     "dracut": {
-      "evra": "056-1.fc36.s390x"
+      "evra": "057-3.fc36.s390x"
     },
     "dracut-network": {
-      "evra": "056-1.fc36.s390x"
+      "evra": "057-3.fc36.s390x"
     },
     "dracut-squash": {
-      "evra": "056-1.fc36.s390x"
+      "evra": "057-3.fc36.s390x"
     },
     "e2fsprogs": {
       "evra": "1.46.5-2.fc36.s390x"
@@ -379,7 +379,7 @@
       "evra": "56-1.fc36.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.s390x"
@@ -772,10 +772,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.18.1-20.fc36.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-01T16:07:58Z",
+    "generated": "2022-10-03T20:53:24Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-30T22:58:10Z"
+        "generated": "2022-10-03T02:18:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-01T01:05:18Z"
+        "generated": "2022-10-03T01:01:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fa9e001729..96547a57e7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.19-2.fc36.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.x86_64"
@@ -238,13 +238,13 @@
       "evra": "4.2-3.fc36.x86_64"
     },
     "dracut": {
-      "evra": "056-1.fc36.x86_64"
+      "evra": "057-3.fc36.x86_64"
     },
     "dracut-network": {
-      "evra": "056-1.fc36.x86_64"
+      "evra": "057-3.fc36.x86_64"
     },
     "dracut-squash": {
-      "evra": "056-1.fc36.x86_64"
+      "evra": "057-3.fc36.x86_64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-2.fc36.x86_64"
@@ -418,7 +418,7 @@
       "evra": "56-1.fc36.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.x86_64"
@@ -835,10 +835,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -928,7 +928,7 @@
       "evra": "2.0.14-5.fc36.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220815-139.fc36.noarch"
+      "evra": "20220913-140.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-01T16:07:56Z",
+    "generated": "2022-10-03T20:53:23Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-09-30T22:59:59Z"
+        "generated": "2022-10-03T02:20:56Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-01T01:05:27Z"
+        "generated": "2022-10-03T01:01:40Z"
       }
     }
   }

From 351c9202d0eee76065b142e1056f2ee06390ffc2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 4 Oct 2022 10:56:06 -0400
Subject: [PATCH 1234/2157] tests/kola: add ext.config.platforms.aws.nvme test

This test ensures that if an nvme device exists it is accessible.
See https://github.com/coreos/fedora-coreos-tracker/issues/1306

This commit also denylists the test with a snooze for the next few
weeks. The hope is that Amazon does the firmware rollout soon.
---
 kola-denylist.yaml                         |  3 ++
 tests/kola/platforms/aws/data/commonlib.sh |  1 +
 tests/kola/platforms/aws/nvme              | 50 ++++++++++++++++++++++
 3 files changed, 54 insertions(+)
 create mode 120000 tests/kola/platforms/aws/data/commonlib.sh
 create mode 100755 tests/kola/platforms/aws/nvme

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 942a279207..40d50287d1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -31,3 +31,6 @@
   snooze: 2022-10-27
   arches:
   - s390x
+- pattern: ext.config.platforms.aws.nvme
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306
+  snooze: 2022-10-21
diff --git a/tests/kola/platforms/aws/data/commonlib.sh b/tests/kola/platforms/aws/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/platforms/aws/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/platforms/aws/nvme b/tests/kola/platforms/aws/nvme
new file mode 100755
index 0000000000..7db2d020a0
--- /dev/null
+++ b/tests/kola/platforms/aws/nvme
@@ -0,0 +1,50 @@
+#!/bin/bash
+# Test to make sure AWS instances with nvme storage get a device
+# properly created for it. See https://github.com/coreos/fedora-coreos-tracker/issues/1306
+#
+## kola:
+##   # This is a read-only test and can be run with other tests
+##   exclusive: false
+##   # This test is targeted at AWS
+##   platforms: aws
+
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# We'll check to see if anything is listed in `nvme list-subsys`
+# and then run the test based on that. Example output:
+# 
+# [core@ip-10-0-1-155 ~]$ nvme list-subsys -o json
+# [
+#   {
+#     "HostNQN":"nqn.2014-08.org.nvmexpress:uuid:c2c16640-0d5c-472a-846c-2f981c5914db",
+#     "HostID":"c37c43ca-31a3-4015-8704-1f493081da36",
+#     "Subsystems":[
+#       {
+#         "Name":"nvme-subsys0",
+#         "NQN":"nqn.2014.08.org.nvmexpress:1d0f0000AWS2710D45D72D3C9D4AAmazon EC2 NVMe Instance Storage",
+#         "Paths":[
+#           {
+#             "Name":"nvme0",
+#             "Transport":"pcie",
+#             "Address":"0000:00:1e.0",
+#             "State":"live"
+#           }
+#         ]
+#       }
+#     ]
+#   }
+# ]
+nvme_info=$(nvme list-subsys -o json || true)
+has_nvme=$(jq -r ".[].Subsystems[].Paths[] | select(.Name == \"nvme0\").Name" <<< "$nvme_info")
+if [ -n "${has_nvme}" ]; then
+    if [ ! -e '/dev/nvme0n1' ]; then
+        fatal "instance has nvme device but no nvme0n1 accessible"
+    fi
+else
+    echo "it appears this system has no nvme devices. skipping"
+fi
+
+ok aws nvme device

From 8c73cff830f66792c5d27bc3377f83e066488093 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 4 Oct 2022 10:57:35 -0400
Subject: [PATCH 1235/2157] tests/kola: add ext.config.platforms.aws.assert-xen
 test

This is just an extra layer to make sure that when we run an AWS
Xen test in our pipeline that the instance is legitimately a Xen
instance. It will only be run if the caller requested the test
by name or via the aws-xen-test tag.
---
 tests/kola/platforms/aws/assert-xen | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100755 tests/kola/platforms/aws/assert-xen

diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
new file mode 100755
index 0000000000..88394be5e0
--- /dev/null
+++ b/tests/kola/platforms/aws/assert-xen
@@ -0,0 +1,25 @@
+#!/bin/bash
+# Test to make sure the booted AWS instance is XEN based
+#
+## kola:
+##   # This is a read-only test and can be run with other tests
+##   exclusive: false
+##   # This test is targeted at AWS
+##   platforms: aws
+##   # Force this test to not run by default unless named specifically
+##   # or `--tag aws-xen-test` is passed to `kola run`. i.e. this test
+##   # should only run on Xen instances and the caller should request
+##   # the test.
+##   requiredTag: aws-xen-test
+#
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+hypervisor=$(curl http://169.254.169.254/2022-09-24/meta-data/system || true)
+if [ "${hypervisor}" != "xen" ]; then
+    fatal "expected xen instance type"
+fi
+
+ok xen instance type

From 9de03f5e84f1a78c5c59557971245df5d36393ac Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 6 Oct 2022 14:43:19 +0000
Subject: [PATCH 1236/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/147/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 192b1f9bd8..f6cd7fcb45 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.12-200.fc36.aarch64"
+      "evra": "5.19.13-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.12-200.fc36.aarch64"
+      "evra": "5.19.13-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.12-200.fc36.aarch64"
+      "evra": "5.19.13-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-03T20:54:08Z",
+    "generated": "2022-10-06T13:24:10Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-03T02:19:25Z"
+        "generated": "2022-10-05T22:11:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-03T01:01:05Z"
+        "generated": "2022-10-05T14:17:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 404a7045e2..d885661e48 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.12-200.fc36.ppc64le"
+      "evra": "5.19.13-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.12-200.fc36.ppc64le"
+      "evra": "5.19.13-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.12-200.fc36.ppc64le"
+      "evra": "5.19.13-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-03T20:54:03Z",
+    "generated": "2022-10-06T13:23:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-03T02:19:14Z"
+        "generated": "2022-10-05T22:10:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-03T01:01:23Z"
+        "generated": "2022-10-05T14:18:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index badff9e643..a7b80f4dc7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.12-200.fc36.s390x"
+      "evra": "5.19.13-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.12-200.fc36.s390x"
+      "evra": "5.19.13-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.12-200.fc36.s390x"
+      "evra": "5.19.13-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-03T20:53:24Z",
+    "generated": "2022-10-06T13:23:03Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-03T02:18:57Z"
+        "generated": "2022-10-05T22:10:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-03T01:01:32Z"
+        "generated": "2022-10-05T14:18:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 96547a57e7..7d8809e1e3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.12-200.fc36.x86_64"
+      "evra": "5.19.13-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.12-200.fc36.x86_64"
+      "evra": "5.19.13-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.12-200.fc36.x86_64"
+      "evra": "5.19.13-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-03T20:53:23Z",
+    "generated": "2022-10-06T13:23:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-03T02:20:56Z"
+        "generated": "2022-10-05T22:11:27Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-03T01:01:40Z"
+        "generated": "2022-10-05T14:18:29Z"
       }
     }
   }

From 5af64a1535885f89515ebc08d3c857b0cc79cf17 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 9 Oct 2022 22:38:13 +0000
Subject: [PATCH 1237/2157] overrides: pin bash-5.1.16-3.fc36

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..5563588d39 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  bash:
+    evr: 5.1.16-3.fc36
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1313
+      type: pin

From 1a5fa3be94accbb7558d114452f14fe72bcfdadd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 10 Oct 2022 17:11:02 +0000
Subject: [PATCH 1238/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/160/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f6cd7fcb45..500af316e8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -34,7 +34,7 @@
       "evra": "5.3.0-2.fc36.aarch64"
     },
     "alternatives": {
-      "evra": "1.19-2.fc36.aarch64"
+      "evra": "1.21-1.fc36.aarch64"
     },
     "amd-gpu-firmware": {
       "evra": "20220913-140.fc36.noarch"
@@ -274,7 +274,7 @@
       "evra": "2:5.19-1.fc36.aarch64"
     },
     "expat": {
-      "evra": "2.4.7-1.fc36.aarch64"
+      "evra": "2.4.9-1.fc36.aarch64"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.13-200.fc36.aarch64"
+      "evra": "5.19.14-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.13-200.fc36.aarch64"
+      "evra": "5.19.14-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.13-200.fc36.aarch64"
+      "evra": "5.19.14-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -925,10 +925,10 @@
       "evra": "6.9.8-1.fc36.aarch64"
     },
     "openldap": {
-      "evra": "2.6.2-3.fc36.aarch64"
+      "evra": "2.6.3-1.fc36.aarch64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-3.fc36.aarch64"
+      "evra": "2.6.3-1.fc36.aarch64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.aarch64"
@@ -1183,7 +1183,7 @@
       "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022c-1.fc36.noarch"
+      "evra": "2022d-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-06T13:24:10Z",
+    "generated": "2022-10-10T16:27:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-05T22:11:46Z"
+        "generated": "2022-10-10T15:41:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-05T14:17:57Z"
+        "generated": "2022-10-10T11:08:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d885661e48..08c6d49bb9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -34,7 +34,7 @@
       "evra": "5.3.0-2.fc36.ppc64le"
     },
     "alternatives": {
-      "evra": "1.19-2.fc36.ppc64le"
+      "evra": "1.21-1.fc36.ppc64le"
     },
     "amd-gpu-firmware": {
       "evra": "20220913-140.fc36.noarch"
@@ -265,7 +265,7 @@
       "evra": "2:5.19-1.fc36.ppc64le"
     },
     "expat": {
-      "evra": "2.4.7-1.fc36.ppc64le"
+      "evra": "2.4.9-1.fc36.ppc64le"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.13-200.fc36.ppc64le"
+      "evra": "5.19.14-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.13-200.fc36.ppc64le"
+      "evra": "5.19.14-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.13-200.fc36.ppc64le"
+      "evra": "5.19.14-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -922,10 +922,10 @@
       "evra": "6.9.8-1.fc36.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.2-3.fc36.ppc64le"
+      "evra": "2.6.3-1.fc36.ppc64le"
     },
     "openldap-compat": {
-      "evra": "2.6.2-3.fc36.ppc64le"
+      "evra": "2.6.3-1.fc36.ppc64le"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.ppc64le"
@@ -1186,7 +1186,7 @@
       "evra": "3.2.0-3.fc36.ppc64le"
     },
     "tzdata": {
-      "evra": "2022c-1.fc36.noarch"
+      "evra": "2022d-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-06T13:23:46Z",
+    "generated": "2022-10-10T16:26:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-05T22:10:40Z"
+        "generated": "2022-10-10T15:40:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-05T14:18:13Z"
+        "generated": "2022-10-10T11:09:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a7b80f4dc7..c372c27af1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -34,7 +34,7 @@
       "evra": "5.3.0-2.fc36.s390x"
     },
     "alternatives": {
-      "evra": "1.19-2.fc36.s390x"
+      "evra": "1.21-1.fc36.s390x"
     },
     "amd-gpu-firmware": {
       "evra": "20220913-140.fc36.noarch"
@@ -262,7 +262,7 @@
       "evra": "2:5.19-1.fc36.s390x"
     },
     "expat": {
-      "evra": "2.4.7-1.fc36.s390x"
+      "evra": "2.4.9-1.fc36.s390x"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.13-200.fc36.s390x"
+      "evra": "5.19.14-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.13-200.fc36.s390x"
+      "evra": "5.19.14-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.13-200.fc36.s390x"
+      "evra": "5.19.14-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -865,10 +865,10 @@
       "evra": "6.9.8-1.fc36.s390x"
     },
     "openldap": {
-      "evra": "2.6.2-3.fc36.s390x"
+      "evra": "2.6.3-1.fc36.s390x"
     },
     "openldap-compat": {
-      "evra": "2.6.2-3.fc36.s390x"
+      "evra": "2.6.3-1.fc36.s390x"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.s390x"
@@ -1117,7 +1117,7 @@
       "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
-      "evra": "2022c-1.fc36.noarch"
+      "evra": "2022d-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-06T13:23:03Z",
+    "generated": "2022-10-10T16:26:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-05T22:10:18Z"
+        "generated": "2022-10-10T15:40:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-05T14:18:21Z"
+        "generated": "2022-10-10T11:09:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7d8809e1e3..9d8ed1c9e5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -34,7 +34,7 @@
       "evra": "5.3.0-2.fc36.x86_64"
     },
     "alternatives": {
-      "evra": "1.19-2.fc36.x86_64"
+      "evra": "1.21-1.fc36.x86_64"
     },
     "amd-gpu-firmware": {
       "evra": "20220913-140.fc36.noarch"
@@ -274,7 +274,7 @@
       "evra": "2:5.19-1.fc36.x86_64"
     },
     "expat": {
-      "evra": "2.4.7-1.fc36.x86_64"
+      "evra": "2.4.9-1.fc36.x86_64"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.13-200.fc36.x86_64"
+      "evra": "5.19.14-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.13-200.fc36.x86_64"
+      "evra": "5.19.14-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.13-200.fc36.x86_64"
+      "evra": "5.19.14-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -937,10 +937,10 @@
       "evra": "6.9.8-1.fc36.x86_64"
     },
     "openldap": {
-      "evra": "2.6.2-3.fc36.x86_64"
+      "evra": "2.6.3-1.fc36.x86_64"
     },
     "openldap-compat": {
-      "evra": "2.6.2-3.fc36.x86_64"
+      "evra": "2.6.3-1.fc36.x86_64"
     },
     "openssh": {
       "evra": "8.8p1-1.fc36.1.x86_64"
@@ -1192,7 +1192,7 @@
       "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022c-1.fc36.noarch"
+      "evra": "2022d-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-06T13:23:13Z",
+    "generated": "2022-10-10T16:26:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-05T22:11:27Z"
+        "generated": "2022-10-10T15:40:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-05T14:18:29Z"
+        "generated": "2022-10-10T11:09:29Z"
       }
     }
   }

From e8135307a06d3f0ddb3d50b3c2d5133380113569 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 12 Oct 2022 09:16:37 -0400
Subject: [PATCH 1239/2157] tests: Bump RAM allocation for tests that install
 packages

This is similar to
https://github.com/coreos/fedora-coreos-config/commit/3dee27d
except for rpm-ostree on the host system.
---
 tests/kola/extensions/module  | 2 +-
 tests/kola/extensions/package | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index e6b0f85ba1..3dffd4465f 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -2,7 +2,7 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15 }
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15, "minMemory": 1536 }
 #
 # This test ensures that we can install some common tools as OS extensions.
 #
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index d91b4e2f0f..a9d9d6c6db 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -2,7 +2,7 @@
 set -xeuo pipefail
 
 # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15 }
+# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15, "minMemory": 1536 }
 #
 # This test ensures that we can install some common tools as OS extensions.
 #

From bbc331576fe3c695e5a9e728bb5fb673d8aa3e37 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 12 Oct 2022 22:11:05 +0000
Subject: [PATCH 1240/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/167/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 500af316e8..2012c787c9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.5-1.fc36.aarch64"
+      "evra": "1.8.6-1.fc36.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.aarch64"
@@ -1027,7 +1027,7 @@
       "evra": "2:6.2.0-15.fc36.aarch64"
     },
     "readline": {
-      "evra": "8.1-6.fc36.aarch64"
+      "evra": "8.2-2.fc36.aarch64"
     },
     "rpcbind": {
       "evra": "1.2.6-2.fc36.aarch64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-10.fc36.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1081,10 +1081,10 @@
       "evra": "1.46-3.fc36.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-4.fc36.aarch64"
+      "evra": "2:4.11.1-5.fc36.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-4.fc36.aarch64"
+      "evra": "2:4.11.1-5.fc36.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-10T16:27:20Z",
+    "generated": "2022-10-12T20:55:12Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T15:41:09Z"
+        "generated": "2022-10-10T17:14:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-10T11:08:54Z"
+        "generated": "2022-10-12T17:42:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 08c6d49bb9..54752355c0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,7 +331,7 @@
       "evra": "3.10.5-2.fc36.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.5-1.fc36.ppc64le"
+      "evra": "1.8.6-1.fc36.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.ppc64le"
@@ -1030,7 +1030,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "readline": {
-      "evra": "8.1-6.fc36.ppc64le"
+      "evra": "8.2-2.fc36.ppc64le"
     },
     "rpcbind": {
       "evra": "1.2.6-2.fc36.ppc64le"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-10.fc36.ppc64le"
     },
     "selinux-policy": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "servicelog": {
       "evra": "1.1.15-7.fc35.ppc64le"
@@ -1087,10 +1087,10 @@
       "evra": "1.46-3.fc36.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-4.fc36.ppc64le"
+      "evra": "2:4.11.1-5.fc36.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-4.fc36.ppc64le"
+      "evra": "2:4.11.1-5.fc36.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-10T16:26:57Z",
+    "generated": "2022-10-12T20:55:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T15:40:48Z"
+        "generated": "2022-10-10T17:14:31Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-10T11:09:12Z"
+        "generated": "2022-10-12T17:43:04Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c372c27af1..1b00080b62 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -964,7 +964,7 @@
       "evra": "2:6.2.0-15.fc36.s390x"
     },
     "readline": {
-      "evra": "8.1-6.fc36.s390x"
+      "evra": "8.2-2.fc36.s390x"
     },
     "rpcbind": {
       "evra": "1.2.6-2.fc36.s390x"
@@ -1006,10 +1006,10 @@
       "evra": "4.8-10.fc36.s390x"
     },
     "selinux-policy": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1021,10 +1021,10 @@
       "evra": "1.46-3.fc36.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-4.fc36.s390x"
+      "evra": "2:4.11.1-5.fc36.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-4.fc36.s390x"
+      "evra": "2:4.11.1-5.fc36.s390x"
     },
     "skopeo": {
       "evra": "1:1.9.2-1.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-10T16:26:21Z",
+    "generated": "2022-10-12T20:55:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T15:40:20Z"
+        "generated": "2022-10-10T17:13:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-10T11:09:20Z"
+        "generated": "2022-10-12T17:43:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9d8ed1c9e5..cb1ba0b3b1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-2.fc36.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.5-1.fc36.x86_64"
+      "evra": "1.8.6-1.fc36.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-2.fc36.x86_64"
@@ -1036,7 +1036,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "readline": {
-      "evra": "8.1-6.fc36.x86_64"
+      "evra": "8.2-2.fc36.x86_64"
     },
     "rpcbind": {
       "evra": "1.2.6-2.fc36.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.8-10.fc36.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.15-1.fc36.noarch"
+      "evra": "36.16-1.fc36.noarch"
     },
     "setup": {
       "evra": "2.14.1-1.fc36.noarch"
@@ -1090,10 +1090,10 @@
       "evra": "1.46-3.fc36.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-4.fc36.x86_64"
+      "evra": "2:4.11.1-5.fc36.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-4.fc36.x86_64"
+      "evra": "2:4.11.1-5.fc36.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.1-3.fc35.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-10T16:26:47Z",
+    "generated": "2022-10-12T20:54:28Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T15:40:55Z"
+        "generated": "2022-10-10T17:15:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-10T11:09:29Z"
+        "generated": "2022-10-12T17:43:21Z"
       }
     }
   }

From 37866426cbec0c026c35aab9618717d51c13d881 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 13 Oct 2022 13:45:53 -0400
Subject: [PATCH 1241/2157] ci: migrate to new directory and method names

The previous `fcos*` ones are deprecated.
---
 .cci.jenkinsfile | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 2cca3b95b6..203da74428 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -9,7 +9,7 @@ cosaPod {
     shwrap("cd config && ci/validate")
 
     shwrap("""
-        mkdir -p /srv/fcos && cd /srv/fcos
+        mkdir -p /srv/coreos && cd /srv/coreos
         cosa init ${env.WORKSPACE}/config
         curl -LO https://raw.githubusercontent.com/coreos/fedora-coreos-releng-automation/main/scripts/download-overrides.py
         python3 download-overrides.py
@@ -20,8 +20,8 @@ cosaPod {
     // use a --parent-build arg so we can diff later and it matches prod
     def parent_arg = ""
     def parent_commit = ""
-    if (shwrapRc("test -e /srv/fcos/builds/latest/${basearch}/meta.json") == 0) {
-        shwrap("cp /srv/fcos/builds/latest/${basearch}/meta.json .") // readJSON wants it in the WORKSPACE
+    if (shwrapRc("test -e /srv/coreos/builds/latest/${basearch}/meta.json") == 0) {
+        shwrap("cp /srv/coreos/builds/latest/${basearch}/meta.json .") // readJSON wants it in the WORKSPACE
         def meta = readJSON file: "meta.json"
         def version = meta["buildid"]
         parent_arg = "--parent-build ${version}"
@@ -35,24 +35,24 @@ cosaPod {
     if (env.CHANGE_TARGET in mechanical_streams) {
         no_strict_build = true
     }
-    fcosBuild(skipInit: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
+    cosaBuild(skipInit: true, noStrict: no_strict_build, extraFetchArgs: '--with-cosa-overrides', extraArgs: parent_arg)
 
     parallel metal: {
-        shwrap("cd /srv/fcos && cosa buildextend-metal")
+        shwrap("cd /srv/coreos && cosa buildextend-metal")
     }, metal4k: {
-        shwrap("cd /srv/fcos && cosa buildextend-metal4k")
+        shwrap("cd /srv/coreos && cosa buildextend-metal4k")
     }
 
     stage("Test ISO") {
-        shwrap("cd /srv/fcos && cosa buildextend-live")
-        fcosKolaTestIso(cosaDir: "/srv/fcos", extraArgs4k: "--no-pxe")
+        shwrap("cd /srv/coreos && cosa buildextend-live")
+        kolaTestIso(extraArgs4k: "--no-pxe")
     }
 
     // also print the pkgdiff as a separate stage to make it more visible
     if (parent_arg != "") {
         stage("RPM Diff") {
             shwrap("""
-                cd /srv/fcos
+                cd /srv/coreos
                 new_commit=\$(jq -r '.["ostree-commit"]' builds/latest/${basearch}/meta.json)
                 rpm-ostree db diff --repo tmp/repo ${parent_commit} \${new_commit} | tee tmp/diff.txt
                 if grep -q Downgraded tmp/diff.txt; then

From 88af117d1d2c5e828e5e039adfa03c7cc66fc733 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 14 Oct 2022 22:16:02 +0000
Subject: [PATCH 1242/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/171/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2012c787c9..fea7171faf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -97,7 +97,7 @@
       "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-5.fc36.aarch64"
+      "evra": "0.1.7-10.fc36.aarch64"
     },
     "chrony": {
       "evra": "4.2-5.fc36.aarch64"
@@ -121,7 +121,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-2.fc36.aarch64"
+      "evra": "2:2.1.4-3.fc36.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -196,16 +196,16 @@
       "evra": "2.1.27-18.fc36.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.0-1.fc36.aarch64"
+      "evra": "1:1.14.4-1.fc36.aarch64"
     },
     "dbus-broker": {
       "evra": "32-1.fc36.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.0-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.0-1.fc36.aarch64"
+      "evra": "1:1.14.4-1.fc36.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.175-7.fc36.aarch64"
@@ -328,7 +328,7 @@
       "evra": "2.9.9-14.fc36.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-1.fc36.aarch64"
+      "evra": "1.9-6.fc36.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.aarch64"
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.14-200.fc36.aarch64"
+      "evra": "5.19.15-201.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.14-200.fc36.aarch64"
+      "evra": "5.19.15-201.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.14-200.fc36.aarch64"
+      "evra": "5.19.15-201.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1012,7 +1012,7 @@
       "evra": "1.18-7.fc36.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.aarch64"
+      "evra": "3.3.17-4.fc36.1.aarch64"
     },
     "protobuf-c": {
       "evra": "1.4.1-2.fc36.aarch64"
@@ -1093,7 +1093,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.9.2-1.fc36.aarch64"
+      "evra": "1:1.10.0-3.fc36.aarch64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.475-1.fc36.noarch"
+      "evra": "2:9.0.720-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.475-1.fc36.aarch64"
+      "evra": "2:9.0.720-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-12T20:55:12Z",
+    "generated": "2022-10-14T20:53:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T17:14:50Z"
+        "generated": "2022-10-13T20:45:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-12T17:42:46Z"
+        "generated": "2022-10-14T12:45:37Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 54752355c0..fa9b83317f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -97,7 +97,7 @@
       "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-5.fc36.ppc64le"
+      "evra": "0.1.7-10.fc36.ppc64le"
     },
     "chrony": {
       "evra": "4.2-5.fc36.ppc64le"
@@ -121,7 +121,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-2.fc36.ppc64le"
+      "evra": "2:2.1.4-3.fc36.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -196,16 +196,16 @@
       "evra": "2.1.27-18.fc36.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.0-1.fc36.ppc64le"
+      "evra": "1:1.14.4-1.fc36.ppc64le"
     },
     "dbus-broker": {
       "evra": "32-1.fc36.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.0-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.0-1.fc36.ppc64le"
+      "evra": "1:1.14.4-1.fc36.ppc64le"
     },
     "device-mapper": {
       "evra": "1.02.175-7.fc36.ppc64le"
@@ -319,7 +319,7 @@
       "evra": "2.9.9-14.fc36.ppc64le"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-1.fc36.ppc64le"
+      "evra": "1.9-6.fc36.ppc64le"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.ppc64le"
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.14-200.fc36.ppc64le"
+      "evra": "5.19.15-201.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.14-200.fc36.ppc64le"
+      "evra": "5.19.15-201.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.14-200.fc36.ppc64le"
+      "evra": "5.19.15-201.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1018,7 +1018,7 @@
       "evra": "2.7.6-12.fc36.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.ppc64le"
+      "evra": "3.3.17-4.fc36.1.ppc64le"
     },
     "protobuf-c": {
       "evra": "1.4.1-2.fc36.ppc64le"
@@ -1096,7 +1096,7 @@
       "evra": "2.1-3.fc35.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.9.2-1.fc36.ppc64le"
+      "evra": "1:1.10.0-3.fc36.ppc64le"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.475-1.fc36.noarch"
+      "evra": "2:9.0.720-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.475-1.fc36.ppc64le"
+      "evra": "2:9.0.720-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-12T20:55:27Z",
+    "generated": "2022-10-14T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T17:14:31Z"
+        "generated": "2022-10-13T20:45:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-12T17:43:04Z"
+        "generated": "2022-10-14T12:45:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1b00080b62..ee7968c1c3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -94,7 +94,7 @@
       "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-5.fc36.s390x"
+      "evra": "0.1.7-10.fc36.s390x"
     },
     "chrony": {
       "evra": "4.2-5.fc36.s390x"
@@ -118,7 +118,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-2.fc36.s390x"
+      "evra": "2:2.1.4-3.fc36.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -193,16 +193,16 @@
       "evra": "2.1.27-18.fc36.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.0-1.fc36.s390x"
+      "evra": "1:1.14.4-1.fc36.s390x"
     },
     "dbus-broker": {
       "evra": "32-1.fc36.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.0-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.0-1.fc36.s390x"
+      "evra": "1:1.14.4-1.fc36.s390x"
     },
     "device-mapper": {
       "evra": "1.02.175-7.fc36.s390x"
@@ -316,7 +316,7 @@
       "evra": "2.9.9-14.fc36.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-1.fc36.s390x"
+      "evra": "1.9-6.fc36.s390x"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.s390x"
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.14-200.fc36.s390x"
+      "evra": "5.19.15-201.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.14-200.fc36.s390x"
+      "evra": "5.19.15-201.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.14-200.fc36.s390x"
+      "evra": "5.19.15-201.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -949,7 +949,7 @@
       "evra": "1.18-7.fc36.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.s390x"
+      "evra": "3.3.17-4.fc36.1.s390x"
     },
     "protobuf-c": {
       "evra": "1.4.1-2.fc36.s390x"
@@ -1027,7 +1027,7 @@
       "evra": "2:4.11.1-5.fc36.s390x"
     },
     "skopeo": {
-      "evra": "1:1.9.2-1.fc36.s390x"
+      "evra": "1:1.10.0-3.fc36.s390x"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.s390x"
@@ -1132,10 +1132,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.475-1.fc36.noarch"
+      "evra": "2:9.0.720-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.475-1.fc36.s390x"
+      "evra": "2:9.0.720-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-12T20:55:39Z",
+    "generated": "2022-10-14T20:52:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T17:13:25Z"
+        "generated": "2022-10-13T20:46:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-12T17:43:12Z"
+        "generated": "2022-10-14T12:46:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cb1ba0b3b1..46d4784292 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,7 +97,7 @@
       "evra": "2022.2.54-1.2.fc36.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-5.fc36.x86_64"
+      "evra": "0.1.7-10.fc36.x86_64"
     },
     "chrony": {
       "evra": "4.2-5.fc36.x86_64"
@@ -121,7 +121,7 @@
       "evra": "0.31-10.fc36.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-2.fc36.x86_64"
+      "evra": "2:2.1.4-3.fc36.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-1.fc36.noarch"
@@ -196,16 +196,16 @@
       "evra": "2.1.27-18.fc36.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.0-1.fc36.x86_64"
+      "evra": "1:1.14.4-1.fc36.x86_64"
     },
     "dbus-broker": {
       "evra": "32-1.fc36.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.0-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc36.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.0-1.fc36.x86_64"
+      "evra": "1:1.14.4-1.fc36.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.175-7.fc36.x86_64"
@@ -328,7 +328,7 @@
       "evra": "2.9.9-14.fc36.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-1.fc36.x86_64"
+      "evra": "1.9-6.fc36.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-1.fc36.x86_64"
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.14-200.fc36.x86_64"
+      "evra": "5.19.15-201.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.14-200.fc36.x86_64"
+      "evra": "5.19.15-201.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.14-200.fc36.x86_64"
+      "evra": "5.19.15-201.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1024,7 +1024,7 @@
       "evra": "1.18-7.fc36.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.x86_64"
+      "evra": "3.3.17-4.fc36.1.x86_64"
     },
     "protobuf-c": {
       "evra": "1.4.1-2.fc36.x86_64"
@@ -1102,7 +1102,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.9.2-1.fc36.x86_64"
+      "evra": "1:1.10.0-3.fc36.x86_64"
     },
     "slang": {
       "evra": "2.3.2-11.fc36.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.475-1.fc36.noarch"
+      "evra": "2:9.0.720-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.475-1.fc36.x86_64"
+      "evra": "2:9.0.720-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-12T20:54:28Z",
+    "generated": "2022-10-14T20:52:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-10T17:15:44Z"
+        "generated": "2022-10-13T20:47:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-12T17:43:21Z"
+        "generated": "2022-10-14T12:46:13Z"
       }
     }
   }

From 0790ef1f991ebabba797bc42c9baf846512ee1ab Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 17 Oct 2022 22:28:12 +0000
Subject: [PATCH 1243/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/177/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 59 insertions(+), 59 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fea7171faf..26c3bbbddf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc36.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.aarch64"
@@ -79,7 +79,7 @@
       "evra": "3.5.3-3.fc36.aarch64"
     },
     "btrfs-progs": {
-      "evra": "5.18-1.fc36.aarch64"
+      "evra": "6.0-1.fc36.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.aarch64"
@@ -100,7 +100,7 @@
       "evra": "0.1.7-10.fc36.aarch64"
     },
     "chrony": {
-      "evra": "4.2-5.fc36.aarch64"
+      "evra": "4.3-1.fc36.aarch64"
     },
     "cifs-utils": {
       "evra": "6.15-1.fc36.aarch64"
@@ -388,16 +388,16 @@
       "evra": "3.7-2.fc36.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-53.fc36.noarch"
+      "evra": "1:2.06-54.fc36.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-53.fc36.aarch64"
+      "evra": "1:2.06-54.fc36.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-53.fc36.aarch64"
+      "evra": "1:2.06-54.fc36.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-53.fc36.aarch64"
+      "evra": "1:2.06-54.fc36.aarch64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.aarch64"
@@ -412,7 +412,7 @@
       "evra": "56-1.fc36.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.aarch64"
@@ -640,7 +640,7 @@
       "evra": "9-13.fc36.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-2.fc36.aarch64"
+      "evra": "1.7.1-1.fc36.aarch64"
     },
     "libmnl": {
       "evra": "1.0.4-15.fc36.aarch64"
@@ -826,10 +826,10 @@
       "evra": "2.5.1-31.fc36.aarch64"
     },
     "linux-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.aarch64"
@@ -916,7 +916,7 @@
       "evra": "2.0.14-5.fc36.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-14T20:53:41Z",
+    "generated": "2022-10-17T20:52:21Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-13T20:45:53Z"
+        "generated": "2022-10-17T13:15:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-14T12:45:37Z"
+        "generated": "2022-10-17T11:27:51Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fa9b83317f..65afd6aba0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc36.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.ppc64le"
@@ -79,7 +79,7 @@
       "evra": "3.5.3-3.fc36.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "5.18-1.fc36.ppc64le"
+      "evra": "6.0-1.fc36.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.ppc64le"
@@ -100,7 +100,7 @@
       "evra": "0.1.7-10.fc36.ppc64le"
     },
     "chrony": {
-      "evra": "4.2-5.fc36.ppc64le"
+      "evra": "4.3-1.fc36.ppc64le"
     },
     "cifs-utils": {
       "evra": "6.15-1.fc36.ppc64le"
@@ -379,19 +379,19 @@
       "evra": "3.7-2.fc36.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-53.fc36.noarch"
+      "evra": "1:2.06-54.fc36.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-53.fc36.ppc64le"
+      "evra": "1:2.06-54.fc36.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-53.fc36.noarch"
+      "evra": "1:2.06-54.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-53.fc36.ppc64le"
+      "evra": "1:2.06-54.fc36.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-53.fc36.ppc64le"
+      "evra": "1:2.06-54.fc36.ppc64le"
     },
     "gzip": {
       "evra": "1.11-3.fc36.ppc64le"
@@ -406,7 +406,7 @@
       "evra": "56-1.fc36.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.ppc64le"
@@ -634,7 +634,7 @@
       "evra": "9-13.fc36.ppc64le"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-2.fc36.ppc64le"
+      "evra": "1.7.1-1.fc36.ppc64le"
     },
     "libmnl": {
       "evra": "1.0.4-15.fc36.ppc64le"
@@ -826,10 +826,10 @@
       "evra": "2.5.1-31.fc36.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.ppc64le"
@@ -913,7 +913,7 @@
       "evra": "2.0.14-5.fc36.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-14T20:53:35Z",
+    "generated": "2022-10-17T20:52:20Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-13T20:45:45Z"
+        "generated": "2022-10-17T13:16:44Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-14T12:45:55Z"
+        "generated": "2022-10-17T11:28:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ee7968c1c3..20f4162875 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc36.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.s390x"
@@ -76,7 +76,7 @@
       "evra": "3.5.3-3.fc36.s390x"
     },
     "btrfs-progs": {
-      "evra": "5.18-1.fc36.s390x"
+      "evra": "6.0-1.fc36.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.s390x"
@@ -97,7 +97,7 @@
       "evra": "0.1.7-10.fc36.s390x"
     },
     "chrony": {
-      "evra": "4.2-5.fc36.s390x"
+      "evra": "4.3-1.fc36.s390x"
     },
     "cifs-utils": {
       "evra": "6.15-1.fc36.s390x"
@@ -379,7 +379,7 @@
       "evra": "56-1.fc36.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.s390x"
@@ -592,7 +592,7 @@
       "evra": "9-13.fc36.s390x"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-2.fc36.s390x"
+      "evra": "1.7.1-1.fc36.s390x"
     },
     "libmnl": {
       "evra": "1.0.4-15.fc36.s390x"
@@ -772,10 +772,10 @@
       "evra": "2.5.1-31.fc36.s390x"
     },
     "linux-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.18.1-20.fc36.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-14T20:52:55Z",
+    "generated": "2022-10-17T20:51:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-13T20:46:33Z"
+        "generated": "2022-10-17T13:14:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-14T12:46:04Z"
+        "generated": "2022-10-17T11:28:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 46d4784292..ee79fe96b7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc36.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "attr": {
       "evra": "2.5.1-4.fc36.x86_64"
@@ -79,7 +79,7 @@
       "evra": "3.5.3-3.fc36.x86_64"
     },
     "btrfs-progs": {
-      "evra": "5.18-1.fc36.x86_64"
+      "evra": "6.0-1.fc36.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-2.fc36.x86_64"
@@ -100,7 +100,7 @@
       "evra": "0.1.7-10.fc36.x86_64"
     },
     "chrony": {
-      "evra": "4.2-5.fc36.x86_64"
+      "evra": "4.3-1.fc36.x86_64"
     },
     "cifs-utils": {
       "evra": "6.15-1.fc36.x86_64"
@@ -388,22 +388,22 @@
       "evra": "3.7-2.fc36.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-53.fc36.noarch"
+      "evra": "1:2.06-54.fc36.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-53.fc36.x86_64"
+      "evra": "1:2.06-54.fc36.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-53.fc36.x86_64"
+      "evra": "1:2.06-54.fc36.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-53.fc36.noarch"
+      "evra": "1:2.06-54.fc36.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-53.fc36.x86_64"
+      "evra": "1:2.06-54.fc36.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-53.fc36.x86_64"
+      "evra": "1:2.06-54.fc36.x86_64"
     },
     "gzip": {
       "evra": "1.11-3.fc36.x86_64"
@@ -418,7 +418,7 @@
       "evra": "56-1.fc36.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "iproute": {
       "evra": "5.15.0-2.fc36.x86_64"
@@ -646,7 +646,7 @@
       "evra": "9-13.fc36.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.6.0-2.fc36.x86_64"
+      "evra": "1.7.1-1.fc36.x86_64"
     },
     "libmnl": {
       "evra": "1.0.4-15.fc36.x86_64"
@@ -835,10 +835,10 @@
       "evra": "2.5.1-31.fc36.x86_64"
     },
     "linux-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-3.fc36.x86_64"
@@ -928,7 +928,7 @@
       "evra": "2.0.14-5.fc36.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20220913-140.fc36.noarch"
+      "evra": "20221012-141.fc36.noarch"
     },
     "nvme-cli": {
       "evra": "2.0-2.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-14T20:52:59Z",
+    "generated": "2022-10-17T20:51:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-13T20:47:36Z"
+        "generated": "2022-10-17T13:14:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-14T12:46:13Z"
+        "generated": "2022-10-17T11:28:58Z"
       }
     }
   }

From 04cb471e5ca2cbbd742b6442933f7627fee7ab7e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 17 Oct 2022 17:38:20 -0400
Subject: [PATCH 1244/2157] ci: add a cpu and memory request

We're not currently requesting anything, which means we're at the mercy
of any default limit set on the cluster we're running on. Let's add an
explicit request.

Also bump the CPU request to 4 from the default of 2.
---
 .cci.jenkinsfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 203da74428..a17bb7991f 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -1,6 +1,7 @@
 // Documentation: https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md
 
-cosaPod {
+// We run `kolaTestIso` which requires at least 8Gi. Add 512M for overhead.
+cosaPod(cpus: 4, memory: "8704Mi") {
     checkoutToDir(scm, 'config')
 
     def basearch = shwrapCapture("cosa basearch")

From 5fff93b8f93d85d1abf33ef69d9c518781958724 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 17 Oct 2022 09:45:44 -0700
Subject: [PATCH 1245/2157] overrides: drop bash pin

---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5563588d39..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  bash:
-    evr: 5.1.16-3.fc36
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1313
-      type: pin
+packages: {}

From fcdbe152f62446c9f65f5b28d1ba10e1aab67668 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 17 Oct 2022 11:41:45 -0400
Subject: [PATCH 1246/2157] image-base: drop obsolete comment

---
 image-base.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index 98c324dfb1..430e8b9ed4 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -31,7 +31,3 @@ vmware-os-type: fedora64Guest
 # We use the newest version allowed by the oldest non-EOL VMware
 # Workstation/Player/Fusion/ESXi release: https://lifecycle.vmware.com/
 vmware-hw-version: 13
-
-# After this, we plan to add support for the Ignition
-# storage/filesystems sections.  (Although one can do
-# that on boot as well)

From 5049f972a26a8442785fceaf328adca092f75d31 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 17 Oct 2022 11:43:06 -0400
Subject: [PATCH 1247/2157] image-base: bump VMware hardware version to 17

The last VMware products requiring older hardware versions are now EOL.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1141.
---
 image-base.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/image-base.yaml b/image-base.yaml
index 430e8b9ed4..622ad20892 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -30,4 +30,4 @@ vmware-os-type: fedora64Guest
 # VMware hardware versions: https://kb.vmware.com/s/article/1003746
 # We use the newest version allowed by the oldest non-EOL VMware
 # Workstation/Player/Fusion/ESXi release: https://lifecycle.vmware.com/
-vmware-hw-version: 13
+vmware-hw-version: 17

From 7945d5c7222084e68862f8c2cb2a0a609dd30193 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 19 Oct 2022 00:38:27 +0000
Subject: [PATCH 1248/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/187/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 26c3bbbddf..fb5ffbbde9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-3.fc36.aarch64"
+      "evra": "5.2.2-2.fc36.aarch64"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -280,13 +280,13 @@
       "evra": "36-4.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-repos": {
       "evra": "36-4.noarch"
@@ -1048,7 +1048,7 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.6-1.fc36.aarch64"
+      "evra": "3.2.6-2.fc36.aarch64"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-17T20:52:21Z",
+    "generated": "2022-10-18T23:19:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T13:15:26Z"
+        "generated": "2022-10-17T22:31:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-17T11:27:51Z"
+        "generated": "2022-10-18T14:48:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 65afd6aba0..6664a485cf 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-3.fc36.ppc64le"
+      "evra": "5.2.2-2.fc36.ppc64le"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -271,13 +271,13 @@
       "evra": "36-4.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-repos": {
       "evra": "36-4.noarch"
@@ -1051,7 +1051,7 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.6-1.fc36.ppc64le"
+      "evra": "3.2.6-2.fc36.ppc64le"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-17T20:52:20Z",
+    "generated": "2022-10-18T23:18:56Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T13:16:44Z"
+        "generated": "2022-10-17T22:31:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-17T11:28:25Z"
+        "generated": "2022-10-18T14:49:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 20f4162875..52e1433cae 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-3.fc36.s390x"
+      "evra": "5.2.2-2.fc36.s390x"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -268,13 +268,13 @@
       "evra": "36-4.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-repos": {
       "evra": "36-4.noarch"
@@ -985,7 +985,7 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rsync": {
-      "evra": "3.2.6-1.fc36.s390x"
+      "evra": "3.2.6-2.fc36.s390x"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-17T20:51:35Z",
+    "generated": "2022-10-18T23:18:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T13:14:53Z"
+        "generated": "2022-10-17T22:31:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-17T11:28:44Z"
+        "generated": "2022-10-18T14:49:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ee79fe96b7..44e955d5e6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -58,7 +58,7 @@
       "evra": "11-13.fc36.noarch"
     },
     "bash": {
-      "evra": "5.1.16-3.fc36.x86_64"
+      "evra": "5.2.2-2.fc36.x86_64"
     },
     "bash-completion": {
       "evra": "1:2.11-6.fc36.noarch"
@@ -280,13 +280,13 @@
       "evra": "36-4.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-18.noarch"
+      "evra": "36-20.noarch"
     },
     "fedora-repos": {
       "evra": "36-4.noarch"
@@ -1057,7 +1057,7 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.6-1.fc36.x86_64"
+      "evra": "3.2.6-2.fc36.x86_64"
     },
     "runc": {
       "evra": "2:1.1.3-1.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-17T20:51:30Z",
+    "generated": "2022-10-18T23:18:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T13:14:12Z"
+        "generated": "2022-10-17T22:32:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-17T11:28:58Z"
+        "generated": "2022-10-18T14:49:28Z"
       }
     }
   }

From d3d7443090ac0b98ff775d367c102b661575f7d7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 20 Oct 2022 22:22:47 +0000
Subject: [PATCH 1249/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/191/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fb5ffbbde9..cf5ad58a4e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.15-201.fc36.aarch64"
+      "evra": "5.19.16-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.15-201.fc36.aarch64"
+      "evra": "5.19.16-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.15-201.fc36.aarch64"
+      "evra": "5.19.16-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-18T23:19:00Z",
+    "generated": "2022-10-20T20:54:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T22:31:29Z"
+        "generated": "2022-10-19T03:27:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-18T14:48:50Z"
+        "generated": "2022-10-20T15:10:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6664a485cf..2e1e3f4408 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.15-201.fc36.ppc64le"
+      "evra": "5.19.16-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.15-201.fc36.ppc64le"
+      "evra": "5.19.16-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.15-201.fc36.ppc64le"
+      "evra": "5.19.16-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-18T23:18:56Z",
+    "generated": "2022-10-20T20:54:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T22:31:24Z"
+        "generated": "2022-10-19T03:24:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-18T14:49:09Z"
+        "generated": "2022-10-20T15:10:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 52e1433cae..24c5f827d6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.15-201.fc36.s390x"
+      "evra": "5.19.16-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.15-201.fc36.s390x"
+      "evra": "5.19.16-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.15-201.fc36.s390x"
+      "evra": "5.19.16-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-18T23:18:17Z",
+    "generated": "2022-10-20T20:53:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T22:31:51Z"
+        "generated": "2022-10-19T03:24:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-18T14:49:19Z"
+        "generated": "2022-10-20T15:11:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 44e955d5e6..1b26176f32 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.15-201.fc36.x86_64"
+      "evra": "5.19.16-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.15-201.fc36.x86_64"
+      "evra": "5.19.16-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.15-201.fc36.x86_64"
+      "evra": "5.19.16-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-18T23:18:09Z",
+    "generated": "2022-10-20T20:53:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-17T22:32:22Z"
+        "generated": "2022-10-19T03:28:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-18T14:49:28Z"
+        "generated": "2022-10-20T15:11:17Z"
       }
     }
   }

From d1128a04472a00875c06d59b92738a82e0c05282 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 23 Oct 2022 22:23:41 +0000
Subject: [PATCH 1250/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/199/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cf5ad58a4e..af3464b12f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.0-1.fc36.aarch64"
+      "evra": "0.16.1-2.fc36.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.0-1.fc36.aarch64"
+      "evra": "0.16.1-2.fc36.aarch64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.aarch64"
@@ -862,7 +862,7 @@
       "evra": "4.2-1.fc36.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.18-1.fc36.aarch64"
+      "evra": "20.10.20-1.fc36.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.13-1.fc36.aarch64"
+      "evra": "2022.14-1.fc36.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.13-1.fc36.aarch64"
+      "evra": "2022.14-1.fc36.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.720-1.fc36.noarch"
+      "evra": "2:9.0.803-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.720-1.fc36.aarch64"
+      "evra": "2:9.0.803-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-20T20:54:47Z",
+    "generated": "2022-10-23T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-19T03:27:38Z"
+        "generated": "2022-10-21T22:55:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-20T15:10:40Z"
+        "generated": "2022-10-23T08:54:37Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2e1e3f4408..3f3361791b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.0-1.fc36.ppc64le"
+      "evra": "0.16.1-2.fc36.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.0-1.fc36.ppc64le"
+      "evra": "0.16.1-2.fc36.ppc64le"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.ppc64le"
@@ -862,7 +862,7 @@
       "evra": "4.2-1.fc36.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.18-1.fc36.ppc64le"
+      "evra": "20.10.20-1.fc36.ppc64le"
     },
     "mozjs91": {
       "evra": "91.13.0-1.fc36.ppc64le"
@@ -1042,10 +1042,10 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.13-1.fc36.ppc64le"
+      "evra": "2022.14-1.fc36.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.13-1.fc36.ppc64le"
+      "evra": "2022.14-1.fc36.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.720-1.fc36.noarch"
+      "evra": "2:9.0.803-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.720-1.fc36.ppc64le"
+      "evra": "2:9.0.803-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-20T20:54:45Z",
+    "generated": "2022-10-23T20:54:07Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-19T03:24:52Z"
+        "generated": "2022-10-21T22:56:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-20T15:10:58Z"
+        "generated": "2022-10-23T08:54:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 24c5f827d6..ff18e7bccb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -145,10 +145,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.0-1.fc36.s390x"
+      "evra": "0.16.1-2.fc36.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.0-1.fc36.s390x"
+      "evra": "0.16.1-2.fc36.s390x"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.s390x"
@@ -808,7 +808,7 @@
       "evra": "4.2-1.fc36.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.18-1.fc36.s390x"
+      "evra": "20.10.20-1.fc36.s390x"
     },
     "mozjs91": {
       "evra": "91.13.0-1.fc36.s390x"
@@ -976,10 +976,10 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.13-1.fc36.s390x"
+      "evra": "2022.14-1.fc36.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.13-1.fc36.s390x"
+      "evra": "2022.14-1.fc36.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.s390x"
@@ -1132,10 +1132,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.720-1.fc36.noarch"
+      "evra": "2:9.0.803-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.720-1.fc36.s390x"
+      "evra": "2:9.0.803-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-20T20:53:50Z",
+    "generated": "2022-10-23T20:52:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-19T03:24:36Z"
+        "generated": "2022-10-21T22:54:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-20T15:11:08Z"
+        "generated": "2022-10-23T08:55:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1b26176f32..891a7677b6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -148,10 +148,10 @@
       "evra": "4:1-59.fc36.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.0-1.fc36.x86_64"
+      "evra": "0.16.1-2.fc36.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.0-1.fc36.x86_64"
+      "evra": "0.16.1-2.fc36.x86_64"
     },
     "coreutils": {
       "evra": "9.0-8.fc36.x86_64"
@@ -874,7 +874,7 @@
       "evra": "2:2.1-51.1.fc36.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.18-1.fc36.x86_64"
+      "evra": "20.10.20-1.fc36.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-3.fc36.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.13-1.fc36.x86_64"
+      "evra": "2022.14-1.fc36.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.13-1.fc36.x86_64"
+      "evra": "2022.14-1.fc36.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.17.1-3.fc36.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.720-1.fc36.noarch"
+      "evra": "2:9.0.803-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.720-1.fc36.x86_64"
+      "evra": "2:9.0.803-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-20T20:53:46Z",
+    "generated": "2022-10-23T20:52:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-19T03:28:22Z"
+        "generated": "2022-10-21T22:55:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-20T15:11:17Z"
+        "generated": "2022-10-23T08:55:13Z"
       }
     }
   }

From 84e429ba550e55e11fe63cbce6ce62c10165109d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 24 Oct 2022 22:20:01 +0000
Subject: [PATCH 1251/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/201/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index af3464b12f..0e4acbbf91 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.3-1.fc36.aarch64"
     },
     "glibc": {
-      "evra": "2.35-17.fc36.aarch64"
+      "evra": "2.35-20.fc36.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-17.fc36.aarch64"
+      "evra": "2.35-20.fc36.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-17.fc36.aarch64"
+      "evra": "2.35-20.fc36.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.aarch64"
@@ -1051,7 +1051,7 @@
       "evra": "3.2.6-2.fc36.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.3-1.fc36.aarch64"
+      "evra": "2:1.1.4-1.fc36.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.5-0.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-23T20:53:25Z",
+    "generated": "2022-10-24T20:54:19Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-21T22:55:58Z"
+        "generated": "2022-10-24T02:47:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-23T08:54:37Z"
+        "generated": "2022-10-24T13:57:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3f3361791b..de17d3d5b9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -355,13 +355,13 @@
       "evra": "2.72.3-1.fc36.ppc64le"
     },
     "glibc": {
-      "evra": "2.35-17.fc36.ppc64le"
+      "evra": "2.35-20.fc36.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.35-17.fc36.ppc64le"
+      "evra": "2.35-20.fc36.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-17.fc36.ppc64le"
+      "evra": "2.35-20.fc36.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.ppc64le"
@@ -1054,7 +1054,7 @@
       "evra": "3.2.6-2.fc36.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.3-1.fc36.ppc64le"
+      "evra": "2:1.1.4-1.fc36.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.16.5-0.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-23T20:54:07Z",
+    "generated": "2022-10-24T20:54:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-21T22:56:55Z"
+        "generated": "2022-10-24T02:47:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-23T08:54:55Z"
+        "generated": "2022-10-24T13:57:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ff18e7bccb..a93829ac94 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -343,13 +343,13 @@
       "evra": "2.72.3-1.fc36.s390x"
     },
     "glibc": {
-      "evra": "2.35-17.fc36.s390x"
+      "evra": "2.35-20.fc36.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-17.fc36.s390x"
+      "evra": "2.35-20.fc36.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-17.fc36.s390x"
+      "evra": "2.35-20.fc36.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.s390x"
@@ -988,7 +988,7 @@
       "evra": "3.2.6-2.fc36.s390x"
     },
     "runc": {
-      "evra": "2:1.1.3-1.fc36.s390x"
+      "evra": "2:1.1.4-1.fc36.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.23.0-1.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-23T20:52:38Z",
+    "generated": "2022-10-24T20:53:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-21T22:54:52Z"
+        "generated": "2022-10-24T02:45:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-23T08:55:04Z"
+        "generated": "2022-10-24T13:57:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 891a7677b6..f33106e6f5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -364,13 +364,13 @@
       "evra": "2.72.3-1.fc36.x86_64"
     },
     "glibc": {
-      "evra": "2.35-17.fc36.x86_64"
+      "evra": "2.35-20.fc36.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-17.fc36.x86_64"
+      "evra": "2.35-20.fc36.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-17.fc36.x86_64"
+      "evra": "2.35-20.fc36.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-2.fc36.x86_64"
@@ -1060,7 +1060,7 @@
       "evra": "3.2.6-2.fc36.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.3-1.fc36.x86_64"
+      "evra": "2:1.1.4-1.fc36.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.16.5-0.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-23T20:52:42Z",
+    "generated": "2022-10-24T20:53:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-21T22:55:46Z"
+        "generated": "2022-10-24T02:46:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-23T08:55:13Z"
+        "generated": "2022-10-24T13:57:49Z"
       }
     }
   }

From cc9547c1e0c9024e2e0d99c96641d96b890d4dca Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 24 Oct 2022 23:06:21 -0400
Subject: [PATCH 1252/2157] denylist: extend snooze for
 ext.config.platforms.aws.nvme test

It looks like our F37+ streams pass this test now [1] so let's also
only deny the test on streams where it's known to fail.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1289910315
---
 kola-denylist.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 40d50287d1..7f8527f8b5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -33,4 +33,8 @@
   - s390x
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306
-  snooze: 2022-10-21
+  snooze: 2022-11-05
+  streams:
+    - testing-devel
+    - testing
+    - stable

From 119443fd8d11d90f7b5f527ff4c0159b6472287f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 26 Oct 2022 20:10:14 -0400
Subject: [PATCH 1253/2157] denylist: re-enable kdump.crash test on ppc64le

It's passing now with newer kernel on rawhide [1]. Let's start
testing it again.

[1] https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
---
 kola-denylist.yaml               | 9 ++++++++-
 tests/kola/kdump/crash/config.bu | 8 +++++---
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7f8527f8b5..c011195fb1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -6,9 +6,16 @@
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/coreos-assembler/issues/2725
+  tracker: https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
+  snooze: 2022-12-01
   arches:
     - ppc64le
+  streams:
+    - next-devel
+    - next
+    - testing-devel
+    - testing
+    - stable
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
diff --git a/tests/kola/kdump/crash/config.bu b/tests/kola/kdump/crash/config.bu
index 67c229b420..cdae6b0f18 100644
--- a/tests/kola/kdump/crash/config.bu
+++ b/tests/kola/kdump/crash/config.bu
@@ -3,9 +3,11 @@ version: 1.4.0
 kernel_arguments:
   should_exist:
     # We need to make sure we have a large enough crashkernel for FCOS
-    # and RHCOS here. Currently the worst case is aarch64 RHCOS where
-    # the `kdumpctl estimate` says "Recommended crashkernel: 448M"
-    - crashkernel=500M
+    # and RHCOS here. Currently the worst case output of `kdumpctl estimate`
+    # is aarch64 RHCOS where the it says "Recommended crashkernel: 448M".
+    # Though for some reason when we set crashkernel=448M ppc64le complains
+    # and wants 512M so let's set it to 512M here.
+    - crashkernel=512M
 systemd:
   units:
     - name: kdump.service

From 983d15e839574225114e5245a2bae67c24c103cc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 Oct 2022 22:22:35 +0000
Subject: [PATCH 1254/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/209/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 42 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 44 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 42 ++++++++++++++++++------------------
 4 files changed, 86 insertions(+), 86 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0e4acbbf91..a8694e71e4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.4-1.fc36.aarch64"
+      "evra": "1:1.38.6-1.fc36.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.4-1.fc36.aarch64"
+      "evra": "1:1.38.6-1.fc36.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.4-1.fc36.aarch64"
+      "evra": "1:1.38.6-1.fc36.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.4-1.fc36.aarch64"
+      "evra": "1:1.38.6-1.fc36.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.4-1.fc36.aarch64"
+      "evra": "1:1.38.6-1.fc36.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.3.0-1.fc36.noarch"
@@ -271,7 +271,7 @@
       "evra": "0.187-4.fc36.aarch64"
     },
     "ethtool": {
-      "evra": "2:5.19-1.fc36.aarch64"
+      "evra": "2:6.0-1.fc36.aarch64"
     },
     "expat": {
       "evra": "2.4.9-1.fc36.aarch64"
@@ -379,7 +379,7 @@
       "evra": "2.3.7-3.fc36.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.7-1.fc36.aarch64"
+      "evra": "3.7.8-2.fc36.aarch64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc36.aarch64"
@@ -610,7 +610,7 @@
       "evra": "69.1-6.fc36.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.3-1.fc36.aarch64"
+      "evra": "2.3.4-1.fc36.aarch64"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.aarch64"
@@ -631,7 +631,7 @@
       "evra": "1.4.0-2.fc36.aarch64"
     },
     "libksba": {
-      "evra": "1.6.0-3.fc36.aarch64"
+      "evra": "1.6.2-1.fc36.aarch64"
     },
     "libldb": {
       "evra": "2.5.2-1.fc36.aarch64"
@@ -733,7 +733,7 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.5-0.fc36.aarch64"
+      "evra": "2:4.16.6-0.fc36.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.aarch64"
@@ -805,13 +805,13 @@
       "evra": "0.3.2-3.fc36.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.5-0.fc36.aarch64"
+      "evra": "2:4.16.6-0.fc36.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.aarch64"
     },
     "libxml2": {
-      "evra": "2.9.14-1.fc36.aarch64"
+      "evra": "2.10.3-1.fc36.aarch64"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.aarch64"
@@ -1024,7 +1024,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-15.fc36.aarch64"
+      "evra": "2:6.2.0-16.fc36.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc36.aarch64"
@@ -1048,19 +1048,19 @@
       "evra": "4.17.1-3.fc36.aarch64"
     },
     "rsync": {
-      "evra": "3.2.6-2.fc36.aarch64"
+      "evra": "3.2.7-1.fc36.aarch64"
     },
     "runc": {
       "evra": "2:1.1.4-1.fc36.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.5-0.fc36.aarch64"
+      "evra": "2:4.16.6-0.fc36.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.5-0.fc36.noarch"
+      "evra": "2:4.16.6-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.5-0.fc36.aarch64"
+      "evra": "2:4.16.6-0.fc36.aarch64"
     },
     "sed": {
       "evra": "4.8-10.fc36.aarch64"
@@ -1114,7 +1114,7 @@
       "evra": "4.5.1-1.fc36.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.3-2.fc36.aarch64"
+      "evra": "0.1.4-1.fc36.aarch64"
     },
     "sssd-ad": {
       "evra": "2.7.4-1.fc36.aarch64"
@@ -1183,7 +1183,7 @@
       "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022d-1.fc36.noarch"
+      "evra": "2022e-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-24T20:54:19Z",
+    "generated": "2022-10-27T20:54:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T02:47:13Z"
+        "generated": "2022-10-24T22:26:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-24T13:57:12Z"
+        "generated": "2022-10-27T12:07:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index de17d3d5b9..e887f48342 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.4-1.fc36.ppc64le"
+      "evra": "1:1.38.6-1.fc36.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.4-1.fc36.ppc64le"
+      "evra": "1:1.38.6-1.fc36.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.4-1.fc36.ppc64le"
+      "evra": "1:1.38.6-1.fc36.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.4-1.fc36.ppc64le"
+      "evra": "1:1.38.6-1.fc36.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.4-1.fc36.ppc64le"
+      "evra": "1:1.38.6-1.fc36.ppc64le"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.3.0-1.fc36.noarch"
@@ -262,7 +262,7 @@
       "evra": "0.187-4.fc36.ppc64le"
     },
     "ethtool": {
-      "evra": "2:5.19-1.fc36.ppc64le"
+      "evra": "2:6.0-1.fc36.ppc64le"
     },
     "expat": {
       "evra": "2.4.9-1.fc36.ppc64le"
@@ -370,7 +370,7 @@
       "evra": "2.3.7-3.fc36.ppc64le"
     },
     "gnutls": {
-      "evra": "3.7.7-1.fc36.ppc64le"
+      "evra": "3.7.8-2.fc36.ppc64le"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc36.ppc64le"
@@ -604,7 +604,7 @@
       "evra": "69.1-6.fc36.ppc64le"
     },
     "libidn2": {
-      "evra": "2.3.3-1.fc36.ppc64le"
+      "evra": "2.3.4-1.fc36.ppc64le"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.ppc64le"
@@ -625,7 +625,7 @@
       "evra": "1.4.0-2.fc36.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.0-3.fc36.ppc64le"
+      "evra": "1.6.2-1.fc36.ppc64le"
     },
     "libldb": {
       "evra": "2.5.2-1.fc36.ppc64le"
@@ -733,7 +733,7 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.16.5-0.fc36.ppc64le"
+      "evra": "2:4.16.6-0.fc36.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.ppc64le"
@@ -805,13 +805,13 @@
       "evra": "0.3.2-3.fc36.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.16.5-0.fc36.ppc64le"
+      "evra": "2:4.16.6-0.fc36.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.ppc64le"
     },
     "libxml2": {
-      "evra": "2.9.14-1.fc36.ppc64le"
+      "evra": "2.10.3-1.fc36.ppc64le"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.ppc64le"
@@ -1051,19 +1051,19 @@
       "evra": "4.17.1-3.fc36.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.6-2.fc36.ppc64le"
+      "evra": "3.2.7-1.fc36.ppc64le"
     },
     "runc": {
       "evra": "2:1.1.4-1.fc36.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.5-0.fc36.ppc64le"
+      "evra": "2:4.16.6-0.fc36.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.16.5-0.fc36.noarch"
+      "evra": "2:4.16.6-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.5-0.fc36.ppc64le"
+      "evra": "2:4.16.6-0.fc36.ppc64le"
     },
     "sed": {
       "evra": "4.8-10.fc36.ppc64le"
@@ -1117,7 +1117,7 @@
       "evra": "4.5.1-1.fc36.ppc64le"
     },
     "ssh-key-dir": {
-      "evra": "0.1.3-2.fc36.ppc64le"
+      "evra": "0.1.4-1.fc36.ppc64le"
     },
     "sssd-ad": {
       "evra": "2.7.4-1.fc36.ppc64le"
@@ -1186,7 +1186,7 @@
       "evra": "3.2.0-3.fc36.ppc64le"
     },
     "tzdata": {
-      "evra": "2022d-1.fc36.noarch"
+      "evra": "2022e-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-24T20:54:37Z",
+    "generated": "2022-10-27T20:54:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T02:47:19Z"
+        "generated": "2022-10-24T22:27:34Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-24T13:57:31Z"
+        "generated": "2022-10-27T12:08:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a93829ac94..f9aff3c3ba 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.4-1.fc36.s390x"
+      "evra": "1:1.38.6-1.fc36.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.4-1.fc36.s390x"
+      "evra": "1:1.38.6-1.fc36.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.4-1.fc36.s390x"
+      "evra": "1:1.38.6-1.fc36.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.4-1.fc36.s390x"
+      "evra": "1:1.38.6-1.fc36.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.4-1.fc36.s390x"
+      "evra": "1:1.38.6-1.fc36.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.3.0-1.fc36.noarch"
@@ -259,7 +259,7 @@
       "evra": "0.187-4.fc36.s390x"
     },
     "ethtool": {
-      "evra": "2:5.19-1.fc36.s390x"
+      "evra": "2:6.0-1.fc36.s390x"
     },
     "expat": {
       "evra": "2.4.9-1.fc36.s390x"
@@ -358,7 +358,7 @@
       "evra": "2.3.7-3.fc36.s390x"
     },
     "gnutls": {
-      "evra": "3.7.7-1.fc36.s390x"
+      "evra": "3.7.8-2.fc36.s390x"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc36.s390x"
@@ -562,7 +562,7 @@
       "evra": "69.1-6.fc36.s390x"
     },
     "libidn2": {
-      "evra": "2.3.3-1.fc36.s390x"
+      "evra": "2.3.4-1.fc36.s390x"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.s390x"
@@ -580,7 +580,7 @@
       "evra": "1.4.0-2.fc36.s390x"
     },
     "libksba": {
-      "evra": "1.6.0-3.fc36.s390x"
+      "evra": "1.6.2-1.fc36.s390x"
     },
     "libldb": {
       "evra": "2.5.2-1.fc36.s390x"
@@ -685,7 +685,7 @@
       "evra": "2.38-1.fc36.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.5-0.fc36.s390x"
+      "evra": "2:4.16.6-0.fc36.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-1.fc36.s390x"
@@ -754,13 +754,13 @@
       "evra": "0.3.2-3.fc36.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.5-0.fc36.s390x"
+      "evra": "2:4.16.6-0.fc36.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.s390x"
     },
     "libxml2": {
-      "evra": "2.9.14-1.fc36.s390x"
+      "evra": "2.10.3-1.fc36.s390x"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.s390x"
@@ -961,7 +961,7 @@
       "evra": "20210518-4.fc36.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-15.fc36.s390x"
+      "evra": "2:6.2.0-16.fc36.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc36.s390x"
@@ -985,7 +985,7 @@
       "evra": "4.17.1-3.fc36.s390x"
     },
     "rsync": {
-      "evra": "3.2.6-2.fc36.s390x"
+      "evra": "3.2.7-1.fc36.s390x"
     },
     "runc": {
       "evra": "2:1.1.4-1.fc36.s390x"
@@ -994,13 +994,13 @@
       "evra": "2:2.23.0-1.fc36.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.5-0.fc36.s390x"
+      "evra": "2:4.16.6-0.fc36.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.5-0.fc36.noarch"
+      "evra": "2:4.16.6-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.5-0.fc36.s390x"
+      "evra": "2:4.16.6-0.fc36.s390x"
     },
     "sed": {
       "evra": "4.8-10.fc36.s390x"
@@ -1048,7 +1048,7 @@
       "evra": "4.5.1-1.fc36.s390x"
     },
     "ssh-key-dir": {
-      "evra": "0.1.3-2.fc36.s390x"
+      "evra": "0.1.4-1.fc36.s390x"
     },
     "sssd-ad": {
       "evra": "2.7.4-1.fc36.s390x"
@@ -1117,7 +1117,7 @@
       "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
-      "evra": "2022d-1.fc36.noarch"
+      "evra": "2022e-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-24T20:53:43Z",
+    "generated": "2022-10-27T20:53:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T02:45:41Z"
+        "generated": "2022-10-24T22:25:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-24T13:57:40Z"
+        "generated": "2022-10-27T12:08:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f33106e6f5..8172a2fc3c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.4-1.fc36.x86_64"
+      "evra": "1:1.38.6-1.fc36.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.4-1.fc36.x86_64"
+      "evra": "1:1.38.6-1.fc36.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.4-1.fc36.x86_64"
+      "evra": "1:1.38.6-1.fc36.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.4-1.fc36.x86_64"
+      "evra": "1:1.38.6-1.fc36.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.4-1.fc36.x86_64"
+      "evra": "1:1.38.6-1.fc36.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.7.3.0-1.fc36.noarch"
@@ -271,7 +271,7 @@
       "evra": "0.187-4.fc36.x86_64"
     },
     "ethtool": {
-      "evra": "2:5.19-1.fc36.x86_64"
+      "evra": "2:6.0-1.fc36.x86_64"
     },
     "expat": {
       "evra": "2.4.9-1.fc36.x86_64"
@@ -379,7 +379,7 @@
       "evra": "2.3.7-3.fc36.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.7-1.fc36.x86_64"
+      "evra": "3.7.8-2.fc36.x86_64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc36.x86_64"
@@ -616,7 +616,7 @@
       "evra": "69.1-6.fc36.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.3-1.fc36.x86_64"
+      "evra": "2.3.4-1.fc36.x86_64"
     },
     "libini_config": {
       "evra": "1.3.1-50.fc36.x86_64"
@@ -637,7 +637,7 @@
       "evra": "1.4.0-2.fc36.x86_64"
     },
     "libksba": {
-      "evra": "1.6.0-3.fc36.x86_64"
+      "evra": "1.6.2-1.fc36.x86_64"
     },
     "libldb": {
       "evra": "2.5.2-1.fc36.x86_64"
@@ -739,7 +739,7 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.5-0.fc36.x86_64"
+      "evra": "2:4.16.6-0.fc36.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-5.fc36.x86_64"
@@ -814,13 +814,13 @@
       "evra": "0.3.2-3.fc36.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.5-0.fc36.x86_64"
+      "evra": "2:4.16.6-0.fc36.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.28-1.fc36.x86_64"
     },
     "libxml2": {
-      "evra": "2.9.14-1.fc36.x86_64"
+      "evra": "2.10.3-1.fc36.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.x86_64"
@@ -1057,19 +1057,19 @@
       "evra": "4.17.1-3.fc36.x86_64"
     },
     "rsync": {
-      "evra": "3.2.6-2.fc36.x86_64"
+      "evra": "3.2.7-1.fc36.x86_64"
     },
     "runc": {
       "evra": "2:1.1.4-1.fc36.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.5-0.fc36.x86_64"
+      "evra": "2:4.16.6-0.fc36.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.5-0.fc36.noarch"
+      "evra": "2:4.16.6-0.fc36.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.5-0.fc36.x86_64"
+      "evra": "2:4.16.6-0.fc36.x86_64"
     },
     "sed": {
       "evra": "4.8-10.fc36.x86_64"
@@ -1123,7 +1123,7 @@
       "evra": "4.5.1-1.fc36.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.3-2.fc36.x86_64"
+      "evra": "0.1.4-1.fc36.x86_64"
     },
     "sssd-ad": {
       "evra": "2.7.4-1.fc36.x86_64"
@@ -1192,7 +1192,7 @@
       "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022d-1.fc36.noarch"
+      "evra": "2022e-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-24T20:53:30Z",
+    "generated": "2022-10-27T20:53:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T02:46:36Z"
+        "generated": "2022-10-24T22:27:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-24T13:57:49Z"
+        "generated": "2022-10-27T12:08:30Z"
       }
     }
   }

From 1ebafbe4e196f0c9a98643f7f75eff865fea7dab Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 28 Oct 2022 09:49:46 -0400
Subject: [PATCH 1255/2157] denylist: extend snooze for tests affected by
 tmpfiles issue

The systemd fix has landed but we've got it pinned right now for another
issue so we still need to snooze this one. See
https://github.com/coreos/fedora-coreos-tracker/issues/1215#issuecomment-1295021109
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c011195fb1..9b1ff79331 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,12 +30,12 @@
   - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-10-27
+  snooze: 2022-11-10
   arches:
   - s390x
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-10-27
+  snooze: 2022-11-10
   arches:
   - s390x
 - pattern: ext.config.platforms.aws.nvme

From f7349841f64cb311850acf87d17720404d49c6ff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 28 Oct 2022 22:23:05 +0000
Subject: [PATCH 1256/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/211/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a8694e71e4..2c07f3efcf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -358,7 +358,7 @@
       "evra": "0.21-9.fc36.aarch64"
     },
     "git-core": {
-      "evra": "2.37.3-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc36.aarch64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-27T20:54:41Z",
+    "generated": "2022-10-28T20:54:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T22:26:12Z"
+        "generated": "2022-10-27T22:48:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-27T12:07:53Z"
+        "generated": "2022-10-28T11:06:37Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e887f48342..d72593e0e3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -349,7 +349,7 @@
       "evra": "0.21-9.fc36.ppc64le"
     },
     "git-core": {
-      "evra": "2.37.3-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc36.ppc64le"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-27T20:54:51Z",
+    "generated": "2022-10-28T20:54:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T22:27:34Z"
+        "generated": "2022-10-27T22:48:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-27T12:08:12Z"
+        "generated": "2022-10-28T11:06:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f9aff3c3ba..6350eb92bb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,7 +337,7 @@
       "evra": "1.0.9-2.fc36.s390x"
     },
     "git-core": {
-      "evra": "2.37.3-1.fc36.s390x"
+      "evra": "2.38.1-1.fc36.s390x"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-27T20:53:45Z",
+    "generated": "2022-10-28T20:53:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T22:25:53Z"
+        "generated": "2022-10-27T22:48:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-27T12:08:21Z"
+        "generated": "2022-10-28T11:07:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8172a2fc3c..68752d4ba4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -358,7 +358,7 @@
       "evra": "0.21-9.fc36.x86_64"
     },
     "git-core": {
-      "evra": "2.37.3-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc36.x86_64"
     },
     "glib2": {
       "evra": "2.72.3-1.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-27T20:53:51Z",
+    "generated": "2022-10-28T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-24T22:27:04Z"
+        "generated": "2022-10-27T22:49:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-27T12:08:30Z"
+        "generated": "2022-10-28T11:07:14Z"
       }
     }
   }

From 0591041812a622c284b671c65aa28697bb5dc9e5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Oct 2022 22:18:40 +0000
Subject: [PATCH 1257/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/214/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2c07f3efcf..2896930327 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -472,13 +472,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.16-200.fc36.aarch64"
+      "evra": "6.0.5-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "5.19.16-200.fc36.aarch64"
+      "evra": "6.0.5-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "5.19.16-200.fc36.aarch64"
+      "evra": "6.0.5-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-28T20:54:25Z",
+    "generated": "2022-10-29T20:53:44Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-27T22:48:15Z"
+        "generated": "2022-10-28T22:46:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-28T11:06:37Z"
+        "generated": "2022-10-29T19:20:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d72593e0e3..1cf11c19d3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -466,13 +466,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.16-200.fc36.ppc64le"
+      "evra": "6.0.5-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "5.19.16-200.fc36.ppc64le"
+      "evra": "6.0.5-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "5.19.16-200.fc36.ppc64le"
+      "evra": "6.0.5-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-28T20:54:51Z",
+    "generated": "2022-10-29T20:54:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-27T22:48:20Z"
+        "generated": "2022-10-28T22:45:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-28T11:06:55Z"
+        "generated": "2022-10-29T19:20:26Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6350eb92bb..35a2d71dee 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -436,13 +436,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.16-200.fc36.s390x"
+      "evra": "6.0.5-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "5.19.16-200.fc36.s390x"
+      "evra": "6.0.5-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "5.19.16-200.fc36.s390x"
+      "evra": "6.0.5-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-28T20:53:30Z",
+    "generated": "2022-10-29T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-27T22:48:02Z"
+        "generated": "2022-10-28T22:45:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-28T11:07:05Z"
+        "generated": "2022-10-29T19:20:35Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 68752d4ba4..074f3f9424 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -478,13 +478,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "5.19.16-200.fc36.x86_64"
+      "evra": "6.0.5-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "5.19.16-200.fc36.x86_64"
+      "evra": "6.0.5-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "5.19.16-200.fc36.x86_64"
+      "evra": "6.0.5-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.24-4.fc36.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-28T20:53:35Z",
+    "generated": "2022-10-29T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-27T22:49:26Z"
+        "generated": "2022-10-28T22:46:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-28T11:07:14Z"
+        "generated": "2022-10-29T19:20:44Z"
       }
     }
   }

From eb6ee0a8d1c23bb9455c019d4dcd6221c2160322 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Oct 2022 18:12:53 +0000
Subject: [PATCH 1258/2157] overrides: fast-track aardvark-dns-1.2.0-6.fc36,
 containers-common-1-62.fc36, netavark-1.2.0-5.fc36, podman-4.3.0-2.fc36

---
 manifest-lock.overrides.yaml | 38 +++++++++++++++++++++++++++++++++++-
 1 file changed, 37 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..639ad3091f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,40 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  aardvark-dns:
+    evr: 1.2.0-6.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track
+  containers-common:
+    evra: 4:1-62.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track
+  containers-common-extra:
+    evra: 4:1-62.fc36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track
+  netavark:
+    evr: 1.2.0-5.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track
+  podman:
+    evr: 4:4.3.0-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track
+  podman-plugins:
+    evr: 4:4.3.0-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
+      type: fast-track

From 0c3c0db95d4992611f1ac749fa234931ef13da75 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 30 Oct 2022 22:19:54 +0000
Subject: [PATCH 1259/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/216/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 17 ++++++++++-------
 manifest-lock.ppc64le.json | 17 ++++++++++-------
 manifest-lock.s390x.json   | 17 ++++++++++-------
 manifest-lock.x86_64.json  | 17 ++++++++++-------
 4 files changed, 40 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2896930327..662d32b65b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.1.0-1.fc36.aarch64"
+      "evra": "1.2.0-6.fc36.aarch64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.aarch64"
@@ -145,7 +145,10 @@
       "evra": "1.1.0-1.fc36.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-59.fc36.noarch"
+      "evra": "4:1-62.fc36.noarch"
+    },
+    "containers-common-extra": {
+      "evra": "4:1-62.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc36.aarch64"
@@ -892,7 +895,7 @@
       "evra": "2.0-0.61.20160912git.fc36.aarch64"
     },
     "netavark": {
-      "evra": "1.1.0-1.fc36.aarch64"
+      "evra": "1.2.0-5.fc36.aarch64"
     },
     "nettle": {
       "evra": "3.8-1.fc36.aarch64"
@@ -991,10 +994,10 @@
       "evra": "1.8.0-2.fc36.aarch64"
     },
     "podman": {
-      "evra": "4:4.2.1-2.fc36.aarch64"
+      "evra": "4:4.3.0-2.fc36.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.2.1-2.fc36.aarch64"
+      "evra": "4:4.3.0-2.fc36.aarch64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.aarch64"
@@ -1238,13 +1241,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-29T20:53:44Z",
+    "generated": "2022-10-30T20:53:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-28T22:46:21Z"
+        "generated": "2022-10-30T03:08:06Z"
       },
       "fedora-updates": {
         "generated": "2022-10-29T19:20:09Z"
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1cf11c19d3..b8bb79eb1f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.1.0-1.fc36.ppc64le"
+      "evra": "1.2.0-6.fc36.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.ppc64le"
@@ -145,7 +145,10 @@
       "evra": "1.1.0-1.fc36.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-59.fc36.noarch"
+      "evra": "4:1-62.fc36.noarch"
+    },
+    "containers-common-extra": {
+      "evra": "4:1-62.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc36.ppc64le"
@@ -889,7 +892,7 @@
       "evra": "2.0-0.61.20160912git.fc36.ppc64le"
     },
     "netavark": {
-      "evra": "1.1.0-1.fc36.ppc64le"
+      "evra": "1.2.0-5.fc36.ppc64le"
     },
     "nettle": {
       "evra": "3.8-1.fc36.ppc64le"
@@ -991,10 +994,10 @@
       "evra": "1.8.0-2.fc36.ppc64le"
     },
     "podman": {
-      "evra": "4:4.2.1-2.fc36.ppc64le"
+      "evra": "4:4.3.0-2.fc36.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.2.1-2.fc36.ppc64le"
+      "evra": "4:4.3.0-2.fc36.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.ppc64le"
@@ -1241,13 +1244,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-29T20:54:09Z",
+    "generated": "2022-10-30T20:54:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-28T22:45:48Z"
+        "generated": "2022-10-30T03:07:47Z"
       },
       "fedora-updates": {
         "generated": "2022-10-29T19:20:26Z"
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 35a2d71dee..36dc617a76 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.1.0-1.fc36.s390x"
+      "evra": "1.2.0-6.fc36.s390x"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.s390x"
@@ -142,7 +142,10 @@
       "evra": "1.1.0-1.fc36.s390x"
     },
     "containers-common": {
-      "evra": "4:1-59.fc36.noarch"
+      "evra": "4:1-62.fc36.noarch"
+    },
+    "containers-common-extra": {
+      "evra": "4:1-62.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc36.s390x"
@@ -835,7 +838,7 @@
       "evra": "2.0-0.61.20160912git.fc36.s390x"
     },
     "netavark": {
-      "evra": "1.1.0-1.fc36.s390x"
+      "evra": "1.2.0-5.fc36.s390x"
     },
     "nettle": {
       "evra": "3.8-1.fc36.s390x"
@@ -928,10 +931,10 @@
       "evra": "1.8.0-2.fc36.s390x"
     },
     "podman": {
-      "evra": "4:4.2.1-2.fc36.s390x"
+      "evra": "4:4.3.0-2.fc36.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.2.1-2.fc36.s390x"
+      "evra": "4:4.3.0-2.fc36.s390x"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.s390x"
@@ -1175,13 +1178,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-29T20:52:39Z",
+    "generated": "2022-10-30T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-28T22:45:36Z"
+        "generated": "2022-10-30T03:06:48Z"
       },
       "fedora-updates": {
         "generated": "2022-10-29T19:20:35Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 074f3f9424..ef43530b70 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.7.3.0-1.fc36.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.1.0-1.fc36.x86_64"
+      "evra": "1.2.0-6.fc36.x86_64"
     },
     "acl": {
       "evra": "2.3.1-3.fc36.x86_64"
@@ -145,7 +145,10 @@
       "evra": "1.1.0-1.fc36.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-59.fc36.noarch"
+      "evra": "4:1-62.fc36.noarch"
+    },
+    "containers-common-extra": {
+      "evra": "4:1-62.fc36.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc36.x86_64"
@@ -904,7 +907,7 @@
       "evra": "2.0-0.61.20160912git.fc36.x86_64"
     },
     "netavark": {
-      "evra": "1.1.0-1.fc36.x86_64"
+      "evra": "1.2.0-5.fc36.x86_64"
     },
     "nettle": {
       "evra": "3.8-1.fc36.x86_64"
@@ -1003,10 +1006,10 @@
       "evra": "1.8.0-2.fc36.x86_64"
     },
     "podman": {
-      "evra": "4:4.2.1-2.fc36.x86_64"
+      "evra": "4:4.3.0-2.fc36.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.2.1-2.fc36.x86_64"
+      "evra": "4:4.3.0-2.fc36.x86_64"
     },
     "policycoreutils": {
       "evra": "3.3-4.fc36.x86_64"
@@ -1247,13 +1250,13 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-29T20:52:39Z",
+    "generated": "2022-10-30T20:52:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-28T22:46:28Z"
+        "generated": "2022-10-30T03:07:53Z"
       },
       "fedora-updates": {
         "generated": "2022-10-29T19:20:44Z"

From 767c459e159f1e3de0181aafc94cd0abebd683a5 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 24 Oct 2022 18:52:28 +0800
Subject: [PATCH 1260/2157] tests: verify multiple nameservers config via
 kernel arguments work well

---
 tests/kola/networking/nameserver | 39 ++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100755 tests/kola/networking/nameserver

diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
new file mode 100755
index 0000000000..4682c63d43
--- /dev/null
+++ b/tests/kola/networking/nameserver
@@ -0,0 +1,39 @@
+#!/bin/bash
+# kola: { "platforms": "qemu", "appendKernelArgs": "nameserver=8.8.8.8 nameserver=1.1.1.1"}
+
+# Verify multiple nameservers config via kernel arguments work well
+# RHCOS: need to check /etc/resolv.conf and nmconnection
+# FCOS:  using systemd-resolved which needs to run resolvectl to check
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
+
+# - platforms: qemu
+#   - This test should pass everywhere if it passes anywhere.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if is_fcos; then
+    # run resolvectl
+    dns=$(resolvectl dns)
+    if ! ([[ "$dns" =~ "8.8.8.8" ]] && [[ "$dns" =~ "1.1.1.1" ]]); then
+        fatal "Error: can not find nameserver via resolvectl"
+    fi
+elif is_rhcos; then
+    # check nameserver in /etc/resolv.conf
+    resolv=/etc/resolv.conf
+    cat ${resolv}
+    if ! (grep -q "nameserver 8.8.8.8" ${resolv} && \
+        grep -q "nameserver 1.1.1.1" ${resolv}); then
+        fatal "Error: can not find nameserver in ${resolv}"
+    fi
+fi 
+
+# check nameserver in config file
+conf=/etc/NetworkManager/system-connections/default_connection.nmconnection
+cat ${conf}
+if ! grep -q "dns=8.8.8.8;1.1.1.1;" ${conf}; then
+    fatal "Error: can not find nameserver in ${conf}"
+fi
+
+ok "multiple nameserver"

From c7134fd297348acc563481564acedf169c760ee6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 1 Nov 2022 11:48:20 -0400
Subject: [PATCH 1261/2157] denylist: exclude ext.config.networking.nameserver
 on s390x

This test was recently introduced and fails on s390x. See
https://github.com/coreos/fedora-coreos-tracker/issues/1332
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9b1ff79331..2f30c9dead 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -45,3 +45,7 @@
     - testing-devel
     - testing
     - stable
+- pattern: ext.config.networking.nameserver
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1332
+  arches:
+  - s390x

From e05d480a82a8181dead19004e49a30ea6488ac20 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 1 Nov 2022 17:29:06 +0000
Subject: [PATCH 1262/2157] overrides: fast-track openssl-3.0.5-2.fc36

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 639ad3091f..626080dc4e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -33,6 +33,18 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
       type: fast-track
+  openssl:
+    evr: 1:3.0.5-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-502f096dce
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1329
+      type: fast-track
+  openssl-libs:
+    evr: 1:3.0.5-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-502f096dce
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1329
+      type: fast-track
   podman:
     evr: 4:4.3.0-2.fc36
     metadata:

From 656af75c4053b0f04cd1be55986f6d707dabdd70 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 18 Oct 2022 00:44:37 -0400
Subject: [PATCH 1263/2157] ci: detect unbracketed if expressions in shell
 scripts

Fail if `if $` or `if "$` appears in a shell script, since `if [ $` may
have been intended and the test will always return false if so.

This will generate false positives if a command is being run indirectly
via a shell variable.
---
 ci/validate | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ci/validate b/ci/validate
index 3aeeeb1c71..42f58471c1 100755
--- a/ci/validate
+++ b/ci/validate
@@ -2,6 +2,7 @@
 # Validate basic syntax of shell script and yaml.
 
 import os
+import re
 import stat
 import subprocess
 import yaml
@@ -31,8 +32,12 @@ def validate_initrd_service(rootfd, name):
             )
 
 
+BASH_UNBRACKETED_IF = re.compile(r'\sif\s+"?\$')
 def validate_shell(rootfd, name):
     subprocess.check_call(['bash', '-n', name], preexec_fn=lambda: os.fchdir(rootfd))
+    with openat(rootfd, name) as fh:
+        if BASH_UNBRACKETED_IF.search(fh.read()):
+            raise Exception(f'Possible unbracketed conditional in {name}')
     global validated
     validated +=1
 

From a8a7f60de3b1f6ff7e82734090e6ab86011b45df Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 18 Oct 2022 01:07:59 -0400
Subject: [PATCH 1264/2157] tests/kola: add test for Butane GRUB users sugar

---
 tests/kola/butane/grub-users/config.bu        |  8 +++
 .../kola/butane/grub-users/data/commonlib.sh  |  1 +
 tests/kola/butane/grub-users/test.sh          | 59 +++++++++++++++++++
 3 files changed, 68 insertions(+)
 create mode 100644 tests/kola/butane/grub-users/config.bu
 create mode 120000 tests/kola/butane/grub-users/data/commonlib.sh
 create mode 100755 tests/kola/butane/grub-users/test.sh

diff --git a/tests/kola/butane/grub-users/config.bu b/tests/kola/butane/grub-users/config.bu
new file mode 100644
index 0000000000..10e389fa38
--- /dev/null
+++ b/tests/kola/butane/grub-users/config.bu
@@ -0,0 +1,8 @@
+variant: fcos
+version: 1.5.0-experimental
+grub:
+  users:
+    - name: bovik
+      password_hash: grub.pbkdf2.sha512.10000.530F1D13E19326914A29D9899EE215EC3F7FBFC7B92EDAE3ED7A229431DAD23B53A18CC8218E2BAFD35532A6F0D1897B0CA74ED3BA604FCF439FEC13FA44ED6A.58F8D4F336F58970F78E546FAA9E4EA050E539D1A09831A72C9AC795FAEF820F7420331A0B36503255B67E501F9CDAC37D790E68737782FE9906EA42975F1B54
+    - name: core
+      password_hash: grub.pbkdf2.sha512.10000.79294A73DB2345902AB2DA6EAF83699188B6AC2393D23C95EEB234CEA95476834C8567AFF15166E6762C2F4846B99C3C9F173C0C8F7AED6BD76322FAB9491131.A94ED4C213A830266595B170AFE2591F2F19F04BEC82AA2B60A682AFD0DFBDC2A90F8D6204648B0539DEDDAF3E7C90C5DB54722A2FA54BD26D112C983D450BA8
diff --git a/tests/kola/butane/grub-users/data/commonlib.sh b/tests/kola/butane/grub-users/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/butane/grub-users/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
new file mode 100755
index 0000000000..28a248cda3
--- /dev/null
+++ b/tests/kola/butane/grub-users/test.sh
@@ -0,0 +1,59 @@
+#!/bin/bash
+## kola:
+##  # GRUB sugar currently only exists in FCOS
+##  distros: fcos
+##  # coreos-post-ignition-checks.service forbids GRUB passwords on
+##  # ppc64le and s390x
+##  architectures: "!ppc64le !s390x"
+##  # Running on multiple platforms won't prove anything further
+##  platforms: qemu
+#
+# Check Butane GRUB sugar as best we can from inside the OS.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+"")
+    # configuration written directly by Ignition
+    if ! grep -q '^set superusers="bovik core"$' /boot/grub2/user.cfg; then
+        fatal "Missing superusers in GRUB user.cfg"
+    fi
+    for user in bovik core; do
+        if ! grep -q "^password_pbkdf2 $user grub.pbkdf2.sha512.10000." /boot/grub2/user.cfg; then
+            fatal "Missing user $user in GRUB user.cfg"
+        fi
+    done
+    ok "Butane GRUB sugar"
+
+    # force a new deployment
+    rpm-ostree kargs --append test-added-karg
+    /tmp/autopkgtest-reboot rebooted
+    ;;
+rebooted)
+    # check that we booted into the correct deployment
+    if ! grep -q test-added-karg /proc/cmdline; then
+        fatal "Rebooted into old deployment"
+    fi
+    # cross-check karg with BLS configs
+    if grep -q test-added-karg /boot/loader.0/entries/ostree-1-fedora-coreos.conf; then
+        fatal "Old BLS config contains new karg"
+    fi
+    if ! grep -q test-added-karg /boot/loader.0/entries/ostree-2-fedora-coreos.conf; then
+        fatal "New BLS config doesn't contain new karg"
+    fi
+    # old deployment should require a password to boot
+    if ! grep -q '^grub_users ""$' /boot/loader.0/entries/ostree-1-fedora-coreos.conf; then
+        fatal "Missing grub_users setting in old BLS config"
+    fi
+    # new one should not
+    if grep -q grub_users /boot/loader.0/entries/ostree-2-fedora-coreos.conf; then
+        fatal "grub_users setting present in new BLS config"
+    fi
+    ok "BLS grub_users setting"
+    ;;
+*)
+    fatal "Unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"
+    ;;
+esac

From d7d40682debfa5a29d0a4e5ff4c73d52bd60f963 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 19 Oct 2022 02:03:17 -0400
Subject: [PATCH 1265/2157] overlay/15fcos: retroactively fix BLS grub_users
 setting (CVE-2022-3675)

Starting with FCOS 36.20220906.1.0, 36.20220906.2.0, and 36.20220820.3.0,
coreos-assembler inadvertently failed to configure ostree to set
`grub_users=""` in non-default BLS configs, allowing old deployments to
be booted without a GRUB password.  Add a service that fixes this setting
on the first boot after upgrade, if the aleph version corresponds to an
affected release.

This can be reverted after the next update barrier in all streams.

For https://github.com/coreos/fedora-coreos-tracker/issues/1333.
---
 .../lib/systemd/system-preset/45-fcos.preset  |   2 +
 .../system/coreos-fix-grub-users.service      |  20 +++
 .../15fcos/usr/libexec/coreos-fix-grub-users  |  57 +++++++
 tests/kola/butane/data/commonlib.sh           |   1 +
 tests/kola/butane/grub-users-fix              | 145 ++++++++++++++++++
 5 files changed, 225 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
 create mode 100755 overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
 create mode 120000 tests/kola/butane/data/commonlib.sh
 create mode 100755 tests/kola/butane/grub-users-fix

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index fd18bec843..ce2ae419f6 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,3 +1,5 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
+# Patch BLS grub_users setting
+enable coreos-fix-grub-users.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
new file mode 100644
index 0000000000..7e48301cf6
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
@@ -0,0 +1,20 @@
+# Remove after the next update barrier in all streams.
+
+[Unit]
+Description=Fix ostree grub_users Setting
+Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1333
+ConditionPathExists=!/var/lib/coreos/fix-grub-users.stamp
+# No GRUB on s390x.  ppc64le has petitboot, which ignores these GRUB
+# commands, but do the update there anyway for consistency.
+ConditionArchitecture=!s390x
+RequiresMountsFor=/var/lib/coreos
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-fix-grub-users
+RemainAfterExit=yes
+# We remount /boot read-write
+MountFlags=slave
+
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users b/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
new file mode 100755
index 0000000000..d35e17d06e
--- /dev/null
+++ b/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
@@ -0,0 +1,57 @@
+#!/bin/bash
+#
+# Set ostree sysroot.bls-append-except-default on instances booted from
+# images that incorrectly shipped without it.
+
+set -euo pipefail
+
+STAMP=/var/lib/coreos/fix-grub-users.stamp
+
+aleph_ver=$(jq -r .build < /sysroot/.coreos-aleph-version.json)
+date=$(echo "$aleph_ver" | cut -f2 -d.)
+stream=$(echo "$aleph_ver" | cut -f3 -d.)
+
+if [ "$stream" = "3" ]; then
+    start=20220819
+    end=20221012
+else
+    start=20220901
+    end=20221029
+fi
+
+mkdir -p /var/lib/coreos
+
+if [ "$date" -lt "$start" ]; then
+    echo "Image is too old to be affected; exiting"
+    touch "$STAMP"
+    exit 0
+fi
+
+if [ "$date" -gt "$end" ]; then
+    echo "Image is too new to be affected; exiting"
+    touch "$STAMP"
+    exit 0
+fi
+
+if ostree config get sysroot.bls-append-except-default 2>/dev/null; then
+    # user-set value?
+    echo "sysroot.bls-append-except-default already has a value; exiting"
+    touch "$STAMP"
+    exit 0
+fi
+
+echo "Setting value of sysroot.bls-append-except-default"
+ostree config set sysroot.bls-append-except-default 'grub_users=""'
+
+echo "Fixing existing deployments"
+mount -o remount,rw /boot
+cd /boot/loader/entries
+# Ignore the default deployment, which is last when sorted numerically
+for f in $(ls -v ostree-*.conf | head -n -1); do
+    if ! grep -q "^grub_users " "$f"; then
+        echo "Fixing $f"
+        echo 'grub_users ""' >> "$f"
+    fi
+done
+
+touch "$STAMP"
diff --git a/tests/kola/butane/data/commonlib.sh b/tests/kola/butane/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/butane/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/butane/grub-users-fix b/tests/kola/butane/grub-users-fix
new file mode 100755
index 0000000000..107c225cfb
--- /dev/null
+++ b/tests/kola/butane/grub-users-fix
@@ -0,0 +1,145 @@
+#!/bin/bash
+## kola:
+##  # The fixup only exists in FCOS
+##  distros: fcos
+##  # Service doesn't run on s390x because there's no GRUB
+##  architectures: "!s390x"
+##  # Running on multiple platforms won't prove anything further
+##  platforms: qemu
+#
+# Test coreos-fix-grub-users.service.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+STAMP=/var/lib/coreos/fix-grub-users.stamp
+
+fatal_ctx() {
+    fatal "$1 ($AUTOPKGTEST_REBOOT_MARK)"
+}
+
+check() {
+    logline="$1"; shift
+    if ! grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /proc/cmdline; then
+        fatal_ctx "Did not boot into correct deployment"
+    fi
+    if grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /boot/loader/entries/ostree-1-*.conf; then
+        fatal_ctx "Previous deployment contains new karg"
+    fi
+    if ! grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /boot/loader/entries/ostree-2-*.conf; then
+        fatal_ctx "Current deployment does not contain new karg"
+    fi
+    if [ ! -e "$STAMP" ]; then
+        fatal_ctx "Service stamp was not created"
+    fi
+    if touch /boot/z 2>/dev/null; then
+        fatal_ctx "/boot is mounted read-write"
+    fi
+    if touch /sysroot/ostree/repo/z 2>/dev/null; then
+        fatal_ctx "/sysroot is mounted read-write"
+    fi
+    if ! journalctl -b 0 -u coreos-fix-grub-users.service | grep -q "$logline"; then
+        journalctl -b 0 -o cat -u coreos-fix-grub-users.service
+        fatal_ctx "Did not find '$logline' in service output"
+    fi
+}
+
+check_success() {
+    check "Setting value of"
+    if [ "$(ostree config get sysroot.bls-append-except-default)" != 'grub_users=""' ]; then
+        fatal_ctx "Did not find grub_users setting in ostree config"
+    fi
+    if ! grep -q "^grub_users" /boot/loader/entries/ostree-1-*.conf; then
+        fatal_ctx "Did not find grub_users directive in previous deployment"
+    fi
+    if grep -q "^grub_users" /boot/loader/entries/ostree-2-*.conf; then
+        fatal_ctx "Found grub_users directive in current deployment"
+    fi
+}
+
+configure() {
+    ver="$1"; shift
+    # delete previous deployment
+    rpm-ostree cleanup -pr
+    mount -o remount,rw /sysroot
+    ostree config unset sysroot.bls-append-except-default
+    sed '/"build"/s/.*/"build": "'$ver'",/' \
+        /sysroot/.coreos-aleph-version.json > /tmp/aleph-version
+    cat /tmp/aleph-version > /sysroot/.coreos-aleph-version.json
+    rm -f $STAMP
+}
+
+reboot() {
+    mark="$1"; shift
+    # ensure there's a previous deployment
+    rpm-ostree kargs --append "zz-$mark-zz"
+    ok "Rebooting into $mark"
+    /tmp/autopkgtest-reboot "$mark"
+}
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+"")
+    # don't make assumptions about whether the fix has been applied in this
+    # image
+    configure 36.20220906.2.0
+    reboot testing-active-first
+    ;;
+testing-active-first)
+    check_success
+    reboot testing-duplicate
+    ;;
+testing-duplicate)
+    check "failed condition check"
+    configure 36.20221014.2.1
+    reboot testing-active-last
+    ;;
+testing-active-last)
+    check_success
+    configure 36.20220820.2.0
+    reboot testing-early
+    ;;
+testing-early)
+    check "too old to be affected"
+    configure 36.20221031.2.0
+    reboot testing-late
+    ;;
+testing-late)
+    check "too new to be affected"
+    configure 36.20220906.2.0
+    ostree config set sysroot.bls-append-except-default 'foo=bar'
+    reboot testing-already-set
+    ;;
+testing-already-set)
+    check "already has a value"
+    configure 37.20221021.1.1
+    reboot next-active-last
+    ;;
+next-active-last)
+    check_success
+    configure 36.20220820.3.0
+    reboot stable-active-first
+    ;;
+stable-active-first)
+    check_success
+    configure 36.20221001.3.1
+    reboot stable-active-last
+    ;;
+stable-active-last)
+    check_success
+    configure 36.20220806.3.0
+    reboot stable-early
+    ;;
+stable-early)
+    check "too old to be affected"
+    configure 36.20221014.3.0
+    reboot stable-late
+    ;;
+stable-late)
+    check "too new to be affected"
+    ok "All tests passed"
+    ;;
+*)
+    fatal_ctx "Unexpected mark"
+    ;;
+esac

From 18b93e93d5362cead1b58fbb7c181c0323001fe7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 1 Nov 2022 23:31:42 -0400
Subject: [PATCH 1266/2157] tests/kola/butane/grub-users: correctly skip on
 s390x

The correct negation syntax is one exclamation mark followed by one or
more items to exclude.
---
 tests/kola/butane/grub-users/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index 28a248cda3..38dbffa8b9 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -4,7 +4,7 @@
 ##  distros: fcos
 ##  # coreos-post-ignition-checks.service forbids GRUB passwords on
 ##  # ppc64le and s390x
-##  architectures: "!ppc64le !s390x"
+##  architectures: "!ppc64le s390x"
 ##  # Running on multiple platforms won't prove anything further
 ##  platforms: qemu
 #

From 26fcb4cde68857f1055b1b7499e51f5e59c6c3c1 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 1 Nov 2022 23:45:19 -0400
Subject: [PATCH 1267/2157] tests/kola/butane/grub-users-fix: increase timeout

10 minutes isn't quite enough on the ppc64le runners.
---
 tests/kola/butane/grub-users-fix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/kola/butane/grub-users-fix b/tests/kola/butane/grub-users-fix
index 107c225cfb..02877ca854 100755
--- a/tests/kola/butane/grub-users-fix
+++ b/tests/kola/butane/grub-users-fix
@@ -6,6 +6,8 @@
 ##  architectures: "!s390x"
 ##  # Running on multiple platforms won't prove anything further
 ##  platforms: qemu
+##  # 10 minutes is not quite enough on ppc64le runners
+##  timeoutMin: 15
 #
 # Test coreos-fix-grub-users.service.
 

From ad45d541d0d3b2edfbfc8a362e0520f259009a8c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Nov 2022 12:09:49 -0400
Subject: [PATCH 1268/2157] denylist: aws.nvme: extend snooze and re-apply to
 all streams

It seems as if the fix that AWS had applied is no longer working.
See https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
---
 kola-denylist.yaml | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 2f30c9dead..93b73d8792 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -39,12 +39,8 @@
   arches:
   - s390x
 - pattern: ext.config.platforms.aws.nvme
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306
-  snooze: 2022-11-05
-  streams:
-    - testing-devel
-    - testing
-    - stable
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
+  snooze: 2022-12-05
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1332
   arches:

From 61b9d774fb5cbdd5c76aed6ce47bc12e7d74c04d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Nov 2022 18:57:36 +0000
Subject: [PATCH 1269/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/225/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 662d32b65b..66062defb5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -190,7 +190,7 @@
       "evra": "2.4.3-2.fc36.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-8.fc36.aarch64"
+      "evra": "7.82.0-9.fc36.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.aarch64"
@@ -556,7 +556,7 @@
       "evra": "1.46.5-2.fc36.aarch64"
     },
     "libcurl": {
-      "evra": "7.82.0-8.fc36.aarch64"
+      "evra": "7.82.0-9.fc36.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.aarch64"
@@ -943,10 +943,10 @@
       "evra": "8.8p1-1.fc36.1.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.5-1.fc36.aarch64"
+      "evra": "1:3.0.5-2.fc36.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-1.fc36.aarch64"
+      "evra": "1:3.0.5-2.fc36.aarch64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.aarch64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-30T20:53:48Z",
+    "generated": "2022-11-02T18:21:14Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-30T03:08:06Z"
+        "generated": "2022-11-01T17:54:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-29T19:20:09Z"
+        "generated": "2022-11-02T16:31:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b8bb79eb1f..2db73578b7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -190,7 +190,7 @@
       "evra": "2.4.3-2.fc36.ppc64le"
     },
     "curl": {
-      "evra": "7.82.0-8.fc36.ppc64le"
+      "evra": "7.82.0-9.fc36.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.ppc64le"
@@ -550,7 +550,7 @@
       "evra": "1.46.5-2.fc36.ppc64le"
     },
     "libcurl": {
-      "evra": "7.82.0-8.fc36.ppc64le"
+      "evra": "7.82.0-9.fc36.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.ppc64le"
@@ -940,10 +940,10 @@
       "evra": "8.8p1-1.fc36.1.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.5-1.fc36.ppc64le"
+      "evra": "1:3.0.5-2.fc36.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-1.fc36.ppc64le"
+      "evra": "1:3.0.5-2.fc36.ppc64le"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-30T20:54:00Z",
+    "generated": "2022-11-02T18:22:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-30T03:07:47Z"
+        "generated": "2022-11-01T17:54:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-29T19:20:26Z"
+        "generated": "2022-11-02T16:31:47Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 36dc617a76..848b33227a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -187,7 +187,7 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "curl": {
-      "evra": "7.82.0-8.fc36.s390x"
+      "evra": "7.82.0-9.fc36.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.s390x"
@@ -520,7 +520,7 @@
       "evra": "1.46.5-2.fc36.s390x"
     },
     "libcurl": {
-      "evra": "7.82.0-8.fc36.s390x"
+      "evra": "7.82.0-9.fc36.s390x"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.s390x"
@@ -883,10 +883,10 @@
       "evra": "8.8p1-1.fc36.1.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.5-1.fc36.s390x"
+      "evra": "1:3.0.5-2.fc36.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-1.fc36.s390x"
+      "evra": "1:3.0.5-2.fc36.s390x"
     },
     "ostree": {
       "evra": "2022.5-2.fc36.s390x"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-30T20:52:39Z",
+    "generated": "2022-11-02T18:21:08Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-30T03:06:48Z"
+        "generated": "2022-11-01T17:54:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-29T19:20:35Z"
+        "generated": "2022-11-02T16:31:57Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef43530b70..a1ff5c92fb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,7 +190,7 @@
       "evra": "2.4.3-2.fc36.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-8.fc36.x86_64"
+      "evra": "7.82.0-9.fc36.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.27-18.fc36.x86_64"
@@ -562,7 +562,7 @@
       "evra": "1.46.5-2.fc36.x86_64"
     },
     "libcurl": {
-      "evra": "7.82.0-8.fc36.x86_64"
+      "evra": "7.82.0-9.fc36.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-23.fc36.x86_64"
@@ -955,10 +955,10 @@
       "evra": "8.8p1-1.fc36.1.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.5-1.fc36.x86_64"
+      "evra": "1:3.0.5-2.fc36.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-1.fc36.x86_64"
+      "evra": "1:3.0.5-2.fc36.x86_64"
     },
     "os-prober": {
       "evra": "1.77-9.fc36.x86_64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-10-30T20:52:47Z",
+    "generated": "2022-11-02T18:21:09Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-10-30T03:07:53Z"
+        "generated": "2022-11-01T17:56:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-10-29T19:20:44Z"
+        "generated": "2022-11-02T16:32:06Z"
       }
     }
   }

From 90047a19a1340c18acb7e05d2e9f6de9e1d0b91d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Nov 2022 20:09:40 +0000
Subject: [PATCH 1270/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 626080dc4e..639ad3091f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -33,18 +33,6 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
       type: fast-track
-  openssl:
-    evr: 1:3.0.5-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-502f096dce
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1329
-      type: fast-track
-  openssl-libs:
-    evr: 1:3.0.5-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-502f096dce
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1329
-      type: fast-track
   podman:
     evr: 4:4.3.0-2.fc36
     metadata:

From 055636aa0343cd311ed35db6026e4e0725d8da1f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Nov 2022 16:47:23 -0400
Subject: [PATCH 1271/2157] tests/default-network-behavior-change: update for
 NM 1.41.3+

Looks like there was a slight change upstream [1] to add
`autoconnect-priority=-100` to the generated NM connection file.
I think this should be harmless for our uses.

SCOS and Rawhide are both affected by this.

Also dropped some out of date comments.

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1376/diffs?commit_id=98575bd5138afdb61a3837a2a73436eb05490f4a
---
 .../default-network-behavior-change/test.sh   | 43 +++++++++++++++----
 1 file changed, 34 insertions(+), 9 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 49e9f9df5c..ade387cb6e 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -93,7 +93,7 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG4
-#   - used on Fedora 37+ and scos
+#   - used on Fedora 37+
 EXPECTED_INITRD_NETWORK_CFG4="# Created by nm-initrd-generator
 
 [connection]
@@ -119,6 +119,34 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
+# EXPECTED_INITRD_NETWORK_CFG5
+#   - used on Fedora 38+ and scos
+EXPECTED_INITRD_NETWORK_CFG5="# Created by nm-initrd-generator
+
+[connection]
+id=Wired Connection
+uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+type=ethernet
+autoconnect-priority=-100
+autoconnect-retries=1
+multi-connect=3
+
+[ethernet]
+
+[ipv4]
+dhcp-timeout=90
+method=auto
+required-timeout=20000
+
+[ipv6]
+dhcp-timeout=90
+method=auto
+
+[proxy]
+
+[user]
+org.freedesktop.NetworkManager.origin=nm-initrd-generator"
+
 # EXPECTED_REALROOT_NETWORK_CFG1:
 #   - used on RHEL <= 8.5
 EXPECTED_REALROOT_NETWORK_CFG1="[connection]
@@ -202,10 +230,11 @@ normalize_connection_file() {
 }
 
 source /etc/os-release
-# All current FCOS releases use the same config
-# https://github.com/coreos/fedora-coreos-config/pull/1533
 if [ "$ID" == "fedora" ]; then
-    if [ "$VERSION_ID" -ge "37" ]; then
+    if [ "$VERSION_ID" -ge "38" ]; then
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG5
+        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
+    elif [ "$VERSION_ID" -eq "37" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
     elif [ "$VERSION_ID" -eq "36" ]; then
@@ -218,13 +247,9 @@ elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
 
-    # scos includes NetworkManager-1.39.10-1.el9.x86_64, update scripts
-    # according to F37
     if is_scos; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
+        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG5
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
-    # RHEL8.6 includes NetworkManager-1.36.0-1.el8.x86_64, update scripts
-    # according to F36
     elif [ "${RHEL_VERSION/\./}" -ge 86 ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2

From 010ad3d732241c8f2eb19133511c325d34503b52 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 2 Nov 2022 16:52:55 -0400
Subject: [PATCH 1272/2157] tests/default-network-behavior-change: drop unused
 EXPECTED_INITRD_NETWORK_CFG1

Nothing we test on still uses that profile so let's drop it from
the code.
---
 .../default-network-behavior-change/test.sh   | 29 -------------------
 1 file changed, 29 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index ade387cb6e..943da53898 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -12,35 +12,6 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# EXPECTED_INITRD_NETWORK_CFG1
-#   - used on RHEL 8.5 release
-EXPECTED_INITRD_NETWORK_CFG1="[connection]
-id=Wired Connection
-uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
-type=ethernet
-autoconnect-retries=1
-multi-connect=3
-permissions=
-
-[ethernet]
-mac-address-blacklist=
-
-[ipv4]
-dhcp-timeout=90
-dns-search=
-method=auto
-required-timeout=20000
-
-[ipv6]
-addr-gen-mode=eui64
-dhcp-timeout=90
-dns-search=
-method=auto
-
-[proxy]
-
-[user]
-org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG2
 #   - used on older RHEL 8.4 release
 EXPECTED_INITRD_NETWORK_CFG2="[connection]

From 5479370c239f945b42d47854c1a91f5439a77cad Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 2 Nov 2022 13:02:55 -0400
Subject: [PATCH 1273/2157] tests/kola/selinux: add test that policy isn't
 recompiled

This is a test for https://github.com/openshift/os/issues/1036. It also
exists in the rpm-ostree CI, but let's have it here too since other
packages can break this.
---
 tests/kola/selinux/default | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100755 tests/kola/selinux/default

diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
new file mode 100755
index 0000000000..46102952a8
--- /dev/null
+++ b/tests/kola/selinux/default
@@ -0,0 +1,15 @@
+#!/bin/bash
+# Verify that the SELinux policy isn't marked as modified.
+# See: https://github.com/openshift/os/issues/1036.
+## kola:
+##   exclusive: false
+##   tags: "platform-independent"
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ostree admin config-diff | grep 'selinux/targeted/policy'; then
+    fatal "SELinux policy is marked as modified"
+fi
+ok "SELinux policy not marked as modified"

From 0885a7883edf199f031e1addd0271bb592de7c28 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 3 Nov 2022 19:11:09 +0000
Subject: [PATCH 1274/2157] overrides: fast-track libxml2-2.10.3-2.fc36

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 639ad3091f..280360e245 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -27,6 +27,12 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
       type: fast-track
+  libxml2:
+    evr: 2.10.3-2.fc36
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d7349a124a
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1336
+      type: fast-track
   netavark:
     evr: 1.2.0-5.fc36
     metadata:

From e38fd8a9ff85a43d95b9b67bc7bfe05247a110d6 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 24 Oct 2022 12:16:23 -0400
Subject: [PATCH 1275/2157] ci: bump memory request to 9Gi

Noticed in https://github.com/coreos/fedora-coreos-config/pull/2031 that
the `kola testiso` was killed:

    FAIL: iso-offline-install (bios + metal) (1m35.505s)
        signal: killed
    Error: signal: killed

This is likely due to hitting up against the memory limit. It seems like
512Mi of overhead isn't enough. Let's bump it to 1Gi.
---
 .cci.jenkinsfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index a17bb7991f..ed3d127aa6 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -1,7 +1,7 @@
 // Documentation: https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md
 
-// We run `kolaTestIso` which requires at least 8Gi. Add 512M for overhead.
-cosaPod(cpus: 4, memory: "8704Mi") {
+// We run `kolaTestIso` which requires at least 8Gi. Add 1Gi for overhead.
+cosaPod(cpus: 4, memory: "9Gi") {
     checkoutToDir(scm, 'config')
 
     def basearch = shwrapCapture("cosa basearch")

From 239660be7d9599956205155a7995a6a4ebd46348 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 4 Nov 2022 15:16:07 -0400
Subject: [PATCH 1276/2157] tests/kola/butane/grub-users-fix: increase timeout
 again

15 minutes still isn't reliably enough for ppc64le.
---
 tests/kola/butane/grub-users-fix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/butane/grub-users-fix b/tests/kola/butane/grub-users-fix
index 02877ca854..e8769e31d9 100755
--- a/tests/kola/butane/grub-users-fix
+++ b/tests/kola/butane/grub-users-fix
@@ -6,8 +6,8 @@
 ##  architectures: "!s390x"
 ##  # Running on multiple platforms won't prove anything further
 ##  platforms: qemu
-##  # 10 minutes is not quite enough on ppc64le runners
-##  timeoutMin: 15
+##  # 15 minutes is not quite enough on ppc64le runners
+##  timeoutMin: 20
 #
 # Test coreos-fix-grub-users.service.
 

From f907422f874d254a2370359da89db3ba9fb7ceb8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 5 Nov 2022 22:17:18 +0000
Subject: [PATCH 1277/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/239/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 66062defb5..48dd0d03e1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,7 +484,7 @@
       "evra": "6.0.5-200.fc36.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.24-4.fc36.aarch64"
+      "evra": "2.0.25-1.fc36.aarch64"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.aarch64"
@@ -583,7 +583,7 @@
       "evra": "3.4.2-8.fc36.aarch64"
     },
     "libfido2": {
-      "evra": "1.10.0-3.fc36.aarch64"
+      "evra": "1.10.0-4.fc36.aarch64"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.aarch64"
@@ -814,7 +814,7 @@
       "evra": "4.4.28-1.fc36.aarch64"
     },
     "libxml2": {
-      "evra": "2.10.3-1.fc36.aarch64"
+      "evra": "2.10.3-2.fc36.aarch64"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.aarch64"
@@ -1186,7 +1186,7 @@
       "evra": "3.2.0-3.fc36.aarch64"
     },
     "tzdata": {
-      "evra": "2022e-1.fc36.noarch"
+      "evra": "2022f-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.aarch64"
@@ -1198,10 +1198,10 @@
       "evra": "2.38-1.fc36.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.803-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.803-1.fc36.aarch64"
+      "evra": "2:9.0.828-1.fc36.aarch64"
     },
     "which": {
       "evra": "2.21-32.fc36.aarch64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-02T18:21:14Z",
+    "generated": "2022-11-05T20:53:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-01T17:54:39Z"
+        "generated": "2022-11-03T20:29:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-02T16:31:28Z"
+        "generated": "2022-11-05T16:51:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2db73578b7..d73f7906a1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,7 +478,7 @@
       "evra": "6.0.5-200.fc36.ppc64le"
     },
     "kexec-tools": {
-      "evra": "2.0.24-4.fc36.ppc64le"
+      "evra": "2.0.25-1.fc36.ppc64le"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.ppc64le"
@@ -577,7 +577,7 @@
       "evra": "3.4.2-8.fc36.ppc64le"
     },
     "libfido2": {
-      "evra": "1.10.0-3.fc36.ppc64le"
+      "evra": "1.10.0-4.fc36.ppc64le"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.ppc64le"
@@ -814,7 +814,7 @@
       "evra": "4.4.28-1.fc36.ppc64le"
     },
     "libxml2": {
-      "evra": "2.10.3-1.fc36.ppc64le"
+      "evra": "2.10.3-2.fc36.ppc64le"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.ppc64le"
@@ -1189,7 +1189,7 @@
       "evra": "3.2.0-3.fc36.ppc64le"
     },
     "tzdata": {
-      "evra": "2022e-1.fc36.noarch"
+      "evra": "2022f-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38-1.fc36.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.803-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.803-1.fc36.ppc64le"
+      "evra": "2:9.0.828-1.fc36.ppc64le"
     },
     "which": {
       "evra": "2.21-32.fc36.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-02T18:22:16Z",
+    "generated": "2022-11-05T20:53:34Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-01T17:54:16Z"
+        "generated": "2022-11-03T20:29:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-02T16:31:47Z"
+        "generated": "2022-11-05T16:51:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 848b33227a..500e7b5c3b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -448,7 +448,7 @@
       "evra": "6.0.5-200.fc36.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.24-4.fc36.s390x"
+      "evra": "2.0.25-1.fc36.s390x"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.s390x"
@@ -547,7 +547,7 @@
       "evra": "3.4.2-8.fc36.s390x"
     },
     "libfido2": {
-      "evra": "1.10.0-3.fc36.s390x"
+      "evra": "1.10.0-4.fc36.s390x"
     },
     "libgcc": {
       "evra": "12.2.1-2.fc36.s390x"
@@ -763,7 +763,7 @@
       "evra": "4.4.28-1.fc36.s390x"
     },
     "libxml2": {
-      "evra": "2.10.3-1.fc36.s390x"
+      "evra": "2.10.3-2.fc36.s390x"
     },
     "libyaml": {
       "evra": "0.2.5-7.fc36.s390x"
@@ -1120,7 +1120,7 @@
       "evra": "3.2.0-3.fc36.s390x"
     },
     "tzdata": {
-      "evra": "2022e-1.fc36.noarch"
+      "evra": "2022f-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.s390x"
@@ -1135,10 +1135,10 @@
       "evra": "2.4.3-2.fc36.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.803-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.803-1.fc36.s390x"
+      "evra": "2:9.0.828-1.fc36.s390x"
     },
     "which": {
       "evra": "2.21-32.fc36.s390x"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-02T18:21:08Z",
+    "generated": "2022-11-05T20:52:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-01T17:54:08Z"
+        "generated": "2022-11-03T20:28:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-02T16:31:57Z"
+        "generated": "2022-11-05T16:51:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a1ff5c92fb..0661bc6803 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,7 +490,7 @@
       "evra": "6.0.5-200.fc36.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.24-4.fc36.x86_64"
+      "evra": "2.0.25-1.fc36.x86_64"
     },
     "keyutils": {
       "evra": "1.6.1-4.fc36.x86_64"
@@ -589,7 +589,7 @@
       "evra": "3.4.2-8.fc36.x86_64"
     },
     "libfido2": {
-      "evra": "1.10.0-3.fc36.x86_64"
+      "evra": "1.10.0-4.fc36.x86_64"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.x86_64"
@@ -823,7 +823,7 @@
       "evra": "4.4.28-1.fc36.x86_64"
     },
     "libxml2": {
-      "evra": "2.10.3-1.fc36.x86_64"
+      "evra": "2.10.3-2.fc36.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.10-1.fc36.x86_64"
@@ -1195,7 +1195,7 @@
       "evra": "3.2.0-3.fc36.x86_64"
     },
     "tzdata": {
-      "evra": "2022e-1.fc36.noarch"
+      "evra": "2022f-1.fc36.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-4.fc36.x86_64"
@@ -1207,10 +1207,10 @@
       "evra": "2.38-1.fc36.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.803-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc36.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.803-1.fc36.x86_64"
+      "evra": "2:9.0.828-1.fc36.x86_64"
     },
     "which": {
       "evra": "2.21-32.fc36.x86_64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-02T18:21:09Z",
+    "generated": "2022-11-05T20:52:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-01T17:56:15Z"
+        "generated": "2022-11-03T20:32:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-02T16:32:06Z"
+        "generated": "2022-11-05T16:51:39Z"
       }
     }
   }

From 3d1aadbc78a13158e567159d06c46f859fb01017 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 7 Nov 2022 20:55:37 +0000
Subject: [PATCH 1278/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/248/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 48dd0d03e1..78a7fc1fb1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-05T20:53:05Z",
+    "generated": "2022-11-07T20:54:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-03T20:29:55Z"
+        "generated": "2022-11-06T22:28:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-05T16:51:02Z"
+        "generated": "2022-11-06T19:17:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d73f7906a1..46d4827c9f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-05T20:53:34Z",
+    "generated": "2022-11-07T20:55:30Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-03T20:29:59Z"
+        "generated": "2022-11-06T22:27:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-05T16:51:21Z"
+        "generated": "2022-11-06T19:17:38Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 500e7b5c3b..c98f7bd5b0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-05T20:52:51Z",
+    "generated": "2022-11-07T20:54:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-03T20:28:09Z"
+        "generated": "2022-11-06T22:27:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-05T16:51:30Z"
+        "generated": "2022-11-06T19:17:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0661bc6803..d0f4461761 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-05T20:52:57Z",
+    "generated": "2022-11-07T20:54:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-03T20:32:04Z"
+        "generated": "2022-11-06T22:28:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-05T16:51:39Z"
+        "generated": "2022-11-06T19:17:56Z"
       }
     }
   }

From 546eeab1cc80643efd8f23e7473c6e298bd7da90 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 8 Nov 2022 18:32:26 +0800
Subject: [PATCH 1279/2157] s390x: not run ext.config.networking.nameserver

The test is currently not working on s390x.
See https://github.com/coreos/coreos-assembler/issues/2776
---
 kola-denylist.yaml               | 4 ----
 tests/kola/networking/nameserver | 5 ++++-
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 93b73d8792..749d8e9eaf 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,7 +41,3 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
   snooze: 2022-12-05
-- pattern: ext.config.networking.nameserver
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1332
-  arches:
-  - s390x
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 4682c63d43..f602d7747d 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "appendKernelArgs": "nameserver=8.8.8.8 nameserver=1.1.1.1"}
+# kola: { "platforms": "qemu", "appendKernelArgs": "nameserver=8.8.8.8 nameserver=1.1.1.1", "architectures": "!s390x"}
 
 # Verify multiple nameservers config via kernel arguments work well
 # RHCOS: need to check /etc/resolv.conf and nmconnection
@@ -8,6 +8,9 @@
 
 # - platforms: qemu
 #   - This test should pass everywhere if it passes anywhere.
+# - architectures: !s390x
+#   - appendKernelArgs doesn't work on s390x
+#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 set -xeuo pipefail
 

From e4650c1ff7db5c8302d512e71e1b234fe53c1bb1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 8 Nov 2022 23:29:11 +0000
Subject: [PATCH 1280/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/253/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 78a7fc1fb1..b582e187bb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.190.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.aarch64"
@@ -1241,7 +1241,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-07T20:54:48Z",
+    "generated": "2022-11-08T22:02:05Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1250,7 +1250,7 @@
         "generated": "2022-11-06T22:28:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-06T19:17:19Z"
+        "generated": "2022-11-07T20:54:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 46d4827c9f..0efdc80ac4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.190.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.ppc64le"
@@ -1244,7 +1244,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-07T20:55:30Z",
+    "generated": "2022-11-08T22:03:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
@@ -1253,7 +1253,7 @@
         "generated": "2022-11-06T22:27:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-06T19:17:38Z"
+        "generated": "2022-11-07T20:54:27Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c98f7bd5b0..a4eec85538 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.190.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.s390x"
@@ -1178,7 +1178,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-07T20:54:55Z",
+    "generated": "2022-11-08T22:01:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
@@ -1187,7 +1187,7 @@
         "generated": "2022-11-06T22:27:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-06T19:17:47Z"
+        "generated": "2022-11-07T20:54:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d0f4461761..41c90f052d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-1.fc36.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.190.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc36.noarch"
     },
     "containerd": {
       "evra": "1.6.8-4.fc36.x86_64"
@@ -1250,7 +1250,7 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-07T20:54:51Z",
+    "generated": "2022-11-08T22:02:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
@@ -1259,7 +1259,7 @@
         "generated": "2022-11-06T22:28:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-06T19:17:56Z"
+        "generated": "2022-11-07T20:54:46Z"
       }
     }
   }

From 369431bc46879f291b46be91d20cc60e7c8d79ff Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 9 Nov 2022 12:07:30 +0000
Subject: [PATCH 1281/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 280360e245..639ad3091f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -27,12 +27,6 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
       type: fast-track
-  libxml2:
-    evr: 2.10.3-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-d7349a124a
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1336
-      type: fast-track
   netavark:
     evr: 1.2.0-5.fc36
     metadata:

From fb3b09dbf42dbd45a4e633e2b52ee5e19cff839a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 9 Nov 2022 23:29:34 -0500
Subject: [PATCH 1282/2157] denylist: deny default-network-behavior-change on
 rawhide

We need to revert to an older NetworkManager for a short period of
time, but we already updated the test for the new NetworkManager.
Let's just deny it for now.

See https://github.com/coreos/fedora-coreos-tracker/issues/1341
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 749d8e9eaf..1d769371a9 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,3 +41,8 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
   snooze: 2022-12-05
+- pattern: ext.config.networking.default-network-behavior-change
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
+  snooze: 2023-01-05
+  streams:
+    - rawhide

From 02e829c19bc2a875d9819b946d385dcc02b907e8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 10 Nov 2022 22:15:57 +0000
Subject: [PATCH 1283/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/259/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b582e187bb..08404eaf3c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -223,10 +223,10 @@
       "evra": "1.02.175-7.fc36.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-8.fc36.aarch64"
+      "evra": "0.8.7-9.fc36.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-8.fc36.aarch64"
+      "evra": "0.8.7-9.fc36.aarch64"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-7.fc36.aarch64"
@@ -277,7 +277,7 @@
       "evra": "2:6.0-1.fc36.aarch64"
     },
     "expat": {
-      "evra": "2.4.9-1.fc36.aarch64"
+      "evra": "2.5.0-1.fc36.aarch64"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -475,13 +475,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "6.0.5-200.fc36.aarch64"
+      "evra": "6.0.7-200.fc36.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.5-200.fc36.aarch64"
+      "evra": "6.0.7-200.fc36.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.5-200.fc36.aarch64"
+      "evra": "6.0.7-200.fc36.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc36.aarch64"
@@ -499,7 +499,7 @@
       "evra": "29-7.fc36.aarch64"
     },
     "kpartx": {
-      "evra": "0.8.7-8.fc36.aarch64"
+      "evra": "0.8.7-9.fc36.aarch64"
     },
     "krb5-libs": {
       "evra": "1.19.2-11.fc36.aarch64"
@@ -583,7 +583,7 @@
       "evra": "3.4.2-8.fc36.aarch64"
     },
     "libfido2": {
-      "evra": "1.10.0-4.fc36.aarch64"
+      "evra": "1.10.0-5.fc36.aarch64"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.aarch64"
@@ -811,7 +811,7 @@
       "evra": "2:4.16.6-0.fc36.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc36.aarch64"
+      "evra": "4.4.30-1.fc36.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc36.aarch64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-08T22:02:05Z",
+    "generated": "2022-11-10T20:52:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-06T22:28:04Z"
+        "generated": "2022-11-08T23:31:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-07T20:54:09Z"
+        "generated": "2022-11-10T16:06:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0efdc80ac4..b20ec7c2a2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -223,10 +223,10 @@
       "evra": "1.02.175-7.fc36.ppc64le"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-8.fc36.ppc64le"
+      "evra": "0.8.7-9.fc36.ppc64le"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-8.fc36.ppc64le"
+      "evra": "0.8.7-9.fc36.ppc64le"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-7.fc36.ppc64le"
@@ -268,7 +268,7 @@
       "evra": "2:6.0-1.fc36.ppc64le"
     },
     "expat": {
-      "evra": "2.4.9-1.fc36.ppc64le"
+      "evra": "2.5.0-1.fc36.ppc64le"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -469,13 +469,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "6.0.5-200.fc36.ppc64le"
+      "evra": "6.0.7-200.fc36.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.5-200.fc36.ppc64le"
+      "evra": "6.0.7-200.fc36.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.5-200.fc36.ppc64le"
+      "evra": "6.0.7-200.fc36.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc36.ppc64le"
@@ -493,7 +493,7 @@
       "evra": "29-7.fc36.ppc64le"
     },
     "kpartx": {
-      "evra": "0.8.7-8.fc36.ppc64le"
+      "evra": "0.8.7-9.fc36.ppc64le"
     },
     "krb5-libs": {
       "evra": "1.19.2-11.fc36.ppc64le"
@@ -577,7 +577,7 @@
       "evra": "3.4.2-8.fc36.ppc64le"
     },
     "libfido2": {
-      "evra": "1.10.0-4.fc36.ppc64le"
+      "evra": "1.10.0-5.fc36.ppc64le"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.ppc64le"
@@ -811,7 +811,7 @@
       "evra": "2:4.16.6-0.fc36.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc36.ppc64le"
+      "evra": "4.4.30-1.fc36.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc36.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-08T22:03:16Z",
+    "generated": "2022-11-10T20:53:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:55Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-06T22:27:46Z"
+        "generated": "2022-11-08T23:31:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-07T20:54:27Z"
+        "generated": "2022-11-10T16:06:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a4eec85538..4f0bd2def8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -220,10 +220,10 @@
       "evra": "1.02.175-7.fc36.s390x"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-8.fc36.s390x"
+      "evra": "0.8.7-9.fc36.s390x"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-8.fc36.s390x"
+      "evra": "0.8.7-9.fc36.s390x"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-7.fc36.s390x"
@@ -265,7 +265,7 @@
       "evra": "2:6.0-1.fc36.s390x"
     },
     "expat": {
-      "evra": "2.4.9-1.fc36.s390x"
+      "evra": "2.5.0-1.fc36.s390x"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -439,13 +439,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "6.0.5-200.fc36.s390x"
+      "evra": "6.0.7-200.fc36.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.5-200.fc36.s390x"
+      "evra": "6.0.7-200.fc36.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.5-200.fc36.s390x"
+      "evra": "6.0.7-200.fc36.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc36.s390x"
@@ -463,7 +463,7 @@
       "evra": "29-7.fc36.s390x"
     },
     "kpartx": {
-      "evra": "0.8.7-8.fc36.s390x"
+      "evra": "0.8.7-9.fc36.s390x"
     },
     "krb5-libs": {
       "evra": "1.19.2-11.fc36.s390x"
@@ -547,7 +547,7 @@
       "evra": "3.4.2-8.fc36.s390x"
     },
     "libfido2": {
-      "evra": "1.10.0-4.fc36.s390x"
+      "evra": "1.10.0-5.fc36.s390x"
     },
     "libgcc": {
       "evra": "12.2.1-2.fc36.s390x"
@@ -760,7 +760,7 @@
       "evra": "2:4.16.6-0.fc36.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc36.s390x"
+      "evra": "4.4.30-1.fc36.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc36.s390x"
@@ -1178,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-08T22:01:57Z",
+    "generated": "2022-11-10T20:52:46Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:15:53Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-06T22:27:23Z"
+        "generated": "2022-11-08T23:31:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-07T20:54:37Z"
+        "generated": "2022-11-10T16:06:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 41c90f052d..211001f287 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -223,10 +223,10 @@
       "evra": "1.02.175-7.fc36.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-8.fc36.x86_64"
+      "evra": "0.8.7-9.fc36.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-8.fc36.x86_64"
+      "evra": "0.8.7-9.fc36.x86_64"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-7.fc36.x86_64"
@@ -277,7 +277,7 @@
       "evra": "2:6.0-1.fc36.x86_64"
     },
     "expat": {
-      "evra": "2.4.9-1.fc36.x86_64"
+      "evra": "2.5.0-1.fc36.x86_64"
     },
     "fedora-gpg-keys": {
       "evra": "36-4.noarch"
@@ -481,13 +481,13 @@
       "evra": "2.4.0-9.fc36.noarch"
     },
     "kernel": {
-      "evra": "6.0.5-200.fc36.x86_64"
+      "evra": "6.0.7-200.fc36.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.5-200.fc36.x86_64"
+      "evra": "6.0.7-200.fc36.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.5-200.fc36.x86_64"
+      "evra": "6.0.7-200.fc36.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc36.x86_64"
@@ -505,7 +505,7 @@
       "evra": "29-7.fc36.x86_64"
     },
     "kpartx": {
-      "evra": "0.8.7-8.fc36.x86_64"
+      "evra": "0.8.7-9.fc36.x86_64"
     },
     "krb5-libs": {
       "evra": "1.19.2-11.fc36.x86_64"
@@ -589,7 +589,7 @@
       "evra": "3.4.2-8.fc36.x86_64"
     },
     "libfido2": {
-      "evra": "1.10.0-4.fc36.x86_64"
+      "evra": "1.10.0-5.fc36.x86_64"
     },
     "libgcab1": {
       "evra": "1.4-6.fc36.x86_64"
@@ -820,7 +820,7 @@
       "evra": "2:4.16.6-0.fc36.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.28-1.fc36.x86_64"
+      "evra": "4.4.30-1.fc36.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc36.x86_64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-08T22:02:02Z",
+    "generated": "2022-11-10T20:52:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-05-04T21:16:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-06T22:28:47Z"
+        "generated": "2022-11-08T23:32:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-07T20:54:46Z"
+        "generated": "2022-11-10T16:06:52Z"
       }
     }
   }

From 5832517e9ad082652f70576df03eacf6619f96ad Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Nov 2022 19:48:12 -0500
Subject: [PATCH 1284/2157] tests/default-network-behavior-change: update for
 NM 1.40.2

NetworkManager 1.40.2 in Fedora 37 also has an update to the
nm-initrd-generator generated config. Let's update it to match
what we need in rawhide and also drop the now unused
EXPECTED_INITRD_NETWORK_CFG4.
---
 .../default-network-behavior-change/test.sh   | 34 ++-----------------
 1 file changed, 2 insertions(+), 32 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 943da53898..3dfde50b75 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -63,35 +63,8 @@ method=auto
 
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
-# EXPECTED_INITRD_NETWORK_CFG4
-#   - used on Fedora 37+
-EXPECTED_INITRD_NETWORK_CFG4="# Created by nm-initrd-generator
-
-[connection]
-id=Wired Connection
-uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
-type=ethernet
-autoconnect-retries=1
-multi-connect=3
-
-[ethernet]
-
-[ipv4]
-dhcp-timeout=90
-method=auto
-required-timeout=20000
-
-[ipv6]
-dhcp-timeout=90
-method=auto
-
-[proxy]
-
-[user]
-org.freedesktop.NetworkManager.origin=nm-initrd-generator"
-
 # EXPECTED_INITRD_NETWORK_CFG5
-#   - used on Fedora 38+ and scos
+#   - used on Fedora 37+ and scos
 EXPECTED_INITRD_NETWORK_CFG5="# Created by nm-initrd-generator
 
 [connection]
@@ -202,12 +175,9 @@ normalize_connection_file() {
 
 source /etc/os-release
 if [ "$ID" == "fedora" ]; then
-    if [ "$VERSION_ID" -ge "38" ]; then
+    if [ "$VERSION_ID" -ge "37" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG5
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
-    elif [ "$VERSION_ID" -eq "37" ]; then
-        EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG4
-        EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
     elif [ "$VERSION_ID" -eq "36" ]; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG3
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG2

From 86386dee8b72103988012f767340061f3a3a2c6a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Nov 2022 23:10:08 -0500
Subject: [PATCH 1285/2157] denylist: extend snooze again for tests affected by
 tmpfiles issue

The systemd fix has landed but we've got it pinned right now for another
issue so we still need to snooze this one. See
https://github.com/coreos/fedora-coreos-tracker/issues/1215#issuecomment-1295021109
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1d769371a9..652b1f6a89 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,12 +30,12 @@
   - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-11-10
+  snooze: 2022-12-10
   arches:
   - s390x
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-11-10
+  snooze: 2022-12-10
   arches:
   - s390x
 - pattern: ext.config.platforms.aws.nvme

From 3ee05a15e8e2515707eb26ec8a00cdfec62cfc1e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Nov 2022 06:06:21 +0000
Subject: [PATCH 1286/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 38 +-----------------------------------
 1 file changed, 1 insertion(+), 37 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 639ad3091f..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,40 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  aardvark-dns:
-    evr: 1.2.0-6.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
-  containers-common:
-    evra: 4:1-62.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
-  containers-common-extra:
-    evra: 4:1-62.fc36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
-  netavark:
-    evr: 1.2.0-5.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
-  podman:
-    evr: 4:4.3.0-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
-  podman-plugins:
-    evr: 4:4.3.0-2.fc36
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-658b2dbea2
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1327
-      type: fast-track
+packages: {}

From 073baa99196a28e4e187c063ced63c9f2aa31780 Mon Sep 17 00:00:00 2001
From: c4rt0 <c4rt0gr4ph3r@gmail.com>
Date: Thu, 10 Nov 2022 16:12:29 +0000
Subject: [PATCH 1287/2157] tests/validate-symlinks: Add RHCOS logic

Add RHCOS specific list of broken symlinks to ignore. We will
investigate them later. Needs manifest changes from
https://github.com/openshift/os/pull/1030.

See: https://github.com/openshift/os/issues/1003
---
 tests/kola/files/validate-symlinks | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 79c3ffe1ea..97e30fd9bc 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -1,5 +1,5 @@
 #!/bin/bash
-# kola: { "exclusive": false, "distros": "fcos", "platforms": "qemu" }
+# kola: { "exclusive": false, "platforms": "qemu" }
 #
 # Check if there are broken symlinks in /etc/ and /usr/.
 # See: https://github.com/coreos/fedora-coreos-config/issues/1782
@@ -28,8 +28,18 @@ list_broken_symlinks_skip=(
     '/usr/share/rhel/secrets/rhsm'
 )
 
-find /usr/ /etc/ -type l -not -path "/usr/etc*"| while read -r file_name; do
-    real_path=$(realpath -m "${file_name}");
+# If RHCOS, update the array of ignored symlinks
+if [[ is_rhcos ]]; then
+    list_broken_symlinks_skip+=(
+        '/etc/grub2-efi.cfg'
+        '/etc/rhsm-host'
+        '/etc/pki/entitlement-host'
+        '/etc/sysconfig/grub'
+    )
+fi
+
+find /usr/ /etc/ -type l -not -path "/usr/etc*" | while read -r file_name; do
+    real_path=$(realpath -m "${file_name}")
     if [[ -e "${real_path}" ]]; then
         continue
     fi
@@ -40,7 +50,7 @@ find /usr/ /etc/ -type l -not -path "/usr/etc*"| while read -r file_name; do
             break
         fi
     done
-    if [[ "${found}" == "false" ]];  then
+    if [[ "${found}" == "false" ]]; then
         fatal "Error: ${file_name} symlink to ${real_path} which does not exist"
     fi
 done

From 5ead31350d18dff997a524643afb6a4332af6853 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 12 Nov 2022 15:12:32 -0500
Subject: [PATCH 1288/2157] denylist: deny default-network-behavior-change on
 all streams

Similar to fb3b09d (for rawhide) this problem is now affecting
F37 so we are going to pin NetworkManager there too so we need
to denylist this test on all streams for now.

See https://github.com/coreos/fedora-coreos-tracker/issues/1341
---
 kola-denylist.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 652b1f6a89..383eecb760 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -44,5 +44,3 @@
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-01-05
-  streams:
-    - rawhide

From 08ace84d0104661970047642dc49c91bc764943e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Nov 2022 11:47:19 -0500
Subject: [PATCH 1289/2157] manifest: Move to Fedora Linux 37 content

Also seeded the architecture specific lockfiles from `next-devel`.
---
 ci/buildroot/Dockerfile      |   2 +-
 manifest-lock.aarch64.json   | 864 +++++++++++++++++-----------------
 manifest-lock.overrides.yaml |  33 +-
 manifest-lock.ppc64le.json   | 868 +++++++++++++++++-----------------
 manifest-lock.s390x.json     | 818 ++++++++++++++++----------------
 manifest-lock.x86_64.json    | 870 +++++++++++++++++------------------
 manifest.yaml                |   2 +-
 7 files changed, 1720 insertions(+), 1737 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 567ab0b3e2..6ef0bde9ce 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:36
+FROM registry.fedoraproject.org/fedora:37
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20220119
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 08404eaf3c..d19ac20f17 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1256 +1,1244 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.6-1.fc36.aarch64"
+      "evra": "1:1.40.2-1.fc37.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.6-1.fc36.aarch64"
+      "evra": "1:1.40.2-1.fc37.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.6-1.fc36.aarch64"
+      "evra": "1:1.40.2-1.fc37.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.6-1.fc36.aarch64"
+      "evra": "1:1.40.2-1.fc37.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.6-1.fc36.aarch64"
+      "evra": "1:1.40.2-1.fc37.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.3.0-1.fc36.noarch"
+      "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc36.aarch64"
+      "evra": "1.2.0-6.fc37.aarch64"
     },
     "acl": {
-      "evra": "2.3.1-3.fc36.aarch64"
+      "evra": "2.3.1-4.fc37.aarch64"
     },
     "adcli": {
-      "evra": "0.9.1-10.fc36.aarch64"
+      "evra": "0.9.1-11.fc37.aarch64"
     },
     "afterburn": {
-      "evra": "5.3.0-2.fc36.aarch64"
+      "evra": "5.3.0-3.fc37.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-2.fc36.aarch64"
+      "evra": "5.3.0-3.fc37.aarch64"
     },
     "alternatives": {
-      "evra": "1.21-1.fc36.aarch64"
-    },
-    "amd-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "1.21-1.fc37.aarch64"
     },
     "attr": {
-      "evra": "2.5.1-4.fc36.aarch64"
+      "evra": "2.5.1-5.fc37.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc36.aarch64"
+      "evra": "3.0.9-1.fc37.aarch64"
     },
     "authselect": {
-      "evra": "1.4.0-1.fc36.aarch64"
+      "evra": "1.4.0-3.fc37.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.4.0-1.fc36.aarch64"
+      "evra": "1.4.0-3.fc37.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-15.fc36.aarch64"
+      "evra": "0.8-17.fc37.aarch64"
     },
     "basesystem": {
-      "evra": "11-13.fc36.noarch"
+      "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc36.aarch64"
+      "evra": "5.2.2-2.fc37.aarch64"
     },
     "bash-completion": {
-      "evra": "1:2.11-6.fc36.noarch"
+      "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.33-1.fc36.aarch64"
+      "evra": "32:9.18.8-1.fc37.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.16.33-1.fc36.noarch"
+      "evra": "32:9.18.8-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.33-1.fc36.aarch64"
+      "evra": "32:9.18.8-1.fc37.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.6-2.fc36.aarch64"
+      "evra": "0.2.8-3.fc37.aarch64"
     },
     "bsdtar": {
-      "evra": "3.5.3-3.fc36.aarch64"
+      "evra": "3.6.1-2.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc36.aarch64"
+      "evra": "6.0-1.fc37.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-2.fc36.aarch64"
+      "evra": "0.5.0-3.fc37.aarch64"
     },
     "bzip2": {
-      "evra": "1.0.8-11.fc36.aarch64"
+      "evra": "1.0.8-12.fc37.aarch64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-11.fc36.aarch64"
+      "evra": "1.0.8-12.fc37.aarch64"
     },
     "c-ares": {
-      "evra": "1.17.2-2.fc36.aarch64"
+      "evra": "1.17.2-3.fc37.aarch64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.2.fc36.noarch"
+      "evra": "2022.2.54-5.fc37.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc36.aarch64"
+      "evra": "0.1.7-10.fc37.aarch64"
     },
     "chrony": {
-      "evra": "4.3-1.fc36.aarch64"
+      "evra": "4.3-1.fc37.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc36.aarch64"
+      "evra": "6.15-2.fc37.aarch64"
     },
     "clevis": {
-      "evra": "18-9.fc36.aarch64"
+      "evra": "18-12.fc37.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-9.fc36.aarch64"
+      "evra": "18-12.fc37.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-9.fc36.aarch64"
+      "evra": "18-12.fc37.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-9.fc36.aarch64"
+      "evra": "18-12.fc37.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-10.fc36.noarch"
+      "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc36.aarch64"
+      "evra": "2:2.1.4-3.fc37.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc36.aarch64"
+      "evra": "1.6.8-4.fc37.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc36.aarch64"
+      "evra": "1.1.1-8.fc37.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc36.aarch64"
+      "evra": "0.16.1-2.fc37.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc36.aarch64"
+      "evra": "0.16.1-2.fc37.aarch64"
     },
     "coreutils": {
-      "evra": "9.0-8.fc36.aarch64"
+      "evra": "9.1-6.fc37.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.0-8.fc36.aarch64"
+      "evra": "9.1-6.fc37.aarch64"
     },
     "cpio": {
-      "evra": "2.13-12.fc36.aarch64"
+      "evra": "2.13-13.fc37.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.6-28.fc36.aarch64"
+      "evra": "2.9.7-30.fc37.aarch64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-28.fc36.aarch64"
+      "evra": "2.9.7-30.fc37.aarch64"
     },
     "criu": {
-      "evra": "3.17.1-2.fc36.aarch64"
+      "evra": "3.17.1-3.fc37.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17.1-2.fc36.aarch64"
+      "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.6-2.fc36.aarch64"
+      "evra": "1.6-2.fc37.aarch64"
     },
     "crypto-policies": {
-      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
+      "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-2.fc36.aarch64"
+      "evra": "2.5.0-1.fc37.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-2.fc36.aarch64"
+      "evra": "2.5.0-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.82.0-9.fc36.aarch64"
+      "evra": "7.85.0-2.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-18.fc36.aarch64"
+      "evra": "2.1.28-8.fc37.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-18.fc36.aarch64"
+      "evra": "2.1.28-8.fc37.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc36.aarch64"
+      "evra": "1:1.14.4-1.fc37.aarch64"
     },
     "dbus-broker": {
-      "evra": "32-1.fc36.aarch64"
+      "evra": "32-1.fc37.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc36.aarch64"
+      "evra": "1:1.14.4-1.fc37.aarch64"
     },
     "device-mapper": {
-      "evra": "1.02.175-7.fc36.aarch64"
+      "evra": "1.02.175-9.fc37.aarch64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-7.fc36.aarch64"
+      "evra": "1.02.175-9.fc37.aarch64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-7.fc36.aarch64"
+      "evra": "1.02.175-9.fc37.aarch64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-7.fc36.aarch64"
+      "evra": "1.02.175-9.fc37.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-9.fc36.aarch64"
+      "evra": "0.9.0-3.fc37.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-9.fc36.aarch64"
+      "evra": "0.9.0-3.fc37.aarch64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-7.fc36.aarch64"
+      "evra": "0.9.0-8.fc37.aarch64"
     },
     "diffutils": {
-      "evra": "3.8-2.fc36.aarch64"
+      "evra": "3.8-3.fc37.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.86-10.fc36.aarch64"
+      "evra": "2.87-1.fc37.aarch64"
     },
     "dosfstools": {
-      "evra": "4.2-3.fc36.aarch64"
+      "evra": "4.2-4.fc37.aarch64"
     },
     "dracut": {
-      "evra": "057-3.fc36.aarch64"
+      "evra": "057-3.fc37.aarch64"
     },
     "dracut-network": {
-      "evra": "057-3.fc36.aarch64"
+      "evra": "057-3.fc37.aarch64"
     },
     "dracut-squash": {
-      "evra": "057-3.fc36.aarch64"
+      "evra": "057-3.fc37.aarch64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-2.fc36.aarch64"
+      "evra": "1.46.5-3.fc37.aarch64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-2.fc36.aarch64"
+      "evra": "1.46.5-3.fc37.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-5.fc36.noarch"
+      "evra": "5-6.fc37.noarch"
     },
     "efibootmgr": {
-      "evra": "16-12.fc36.aarch64"
+      "evra": "18-2.fc37.aarch64"
     },
     "efivar-libs": {
-      "evra": "38-2.fc36.aarch64"
+      "evra": "38-5.fc37.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-4.fc36.noarch"
+      "evra": "0.187-8.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-4.fc36.aarch64"
+      "evra": "0.187-8.fc37.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.187-4.fc36.aarch64"
+      "evra": "0.187-8.fc37.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc36.aarch64"
+      "evra": "2:6.0-1.fc37.aarch64"
     },
     "expat": {
-      "evra": "2.5.0-1.fc36.aarch64"
+      "evra": "2.4.9-1.fc37.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-repos": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "file": {
-      "evra": "5.41-4.fc36.aarch64"
+      "evra": "5.42-4.fc37.aarch64"
     },
     "file-libs": {
-      "evra": "5.41-4.fc36.aarch64"
+      "evra": "5.42-4.fc37.aarch64"
     },
     "filesystem": {
-      "evra": "3.18-2.fc36.aarch64"
+      "evra": "3.18-2.fc37.aarch64"
     },
     "findutils": {
-      "evra": "1:4.9.0-1.fc36.aarch64"
+      "evra": "1:4.9.0-2.fc37.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-5.fc36.aarch64"
+      "evra": "1.14.0-2.fc37.aarch64"
     },
     "fstrm": {
-      "evra": "0.6.1-4.fc36.aarch64"
+      "evra": "0.6.1-5.fc37.aarch64"
     },
     "fuse": {
-      "evra": "2.9.9-14.fc36.aarch64"
+      "evra": "2.9.9-15.fc37.aarch64"
     },
     "fuse-common": {
-      "evra": "3.10.5-2.fc36.aarch64"
+      "evra": "3.10.5-5.fc37.aarch64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-14.fc36.aarch64"
+      "evra": "2.9.9-15.fc37.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc36.aarch64"
+      "evra": "1.9-6.fc37.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-1.fc36.aarch64"
+      "evra": "3.7.3-2.fc37.aarch64"
     },
     "fuse3": {
-      "evra": "3.10.5-2.fc36.aarch64"
+      "evra": "3.10.5-5.fc37.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-2.fc36.aarch64"
+      "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc36.aarch64"
+      "evra": "1.8.6-1.fc37.aarch64"
     },
     "gawk": {
-      "evra": "5.1.1-2.fc36.aarch64"
+      "evra": "5.1.1-4.fc37.aarch64"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-2.fc36.aarch64"
+      "evra": "1:1.23-2.fc37.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.9-2.fc36.aarch64"
+      "evra": "1.0.9-4.fc37.aarch64"
     },
-    "gettext": {
-      "evra": "0.21-9.fc36.aarch64"
+    "gettext-envsubst": {
+      "evra": "0.21.1-1.fc37.aarch64"
     },
     "gettext-libs": {
-      "evra": "0.21-9.fc36.aarch64"
+      "evra": "0.21.1-1.fc37.aarch64"
+    },
+    "gettext-runtime": {
+      "evra": "0.21.1-1.fc37.aarch64"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "glib2": {
-      "evra": "2.72.3-1.fc36.aarch64"
+      "evra": "2.74.1-2.fc37.aarch64"
     },
     "glibc": {
-      "evra": "2.35-20.fc36.aarch64"
+      "evra": "2.36-7.fc37.aarch64"
     },
     "glibc-common": {
-      "evra": "2.35-20.fc36.aarch64"
+      "evra": "2.36-7.fc37.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-20.fc36.aarch64"
+      "evra": "2.36-7.fc37.aarch64"
     },
     "gmp": {
-      "evra": "1:6.2.1-2.fc36.aarch64"
+      "evra": "1:6.2.1-3.fc37.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.7-3.fc36.aarch64"
+      "evra": "2.3.8-1.fc37.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc36.aarch64"
+      "evra": "3.7.8-2.fc37.aarch64"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc36.aarch64"
+      "evra": "1.17.0-4.fc37.aarch64"
     },
     "grep": {
-      "evra": "3.7-2.fc36.aarch64"
+      "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-54.fc36.noarch"
+      "evra": "1:2.06-60.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-54.fc36.aarch64"
+      "evra": "1:2.06-60.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-54.fc36.aarch64"
+      "evra": "1:2.06-60.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-54.fc36.aarch64"
+      "evra": "1:2.06-60.fc37.aarch64"
     },
     "gzip": {
-      "evra": "1.11-3.fc36.aarch64"
+      "evra": "1.12-2.fc37.aarch64"
     },
     "hostname": {
-      "evra": "3.23-6.fc36.aarch64"
+      "evra": "3.23-7.fc37.aarch64"
     },
     "ignition": {
-      "evra": "2.14.0-3.fc36.aarch64"
+      "evra": "2.14.0-4.fc37.aarch64"
     },
     "inih": {
-      "evra": "56-1.fc36.aarch64"
-    },
-    "intel-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "56-2.fc37.aarch64"
     },
     "iproute": {
-      "evra": "5.15.0-2.fc36.aarch64"
+      "evra": "5.18.0-2.fc37.aarch64"
     },
     "iproute-tc": {
-      "evra": "5.15.0-2.fc36.aarch64"
+      "evra": "5.18.0-2.fc37.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-15.fc36.aarch64"
+      "evra": "1.8.8-3.fc37.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-15.fc36.aarch64"
+      "evra": "1.8.8-3.fc37.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-15.fc36.aarch64"
+      "evra": "1.8.8-3.fc37.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-15.fc36.aarch64"
+      "evra": "1.8.8-3.fc37.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.7-15.fc36.noarch"
+      "evra": "1.8.8-3.fc37.noarch"
+    },
+    "iptables-utils": {
+      "evra": "1.8.8-3.fc37.aarch64"
     },
     "iputils": {
-      "evra": "20211215-2.fc36.aarch64"
+      "evra": "20211215-3.fc37.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-8.fc35.aarch64"
+      "evra": "2:1.9.0-1.fc37.aarch64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.aarch64"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.aarch64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.aarch64"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.aarch64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-4.fc36.aarch64"
+      "evra": "0.101-5.fc37.aarch64"
     },
     "jansson": {
-      "evra": "2.13.1-4.fc36.aarch64"
+      "evra": "2.13.1-5.fc37.aarch64"
+    },
+    "jemalloc": {
+      "evra": "5.3.0-2.fc37.aarch64"
     },
     "jose": {
-      "evra": "11-5.fc36.aarch64"
+      "evra": "11-6.fc37.aarch64"
     },
     "jq": {
-      "evra": "1.6-13.fc36.aarch64"
+      "evra": "1.6-14.fc37.aarch64"
     },
     "json-c": {
-      "evra": "0.15-3.fc36.aarch64"
+      "evra": "0.16-3.fc37.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.6-2.fc36.aarch64"
+      "evra": "1.6.6-3.fc37.aarch64"
     },
     "kbd": {
-      "evra": "2.4.0-9.fc36.aarch64"
+      "evra": "2.5.1-3.fc37.aarch64"
+    },
+    "kbd-legacy": {
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kbd-misc": {
-      "evra": "2.4.0-9.fc36.noarch"
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-200.fc36.aarch64"
+      "evra": "6.0.7-301.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.7-200.fc36.aarch64"
+      "evra": "6.0.7-301.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.7-200.fc36.aarch64"
+      "evra": "6.0.7-301.fc37.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc36.aarch64"
+      "evra": "2.0.25-1.fc37.aarch64"
     },
     "keyutils": {
-      "evra": "1.6.1-4.fc36.aarch64"
+      "evra": "1.6.1-5.fc37.aarch64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-4.fc36.aarch64"
+      "evra": "1.6.1-5.fc37.aarch64"
     },
     "kmod": {
-      "evra": "29-7.fc36.aarch64"
+      "evra": "30-2.fc37.aarch64"
     },
     "kmod-libs": {
-      "evra": "29-7.fc36.aarch64"
+      "evra": "30-2.fc37.aarch64"
     },
     "kpartx": {
-      "evra": "0.8.7-9.fc36.aarch64"
+      "evra": "0.9.0-3.fc37.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc36.aarch64"
+      "evra": "1.19.2-11.fc37.1.aarch64"
     },
     "less": {
-      "evra": "590-5.fc36.aarch64"
+      "evra": "590-5.fc37.aarch64"
     },
     "libacl": {
-      "evra": "2.3.1-3.fc36.aarch64"
+      "evra": "2.3.1-4.fc37.aarch64"
     },
     "libaio": {
-      "evra": "0.3.111-13.fc36.aarch64"
+      "evra": "0.3.111-14.fc37.aarch64"
     },
     "libarchive": {
-      "evra": "3.5.3-3.fc36.aarch64"
+      "evra": "3.6.1-2.fc37.aarch64"
     },
     "libargon2": {
-      "evra": "20171227-9.fc36.aarch64"
+      "evra": "20190702-1.fc37.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.5-4.fc36.aarch64"
+      "evra": "2.5.5-5.fc37.aarch64"
     },
     "libattr": {
-      "evra": "2.5.1-4.fc36.aarch64"
+      "evra": "2.5.1-5.fc37.aarch64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-50.fc36.aarch64"
+      "evra": "0.1.1-52.fc37.aarch64"
     },
     "libblkid": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "libbpf": {
-      "evra": "2:0.7.0-3.fc36.aarch64"
-    },
-    "libbrotli": {
-      "evra": "1.0.9-7.fc36.aarch64"
+      "evra": "2:0.8.0-2.fc37.aarch64"
     },
     "libbsd": {
-      "evra": "0.10.0-9.fc36.aarch64"
+      "evra": "0.10.0-10.fc37.aarch64"
     },
     "libcap": {
-      "evra": "2.48-4.fc36.aarch64"
+      "evra": "2.48-5.fc37.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-1.fc36.aarch64"
+      "evra": "0.8.3-3.fc37.aarch64"
     },
     "libcbor": {
-      "evra": "0.7.0-5.fc36.aarch64"
+      "evra": "0.7.0-7.fc37.aarch64"
     },
     "libcollection": {
-      "evra": "0.7.0-50.fc36.aarch64"
+      "evra": "0.7.0-52.fc37.aarch64"
     },
     "libcom_err": {
-      "evra": "1.46.5-2.fc36.aarch64"
+      "evra": "1.46.5-3.fc37.aarch64"
     },
-    "libcurl": {
-      "evra": "7.82.0-9.fc36.aarch64"
+    "libcurl-minimal": {
+      "evra": "7.85.0-2.fc37.aarch64"
     },
     "libdaemon": {
-      "evra": "0.14-23.fc36.aarch64"
+      "evra": "0.14-24.fc37.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-51.fc36.aarch64"
+      "evra": "5.3.28-53.fc37.aarch64"
     },
     "libdhash": {
-      "evra": "0.5.0-50.fc36.aarch64"
+      "evra": "0.5.0-52.fc37.aarch64"
     },
     "libeconf": {
-      "evra": "0.4.0-3.fc36.aarch64"
+      "evra": "0.4.0-4.fc37.aarch64"
     },
     "libedit": {
-      "evra": "3.1-41.20210910cvs.fc36.aarch64"
+      "evra": "3.1-43.20221009cvs.fc37.aarch64"
     },
     "libevent": {
-      "evra": "2.1.12-6.fc36.aarch64"
+      "evra": "2.1.12-7.fc37.aarch64"
     },
     "libfdisk": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "libffi": {
-      "evra": "3.4.2-8.fc36.aarch64"
+      "evra": "3.4.2-9.fc37.aarch64"
     },
     "libfido2": {
-      "evra": "1.10.0-5.fc36.aarch64"
+      "evra": "1.11.0-3.fc37.aarch64"
     },
     "libgcab1": {
-      "evra": "1.4-6.fc36.aarch64"
+      "evra": "1.5-1.fc37.aarch64"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc36.aarch64"
+      "evra": "12.2.1-2.fc37.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-3.fc36.aarch64"
-    },
-    "libgomp": {
-      "evra": "12.2.1-2.fc36.aarch64"
+      "evra": "1.10.1-4.fc37.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.45-1.fc36.aarch64"
+      "evra": "1.45-2.fc37.aarch64"
     },
     "libgudev": {
-      "evra": "237-2.fc36.aarch64"
+      "evra": "237-3.fc37.aarch64"
     },
     "libgusb": {
-      "evra": "0.3.10-2.fc36.aarch64"
+      "evra": "0.4.2-1.fc37.aarch64"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc36.aarch64"
+      "evra": "41.0-1.fc37.aarch64"
     },
     "libicu": {
-      "evra": "69.1-6.fc36.aarch64"
+      "evra": "71.1-2.fc37.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc36.aarch64"
+      "evra": "2.3.4-1.fc37.aarch64"
     },
     "libini_config": {
-      "evra": "1.3.1-50.fc36.aarch64"
+      "evra": "1.3.1-52.fc37.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc36.aarch64"
+      "evra": "0.1.12-1.fc37.aarch64"
     },
     "libjose": {
-      "evra": "11-5.fc36.aarch64"
+      "evra": "11-6.fc37.aarch64"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc36.aarch64"
+      "evra": "1.4.0-2.fc37.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc36.aarch64"
+      "evra": "1.4.0-2.fc37.aarch64"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc36.aarch64"
+      "evra": "1.6.2-1.fc37.aarch64"
     },
     "libldb": {
-      "evra": "2.5.2-1.fc36.aarch64"
+      "evra": "2.6.1-1.fc37.aarch64"
     },
     "libluksmeta": {
-      "evra": "9-13.fc36.aarch64"
+      "evra": "9-14.fc37.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc36.aarch64"
+      "evra": "1.7.1-1.fc37.aarch64"
     },
     "libmnl": {
-      "evra": "1.0.4-15.fc36.aarch64"
+      "evra": "1.0.5-1.fc37.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-2.fc36.aarch64"
+      "evra": "2.14.0-4.fc37.aarch64"
     },
     "libmount": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "libndp": {
-      "evra": "1.8-3.fc36.aarch64"
+      "evra": "1.8-4.fc37.aarch64"
     },
     "libnet": {
-      "evra": "1.2-5.fc36.aarch64"
+      "evra": "1.2-6.fc37.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-4.fc36.aarch64"
+      "evra": "1.0.8-5.fc37.aarch64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-21.fc36.aarch64"
+      "evra": "1.0.1-22.fc37.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-0.fc36.aarch64"
+      "evra": "1:2.6.2-1.rc2.fc37.aarch64"
     },
     "libnftnl": {
-      "evra": "1.2.1-2.fc36.aarch64"
+      "evra": "1.2.2-2.fc37.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.46.0-2.fc36.aarch64"
+      "evra": "1.49.0-1.fc37.aarch64"
     },
     "libnl3": {
-      "evra": "3.7.0-1.fc36.aarch64"
+      "evra": "3.7.0-2.fc37.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-1.fc36.aarch64"
+      "evra": "3.7.0-2.fc37.aarch64"
     },
     "libnsl2": {
-      "evra": "2.0.0-3.fc36.aarch64"
+      "evra": "2.0.0-4.fc37.aarch64"
     },
     "libnvme": {
-      "evra": "1.0-1.fc36.aarch64"
+      "evra": "1.2-1.fc37.aarch64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-50.fc36.aarch64"
+      "evra": "0.2.1-52.fc37.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-3.fc36.aarch64"
+      "evra": "14:1.10.1-4.fc37.aarch64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-2.fc36.aarch64"
+      "evra": "1.8.0-3.fc37.aarch64"
     },
     "libpsl": {
-      "evra": "0.21.1-5.fc36.aarch64"
+      "evra": "0.21.1-6.fc37.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.4-7.fc36.aarch64"
+      "evra": "1.4.4-11.fc37.aarch64"
     },
     "libref_array": {
-      "evra": "0.1.5-50.fc36.aarch64"
+      "evra": "0.1.5-52.fc37.aarch64"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc36.aarch64"
+      "evra": "1.14.4-1.fc37.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc36.noarch"
+      "evra": "2.17.4-1.fc37.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-2.fc36.aarch64"
+      "evra": "2.5.3-3.fc37.aarch64"
     },
     "libselinux": {
-      "evra": "3.3-4.fc36.aarch64"
+      "evra": "3.4-5.fc37.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.3-4.fc36.aarch64"
+      "evra": "3.4-5.fc37.aarch64"
     },
     "libsemanage": {
-      "evra": "3.3-3.fc36.aarch64"
+      "evra": "3.4-5.fc37.aarch64"
     },
     "libsepol": {
-      "evra": "3.3-3.fc36.aarch64"
+      "evra": "3.4-3.fc37.aarch64"
     },
     "libsigsegv": {
-      "evra": "2.14-2.fc36.aarch64"
+      "evra": "2.14-3.fc37.aarch64"
     },
     "libslirp": {
-      "evra": "4.6.1-3.fc36.aarch64"
+      "evra": "4.7.0-2.fc37.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.6-0.fc36.aarch64"
+      "evra": "2:4.17.2-2.fc37.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc36.aarch64"
+      "evra": "0.7.22-3.fc37.aarch64"
     },
     "libss": {
-      "evra": "1.46.5-2.fc36.aarch64"
-    },
-    "libssh": {
-      "evra": "0.9.6-4.fc36.aarch64"
-    },
-    "libssh-config": {
-      "evra": "0.9.6-4.fc36.noarch"
+      "evra": "1.46.5-3.fc37.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc36.aarch64"
+      "evra": "12.2.1-2.fc37.aarch64"
     },
     "libtalloc": {
-      "evra": "2.3.4-1.fc36.aarch64"
+      "evra": "2.3.4-3.fc37.aarch64"
     },
     "libtasn1": {
-      "evra": "4.18.0-2.fc36.aarch64"
+      "evra": "4.18.0-3.fc37.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.7-1.fc36.aarch64"
+      "evra": "1.4.7-3.fc37.aarch64"
     },
     "libteam": {
-      "evra": "1.31-5.fc36.aarch64"
+      "evra": "1.31-6.fc37.aarch64"
     },
     "libtevent": {
-      "evra": "0.12.1-1.fc36.aarch64"
+      "evra": "0.13.0-1.fc37.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc36.aarch64"
+      "evra": "1.3.3-0.fc37.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-1.fc36.aarch64"
+      "evra": "2.4.7-2.fc37.aarch64"
     },
     "libunistring": {
-      "evra": "1.0-1.fc36.aarch64"
+      "evra": "1.0-2.fc37.aarch64"
     },
     "libusb1": {
-      "evra": "1.0.25-8.fc36.aarch64"
+      "evra": "1.0.25-9.fc37.aarch64"
     },
     "libuser": {
-      "evra": "0.63-10.fc36.aarch64"
+      "evra": "0.63-13.fc37.aarch64"
     },
     "libutempter": {
-      "evra": "1.2.1-6.fc36.aarch64"
+      "evra": "1.2.1-7.fc37.aarch64"
     },
     "libuuid": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "libuv": {
-      "evra": "1:1.44.2-1.fc36.aarch64"
+      "evra": "1:1.44.2-2.fc37.aarch64"
     },
     "libverto": {
-      "evra": "0.3.2-3.fc36.aarch64"
+      "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.16.6-0.fc36.aarch64"
+      "evra": "2:4.17.2-2.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc36.aarch64"
+      "evra": "4.4.30-1.fc37.aarch64"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc36.aarch64"
+      "evra": "2.10.3-2.fc37.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc36.aarch64"
+      "evra": "0.3.10-1.fc37.aarch64"
     },
     "libyaml": {
-      "evra": "0.2.5-7.fc36.aarch64"
+      "evra": "0.2.5-8.fc37.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.2-2.fc36.aarch64"
+      "evra": "1.5.2-3.fc37.aarch64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-31.fc36.aarch64"
+      "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-3.fc36.aarch64"
+      "evra": "0.9.29-4.fc37.aarch64"
     },
     "logrotate": {
-      "evra": "3.20.1-2.fc36.aarch64"
+      "evra": "3.20.1-3.fc37.aarch64"
     },
     "lsof": {
-      "evra": "4.94.0-3.fc36.aarch64"
+      "evra": "4.94.0-4.fc37.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-3.fc36.aarch64"
+      "evra": "5.4.4-4.fc37.aarch64"
     },
     "luksmeta": {
-      "evra": "9-13.fc36.aarch64"
+      "evra": "9-14.fc37.aarch64"
     },
     "lvm2": {
-      "evra": "2.03.11-7.fc36.aarch64"
+      "evra": "2.03.11-9.fc37.aarch64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-7.fc36.aarch64"
+      "evra": "2.03.11-9.fc37.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-4.fc36.aarch64"
+      "evra": "1.9.3-5.fc37.aarch64"
     },
     "lzo": {
-      "evra": "2.10-6.fc36.aarch64"
+      "evra": "2.10-7.fc37.aarch64"
     },
     "mdadm": {
-      "evra": "4.2-1.fc36.aarch64"
+      "evra": "4.2-2.fc37.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc36.aarch64"
+      "evra": "20.10.20-1.fc37.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-3.fc36.aarch64"
+      "evra": "2:0.6.0-5.fc37.aarch64"
     },
-    "mozjs91": {
-      "evra": "91.13.0-1.fc36.aarch64"
+    "mozjs102": {
+      "evra": "102.4.0-1.fc37.aarch64"
     },
     "mpfr": {
-      "evra": "4.1.0-9.fc36.aarch64"
+      "evra": "4.1.0-10.fc37.aarch64"
     },
     "nano": {
-      "evra": "6.0-2.fc36.aarch64"
+      "evra": "6.4-1.fc37.aarch64"
     },
     "nano-default-editor": {
-      "evra": "6.0-2.fc36.noarch"
+      "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.2-9.20210508.fc36.aarch64"
+      "evra": "6.3-3.20220501.fc37.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.2-9.20210508.fc36.noarch"
+      "evra": "6.3-3.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-9.20210508.fc36.aarch64"
+      "evra": "6.3-3.20220501.fc37.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.61.20160912git.fc36.aarch64"
+      "evra": "2.0-0.63.20160912git.fc37.aarch64"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc36.aarch64"
+      "evra": "1.2.0-5.fc37.aarch64"
     },
     "nettle": {
-      "evra": "3.8-1.fc36.aarch64"
+      "evra": "3.8-2.fc37.aarch64"
     },
     "newt": {
-      "evra": "0.52.21-12.fc36.aarch64"
+      "evra": "0.52.21-14.fc37.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-0.fc36.aarch64"
+      "evra": "1:2.6.2-1.rc2.fc37.aarch64"
     },
     "nftables": {
-      "evra": "1:1.0.1-3.fc36.aarch64"
+      "evra": "1:1.0.4-3.fc37.aarch64"
     },
     "npth": {
-      "evra": "1.6-8.fc36.aarch64"
+      "evra": "1.6-9.fc37.aarch64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-20.fc36.aarch64"
+      "evra": "2.18.1-21.fc37.aarch64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-5.fc36.aarch64"
-    },
-    "nvidia-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvme-cli": {
-      "evra": "2.0-2.fc36.aarch64"
+      "evra": "2.1.2-1.fc37.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc36.aarch64"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.aarch64"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc36.aarch64"
-    },
-    "openldap-compat": {
-      "evra": "2.6.3-1.fc36.aarch64"
+      "evra": "2.6.3-1.fc37.aarch64"
     },
     "openssh": {
-      "evra": "8.8p1-1.fc36.1.aarch64"
+      "evra": "8.8p1-7.fc37.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-1.fc36.1.aarch64"
+      "evra": "8.8p1-7.fc37.aarch64"
     },
     "openssh-server": {
-      "evra": "8.8p1-1.fc36.1.aarch64"
+      "evra": "8.8p1-7.fc37.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.5-2.fc36.aarch64"
+      "evra": "1:3.0.5-3.fc37.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-2.fc36.aarch64"
+      "evra": "1:3.0.5-3.fc37.aarch64"
     },
     "os-prober": {
-      "evra": "1.77-9.fc36.aarch64"
+      "evra": "1.81-1.fc37.aarch64"
     },
     "ostree": {
-      "evra": "2022.5-2.fc36.aarch64"
+      "evra": "2022.6-1.fc37.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.5-2.fc36.aarch64"
+      "evra": "2022.6-1.fc37.aarch64"
     },
     "p11-kit": {
-      "evra": "0.24.1-2.fc36.aarch64"
+      "evra": "0.24.1-3.fc37.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-2.fc36.aarch64"
+      "evra": "0.24.1-3.fc37.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-13.fc36.aarch64"
+      "evra": "1.5.2-14.fc37.aarch64"
     },
     "pam-libs": {
-      "evra": "1.5.2-13.fc36.aarch64"
+      "evra": "1.5.2-14.fc37.aarch64"
     },
     "passwd": {
-      "evra": "0.80-12.fc36.aarch64"
+      "evra": "0.80-13.fc37.aarch64"
     },
     "pcre": {
-      "evra": "8.45-1.fc36.1.aarch64"
+      "evra": "8.45-1.fc37.2.aarch64"
     },
     "pcre2": {
-      "evra": "10.40-1.fc36.aarch64"
+      "evra": "10.40-1.fc37.1.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc36.noarch"
+      "evra": "10.40-1.fc37.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-1.fc36.aarch64"
+      "evra": "2.7-2.fc37.aarch64"
     },
     "pkgconf": {
-      "evra": "1.8.0-2.fc36.aarch64"
+      "evra": "1.8.0-3.fc37.aarch64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-2.fc36.noarch"
+      "evra": "1.8.0-3.fc37.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-2.fc36.aarch64"
+      "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc36.aarch64"
+      "evra": "4:4.3.0-2.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc36.aarch64"
+      "evra": "4:4.3.0-2.fc37.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.3-4.fc36.aarch64"
+      "evra": "3.4-6.fc37.aarch64"
     },
     "polkit": {
-      "evra": "0.120-5.fc36.aarch64"
+      "evra": "121-4.fc37.aarch64"
     },
     "polkit-libs": {
-      "evra": "0.120-5.fc36.aarch64"
+      "evra": "121-4.fc37.aarch64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-21.fc36.aarch64"
+      "evra": "0.1-22.fc37.aarch64"
     },
     "popt": {
-      "evra": "1.18-7.fc36.aarch64"
+      "evra": "1.19-1.fc37.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.1.aarch64"
+      "evra": "3.3.17-6.fc37.2.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc36.aarch64"
+      "evra": "1.4.1-2.fc37.aarch64"
     },
     "psmisc": {
-      "evra": "23.4-3.fc36.aarch64"
+      "evra": "23.4-4.fc37.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-4.fc36.noarch"
+      "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-16.fc36.aarch64"
+      "evra": "2:7.0.0-10.fc37.aarch64"
     },
     "readline": {
-      "evra": "8.2-2.fc36.aarch64"
+      "evra": "8.2-2.fc37.aarch64"
     },
     "rpcbind": {
-      "evra": "1.2.6-2.fc36.aarch64"
+      "evra": "1.2.6-3.fc37.aarch64"
     },
     "rpm": {
-      "evra": "4.17.1-3.fc36.aarch64"
+      "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.17.1-3.fc36.aarch64"
+      "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.14-1.fc36.aarch64"
+      "evra": "2022.15-3.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.14-1.fc36.aarch64"
+      "evra": "2022.15-3.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-3.fc36.aarch64"
+      "evra": "4.18.0-1.fc37.aarch64"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc36.aarch64"
+      "evra": "3.2.7-1.fc37.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc36.aarch64"
+      "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.6-0.fc36.aarch64"
+      "evra": "2:4.17.2-2.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.16.6-0.fc36.noarch"
+      "evra": "2:4.17.2-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.6-0.fc36.aarch64"
+      "evra": "2:4.17.2-2.fc37.aarch64"
     },
     "sed": {
-      "evra": "4.8-10.fc36.aarch64"
+      "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "setup": {
-      "evra": "2.14.1-1.fc36.noarch"
+      "evra": "2.14.1-2.fc37.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-3.fc36.aarch64"
+      "evra": "1.46-4.fc37.aarch64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-3.fc36.aarch64"
+      "evra": "1.46-4.fc37.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-5.fc36.aarch64"
+      "evra": "2:4.12.3-3.fc37.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-5.fc36.aarch64"
+      "evra": "2:4.12.3-3.fc37.aarch64"
     },
     "shared-mime-info": {
-      "evra": "2.1-3.fc35.aarch64"
+      "evra": "2.2-2.fc37.aarch64"
     },
     "shim-aa64": {
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc36.aarch64"
+      "evra": "1:1.10.0-3.fc37.aarch64"
     },
     "slang": {
-      "evra": "2.3.2-11.fc36.aarch64"
+      "evra": "2.3.3-1.fc37.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-0.2.beta.0.fc36.aarch64"
+      "evra": "1.2.0-8.fc37.aarch64"
     },
     "snappy": {
-      "evra": "1.1.9-4.fc36.aarch64"
+      "evra": "1.1.9-5.fc37.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.2-2.fc36.aarch64"
+      "evra": "1.7.4.2-3.fc37.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-5.fc36.aarch64"
+      "evra": "3.39.2-2.fc37.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc36.aarch64"
+      "evra": "4.5.1-2.fc37.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc36.aarch64"
+      "evra": "0.1.4-1.fc37.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-client": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-common": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.4-1.fc36.aarch64"
+      "evra": "2.8.0-2.fc37.aarch64"
     },
     "stalld": {
-      "evra": "1.15-2.fc36.aarch64"
+      "evra": "1.16-2.fc37.aarch64"
     },
     "sudo": {
-      "evra": "1.9.8-5.p2.fc36.aarch64"
+      "evra": "1.9.11-4.p3.fc37.aarch64"
     },
     "systemd": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "250.8-1.fc36.aarch64"
+      "evra": "251.7-611.fc37.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-3.fc36.aarch64"
+      "evra": "2:1.34-5.fc37.aarch64"
     },
     "teamd": {
-      "evra": "1.31-5.fc36.aarch64"
+      "evra": "1.31-6.fc37.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-6.fc36.aarch64"
+      "evra": "0.0.99.3-7.fc37.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.2-2.fc36.aarch64"
+      "evra": "5.3-1.fc37.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc36.aarch64"
+      "evra": "3.2.0-3.fc37.aarch64"
     },
     "tzdata": {
-      "evra": "2022f-1.fc36.noarch"
+      "evra": "2022f-1.fc37.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-4.fc36.aarch64"
+      "evra": "0.13.0-5.fc37.aarch64"
     },
     "util-linux": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.38-1.fc36.aarch64"
+      "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc36.aarch64"
+      "evra": "2:9.0.828-1.fc37.aarch64"
     },
     "which": {
-      "evra": "2.21-32.fc36.aarch64"
+      "evra": "2.21-35.fc37.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-2.fc36.aarch64"
+      "evra": "1.0.20210914-3.fc37.aarch64"
     },
     "xfsprogs": {
-      "evra": "5.14.2-2.fc36.aarch64"
+      "evra": "5.18.0-3.fc37.aarch64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-2.fc36.aarch64"
+      "evra": "0.8.1-3.fc37.aarch64"
     },
     "xz": {
-      "evra": "5.2.5-9.fc36.aarch64"
+      "evra": "5.2.5-10.fc37.aarch64"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc36.aarch64"
+      "evra": "5.2.5-10.fc37.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-18.fc36.aarch64"
+      "evra": "2.1.0-19.fc37.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc36.aarch64"
+      "evra": "1.2.3-1.fc37.aarch64"
     },
     "zincati": {
-      "evra": "0.0.24-4.fc36.aarch64"
+      "evra": "0.0.25-1.fc37.aarch64"
     },
     "zlib": {
-      "evra": "1.2.11-33.fc36.aarch64"
+      "evra": "1.2.12-5.fc37.aarch64"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc36.aarch64"
+      "evra": "1.1.2-2.fc37.aarch64"
     },
     "zstd": {
-      "evra": "1.5.2-2.fc36.aarch64"
+      "evra": "1.5.2-3.fc37.aarch64"
     }
   },
   "metadata": {
-    "generated": "2022-11-10T20:52:46Z",
+    "generated": "2022-11-11T13:53:30Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-05-04T21:15:55Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2022-11-08T23:31:47Z"
+        "generated": "2022-11-10T22:21:07Z"
+      },
+      "fedora-next": {
+        "generated": "2022-11-10T09:29:41Z"
       },
-      "fedora-updates": {
-        "generated": "2022-11-10T16:06:15Z"
+      "fedora-next-updates": {
+        "generated": "2022-11-11T00:57:27Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..4c10b93e39 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,35 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  NetworkManager:
+    evr: 1:1.40.0-1.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
+      type: pin
+  NetworkManager-cloud-setup:
+    evr: 1:1.40.0-1.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
+      type: pin
+  NetworkManager-libnm:
+    evr: 1:1.40.0-1.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
+      type: pin
+  NetworkManager-team:
+    evr: 1:1.40.0-1.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
+      type: pin
+  NetworkManager-tui:
+    evr: 1:1.40.0-1.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
+      type: pin
+  expat:
+    evr: 2.4.9-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c52402aec
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1223#issuecomment-1242724431
+      type: fast-track
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b20ec7c2a2..01dcd3674b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,1259 +1,1247 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.6-1.fc36.ppc64le"
+      "evra": "1:1.40.2-1.fc37.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.6-1.fc36.ppc64le"
+      "evra": "1:1.40.2-1.fc37.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.6-1.fc36.ppc64le"
+      "evra": "1:1.40.2-1.fc37.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.6-1.fc36.ppc64le"
+      "evra": "1:1.40.2-1.fc37.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.6-1.fc36.ppc64le"
+      "evra": "1:1.40.2-1.fc37.ppc64le"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.3.0-1.fc36.noarch"
+      "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc36.ppc64le"
+      "evra": "1.2.0-6.fc37.ppc64le"
     },
     "acl": {
-      "evra": "2.3.1-3.fc36.ppc64le"
+      "evra": "2.3.1-4.fc37.ppc64le"
     },
     "adcli": {
-      "evra": "0.9.1-10.fc36.ppc64le"
+      "evra": "0.9.1-11.fc37.ppc64le"
     },
     "afterburn": {
-      "evra": "5.3.0-2.fc36.ppc64le"
+      "evra": "5.3.0-3.fc37.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-2.fc36.ppc64le"
+      "evra": "5.3.0-3.fc37.ppc64le"
     },
     "alternatives": {
-      "evra": "1.21-1.fc36.ppc64le"
-    },
-    "amd-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "1.21-1.fc37.ppc64le"
     },
     "attr": {
-      "evra": "2.5.1-4.fc36.ppc64le"
+      "evra": "2.5.1-5.fc37.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc36.ppc64le"
+      "evra": "3.0.9-1.fc37.ppc64le"
     },
     "authselect": {
-      "evra": "1.4.0-1.fc36.ppc64le"
+      "evra": "1.4.0-3.fc37.ppc64le"
     },
     "authselect-libs": {
-      "evra": "1.4.0-1.fc36.ppc64le"
+      "evra": "1.4.0-3.fc37.ppc64le"
     },
     "avahi-libs": {
-      "evra": "0.8-15.fc36.ppc64le"
+      "evra": "0.8-17.fc37.ppc64le"
     },
     "basesystem": {
-      "evra": "11-13.fc36.noarch"
+      "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc36.ppc64le"
+      "evra": "5.2.2-2.fc37.ppc64le"
     },
     "bash-completion": {
-      "evra": "1:2.11-6.fc36.noarch"
+      "evra": "1:2.11-8.fc37.noarch"
     },
     "bc": {
-      "evra": "1.07.1-15.fc36.ppc64le"
+      "evra": "1.07.1-16.fc37.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.16.33-1.fc36.ppc64le"
+      "evra": "32:9.18.8-1.fc37.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.16.33-1.fc36.noarch"
+      "evra": "32:9.18.8-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.33-1.fc36.ppc64le"
+      "evra": "32:9.18.8-1.fc37.ppc64le"
     },
     "bsdtar": {
-      "evra": "3.5.3-3.fc36.ppc64le"
+      "evra": "3.6.1-2.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc36.ppc64le"
+      "evra": "6.0-1.fc37.ppc64le"
     },
     "bubblewrap": {
-      "evra": "0.5.0-2.fc36.ppc64le"
+      "evra": "0.5.0-3.fc37.ppc64le"
     },
     "bzip2": {
-      "evra": "1.0.8-11.fc36.ppc64le"
+      "evra": "1.0.8-12.fc37.ppc64le"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-11.fc36.ppc64le"
+      "evra": "1.0.8-12.fc37.ppc64le"
     },
     "c-ares": {
-      "evra": "1.17.2-2.fc36.ppc64le"
+      "evra": "1.17.2-3.fc37.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.2.fc36.noarch"
+      "evra": "2022.2.54-5.fc37.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc36.ppc64le"
+      "evra": "0.1.7-10.fc37.ppc64le"
     },
     "chrony": {
-      "evra": "4.3-1.fc36.ppc64le"
+      "evra": "4.3-1.fc37.ppc64le"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc36.ppc64le"
+      "evra": "6.15-2.fc37.ppc64le"
     },
     "clevis": {
-      "evra": "18-9.fc36.ppc64le"
+      "evra": "18-12.fc37.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "18-9.fc36.ppc64le"
+      "evra": "18-12.fc37.ppc64le"
     },
     "clevis-luks": {
-      "evra": "18-9.fc36.ppc64le"
+      "evra": "18-12.fc37.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "18-9.fc36.ppc64le"
+      "evra": "18-12.fc37.ppc64le"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-10.fc36.noarch"
+      "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc36.ppc64le"
+      "evra": "2:2.1.4-3.fc37.ppc64le"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc36.ppc64le"
+      "evra": "1.6.8-4.fc37.ppc64le"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc36.ppc64le"
+      "evra": "1.1.1-8.fc37.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc36.ppc64le"
+      "evra": "0.16.1-2.fc37.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc36.ppc64le"
+      "evra": "0.16.1-2.fc37.ppc64le"
     },
     "coreutils": {
-      "evra": "9.0-8.fc36.ppc64le"
+      "evra": "9.1-6.fc37.ppc64le"
     },
     "coreutils-common": {
-      "evra": "9.0-8.fc36.ppc64le"
+      "evra": "9.1-6.fc37.ppc64le"
     },
     "cpio": {
-      "evra": "2.13-12.fc36.ppc64le"
+      "evra": "2.13-13.fc37.ppc64le"
     },
     "cracklib": {
-      "evra": "2.9.6-28.fc36.ppc64le"
+      "evra": "2.9.7-30.fc37.ppc64le"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-28.fc36.ppc64le"
+      "evra": "2.9.7-30.fc37.ppc64le"
     },
     "criu": {
-      "evra": "3.17.1-2.fc36.ppc64le"
+      "evra": "3.17.1-3.fc37.ppc64le"
     },
     "criu-libs": {
-      "evra": "3.17.1-2.fc36.ppc64le"
+      "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.6-2.fc36.ppc64le"
+      "evra": "1.6-2.fc37.ppc64le"
     },
     "crypto-policies": {
-      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
+      "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-2.fc36.ppc64le"
+      "evra": "2.5.0-1.fc37.ppc64le"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-2.fc36.ppc64le"
+      "evra": "2.5.0-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.82.0-9.fc36.ppc64le"
+      "evra": "7.85.0-2.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-18.fc36.ppc64le"
+      "evra": "2.1.28-8.fc37.ppc64le"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-18.fc36.ppc64le"
+      "evra": "2.1.28-8.fc37.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc36.ppc64le"
+      "evra": "1:1.14.4-1.fc37.ppc64le"
     },
     "dbus-broker": {
-      "evra": "32-1.fc36.ppc64le"
+      "evra": "32-1.fc37.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc36.ppc64le"
+      "evra": "1:1.14.4-1.fc37.ppc64le"
     },
     "device-mapper": {
-      "evra": "1.02.175-7.fc36.ppc64le"
+      "evra": "1.02.175-9.fc37.ppc64le"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-7.fc36.ppc64le"
+      "evra": "1.02.175-9.fc37.ppc64le"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-7.fc36.ppc64le"
+      "evra": "1.02.175-9.fc37.ppc64le"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-7.fc36.ppc64le"
+      "evra": "1.02.175-9.fc37.ppc64le"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-9.fc36.ppc64le"
+      "evra": "0.9.0-3.fc37.ppc64le"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-9.fc36.ppc64le"
+      "evra": "0.9.0-3.fc37.ppc64le"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-7.fc36.ppc64le"
+      "evra": "0.9.0-8.fc37.ppc64le"
     },
     "diffutils": {
-      "evra": "3.8-2.fc36.ppc64le"
+      "evra": "3.8-3.fc37.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.86-10.fc36.ppc64le"
+      "evra": "2.87-1.fc37.ppc64le"
     },
     "dosfstools": {
-      "evra": "4.2-3.fc36.ppc64le"
+      "evra": "4.2-4.fc37.ppc64le"
     },
     "dracut": {
-      "evra": "057-3.fc36.ppc64le"
+      "evra": "057-3.fc37.ppc64le"
     },
     "dracut-network": {
-      "evra": "057-3.fc36.ppc64le"
+      "evra": "057-3.fc37.ppc64le"
     },
     "dracut-squash": {
-      "evra": "057-3.fc36.ppc64le"
+      "evra": "057-3.fc37.ppc64le"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-2.fc36.ppc64le"
+      "evra": "1.46.5-3.fc37.ppc64le"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-2.fc36.ppc64le"
+      "evra": "1.46.5-3.fc37.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-4.fc36.noarch"
+      "evra": "0.187-8.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-4.fc36.ppc64le"
+      "evra": "0.187-8.fc37.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.187-4.fc36.ppc64le"
+      "evra": "0.187-8.fc37.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc36.ppc64le"
+      "evra": "2:6.0-1.fc37.ppc64le"
     },
     "expat": {
-      "evra": "2.5.0-1.fc36.ppc64le"
+      "evra": "2.4.9-1.fc37.ppc64le"
     },
     "fedora-gpg-keys": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-repos": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "file": {
-      "evra": "5.41-4.fc36.ppc64le"
+      "evra": "5.42-4.fc37.ppc64le"
     },
     "file-libs": {
-      "evra": "5.41-4.fc36.ppc64le"
+      "evra": "5.42-4.fc37.ppc64le"
     },
     "filesystem": {
-      "evra": "3.18-2.fc36.ppc64le"
+      "evra": "3.18-2.fc37.ppc64le"
     },
     "findutils": {
-      "evra": "1:4.9.0-1.fc36.ppc64le"
+      "evra": "1:4.9.0-2.fc37.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-5.fc36.ppc64le"
+      "evra": "1.14.0-2.fc37.ppc64le"
     },
     "fstrm": {
-      "evra": "0.6.1-4.fc36.ppc64le"
+      "evra": "0.6.1-5.fc37.ppc64le"
     },
     "fuse": {
-      "evra": "2.9.9-14.fc36.ppc64le"
+      "evra": "2.9.9-15.fc37.ppc64le"
     },
     "fuse-common": {
-      "evra": "3.10.5-2.fc36.ppc64le"
+      "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fuse-libs": {
-      "evra": "2.9.9-14.fc36.ppc64le"
+      "evra": "2.9.9-15.fc37.ppc64le"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc36.ppc64le"
+      "evra": "1.9-6.fc37.ppc64le"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-1.fc36.ppc64le"
+      "evra": "3.7.3-2.fc37.ppc64le"
     },
     "fuse3": {
-      "evra": "3.10.5-2.fc36.ppc64le"
+      "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-2.fc36.ppc64le"
+      "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc36.ppc64le"
+      "evra": "1.8.6-1.fc37.ppc64le"
     },
     "gawk": {
-      "evra": "5.1.1-2.fc36.ppc64le"
+      "evra": "5.1.1-4.fc37.ppc64le"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-2.fc36.ppc64le"
+      "evra": "1:1.23-2.fc37.ppc64le"
     },
     "gdisk": {
-      "evra": "1.0.9-2.fc36.ppc64le"
+      "evra": "1.0.9-4.fc37.ppc64le"
     },
-    "gettext": {
-      "evra": "0.21-9.fc36.ppc64le"
+    "gettext-envsubst": {
+      "evra": "0.21.1-1.fc37.ppc64le"
     },
     "gettext-libs": {
-      "evra": "0.21-9.fc36.ppc64le"
+      "evra": "0.21.1-1.fc37.ppc64le"
+    },
+    "gettext-runtime": {
+      "evra": "0.21.1-1.fc37.ppc64le"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "glib2": {
-      "evra": "2.72.3-1.fc36.ppc64le"
+      "evra": "2.74.1-2.fc37.ppc64le"
     },
     "glibc": {
-      "evra": "2.35-20.fc36.ppc64le"
+      "evra": "2.36-7.fc37.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.35-20.fc36.ppc64le"
+      "evra": "2.36-7.fc37.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-20.fc36.ppc64le"
+      "evra": "2.36-7.fc37.ppc64le"
     },
     "gmp": {
-      "evra": "1:6.2.1-2.fc36.ppc64le"
+      "evra": "1:6.2.1-3.fc37.ppc64le"
     },
     "gnupg2": {
-      "evra": "2.3.7-3.fc36.ppc64le"
+      "evra": "2.3.8-1.fc37.ppc64le"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc36.ppc64le"
+      "evra": "3.7.8-2.fc37.ppc64le"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc36.ppc64le"
+      "evra": "1.17.0-4.fc37.ppc64le"
     },
     "grep": {
-      "evra": "3.7-2.fc36.ppc64le"
+      "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-54.fc36.noarch"
+      "evra": "1:2.06-60.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-54.fc36.ppc64le"
+      "evra": "1:2.06-60.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-54.fc36.noarch"
+      "evra": "1:2.06-60.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-54.fc36.ppc64le"
+      "evra": "1:2.06-60.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-54.fc36.ppc64le"
+      "evra": "1:2.06-60.fc37.ppc64le"
     },
     "gzip": {
-      "evra": "1.11-3.fc36.ppc64le"
+      "evra": "1.12-2.fc37.ppc64le"
     },
     "hostname": {
-      "evra": "3.23-6.fc36.ppc64le"
+      "evra": "3.23-7.fc37.ppc64le"
     },
     "ignition": {
-      "evra": "2.14.0-3.fc36.ppc64le"
+      "evra": "2.14.0-4.fc37.ppc64le"
     },
     "inih": {
-      "evra": "56-1.fc36.ppc64le"
-    },
-    "intel-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "56-2.fc37.ppc64le"
     },
     "iproute": {
-      "evra": "5.15.0-2.fc36.ppc64le"
+      "evra": "5.18.0-2.fc37.ppc64le"
     },
     "iproute-tc": {
-      "evra": "5.15.0-2.fc36.ppc64le"
+      "evra": "5.18.0-2.fc37.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-15.fc36.ppc64le"
+      "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-15.fc36.ppc64le"
+      "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.7-15.fc36.ppc64le"
+      "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.7-15.fc36.ppc64le"
+      "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.7-15.fc36.noarch"
+      "evra": "1.8.8-3.fc37.noarch"
+    },
+    "iptables-utils": {
+      "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iputils": {
-      "evra": "20211215-2.fc36.ppc64le"
+      "evra": "20211215-3.fc37.ppc64le"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-8.fc35.ppc64le"
+      "evra": "2:1.9.0-1.fc37.ppc64le"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.ppc64le"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.ppc64le"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.ppc64le"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.ppc64le"
     },
     "isns-utils-libs": {
-      "evra": "0.101-4.fc36.ppc64le"
+      "evra": "0.101-5.fc37.ppc64le"
     },
     "jansson": {
-      "evra": "2.13.1-4.fc36.ppc64le"
+      "evra": "2.13.1-5.fc37.ppc64le"
+    },
+    "jemalloc": {
+      "evra": "5.3.0-2.fc37.ppc64le"
     },
     "jose": {
-      "evra": "11-5.fc36.ppc64le"
+      "evra": "11-6.fc37.ppc64le"
     },
     "jq": {
-      "evra": "1.6-13.fc36.ppc64le"
+      "evra": "1.6-14.fc37.ppc64le"
     },
     "json-c": {
-      "evra": "0.15-3.fc36.ppc64le"
+      "evra": "0.16-3.fc37.ppc64le"
     },
     "json-glib": {
-      "evra": "1.6.6-2.fc36.ppc64le"
+      "evra": "1.6.6-3.fc37.ppc64le"
     },
     "kbd": {
-      "evra": "2.4.0-9.fc36.ppc64le"
+      "evra": "2.5.1-3.fc37.ppc64le"
+    },
+    "kbd-legacy": {
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kbd-misc": {
-      "evra": "2.4.0-9.fc36.noarch"
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-200.fc36.ppc64le"
+      "evra": "6.0.7-301.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.7-200.fc36.ppc64le"
+      "evra": "6.0.7-301.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.7-200.fc36.ppc64le"
+      "evra": "6.0.7-301.fc37.ppc64le"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc36.ppc64le"
+      "evra": "2.0.25-1.fc37.ppc64le"
     },
     "keyutils": {
-      "evra": "1.6.1-4.fc36.ppc64le"
+      "evra": "1.6.1-5.fc37.ppc64le"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-4.fc36.ppc64le"
+      "evra": "1.6.1-5.fc37.ppc64le"
     },
     "kmod": {
-      "evra": "29-7.fc36.ppc64le"
+      "evra": "30-2.fc37.ppc64le"
     },
     "kmod-libs": {
-      "evra": "29-7.fc36.ppc64le"
+      "evra": "30-2.fc37.ppc64le"
     },
     "kpartx": {
-      "evra": "0.8.7-9.fc36.ppc64le"
+      "evra": "0.9.0-3.fc37.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc36.ppc64le"
+      "evra": "1.19.2-11.fc37.1.ppc64le"
     },
     "less": {
-      "evra": "590-5.fc36.ppc64le"
+      "evra": "590-5.fc37.ppc64le"
     },
     "libacl": {
-      "evra": "2.3.1-3.fc36.ppc64le"
+      "evra": "2.3.1-4.fc37.ppc64le"
     },
     "libaio": {
-      "evra": "0.3.111-13.fc36.ppc64le"
+      "evra": "0.3.111-14.fc37.ppc64le"
     },
     "libarchive": {
-      "evra": "3.5.3-3.fc36.ppc64le"
+      "evra": "3.6.1-2.fc37.ppc64le"
     },
     "libargon2": {
-      "evra": "20171227-9.fc36.ppc64le"
+      "evra": "20190702-1.fc37.ppc64le"
     },
     "libassuan": {
-      "evra": "2.5.5-4.fc36.ppc64le"
+      "evra": "2.5.5-5.fc37.ppc64le"
     },
     "libattr": {
-      "evra": "2.5.1-4.fc36.ppc64le"
+      "evra": "2.5.1-5.fc37.ppc64le"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-50.fc36.ppc64le"
+      "evra": "0.1.1-52.fc37.ppc64le"
     },
     "libblkid": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libbpf": {
-      "evra": "2:0.7.0-3.fc36.ppc64le"
-    },
-    "libbrotli": {
-      "evra": "1.0.9-7.fc36.ppc64le"
+      "evra": "2:0.8.0-2.fc37.ppc64le"
     },
     "libbsd": {
-      "evra": "0.10.0-9.fc36.ppc64le"
+      "evra": "0.10.0-10.fc37.ppc64le"
     },
     "libcap": {
-      "evra": "2.48-4.fc36.ppc64le"
+      "evra": "2.48-5.fc37.ppc64le"
     },
     "libcap-ng": {
-      "evra": "0.8.3-1.fc36.ppc64le"
+      "evra": "0.8.3-3.fc37.ppc64le"
     },
     "libcbor": {
-      "evra": "0.7.0-5.fc36.ppc64le"
+      "evra": "0.7.0-7.fc37.ppc64le"
     },
     "libcollection": {
-      "evra": "0.7.0-50.fc36.ppc64le"
+      "evra": "0.7.0-52.fc37.ppc64le"
     },
     "libcom_err": {
-      "evra": "1.46.5-2.fc36.ppc64le"
+      "evra": "1.46.5-3.fc37.ppc64le"
     },
-    "libcurl": {
-      "evra": "7.82.0-9.fc36.ppc64le"
+    "libcurl-minimal": {
+      "evra": "7.85.0-2.fc37.ppc64le"
     },
     "libdaemon": {
-      "evra": "0.14-23.fc36.ppc64le"
+      "evra": "0.14-24.fc37.ppc64le"
     },
     "libdb": {
-      "evra": "5.3.28-51.fc36.ppc64le"
+      "evra": "5.3.28-53.fc37.ppc64le"
     },
     "libdhash": {
-      "evra": "0.5.0-50.fc36.ppc64le"
+      "evra": "0.5.0-52.fc37.ppc64le"
     },
     "libeconf": {
-      "evra": "0.4.0-3.fc36.ppc64le"
+      "evra": "0.4.0-4.fc37.ppc64le"
     },
     "libedit": {
-      "evra": "3.1-41.20210910cvs.fc36.ppc64le"
+      "evra": "3.1-43.20221009cvs.fc37.ppc64le"
     },
     "libevent": {
-      "evra": "2.1.12-6.fc36.ppc64le"
+      "evra": "2.1.12-7.fc37.ppc64le"
     },
     "libfdisk": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libffi": {
-      "evra": "3.4.2-8.fc36.ppc64le"
+      "evra": "3.4.2-9.fc37.ppc64le"
     },
     "libfido2": {
-      "evra": "1.10.0-5.fc36.ppc64le"
+      "evra": "1.11.0-3.fc37.ppc64le"
     },
     "libgcab1": {
-      "evra": "1.4-6.fc36.ppc64le"
+      "evra": "1.5-1.fc37.ppc64le"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc36.ppc64le"
+      "evra": "12.2.1-2.fc37.ppc64le"
     },
     "libgcrypt": {
-      "evra": "1.10.1-3.fc36.ppc64le"
-    },
-    "libgomp": {
-      "evra": "12.2.1-2.fc36.ppc64le"
+      "evra": "1.10.1-4.fc37.ppc64le"
     },
     "libgpg-error": {
-      "evra": "1.45-1.fc36.ppc64le"
+      "evra": "1.45-2.fc37.ppc64le"
     },
     "libgudev": {
-      "evra": "237-2.fc36.ppc64le"
+      "evra": "237-3.fc37.ppc64le"
     },
     "libgusb": {
-      "evra": "0.3.10-2.fc36.ppc64le"
+      "evra": "0.4.2-1.fc37.ppc64le"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc36.ppc64le"
+      "evra": "41.0-1.fc37.ppc64le"
     },
     "libicu": {
-      "evra": "69.1-6.fc36.ppc64le"
+      "evra": "71.1-2.fc37.ppc64le"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc36.ppc64le"
+      "evra": "2.3.4-1.fc37.ppc64le"
     },
     "libini_config": {
-      "evra": "1.3.1-50.fc36.ppc64le"
+      "evra": "1.3.1-52.fc37.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc36.ppc64le"
+      "evra": "0.1.12-1.fc37.ppc64le"
     },
     "libjose": {
-      "evra": "11-5.fc36.ppc64le"
+      "evra": "11-6.fc37.ppc64le"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc36.ppc64le"
+      "evra": "1.4.0-2.fc37.ppc64le"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc36.ppc64le"
+      "evra": "1.4.0-2.fc37.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc36.ppc64le"
+      "evra": "1.6.2-1.fc37.ppc64le"
     },
     "libldb": {
-      "evra": "2.5.2-1.fc36.ppc64le"
+      "evra": "2.6.1-1.fc37.ppc64le"
     },
     "libluksmeta": {
-      "evra": "9-13.fc36.ppc64le"
+      "evra": "9-14.fc37.ppc64le"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc36.ppc64le"
+      "evra": "1.7.1-1.fc37.ppc64le"
     },
     "libmnl": {
-      "evra": "1.0.4-15.fc36.ppc64le"
+      "evra": "1.0.5-1.fc37.ppc64le"
     },
     "libmodulemd": {
-      "evra": "2.14.0-2.fc36.ppc64le"
+      "evra": "2.14.0-4.fc37.ppc64le"
     },
     "libmount": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libndp": {
-      "evra": "1.8-3.fc36.ppc64le"
+      "evra": "1.8-4.fc37.ppc64le"
     },
     "libnet": {
-      "evra": "1.2-5.fc36.ppc64le"
+      "evra": "1.2-6.fc37.ppc64le"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-4.fc36.ppc64le"
+      "evra": "1.0.8-5.fc37.ppc64le"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-21.fc36.ppc64le"
+      "evra": "1.0.1-22.fc37.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-0.fc36.ppc64le"
+      "evra": "1:2.6.2-1.rc2.fc37.ppc64le"
     },
     "libnftnl": {
-      "evra": "1.2.1-2.fc36.ppc64le"
+      "evra": "1.2.2-2.fc37.ppc64le"
     },
     "libnghttp2": {
-      "evra": "1.46.0-2.fc36.ppc64le"
+      "evra": "1.49.0-1.fc37.ppc64le"
     },
     "libnl3": {
-      "evra": "3.7.0-1.fc36.ppc64le"
+      "evra": "3.7.0-2.fc37.ppc64le"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-1.fc36.ppc64le"
+      "evra": "3.7.0-2.fc37.ppc64le"
     },
     "libnsl2": {
-      "evra": "2.0.0-3.fc36.ppc64le"
+      "evra": "2.0.0-4.fc37.ppc64le"
     },
     "libnvme": {
-      "evra": "1.0-1.fc36.ppc64le"
+      "evra": "1.2-1.fc37.ppc64le"
     },
     "libpath_utils": {
-      "evra": "0.2.1-50.fc36.ppc64le"
+      "evra": "0.2.1-52.fc37.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.1-3.fc36.ppc64le"
+      "evra": "14:1.10.1-4.fc37.ppc64le"
     },
     "libpkgconf": {
-      "evra": "1.8.0-2.fc36.ppc64le"
+      "evra": "1.8.0-3.fc37.ppc64le"
     },
     "libpsl": {
-      "evra": "0.21.1-5.fc36.ppc64le"
+      "evra": "0.21.1-6.fc37.ppc64le"
     },
     "libpwquality": {
-      "evra": "1.4.4-7.fc36.ppc64le"
+      "evra": "1.4.4-11.fc37.ppc64le"
     },
     "libref_array": {
-      "evra": "0.1.5-50.fc36.ppc64le"
+      "evra": "0.1.5-52.fc37.ppc64le"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc36.ppc64le"
+      "evra": "1.14.4-1.fc37.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc36.noarch"
+      "evra": "2.17.4-1.fc37.noarch"
     },
     "librtas": {
-      "evra": "2.0.2-12.fc36.ppc64le"
+      "evra": "2.0.2-13.fc37.ppc64le"
     },
     "libseccomp": {
-      "evra": "2.5.3-2.fc36.ppc64le"
+      "evra": "2.5.3-3.fc37.ppc64le"
     },
     "libselinux": {
-      "evra": "3.3-4.fc36.ppc64le"
+      "evra": "3.4-5.fc37.ppc64le"
     },
     "libselinux-utils": {
-      "evra": "3.3-4.fc36.ppc64le"
+      "evra": "3.4-5.fc37.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.3-3.fc36.ppc64le"
+      "evra": "3.4-5.fc37.ppc64le"
     },
     "libsepol": {
-      "evra": "3.3-3.fc36.ppc64le"
+      "evra": "3.4-3.fc37.ppc64le"
     },
     "libservicelog": {
-      "evra": "1.1.19-3.fc36.ppc64le"
+      "evra": "1.1.19-4.fc37.ppc64le"
     },
     "libsigsegv": {
-      "evra": "2.14-2.fc36.ppc64le"
+      "evra": "2.14-3.fc37.ppc64le"
     },
     "libslirp": {
-      "evra": "4.6.1-3.fc36.ppc64le"
+      "evra": "4.7.0-2.fc37.ppc64le"
     },
     "libsmartcols": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.16.6-0.fc36.ppc64le"
+      "evra": "2:4.17.2-2.fc37.ppc64le"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc36.ppc64le"
+      "evra": "0.7.22-3.fc37.ppc64le"
     },
     "libss": {
-      "evra": "1.46.5-2.fc36.ppc64le"
-    },
-    "libssh": {
-      "evra": "0.9.6-4.fc36.ppc64le"
-    },
-    "libssh-config": {
-      "evra": "0.9.6-4.fc36.noarch"
+      "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc36.ppc64le"
+      "evra": "12.2.1-2.fc37.ppc64le"
     },
     "libtalloc": {
-      "evra": "2.3.4-1.fc36.ppc64le"
+      "evra": "2.3.4-3.fc37.ppc64le"
     },
     "libtasn1": {
-      "evra": "4.18.0-2.fc36.ppc64le"
+      "evra": "4.18.0-3.fc37.ppc64le"
     },
     "libtdb": {
-      "evra": "1.4.7-1.fc36.ppc64le"
+      "evra": "1.4.7-3.fc37.ppc64le"
     },
     "libteam": {
-      "evra": "1.31-5.fc36.ppc64le"
+      "evra": "1.31-6.fc37.ppc64le"
     },
     "libtevent": {
-      "evra": "0.12.1-1.fc36.ppc64le"
+      "evra": "0.13.0-1.fc37.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc36.ppc64le"
+      "evra": "1.3.3-0.fc37.ppc64le"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-1.fc36.ppc64le"
+      "evra": "2.4.7-2.fc37.ppc64le"
     },
     "libunistring": {
-      "evra": "1.0-1.fc36.ppc64le"
+      "evra": "1.0-2.fc37.ppc64le"
     },
     "libusb1": {
-      "evra": "1.0.25-8.fc36.ppc64le"
+      "evra": "1.0.25-9.fc37.ppc64le"
     },
     "libuser": {
-      "evra": "0.63-10.fc36.ppc64le"
+      "evra": "0.63-13.fc37.ppc64le"
     },
     "libutempter": {
-      "evra": "1.2.1-6.fc36.ppc64le"
+      "evra": "1.2.1-7.fc37.ppc64le"
     },
     "libuuid": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libuv": {
-      "evra": "1:1.44.2-1.fc36.ppc64le"
+      "evra": "1:1.44.2-2.fc37.ppc64le"
     },
     "libverto": {
-      "evra": "0.3.2-3.fc36.ppc64le"
+      "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.16.6-0.fc36.ppc64le"
+      "evra": "2:4.17.2-2.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc36.ppc64le"
+      "evra": "4.4.30-1.fc37.ppc64le"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc36.ppc64le"
+      "evra": "2.10.3-2.fc37.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc36.ppc64le"
+      "evra": "0.3.10-1.fc37.ppc64le"
     },
     "libyaml": {
-      "evra": "0.2.5-7.fc36.ppc64le"
+      "evra": "0.2.5-8.fc37.ppc64le"
     },
     "libzstd": {
-      "evra": "1.5.2-2.fc36.ppc64le"
+      "evra": "1.5.2-3.fc37.ppc64le"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-31.fc36.ppc64le"
+      "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-3.fc36.ppc64le"
+      "evra": "0.9.29-4.fc37.ppc64le"
     },
     "logrotate": {
-      "evra": "3.20.1-2.fc36.ppc64le"
+      "evra": "3.20.1-3.fc37.ppc64le"
     },
     "lsof": {
-      "evra": "4.94.0-3.fc36.ppc64le"
+      "evra": "4.94.0-4.fc37.ppc64le"
     },
     "lua-libs": {
-      "evra": "5.4.4-3.fc36.ppc64le"
+      "evra": "5.4.4-4.fc37.ppc64le"
     },
     "luksmeta": {
-      "evra": "9-13.fc36.ppc64le"
+      "evra": "9-14.fc37.ppc64le"
     },
     "lvm2": {
-      "evra": "2.03.11-7.fc36.ppc64le"
+      "evra": "2.03.11-9.fc37.ppc64le"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-7.fc36.ppc64le"
+      "evra": "2.03.11-9.fc37.ppc64le"
     },
     "lz4-libs": {
-      "evra": "1.9.3-4.fc36.ppc64le"
+      "evra": "1.9.3-5.fc37.ppc64le"
     },
     "lzo": {
-      "evra": "2.10-6.fc36.ppc64le"
+      "evra": "2.10-7.fc37.ppc64le"
     },
     "mdadm": {
-      "evra": "4.2-1.fc36.ppc64le"
+      "evra": "4.2-2.fc37.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc36.ppc64le"
+      "evra": "20.10.20-1.fc37.ppc64le"
     },
-    "mozjs91": {
-      "evra": "91.13.0-1.fc36.ppc64le"
+    "mozjs102": {
+      "evra": "102.4.0-1.fc37.ppc64le"
     },
     "mpfr": {
-      "evra": "4.1.0-9.fc36.ppc64le"
+      "evra": "4.1.0-10.fc37.ppc64le"
     },
     "nano": {
-      "evra": "6.0-2.fc36.ppc64le"
+      "evra": "6.4-1.fc37.ppc64le"
     },
     "nano-default-editor": {
-      "evra": "6.0-2.fc36.noarch"
+      "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.2-9.20210508.fc36.ppc64le"
+      "evra": "6.3-3.20220501.fc37.ppc64le"
     },
     "ncurses-base": {
-      "evra": "6.2-9.20210508.fc36.noarch"
+      "evra": "6.3-3.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-9.20210508.fc36.ppc64le"
+      "evra": "6.3-3.20220501.fc37.ppc64le"
     },
     "net-tools": {
-      "evra": "2.0-0.61.20160912git.fc36.ppc64le"
+      "evra": "2.0-0.63.20160912git.fc37.ppc64le"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc36.ppc64le"
+      "evra": "1.2.0-5.fc37.ppc64le"
     },
     "nettle": {
-      "evra": "3.8-1.fc36.ppc64le"
+      "evra": "3.8-2.fc37.ppc64le"
     },
     "newt": {
-      "evra": "0.52.21-12.fc36.ppc64le"
+      "evra": "0.52.21-14.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-0.fc36.ppc64le"
+      "evra": "1:2.6.2-1.rc2.fc37.ppc64le"
     },
     "nftables": {
-      "evra": "1:1.0.1-3.fc36.ppc64le"
+      "evra": "1:1.0.4-3.fc37.ppc64le"
     },
     "npth": {
-      "evra": "1.6-8.fc36.ppc64le"
+      "evra": "1.6-9.fc37.ppc64le"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-20.fc36.ppc64le"
+      "evra": "2.18.1-21.fc37.ppc64le"
     },
     "numactl-libs": {
-      "evra": "2.0.14-5.fc36.ppc64le"
-    },
-    "nvidia-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvme-cli": {
-      "evra": "2.0-2.fc36.ppc64le"
+      "evra": "2.1.2-1.fc37.ppc64le"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc36.ppc64le"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc36.ppc64le"
-    },
-    "openldap-compat": {
-      "evra": "2.6.3-1.fc36.ppc64le"
+      "evra": "2.6.3-1.fc37.ppc64le"
     },
     "openssh": {
-      "evra": "8.8p1-1.fc36.1.ppc64le"
+      "evra": "8.8p1-7.fc37.ppc64le"
     },
     "openssh-clients": {
-      "evra": "8.8p1-1.fc36.1.ppc64le"
+      "evra": "8.8p1-7.fc37.ppc64le"
     },
     "openssh-server": {
-      "evra": "8.8p1-1.fc36.1.ppc64le"
+      "evra": "8.8p1-7.fc37.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.5-2.fc36.ppc64le"
+      "evra": "1:3.0.5-3.fc37.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-2.fc36.ppc64le"
+      "evra": "1:3.0.5-3.fc37.ppc64le"
     },
     "os-prober": {
-      "evra": "1.77-9.fc36.ppc64le"
+      "evra": "1.81-1.fc37.ppc64le"
     },
     "ostree": {
-      "evra": "2022.5-2.fc36.ppc64le"
+      "evra": "2022.6-1.fc37.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2022.5-2.fc36.ppc64le"
+      "evra": "2022.6-1.fc37.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2022.5-2.fc36.ppc64le"
+      "evra": "2022.6-1.fc37.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.24.1-2.fc36.ppc64le"
+      "evra": "0.24.1-3.fc37.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-2.fc36.ppc64le"
+      "evra": "0.24.1-3.fc37.ppc64le"
     },
     "pam": {
-      "evra": "1.5.2-13.fc36.ppc64le"
+      "evra": "1.5.2-14.fc37.ppc64le"
     },
     "pam-libs": {
-      "evra": "1.5.2-13.fc36.ppc64le"
+      "evra": "1.5.2-14.fc37.ppc64le"
     },
     "passwd": {
-      "evra": "0.80-12.fc36.ppc64le"
+      "evra": "0.80-13.fc37.ppc64le"
     },
     "pcre": {
-      "evra": "8.45-1.fc36.1.ppc64le"
+      "evra": "8.45-1.fc37.2.ppc64le"
     },
     "pcre2": {
-      "evra": "10.40-1.fc36.ppc64le"
+      "evra": "10.40-1.fc37.1.ppc64le"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc36.noarch"
+      "evra": "10.40-1.fc37.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-1.fc36.ppc64le"
+      "evra": "2.7-2.fc37.ppc64le"
     },
     "pkgconf": {
-      "evra": "1.8.0-2.fc36.ppc64le"
+      "evra": "1.8.0-3.fc37.ppc64le"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-2.fc36.noarch"
+      "evra": "1.8.0-3.fc37.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-2.fc36.ppc64le"
+      "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc36.ppc64le"
+      "evra": "4:4.3.0-2.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc36.ppc64le"
+      "evra": "4:4.3.0-2.fc37.ppc64le"
     },
     "policycoreutils": {
-      "evra": "3.3-4.fc36.ppc64le"
+      "evra": "3.4-6.fc37.ppc64le"
     },
     "polkit": {
-      "evra": "0.120-5.fc36.ppc64le"
+      "evra": "121-4.fc37.ppc64le"
     },
     "polkit-libs": {
-      "evra": "0.120-5.fc36.ppc64le"
+      "evra": "121-4.fc37.ppc64le"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-21.fc36.ppc64le"
+      "evra": "0.1-22.fc37.ppc64le"
     },
     "popt": {
-      "evra": "1.18-7.fc36.ppc64le"
+      "evra": "1.19-1.fc37.ppc64le"
     },
     "powerpc-utils-core": {
-      "evra": "1.3.9-6.fc36.ppc64le"
+      "evra": "1.3.10-4.fc37.ppc64le"
     },
     "ppc64-diag-rtas": {
-      "evra": "2.7.6-12.fc36.ppc64le"
+      "evra": "2.7.8-4.fc37.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.1.ppc64le"
+      "evra": "3.3.17-6.fc37.2.ppc64le"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc36.ppc64le"
+      "evra": "1.4.1-2.fc37.ppc64le"
     },
     "psmisc": {
-      "evra": "23.4-3.fc36.ppc64le"
+      "evra": "23.4-4.fc37.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-4.fc36.noarch"
+      "evra": "20210518-5.fc37.noarch"
     },
     "readline": {
-      "evra": "8.2-2.fc36.ppc64le"
+      "evra": "8.2-2.fc37.ppc64le"
     },
     "rpcbind": {
-      "evra": "1.2.6-2.fc36.ppc64le"
+      "evra": "1.2.6-3.fc37.ppc64le"
     },
     "rpm": {
-      "evra": "4.17.1-3.fc36.ppc64le"
+      "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-libs": {
-      "evra": "4.17.1-3.fc36.ppc64le"
+      "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.14-1.fc36.ppc64le"
+      "evra": "2022.15-3.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.14-1.fc36.ppc64le"
+      "evra": "2022.15-3.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-3.fc36.ppc64le"
+      "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc36.ppc64le"
+      "evra": "3.2.7-1.fc37.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc36.ppc64le"
+      "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.6-0.fc36.ppc64le"
+      "evra": "2:4.17.2-2.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.16.6-0.fc36.noarch"
+      "evra": "2:4.17.2-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.6-0.fc36.ppc64le"
+      "evra": "2:4.17.2-2.fc37.ppc64le"
     },
     "sed": {
-      "evra": "4.8-10.fc36.ppc64le"
+      "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "servicelog": {
-      "evra": "1.1.15-7.fc35.ppc64le"
+      "evra": "1.1.16-2.fc37.ppc64le"
     },
     "setup": {
-      "evra": "2.14.1-1.fc36.noarch"
+      "evra": "2.14.1-2.fc37.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-3.fc36.ppc64le"
+      "evra": "1.46-4.fc37.ppc64le"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-3.fc36.ppc64le"
+      "evra": "1.46-4.fc37.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-5.fc36.ppc64le"
+      "evra": "2:4.12.3-3.fc37.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-5.fc36.ppc64le"
+      "evra": "2:4.12.3-3.fc37.ppc64le"
     },
     "shared-mime-info": {
-      "evra": "2.1-3.fc35.ppc64le"
+      "evra": "2.2-2.fc37.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc36.ppc64le"
+      "evra": "1:1.10.0-3.fc37.ppc64le"
     },
     "slang": {
-      "evra": "2.3.2-11.fc36.ppc64le"
+      "evra": "2.3.3-1.fc37.ppc64le"
     },
     "slirp4netns": {
-      "evra": "1.2.0-0.2.beta.0.fc36.ppc64le"
+      "evra": "1.2.0-8.fc37.ppc64le"
     },
     "snappy": {
-      "evra": "1.1.9-4.fc36.ppc64le"
+      "evra": "1.1.9-5.fc37.ppc64le"
     },
     "socat": {
-      "evra": "1.7.4.2-2.fc36.ppc64le"
+      "evra": "1.7.4.2-3.fc37.ppc64le"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-5.fc36.ppc64le"
+      "evra": "3.39.2-2.fc37.ppc64le"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc36.ppc64le"
+      "evra": "4.5.1-2.fc37.ppc64le"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc36.ppc64le"
+      "evra": "0.1.4-1.fc37.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.4-1.fc36.ppc64le"
+      "evra": "2.8.0-2.fc37.ppc64le"
     },
     "stalld": {
-      "evra": "1.15-2.fc36.ppc64le"
+      "evra": "1.16-2.fc37.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.8-5.p2.fc36.ppc64le"
+      "evra": "1.9.11-4.p3.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "250.8-1.fc36.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "tar": {
-      "evra": "2:1.34-3.fc36.ppc64le"
+      "evra": "2:1.34-5.fc37.ppc64le"
     },
     "teamd": {
-      "evra": "1.31-5.fc36.ppc64le"
+      "evra": "1.31-6.fc37.ppc64le"
     },
     "toolbox": {
-      "evra": "0.0.99.3-6.fc36.ppc64le"
+      "evra": "0.0.99.3-7.fc37.ppc64le"
     },
     "tpm2-tools": {
-      "evra": "5.2-2.fc36.ppc64le"
+      "evra": "5.3-1.fc37.ppc64le"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc36.ppc64le"
+      "evra": "3.2.0-3.fc37.ppc64le"
     },
     "tzdata": {
-      "evra": "2022f-1.fc36.noarch"
+      "evra": "2022f-1.fc37.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-4.fc36.ppc64le"
+      "evra": "0.13.0-5.fc37.ppc64le"
     },
     "util-linux": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "util-linux-core": {
-      "evra": "2.38-1.fc36.ppc64le"
+      "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc36.ppc64le"
+      "evra": "2:9.0.828-1.fc37.ppc64le"
     },
     "which": {
-      "evra": "2.21-32.fc36.ppc64le"
+      "evra": "2.21-35.fc37.ppc64le"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-2.fc36.ppc64le"
+      "evra": "1.0.20210914-3.fc37.ppc64le"
     },
     "xfsprogs": {
-      "evra": "5.14.2-2.fc36.ppc64le"
+      "evra": "5.18.0-3.fc37.ppc64le"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-2.fc36.ppc64le"
+      "evra": "0.8.1-3.fc37.ppc64le"
     },
     "xz": {
-      "evra": "5.2.5-9.fc36.ppc64le"
+      "evra": "5.2.5-10.fc37.ppc64le"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc36.ppc64le"
+      "evra": "5.2.5-10.fc37.ppc64le"
     },
     "yajl": {
-      "evra": "2.1.0-18.fc36.ppc64le"
+      "evra": "2.1.0-19.fc37.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc36.ppc64le"
+      "evra": "1.2.3-1.fc37.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.24-4.fc36.ppc64le"
+      "evra": "0.0.25-1.fc37.ppc64le"
     },
     "zlib": {
-      "evra": "1.2.11-33.fc36.ppc64le"
+      "evra": "1.2.12-5.fc37.ppc64le"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc36.ppc64le"
+      "evra": "1.1.2-2.fc37.ppc64le"
     },
     "zstd": {
-      "evra": "1.5.2-2.fc36.ppc64le"
+      "evra": "1.5.2-3.fc37.ppc64le"
     }
   },
   "metadata": {
-    "generated": "2022-11-10T20:53:25Z",
+    "generated": "2022-11-11T13:53:30Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-05-04T21:15:55Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2022-11-08T23:31:51Z"
+        "generated": "2022-11-10T22:19:52Z"
+      },
+      "fedora-next": {
+        "generated": "2022-11-10T09:29:39Z"
       },
-      "fedora-updates": {
-        "generated": "2022-11-10T16:06:33Z"
+      "fedora-next-updates": {
+        "generated": "2022-11-11T00:57:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4f0bd2def8..4162cc157a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,1193 +1,1181 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.6-1.fc36.s390x"
+      "evra": "1:1.40.2-1.fc37.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.6-1.fc36.s390x"
+      "evra": "1:1.40.2-1.fc37.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.6-1.fc36.s390x"
+      "evra": "1:1.40.2-1.fc37.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.6-1.fc36.s390x"
+      "evra": "1:1.40.2-1.fc37.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.6-1.fc36.s390x"
+      "evra": "1:1.40.2-1.fc37.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.3.0-1.fc36.noarch"
+      "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc36.s390x"
+      "evra": "1.2.0-6.fc37.s390x"
     },
     "acl": {
-      "evra": "2.3.1-3.fc36.s390x"
+      "evra": "2.3.1-4.fc37.s390x"
     },
     "adcli": {
-      "evra": "0.9.1-10.fc36.s390x"
+      "evra": "0.9.1-11.fc37.s390x"
     },
     "afterburn": {
-      "evra": "5.3.0-2.fc36.s390x"
+      "evra": "5.3.0-3.fc37.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-2.fc36.s390x"
+      "evra": "5.3.0-3.fc37.s390x"
     },
     "alternatives": {
-      "evra": "1.21-1.fc36.s390x"
-    },
-    "amd-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "1.21-1.fc37.s390x"
     },
     "attr": {
-      "evra": "2.5.1-4.fc36.s390x"
+      "evra": "2.5.1-5.fc37.s390x"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc36.s390x"
+      "evra": "3.0.9-1.fc37.s390x"
     },
     "authselect": {
-      "evra": "1.4.0-1.fc36.s390x"
+      "evra": "1.4.0-3.fc37.s390x"
     },
     "authselect-libs": {
-      "evra": "1.4.0-1.fc36.s390x"
+      "evra": "1.4.0-3.fc37.s390x"
     },
     "avahi-libs": {
-      "evra": "0.8-15.fc36.s390x"
+      "evra": "0.8-17.fc37.s390x"
     },
     "basesystem": {
-      "evra": "11-13.fc36.noarch"
+      "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc36.s390x"
+      "evra": "5.2.2-2.fc37.s390x"
     },
     "bash-completion": {
-      "evra": "1:2.11-6.fc36.noarch"
+      "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.33-1.fc36.s390x"
+      "evra": "32:9.18.8-1.fc37.s390x"
     },
     "bind-license": {
-      "evra": "32:9.16.33-1.fc36.noarch"
+      "evra": "32:9.18.8-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.33-1.fc36.s390x"
+      "evra": "32:9.18.8-1.fc37.s390x"
     },
     "bsdtar": {
-      "evra": "3.5.3-3.fc36.s390x"
+      "evra": "3.6.1-2.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc36.s390x"
+      "evra": "6.0-1.fc37.s390x"
     },
     "bubblewrap": {
-      "evra": "0.5.0-2.fc36.s390x"
+      "evra": "0.5.0-3.fc37.s390x"
     },
     "bzip2": {
-      "evra": "1.0.8-11.fc36.s390x"
+      "evra": "1.0.8-12.fc37.s390x"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-11.fc36.s390x"
+      "evra": "1.0.8-12.fc37.s390x"
     },
     "c-ares": {
-      "evra": "1.17.2-2.fc36.s390x"
+      "evra": "1.17.2-3.fc37.s390x"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.2.fc36.noarch"
+      "evra": "2022.2.54-5.fc37.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc36.s390x"
+      "evra": "0.1.7-10.fc37.s390x"
     },
     "chrony": {
-      "evra": "4.3-1.fc36.s390x"
+      "evra": "4.3-1.fc37.s390x"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc36.s390x"
+      "evra": "6.15-2.fc37.s390x"
     },
     "clevis": {
-      "evra": "18-9.fc36.s390x"
+      "evra": "18-12.fc37.s390x"
     },
     "clevis-dracut": {
-      "evra": "18-9.fc36.s390x"
+      "evra": "18-12.fc37.s390x"
     },
     "clevis-luks": {
-      "evra": "18-9.fc36.s390x"
+      "evra": "18-12.fc37.s390x"
     },
     "clevis-systemd": {
-      "evra": "18-9.fc36.s390x"
+      "evra": "18-12.fc37.s390x"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-10.fc36.noarch"
+      "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc36.s390x"
+      "evra": "2:2.1.4-3.fc37.s390x"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc36.s390x"
+      "evra": "1.6.8-4.fc37.s390x"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc36.s390x"
+      "evra": "1.1.1-8.fc37.s390x"
     },
     "containers-common": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc36.s390x"
+      "evra": "0.16.1-2.fc37.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc36.s390x"
+      "evra": "0.16.1-2.fc37.s390x"
     },
     "coreutils": {
-      "evra": "9.0-8.fc36.s390x"
+      "evra": "9.1-6.fc37.s390x"
     },
     "coreutils-common": {
-      "evra": "9.0-8.fc36.s390x"
+      "evra": "9.1-6.fc37.s390x"
     },
     "cpio": {
-      "evra": "2.13-12.fc36.s390x"
+      "evra": "2.13-13.fc37.s390x"
     },
     "cracklib": {
-      "evra": "2.9.6-28.fc36.s390x"
+      "evra": "2.9.7-30.fc37.s390x"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-28.fc36.s390x"
+      "evra": "2.9.7-30.fc37.s390x"
     },
     "criu": {
-      "evra": "3.17.1-2.fc36.s390x"
+      "evra": "3.17.1-3.fc37.s390x"
     },
     "criu-libs": {
-      "evra": "3.17.1-2.fc36.s390x"
+      "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.6-2.fc36.s390x"
+      "evra": "1.6-2.fc37.s390x"
     },
     "crypto-policies": {
-      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
+      "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-2.fc36.s390x"
+      "evra": "2.5.0-1.fc37.s390x"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-2.fc36.s390x"
+      "evra": "2.5.0-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.82.0-9.fc36.s390x"
+      "evra": "7.85.0-2.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-18.fc36.s390x"
+      "evra": "2.1.28-8.fc37.s390x"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-18.fc36.s390x"
+      "evra": "2.1.28-8.fc37.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc36.s390x"
+      "evra": "1:1.14.4-1.fc37.s390x"
     },
     "dbus-broker": {
-      "evra": "32-1.fc36.s390x"
+      "evra": "32-1.fc37.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc36.s390x"
+      "evra": "1:1.14.4-1.fc37.s390x"
     },
     "device-mapper": {
-      "evra": "1.02.175-7.fc36.s390x"
+      "evra": "1.02.175-9.fc37.s390x"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-7.fc36.s390x"
+      "evra": "1.02.175-9.fc37.s390x"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-7.fc36.s390x"
+      "evra": "1.02.175-9.fc37.s390x"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-7.fc36.s390x"
+      "evra": "1.02.175-9.fc37.s390x"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-9.fc36.s390x"
+      "evra": "0.9.0-3.fc37.s390x"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-9.fc36.s390x"
+      "evra": "0.9.0-3.fc37.s390x"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-7.fc36.s390x"
+      "evra": "0.9.0-8.fc37.s390x"
     },
     "diffutils": {
-      "evra": "3.8-2.fc36.s390x"
+      "evra": "3.8-3.fc37.s390x"
     },
     "dnsmasq": {
-      "evra": "2.86-10.fc36.s390x"
+      "evra": "2.87-1.fc37.s390x"
     },
     "dosfstools": {
-      "evra": "4.2-3.fc36.s390x"
+      "evra": "4.2-4.fc37.s390x"
     },
     "dracut": {
-      "evra": "057-3.fc36.s390x"
+      "evra": "057-3.fc37.s390x"
     },
     "dracut-network": {
-      "evra": "057-3.fc36.s390x"
+      "evra": "057-3.fc37.s390x"
     },
     "dracut-squash": {
-      "evra": "057-3.fc36.s390x"
+      "evra": "057-3.fc37.s390x"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-2.fc36.s390x"
+      "evra": "1.46.5-3.fc37.s390x"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-2.fc36.s390x"
+      "evra": "1.46.5-3.fc37.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-4.fc36.noarch"
+      "evra": "0.187-8.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-4.fc36.s390x"
+      "evra": "0.187-8.fc37.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.187-4.fc36.s390x"
+      "evra": "0.187-8.fc37.s390x"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc36.s390x"
+      "evra": "2:6.0-1.fc37.s390x"
     },
     "expat": {
-      "evra": "2.5.0-1.fc36.s390x"
+      "evra": "2.4.9-1.fc37.s390x"
     },
     "fedora-gpg-keys": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-repos": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "file": {
-      "evra": "5.41-4.fc36.s390x"
+      "evra": "5.42-4.fc37.s390x"
     },
     "file-libs": {
-      "evra": "5.41-4.fc36.s390x"
+      "evra": "5.42-4.fc37.s390x"
     },
     "filesystem": {
-      "evra": "3.18-2.fc36.s390x"
+      "evra": "3.18-2.fc37.s390x"
     },
     "findutils": {
-      "evra": "1:4.9.0-1.fc36.s390x"
+      "evra": "1:4.9.0-2.fc37.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-5.fc36.s390x"
+      "evra": "1.14.0-2.fc37.s390x"
     },
     "fstrm": {
-      "evra": "0.6.1-4.fc36.s390x"
+      "evra": "0.6.1-5.fc37.s390x"
     },
     "fuse": {
-      "evra": "2.9.9-14.fc36.s390x"
+      "evra": "2.9.9-15.fc37.s390x"
     },
     "fuse-common": {
-      "evra": "3.10.5-2.fc36.s390x"
+      "evra": "3.10.5-5.fc37.s390x"
     },
     "fuse-libs": {
-      "evra": "2.9.9-14.fc36.s390x"
+      "evra": "2.9.9-15.fc37.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc36.s390x"
+      "evra": "1.9-6.fc37.s390x"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-1.fc36.s390x"
+      "evra": "3.7.3-2.fc37.s390x"
     },
     "fuse3": {
-      "evra": "3.10.5-2.fc36.s390x"
+      "evra": "3.10.5-5.fc37.s390x"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-2.fc36.s390x"
+      "evra": "3.10.5-5.fc37.s390x"
     },
     "gawk": {
-      "evra": "5.1.1-2.fc36.s390x"
+      "evra": "5.1.1-4.fc37.s390x"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-2.fc36.s390x"
+      "evra": "1:1.23-2.fc37.s390x"
     },
     "gdisk": {
-      "evra": "1.0.9-2.fc36.s390x"
+      "evra": "1.0.9-4.fc37.s390x"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "glib2": {
-      "evra": "2.72.3-1.fc36.s390x"
+      "evra": "2.74.1-2.fc37.s390x"
     },
     "glibc": {
-      "evra": "2.35-20.fc36.s390x"
+      "evra": "2.36-7.fc37.s390x"
     },
     "glibc-common": {
-      "evra": "2.35-20.fc36.s390x"
+      "evra": "2.36-7.fc37.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-20.fc36.s390x"
+      "evra": "2.36-7.fc37.s390x"
     },
     "gmp": {
-      "evra": "1:6.2.1-2.fc36.s390x"
+      "evra": "1:6.2.1-3.fc37.s390x"
     },
     "gnupg2": {
-      "evra": "2.3.7-3.fc36.s390x"
+      "evra": "2.3.8-1.fc37.s390x"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc36.s390x"
+      "evra": "3.7.8-2.fc37.s390x"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc36.s390x"
+      "evra": "1.17.0-4.fc37.s390x"
     },
     "grep": {
-      "evra": "3.7-2.fc36.s390x"
+      "evra": "3.7-4.fc37.s390x"
     },
     "gzip": {
-      "evra": "1.11-3.fc36.s390x"
+      "evra": "1.12-2.fc37.s390x"
     },
     "hostname": {
-      "evra": "3.23-6.fc36.s390x"
+      "evra": "3.23-7.fc37.s390x"
     },
     "ignition": {
-      "evra": "2.14.0-3.fc36.s390x"
+      "evra": "2.14.0-4.fc37.s390x"
     },
     "inih": {
-      "evra": "56-1.fc36.s390x"
-    },
-    "intel-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "56-2.fc37.s390x"
     },
     "iproute": {
-      "evra": "5.15.0-2.fc36.s390x"
+      "evra": "5.18.0-2.fc37.s390x"
     },
     "iproute-tc": {
-      "evra": "5.15.0-2.fc36.s390x"
+      "evra": "5.18.0-2.fc37.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-15.fc36.s390x"
+      "evra": "1.8.8-3.fc37.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-15.fc36.s390x"
+      "evra": "1.8.8-3.fc37.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.7-15.fc36.s390x"
+      "evra": "1.8.8-3.fc37.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.7-15.fc36.s390x"
+      "evra": "1.8.8-3.fc37.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.7-15.fc36.noarch"
+      "evra": "1.8.8-3.fc37.noarch"
+    },
+    "iptables-utils": {
+      "evra": "1.8.8-3.fc37.s390x"
     },
     "iputils": {
-      "evra": "20211215-2.fc36.s390x"
+      "evra": "20211215-3.fc37.s390x"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.s390x"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.s390x"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.s390x"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.s390x"
     },
     "isns-utils-libs": {
-      "evra": "0.101-4.fc36.s390x"
+      "evra": "0.101-5.fc37.s390x"
     },
     "jansson": {
-      "evra": "2.13.1-4.fc36.s390x"
+      "evra": "2.13.1-5.fc37.s390x"
+    },
+    "jemalloc": {
+      "evra": "5.3.0-2.fc37.s390x"
     },
     "jose": {
-      "evra": "11-5.fc36.s390x"
+      "evra": "11-6.fc37.s390x"
     },
     "jq": {
-      "evra": "1.6-13.fc36.s390x"
+      "evra": "1.6-14.fc37.s390x"
     },
     "json-c": {
-      "evra": "0.15-3.fc36.s390x"
+      "evra": "0.16-3.fc37.s390x"
     },
     "json-glib": {
-      "evra": "1.6.6-2.fc36.s390x"
+      "evra": "1.6.6-3.fc37.s390x"
     },
     "kbd": {
-      "evra": "2.4.0-9.fc36.s390x"
+      "evra": "2.5.1-3.fc37.s390x"
+    },
+    "kbd-legacy": {
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kbd-misc": {
-      "evra": "2.4.0-9.fc36.noarch"
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-200.fc36.s390x"
+      "evra": "6.0.7-301.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.7-200.fc36.s390x"
+      "evra": "6.0.7-301.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.7-200.fc36.s390x"
+      "evra": "6.0.7-301.fc37.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc36.s390x"
+      "evra": "2.0.25-1.fc37.s390x"
     },
     "keyutils": {
-      "evra": "1.6.1-4.fc36.s390x"
+      "evra": "1.6.1-5.fc37.s390x"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-4.fc36.s390x"
+      "evra": "1.6.1-5.fc37.s390x"
     },
     "kmod": {
-      "evra": "29-7.fc36.s390x"
+      "evra": "30-2.fc37.s390x"
     },
     "kmod-libs": {
-      "evra": "29-7.fc36.s390x"
+      "evra": "30-2.fc37.s390x"
     },
     "kpartx": {
-      "evra": "0.8.7-9.fc36.s390x"
+      "evra": "0.9.0-3.fc37.s390x"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc36.s390x"
+      "evra": "1.19.2-11.fc37.1.s390x"
     },
     "less": {
-      "evra": "590-5.fc36.s390x"
+      "evra": "590-5.fc37.s390x"
     },
     "libacl": {
-      "evra": "2.3.1-3.fc36.s390x"
+      "evra": "2.3.1-4.fc37.s390x"
     },
     "libaio": {
-      "evra": "0.3.111-13.fc36.s390x"
+      "evra": "0.3.111-14.fc37.s390x"
     },
     "libarchive": {
-      "evra": "3.5.3-3.fc36.s390x"
+      "evra": "3.6.1-2.fc37.s390x"
     },
     "libargon2": {
-      "evra": "20171227-9.fc36.s390x"
+      "evra": "20190702-1.fc37.s390x"
     },
     "libassuan": {
-      "evra": "2.5.5-4.fc36.s390x"
+      "evra": "2.5.5-5.fc37.s390x"
     },
     "libattr": {
-      "evra": "2.5.1-4.fc36.s390x"
+      "evra": "2.5.1-5.fc37.s390x"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-50.fc36.s390x"
+      "evra": "0.1.1-52.fc37.s390x"
     },
     "libblkid": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "libbpf": {
-      "evra": "2:0.7.0-3.fc36.s390x"
-    },
-    "libbrotli": {
-      "evra": "1.0.9-7.fc36.s390x"
+      "evra": "2:0.8.0-2.fc37.s390x"
     },
     "libbsd": {
-      "evra": "0.10.0-9.fc36.s390x"
+      "evra": "0.10.0-10.fc37.s390x"
     },
     "libcap": {
-      "evra": "2.48-4.fc36.s390x"
+      "evra": "2.48-5.fc37.s390x"
     },
     "libcap-ng": {
-      "evra": "0.8.3-1.fc36.s390x"
+      "evra": "0.8.3-3.fc37.s390x"
     },
     "libcbor": {
-      "evra": "0.7.0-5.fc36.s390x"
+      "evra": "0.7.0-7.fc37.s390x"
     },
     "libcollection": {
-      "evra": "0.7.0-50.fc36.s390x"
+      "evra": "0.7.0-52.fc37.s390x"
     },
     "libcom_err": {
-      "evra": "1.46.5-2.fc36.s390x"
+      "evra": "1.46.5-3.fc37.s390x"
     },
-    "libcurl": {
-      "evra": "7.82.0-9.fc36.s390x"
+    "libcurl-minimal": {
+      "evra": "7.85.0-2.fc37.s390x"
     },
     "libdaemon": {
-      "evra": "0.14-23.fc36.s390x"
+      "evra": "0.14-24.fc37.s390x"
     },
     "libdb": {
-      "evra": "5.3.28-51.fc36.s390x"
+      "evra": "5.3.28-53.fc37.s390x"
     },
     "libdhash": {
-      "evra": "0.5.0-50.fc36.s390x"
+      "evra": "0.5.0-52.fc37.s390x"
     },
     "libeconf": {
-      "evra": "0.4.0-3.fc36.s390x"
+      "evra": "0.4.0-4.fc37.s390x"
     },
     "libedit": {
-      "evra": "3.1-41.20210910cvs.fc36.s390x"
+      "evra": "3.1-43.20221009cvs.fc37.s390x"
     },
     "libevent": {
-      "evra": "2.1.12-6.fc36.s390x"
+      "evra": "2.1.12-7.fc37.s390x"
     },
     "libfdisk": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "libffi": {
-      "evra": "3.4.2-8.fc36.s390x"
+      "evra": "3.4.2-9.fc37.s390x"
     },
     "libfido2": {
-      "evra": "1.10.0-5.fc36.s390x"
+      "evra": "1.11.0-3.fc37.s390x"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc36.s390x"
+      "evra": "12.2.1-2.fc37.s390x"
     },
     "libgcrypt": {
-      "evra": "1.10.1-3.fc36.s390x"
+      "evra": "1.10.1-4.fc37.s390x"
     },
     "libgpg-error": {
-      "evra": "1.45-1.fc36.s390x"
+      "evra": "1.45-2.fc37.s390x"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc36.s390x"
+      "evra": "41.0-1.fc37.s390x"
     },
     "libicu": {
-      "evra": "69.1-6.fc36.s390x"
+      "evra": "71.1-2.fc37.s390x"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc36.s390x"
+      "evra": "2.3.4-1.fc37.s390x"
     },
     "libini_config": {
-      "evra": "1.3.1-50.fc36.s390x"
+      "evra": "1.3.1-52.fc37.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "libjose": {
-      "evra": "11-5.fc36.s390x"
+      "evra": "11-6.fc37.s390x"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc36.s390x"
+      "evra": "1.4.0-2.fc37.s390x"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc36.s390x"
+      "evra": "1.4.0-2.fc37.s390x"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc36.s390x"
+      "evra": "1.6.2-1.fc37.s390x"
     },
     "libldb": {
-      "evra": "2.5.2-1.fc36.s390x"
+      "evra": "2.6.1-1.fc37.s390x"
     },
     "liblockfile": {
-      "evra": "1.17-2.fc36.s390x"
+      "evra": "1.17-3.fc37.s390x"
     },
     "libluksmeta": {
-      "evra": "9-13.fc36.s390x"
+      "evra": "9-14.fc37.s390x"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc36.s390x"
+      "evra": "1.7.1-1.fc37.s390x"
     },
     "libmnl": {
-      "evra": "1.0.4-15.fc36.s390x"
+      "evra": "1.0.5-1.fc37.s390x"
     },
     "libmodulemd": {
-      "evra": "2.14.0-2.fc36.s390x"
+      "evra": "2.14.0-4.fc37.s390x"
     },
     "libmount": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "libndp": {
-      "evra": "1.8-3.fc36.s390x"
+      "evra": "1.8-4.fc37.s390x"
     },
     "libnet": {
-      "evra": "1.2-5.fc36.s390x"
+      "evra": "1.2-6.fc37.s390x"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-4.fc36.s390x"
+      "evra": "1.0.8-5.fc37.s390x"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-21.fc36.s390x"
+      "evra": "1.0.1-22.fc37.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-0.fc36.s390x"
+      "evra": "1:2.6.2-1.rc2.fc37.s390x"
     },
     "libnftnl": {
-      "evra": "1.2.1-2.fc36.s390x"
+      "evra": "1.2.2-2.fc37.s390x"
     },
     "libnghttp2": {
-      "evra": "1.46.0-2.fc36.s390x"
+      "evra": "1.49.0-1.fc37.s390x"
     },
     "libnl3": {
-      "evra": "3.7.0-1.fc36.s390x"
+      "evra": "3.7.0-2.fc37.s390x"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-1.fc36.s390x"
+      "evra": "3.7.0-2.fc37.s390x"
     },
     "libnsl2": {
-      "evra": "2.0.0-3.fc36.s390x"
+      "evra": "2.0.0-4.fc37.s390x"
     },
     "libnvme": {
-      "evra": "1.0-1.fc36.s390x"
+      "evra": "1.2-1.fc37.s390x"
     },
     "libpath_utils": {
-      "evra": "0.2.1-50.fc36.s390x"
+      "evra": "0.2.1-52.fc37.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.1-3.fc36.s390x"
+      "evra": "14:1.10.1-4.fc37.s390x"
     },
     "libpkgconf": {
-      "evra": "1.8.0-2.fc36.s390x"
+      "evra": "1.8.0-3.fc37.s390x"
     },
     "libpsl": {
-      "evra": "0.21.1-5.fc36.s390x"
+      "evra": "0.21.1-6.fc37.s390x"
     },
     "libpwquality": {
-      "evra": "1.4.4-7.fc36.s390x"
+      "evra": "1.4.4-11.fc37.s390x"
     },
     "libref_array": {
-      "evra": "0.1.5-50.fc36.s390x"
+      "evra": "0.1.5-52.fc37.s390x"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc36.s390x"
+      "evra": "1.14.4-1.fc37.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc36.noarch"
+      "evra": "2.17.4-1.fc37.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-2.fc36.s390x"
+      "evra": "2.5.3-3.fc37.s390x"
     },
     "libselinux": {
-      "evra": "3.3-4.fc36.s390x"
+      "evra": "3.4-5.fc37.s390x"
     },
     "libselinux-utils": {
-      "evra": "3.3-4.fc36.s390x"
+      "evra": "3.4-5.fc37.s390x"
     },
     "libsemanage": {
-      "evra": "3.3-3.fc36.s390x"
+      "evra": "3.4-5.fc37.s390x"
     },
     "libsepol": {
-      "evra": "3.3-3.fc36.s390x"
+      "evra": "3.4-3.fc37.s390x"
     },
     "libsigsegv": {
-      "evra": "2.14-2.fc36.s390x"
+      "evra": "2.14-3.fc37.s390x"
     },
     "libslirp": {
-      "evra": "4.6.1-3.fc36.s390x"
+      "evra": "4.7.0-2.fc37.s390x"
     },
     "libsmartcols": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.16.6-0.fc36.s390x"
+      "evra": "2:4.17.2-2.fc37.s390x"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc36.s390x"
+      "evra": "0.7.22-3.fc37.s390x"
     },
     "libss": {
-      "evra": "1.46.5-2.fc36.s390x"
-    },
-    "libssh": {
-      "evra": "0.9.6-4.fc36.s390x"
-    },
-    "libssh-config": {
-      "evra": "0.9.6-4.fc36.noarch"
+      "evra": "1.46.5-3.fc37.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc36.s390x"
+      "evra": "12.2.1-2.fc37.s390x"
     },
     "libtalloc": {
-      "evra": "2.3.4-1.fc36.s390x"
+      "evra": "2.3.4-3.fc37.s390x"
     },
     "libtasn1": {
-      "evra": "4.18.0-2.fc36.s390x"
+      "evra": "4.18.0-3.fc37.s390x"
     },
     "libtdb": {
-      "evra": "1.4.7-1.fc36.s390x"
+      "evra": "1.4.7-3.fc37.s390x"
     },
     "libteam": {
-      "evra": "1.31-5.fc36.s390x"
+      "evra": "1.31-6.fc37.s390x"
     },
     "libtevent": {
-      "evra": "0.12.1-1.fc36.s390x"
+      "evra": "0.13.0-1.fc37.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc36.s390x"
+      "evra": "1.3.3-0.fc37.s390x"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-1.fc36.s390x"
+      "evra": "2.4.7-2.fc37.s390x"
     },
     "libunistring": {
-      "evra": "1.0-1.fc36.s390x"
+      "evra": "1.0-2.fc37.s390x"
     },
     "libuser": {
-      "evra": "0.63-10.fc36.s390x"
+      "evra": "0.63-13.fc37.s390x"
     },
     "libutempter": {
-      "evra": "1.2.1-6.fc36.s390x"
+      "evra": "1.2.1-7.fc37.s390x"
     },
     "libuuid": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "libuv": {
-      "evra": "1:1.44.2-1.fc36.s390x"
+      "evra": "1:1.44.2-2.fc37.s390x"
     },
     "libverto": {
-      "evra": "0.3.2-3.fc36.s390x"
+      "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.16.6-0.fc36.s390x"
+      "evra": "2:4.17.2-2.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc36.s390x"
+      "evra": "4.4.30-1.fc37.s390x"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc36.s390x"
+      "evra": "2.10.3-2.fc37.s390x"
     },
     "libyaml": {
-      "evra": "0.2.5-7.fc36.s390x"
+      "evra": "0.2.5-8.fc37.s390x"
     },
     "libzstd": {
-      "evra": "1.5.2-2.fc36.s390x"
+      "evra": "1.5.2-3.fc37.s390x"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-31.fc36.s390x"
+      "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-3.fc36.s390x"
+      "evra": "0.9.29-4.fc37.s390x"
     },
     "logrotate": {
-      "evra": "3.20.1-2.fc36.s390x"
+      "evra": "3.20.1-3.fc37.s390x"
     },
     "lsof": {
-      "evra": "4.94.0-3.fc36.s390x"
+      "evra": "4.94.0-4.fc37.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-3.fc36.s390x"
+      "evra": "5.4.4-4.fc37.s390x"
     },
     "luksmeta": {
-      "evra": "9-13.fc36.s390x"
+      "evra": "9-14.fc37.s390x"
     },
     "lvm2": {
-      "evra": "2.03.11-7.fc36.s390x"
+      "evra": "2.03.11-9.fc37.s390x"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-7.fc36.s390x"
+      "evra": "2.03.11-9.fc37.s390x"
     },
     "lz4-libs": {
-      "evra": "1.9.3-4.fc36.s390x"
+      "evra": "1.9.3-5.fc37.s390x"
     },
     "lzo": {
-      "evra": "2.10-6.fc36.s390x"
+      "evra": "2.10-7.fc37.s390x"
     },
     "mdadm": {
-      "evra": "4.2-1.fc36.s390x"
+      "evra": "4.2-2.fc37.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc36.s390x"
+      "evra": "20.10.20-1.fc37.s390x"
     },
-    "mozjs91": {
-      "evra": "91.13.0-1.fc36.s390x"
+    "mozjs102": {
+      "evra": "102.4.0-1.fc37.s390x"
     },
     "mpfr": {
-      "evra": "4.1.0-9.fc36.s390x"
+      "evra": "4.1.0-10.fc37.s390x"
     },
     "nano": {
-      "evra": "6.0-2.fc36.s390x"
+      "evra": "6.4-1.fc37.s390x"
     },
     "nano-default-editor": {
-      "evra": "6.0-2.fc36.noarch"
+      "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.2-9.20210508.fc36.s390x"
+      "evra": "6.3-3.20220501.fc37.s390x"
     },
     "ncurses-base": {
-      "evra": "6.2-9.20210508.fc36.noarch"
+      "evra": "6.3-3.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-9.20210508.fc36.s390x"
+      "evra": "6.3-3.20220501.fc37.s390x"
     },
     "net-tools": {
-      "evra": "2.0-0.61.20160912git.fc36.s390x"
+      "evra": "2.0-0.63.20160912git.fc37.s390x"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc36.s390x"
+      "evra": "1.2.0-5.fc37.s390x"
     },
     "nettle": {
-      "evra": "3.8-1.fc36.s390x"
+      "evra": "3.8-2.fc37.s390x"
     },
     "newt": {
-      "evra": "0.52.21-12.fc36.s390x"
+      "evra": "0.52.21-14.fc37.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-0.fc36.s390x"
+      "evra": "1:2.6.2-1.rc2.fc37.s390x"
     },
     "nftables": {
-      "evra": "1:1.0.1-3.fc36.s390x"
+      "evra": "1:1.0.4-3.fc37.s390x"
     },
     "npth": {
-      "evra": "1.6-8.fc36.s390x"
+      "evra": "1.6-9.fc37.s390x"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-20.fc36.s390x"
-    },
-    "nvidia-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "2.18.1-21.fc37.s390x"
     },
     "nvme-cli": {
-      "evra": "2.0-2.fc36.s390x"
+      "evra": "2.1.2-1.fc37.s390x"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc36.s390x"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.s390x"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc36.s390x"
-    },
-    "openldap-compat": {
-      "evra": "2.6.3-1.fc36.s390x"
+      "evra": "2.6.3-1.fc37.s390x"
     },
     "openssh": {
-      "evra": "8.8p1-1.fc36.1.s390x"
+      "evra": "8.8p1-7.fc37.s390x"
     },
     "openssh-clients": {
-      "evra": "8.8p1-1.fc36.1.s390x"
+      "evra": "8.8p1-7.fc37.s390x"
     },
     "openssh-server": {
-      "evra": "8.8p1-1.fc36.1.s390x"
+      "evra": "8.8p1-7.fc37.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.5-2.fc36.s390x"
+      "evra": "1:3.0.5-3.fc37.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-2.fc36.s390x"
+      "evra": "1:3.0.5-3.fc37.s390x"
     },
     "ostree": {
-      "evra": "2022.5-2.fc36.s390x"
+      "evra": "2022.6-1.fc37.s390x"
     },
     "ostree-libs": {
-      "evra": "2022.5-2.fc36.s390x"
+      "evra": "2022.6-1.fc37.s390x"
     },
     "p11-kit": {
-      "evra": "0.24.1-2.fc36.s390x"
+      "evra": "0.24.1-3.fc37.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-2.fc36.s390x"
+      "evra": "0.24.1-3.fc37.s390x"
     },
     "pam": {
-      "evra": "1.5.2-13.fc36.s390x"
+      "evra": "1.5.2-14.fc37.s390x"
     },
     "pam-libs": {
-      "evra": "1.5.2-13.fc36.s390x"
+      "evra": "1.5.2-14.fc37.s390x"
     },
     "passwd": {
-      "evra": "0.80-12.fc36.s390x"
+      "evra": "0.80-13.fc37.s390x"
     },
     "pcre": {
-      "evra": "8.45-1.fc36.1.s390x"
+      "evra": "8.45-1.fc37.2.s390x"
     },
     "pcre2": {
-      "evra": "10.40-1.fc36.s390x"
+      "evra": "10.40-1.fc37.1.s390x"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc36.noarch"
+      "evra": "10.40-1.fc37.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-1.fc36.s390x"
+      "evra": "2.7-2.fc37.s390x"
     },
     "pkgconf": {
-      "evra": "1.8.0-2.fc36.s390x"
+      "evra": "1.8.0-3.fc37.s390x"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-2.fc36.noarch"
+      "evra": "1.8.0-3.fc37.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-2.fc36.s390x"
+      "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc36.s390x"
+      "evra": "4:4.3.0-2.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc36.s390x"
+      "evra": "4:4.3.0-2.fc37.s390x"
     },
     "policycoreutils": {
-      "evra": "3.3-4.fc36.s390x"
+      "evra": "3.4-6.fc37.s390x"
     },
     "polkit": {
-      "evra": "0.120-5.fc36.s390x"
+      "evra": "121-4.fc37.s390x"
     },
     "polkit-libs": {
-      "evra": "0.120-5.fc36.s390x"
+      "evra": "121-4.fc37.s390x"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-21.fc36.s390x"
+      "evra": "0.1-22.fc37.s390x"
     },
     "popt": {
-      "evra": "1.18-7.fc36.s390x"
+      "evra": "1.19-1.fc37.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.1.s390x"
+      "evra": "3.3.17-6.fc37.2.s390x"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc36.s390x"
+      "evra": "1.4.1-2.fc37.s390x"
     },
     "psmisc": {
-      "evra": "23.4-3.fc36.s390x"
+      "evra": "23.4-4.fc37.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-4.fc36.noarch"
+      "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:6.2.0-16.fc36.s390x"
+      "evra": "2:7.0.0-10.fc37.s390x"
     },
     "readline": {
-      "evra": "8.2-2.fc36.s390x"
+      "evra": "8.2-2.fc37.s390x"
     },
     "rpcbind": {
-      "evra": "1.2.6-2.fc36.s390x"
+      "evra": "1.2.6-3.fc37.s390x"
     },
     "rpm": {
-      "evra": "4.17.1-3.fc36.s390x"
+      "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-libs": {
-      "evra": "4.17.1-3.fc36.s390x"
+      "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.14-1.fc36.s390x"
+      "evra": "2022.15-3.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.14-1.fc36.s390x"
+      "evra": "2022.15-3.fc37.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-3.fc36.s390x"
+      "evra": "4.18.0-1.fc37.s390x"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc36.s390x"
+      "evra": "3.2.7-1.fc37.s390x"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc36.s390x"
+      "evra": "2:1.1.4-1.fc37.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.23.0-1.fc36.s390x"
+      "evra": "2:2.23.0-1.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.6-0.fc36.s390x"
+      "evra": "2:4.17.2-2.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.16.6-0.fc36.noarch"
+      "evra": "2:4.17.2-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.6-0.fc36.s390x"
+      "evra": "2:4.17.2-2.fc37.s390x"
     },
     "sed": {
-      "evra": "4.8-10.fc36.s390x"
+      "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "setup": {
-      "evra": "2.14.1-1.fc36.noarch"
+      "evra": "2.14.1-2.fc37.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-3.fc36.s390x"
+      "evra": "1.46-4.fc37.s390x"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-3.fc36.s390x"
+      "evra": "1.46-4.fc37.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-5.fc36.s390x"
+      "evra": "2:4.12.3-3.fc37.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-5.fc36.s390x"
+      "evra": "2:4.12.3-3.fc37.s390x"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc36.s390x"
+      "evra": "1:1.10.0-3.fc37.s390x"
     },
     "slang": {
-      "evra": "2.3.2-11.fc36.s390x"
+      "evra": "2.3.3-1.fc37.s390x"
     },
     "slirp4netns": {
-      "evra": "1.2.0-0.2.beta.0.fc36.s390x"
+      "evra": "1.2.0-8.fc37.s390x"
     },
     "snappy": {
-      "evra": "1.1.9-4.fc36.s390x"
+      "evra": "1.1.9-5.fc37.s390x"
     },
     "socat": {
-      "evra": "1.7.4.2-2.fc36.s390x"
+      "evra": "1.7.4.2-3.fc37.s390x"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-5.fc36.s390x"
+      "evra": "3.39.2-2.fc37.s390x"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc36.s390x"
+      "evra": "4.5.1-2.fc37.s390x"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc36.s390x"
+      "evra": "0.1.4-1.fc37.s390x"
     },
     "sssd-ad": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-client": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-common": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.4-1.fc36.s390x"
+      "evra": "2.8.0-2.fc37.s390x"
     },
     "stalld": {
-      "evra": "1.15-2.fc36.s390x"
+      "evra": "1.16-2.fc37.s390x"
     },
     "sudo": {
-      "evra": "1.9.8-5.p2.fc36.s390x"
+      "evra": "1.9.11-4.p3.fc37.s390x"
     },
     "systemd": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "250.8-1.fc36.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "tar": {
-      "evra": "2:1.34-3.fc36.s390x"
+      "evra": "2:1.34-5.fc37.s390x"
     },
     "teamd": {
-      "evra": "1.31-5.fc36.s390x"
+      "evra": "1.31-6.fc37.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.3-6.fc36.s390x"
+      "evra": "0.0.99.3-7.fc37.s390x"
     },
     "tpm2-tools": {
-      "evra": "5.2-2.fc36.s390x"
+      "evra": "5.3-1.fc37.s390x"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc36.s390x"
+      "evra": "3.2.0-3.fc37.s390x"
     },
     "tzdata": {
-      "evra": "2022f-1.fc36.noarch"
+      "evra": "2022f-1.fc37.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-4.fc36.s390x"
+      "evra": "0.13.0-5.fc37.s390x"
     },
     "util-linux": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "util-linux-core": {
-      "evra": "2.38-1.fc36.s390x"
+      "evra": "2.38.1-1.fc37.s390x"
     },
     "veritysetup": {
-      "evra": "2.4.3-2.fc36.s390x"
+      "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc36.s390x"
+      "evra": "2:9.0.828-1.fc37.s390x"
     },
     "which": {
-      "evra": "2.21-32.fc36.s390x"
+      "evra": "2.21-35.fc37.s390x"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-2.fc36.s390x"
+      "evra": "1.0.20210914-3.fc37.s390x"
     },
     "xfsprogs": {
-      "evra": "5.14.2-2.fc36.s390x"
+      "evra": "5.18.0-3.fc37.s390x"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-2.fc36.s390x"
+      "evra": "0.8.1-3.fc37.s390x"
     },
     "xz": {
-      "evra": "5.2.5-9.fc36.s390x"
+      "evra": "5.2.5-10.fc37.s390x"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc36.s390x"
+      "evra": "5.2.5-10.fc37.s390x"
     },
     "yajl": {
-      "evra": "2.1.0-18.fc36.s390x"
+      "evra": "2.1.0-19.fc37.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc36.s390x"
+      "evra": "1.2.3-1.fc37.s390x"
     },
     "zincati": {
-      "evra": "0.0.24-4.fc36.s390x"
+      "evra": "0.0.25-1.fc37.s390x"
     },
     "zlib": {
-      "evra": "1.2.11-33.fc36.s390x"
+      "evra": "1.2.12-5.fc37.s390x"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc36.s390x"
+      "evra": "1.1.2-2.fc37.s390x"
     },
     "zstd": {
-      "evra": "1.5.2-2.fc36.s390x"
+      "evra": "1.5.2-3.fc37.s390x"
     }
   },
   "metadata": {
-    "generated": "2022-11-10T20:52:46Z",
+    "generated": "2022-11-11T13:52:50Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-05-04T21:15:53Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2022-11-08T23:31:33Z"
+        "generated": "2022-11-10T22:20:23Z"
+      },
+      "fedora-next": {
+        "generated": "2022-11-10T09:29:50Z"
       },
-      "fedora-updates": {
-        "generated": "2022-11-10T16:06:43Z"
+      "fedora-next-updates": {
+        "generated": "2022-11-11T00:57:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 211001f287..2a7b598dd1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1265 +1,1253 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.38.6-1.fc36.x86_64"
+      "evra": "1:1.40.2-1.fc37.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.38.6-1.fc36.x86_64"
+      "evra": "1:1.40.2-1.fc37.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.38.6-1.fc36.x86_64"
+      "evra": "1:1.40.2-1.fc37.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.38.6-1.fc36.x86_64"
+      "evra": "1:1.40.2-1.fc37.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.38.6-1.fc36.x86_64"
+      "evra": "1:1.40.2-1.fc37.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.7.3.0-1.fc36.noarch"
+      "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc36.x86_64"
+      "evra": "1.2.0-6.fc37.x86_64"
     },
     "acl": {
-      "evra": "2.3.1-3.fc36.x86_64"
+      "evra": "2.3.1-4.fc37.x86_64"
     },
     "adcli": {
-      "evra": "0.9.1-10.fc36.x86_64"
+      "evra": "0.9.1-11.fc37.x86_64"
     },
     "afterburn": {
-      "evra": "5.3.0-2.fc36.x86_64"
+      "evra": "5.3.0-3.fc37.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-2.fc36.x86_64"
+      "evra": "5.3.0-3.fc37.x86_64"
     },
     "alternatives": {
-      "evra": "1.21-1.fc36.x86_64"
-    },
-    "amd-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "1.21-1.fc37.x86_64"
     },
     "attr": {
-      "evra": "2.5.1-4.fc36.x86_64"
+      "evra": "2.5.1-5.fc37.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc36.x86_64"
+      "evra": "3.0.9-1.fc37.x86_64"
     },
     "authselect": {
-      "evra": "1.4.0-1.fc36.x86_64"
+      "evra": "1.4.0-3.fc37.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.4.0-1.fc36.x86_64"
+      "evra": "1.4.0-3.fc37.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-15.fc36.x86_64"
+      "evra": "0.8-17.fc37.x86_64"
     },
     "basesystem": {
-      "evra": "11-13.fc36.noarch"
+      "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc36.x86_64"
+      "evra": "5.2.2-2.fc37.x86_64"
     },
     "bash-completion": {
-      "evra": "1:2.11-6.fc36.noarch"
+      "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.16.33-1.fc36.x86_64"
+      "evra": "32:9.18.8-1.fc37.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.16.33-1.fc36.noarch"
+      "evra": "32:9.18.8-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.16.33-1.fc36.x86_64"
+      "evra": "32:9.18.8-1.fc37.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.6-2.fc36.x86_64"
+      "evra": "0.2.8-3.fc37.x86_64"
     },
     "bsdtar": {
-      "evra": "3.5.3-3.fc36.x86_64"
+      "evra": "3.6.1-2.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc36.x86_64"
+      "evra": "6.0-1.fc37.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-2.fc36.x86_64"
+      "evra": "0.5.0-3.fc37.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-11.fc36.x86_64"
+      "evra": "1.0.8-12.fc37.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-11.fc36.x86_64"
+      "evra": "1.0.8-12.fc37.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.2-2.fc36.x86_64"
+      "evra": "1.17.2-3.fc37.x86_64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-1.2.fc36.noarch"
+      "evra": "2022.2.54-5.fc37.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc36.x86_64"
+      "evra": "0.1.7-10.fc37.x86_64"
     },
     "chrony": {
-      "evra": "4.3-1.fc36.x86_64"
+      "evra": "4.3-1.fc37.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.15-1.fc36.x86_64"
+      "evra": "6.15-2.fc37.x86_64"
     },
     "clevis": {
-      "evra": "18-9.fc36.x86_64"
+      "evra": "18-12.fc37.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-9.fc36.x86_64"
+      "evra": "18-12.fc37.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-9.fc36.x86_64"
+      "evra": "18-12.fc37.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-9.fc36.x86_64"
+      "evra": "18-12.fc37.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-10.fc36.noarch"
+      "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc36.x86_64"
+      "evra": "2:2.1.4-3.fc37.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-1.fc36.noarch"
+      "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc36.noarch"
+      "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc36.x86_64"
+      "evra": "1.6.8-4.fc37.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.0-1.fc36.x86_64"
+      "evra": "1.1.1-8.fc37.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-62.fc36.noarch"
+      "evra": "4:1-73.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc36.x86_64"
+      "evra": "0.16.1-2.fc37.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc36.x86_64"
+      "evra": "0.16.1-2.fc37.x86_64"
     },
     "coreutils": {
-      "evra": "9.0-8.fc36.x86_64"
+      "evra": "9.1-6.fc37.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.0-8.fc36.x86_64"
+      "evra": "9.1-6.fc37.x86_64"
     },
     "cpio": {
-      "evra": "2.13-12.fc36.x86_64"
+      "evra": "2.13-13.fc37.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.6-28.fc36.x86_64"
+      "evra": "2.9.7-30.fc37.x86_64"
     },
     "cracklib-dicts": {
-      "evra": "2.9.6-28.fc36.x86_64"
+      "evra": "2.9.7-30.fc37.x86_64"
     },
     "criu": {
-      "evra": "3.17.1-2.fc36.x86_64"
+      "evra": "3.17.1-3.fc37.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17.1-2.fc36.x86_64"
+      "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.6-2.fc36.x86_64"
+      "evra": "1.6-2.fc37.x86_64"
     },
     "crypto-policies": {
-      "evra": "20220428-1.gitdfb10ea.fc36.noarch"
+      "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.4.3-2.fc36.x86_64"
+      "evra": "2.5.0-1.fc37.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.4.3-2.fc36.x86_64"
+      "evra": "2.5.0-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.82.0-9.fc36.x86_64"
+      "evra": "7.85.0-2.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.27-18.fc36.x86_64"
+      "evra": "2.1.28-8.fc37.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.27-18.fc36.x86_64"
+      "evra": "2.1.28-8.fc37.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc36.x86_64"
+      "evra": "1:1.14.4-1.fc37.x86_64"
     },
     "dbus-broker": {
-      "evra": "32-1.fc36.x86_64"
+      "evra": "32-1.fc37.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc36.noarch"
+      "evra": "1:1.14.4-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc36.x86_64"
+      "evra": "1:1.14.4-1.fc37.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.175-7.fc36.x86_64"
+      "evra": "1.02.175-9.fc37.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-7.fc36.x86_64"
+      "evra": "1.02.175-9.fc37.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-7.fc36.x86_64"
+      "evra": "1.02.175-9.fc37.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-7.fc36.x86_64"
+      "evra": "1.02.175-9.fc37.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.8.7-9.fc36.x86_64"
+      "evra": "0.9.0-3.fc37.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.8.7-9.fc36.x86_64"
+      "evra": "0.9.0-3.fc37.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-7.fc36.x86_64"
+      "evra": "0.9.0-8.fc37.x86_64"
     },
     "diffutils": {
-      "evra": "3.8-2.fc36.x86_64"
+      "evra": "3.8-3.fc37.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.86-10.fc36.x86_64"
+      "evra": "2.87-1.fc37.x86_64"
     },
     "dosfstools": {
-      "evra": "4.2-3.fc36.x86_64"
+      "evra": "4.2-4.fc37.x86_64"
     },
     "dracut": {
-      "evra": "057-3.fc36.x86_64"
+      "evra": "057-3.fc37.x86_64"
     },
     "dracut-network": {
-      "evra": "057-3.fc36.x86_64"
+      "evra": "057-3.fc37.x86_64"
     },
     "dracut-squash": {
-      "evra": "057-3.fc36.x86_64"
+      "evra": "057-3.fc37.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-2.fc36.x86_64"
+      "evra": "1.46.5-3.fc37.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-2.fc36.x86_64"
+      "evra": "1.46.5-3.fc37.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-5.fc36.noarch"
+      "evra": "5-6.fc37.noarch"
     },
     "efibootmgr": {
-      "evra": "16-12.fc36.x86_64"
+      "evra": "18-2.fc37.x86_64"
     },
     "efivar-libs": {
-      "evra": "38-2.fc36.x86_64"
+      "evra": "38-5.fc37.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-4.fc36.noarch"
+      "evra": "0.187-8.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-4.fc36.x86_64"
+      "evra": "0.187-8.fc37.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.187-4.fc36.x86_64"
+      "evra": "0.187-8.fc37.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc36.x86_64"
+      "evra": "2:6.0-1.fc37.x86_64"
     },
     "expat": {
-      "evra": "2.5.0-1.fc36.x86_64"
+      "evra": "2.4.9-1.fc37.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "36-20.noarch"
+      "evra": "37-14.noarch"
     },
     "fedora-repos": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "36-4.noarch"
+      "evra": "37-1.noarch"
     },
     "file": {
-      "evra": "5.41-4.fc36.x86_64"
+      "evra": "5.42-4.fc37.x86_64"
     },
     "file-libs": {
-      "evra": "5.41-4.fc36.x86_64"
+      "evra": "5.42-4.fc37.x86_64"
     },
     "filesystem": {
-      "evra": "3.18-2.fc36.x86_64"
+      "evra": "3.18-2.fc37.x86_64"
     },
     "findutils": {
-      "evra": "1:4.9.0-1.fc36.x86_64"
+      "evra": "1:4.9.0-2.fc37.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.12.7-5.fc36.x86_64"
+      "evra": "1.14.0-2.fc37.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-4.fc36.x86_64"
+      "evra": "0.6.1-5.fc37.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-14.fc36.x86_64"
+      "evra": "2.9.9-15.fc37.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.5-2.fc36.x86_64"
+      "evra": "3.10.5-5.fc37.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-14.fc36.x86_64"
+      "evra": "2.9.9-15.fc37.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc36.x86_64"
+      "evra": "1.9-6.fc37.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-1.fc36.x86_64"
+      "evra": "3.7.3-2.fc37.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.5-2.fc36.x86_64"
+      "evra": "3.10.5-5.fc37.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-2.fc36.x86_64"
+      "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc36.x86_64"
+      "evra": "1.8.6-1.fc37.x86_64"
     },
     "gawk": {
-      "evra": "5.1.1-2.fc36.x86_64"
+      "evra": "5.1.1-4.fc37.x86_64"
     },
     "gdbm-libs": {
-      "evra": "1:1.22-2.fc36.x86_64"
+      "evra": "1:1.23-2.fc37.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.9-2.fc36.x86_64"
+      "evra": "1.0.9-4.fc37.x86_64"
     },
-    "gettext": {
-      "evra": "0.21-9.fc36.x86_64"
+    "gettext-envsubst": {
+      "evra": "0.21.1-1.fc37.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21-9.fc36.x86_64"
+      "evra": "0.21.1-1.fc37.x86_64"
+    },
+    "gettext-runtime": {
+      "evra": "0.21.1-1.fc37.x86_64"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "glib2": {
-      "evra": "2.72.3-1.fc36.x86_64"
+      "evra": "2.74.1-2.fc37.x86_64"
     },
     "glibc": {
-      "evra": "2.35-20.fc36.x86_64"
+      "evra": "2.36-7.fc37.x86_64"
     },
     "glibc-common": {
-      "evra": "2.35-20.fc36.x86_64"
+      "evra": "2.36-7.fc37.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.35-20.fc36.x86_64"
+      "evra": "2.36-7.fc37.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.1-2.fc36.x86_64"
+      "evra": "1:6.2.1-3.fc37.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.7-3.fc36.x86_64"
+      "evra": "2.3.8-1.fc37.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc36.x86_64"
+      "evra": "3.7.8-2.fc37.x86_64"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc36.x86_64"
+      "evra": "1.17.0-4.fc37.x86_64"
     },
     "grep": {
-      "evra": "3.7-2.fc36.x86_64"
+      "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-54.fc36.noarch"
+      "evra": "1:2.06-60.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-54.fc36.x86_64"
+      "evra": "1:2.06-60.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-54.fc36.x86_64"
+      "evra": "1:2.06-60.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-54.fc36.noarch"
+      "evra": "1:2.06-60.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-54.fc36.x86_64"
+      "evra": "1:2.06-60.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-54.fc36.x86_64"
+      "evra": "1:2.06-60.fc37.x86_64"
     },
     "gzip": {
-      "evra": "1.11-3.fc36.x86_64"
+      "evra": "1.12-2.fc37.x86_64"
     },
     "hostname": {
-      "evra": "3.23-6.fc36.x86_64"
+      "evra": "3.23-7.fc37.x86_64"
     },
     "ignition": {
-      "evra": "2.14.0-3.fc36.x86_64"
+      "evra": "2.14.0-4.fc37.x86_64"
     },
     "inih": {
-      "evra": "56-1.fc36.x86_64"
-    },
-    "intel-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "56-2.fc37.x86_64"
     },
     "iproute": {
-      "evra": "5.15.0-2.fc36.x86_64"
+      "evra": "5.18.0-2.fc37.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.15.0-2.fc36.x86_64"
+      "evra": "5.18.0-2.fc37.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.7-15.fc36.x86_64"
+      "evra": "1.8.8-3.fc37.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.7-15.fc36.x86_64"
+      "evra": "1.8.8-3.fc37.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.7-15.fc36.x86_64"
+      "evra": "1.8.8-3.fc37.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.7-15.fc36.x86_64"
+      "evra": "1.8.8-3.fc37.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.7-15.fc36.noarch"
+      "evra": "1.8.8-3.fc37.noarch"
+    },
+    "iptables-utils": {
+      "evra": "1.8.8-3.fc37.x86_64"
     },
     "iputils": {
-      "evra": "20211215-2.fc36.x86_64"
+      "evra": "20211215-3.fc37.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.7.0-8.fc35.x86_64"
+      "evra": "2:1.9.0-1.fc37.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.x86_64"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-4.git2a8f9d8.fc36.x86_64"
+      "evra": "6.2.1.4-6.git2a8f9d8.fc37.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-4.fc36.x86_64"
+      "evra": "0.101-5.fc37.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-4.fc36.x86_64"
+      "evra": "2.13.1-5.fc37.x86_64"
+    },
+    "jemalloc": {
+      "evra": "5.3.0-2.fc37.x86_64"
     },
     "jose": {
-      "evra": "11-5.fc36.x86_64"
+      "evra": "11-6.fc37.x86_64"
     },
     "jq": {
-      "evra": "1.6-13.fc36.x86_64"
+      "evra": "1.6-14.fc37.x86_64"
     },
     "json-c": {
-      "evra": "0.15-3.fc36.x86_64"
+      "evra": "0.16-3.fc37.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.6-2.fc36.x86_64"
+      "evra": "1.6.6-3.fc37.x86_64"
     },
     "kbd": {
-      "evra": "2.4.0-9.fc36.x86_64"
+      "evra": "2.5.1-3.fc37.x86_64"
+    },
+    "kbd-legacy": {
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kbd-misc": {
-      "evra": "2.4.0-9.fc36.noarch"
+      "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-200.fc36.x86_64"
+      "evra": "6.0.7-301.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.7-200.fc36.x86_64"
+      "evra": "6.0.7-301.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.7-200.fc36.x86_64"
+      "evra": "6.0.7-301.fc37.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc36.x86_64"
+      "evra": "2.0.25-1.fc37.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-4.fc36.x86_64"
+      "evra": "1.6.1-5.fc37.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-4.fc36.x86_64"
+      "evra": "1.6.1-5.fc37.x86_64"
     },
     "kmod": {
-      "evra": "29-7.fc36.x86_64"
+      "evra": "30-2.fc37.x86_64"
     },
     "kmod-libs": {
-      "evra": "29-7.fc36.x86_64"
+      "evra": "30-2.fc37.x86_64"
     },
     "kpartx": {
-      "evra": "0.8.7-9.fc36.x86_64"
+      "evra": "0.9.0-3.fc37.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc36.x86_64"
+      "evra": "1.19.2-11.fc37.1.x86_64"
     },
     "less": {
-      "evra": "590-5.fc36.x86_64"
+      "evra": "590-5.fc37.x86_64"
     },
     "libacl": {
-      "evra": "2.3.1-3.fc36.x86_64"
+      "evra": "2.3.1-4.fc37.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-13.fc36.x86_64"
+      "evra": "0.3.111-14.fc37.x86_64"
     },
     "libarchive": {
-      "evra": "3.5.3-3.fc36.x86_64"
+      "evra": "3.6.1-2.fc37.x86_64"
     },
     "libargon2": {
-      "evra": "20171227-9.fc36.x86_64"
+      "evra": "20190702-1.fc37.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.5-4.fc36.x86_64"
+      "evra": "2.5.5-5.fc37.x86_64"
     },
     "libattr": {
-      "evra": "2.5.1-4.fc36.x86_64"
+      "evra": "2.5.1-5.fc37.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-50.fc36.x86_64"
+      "evra": "0.1.1-52.fc37.x86_64"
     },
     "libblkid": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "libbpf": {
-      "evra": "2:0.7.0-3.fc36.x86_64"
-    },
-    "libbrotli": {
-      "evra": "1.0.9-7.fc36.x86_64"
+      "evra": "2:0.8.0-2.fc37.x86_64"
     },
     "libbsd": {
-      "evra": "0.10.0-9.fc36.x86_64"
+      "evra": "0.10.0-10.fc37.x86_64"
     },
     "libcap": {
-      "evra": "2.48-4.fc36.x86_64"
+      "evra": "2.48-5.fc37.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-1.fc36.x86_64"
+      "evra": "0.8.3-3.fc37.x86_64"
     },
     "libcbor": {
-      "evra": "0.7.0-5.fc36.x86_64"
+      "evra": "0.7.0-7.fc37.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-50.fc36.x86_64"
+      "evra": "0.7.0-52.fc37.x86_64"
     },
     "libcom_err": {
-      "evra": "1.46.5-2.fc36.x86_64"
+      "evra": "1.46.5-3.fc37.x86_64"
     },
-    "libcurl": {
-      "evra": "7.82.0-9.fc36.x86_64"
+    "libcurl-minimal": {
+      "evra": "7.85.0-2.fc37.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-23.fc36.x86_64"
+      "evra": "0.14-24.fc37.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-51.fc36.x86_64"
+      "evra": "5.3.28-53.fc37.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-50.fc36.x86_64"
+      "evra": "0.5.0-52.fc37.x86_64"
     },
     "libeconf": {
-      "evra": "0.4.0-3.fc36.x86_64"
+      "evra": "0.4.0-4.fc37.x86_64"
     },
     "libedit": {
-      "evra": "3.1-41.20210910cvs.fc36.x86_64"
+      "evra": "3.1-43.20221009cvs.fc37.x86_64"
     },
     "libevent": {
-      "evra": "2.1.12-6.fc36.x86_64"
+      "evra": "2.1.12-7.fc37.x86_64"
     },
     "libfdisk": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "libffi": {
-      "evra": "3.4.2-8.fc36.x86_64"
+      "evra": "3.4.2-9.fc37.x86_64"
     },
     "libfido2": {
-      "evra": "1.10.0-5.fc36.x86_64"
+      "evra": "1.11.0-3.fc37.x86_64"
     },
     "libgcab1": {
-      "evra": "1.4-6.fc36.x86_64"
+      "evra": "1.5-1.fc37.x86_64"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc36.x86_64"
+      "evra": "12.2.1-2.fc37.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-3.fc36.x86_64"
-    },
-    "libgomp": {
-      "evra": "12.2.1-2.fc36.x86_64"
+      "evra": "1.10.1-4.fc37.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.45-1.fc36.x86_64"
+      "evra": "1.45-2.fc37.x86_64"
     },
     "libgudev": {
-      "evra": "237-2.fc36.x86_64"
+      "evra": "237-3.fc37.x86_64"
     },
     "libgusb": {
-      "evra": "0.3.10-2.fc36.x86_64"
+      "evra": "0.4.2-1.fc37.x86_64"
     },
     "libibverbs": {
-      "evra": "39.0-1.fc36.x86_64"
+      "evra": "41.0-1.fc37.x86_64"
     },
     "libicu": {
-      "evra": "69.1-6.fc36.x86_64"
+      "evra": "71.1-2.fc37.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc36.x86_64"
+      "evra": "2.3.4-1.fc37.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-50.fc36.x86_64"
+      "evra": "1.3.1-52.fc37.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc36.x86_64"
+      "evra": "0.1.12-1.fc37.x86_64"
     },
     "libjose": {
-      "evra": "11-5.fc36.x86_64"
+      "evra": "11-6.fc37.x86_64"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc36.x86_64"
+      "evra": "1.4.0-2.fc37.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc36.x86_64"
+      "evra": "1.4.0-2.fc37.x86_64"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc36.x86_64"
+      "evra": "1.6.2-1.fc37.x86_64"
     },
     "libldb": {
-      "evra": "2.5.2-1.fc36.x86_64"
+      "evra": "2.6.1-1.fc37.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-13.fc36.x86_64"
+      "evra": "9-14.fc37.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc36.x86_64"
+      "evra": "1.7.1-1.fc37.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.4-15.fc36.x86_64"
+      "evra": "1.0.5-1.fc37.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-2.fc36.x86_64"
+      "evra": "2.14.0-4.fc37.x86_64"
     },
     "libmount": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "libndp": {
-      "evra": "1.8-3.fc36.x86_64"
+      "evra": "1.8-4.fc37.x86_64"
     },
     "libnet": {
-      "evra": "1.2-5.fc36.x86_64"
+      "evra": "1.2-6.fc37.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-4.fc36.x86_64"
+      "evra": "1.0.8-5.fc37.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-21.fc36.x86_64"
+      "evra": "1.0.1-22.fc37.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-0.fc36.x86_64"
+      "evra": "1:2.6.2-1.rc2.fc37.x86_64"
     },
     "libnftnl": {
-      "evra": "1.2.1-2.fc36.x86_64"
+      "evra": "1.2.2-2.fc37.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.46.0-2.fc36.x86_64"
+      "evra": "1.49.0-1.fc37.x86_64"
     },
     "libnl3": {
-      "evra": "3.7.0-1.fc36.x86_64"
+      "evra": "3.7.0-2.fc37.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-1.fc36.x86_64"
+      "evra": "3.7.0-2.fc37.x86_64"
     },
     "libnsl2": {
-      "evra": "2.0.0-3.fc36.x86_64"
+      "evra": "2.0.0-4.fc37.x86_64"
     },
     "libnvme": {
-      "evra": "1.0-1.fc36.x86_64"
+      "evra": "1.2-1.fc37.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-50.fc36.x86_64"
+      "evra": "0.2.1-52.fc37.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-3.fc36.x86_64"
+      "evra": "14:1.10.1-4.fc37.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-2.fc36.x86_64"
+      "evra": "1.8.0-3.fc37.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.1-5.fc36.x86_64"
+      "evra": "0.21.1-6.fc37.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-7.fc36.x86_64"
+      "evra": "1.4.4-11.fc37.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-50.fc36.x86_64"
+      "evra": "0.1.5-52.fc37.x86_64"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc36.x86_64"
+      "evra": "1.14.4-1.fc37.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc36.noarch"
+      "evra": "2.17.4-1.fc37.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-2.fc36.x86_64"
+      "evra": "2.5.3-3.fc37.x86_64"
     },
     "libselinux": {
-      "evra": "3.3-4.fc36.x86_64"
+      "evra": "3.4-5.fc37.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.3-4.fc36.x86_64"
+      "evra": "3.4-5.fc37.x86_64"
     },
     "libsemanage": {
-      "evra": "3.3-3.fc36.x86_64"
+      "evra": "3.4-5.fc37.x86_64"
     },
     "libsepol": {
-      "evra": "3.3-3.fc36.x86_64"
+      "evra": "3.4-3.fc37.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.14-2.fc36.x86_64"
+      "evra": "2.14-3.fc37.x86_64"
     },
     "libslirp": {
-      "evra": "4.6.1-3.fc36.x86_64"
+      "evra": "4.7.0-2.fc37.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.16.6-0.fc36.x86_64"
+      "evra": "2:4.17.2-2.fc37.x86_64"
     },
     "libsmbios": {
-      "evra": "2.4.3-5.fc36.x86_64"
+      "evra": "2.4.3-7.fc37.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.22-1.fc36.x86_64"
+      "evra": "0.7.22-3.fc37.x86_64"
     },
     "libss": {
-      "evra": "1.46.5-2.fc36.x86_64"
-    },
-    "libssh": {
-      "evra": "0.9.6-4.fc36.x86_64"
-    },
-    "libssh-config": {
-      "evra": "0.9.6-4.fc36.noarch"
+      "evra": "1.46.5-3.fc37.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc36.x86_64"
+      "evra": "12.2.1-2.fc37.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.4-1.fc36.x86_64"
+      "evra": "2.3.4-3.fc37.x86_64"
     },
     "libtasn1": {
-      "evra": "4.18.0-2.fc36.x86_64"
+      "evra": "4.18.0-3.fc37.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.7-1.fc36.x86_64"
+      "evra": "1.4.7-3.fc37.x86_64"
     },
     "libteam": {
-      "evra": "1.31-5.fc36.x86_64"
+      "evra": "1.31-6.fc37.x86_64"
     },
     "libtevent": {
-      "evra": "0.12.1-1.fc36.x86_64"
+      "evra": "0.13.0-1.fc37.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc36.x86_64"
+      "evra": "1.3.3-0.fc37.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-1.fc36.x86_64"
+      "evra": "2.4.7-2.fc37.x86_64"
     },
     "libunistring": {
-      "evra": "1.0-1.fc36.x86_64"
+      "evra": "1.0-2.fc37.x86_64"
     },
     "libusb1": {
-      "evra": "1.0.25-8.fc36.x86_64"
+      "evra": "1.0.25-9.fc37.x86_64"
     },
     "libuser": {
-      "evra": "0.63-10.fc36.x86_64"
+      "evra": "0.63-13.fc37.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-6.fc36.x86_64"
+      "evra": "1.2.1-7.fc37.x86_64"
     },
     "libuuid": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "libuv": {
-      "evra": "1:1.44.2-1.fc36.x86_64"
+      "evra": "1:1.44.2-2.fc37.x86_64"
     },
     "libverto": {
-      "evra": "0.3.2-3.fc36.x86_64"
+      "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.16.6-0.fc36.x86_64"
+      "evra": "2:4.17.2-2.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc36.x86_64"
+      "evra": "4.4.30-1.fc37.x86_64"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc36.x86_64"
+      "evra": "2.10.3-2.fc37.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc36.x86_64"
+      "evra": "0.3.10-1.fc37.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-7.fc36.x86_64"
+      "evra": "0.2.5-8.fc37.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.2-2.fc36.x86_64"
+      "evra": "1.5.2-3.fc37.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-31.fc36.x86_64"
+      "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "20221012-142.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-3.fc36.x86_64"
+      "evra": "0.9.29-4.fc37.x86_64"
     },
     "logrotate": {
-      "evra": "3.20.1-2.fc36.x86_64"
+      "evra": "3.20.1-3.fc37.x86_64"
     },
     "lsof": {
-      "evra": "4.94.0-3.fc36.x86_64"
+      "evra": "4.94.0-4.fc37.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-3.fc36.x86_64"
+      "evra": "5.4.4-4.fc37.x86_64"
     },
     "luksmeta": {
-      "evra": "9-13.fc36.x86_64"
+      "evra": "9-14.fc37.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.11-7.fc36.x86_64"
+      "evra": "2.03.11-9.fc37.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-7.fc36.x86_64"
+      "evra": "2.03.11-9.fc37.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-4.fc36.x86_64"
+      "evra": "1.9.3-5.fc37.x86_64"
     },
     "lzo": {
-      "evra": "2.10-6.fc36.x86_64"
+      "evra": "2.10-7.fc37.x86_64"
     },
     "mdadm": {
-      "evra": "4.2-1.fc36.x86_64"
+      "evra": "4.2-2.fc37.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-51.1.fc36.x86_64"
+      "evra": "2:2.1-53.fc37.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc36.x86_64"
+      "evra": "20.10.20-1.fc37.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-3.fc36.x86_64"
+      "evra": "2:0.6.0-5.fc37.x86_64"
     },
-    "mozjs91": {
-      "evra": "91.13.0-1.fc36.x86_64"
+    "mozjs102": {
+      "evra": "102.4.0-1.fc37.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-9.fc36.x86_64"
+      "evra": "4.1.0-10.fc37.x86_64"
     },
     "nano": {
-      "evra": "6.0-2.fc36.x86_64"
+      "evra": "6.4-1.fc37.x86_64"
     },
     "nano-default-editor": {
-      "evra": "6.0-2.fc36.noarch"
+      "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.2-9.20210508.fc36.x86_64"
+      "evra": "6.3-3.20220501.fc37.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.2-9.20210508.fc36.noarch"
+      "evra": "6.3-3.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.2-9.20210508.fc36.x86_64"
+      "evra": "6.3-3.20220501.fc37.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.61.20160912git.fc36.x86_64"
+      "evra": "2.0-0.63.20160912git.fc37.x86_64"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc36.x86_64"
+      "evra": "1.2.0-5.fc37.x86_64"
     },
     "nettle": {
-      "evra": "3.8-1.fc36.x86_64"
+      "evra": "3.8-2.fc37.x86_64"
     },
     "newt": {
-      "evra": "0.52.21-12.fc36.x86_64"
+      "evra": "0.52.21-14.fc37.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-0.fc36.x86_64"
+      "evra": "1:2.6.2-1.rc2.fc37.x86_64"
     },
     "nftables": {
-      "evra": "1:1.0.1-3.fc36.x86_64"
+      "evra": "1:1.0.4-3.fc37.x86_64"
     },
     "npth": {
-      "evra": "1.6-8.fc36.x86_64"
+      "evra": "1.6-9.fc37.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-20.fc36.x86_64"
+      "evra": "2.18.1-21.fc37.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-5.fc36.x86_64"
-    },
-    "nvidia-gpu-firmware": {
-      "evra": "20221012-141.fc36.noarch"
+      "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvme-cli": {
-      "evra": "2.0-2.fc36.x86_64"
+      "evra": "2.1.2-1.fc37.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.8-1.fc36.x86_64"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.x86_64"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc36.x86_64"
-    },
-    "openldap-compat": {
-      "evra": "2.6.3-1.fc36.x86_64"
+      "evra": "2.6.3-1.fc37.x86_64"
     },
     "openssh": {
-      "evra": "8.8p1-1.fc36.1.x86_64"
+      "evra": "8.8p1-7.fc37.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-1.fc36.1.x86_64"
+      "evra": "8.8p1-7.fc37.x86_64"
     },
     "openssh-server": {
-      "evra": "8.8p1-1.fc36.1.x86_64"
+      "evra": "8.8p1-7.fc37.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.5-2.fc36.x86_64"
+      "evra": "1:3.0.5-3.fc37.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-2.fc36.x86_64"
+      "evra": "1:3.0.5-3.fc37.x86_64"
     },
     "os-prober": {
-      "evra": "1.77-9.fc36.x86_64"
+      "evra": "1.81-1.fc37.x86_64"
     },
     "ostree": {
-      "evra": "2022.5-2.fc36.x86_64"
+      "evra": "2022.6-1.fc37.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.5-2.fc36.x86_64"
+      "evra": "2022.6-1.fc37.x86_64"
     },
     "p11-kit": {
-      "evra": "0.24.1-2.fc36.x86_64"
+      "evra": "0.24.1-3.fc37.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-2.fc36.x86_64"
+      "evra": "0.24.1-3.fc37.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-13.fc36.x86_64"
+      "evra": "1.5.2-14.fc37.x86_64"
     },
     "pam-libs": {
-      "evra": "1.5.2-13.fc36.x86_64"
+      "evra": "1.5.2-14.fc37.x86_64"
     },
     "passwd": {
-      "evra": "0.80-12.fc36.x86_64"
+      "evra": "0.80-13.fc37.x86_64"
     },
     "pcre": {
-      "evra": "8.45-1.fc36.1.x86_64"
+      "evra": "8.45-1.fc37.2.x86_64"
     },
     "pcre2": {
-      "evra": "10.40-1.fc36.x86_64"
+      "evra": "10.40-1.fc37.1.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc36.noarch"
+      "evra": "10.40-1.fc37.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-1.fc36.x86_64"
+      "evra": "2.7-2.fc37.x86_64"
     },
     "pkgconf": {
-      "evra": "1.8.0-2.fc36.x86_64"
+      "evra": "1.8.0-3.fc37.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-2.fc36.noarch"
+      "evra": "1.8.0-3.fc37.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-2.fc36.x86_64"
+      "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc36.x86_64"
+      "evra": "4:4.3.0-2.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc36.x86_64"
+      "evra": "4:4.3.0-2.fc37.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.3-4.fc36.x86_64"
+      "evra": "3.4-6.fc37.x86_64"
     },
     "polkit": {
-      "evra": "0.120-5.fc36.x86_64"
+      "evra": "121-4.fc37.x86_64"
     },
     "polkit-libs": {
-      "evra": "0.120-5.fc36.x86_64"
+      "evra": "121-4.fc37.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-21.fc36.x86_64"
+      "evra": "0.1-22.fc37.x86_64"
     },
     "popt": {
-      "evra": "1.18-7.fc36.x86_64"
+      "evra": "1.19-1.fc37.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-4.fc36.1.x86_64"
+      "evra": "3.3.17-6.fc37.2.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc36.x86_64"
+      "evra": "1.4.1-2.fc37.x86_64"
     },
     "psmisc": {
-      "evra": "23.4-3.fc36.x86_64"
+      "evra": "23.4-4.fc37.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-4.fc36.noarch"
+      "evra": "20210518-5.fc37.noarch"
     },
     "readline": {
-      "evra": "8.2-2.fc36.x86_64"
+      "evra": "8.2-2.fc37.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.6-2.fc36.x86_64"
+      "evra": "1.2.6-3.fc37.x86_64"
     },
     "rpm": {
-      "evra": "4.17.1-3.fc36.x86_64"
+      "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.17.1-3.fc36.x86_64"
+      "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.14-1.fc36.x86_64"
+      "evra": "2022.15-3.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.14-1.fc36.x86_64"
+      "evra": "2022.15-3.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.17.1-3.fc36.x86_64"
+      "evra": "4.18.0-1.fc37.x86_64"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc36.x86_64"
+      "evra": "3.2.7-1.fc37.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc36.x86_64"
+      "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.16.6-0.fc36.x86_64"
+      "evra": "2:4.17.2-2.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.16.6-0.fc36.noarch"
+      "evra": "2:4.17.2-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.16.6-0.fc36.x86_64"
+      "evra": "2:4.17.2-2.fc37.x86_64"
     },
     "sed": {
-      "evra": "4.8-10.fc36.x86_64"
+      "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "36.16-1.fc36.noarch"
+      "evra": "37.12-2.fc37.noarch"
     },
     "setup": {
-      "evra": "2.14.1-1.fc36.noarch"
+      "evra": "2.14.1-2.fc37.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-3.fc36.x86_64"
+      "evra": "1.46-4.fc37.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-3.fc36.x86_64"
+      "evra": "1.46-4.fc37.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.11.1-5.fc36.x86_64"
+      "evra": "2:4.12.3-3.fc37.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.11.1-5.fc36.x86_64"
+      "evra": "2:4.12.3-3.fc37.x86_64"
     },
     "shared-mime-info": {
-      "evra": "2.1-3.fc35.x86_64"
+      "evra": "2.2-2.fc37.x86_64"
     },
     "shim-x64": {
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc36.x86_64"
+      "evra": "1:1.10.0-3.fc37.x86_64"
     },
     "slang": {
-      "evra": "2.3.2-11.fc36.x86_64"
+      "evra": "2.3.3-1.fc37.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-0.2.beta.0.fc36.x86_64"
+      "evra": "1.2.0-8.fc37.x86_64"
     },
     "snappy": {
-      "evra": "1.1.9-4.fc36.x86_64"
+      "evra": "1.1.9-5.fc37.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.2-2.fc36.x86_64"
+      "evra": "1.7.4.2-3.fc37.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.36.0-5.fc36.x86_64"
+      "evra": "3.39.2-2.fc37.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-1.fc36.x86_64"
+      "evra": "4.5.1-2.fc37.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc36.x86_64"
+      "evra": "0.1.4-1.fc37.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-client": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-common": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.7.4-1.fc36.x86_64"
+      "evra": "2.8.0-2.fc37.x86_64"
     },
     "stalld": {
-      "evra": "1.15-2.fc36.x86_64"
+      "evra": "1.16-2.fc37.x86_64"
     },
     "sudo": {
-      "evra": "1.9.8-5.p2.fc36.x86_64"
+      "evra": "1.9.11-4.p3.fc37.x86_64"
     },
     "systemd": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "250.8-1.fc36.x86_64"
+      "evra": "251.7-611.fc37.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-3.fc36.x86_64"
+      "evra": "2:1.34-5.fc37.x86_64"
     },
     "teamd": {
-      "evra": "1.31-5.fc36.x86_64"
+      "evra": "1.31-6.fc37.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-6.fc36.x86_64"
+      "evra": "0.0.99.3-7.fc37.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.2-2.fc36.x86_64"
+      "evra": "5.3-1.fc37.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc36.x86_64"
+      "evra": "3.2.0-3.fc37.x86_64"
     },
     "tzdata": {
-      "evra": "2022f-1.fc36.noarch"
+      "evra": "2022f-1.fc37.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-4.fc36.x86_64"
+      "evra": "0.13.0-5.fc37.x86_64"
     },
     "util-linux": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.38-1.fc36.x86_64"
+      "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc36.noarch"
+      "evra": "2:9.0.828-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc36.x86_64"
+      "evra": "2:9.0.828-1.fc37.x86_64"
     },
     "which": {
-      "evra": "2.21-32.fc36.x86_64"
+      "evra": "2.21-35.fc37.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-2.fc36.x86_64"
+      "evra": "1.0.20210914-3.fc37.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.14.2-2.fc36.x86_64"
+      "evra": "5.18.0-3.fc37.x86_64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-2.fc36.x86_64"
+      "evra": "0.8.1-3.fc37.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-9.fc36.x86_64"
+      "evra": "5.2.5-10.fc37.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-9.fc36.x86_64"
+      "evra": "5.2.5-10.fc37.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-18.fc36.x86_64"
+      "evra": "2.1.0-19.fc37.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc36.x86_64"
+      "evra": "1.2.3-1.fc37.x86_64"
     },
     "zincati": {
-      "evra": "0.0.24-4.fc36.x86_64"
+      "evra": "0.0.25-1.fc37.x86_64"
     },
     "zlib": {
-      "evra": "1.2.11-33.fc36.x86_64"
+      "evra": "1.2.12-5.fc37.x86_64"
     },
     "zram-generator": {
-      "evra": "1.1.2-1.fc36.x86_64"
+      "evra": "1.1.2-2.fc37.x86_64"
     },
     "zstd": {
-      "evra": "1.5.2-2.fc36.x86_64"
+      "evra": "1.5.2-3.fc37.x86_64"
     }
   },
   "metadata": {
-    "generated": "2022-11-10T20:52:55Z",
+    "generated": "2022-11-11T13:52:53Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-05-04T21:16:11Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2022-11-08T23:32:45Z"
+        "generated": "2022-11-10T22:20:55Z"
+      },
+      "fedora-next": {
+        "generated": "2022-11-10T09:30:00Z"
       },
-      "fedora-updates": {
-        "generated": "2022-11-10T16:06:52Z"
+      "fedora-next-updates": {
+        "generated": "2022-11-11T00:57:35Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index ca74f3d47a..c2e29317e0 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -2,7 +2,7 @@ variables:
   stream: testing-devel
   prod: false
 
-releasever: 36
+releasever: 37
 
 repos:
   # These repos are there to make it easier to add new packages to the OS and to

From 2e8a2ee0f2cf1af27baa7181bbdc9811f938f1d4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Nov 2022 11:48:19 -0500
Subject: [PATCH 1290/2157] ci/buildroot: remove nocache line from Dockerfile

The build process we use for building this now will automatically
rebuild it every 3 days or so, so we no longer need this nocache line.
---
 ci/buildroot/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 6ef0bde9ce..fe04000daa 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -7,4 +7,4 @@
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM registry.fedoraproject.org/fedora:37
 COPY . /src
-RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf  # nocache 20220119
+RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf

From d0e4ef11011c361ba161e3f931a697b7f4bd4f75 Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Tue, 15 Nov 2022 15:26:27 +0000
Subject: [PATCH 1291/2157] manifests/fedora-coreos-base: Add lsof to rhcos

Remove lsof from fedora-coreos-base and move it to
user-experience
Reference : https://github.com/coreos/fedora-coreos-config/pull/284

See: https://issues.redhat.com/browse/COS-1877
---
 manifests/fedora-coreos-base.yaml | 1 -
 manifests/user-experience.yaml    | 2 ++
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 5f428b1858..f774d0b912 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -146,7 +146,6 @@ packages:
   # Used by admins interactively
   - attr
   - openssl
-  - lsof
   # Provides terminal tools like clear, reset, tput, and tset
   - ncurses
   # file-transfer: note fuse-sshfs is not in RHEL
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index d0c57a7b13..5f8445d2e3 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -44,3 +44,5 @@ packages:
   - toolbox
   # nvme-cli for managing nvme disks
   - nvme-cli
+  # Used by admins interactively
+  - lsof

From ca2a84f6da4fb1617eca80285e260830c5aaefcd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 17 Nov 2022 06:08:24 +0000
Subject: [PATCH 1292/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 4c10b93e39..2983914c14 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -34,9 +34,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
       type: pin
-  expat:
-    evr: 2.4.9-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c52402aec
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1223#issuecomment-1242724431
-      type: fast-track

From ce65013fcb9f10bfee1c7c1c27477c6c6ce676b3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 17 Nov 2022 21:47:34 +0000
Subject: [PATCH 1293/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/265/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 68 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 68 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 66 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 68 +++++++++++++++++++-------------------
 4 files changed, 135 insertions(+), 135 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d19ac20f17..d753184137 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.2-1.fc37.aarch64"
+      "evra": "1:1.40.0-1.fc37.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.2-1.fc37.aarch64"
+      "evra": "1:1.40.0-1.fc37.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.2-1.fc37.aarch64"
+      "evra": "1:1.40.0-1.fc37.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.2-1.fc37.aarch64"
+      "evra": "1:1.40.0-1.fc37.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.2-1.fc37.aarch64"
+      "evra": "1:1.40.0-1.fc37.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -49,7 +49,7 @@
       "evra": "1.4.0-3.fc37.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-17.fc37.aarch64"
+      "evra": "0.8-18.fc37.aarch64"
     },
     "basesystem": {
       "evra": "11-14.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc37.aarch64"
+      "evra": "1.6.9-3.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.6-2.fc37.aarch64"
+      "evra": "1.7-1.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -274,7 +274,7 @@
       "evra": "2:6.0-1.fc37.aarch64"
     },
     "expat": {
-      "evra": "2.4.9-1.fc37.aarch64"
+      "evra": "2.5.0-1.fc37.aarch64"
     },
     "fedora-gpg-keys": {
       "evra": "37-1.noarch"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc37.aarch64"
+      "evra": "1.8.7-2.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -382,7 +382,7 @@
       "evra": "2.3.8-1.fc37.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc37.aarch64"
+      "evra": "3.7.8-3.fc37.aarch64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.aarch64"
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-301.fc37.aarch64"
+      "evra": "6.0.8-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.7-301.fc37.aarch64"
+      "evra": "6.0.8-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.7-301.fc37.aarch64"
+      "evra": "6.0.8-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -667,7 +667,7 @@
       "evra": "1.0.1-22.fc37.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc2.fc37.aarch64"
+      "evra": "1:2.6.2-1.rc3.fc37.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.aarch64"
@@ -805,7 +805,7 @@
       "evra": "2:4.17.2-2.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc37.aarch64"
+      "evra": "4.4.30-3.fc37.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.aarch64"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.aarch64"
@@ -898,7 +898,7 @@
       "evra": "0.52.21-14.fc37.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc2.fc37.aarch64"
+      "evra": "1:2.6.2-1.rc3.fc37.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.aarch64"
@@ -1057,10 +1057,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1141,22 +1141,22 @@
       "evra": "1.9.11-4.p3.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.aarch64"
+      "evra": "251.8-586.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-11T13:53:30Z",
+    "generated": "2022-11-17T20:20:15Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-11-10T22:21:07Z"
+      "fedora": {
+        "generated": "2022-11-05T08:04:22Z"
       },
-      "fedora-next": {
-        "generated": "2022-11-10T09:29:41Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-11-17T15:25:02Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-11-11T00:57:27Z"
+      "fedora-updates": {
+        "generated": "2022-11-17T01:15:42Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 01dcd3674b..3bd97cd300 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.2-1.fc37.ppc64le"
+      "evra": "1:1.40.0-1.fc37.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.2-1.fc37.ppc64le"
+      "evra": "1:1.40.0-1.fc37.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.2-1.fc37.ppc64le"
+      "evra": "1:1.40.0-1.fc37.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.2-1.fc37.ppc64le"
+      "evra": "1:1.40.0-1.fc37.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.2-1.fc37.ppc64le"
+      "evra": "1:1.40.0-1.fc37.ppc64le"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -49,7 +49,7 @@
       "evra": "1.4.0-3.fc37.ppc64le"
     },
     "avahi-libs": {
-      "evra": "0.8-17.fc37.ppc64le"
+      "evra": "0.8-18.fc37.ppc64le"
     },
     "basesystem": {
       "evra": "11-14.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc37.ppc64le"
+      "evra": "1.6.9-3.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.6-2.fc37.ppc64le"
+      "evra": "1.7-1.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -265,7 +265,7 @@
       "evra": "2:6.0-1.fc37.ppc64le"
     },
     "expat": {
-      "evra": "2.4.9-1.fc37.ppc64le"
+      "evra": "2.5.0-1.fc37.ppc64le"
     },
     "fedora-gpg-keys": {
       "evra": "37-1.noarch"
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc37.ppc64le"
+      "evra": "1.8.7-2.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -373,7 +373,7 @@
       "evra": "2.3.8-1.fc37.ppc64le"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc37.ppc64le"
+      "evra": "3.7.8-3.fc37.ppc64le"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.ppc64le"
@@ -475,13 +475,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-301.fc37.ppc64le"
+      "evra": "6.0.8-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.7-301.fc37.ppc64le"
+      "evra": "6.0.8-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.7-301.fc37.ppc64le"
+      "evra": "6.0.8-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-22.fc37.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc2.fc37.ppc64le"
+      "evra": "1:2.6.2-1.rc3.fc37.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.ppc64le"
@@ -805,7 +805,7 @@
       "evra": "2:4.17.2-2.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc37.ppc64le"
+      "evra": "4.4.30-3.fc37.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.ppc64le"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.ppc64le"
@@ -895,7 +895,7 @@
       "evra": "0.52.21-14.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc2.fc37.ppc64le"
+      "evra": "1:2.6.2-1.rc3.fc37.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.ppc64le"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1144,22 +1144,22 @@
       "evra": "1.9.11-4.p3.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.8-586.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-11T13:53:30Z",
+    "generated": "2022-11-17T20:21:13Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-11-10T22:19:52Z"
+      "fedora": {
+        "generated": "2022-11-05T08:04:20Z"
       },
-      "fedora-next": {
-        "generated": "2022-11-10T09:29:39Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-11-17T15:24:56Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-11-11T00:57:31Z"
+      "fedora-updates": {
+        "generated": "2022-11-17T01:16:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4162cc157a..2e0c9a7f0e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.2-1.fc37.s390x"
+      "evra": "1:1.40.0-1.fc37.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.2-1.fc37.s390x"
+      "evra": "1:1.40.0-1.fc37.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.2-1.fc37.s390x"
+      "evra": "1:1.40.0-1.fc37.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.2-1.fc37.s390x"
+      "evra": "1:1.40.0-1.fc37.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.2-1.fc37.s390x"
+      "evra": "1:1.40.0-1.fc37.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -49,7 +49,7 @@
       "evra": "1.4.0-3.fc37.s390x"
     },
     "avahi-libs": {
-      "evra": "0.8-17.fc37.s390x"
+      "evra": "0.8-18.fc37.s390x"
     },
     "basesystem": {
       "evra": "11-14.fc37.noarch"
@@ -133,7 +133,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc37.s390x"
+      "evra": "1.6.9-3.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.6-2.fc37.s390x"
+      "evra": "1.7-1.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -262,7 +262,7 @@
       "evra": "2:6.0-1.fc37.s390x"
     },
     "expat": {
-      "evra": "2.4.9-1.fc37.s390x"
+      "evra": "2.5.0-1.fc37.s390x"
     },
     "fedora-gpg-keys": {
       "evra": "37-1.noarch"
@@ -358,7 +358,7 @@
       "evra": "2.3.8-1.fc37.s390x"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc37.s390x"
+      "evra": "3.7.8-3.fc37.s390x"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.s390x"
@@ -442,13 +442,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-301.fc37.s390x"
+      "evra": "6.0.8-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.7-301.fc37.s390x"
+      "evra": "6.0.8-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.7-301.fc37.s390x"
+      "evra": "6.0.8-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -619,7 +619,7 @@
       "evra": "1.0.1-22.fc37.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc2.fc37.s390x"
+      "evra": "1:2.6.2-1.rc3.fc37.s390x"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.s390x"
@@ -754,7 +754,7 @@
       "evra": "2:4.17.2-2.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc37.s390x"
+      "evra": "4.4.30-3.fc37.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.s390x"
@@ -769,10 +769,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.s390x"
@@ -841,7 +841,7 @@
       "evra": "0.52.21-14.fc37.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc2.fc37.s390x"
+      "evra": "1:2.6.2-1.rc3.fc37.s390x"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.s390x"
@@ -997,10 +997,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1075,22 +1075,22 @@
       "evra": "1.9.11-4.p3.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.8-586.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-11T13:52:50Z",
+    "generated": "2022-11-17T20:20:22Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-11-10T22:20:23Z"
+      "fedora": {
+        "generated": "2022-11-05T08:04:18Z"
       },
-      "fedora-next": {
-        "generated": "2022-11-10T09:29:50Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-11-17T15:24:50Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-11-11T00:57:33Z"
+      "fedora-updates": {
+        "generated": "2022-11-17T01:16:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2a7b598dd1..b0d4c5600d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.2-1.fc37.x86_64"
+      "evra": "1:1.40.0-1.fc37.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.2-1.fc37.x86_64"
+      "evra": "1:1.40.0-1.fc37.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.2-1.fc37.x86_64"
+      "evra": "1:1.40.0-1.fc37.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.2-1.fc37.x86_64"
+      "evra": "1:1.40.0-1.fc37.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.2-1.fc37.x86_64"
+      "evra": "1:1.40.0-1.fc37.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -49,7 +49,7 @@
       "evra": "1.4.0-3.fc37.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-17.fc37.x86_64"
+      "evra": "0.8-18.fc37.x86_64"
     },
     "basesystem": {
       "evra": "11-14.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.8-4.fc37.x86_64"
+      "evra": "1.6.9-3.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.6-2.fc37.x86_64"
+      "evra": "1.7-1.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -274,7 +274,7 @@
       "evra": "2:6.0-1.fc37.x86_64"
     },
     "expat": {
-      "evra": "2.4.9-1.fc37.x86_64"
+      "evra": "2.5.0-1.fc37.x86_64"
     },
     "fedora-gpg-keys": {
       "evra": "37-1.noarch"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.6-1.fc37.x86_64"
+      "evra": "1.8.7-2.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -382,7 +382,7 @@
       "evra": "2.3.8-1.fc37.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.8-2.fc37.x86_64"
+      "evra": "3.7.8-3.fc37.x86_64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.x86_64"
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.7-301.fc37.x86_64"
+      "evra": "6.0.8-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.7-301.fc37.x86_64"
+      "evra": "6.0.8-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.7-301.fc37.x86_64"
+      "evra": "6.0.8-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -673,7 +673,7 @@
       "evra": "1.0.1-22.fc37.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc2.fc37.x86_64"
+      "evra": "1:2.6.2-1.rc3.fc37.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.x86_64"
@@ -814,7 +814,7 @@
       "evra": "2:4.17.2-2.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-1.fc37.x86_64"
+      "evra": "4.4.30-3.fc37.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.x86_64"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221012-142.fc37.noarch"
+      "evra": "20221109-143.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.x86_64"
@@ -910,7 +910,7 @@
       "evra": "0.52.21-14.fc37.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc2.fc37.x86_64"
+      "evra": "1:2.6.2-1.rc3.fc37.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.x86_64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.12-2.fc37.noarch"
+      "evra": "37.14-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1150,22 +1150,22 @@
       "evra": "1.9.11-4.p3.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.x86_64"
+      "evra": "251.8-586.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-11T13:52:53Z",
+    "generated": "2022-11-17T20:20:22Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2022-11-10T22:20:55Z"
+      "fedora": {
+        "generated": "2022-11-05T08:04:38Z"
       },
-      "fedora-next": {
-        "generated": "2022-11-10T09:30:00Z"
+      "fedora-coreos-pool": {
+        "generated": "2022-11-17T15:25:38Z"
       },
-      "fedora-next-updates": {
-        "generated": "2022-11-11T00:57:35Z"
+      "fedora-updates": {
+        "generated": "2022-11-17T01:16:10Z"
       }
     }
   }

From b38aa7ff6406e3aa370a521208c3694d071adca2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 17 Nov 2022 15:46:47 -0500
Subject: [PATCH 1294/2157] Revert "overlay/15fcos: retroactively fix BLS
 grub_users setting (CVE-2022-3675)"

This reverts commit d7d40682debfa5a29d0a4e5ff4c73d52bd60f963.

This is no longer needed since we have implemented a barrier on each
release stream now: https://github.com/coreos/fedora-coreos-tracker/issues/1333#issuecomment-1319168915
---
 .../lib/systemd/system-preset/45-fcos.preset  |   2 -
 .../system/coreos-fix-grub-users.service      |  20 ---
 .../15fcos/usr/libexec/coreos-fix-grub-users  |  57 -------
 tests/kola/butane/data/commonlib.sh           |   1 -
 tests/kola/butane/grub-users-fix              | 147 ------------------
 5 files changed, 227 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
 delete mode 100755 overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
 delete mode 120000 tests/kola/butane/data/commonlib.sh
 delete mode 100755 tests/kola/butane/grub-users-fix

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index ce2ae419f6..fd18bec843 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,5 +1,3 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
-# Patch BLS grub_users setting
-enable coreos-fix-grub-users.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
deleted file mode 100644
index 7e48301cf6..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-fix-grub-users.service
+++ /dev/null
@@ -1,20 +0,0 @@
-# Remove after the next update barrier in all streams.
-
-[Unit]
-Description=Fix ostree grub_users Setting
-Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1333
-ConditionPathExists=!/var/lib/coreos/fix-grub-users.stamp
-# No GRUB on s390x.  ppc64le has petitboot, which ignores these GRUB
-# commands, but do the update there anyway for consistency.
-ConditionArchitecture=!s390x
-RequiresMountsFor=/var/lib/coreos
-
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/coreos-fix-grub-users
-RemainAfterExit=yes
-# We remount /boot read-write
-MountFlags=slave
-
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users b/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
deleted file mode 100755
index d35e17d06e..0000000000
--- a/overlay.d/15fcos/usr/libexec/coreos-fix-grub-users
+++ /dev/null
@@ -1,57 +0,0 @@
-#!/bin/bash
-#
-# Set ostree sysroot.bls-append-except-default on instances booted from
-# images that incorrectly shipped without it.
-
-set -euo pipefail
-
-STAMP=/var/lib/coreos/fix-grub-users.stamp
-
-aleph_ver=$(jq -r .build < /sysroot/.coreos-aleph-version.json)
-date=$(echo "$aleph_ver" | cut -f2 -d.)
-stream=$(echo "$aleph_ver" | cut -f3 -d.)
-
-if [ "$stream" = "3" ]; then
-    start=20220819
-    end=20221012
-else
-    start=20220901
-    end=20221029
-fi
-
-mkdir -p /var/lib/coreos
-
-if [ "$date" -lt "$start" ]; then
-    echo "Image is too old to be affected; exiting"
-    touch "$STAMP"
-    exit 0
-fi
-
-if [ "$date" -gt "$end" ]; then
-    echo "Image is too new to be affected; exiting"
-    touch "$STAMP"
-    exit 0
-fi
-
-if ostree config get sysroot.bls-append-except-default 2>/dev/null; then
-    # user-set value?
-    echo "sysroot.bls-append-except-default already has a value; exiting"
-    touch "$STAMP"
-    exit 0
-fi
-
-echo "Setting value of sysroot.bls-append-except-default"
-ostree config set sysroot.bls-append-except-default 'grub_users=""'
-
-echo "Fixing existing deployments"
-mount -o remount,rw /boot
-cd /boot/loader/entries
-# Ignore the default deployment, which is last when sorted numerically
-for f in $(ls -v ostree-*.conf | head -n -1); do
-    if ! grep -q "^grub_users " "$f"; then
-        echo "Fixing $f"
-        echo 'grub_users ""' >> "$f"
-    fi
-done
-
-touch "$STAMP"
diff --git a/tests/kola/butane/data/commonlib.sh b/tests/kola/butane/data/commonlib.sh
deleted file mode 120000
index 1742d51e67..0000000000
--- a/tests/kola/butane/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/butane/grub-users-fix b/tests/kola/butane/grub-users-fix
deleted file mode 100755
index e8769e31d9..0000000000
--- a/tests/kola/butane/grub-users-fix
+++ /dev/null
@@ -1,147 +0,0 @@
-#!/bin/bash
-## kola:
-##  # The fixup only exists in FCOS
-##  distros: fcos
-##  # Service doesn't run on s390x because there's no GRUB
-##  architectures: "!s390x"
-##  # Running on multiple platforms won't prove anything further
-##  platforms: qemu
-##  # 15 minutes is not quite enough on ppc64le runners
-##  timeoutMin: 20
-#
-# Test coreos-fix-grub-users.service.
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-STAMP=/var/lib/coreos/fix-grub-users.stamp
-
-fatal_ctx() {
-    fatal "$1 ($AUTOPKGTEST_REBOOT_MARK)"
-}
-
-check() {
-    logline="$1"; shift
-    if ! grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /proc/cmdline; then
-        fatal_ctx "Did not boot into correct deployment"
-    fi
-    if grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /boot/loader/entries/ostree-1-*.conf; then
-        fatal_ctx "Previous deployment contains new karg"
-    fi
-    if ! grep -q "zz-$AUTOPKGTEST_REBOOT_MARK-zz" /boot/loader/entries/ostree-2-*.conf; then
-        fatal_ctx "Current deployment does not contain new karg"
-    fi
-    if [ ! -e "$STAMP" ]; then
-        fatal_ctx "Service stamp was not created"
-    fi
-    if touch /boot/z 2>/dev/null; then
-        fatal_ctx "/boot is mounted read-write"
-    fi
-    if touch /sysroot/ostree/repo/z 2>/dev/null; then
-        fatal_ctx "/sysroot is mounted read-write"
-    fi
-    if ! journalctl -b 0 -u coreos-fix-grub-users.service | grep -q "$logline"; then
-        journalctl -b 0 -o cat -u coreos-fix-grub-users.service
-        fatal_ctx "Did not find '$logline' in service output"
-    fi
-}
-
-check_success() {
-    check "Setting value of"
-    if [ "$(ostree config get sysroot.bls-append-except-default)" != 'grub_users=""' ]; then
-        fatal_ctx "Did not find grub_users setting in ostree config"
-    fi
-    if ! grep -q "^grub_users" /boot/loader/entries/ostree-1-*.conf; then
-        fatal_ctx "Did not find grub_users directive in previous deployment"
-    fi
-    if grep -q "^grub_users" /boot/loader/entries/ostree-2-*.conf; then
-        fatal_ctx "Found grub_users directive in current deployment"
-    fi
-}
-
-configure() {
-    ver="$1"; shift
-    # delete previous deployment
-    rpm-ostree cleanup -pr
-    mount -o remount,rw /sysroot
-    ostree config unset sysroot.bls-append-except-default
-    sed '/"build"/s/.*/"build": "'$ver'",/' \
-        /sysroot/.coreos-aleph-version.json > /tmp/aleph-version
-    cat /tmp/aleph-version > /sysroot/.coreos-aleph-version.json
-    rm -f $STAMP
-}
-
-reboot() {
-    mark="$1"; shift
-    # ensure there's a previous deployment
-    rpm-ostree kargs --append "zz-$mark-zz"
-    ok "Rebooting into $mark"
-    /tmp/autopkgtest-reboot "$mark"
-}
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-"")
-    # don't make assumptions about whether the fix has been applied in this
-    # image
-    configure 36.20220906.2.0
-    reboot testing-active-first
-    ;;
-testing-active-first)
-    check_success
-    reboot testing-duplicate
-    ;;
-testing-duplicate)
-    check "failed condition check"
-    configure 36.20221014.2.1
-    reboot testing-active-last
-    ;;
-testing-active-last)
-    check_success
-    configure 36.20220820.2.0
-    reboot testing-early
-    ;;
-testing-early)
-    check "too old to be affected"
-    configure 36.20221031.2.0
-    reboot testing-late
-    ;;
-testing-late)
-    check "too new to be affected"
-    configure 36.20220906.2.0
-    ostree config set sysroot.bls-append-except-default 'foo=bar'
-    reboot testing-already-set
-    ;;
-testing-already-set)
-    check "already has a value"
-    configure 37.20221021.1.1
-    reboot next-active-last
-    ;;
-next-active-last)
-    check_success
-    configure 36.20220820.3.0
-    reboot stable-active-first
-    ;;
-stable-active-first)
-    check_success
-    configure 36.20221001.3.1
-    reboot stable-active-last
-    ;;
-stable-active-last)
-    check_success
-    configure 36.20220806.3.0
-    reboot stable-early
-    ;;
-stable-early)
-    check "too old to be affected"
-    configure 36.20221014.3.0
-    reboot stable-late
-    ;;
-stable-late)
-    check "too new to be affected"
-    ok "All tests passed"
-    ;;
-*)
-    fatal_ctx "Unexpected mark"
-    ;;
-esac

From e7d70e3276e5398924065e70dcb56082df6f233a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 24 Aug 2021 01:53:34 -0400
Subject: [PATCH 1295/2157] Add platform-specific console configuration
 metadata to testing-devel

Platform-specific console settings have been baking in next-devel since
September 19.  Promote the config to testing-devel.

(cherry picked from commit 019caed2d8d5acb47a9bdc4eac42d39d20364693)
(cherry picked from commit 2cbf072e0572dca527f29b4d66e28c37194983fa)
(cherry picked from commit 491ad7395b51ea3d4fc4759023e9e290524c7f86)
---
 platforms.yaml | 165 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 165 insertions(+)
 create mode 100644 platforms.yaml

diff --git a/platforms.yaml b/platforms.yaml
new file mode 100644
index 0000000000..ae0ddf4d5d
--- /dev/null
+++ b/platforms.yaml
@@ -0,0 +1,165 @@
+# This file specifies image customizations that are specific to particular
+# architecture/platform pairs.  It is applied (indirectly, via
+# /boot/coreos/platforms.json) by create_disk.sh and gf-set-platform at
+# build time and coreos-installer at install time (if --platform is
+# specified).
+#
+# Currently this is used to configure the default console.  For any
+# arch/platform pairs not specified, GRUB and the kernel will apply their
+# own defaults.  Note that coreos-installer install --console will
+# completely override any GRUB commands specified here.
+#
+# s390x doesn't use GRUB and requires running zipl after updating kargs,
+# so it can't be added to this file without additional development work.
+#
+# All architectures, platforms, and fields are optional.
+aarch64:
+  aws:
+    # https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-to-serial-console.html#sc-considerations
+    # It appears there's no screenshot support on ARM
+    grub_commands:
+      - serial --speed=115200 efi0
+      - terminal_input serial_efi0
+      - terminal_output serial_efi0
+    kernel_arguments:
+      - console=ttyS0,115200n8
+  azure:
+    # https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-linux
+    # https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/boot-diagnostics
+    # Have GRUB write only to console, which gets copied to the serial port.
+    # If we use serial (serial efi0; terminal_output console serial_efi0)
+    # we get doubled output.
+    kernel_arguments:
+      - console=tty0
+      - console=ttyAMA0,115200n8
+  openstack:
+    # Graphical console primary, serial console available for logging
+    # https://docs.openstack.org/diskimage-builder/latest/elements/bootloader/README.html
+    # https://issues.redhat.com/browse/OCPBUGS-2926
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=ttyAMA0,115200n8
+      - console=tty0
+  packet:
+    # https://metal.equinix.com/developers/docs/resilience-recovery/serial-over-ssh/#limitations
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial
+      - terminal_output serial
+    kernel_arguments:
+      - console=ttyAMA0,115200
+  qemu:
+    # The kernel successfully autodetects a serial console, but we still
+    # want GRUB to use one
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+ppc64le:
+  openstack:
+    # Graphical console primary, serial console available for logging
+    # petitboot doesn't understand GRUB console commands
+    # https://docs.openstack.org/diskimage-builder/latest/elements/bootloader/README.html
+    # https://issues.redhat.com/browse/OCPBUGS-2926
+    kernel_arguments:
+      - console=hvc0
+      - console=tty0
+  qemu:
+    # petitboot doesn't understand GRUB console commands, but we need to
+    # pass console kargs
+    # https://github.com/coreos/coreos-assembler/pull/2400#discussion_r701412417
+    kernel_arguments:
+      - console=hvc0
+      - console=tty0
+x86_64:
+  aws:
+    # https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-to-serial-console.html#sc-considerations
+    # https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetConsoleScreenshot.html
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=tty0
+      - console=ttyS0,115200n8
+  azure:
+    # https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-linux
+    # https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/boot-diagnostics
+    # Have GRUB write only to console, which gets copied to the serial port.
+    # If we use serial we get doubled output.
+    kernel_arguments:
+      - console=tty0
+      - console=ttyS0,115200n8
+  gcp:
+    # Four serial ports are available; we use the first one
+    # https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console
+    # https://cloud.google.com/compute/docs/troubleshooting/capturing-vm-screenshots
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=tty0
+      - console=ttyS0,115200n8
+  ibmcloud:
+    # Docs suggest 9600 bps, but that doesn't seem reasonable
+    # https://cloud.ibm.com/docs/vpc?topic=vpc-create-linux-custom-image#kernel-args
+    # https://cloud.ibm.com/docs/vpc?topic=vpc-vsi_is_connecting_console&interface=ui
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=tty0
+      - console=ttyS0,115200n8
+  openstack:
+    # Graphical console primary, serial console available for logging
+    # https://docs.openstack.org/diskimage-builder/latest/elements/bootloader/README.html
+    # https://issues.redhat.com/browse/OCPBUGS-2926
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=ttyS0,115200n8
+      - console=tty0
+  packet:
+    # https://metal.equinix.com/developers/docs/resilience-recovery/serial-over-ssh/#limitations
+    grub_commands:
+      - serial --unit=1 --speed=115200
+      - terminal_input serial
+      - terminal_output serial
+    kernel_arguments:
+      - console=ttyS1,115200n8
+  qemu:
+    # https://github.com/coreos/fedora-coreos-tracker/issues/954
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=tty0
+      - console=ttyS0,115200n8
+  virtualbox:
+    # Graphical console primary, serial console available for logging
+    # https://docs.fedoraproject.org/en-US/fedora-coreos/provisioning-virtualbox/#_troubleshooting_first_boot_problems
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=ttyS0,115200n8
+      - console=tty0
+  vmware:
+    # Graphical console primary, serial console available for logging
+    # https://docs.fedoraproject.org/en-US/fedora-coreos/provisioning-vmware/#_troubleshooting_first_boot_problems
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=ttyS0,115200n8
+      - console=tty0

From 755ed9cde4b6a0646dc253614d8f1543df9c3f2c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 18 Nov 2022 22:14:51 +0000
Subject: [PATCH 1296/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/266/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 57 insertions(+), 57 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d753184137..bd4539d5a3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -391,16 +391,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-60.fc37.noarch"
+      "evra": "1:2.06-63.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-60.fc37.aarch64"
+      "evra": "1:2.06-63.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-60.fc37.aarch64"
+      "evra": "1:2.06-63.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-60.fc37.aarch64"
+      "evra": "1:2.06-63.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -736,7 +736,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.2-2.fc37.aarch64"
+      "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -802,10 +802,10 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.2-2.fc37.aarch64"
+      "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-3.fc37.aarch64"
+      "evra": "4.4.31-1.fc37.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.aarch64"
@@ -865,7 +865,7 @@
       "evra": "2:0.6.0-5.fc37.aarch64"
     },
     "mozjs102": {
-      "evra": "102.4.0-1.fc37.aarch64"
+      "evra": "102.5.0-1.fc37.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.aarch64"
@@ -1015,7 +1015,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-10.fc37.aarch64"
+      "evra": "2:7.0.0-11.fc37.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc37.aarch64"
@@ -1045,13 +1045,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.2-2.fc37.aarch64"
+      "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.2-2.fc37.noarch"
+      "evra": "2:4.17.3-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.2-2.fc37.aarch64"
+      "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-17T20:20:15Z",
+    "generated": "2022-11-18T20:52:49Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T15:25:02Z"
+        "generated": "2022-11-17T22:12:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-17T01:15:42Z"
+        "generated": "2022-11-18T00:57:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3bd97cd300..6361bf69ac 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-60.fc37.noarch"
+      "evra": "1:2.06-63.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-60.fc37.ppc64le"
+      "evra": "1:2.06-63.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-60.fc37.noarch"
+      "evra": "1:2.06-63.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-60.fc37.ppc64le"
+      "evra": "1:2.06-63.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-60.fc37.ppc64le"
+      "evra": "1:2.06-63.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -736,7 +736,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.2-2.fc37.ppc64le"
+      "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -802,10 +802,10 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.2-2.fc37.ppc64le"
+      "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.30-3.fc37.ppc64le"
+      "evra": "4.4.31-1.fc37.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.ppc64le"
@@ -862,7 +862,7 @@
       "evra": "20.10.20-1.fc37.ppc64le"
     },
     "mozjs102": {
-      "evra": "102.4.0-1.fc37.ppc64le"
+      "evra": "102.5.0-1.fc37.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.ppc64le"
@@ -1048,13 +1048,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.2-2.fc37.ppc64le"
+      "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.2-2.fc37.noarch"
+      "evra": "2:4.17.3-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.2-2.fc37.ppc64le"
+      "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-17T20:21:13Z",
+    "generated": "2022-11-18T20:53:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T15:24:56Z"
+        "generated": "2022-11-17T22:12:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-17T01:16:06Z"
+        "generated": "2022-11-18T00:57:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2e0c9a7f0e..ad8c48ad05 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -688,7 +688,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.2-2.fc37.s390x"
+      "evra": "2:4.17.3-0.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -751,10 +751,10 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.2-2.fc37.s390x"
+      "evra": "2:4.17.3-0.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.30-3.fc37.s390x"
+      "evra": "4.4.31-1.fc37.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.s390x"
@@ -808,7 +808,7 @@
       "evra": "20.10.20-1.fc37.s390x"
     },
     "mozjs102": {
-      "evra": "102.4.0-1.fc37.s390x"
+      "evra": "102.5.0-1.fc37.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.s390x"
@@ -952,7 +952,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-10.fc37.s390x"
+      "evra": "2:7.0.0-11.fc37.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc37.s390x"
@@ -985,13 +985,13 @@
       "evra": "2:2.23.0-1.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.2-2.fc37.s390x"
+      "evra": "2:4.17.3-0.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.2-2.fc37.noarch"
+      "evra": "2:4.17.3-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.2-2.fc37.s390x"
+      "evra": "2:4.17.3-0.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-17T20:20:22Z",
+    "generated": "2022-11-18T20:52:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T15:24:50Z"
+        "generated": "2022-11-17T22:12:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-17T01:16:08Z"
+        "generated": "2022-11-18T00:58:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b0d4c5600d..b2626dfa84 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -391,22 +391,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-60.fc37.noarch"
+      "evra": "1:2.06-63.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-60.fc37.x86_64"
+      "evra": "1:2.06-63.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-60.fc37.x86_64"
+      "evra": "1:2.06-63.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-60.fc37.noarch"
+      "evra": "1:2.06-63.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-60.fc37.x86_64"
+      "evra": "1:2.06-63.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-60.fc37.x86_64"
+      "evra": "1:2.06-63.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.2-2.fc37.x86_64"
+      "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -811,10 +811,10 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.2-2.fc37.x86_64"
+      "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.30-3.fc37.x86_64"
+      "evra": "4.4.31-1.fc37.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:0.6.0-5.fc37.x86_64"
     },
     "mozjs102": {
-      "evra": "102.4.0-1.fc37.x86_64"
+      "evra": "102.5.0-1.fc37.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.x86_64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.2-2.fc37.x86_64"
+      "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.2-2.fc37.noarch"
+      "evra": "2:4.17.3-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.2-2.fc37.x86_64"
+      "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-17T20:20:22Z",
+    "generated": "2022-11-18T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T15:25:38Z"
+        "generated": "2022-11-17T22:14:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-17T01:16:10Z"
+        "generated": "2022-11-18T00:58:03Z"
       }
     }
   }

From 36b28fcf507ef435fc339a47ccf7929025f9b0d7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 20 Nov 2022 14:23:17 +0000
Subject: [PATCH 1297/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/268/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bd4539d5a3..fcb3c828ba 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -55,7 +55,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc37.aarch64"
+      "evra": "5.2.9-3.fc37.aarch64"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-18T20:52:49Z",
+    "generated": "2022-11-20T13:55:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T22:12:28Z"
+        "generated": "2022-11-18T22:20:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-18T00:57:53Z"
+        "generated": "2022-11-20T01:15:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6361bf69ac..a57ce091e4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -55,7 +55,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc37.ppc64le"
+      "evra": "5.2.9-3.fc37.ppc64le"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -823,10 +823,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-18T20:53:57Z",
+    "generated": "2022-11-20T13:56:16Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T22:12:23Z"
+        "generated": "2022-11-18T22:19:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-18T00:57:58Z"
+        "generated": "2022-11-20T01:15:20Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ad8c48ad05..709e79bfe9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -55,7 +55,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc37.s390x"
+      "evra": "5.2.9-3.fc37.s390x"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -769,10 +769,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-18T20:52:53Z",
+    "generated": "2022-11-20T13:55:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T22:12:09Z"
+        "generated": "2022-11-18T22:20:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-18T00:58:00Z"
+        "generated": "2022-11-20T01:15:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b2626dfa84..6f6d94718f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -55,7 +55,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.2-2.fc37.x86_64"
+      "evra": "5.2.9-3.fc37.x86_64"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-143.fc37.noarch"
+      "evra": "20221109-144.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-18T20:52:58Z",
+    "generated": "2022-11-20T13:55:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-17T22:14:26Z"
+        "generated": "2022-11-18T22:21:37Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-18T00:58:03Z"
+        "generated": "2022-11-20T01:15:25Z"
       }
     }
   }

From 94dde18f1c3db963100653fa1a4dee14911b191e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 21 Nov 2022 22:13:30 +0000
Subject: [PATCH 1298/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/270/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fcb3c828ba..5c85da6774 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -913,7 +913,7 @@
       "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvme-cli": {
-      "evra": "2.1.2-1.fc37.aarch64"
+      "evra": "2.2.1-1.fc37.aarch64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.aarch64"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc37.aarch64"
+      "evra": "4:4.3.1-1.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc37.aarch64"
+      "evra": "4:4.3.1-1.fc37.aarch64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-20T13:55:37Z",
+    "generated": "2022-11-21T20:55:47Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-18T22:20:55Z"
+        "generated": "2022-11-20T14:26:25Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-20T01:15:15Z"
+        "generated": "2022-11-21T01:03:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a57ce091e4..f087fd590e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -910,7 +910,7 @@
       "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvme-cli": {
-      "evra": "2.1.2-1.fc37.ppc64le"
+      "evra": "2.2.1-1.fc37.ppc64le"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.ppc64le"
@@ -982,10 +982,10 @@
       "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc37.ppc64le"
+      "evra": "4:4.3.1-1.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc37.ppc64le"
+      "evra": "4:4.3.1-1.fc37.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-20T13:56:16Z",
+    "generated": "2022-11-21T20:56:51Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-18T22:19:55Z"
+        "generated": "2022-11-20T14:26:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-20T01:15:20Z"
+        "generated": "2022-11-21T01:03:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 709e79bfe9..4fd540ccb3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -853,7 +853,7 @@
       "evra": "2.18.1-21.fc37.s390x"
     },
     "nvme-cli": {
-      "evra": "2.1.2-1.fc37.s390x"
+      "evra": "2.2.1-1.fc37.s390x"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.s390x"
@@ -919,10 +919,10 @@
       "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc37.s390x"
+      "evra": "4:4.3.1-1.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc37.s390x"
+      "evra": "4:4.3.1-1.fc37.s390x"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-20T13:55:29Z",
+    "generated": "2022-11-21T20:55:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-18T22:20:29Z"
+        "generated": "2022-11-20T14:25:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-20T01:15:22Z"
+        "generated": "2022-11-21T01:03:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6f6d94718f..25045c1517 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -925,7 +925,7 @@
       "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvme-cli": {
-      "evra": "2.1.2-1.fc37.x86_64"
+      "evra": "2.2.1-1.fc37.x86_64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.x86_64"
@@ -994,10 +994,10 @@
       "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "4:4.3.0-2.fc37.x86_64"
+      "evra": "4:4.3.1-1.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.0-2.fc37.x86_64"
+      "evra": "4:4.3.1-1.fc37.x86_64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-20T13:55:37Z",
+    "generated": "2022-11-21T20:55:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-18T22:21:37Z"
+        "generated": "2022-11-20T14:27:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-20T01:15:25Z"
+        "generated": "2022-11-21T01:03:11Z"
       }
     }
   }

From 72f63b6b3820e0430ab9c7995ab06c29eb6669e3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 22 Nov 2022 22:12:42 +0000
Subject: [PATCH 1299/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/271/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 46 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 46 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 46 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 46 +++++++++++++++++++-------------------
 4 files changed, 92 insertions(+), 92 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5c85da6774..487e38a09b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.8-300.fc37.aarch64"
+      "evra": "6.0.9-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.8-300.fc37.aarch64"
+      "evra": "6.0.9-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.8-300.fc37.aarch64"
+      "evra": "6.0.9-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -508,7 +508,7 @@
       "evra": "0.9.0-3.fc37.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc37.1.aarch64"
+      "evra": "1.19.2-13.fc37.aarch64"
     },
     "less": {
       "evra": "590-5.fc37.aarch64"
@@ -619,7 +619,7 @@
       "evra": "1.3.1-52.fc37.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.aarch64"
@@ -745,16 +745,16 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "libstdc++": {
       "evra": "12.2.1-2.fc37.aarch64"
@@ -805,7 +805,7 @@
       "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.31-1.fc37.aarch64"
+      "evra": "4.4.33-1.fc37.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.aarch64"
@@ -1099,7 +1099,7 @@
       "evra": "1.7.4.2-3.fc37.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.39.2-2.fc37.aarch64"
+      "evra": "3.40.0-1.fc37.aarch64"
     },
     "squashfs-tools": {
       "evra": "4.5.1-2.fc37.aarch64"
@@ -1108,31 +1108,31 @@
       "evra": "0.1.4-1.fc37.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-client": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-common": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.0-2.fc37.aarch64"
+      "evra": "2.8.1-1.fc37.aarch64"
     },
     "stalld": {
       "evra": "1.16-2.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-21T20:55:47Z",
+    "generated": "2022-11-22T20:53:37Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-20T14:26:25Z"
+        "generated": "2022-11-21T22:16:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-21T01:03:00Z"
+        "generated": "2022-11-22T01:13:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f087fd590e..b64b15e600 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -475,13 +475,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.8-300.fc37.ppc64le"
+      "evra": "6.0.9-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.8-300.fc37.ppc64le"
+      "evra": "6.0.9-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.8-300.fc37.ppc64le"
+      "evra": "6.0.9-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -502,7 +502,7 @@
       "evra": "0.9.0-3.fc37.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc37.1.ppc64le"
+      "evra": "1.19.2-13.fc37.ppc64le"
     },
     "less": {
       "evra": "590-5.fc37.ppc64le"
@@ -613,7 +613,7 @@
       "evra": "1.3.1-52.fc37.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.ppc64le"
@@ -745,16 +745,16 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libstdc++": {
       "evra": "12.2.1-2.fc37.ppc64le"
@@ -805,7 +805,7 @@
       "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.31-1.fc37.ppc64le"
+      "evra": "4.4.33-1.fc37.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.ppc64le"
@@ -1102,7 +1102,7 @@
       "evra": "1.7.4.2-3.fc37.ppc64le"
     },
     "sqlite-libs": {
-      "evra": "3.39.2-2.fc37.ppc64le"
+      "evra": "3.40.0-1.fc37.ppc64le"
     },
     "squashfs-tools": {
       "evra": "4.5.1-2.fc37.ppc64le"
@@ -1111,31 +1111,31 @@
       "evra": "0.1.4-1.fc37.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.0-2.fc37.ppc64le"
+      "evra": "2.8.1-1.fc37.ppc64le"
     },
     "stalld": {
       "evra": "1.16-2.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-21T20:56:51Z",
+    "generated": "2022-11-22T20:54:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-20T14:26:10Z"
+        "generated": "2022-11-21T22:16:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-21T01:03:06Z"
+        "generated": "2022-11-22T01:13:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4fd540ccb3..1c2f654074 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -442,13 +442,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.8-300.fc37.s390x"
+      "evra": "6.0.9-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.8-300.fc37.s390x"
+      "evra": "6.0.9-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.8-300.fc37.s390x"
+      "evra": "6.0.9-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -469,7 +469,7 @@
       "evra": "0.9.0-3.fc37.s390x"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc37.1.s390x"
+      "evra": "1.19.2-13.fc37.s390x"
     },
     "less": {
       "evra": "590-5.fc37.s390x"
@@ -571,7 +571,7 @@
       "evra": "1.3.1-52.fc37.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "libjose": {
       "evra": "11-6.fc37.s390x"
@@ -697,16 +697,16 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "libstdc++": {
       "evra": "12.2.1-2.fc37.s390x"
@@ -754,7 +754,7 @@
       "evra": "2:4.17.3-0.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.31-1.fc37.s390x"
+      "evra": "4.4.33-1.fc37.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.s390x"
@@ -1033,7 +1033,7 @@
       "evra": "1.7.4.2-3.fc37.s390x"
     },
     "sqlite-libs": {
-      "evra": "3.39.2-2.fc37.s390x"
+      "evra": "3.40.0-1.fc37.s390x"
     },
     "squashfs-tools": {
       "evra": "4.5.1-2.fc37.s390x"
@@ -1042,31 +1042,31 @@
       "evra": "0.1.4-1.fc37.s390x"
     },
     "sssd-ad": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-client": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-common": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.0-2.fc37.s390x"
+      "evra": "2.8.1-1.fc37.s390x"
     },
     "stalld": {
       "evra": "1.16-2.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-21T20:55:58Z",
+    "generated": "2022-11-22T20:53:36Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-20T14:25:32Z"
+        "generated": "2022-11-21T22:15:57Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-21T01:03:08Z"
+        "generated": "2022-11-22T01:13:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 25045c1517..298107de18 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.8-300.fc37.x86_64"
+      "evra": "6.0.9-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.8-300.fc37.x86_64"
+      "evra": "6.0.9-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.8-300.fc37.x86_64"
+      "evra": "6.0.9-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -514,7 +514,7 @@
       "evra": "0.9.0-3.fc37.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-11.fc37.1.x86_64"
+      "evra": "1.19.2-13.fc37.x86_64"
     },
     "less": {
       "evra": "590-5.fc37.x86_64"
@@ -625,7 +625,7 @@
       "evra": "1.3.1-52.fc37.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.x86_64"
@@ -754,16 +754,16 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "libstdc++": {
       "evra": "12.2.1-2.fc37.x86_64"
@@ -814,7 +814,7 @@
       "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.31-1.fc37.x86_64"
+      "evra": "4.4.33-1.fc37.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.x86_64"
@@ -1108,7 +1108,7 @@
       "evra": "1.7.4.2-3.fc37.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.39.2-2.fc37.x86_64"
+      "evra": "3.40.0-1.fc37.x86_64"
     },
     "squashfs-tools": {
       "evra": "4.5.1-2.fc37.x86_64"
@@ -1117,31 +1117,31 @@
       "evra": "0.1.4-1.fc37.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-client": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-common": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.0-2.fc37.x86_64"
+      "evra": "2.8.1-1.fc37.x86_64"
     },
     "stalld": {
       "evra": "1.16-2.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-21T20:55:57Z",
+    "generated": "2022-11-22T20:53:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-20T14:27:28Z"
+        "generated": "2022-11-21T22:16:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-21T01:03:11Z"
+        "generated": "2022-11-22T01:13:50Z"
       }
     }
   }

From b89f373e6bff3e4810562661697f6e9fb575ba92 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 23 Nov 2022 22:15:10 +0000
Subject: [PATCH 1300/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/272/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 487e38a09b..873d6e8023 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -118,7 +118,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc37.aarch64"
+      "evra": "2:2.1.5-1.fc37.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.aarch64"
     },
     "dracut": {
-      "evra": "057-3.fc37.aarch64"
+      "evra": "057-5.fc37.aarch64"
     },
     "dracut-network": {
-      "evra": "057-3.fc37.aarch64"
+      "evra": "057-5.fc37.aarch64"
     },
     "dracut-squash": {
-      "evra": "057-3.fc37.aarch64"
+      "evra": "057-5.fc37.aarch64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.aarch64"
@@ -1229,16 +1229,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-22T20:53:37Z",
+    "generated": "2022-11-23T20:53:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-21T22:16:15Z"
+        "generated": "2022-11-22T22:15:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-22T01:13:40Z"
+        "generated": "2022-11-23T01:06:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b64b15e600..79b69a66a9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -118,7 +118,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc37.ppc64le"
+      "evra": "2:2.1.5-1.fc37.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.ppc64le"
     },
     "dracut": {
-      "evra": "057-3.fc37.ppc64le"
+      "evra": "057-5.fc37.ppc64le"
     },
     "dracut-network": {
-      "evra": "057-3.fc37.ppc64le"
+      "evra": "057-5.fc37.ppc64le"
     },
     "dracut-squash": {
-      "evra": "057-3.fc37.ppc64le"
+      "evra": "057-5.fc37.ppc64le"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.ppc64le"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-22T20:54:41Z",
+    "generated": "2022-11-23T20:54:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-21T22:16:04Z"
+        "generated": "2022-11-22T22:15:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-22T01:13:45Z"
+        "generated": "2022-11-23T01:07:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1c2f654074..420a5dc35f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -115,7 +115,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc37.s390x"
+      "evra": "2:2.1.5-1.fc37.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -235,13 +235,13 @@
       "evra": "4.2-4.fc37.s390x"
     },
     "dracut": {
-      "evra": "057-3.fc37.s390x"
+      "evra": "057-5.fc37.s390x"
     },
     "dracut-network": {
-      "evra": "057-3.fc37.s390x"
+      "evra": "057-5.fc37.s390x"
     },
     "dracut-squash": {
-      "evra": "057-3.fc37.s390x"
+      "evra": "057-5.fc37.s390x"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.s390x"
@@ -1166,16 +1166,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-22T20:53:36Z",
+    "generated": "2022-11-23T20:53:33Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-21T22:15:57Z"
+        "generated": "2022-11-22T22:14:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-22T01:13:48Z"
+        "generated": "2022-11-23T01:07:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 298107de18..ca7c6e5e71 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -118,7 +118,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.4-3.fc37.x86_64"
+      "evra": "2:2.1.5-1.fc37.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.x86_64"
     },
     "dracut": {
-      "evra": "057-3.fc37.x86_64"
+      "evra": "057-5.fc37.x86_64"
     },
     "dracut-network": {
-      "evra": "057-3.fc37.x86_64"
+      "evra": "057-5.fc37.x86_64"
     },
     "dracut-squash": {
-      "evra": "057-3.fc37.x86_64"
+      "evra": "057-5.fc37.x86_64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.x86_64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-22T20:53:45Z",
+    "generated": "2022-11-23T20:53:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-21T22:16:48Z"
+        "generated": "2022-11-22T22:15:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-22T01:13:50Z"
+        "generated": "2022-11-23T01:07:07Z"
       }
     }
   }

From bc1ff01c11c82d32fb69b98f214269c0875ab495 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 9 Nov 2022 17:49:51 +0800
Subject: [PATCH 1301/2157] networking/tests: add no-persist-ip and
 rd-net-timeout-carrier cases

- Verify `coreos.no_persist_ip` karg will disable initramfs network
propagation
- Verify nm-initrd-generator supports `rd.net.timeout.carrier=`
---
 tests/kola/networking/no-persist-ip           | 36 +++++++++++++++
 .../rd-net-timeout-carrier/config.bu          |  6 +++
 .../rd-net-timeout-carrier/data/commonlib.sh  |  1 +
 .../networking/rd-net-timeout-carrier/test.sh | 45 +++++++++++++++++++
 4 files changed, 88 insertions(+)
 create mode 100755 tests/kola/networking/no-persist-ip
 create mode 100644 tests/kola/networking/rd-net-timeout-carrier/config.bu
 create mode 120000 tests/kola/networking/rd-net-timeout-carrier/data/commonlib.sh
 create mode 100755 tests/kola/networking/rd-net-timeout-carrier/test.sh

diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
new file mode 100755
index 0000000000..fd87b54934
--- /dev/null
+++ b/tests/kola/networking/no-persist-ip
@@ -0,0 +1,36 @@
+#!/bin/bash
+
+# This test verifies that the coreos.no_persist_ip kernel argument will
+# prevent propagating kernel argument based networking configuration into
+# the real root. It does this by providing karg static networking config
+# for eth1 and then verifying that DHCP is used in the real root.
+
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 1 NIC for this test
+##   additionalNics: 1
+##   # The functionality we're testing here and the configuration for the NIC.
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
+##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: !s390x
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Verify eth1 gets ip address via dhcp
+nic_name="eth1"
+nic_ip=$(get_ipv4_for_nic ${nic_name})
+if [ ${nic_ip} != "10.0.2.31" ]; then
+    fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is 10.0.2.31"
+fi
+ok "get ${nic_name} ip is 10.0.2.31"
+
+if ! journalctl -b -u coreos-teardown-initramfs | grep -q "info: skipping propagating initramfs settings"; then
+    fatal "Error: can not get log: (info: skipping propagating initramfs settings)"
+fi
+ok "test coreos.no_persist_ip disable initramfs network propagation"
diff --git a/tests/kola/networking/rd-net-timeout-carrier/config.bu b/tests/kola/networking/rd-net-timeout-carrier/config.bu
new file mode 100644
index 0000000000..f1acb823b0
--- /dev/null
+++ b/tests/kola/networking/rd-net-timeout-carrier/config.bu
@@ -0,0 +1,6 @@
+variant: fcos
+version: 1.4.0
+kernel_arguments:
+  should_exist:
+    - rd.net.timeout.carrier=15
+    - rd.neednet=1
diff --git a/tests/kola/networking/rd-net-timeout-carrier/data/commonlib.sh b/tests/kola/networking/rd-net-timeout-carrier/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/networking/rd-net-timeout-carrier/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
new file mode 100755
index 0000000000..57b7324a3d
--- /dev/null
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -0,0 +1,45 @@
+#!/bin/bash
+
+# This test verifies that NetworkManager supports configuring the
+# carrier timeout via the `rd.net.timeout.carrier=` karg. Without
+# recreating an environment that requires this setting to be set
+# (which would be hard to do), we'll test this by just making sure
+# that setting the kernel argument ensures the runtime configuration
+# file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
+# 
+# Checking that this file gets created is also tricky because we
+# `rm -rf /run/NetworkManager` in coreos-teardown-initramfs on first boot,
+# so we'll workaround that by setting the karg permanently and then
+# performing a reboot so we can check on the second boot if the file exists.
+#
+# See:
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1917773
+# - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/e300138892ee0fc3824d38b527b60103a01758ab#
+
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu-unpriv
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      ok "first boot"
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+  
+  rebooted)
+      ok "second boot"
+      grep rd.net.timeout.carrier=15 /proc/cmdline
+      
+      generator_conf="/run/NetworkManager/conf.d/15-carrier-timeout.conf"
+      if [ ! -f ${generator_conf} ]; then
+        fatal "Error: can not generate ${generator_conf} with karg rd.net.timeout.carrier"
+      fi
+      ok "NM generated rd.net.timeout.carrier configuration in the initramfs"
+      ;;
+
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From 1cb69610e5d16ded56946040b3186f2a824576f0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 23 Nov 2022 22:20:09 -0500
Subject: [PATCH 1302/2157] manifests/fedora-coreos-base: add GPU firmware
 packages

The files provided by these RPMs used to be included in the
linux-firmware package, but were recently broken out into
their own subpackages as recommends. Let's name them here
so we get them back in Fedora CoreOS again.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1345
---
 manifest-lock.aarch64.json        | 9 +++++++++
 manifest-lock.ppc64le.json        | 9 +++++++++
 manifest-lock.s390x.json          | 9 +++++++++
 manifest-lock.x86_64.json         | 9 +++++++++
 manifests/fedora-coreos-base.yaml | 2 ++
 5 files changed, 38 insertions(+)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 873d6e8023..74bc8ca257 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.21-1.fc37.aarch64"
     },
+    "amd-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "attr": {
       "evra": "2.5.1-5.fc37.aarch64"
     },
@@ -414,6 +417,9 @@
     "inih": {
       "evra": "56-2.fc37.aarch64"
     },
+    "intel-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "iproute": {
       "evra": "5.18.0-2.fc37.aarch64"
     },
@@ -912,6 +918,9 @@
     "numactl-libs": {
       "evra": "2.0.14-6.fc37.aarch64"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.aarch64"
     },
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 79b69a66a9..1525e70d8b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.21-1.fc37.ppc64le"
     },
+    "amd-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "attr": {
       "evra": "2.5.1-5.fc37.ppc64le"
     },
@@ -408,6 +411,9 @@
     "inih": {
       "evra": "56-2.fc37.ppc64le"
     },
+    "intel-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "iproute": {
       "evra": "5.18.0-2.fc37.ppc64le"
     },
@@ -909,6 +915,9 @@
     "numactl-libs": {
       "evra": "2.0.14-6.fc37.ppc64le"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.ppc64le"
     },
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 420a5dc35f..def6a505b8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.21-1.fc37.s390x"
     },
+    "amd-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "attr": {
       "evra": "2.5.1-5.fc37.s390x"
     },
@@ -378,6 +381,9 @@
     "inih": {
       "evra": "56-2.fc37.s390x"
     },
+    "intel-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "iproute": {
       "evra": "5.18.0-2.fc37.s390x"
     },
@@ -852,6 +858,9 @@
     "nss-altfiles": {
       "evra": "2.18.1-21.fc37.s390x"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.s390x"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ca7c6e5e71..313a63b53a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -36,6 +36,9 @@
     "alternatives": {
       "evra": "1.21-1.fc37.x86_64"
     },
+    "amd-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "attr": {
       "evra": "2.5.1-5.fc37.x86_64"
     },
@@ -420,6 +423,9 @@
     "inih": {
       "evra": "56-2.fc37.x86_64"
     },
+    "intel-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "iproute": {
       "evra": "5.18.0-2.fc37.x86_64"
     },
@@ -924,6 +930,9 @@
     "numactl-libs": {
       "evra": "2.0.14-6.fc37.x86_64"
     },
+    "nvidia-gpu-firmware": {
+      "evra": "20221109-144.fc37.noarch"
+    },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.x86_64"
     },
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index f774d0b912..2c0b7ef6e4 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -163,6 +163,8 @@ packages:
   # In F35+ need `iptables-legacy` package
   # See https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
   - iptables-legacy
+  # GPU Firmware files (not broken out into subpackage of linux-firmware in RHEL yet)
+  - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
 
 
 # This thing is crying out to be pulled into systemd, but that hasn't happened

From 1a775a8b37de0304040bdd7e76373ae40e403924 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 25 Nov 2022 09:40:39 +0800
Subject: [PATCH 1303/2157] tests: fix skip no-persist-ip on s390x

---
 tests/kola/networking/no-persist-ip | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index fd87b54934..96cbc3ef7b 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -16,7 +16,7 @@
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
 ##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: !s390x
+##   architectures: "!s390x"
 
 set -xeuo pipefail
 

From eff13f4e86a5858c206a8a1088b2db245ad4cf4f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 25 Nov 2022 17:19:48 -0500
Subject: [PATCH 1304/2157] overrides: pin to grub2-2.06-63.fc37

Looks like https://github.com/coreos/fedora-coreos-tracker/issues/1352
has reached f37. Pin it for now to unblock lockfile bumps.
---
 manifest-lock.overrides.aarch64.yaml | 31 +++++++++++++++++++++
 manifest-lock.overrides.x86_64.yaml  | 41 ++++++++++++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 manifest-lock.overrides.aarch64.yaml
 create mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
new file mode 100644
index 0000000000..4cfe3c90eb
--- /dev/null
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -0,0 +1,31 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  grub2-common:
+    evra: 1:2.06-63.fc37.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-tools-minimal:
+    evra: 1:2.06-63.fc37.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-efi-aa64:
+    evra: 1:2.06-63.fc37.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-tools:
+    evra: 1:2.06-63.fc37.aarch64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
new file mode 100644
index 0000000000..e7d42e89bd
--- /dev/null
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -0,0 +1,41 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  grub2-pc-modules:
+    evra: 1:2.06-63.fc37.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-common:
+    evra: 1:2.06-63.fc37.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-tools-minimal:
+    evra: 1:2.06-63.fc37.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-efi-x64:
+    evra: 1:2.06-63.fc37.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-pc:
+    evra: 1:2.06-63.fc37.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin
+  grub2-tools:
+    evra: 1:2.06-63.fc37.x86_64
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
+      type: pin

From fa063e0c4f9619124eb1e7070fe0b4b69b94f1dc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 26 Nov 2022 22:14:23 +0000
Subject: [PATCH 1305/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/275/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 38 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 61 insertions(+), 61 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 74bc8ca257..02935e5206 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc37.aarch64"
+      "evra": "1.3.0-1.fc37.aarch64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.aarch64"
@@ -139,7 +139,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.9-3.fc37.aarch64"
+      "evra": "1.6.10-1.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -370,13 +370,13 @@
       "evra": "2.74.1-2.fc37.aarch64"
     },
     "glibc": {
-      "evra": "2.36-7.fc37.aarch64"
+      "evra": "2.36-8.fc37.aarch64"
     },
     "glibc-common": {
-      "evra": "2.36-7.fc37.aarch64"
+      "evra": "2.36-8.fc37.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-7.fc37.aarch64"
+      "evra": "2.36-8.fc37.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.aarch64"
@@ -598,7 +598,7 @@
       "evra": "1.5-1.fc37.aarch64"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc37.aarch64"
+      "evra": "12.2.1-4.fc37.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.1-4.fc37.aarch64"
@@ -679,7 +679,7 @@
       "evra": "1.2.2-2.fc37.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.49.0-1.fc37.aarch64"
+      "evra": "1.51.0-1.fc37.aarch64"
     },
     "libnl3": {
       "evra": "3.7.0-2.fc37.aarch64"
@@ -763,7 +763,7 @@
       "evra": "2.8.1-1.fc37.aarch64"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc37.aarch64"
+      "evra": "12.2.1-4.fc37.aarch64"
     },
     "libtalloc": {
       "evra": "2.3.4-3.fc37.aarch64"
@@ -895,7 +895,7 @@
       "evra": "2.0-0.63.20160912git.fc37.aarch64"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc37.aarch64"
+      "evra": "1.3.0-1.fc37.aarch64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc37.noarch"
+      "evra": "2:9.0.915-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc37.aarch64"
+      "evra": "2:9.0.915-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-23T20:53:35Z",
+    "generated": "2022-11-26T20:52:59Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-22T22:15:24Z"
+        "generated": "2022-11-25T15:55:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-23T01:06:57Z"
+        "generated": "2022-11-26T02:00:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1525e70d8b..b1fc2bb4cd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc37.ppc64le"
+      "evra": "1.3.0-1.fc37.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.ppc64le"
@@ -139,7 +139,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.9-3.fc37.ppc64le"
+      "evra": "1.6.10-1.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -361,13 +361,13 @@
       "evra": "2.74.1-2.fc37.ppc64le"
     },
     "glibc": {
-      "evra": "2.36-7.fc37.ppc64le"
+      "evra": "2.36-8.fc37.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.36-7.fc37.ppc64le"
+      "evra": "2.36-8.fc37.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-7.fc37.ppc64le"
+      "evra": "2.36-8.fc37.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.ppc64le"
@@ -385,19 +385,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-63.fc37.noarch"
+      "evra": "1:2.06-67.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-63.fc37.ppc64le"
+      "evra": "1:2.06-67.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-63.fc37.noarch"
+      "evra": "1:2.06-67.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-63.fc37.ppc64le"
+      "evra": "1:2.06-67.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-63.fc37.ppc64le"
+      "evra": "1:2.06-67.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -592,7 +592,7 @@
       "evra": "1.5-1.fc37.ppc64le"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc37.ppc64le"
+      "evra": "12.2.1-4.fc37.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.1-4.fc37.ppc64le"
@@ -673,7 +673,7 @@
       "evra": "1.2.2-2.fc37.ppc64le"
     },
     "libnghttp2": {
-      "evra": "1.49.0-1.fc37.ppc64le"
+      "evra": "1.51.0-1.fc37.ppc64le"
     },
     "libnl3": {
       "evra": "3.7.0-2.fc37.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.8.1-1.fc37.ppc64le"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc37.ppc64le"
+      "evra": "12.2.1-4.fc37.ppc64le"
     },
     "libtalloc": {
       "evra": "2.3.4-3.fc37.ppc64le"
@@ -892,7 +892,7 @@
       "evra": "2.0-0.63.20160912git.fc37.ppc64le"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc37.ppc64le"
+      "evra": "1.3.0-1.fc37.ppc64le"
     },
     "nettle": {
       "evra": "3.8-2.fc37.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc37.noarch"
+      "evra": "2:9.0.915-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc37.ppc64le"
+      "evra": "2:9.0.915-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-23T20:54:38Z",
+    "generated": "2022-11-26T20:53:53Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-22T22:15:26Z"
+        "generated": "2022-11-25T15:56:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-23T01:07:02Z"
+        "generated": "2022-11-26T02:00:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index def6a505b8..c9ba82be1e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc37.s390x"
+      "evra": "1.3.0-1.fc37.s390x"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.s390x"
@@ -136,7 +136,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.9-3.fc37.s390x"
+      "evra": "1.6.10-1.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -346,13 +346,13 @@
       "evra": "2.74.1-2.fc37.s390x"
     },
     "glibc": {
-      "evra": "2.36-7.fc37.s390x"
+      "evra": "2.36-8.fc37.s390x"
     },
     "glibc-common": {
-      "evra": "2.36-7.fc37.s390x"
+      "evra": "2.36-8.fc37.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-7.fc37.s390x"
+      "evra": "2.36-8.fc37.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.s390x"
@@ -556,7 +556,7 @@
       "evra": "1.11.0-3.fc37.s390x"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc37.s390x"
+      "evra": "12.2.1-4.fc37.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.1-4.fc37.s390x"
@@ -631,7 +631,7 @@
       "evra": "1.2.2-2.fc37.s390x"
     },
     "libnghttp2": {
-      "evra": "1.49.0-1.fc37.s390x"
+      "evra": "1.51.0-1.fc37.s390x"
     },
     "libnl3": {
       "evra": "3.7.0-2.fc37.s390x"
@@ -715,7 +715,7 @@
       "evra": "2.8.1-1.fc37.s390x"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc37.s390x"
+      "evra": "12.2.1-4.fc37.s390x"
     },
     "libtalloc": {
       "evra": "2.3.4-3.fc37.s390x"
@@ -838,7 +838,7 @@
       "evra": "2.0-0.63.20160912git.fc37.s390x"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc37.s390x"
+      "evra": "1.3.0-1.fc37.s390x"
     },
     "nettle": {
       "evra": "3.8-2.fc37.s390x"
@@ -1132,10 +1132,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc37.noarch"
+      "evra": "2:9.0.915-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc37.s390x"
+      "evra": "2:9.0.915-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-23T20:53:33Z",
+    "generated": "2022-11-26T20:52:52Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-22T22:14:58Z"
+        "generated": "2022-11-25T15:55:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-23T01:07:04Z"
+        "generated": "2022-11-26T02:00:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 313a63b53a..59cdc1f7a3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.2.0-6.fc37.x86_64"
+      "evra": "1.3.0-1.fc37.x86_64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.x86_64"
@@ -139,7 +139,7 @@
       "evra": "2:2.191.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.9-3.fc37.x86_64"
+      "evra": "1.6.10-1.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -370,13 +370,13 @@
       "evra": "2.74.1-2.fc37.x86_64"
     },
     "glibc": {
-      "evra": "2.36-7.fc37.x86_64"
+      "evra": "2.36-8.fc37.x86_64"
     },
     "glibc-common": {
-      "evra": "2.36-7.fc37.x86_64"
+      "evra": "2.36-8.fc37.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-7.fc37.x86_64"
+      "evra": "2.36-8.fc37.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.x86_64"
@@ -604,7 +604,7 @@
       "evra": "1.5-1.fc37.x86_64"
     },
     "libgcc": {
-      "evra": "12.2.1-2.fc37.x86_64"
+      "evra": "12.2.1-4.fc37.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.1-4.fc37.x86_64"
@@ -685,7 +685,7 @@
       "evra": "1.2.2-2.fc37.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.49.0-1.fc37.x86_64"
+      "evra": "1.51.0-1.fc37.x86_64"
     },
     "libnl3": {
       "evra": "3.7.0-2.fc37.x86_64"
@@ -772,7 +772,7 @@
       "evra": "2.8.1-1.fc37.x86_64"
     },
     "libstdc++": {
-      "evra": "12.2.1-2.fc37.x86_64"
+      "evra": "12.2.1-4.fc37.x86_64"
     },
     "libtalloc": {
       "evra": "2.3.4-3.fc37.x86_64"
@@ -907,7 +907,7 @@
       "evra": "2.0-0.63.20160912git.fc37.x86_64"
     },
     "netavark": {
-      "evra": "1.2.0-5.fc37.x86_64"
+      "evra": "1.3.0-1.fc37.x86_64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.828-1.fc37.noarch"
+      "evra": "2:9.0.915-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.828-1.fc37.x86_64"
+      "evra": "2:9.0.915-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-23T20:53:42Z",
+    "generated": "2022-11-26T20:52:57Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-22T22:15:58Z"
+        "generated": "2022-11-25T15:57:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-23T01:07:07Z"
+        "generated": "2022-11-26T02:00:57Z"
       }
     }
   }

From c6403b8f52bc058f43ec3cb6a3ddc1372542d03e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 27 Nov 2022 22:15:07 +0000
Subject: [PATCH 1306/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/276/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 02935e5206..c46c86c311 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-2.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc37.aarch64"
+      "evra": "6.0.2-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.15-3.fc37.aarch64"
+      "evra": "2022.16-1.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.15-3.fc37.aarch64"
+      "evra": "2022.16-1.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-26T20:52:59Z",
+    "generated": "2022-11-27T20:52:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-25T15:55:54Z"
+        "generated": "2022-11-26T22:19:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-26T02:00:46Z"
+        "generated": "2022-11-27T01:19:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b1fc2bb4cd..40a07ea9b2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-2.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc37.ppc64le"
+      "evra": "6.0.2-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -1042,10 +1042,10 @@
       "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.15-3.fc37.ppc64le"
+      "evra": "2022.16-1.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.15-3.fc37.ppc64le"
+      "evra": "2022.16-1.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-26T20:53:53Z",
+    "generated": "2022-11-27T20:53:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-25T15:56:13Z"
+        "generated": "2022-11-26T22:19:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-26T02:00:51Z"
+        "generated": "2022-11-27T01:19:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c9ba82be1e..86a02bf86f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-2.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc37.s390x"
+      "evra": "6.0.2-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -976,10 +976,10 @@
       "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.15-3.fc37.s390x"
+      "evra": "2022.16-1.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.15-3.fc37.s390x"
+      "evra": "2022.16-1.fc37.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-26T20:52:52Z",
+    "generated": "2022-11-27T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-25T15:55:55Z"
+        "generated": "2022-11-26T22:19:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-26T02:00:54Z"
+        "generated": "2022-11-27T01:19:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 59cdc1f7a3..8ed0ac3b49 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-2.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.0-1.fc37.x86_64"
+      "evra": "6.0.2-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.15-3.fc37.x86_64"
+      "evra": "2022.16-1.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.15-3.fc37.x86_64"
+      "evra": "2022.16-1.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-26T20:52:57Z",
+    "generated": "2022-11-27T20:52:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-25T15:57:10Z"
+        "generated": "2022-11-26T22:20:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-26T02:00:57Z"
+        "generated": "2022-11-27T01:19:13Z"
       }
     }
   }

From ccdeee0d72026b3eb80ea8f67e272994881b7b13 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 22 Nov 2022 17:41:55 +0800
Subject: [PATCH 1307/2157] tests: verify to install BIOS/PReP bootloader using
 grub2-install from target system

See https://github.com/coreos/coreos-assembler/pull/3190#issuecomment-1322147805
---
 tests/kola/boot/grub2-install | 58 +++++++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100755 tests/kola/boot/grub2-install

diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
new file mode 100755
index 0000000000..f77fd2f83d
--- /dev/null
+++ b/tests/kola/boot/grub2-install
@@ -0,0 +1,58 @@
+#!/bin/bash
+
+# Verify to install BIOS/PReP bootloader using grub2-install from 
+# the target system.
+# See:
+#  - https://github.com/coreos/coreos-assembler/pull/3190
+#  - https://github.com/coreos/coreos-assembler/issues/3148
+
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # The test is not available for aarch64 and s390x,
+##   # as aarch64 is UEFI only and s390x is not using grub2
+##   architectures: "!aarch64 !s390x"
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+boot_dev=/boot
+arch=$(arch)
+case ${arch} in
+  x86_64)
+    target=i386-pc
+    core="${boot_dev}/grub2/${target}/core.img"   
+    partition=$(findmnt -no SOURCE ${boot_dev})
+    device=$(lsblk --paths -no PKNAME ${partition})
+    # sync grub2-install parameter according to image build script
+    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
+    grub_install_args="--modules mdraid1x"
+    ;;
+  
+  ppc64le)
+    target=powerpc-ieee1275
+    core="${boot_dev}/grub2/${target}/core.elf"
+    device=$(realpath /dev/disk/by-partlabel/PowerPC-PReP-boot)
+    # sync grub2-install parameter according to image build script
+    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh    
+    grub_install_args="--no-nvram"   
+    ;;
+
+  *)
+    fatal "grub2-install testing is not supported on ${arch}"
+    ;;
+esac
+
+[ -e ${core} ] || fatal "file ${core} doesn't exist"
+core_sum=$(sha256sum ${core} | awk '{print $1}')
+
+mount -o remount,rw ${boot_dev}
+grub2-install --target ${target} --boot-directory ${boot_dev} ${grub_install_args} ${device}
+
+new_core_sum=$(sha256sum ${core} | awk '{print $1}')
+
+# compare core.img checksum before and after run grub2-install
+if [ "${core_sum}" != "${new_core_sum}" ]; then
+  fatal "Error: not using grub2-install from target system"
+fi
+ok "using grub2-install from target system on ${arch}"

From 9632ef3c1dc2565e67d50470c0a20eb1919a31f8 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 16 Nov 2022 18:18:25 +0800
Subject: [PATCH 1308/2157] networking/tests: add bridge and team tests

---
 tests/kola/networking/bridge-static-via-kargs | 30 ++++++++++
 .../team-dhcp-via-ignition/config.bu          | 44 +++++++++++++++
 .../team-dhcp-via-ignition/data/commonlib.sh  |  1 +
 .../networking/team-dhcp-via-ignition/test.sh | 56 +++++++++++++++++++
 4 files changed, 131 insertions(+)
 create mode 100755 tests/kola/networking/bridge-static-via-kargs
 create mode 100644 tests/kola/networking/team-dhcp-via-ignition/config.bu
 create mode 120000 tests/kola/networking/team-dhcp-via-ignition/data/commonlib.sh
 create mode 100755 tests/kola/networking/team-dhcp-via-ignition/test.sh

diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
new file mode 100755
index 0000000000..4603f944f8
--- /dev/null
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# Verify bridge networks works via kernel arguments.
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 2 NIC for this test
+##   additionalNics: 2
+##   # Configuration of the 2 NICs for this test
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:mybridge:br0:none bridge=br0:eth1,eth2 net.ifnames=0"
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+bridge="br0"
+
+# Verify "br0" gets ip address by `appendKernelArgs` in `kola` above
+nic_ip=$(get_ipv4_for_nic ${bridge})
+if [ "${nic_ip}" != "10.10.10.10" ]; then
+    fatal "Error: get ${bridge} ip = ${nic_ip}, expected is 10.10.10.10"
+fi
+ok "get ${bridge} ip is 10.10.10.10"
diff --git a/tests/kola/networking/team-dhcp-via-ignition/config.bu b/tests/kola/networking/team-dhcp-via-ignition/config.bu
new file mode 100644
index 0000000000..8121382a8a
--- /dev/null
+++ b/tests/kola/networking/team-dhcp-via-ignition/config.bu
@@ -0,0 +1,44 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/NetworkManager/system-connections/team0.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=team0
+          type=team
+          autoconnect-retries=1
+          interface-name=team0
+          multi-connect=1
+          [team]
+          config={"runner": {"name": "activebackup"}, "link_watch": {"name": "ethtool"}}
+          [ipv4]
+          dns-search=
+          may-fail=false
+          method=auto
+    - path: /etc/NetworkManager/system-connections/team0-slave-eth1.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=team0-slave-eth1
+          type=ethernet
+          interface-name=eth1
+          master=team0
+          slave-type=team
+          [team-port]
+          config={"prio": 100}
+    - path: /etc/NetworkManager/system-connections/team0-slave-eth2.nmconnection
+      mode: 0600
+      contents:
+        inline: |
+          [connection]
+          id=team0-slave-eth2
+          type=ethernet
+          interface-name=eth2
+          master=team0
+          slave-type=team
+          [team-port]
+          config={"prio": 100}
diff --git a/tests/kola/networking/team-dhcp-via-ignition/data/commonlib.sh b/tests/kola/networking/team-dhcp-via-ignition/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/networking/team-dhcp-via-ignition/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
new file mode 100755
index 0000000000..64abf74933
--- /dev/null
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -0,0 +1,56 @@
+#!/bin/bash
+# Verify team networking using ignition config works.
+# The ignition config refers to
+# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
+
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 2 NIC for this test
+##   additionalNics: 2
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "net.ifnames=0"
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+team="team0"
+
+# Verify team0 gets dhcp according to config.bu
+nic_ip=$(get_ipv4_for_nic ${team})
+if [ "${nic_ip}" != "10.0.2.31" ]; then
+    fatal "Error: get ${team} ip = ${nic_ip}, expected is 10.0.2.31"
+fi
+
+expected_state="setup:
+  runner: activebackup
+ports:
+  eth1
+    link watches:
+      link summary: up
+      instance[link_watch_0]:
+        name: ethtool
+        link: up
+        down count: 0
+  eth2
+    link watches:
+      link summary: up
+      instance[link_watch_0]:
+        name: ethtool
+        link: up
+        down count: 0
+runner:
+  active port: eth1"
+
+state=`teamdctl team0 state`
+if ! diff -u <(echo "$expected_state") <(echo "$state"); then
+    fatal "Error: the expected team0 network is not the same as expected"
+fi
+
+ok "networking ${team} tests"

From 370aed3e28dba800ba98ef7f9198c453013766e2 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 29 Nov 2022 14:37:16 +0800
Subject: [PATCH 1309/2157] boot/grub2-install: fix `skip s390x` issue

---
 tests/kola/boot/grub2-install | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index f77fd2f83d..b10785cb6d 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -11,7 +11,7 @@
 ##   platforms: qemu
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
-##   architectures: "!aarch64 !s390x"
+##   architectures: "!aarch64 s390x"
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh

From 7d3412cbfbd06dbaf923aaa781314de768a39dcb Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 21 Nov 2022 17:39:09 -0500
Subject: [PATCH 1310/2157] image-base.yaml: set `compressor: xz`

This will be picked up by `cosa compress` to know to compress with xz.
---
 image-base.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/image-base.yaml b/image-base.yaml
index 622ad20892..974433e2d0 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -31,3 +31,5 @@ vmware-os-type: fedora64Guest
 # We use the newest version allowed by the oldest non-EOL VMware
 # Workstation/Player/Fusion/ESXi release: https://lifecycle.vmware.com/
 vmware-hw-version: 17
+
+compressor: xz

From 362ebc07bf02928e0bb6b6853574e86bc13f8eaf Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 30 Nov 2022 10:19:30 -0500
Subject: [PATCH 1311/2157] denylist: update indentation

These entries should have had more indentation.
---
 kola-denylist.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 383eecb760..e8a4c024f2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -19,25 +19,25 @@
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
-  - ppc64le
+    - ppc64le
 - pattern: coreos.boot-mirror
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
-  - ppc64le
+    - ppc64le
 - pattern: multipath.day2
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
   arches:
-  - s390x
+    - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   snooze: 2022-12-10
   arches:
-  - s390x
+    - s390x
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   snooze: 2022-12-10
   arches:
-  - s390x
+    - s390x
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
   snooze: 2022-12-05

From bf79357a4c7783cbfeb3e6f7e4ed31bc2baf1eba Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 30 Nov 2022 10:20:29 -0500
Subject: [PATCH 1312/2157] denylist: drop rawhide denials for
 systemd-tmpfiles-setup issue

The fix has made it into systemd in rawhide so let's start
running the tests there again.
---
 kola-denylist.yaml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e8a4c024f2..a460dd0ebd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,14 +30,24 @@
     - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-12-10
   arches:
     - s390x
+  streams:
+    - next-devel
+    - next
+    - testing-devel
+    - testing
+    - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  snooze: 2022-12-10
   arches:
     - s390x
+  streams:
+    - next-devel
+    - next
+    - testing-devel
+    - testing
+    - stable
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
   snooze: 2022-12-05

From fe804a5ce83a77aa036071c724f507815c5a7681 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 1 Dec 2022 15:00:31 -0500
Subject: [PATCH 1313/2157] denylist: extend snooze for ext.config.kdump.crash
 on ppc64le

The 6.1 kernel hasn't made it out yet so we'll wait another month
for this test.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a460dd0ebd..e07a6a3ecb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
-  snooze: 2022-12-01
+  snooze: 2023-01-04
   arches:
     - ppc64le
   streams:

From 831bb1a06398f7d5224fbc38a7904f945df9e394 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 1 Dec 2022 21:51:33 +0000
Subject: [PATCH 1314/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/281/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 37 +++++++++++++++++--------------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 68 insertions(+), 71 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c46c86c311..533b15e103 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -190,7 +190,7 @@
       "evra": "2.5.0-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-2.fc37.aarch64"
+      "evra": "7.85.0-4.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.aarch64"
@@ -223,10 +223,10 @@
       "evra": "1.02.175-9.fc37.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-3.fc37.aarch64"
+      "evra": "0.9.0-4.fc37.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-3.fc37.aarch64"
+      "evra": "0.9.0-4.fc37.aarch64"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-8.fc37.aarch64"
@@ -448,7 +448,7 @@
       "evra": "20211215-3.fc37.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.9.0-1.fc37.aarch64"
+      "evra": "2:1.9.1-1.fc37.aarch64"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-6.git2a8f9d8.fc37.aarch64"
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.9-300.fc37.aarch64"
+      "evra": "6.0.10-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.9-300.fc37.aarch64"
+      "evra": "6.0.10-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.9-300.fc37.aarch64"
+      "evra": "6.0.10-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -511,7 +511,7 @@
       "evra": "30-2.fc37.aarch64"
     },
     "kpartx": {
-      "evra": "0.9.0-3.fc37.aarch64"
+      "evra": "0.9.0-4.fc37.aarch64"
     },
     "krb5-libs": {
       "evra": "1.19.2-13.fc37.aarch64"
@@ -565,7 +565,7 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-2.fc37.aarch64"
+      "evra": "7.85.0-4.fc37.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.aarch64"
@@ -811,7 +811,7 @@
       "evra": "2:4.17.3-0.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-1.fc37.aarch64"
+      "evra": "4.4.33-3.fc37.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.aarch64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.915-1.fc37.noarch"
+      "evra": "2:9.0.963-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.915-1.fc37.aarch64"
+      "evra": "2:9.0.963-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-27T20:52:41Z",
+    "generated": "2022-12-01T20:34:45Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-26T22:19:43Z"
+        "generated": "2022-11-27T22:17:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-27T01:19:00Z"
+        "generated": "2022-12-01T01:18:42Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 40a07ea9b2..4655d72db3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -190,7 +190,7 @@
       "evra": "2.5.0-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-2.fc37.ppc64le"
+      "evra": "7.85.0-4.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.ppc64le"
@@ -223,10 +223,10 @@
       "evra": "1.02.175-9.fc37.ppc64le"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-3.fc37.ppc64le"
+      "evra": "0.9.0-4.fc37.ppc64le"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-3.fc37.ppc64le"
+      "evra": "0.9.0-4.fc37.ppc64le"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-8.fc37.ppc64le"
@@ -442,7 +442,7 @@
       "evra": "20211215-3.fc37.ppc64le"
     },
     "irqbalance": {
-      "evra": "2:1.9.0-1.fc37.ppc64le"
+      "evra": "2:1.9.1-1.fc37.ppc64le"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-6.git2a8f9d8.fc37.ppc64le"
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.9-300.fc37.ppc64le"
+      "evra": "6.0.10-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.9-300.fc37.ppc64le"
+      "evra": "6.0.10-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.9-300.fc37.ppc64le"
+      "evra": "6.0.10-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -505,7 +505,7 @@
       "evra": "30-2.fc37.ppc64le"
     },
     "kpartx": {
-      "evra": "0.9.0-3.fc37.ppc64le"
+      "evra": "0.9.0-4.fc37.ppc64le"
     },
     "krb5-libs": {
       "evra": "1.19.2-13.fc37.ppc64le"
@@ -559,7 +559,7 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-2.fc37.ppc64le"
+      "evra": "7.85.0-4.fc37.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.ppc64le"
@@ -811,7 +811,7 @@
       "evra": "2:4.17.3-0.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.33-1.fc37.ppc64le"
+      "evra": "4.4.33-3.fc37.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.ppc64le"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.915-1.fc37.noarch"
+      "evra": "2:9.0.963-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.915-1.fc37.ppc64le"
+      "evra": "2:9.0.963-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-27T20:53:43Z",
+    "generated": "2022-12-01T20:34:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-26T22:19:40Z"
+        "generated": "2022-11-27T22:17:53Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-27T01:19:06Z"
+        "generated": "2022-12-01T01:18:49Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 86a02bf86f..ff1718cf13 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -187,7 +187,7 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.85.0-2.fc37.s390x"
+      "evra": "7.85.0-4.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.s390x"
@@ -220,10 +220,10 @@
       "evra": "1.02.175-9.fc37.s390x"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-3.fc37.s390x"
+      "evra": "0.9.0-4.fc37.s390x"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-3.fc37.s390x"
+      "evra": "0.9.0-4.fc37.s390x"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-8.fc37.s390x"
@@ -448,13 +448,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.9-300.fc37.s390x"
+      "evra": "6.0.10-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.9-300.fc37.s390x"
+      "evra": "6.0.10-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.9-300.fc37.s390x"
+      "evra": "6.0.10-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -472,7 +472,7 @@
       "evra": "30-2.fc37.s390x"
     },
     "kpartx": {
-      "evra": "0.9.0-3.fc37.s390x"
+      "evra": "0.9.0-4.fc37.s390x"
     },
     "krb5-libs": {
       "evra": "1.19.2-13.fc37.s390x"
@@ -526,7 +526,7 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-2.fc37.s390x"
+      "evra": "7.85.0-4.fc37.s390x"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.s390x"
@@ -594,9 +594,6 @@
     "libldb": {
       "evra": "2.6.1-1.fc37.s390x"
     },
-    "liblockfile": {
-      "evra": "1.17-3.fc37.s390x"
-    },
     "libluksmeta": {
       "evra": "9-14.fc37.s390x"
     },
@@ -760,7 +757,7 @@
       "evra": "2:4.17.3-0.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.33-1.fc37.s390x"
+      "evra": "4.4.33-3.fc37.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.s390x"
@@ -991,7 +988,7 @@
       "evra": "2:1.1.4-1.fc37.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.23.0-1.fc37.s390x"
+      "evra": "2:2.24.0-1.fc37.s390x"
     },
     "samba-client-libs": {
       "evra": "2:4.17.3-0.fc37.s390x"
@@ -1006,10 +1003,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1132,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.915-1.fc37.noarch"
+      "evra": "2:9.0.963-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.915-1.fc37.s390x"
+      "evra": "2:9.0.963-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1175,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-27T20:52:39Z",
+    "generated": "2022-12-01T20:34:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-26T22:19:38Z"
+        "generated": "2022-11-27T22:17:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-27T01:19:09Z"
+        "generated": "2022-12-01T01:18:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8ed0ac3b49..93e74a37b6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,7 +190,7 @@
       "evra": "2.5.0-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-2.fc37.x86_64"
+      "evra": "7.85.0-4.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.x86_64"
@@ -223,10 +223,10 @@
       "evra": "1.02.175-9.fc37.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-3.fc37.x86_64"
+      "evra": "0.9.0-4.fc37.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-3.fc37.x86_64"
+      "evra": "0.9.0-4.fc37.x86_64"
     },
     "device-mapper-persistent-data": {
       "evra": "0.9.0-8.fc37.x86_64"
@@ -454,7 +454,7 @@
       "evra": "20211215-3.fc37.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.9.0-1.fc37.x86_64"
+      "evra": "2:1.9.1-1.fc37.x86_64"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-6.git2a8f9d8.fc37.x86_64"
@@ -493,13 +493,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.9-300.fc37.x86_64"
+      "evra": "6.0.10-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.9-300.fc37.x86_64"
+      "evra": "6.0.10-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.9-300.fc37.x86_64"
+      "evra": "6.0.10-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -517,7 +517,7 @@
       "evra": "30-2.fc37.x86_64"
     },
     "kpartx": {
-      "evra": "0.9.0-3.fc37.x86_64"
+      "evra": "0.9.0-4.fc37.x86_64"
     },
     "krb5-libs": {
       "evra": "1.19.2-13.fc37.x86_64"
@@ -571,7 +571,7 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-2.fc37.x86_64"
+      "evra": "7.85.0-4.fc37.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.x86_64"
@@ -820,7 +820,7 @@
       "evra": "2:4.17.3-0.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-1.fc37.x86_64"
+      "evra": "4.4.33-3.fc37.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.14-1.fc37.noarch"
+      "evra": "37.15-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.915-1.fc37.noarch"
+      "evra": "2:9.0.963-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.915-1.fc37.x86_64"
+      "evra": "2:9.0.963-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-11-27T20:52:45Z",
+    "generated": "2022-12-01T20:34:41Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-26T22:20:18Z"
+        "generated": "2022-11-27T22:19:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-11-27T01:19:13Z"
+        "generated": "2022-12-01T01:18:55Z"
       }
     }
   }

From 60a1af4cae58253d3c8c4d3560787a14f20318b4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 30 Nov 2022 11:10:39 -0500
Subject: [PATCH 1315/2157] Revert: "s390x: Remove SetGID dotlockfile from
 liblockfile"

This reverts e79c4f1 and 5053bc7 (and a small part of 45434ed), which
added an exclusion for dotlockfile. The liblockfile package, which
provides dotlockfile, should no longer be getting used by s390utils
so we can drop this.

See https://github.com/coreos/fedora-coreos-tracker/issues/1253#issuecomment-1313519008
---
 manifests/bootable-rpm-ostree.yaml | 11 -----------
 manifests/fedora-coreos.yaml       |  2 --
 2 files changed, 13 deletions(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index c93ecbeec6..a1f83f191b 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -35,17 +35,6 @@ packages-x86_64:
   # firmware updates
   - fwupd
 
-postprocess:
-  # See: https://github.com/coreos/fedora-coreos-tracker/issues/1253
-  #      https://bugzilla.redhat.com/show_bug.cgi?id=2112857
-  #      https://github.com/coreos/rpm-ostree/issues/3918
-  # Temporary workaround to remove the SetGID binary from liblockfile that is
-  # pulled by the s390utils but not needed for /usr/sbin/zipl.
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    rm -f /usr/bin/dotlockfile
-
 exclude-packages:
   # Exclude kernel-debug-core to make sure that it doesn't somehow get
   # chosen as the package to satisfy the `kernel-core` dependency from
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index bc2d203551..c06e642b41 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -97,7 +97,6 @@ postprocess:
   # Docs removal comes from manifests/fedora-coreos.yaml
   # - systemd-firstboot comes from manifests/ignition-and-ostree.yaml
   # - systemd-gpt-auto-generator comes from ignition-and-ostree.yaml
-  # - dotlockfile comes from bootable-rpm-ostree.yaml
   - |
     #!/usr/bin/env bash
     set -euo pipefail
@@ -111,7 +110,6 @@ postprocess:
     # why we are removing them in the postprocess scripts here.
     # The .build-id links are pointing to binaries that we remove in other parts of the FCOS manifest.
     list_known_removed_folders=(
-      '/usr/bin/dotlockfile'
       '/usr/bin/systemd-firstboot'
       '/usr/lib/systemd/system-generators/systemd-gpt-auto-generator'
       '/usr/share/doc/'

From 79b3d01651595dc76eeb881527cf78ce6d31a51d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Dec 2022 22:57:07 +0000
Subject: [PATCH 1316/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/284/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 533b15e103..5740502159 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.10-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-01T20:34:45Z",
+    "generated": "2022-12-02T21:36:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-27T22:17:59Z"
+        "generated": "2022-12-01T21:56:16Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-01T01:18:42Z"
+        "generated": "2022-12-02T01:11:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4655d72db3..13cb2cbc8c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.10-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-01T20:34:55Z",
+    "generated": "2022-12-02T21:36:35Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-27T22:17:53Z"
+        "generated": "2022-12-01T21:55:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-01T01:18:49Z"
+        "generated": "2022-12-02T01:11:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ff1718cf13..58a5d1e938 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.10-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-01T20:34:43Z",
+    "generated": "2022-12-02T21:36:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-27T22:17:38Z"
+        "generated": "2022-12-01T21:55:29Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-01T01:18:52Z"
+        "generated": "2022-12-02T01:11:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 93e74a37b6..738bd9595b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.191.0-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.10-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-01T20:34:41Z",
+    "generated": "2022-12-02T21:36:26Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-11-27T22:19:19Z"
+        "generated": "2022-12-01T21:58:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-01T01:18:55Z"
+        "generated": "2022-12-02T01:11:49Z"
       }
     }
   }

From 49e37456a84da29aef57560681b94ccfe535e542 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 3 Dec 2022 22:11:57 +0000
Subject: [PATCH 1317/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/285/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5740502159..6df8c31fe7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -673,7 +673,7 @@
       "evra": "1.0.1-22.fc37.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc3.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc4.fc37.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.aarch64"
@@ -904,7 +904,7 @@
       "evra": "0.52.21-14.fc37.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc3.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc4.fc37.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-02T21:36:17Z",
+    "generated": "2022-12-03T20:52:42Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-01T21:56:16Z"
+        "generated": "2022-12-02T23:00:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-02T01:11:36Z"
+        "generated": "2022-12-03T01:40:10Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 13cb2cbc8c..548afde1d1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -667,7 +667,7 @@
       "evra": "1.0.1-22.fc37.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc3.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc4.fc37.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.ppc64le"
@@ -901,7 +901,7 @@
       "evra": "0.52.21-14.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc3.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc4.fc37.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-02T21:36:35Z",
+    "generated": "2022-12-03T20:53:18Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-01T21:55:39Z"
+        "generated": "2022-12-02T22:59:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-02T01:11:43Z"
+        "generated": "2022-12-03T01:40:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 58a5d1e938..cd0907188b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -622,7 +622,7 @@
       "evra": "1.0.1-22.fc37.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc3.fc37.s390x"
+      "evra": "1:2.6.2-2.rc4.fc37.s390x"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.s390x"
@@ -844,7 +844,7 @@
       "evra": "0.52.21-14.fc37.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc3.fc37.s390x"
+      "evra": "1:2.6.2-2.rc4.fc37.s390x"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-02T21:36:18Z",
+    "generated": "2022-12-03T20:52:43Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-01T21:55:29Z"
+        "generated": "2022-12-02T22:58:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-02T01:11:46Z"
+        "generated": "2022-12-03T01:40:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 738bd9595b..a3a10f164a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -679,7 +679,7 @@
       "evra": "1.0.1-22.fc37.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-1.rc3.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc4.fc37.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.x86_64"
@@ -916,7 +916,7 @@
       "evra": "0.52.21-14.fc37.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-1.rc3.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc4.fc37.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-02T21:36:26Z",
+    "generated": "2022-12-03T20:52:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-01T21:58:03Z"
+        "generated": "2022-12-02T22:59:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-02T01:11:49Z"
+        "generated": "2022-12-03T01:40:24Z"
       }
     }
   }

From 6fa87f62dca1e1cf7c2eeaebf3c356ebc0bb5a0c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Dec 2022 22:13:46 +0000
Subject: [PATCH 1318/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/287/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6df8c31fe7..2f1ba94947 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.10-300.fc37.aarch64"
+      "evra": "6.0.11-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.10-300.fc37.aarch64"
+      "evra": "6.0.11-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.10-300.fc37.aarch64"
+      "evra": "6.0.11-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-03T20:52:42Z",
+    "generated": "2022-12-05T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-02T23:00:10Z"
+        "generated": "2022-12-03T22:14:08Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-03T01:40:10Z"
+        "generated": "2022-12-05T01:23:52Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 548afde1d1..f24ae1e710 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.10-300.fc37.ppc64le"
+      "evra": "6.0.11-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.10-300.fc37.ppc64le"
+      "evra": "6.0.11-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.10-300.fc37.ppc64le"
+      "evra": "6.0.11-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-03T20:53:18Z",
+    "generated": "2022-12-05T20:53:27Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-02T22:59:04Z"
+        "generated": "2022-12-03T22:15:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-03T01:40:17Z"
+        "generated": "2022-12-05T01:23:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index cd0907188b..d50240b1db 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -448,13 +448,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.10-300.fc37.s390x"
+      "evra": "6.0.11-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.10-300.fc37.s390x"
+      "evra": "6.0.11-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.10-300.fc37.s390x"
+      "evra": "6.0.11-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-03T20:52:43Z",
+    "generated": "2022-12-05T20:52:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-02T22:58:51Z"
+        "generated": "2022-12-03T22:13:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-03T01:40:20Z"
+        "generated": "2022-12-05T01:24:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a3a10f164a..b1766d58ff 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -493,13 +493,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.10-300.fc37.x86_64"
+      "evra": "6.0.11-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.10-300.fc37.x86_64"
+      "evra": "6.0.11-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.10-300.fc37.x86_64"
+      "evra": "6.0.11-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-03T20:52:50Z",
+    "generated": "2022-12-05T20:52:48Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-02T22:59:40Z"
+        "generated": "2022-12-03T22:14:33Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-03T01:40:24Z"
+        "generated": "2022-12-05T01:24:06Z"
       }
     }
   }

From a51bd76332d50564af298eef42994055cec4bd64 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 7 Dec 2022 10:49:16 -0800
Subject: [PATCH 1319/2157] kola/files/validate-symlinks: Update broken
 symlinks list

The /usr/lib/firmware/brcm/brcmfmac43455-sdio.AW-CM256SM.txt.xz seems to be fixed and can be dropped
from the broken symlinks list
---
 tests/kola/files/validate-symlinks | 1 -
 1 file changed, 1 deletion(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 97e30fd9bc..7851048dcc 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -20,7 +20,6 @@ list_broken_symlinks_skip=(
     '/etc/swid/swidtags.d/fedoraproject.org'
     '/etc/xdg/systemd/user'
     '/usr/lib/.build-id/'
-    '/usr/lib/firmware/brcm/brcmfmac43455-sdio.AW-CM256SM.txt.xz'
     '/usr/lib/firmware/qcom/LENOVO/21BX.xz'
     '/usr/lib/modules/'
     '/usr/share/rhel/secrets/etc-pki-entitlement'

From 21f11919ca3022cca69b39684a12921ba14d0822 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 7 Dec 2022 22:09:41 +0000
Subject: [PATCH 1320/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/289/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2f1ba94947..b9c1d4db11 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1039,10 +1039,10 @@
       "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.16-1.fc37.aarch64"
+      "evra": "2022.16-2.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-1.fc37.aarch64"
+      "evra": "2022.16-2.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.963-1.fc37.noarch"
+      "evra": "2:9.0.1006-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.963-1.fc37.aarch64"
+      "evra": "2:9.0.1006-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-05T20:52:39Z",
+    "generated": "2022-12-07T20:53:06Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-03T22:14:08Z"
+        "generated": "2022-12-05T22:16:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-05T01:23:52Z"
+        "generated": "2022-12-07T01:29:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f24ae1e710..12131c8e81 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1042,10 +1042,10 @@
       "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.16-1.fc37.ppc64le"
+      "evra": "2022.16-2.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-1.fc37.ppc64le"
+      "evra": "2022.16-2.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1198,10 +1198,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.963-1.fc37.noarch"
+      "evra": "2:9.0.1006-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.963-1.fc37.ppc64le"
+      "evra": "2:9.0.1006-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-05T20:53:27Z",
+    "generated": "2022-12-07T20:53:13Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-03T22:15:20Z"
+        "generated": "2022-12-05T22:16:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-05T01:23:59Z"
+        "generated": "2022-12-07T01:29:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d50240b1db..68702de093 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,10 +973,10 @@
       "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.16-1.fc37.s390x"
+      "evra": "2022.16-2.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-1.fc37.s390x"
+      "evra": "2022.16-2.fc37.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.963-1.fc37.noarch"
+      "evra": "2:9.0.1006-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.963-1.fc37.s390x"
+      "evra": "2:9.0.1006-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-05T20:52:39Z",
+    "generated": "2022-12-07T20:52:58Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-03T22:13:49Z"
+        "generated": "2022-12-05T22:16:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-05T01:24:02Z"
+        "generated": "2022-12-07T01:29:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b1766d58ff..cc76e14e6d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1048,10 +1048,10 @@
       "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.16-1.fc37.x86_64"
+      "evra": "2022.16-2.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-1.fc37.x86_64"
+      "evra": "2022.16-2.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.963-1.fc37.noarch"
+      "evra": "2:9.0.1006-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.963-1.fc37.x86_64"
+      "evra": "2:9.0.1006-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-05T20:52:48Z",
+    "generated": "2022-12-07T20:52:55Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-03T22:14:33Z"
+        "generated": "2022-12-05T22:17:22Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-05T01:24:06Z"
+        "generated": "2022-12-07T01:30:02Z"
       }
     }
   }

From c377b7d54ad955d81dc25247d18ecbc5242a362d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Dec 2022 15:53:20 +0000
Subject: [PATCH 1321/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/291/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 25 +++++++++++--------------
 manifest-lock.ppc64le.json | 25 +++++++++++--------------
 manifest-lock.s390x.json   | 25 +++++++++++--------------
 manifest-lock.x86_64.json  | 25 +++++++++++--------------
 4 files changed, 44 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b9c1d4db11..8cbef6e9d0 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -46,10 +46,10 @@
       "evra": "3.0.9-1.fc37.aarch64"
     },
     "authselect": {
-      "evra": "1.4.0-3.fc37.aarch64"
+      "evra": "1.4.2-1.fc37.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.4.0-3.fc37.aarch64"
+      "evra": "1.4.2-1.fc37.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-18.fc37.aarch64"
@@ -174,11 +174,8 @@
     "criu": {
       "evra": "3.17.1-3.fc37.aarch64"
     },
-    "criu-libs": {
-      "evra": "3.17.1-3.fc37.aarch64"
-    },
     "crun": {
-      "evra": "1.7-1.fc37.aarch64"
+      "evra": "1.7.2-1.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -235,7 +232,7 @@
       "evra": "3.8-3.fc37.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.87-1.fc37.aarch64"
+      "evra": "2.87-3.fc37.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.aarch64"
@@ -283,13 +280,13 @@
       "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-repos": {
       "evra": "37-1.noarch"
@@ -901,7 +898,7 @@
       "evra": "3.8-2.fc37.aarch64"
     },
     "newt": {
-      "evra": "0.52.21-14.fc37.aarch64"
+      "evra": "0.52.23-1.fc37.aarch64"
     },
     "nfs-utils-coreos": {
       "evra": "1:2.6.2-2.rc4.fc37.aarch64"
@@ -1238,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-07T20:53:06Z",
+    "generated": "2022-12-09T14:33:25Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-05T22:16:35Z"
+        "generated": "2022-12-07T22:14:04Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-07T01:29:47Z"
+        "generated": "2022-12-09T01:13:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 12131c8e81..f19d159e15 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -46,10 +46,10 @@
       "evra": "3.0.9-1.fc37.ppc64le"
     },
     "authselect": {
-      "evra": "1.4.0-3.fc37.ppc64le"
+      "evra": "1.4.2-1.fc37.ppc64le"
     },
     "authselect-libs": {
-      "evra": "1.4.0-3.fc37.ppc64le"
+      "evra": "1.4.2-1.fc37.ppc64le"
     },
     "avahi-libs": {
       "evra": "0.8-18.fc37.ppc64le"
@@ -174,11 +174,8 @@
     "criu": {
       "evra": "3.17.1-3.fc37.ppc64le"
     },
-    "criu-libs": {
-      "evra": "3.17.1-3.fc37.ppc64le"
-    },
     "crun": {
-      "evra": "1.7-1.fc37.ppc64le"
+      "evra": "1.7.2-1.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -235,7 +232,7 @@
       "evra": "3.8-3.fc37.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.87-1.fc37.ppc64le"
+      "evra": "2.87-3.fc37.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.ppc64le"
@@ -274,13 +271,13 @@
       "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-repos": {
       "evra": "37-1.noarch"
@@ -898,7 +895,7 @@
       "evra": "3.8-2.fc37.ppc64le"
     },
     "newt": {
-      "evra": "0.52.21-14.fc37.ppc64le"
+      "evra": "0.52.23-1.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
       "evra": "1:2.6.2-2.rc4.fc37.ppc64le"
@@ -1241,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-07T20:53:13Z",
+    "generated": "2022-12-09T14:33:50Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-05T22:16:14Z"
+        "generated": "2022-12-07T22:14:01Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-07T01:29:54Z"
+        "generated": "2022-12-09T01:13:22Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 68702de093..0ee7d04e1d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -46,10 +46,10 @@
       "evra": "3.0.9-1.fc37.s390x"
     },
     "authselect": {
-      "evra": "1.4.0-3.fc37.s390x"
+      "evra": "1.4.2-1.fc37.s390x"
     },
     "authselect-libs": {
-      "evra": "1.4.0-3.fc37.s390x"
+      "evra": "1.4.2-1.fc37.s390x"
     },
     "avahi-libs": {
       "evra": "0.8-18.fc37.s390x"
@@ -171,11 +171,8 @@
     "criu": {
       "evra": "3.17.1-3.fc37.s390x"
     },
-    "criu-libs": {
-      "evra": "3.17.1-3.fc37.s390x"
-    },
     "crun": {
-      "evra": "1.7-1.fc37.s390x"
+      "evra": "1.7.2-1.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -232,7 +229,7 @@
       "evra": "3.8-3.fc37.s390x"
     },
     "dnsmasq": {
-      "evra": "2.87-1.fc37.s390x"
+      "evra": "2.87-3.fc37.s390x"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.s390x"
@@ -271,13 +268,13 @@
       "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-repos": {
       "evra": "37-1.noarch"
@@ -841,7 +838,7 @@
       "evra": "3.8-2.fc37.s390x"
     },
     "newt": {
-      "evra": "0.52.21-14.fc37.s390x"
+      "evra": "0.52.23-1.fc37.s390x"
     },
     "nfs-utils-coreos": {
       "evra": "1:2.6.2-2.rc4.fc37.s390x"
@@ -1172,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-07T20:52:58Z",
+    "generated": "2022-12-09T14:33:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-05T22:16:01Z"
+        "generated": "2022-12-07T22:13:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-07T01:29:58Z"
+        "generated": "2022-12-09T01:13:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cc76e14e6d..28b489271d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -46,10 +46,10 @@
       "evra": "3.0.9-1.fc37.x86_64"
     },
     "authselect": {
-      "evra": "1.4.0-3.fc37.x86_64"
+      "evra": "1.4.2-1.fc37.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.4.0-3.fc37.x86_64"
+      "evra": "1.4.2-1.fc37.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-18.fc37.x86_64"
@@ -174,11 +174,8 @@
     "criu": {
       "evra": "3.17.1-3.fc37.x86_64"
     },
-    "criu-libs": {
-      "evra": "3.17.1-3.fc37.x86_64"
-    },
     "crun": {
-      "evra": "1.7-1.fc37.x86_64"
+      "evra": "1.7.2-1.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -235,7 +232,7 @@
       "evra": "3.8-3.fc37.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.87-1.fc37.x86_64"
+      "evra": "2.87-3.fc37.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.x86_64"
@@ -283,13 +280,13 @@
       "evra": "37-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-14.noarch"
+      "evra": "37-15.noarch"
     },
     "fedora-repos": {
       "evra": "37-1.noarch"
@@ -913,7 +910,7 @@
       "evra": "3.8-2.fc37.x86_64"
     },
     "newt": {
-      "evra": "0.52.21-14.fc37.x86_64"
+      "evra": "0.52.23-1.fc37.x86_64"
     },
     "nfs-utils-coreos": {
       "evra": "1:2.6.2-2.rc4.fc37.x86_64"
@@ -1247,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-07T20:52:55Z",
+    "generated": "2022-12-09T14:33:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-05T22:17:22Z"
+        "generated": "2022-12-07T22:14:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-07T01:30:02Z"
+        "generated": "2022-12-09T01:13:30Z"
       }
     }
   }

From 3d5ec3563db2a6d4a901ad90398a21244c778f3e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 8 Dec 2022 14:23:49 -0500
Subject: [PATCH 1322/2157] tests/kola: move chrony tests under ntp toplevel

Prep for adding some tests for systemd-timesyncd.
---
 tests/kola/chrony/data/commonlib.sh                              | 1 -
 tests/kola/{ => ntp}/chrony/coreos-platform-chrony-generator     | 0
 .../chrony/coreos-platform-chrony-generator-permissions          | 0
 tests/kola/ntp/chrony/data/commonlib.sh                          | 1 +
 tests/kola/{ => ntp}/chrony/dhcp-propagation                     | 0
 5 files changed, 1 insertion(+), 1 deletion(-)
 delete mode 120000 tests/kola/chrony/data/commonlib.sh
 rename tests/kola/{ => ntp}/chrony/coreos-platform-chrony-generator (100%)
 rename tests/kola/{ => ntp}/chrony/coreos-platform-chrony-generator-permissions (100%)
 create mode 120000 tests/kola/ntp/chrony/data/commonlib.sh
 rename tests/kola/{ => ntp}/chrony/dhcp-propagation (100%)

diff --git a/tests/kola/chrony/data/commonlib.sh b/tests/kola/chrony/data/commonlib.sh
deleted file mode 120000
index 1742d51e67..0000000000
--- a/tests/kola/chrony/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
similarity index 100%
rename from tests/kola/chrony/coreos-platform-chrony-generator
rename to tests/kola/ntp/chrony/coreos-platform-chrony-generator
diff --git a/tests/kola/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
similarity index 100%
rename from tests/kola/chrony/coreos-platform-chrony-generator-permissions
rename to tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
diff --git a/tests/kola/ntp/chrony/data/commonlib.sh b/tests/kola/ntp/chrony/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ntp/chrony/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
similarity index 100%
rename from tests/kola/chrony/dhcp-propagation
rename to tests/kola/ntp/chrony/dhcp-propagation

From cadac96b5b5823aa2bb58b7a3fac3ad93384ce61 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 8 Dec 2022 14:25:32 -0500
Subject: [PATCH 1323/2157] tests/kola: stop setting container_manage_cgroup
 seboolean

This is no longer needed. See:
https://github.com/coreos/fedora-coreos-tracker/issues/397#issuecomment-1343214681
---
 tests/kola/ntp/chrony/dhcp-propagation | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 61bba23035..2be2a1ea69 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -30,9 +30,6 @@ set -xeuo pipefail
 
 test_setup() {
 
-    # This is needed to run a container with systemd
-    setsebool container_manage_cgroup 1
-
     # create a network namespace
     ip netns add container
 

From 6f6005fbd08f40af44b94839301897ec9df6a2fd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 8 Dec 2022 14:27:45 -0500
Subject: [PATCH 1324/2157] tests/kola: rework the dhcp-propagation chrony test

- stop relying on name resolution in chrony itself
    - pass `-n` to `chronyc sources`
    - this also makes it easier to support timesyncd
      with similar code in the future
- remove one of `$NTPSERVER` checks in the loop
    - we didn't really need two
---
 tests/kola/ntp/chrony/dhcp-propagation | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 2be2a1ea69..a36ffa38f8 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -28,6 +28,8 @@ set -xeuo pipefail
 # Just run on QEMU; it should work theoretically on cloud platforms, but many
 # of those have platform-specific sources which take precedence.
 
+NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+
 test_setup() {
 
     # create a network namespace
@@ -43,7 +45,6 @@ test_setup() {
 
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
-    NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
     cat <<EOF >Dockerfile
 FROM registry.fedoraproject.org/fedora:36
 RUN dnf -y install systemd dnsmasq iproute iputils \
@@ -75,16 +76,13 @@ main() {
     test_setup
 
     # check for NTP server information
-    # Name: time-c-g.nist.gov  IP address: 129.6.15.30
-    NTPSERVER=""
     retries=300
-    while [[ $retries -gt 0 && ! $NTPSERVER =~ "time-c-g.nist.gov" ]]; do
-         NTPSERVER=$(chronyc sources)
-         if [[ $NTPSERVER != *"time-c-g.nist.gov"* ]]; then
-             echo "waiting for ntp server to appear"
-             sleep 1
-             retries=$((retries - 1))
-         fi
+    while [[ $retries -gt 0 ]]; do
+         NTPSERVER=$(chronyc -n sources)
+         [[ "$NTPSERVER" =~ "$NTPHOSTIP" ]] && break
+         echo "waiting for ntp server to appear"
+         sleep 1
+         retries=$((retries - 1))
     done
 
     if [ $retries -eq  0 ]; then

From c0f9e3f0e7cc0c1e3dc1f562944e5efc1e216a3d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 8 Dec 2022 14:40:58 -0500
Subject: [PATCH 1325/2157] tests/kola: migrate to Fedora 37 based containers

Now that 37 is out we should use Fedora 37 based
containers in our tests.
---
 tests/kola/binfmt/qemu                 | 2 +-
 tests/kola/ntp/chrony/dhcp-propagation | 2 +-
 tests/kola/podman/dns/test.sh          | 2 +-
 tests/kola/podman/rootless-systemd     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 33bf0e45fd..9ab2904839 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -22,7 +22,7 @@ set -xeuo pipefail
 
 case "$(arch)" in
     aarch64|s390x)
-        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:36 arch)
+        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:37 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index a36ffa38f8..dbe137bb1a 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -46,7 +46,7 @@ test_setup() {
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:36
+FROM registry.fedoraproject.org/fedora:37
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 771e76fb56..86867567ed 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -24,7 +24,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:36 getent hosts google.com
+podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:37 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index c85130e9a3..7c093c7909 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -34,7 +34,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:36
+FROM registry.fedoraproject.org/fedora:37
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \

From d78299074e7535cd8d09c9dd941da300a3b47725 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Dec 2022 10:15:47 -0500
Subject: [PATCH 1326/2157] tests/kola: factor out chrony dhcp-propagation test
 into library

This is prep for later adding testing for systemd-timesyncd. Since
the code is in a library now we can share the setup and checking bits.
---
 tests/kola/ntp/chrony/data/ntplib.sh   |  1 +
 tests/kola/ntp/chrony/dhcp-propagation | 96 ++++++--------------------
 tests/kola/ntp/ntplib.sh               | 66 ++++++++++++++++++
 3 files changed, 88 insertions(+), 75 deletions(-)
 create mode 120000 tests/kola/ntp/chrony/data/ntplib.sh
 create mode 100644 tests/kola/ntp/ntplib.sh

diff --git a/tests/kola/ntp/chrony/data/ntplib.sh b/tests/kola/ntp/chrony/data/ntplib.sh
new file mode 120000
index 0000000000..143d668d26
--- /dev/null
+++ b/tests/kola/ntp/chrony/data/ntplib.sh
@@ -0,0 +1 @@
+../../ntplib.sh
\ No newline at end of file
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index dbe137bb1a..c6b3ba5ec6 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -1,94 +1,40 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
+#
 # This script creates two veth interfaces i.e. one for the host machine
 # and other for the container(dnsmasq server). This setup will be helpful
 # to verify the DHCP propagation of NTP servers. This will also avoid any
 # regression that might cause in RHCOS or FCOS when the upstream changes
 # come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 #
-# - tags: needs-internet
-#   - This test builds a container from remote sources.
-#   - This test uses a remote NTP server.
-# - platforms: qemu-unpriv
-#   - Limit it to qemu because some cloud providers have their own
-#     special sauce for NTP/chrony and we don't want to interfere with
-#     that.
-# - timeoutMin: 15
-#   - Pulling and building the container can take a long time if a
-#     slow mirror gets chosen.
-# - minMemory: 1536
-#   - There's a bug in dnf that is causing OOM on low memory systems:
-#     https://bugzilla.redhat.com/show_bug.cgi?id=1907030
-#     https://pagure.io/releng/issue/10935#comment-808601
+## kola: 
+##   # Add the needs-internet tag. This test builds a container from remote
+##   # sources and uses a remote NTP server.
+##   tags: "needs-internet"
+##   # Limit to qemu because some cloud providers have their own special
+##   # sauce for NTP/chrony and we don't want to interfere with that.
+##   platforms: qemu
+##   # Pulling and building the container can take a long time if a
+##   # slow mirror gets chosen. Bump the timeout to 15 minutes
+##   timeoutMin: 15
+##   # There's a bug in dnf that is causing OOM on low memory systems:
+##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
+##   # https://pagure.io/releng/issue/10935#comment-808601
+##   minMemory: 1536
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
-
-# Just run on QEMU; it should work theoretically on cloud platforms, but many
-# of those have platform-specific sources which take precedence.
-
-NTPHOSTIP=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
-
-test_setup() {
-
-    # create a network namespace
-    ip netns add container
-
-    # create veth pair and assign a namespace to veth-container
-    ip link add veth-host type veth peer name veth-container
-    ip link set veth-container netns container
-
-    # assign an IP address to the `veth-container` interface and bring it up
-    ip netns exec container ip address add 172.16.0.1/24 dev veth-container
-    ip netns exec container ip link set veth-container up
-
-    # run podman commands to set up dnsmasq server
-    pushd "$(mktemp -d)"
-    cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:37
-RUN dnf -y install systemd dnsmasq iproute iputils \
-&& dnf clean all \
-&& systemctl enable dnsmasq
-RUN echo -e 'dhcp-range=172.16.0.10,172.16.0.20,12h\nbind-interfaces\ninterface=veth-container\ndhcp-option=option:ntp-server,$NTPHOSTIP' > /etc/dnsmasq.d/dhcp
-CMD [ "/sbin/init" ]
-EOF
-
-    if is_fcos || is_rhcos8; then
-        podman build -t dnsmasq .
-    else
-        # only workaround for scos and rhel9
-        # https://github.com/openshift/os/issues/964
-        # https://bugzilla.redhat.com/show_bug.cgi?id=2123246 (revert PR when bug is fixed)
-        podman build --security-opt seccomp=/usr/share/containers/seccomp.json -t dnsmasq .
-    fi
-    popd
-    podman run -d --rm --name dnsmasq --privileged --network ns:/var/run/netns/container dnsmasq
-
-    # Tell NM to manage the `veth-host` interface and bring it up (will attempt DHCP).
-    # Do this after we start dnsmasq so we don't have to deal with DHCP timeouts.
-    nmcli dev set veth-host managed yes
-    ip link set veth-host up
-}
+. $KOLA_EXT_DATA/ntplib.sh
 
 main() {
 
-    test_setup
+    ntp_host_ip=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+
+    ntp_test_setup $ntp_host_ip
 
-    # check for NTP server information
-    retries=300
-    while [[ $retries -gt 0 ]]; do
-         NTPSERVER=$(chronyc -n sources)
-         [[ "$NTPSERVER" =~ "$NTPHOSTIP" ]] && break
-         echo "waiting for ntp server to appear"
-         sleep 1
-         retries=$((retries - 1))
-    done
+    check_for_ntp_server $ntp_host_ip "chronyc -n sources"
 
-    if [ $retries -eq  0 ]; then
-        echo "propagation of ntp server information via dhcp failed"
-        exit 1
-    fi
+    ok "chronyd got ntp servers from DHCP"
 }
 
 main
diff --git a/tests/kola/ntp/ntplib.sh b/tests/kola/ntp/ntplib.sh
new file mode 100644
index 0000000000..d9fd6aae24
--- /dev/null
+++ b/tests/kola/ntp/ntplib.sh
@@ -0,0 +1,66 @@
+#!/bin/bash
+#
+# This is a library created for our NTP tests
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+ntp_test_setup() {
+    ntp_host_ip=$1
+
+    # create a network namespace
+    ip netns add container
+
+    # create veth pair and assign a namespace to veth-container
+    ip link add veth-host type veth peer name veth-container
+    ip link set veth-container netns container
+
+    # assign an IP address to the `veth-container` interface and bring it up
+    ip netns exec container ip address add 172.16.0.1/24 dev veth-container
+    ip netns exec container ip link set veth-container up
+
+    # run podman commands to set up dnsmasq server
+    pushd "$(mktemp -d)"
+    cat <<EOF >Dockerfile
+FROM registry.fedoraproject.org/fedora:37
+RUN dnf -y install systemd dnsmasq iproute iputils \
+&& dnf clean all \
+&& systemctl enable dnsmasq
+RUN echo -e 'dhcp-range=172.16.0.10,172.16.0.20,12h\nbind-interfaces\ninterface=veth-container\ndhcp-option=option:ntp-server,$ntp_host_ip' > /etc/dnsmasq.d/dhcp
+CMD [ "/sbin/init" ]
+EOF
+
+    if is_fcos || is_rhcos8; then
+        podman build -t dnsmasq .
+    else
+        # only workaround for scos and rhel9
+        # https://github.com/openshift/os/issues/964
+        # https://bugzilla.redhat.com/show_bug.cgi?id=2123246 (revert PR when bug is fixed)
+        podman build --security-opt seccomp=/usr/share/containers/seccomp.json -t dnsmasq .
+    fi
+    popd
+    podman run -d --rm --name dnsmasq --privileged --network ns:/var/run/netns/container dnsmasq
+
+    # Tell NM to manage the `veth-host` interface and bring it up (will attempt DHCP).
+    # Do this after we start dnsmasq so we don't have to deal with DHCP timeouts.
+    nmcli dev set veth-host managed yes
+    ip link set veth-host up
+}
+
+check_for_ntp_server() {
+    ntp_host_ip=$1
+    ntp_sources_cmd=$2
+
+    ntp_server=""
+    retries=300
+    while [[ $retries -gt 0 ]]; do
+         ntp_sources=$($ntp_sources_cmd)
+         [[ "$ntp_sources" =~ "$ntp_host_ip" ]] && break
+         echo "waiting for ntp server to appear"
+         sleep 1
+         retries=$((retries - 1))
+    done
+
+    if [ $retries -eq  0 ]; then
+        fatal "propagation of ntp server information via dhcp failed"
+    fi
+}

From 19707e2b848b16b96856f137761e03d5fd233332 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Dec 2022 10:10:00 -0500
Subject: [PATCH 1327/2157] tests/kola: add dhcp-propagation test for
 systemd-timesyncd

---
 .../ntp/timesyncd/dhcp-propagation/config.bu  | 17 ++++++++
 .../dhcp-propagation/data/commonlib.sh        |  1 +
 .../timesyncd/dhcp-propagation/data/ntplib.sh |  1 +
 .../ntp/timesyncd/dhcp-propagation/test.sh    | 40 +++++++++++++++++++
 4 files changed, 59 insertions(+)
 create mode 100644 tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
 create mode 120000 tests/kola/ntp/timesyncd/dhcp-propagation/data/commonlib.sh
 create mode 120000 tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
 create mode 100755 tests/kola/ntp/timesyncd/dhcp-propagation/test.sh

diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu b/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
new file mode 100644
index 0000000000..8570cbaea0
--- /dev/null
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
@@ -0,0 +1,17 @@
+variant: fcos
+version: 1.4.0
+systemd:
+  units:
+    - name: chronyd.service
+      enabled: false
+    - name: systemd-timesyncd.service
+      enabled: true
+# There currently isn't any NetworkManager dispatcher that
+# propagates DHCP info to timesyncd in Fedora so we'll just
+# pull one that we can use from the internet.
+storage:
+  files:
+    - path: /etc/NetworkManager/dispatcher.d/30-timesyncd
+      contents:
+        source: "https://github.com/eworm-de/networkmanager-dispatcher-timesyncd/raw/master/30-timesyncd"
+      mode: 0755
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/data/commonlib.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/data/commonlib.sh
new file mode 120000
index 0000000000..7028449b11
--- /dev/null
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/data/commonlib.sh
@@ -0,0 +1 @@
+../../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
new file mode 120000
index 0000000000..8d6e2a0543
--- /dev/null
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
@@ -0,0 +1 @@
+../../../ntplib.sh
\ No newline at end of file
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
new file mode 100755
index 0000000000..8b0df2bac4
--- /dev/null
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+#
+# This script creates two veth interfaces i.e. one for the host machine
+# and other for the container(dnsmasq server). This setup will be helpful
+# to verify the DHCP propagation of NTP servers. This will also avoid any
+# regression that might cause in RHCOS or FCOS when the upstream changes
+# come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
+#
+## kola: 
+##   # Add the needs-internet tag. This test builds a container from remote
+##   # sources and uses a remote NTP server.
+##   tags: "needs-internet"
+##   # Limit to qemu because some cloud providers have their own special
+##   # sauce for NTP/chrony and we don't want to interfere with that.
+##   platforms: qemu
+##   # Pulling and building the container can take a long time if a
+##   # slow mirror gets chosen. Bump the timeout to 15 minutes
+##   timeoutMin: 15
+##   # There's a bug in dnf that is causing OOM on low memory systems:
+##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
+##   # https://pagure.io/releng/issue/10935#comment-808601
+##   minMemory: 1536
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+. $KOLA_EXT_DATA/ntplib.sh
+
+main() {
+
+    ntp_host_ip=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+
+    ntp_test_setup $ntp_host_ip
+
+    check_for_ntp_server $ntp_host_ip "timedatectl show-timesync -p ServerAddress --value"
+
+    ok "timesyncd got ntp servers from DHCP"
+}
+
+main

From 44b011046ed9936a1cd55184af9b0f1295298d5a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 9 Dec 2022 10:29:18 -0500
Subject: [PATCH 1328/2157] denylist: snooze timesyncd.dhcp-propagation until
 January

We need to wait for the fix for the SELinux denial to come through.

https://github.com/coreos/fedora-coreos-tracker/issues/1359
---
 kola-denylist.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e07a6a3ecb..20959251a7 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -54,3 +54,6 @@
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-01-05
+- pattern: ext.config.ntp.timesyncd.dhcp-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1359
+  snooze: 2023-01-15

From d423eccba63bde90dc7fb2eaf67fd24f0283bb5e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 11 Dec 2022 22:11:47 +0000
Subject: [PATCH 1329/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/294/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8cbef6e9d0..896fc4738a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.11-300.fc37.aarch64"
+      "evra": "6.0.12-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.11-300.fc37.aarch64"
+      "evra": "6.0.12-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.11-300.fc37.aarch64"
+      "evra": "6.0.12-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-09T14:33:25Z",
+    "generated": "2022-12-11T20:55:31Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-07T22:14:04Z"
+        "generated": "2022-12-09T15:58:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-09T01:13:15Z"
+        "generated": "2022-12-11T01:20:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f19d159e15..e07333217d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.11-300.fc37.ppc64le"
+      "evra": "6.0.12-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.11-300.fc37.ppc64le"
+      "evra": "6.0.12-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.11-300.fc37.ppc64le"
+      "evra": "6.0.12-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-09T14:33:50Z",
+    "generated": "2022-12-11T20:56:17Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-07T22:14:01Z"
+        "generated": "2022-12-09T15:58:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-09T01:13:22Z"
+        "generated": "2022-12-11T01:20:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0ee7d04e1d..3af3f07bc1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.11-300.fc37.s390x"
+      "evra": "6.0.12-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.11-300.fc37.s390x"
+      "evra": "6.0.12-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.11-300.fc37.s390x"
+      "evra": "6.0.12-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-09T14:33:29Z",
+    "generated": "2022-12-11T20:55:32Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-07T22:13:49Z"
+        "generated": "2022-12-09T15:58:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-09T01:13:26Z"
+        "generated": "2022-12-11T01:20:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 28b489271d..d891d426a5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.11-300.fc37.x86_64"
+      "evra": "6.0.12-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.11-300.fc37.x86_64"
+      "evra": "6.0.12-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.11-300.fc37.x86_64"
+      "evra": "6.0.12-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-09T14:33:32Z",
+    "generated": "2022-12-11T20:55:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-07T22:14:50Z"
+        "generated": "2022-12-09T15:59:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-09T01:13:30Z"
+        "generated": "2022-12-11T01:20:17Z"
       }
     }
   }

From 82ba09322745273aaf388b0f9ab0cf95852fc20b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 12 Dec 2022 15:10:08 +0100
Subject: [PATCH 1330/2157] ci/buildroot: Add +ShellCheck and file

Will be used to check Bash scripts in CI to catch common errors.

See: https://github.com/coreos/repo-templates/pull/39
See: https://github.com/openshift/os/pull/1001
---
 ci/buildroot/buildroot-reqs.txt | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index 54bec118f7..c52b1c49d9 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -52,3 +52,7 @@ clang-analyzer
 
 # We don't want zombies in our pods
 dumb-init
+
+# Used to check Bash scripts in CI
+ShellCheck
+file

From 143606c6837e20cb9fb057347edce20a375429a7 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 12 Dec 2022 15:27:14 -0500
Subject: [PATCH 1331/2157] tests/kola: drop shebang lines from libraries

The lines aren't needed for libraries and can cause warnings
like the following:

```
kola: Found non-executable file with shebang: ntplib.sh
```
---
 tests/kola/data/commonlib.sh | 2 --
 tests/kola/ntp/ntplib.sh     | 2 --
 2 files changed, 4 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 09f5b4e941..f2f72c65d9 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -1,5 +1,3 @@
-#!/bin/bash
-
 # This is a common library created for the ok & fatal function and symlinks
 # added to the data/ in each directory
 
diff --git a/tests/kola/ntp/ntplib.sh b/tests/kola/ntp/ntplib.sh
index d9fd6aae24..0e815c0920 100644
--- a/tests/kola/ntp/ntplib.sh
+++ b/tests/kola/ntp/ntplib.sh
@@ -1,5 +1,3 @@
-#!/bin/bash
-#
 # This is a library created for our NTP tests
 
 . $KOLA_EXT_DATA/commonlib.sh

From 2b0db6322b507af9fc1e0622484ce4ce3f7ca276 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 12 Dec 2022 15:23:33 -0500
Subject: [PATCH 1332/2157] tests/kola/ntp: move ntplib.sh into data directory

It's the more appropriate place for the library.
---
 tests/kola/ntp/chrony/data/ntplib.sh                     | 2 +-
 tests/kola/ntp/{ => data}/ntplib.sh                      | 0
 tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh | 2 +-
 3 files changed, 2 insertions(+), 2 deletions(-)
 rename tests/kola/ntp/{ => data}/ntplib.sh (100%)

diff --git a/tests/kola/ntp/chrony/data/ntplib.sh b/tests/kola/ntp/chrony/data/ntplib.sh
index 143d668d26..b2285dcab1 120000
--- a/tests/kola/ntp/chrony/data/ntplib.sh
+++ b/tests/kola/ntp/chrony/data/ntplib.sh
@@ -1 +1 @@
-../../ntplib.sh
\ No newline at end of file
+../../data/ntplib.sh
\ No newline at end of file
diff --git a/tests/kola/ntp/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
similarity index 100%
rename from tests/kola/ntp/ntplib.sh
rename to tests/kola/ntp/data/ntplib.sh
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
index 8d6e2a0543..07da484d88 120000
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/data/ntplib.sh
@@ -1 +1 @@
-../../../ntplib.sh
\ No newline at end of file
+../../../data/ntplib.sh
\ No newline at end of file

From 633b5a4cdefcc3cd2e0d7a7f3fe067d421d47799 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 12 Dec 2022 09:56:47 -0800
Subject: [PATCH 1333/2157] kola: fix shellcheck errors

---
 tests/kola/clhm/network-device-info | 7 +++++--
 tests/kola/files/validate-symlinks  | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
index 174211c9ca..7cfafbb726 100755
--- a/tests/kola/clhm/network-device-info
+++ b/tests/kola/clhm/network-device-info
@@ -9,7 +9,10 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-if [ ! -f /etc/issue.d/22*.issue ]; then
+for file in /etc/issue.d/22*.issue
+do
+    if [ ! -f "$file" ]; then
     fatal "Network Device info does not exist"
-fi
+    fi
+done
 ok "Network Device info exists"
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 7851048dcc..9a8f7bed6c 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -28,7 +28,7 @@ list_broken_symlinks_skip=(
 )
 
 # If RHCOS, update the array of ignored symlinks
-if [[ is_rhcos ]]; then
+if is_rhcos; then
     list_broken_symlinks_skip+=(
         '/etc/grub2-efi.cfg'
         '/etc/rhsm-host'

From 720c9f8562e747162b1bef68e342930e1874c8d2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Dec 2022 10:07:44 -0500
Subject: [PATCH 1334/2157] tests/kola: remove date conditional from
 files.console-config test

First, the dates mentioned in [1] have passed so we no longer need
this check. Second, checking the date inspecting the value from $VERSION
was actually not quite correct because `stable` lags behind so the
actual date in its $VERSION string is the date from the timestamp of
the yumrepos (which was two weeks in the past). This means the `stable`
threshold=20221209 isn't checking correctly (the current `stable` build
we are trying to build today has a version string of `37.20221127.3.0`).

Just dropping the check solves both of these problems. Once merged we'll
forward port this to the `stable` branch too.

[1] https://lists.fedoraproject.org/archives/list/coreos-status@lists.fedoraproject.org/message/GHLXX4MXNHUEAXQLK6BZN45IQYHRVQB4/
---
 tests/kola/files/console-config | 29 +++--------------------------
 1 file changed, 3 insertions(+), 26 deletions(-)

diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index 9460ac417e..426228837c 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -37,33 +37,10 @@ check_platforms_json() {
 }
 
 # Check whether platforms.json exists
-if is_fcos; then
-    # Schedule based on:
-    # https://lists.fedoraproject.org/archives/list/coreos-status@lists.fedoraproject.org/message/GHLXX4MXNHUEAXQLK6BZN45IQYHRVQB4/
-    case "$(get_fcos_stream)" in
-    next-devel) threshold=20220919 ;;
-    next) threshold=20220930 ;;
-    testing-devel|rawhide|branched) threshold=20221118 ;;
-    testing) threshold=20221125 ;;
-    stable) threshold=20221209 ;;
-    *) fatal "Unknown stream" ;;
-    esac
-    datecode=$(echo "$VERSION" | cut -f2 -d.)
-    expect_config=$([ $datecode -ge $threshold ] && echo 1 || echo 0)
-else
-    threshold=none
-    expect_config=1
-fi
-have_config=$([ -e /boot/coreos/platforms.json ] && echo 1 || echo 0)
-if [ "$have_config" != "$expect_config" ]; then
-    fatal "platforms.json exists=$have_config expected=$expect_config threshold=$threshold"
-fi
-ok "platforms.json exists=$have_config"
-if [ "$have_config" != 1 ]; then
-    # We don't automatically test whether the legacy code injects the
-    # correct parameters
-    exit 0
+if [ ! -e /boot/coreos/platforms.json ]; then
+    fatal "platforms.json doesn't exist!"
 fi
+ok "platforms.json exists!"
 
 # Check that platforms.json matches grub.cfg and kargs
 platform=$(cmdline_arg ignition.platform.id)

From 3631d996d7fdc7add10aba1c2d3f3fb95053391a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 13 Dec 2022 12:00:09 -0500
Subject: [PATCH 1335/2157] tests/kola: limit timesyncd test to FCOS

We only care about timesyncd in Fedora. It's not available elsewhere.
---
 tests/kola/ntp/timesyncd/dhcp-propagation/test.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index 8b0df2bac4..b38fff20e5 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -20,6 +20,8 @@
 ##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
+##   # We only care about timesyncd in Fedora. It's not available elsewhere.
+##   distros: fcos
 
 set -xeuo pipefail
 

From b51229a75244fe55a2571e0b427e288b5884e7b4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 13 Dec 2022 22:14:24 +0000
Subject: [PATCH 1336/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/296/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 896fc4738a..79e0f09c7c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1180,7 +1180,7 @@
       "evra": "3.2.0-3.fc37.aarch64"
     },
     "tzdata": {
-      "evra": "2022f-1.fc37.noarch"
+      "evra": "2022g-1.fc37.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-5.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-11T20:55:31Z",
+    "generated": "2022-12-13T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-09T15:58:00Z"
+        "generated": "2022-12-11T22:15:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-11T01:20:02Z"
+        "generated": "2022-12-13T01:15:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e07333217d..8ac2eaf459 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1183,7 +1183,7 @@
       "evra": "3.2.0-3.fc37.ppc64le"
     },
     "tzdata": {
-      "evra": "2022f-1.fc37.noarch"
+      "evra": "2022g-1.fc37.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-5.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-11T20:56:17Z",
+    "generated": "2022-12-13T20:53:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-09T15:58:00Z"
+        "generated": "2022-12-11T22:14:52Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-11T01:20:10Z"
+        "generated": "2022-12-13T01:15:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3af3f07bc1..651b24f119 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1111,7 +1111,7 @@
       "evra": "3.2.0-3.fc37.s390x"
     },
     "tzdata": {
-      "evra": "2022f-1.fc37.noarch"
+      "evra": "2022g-1.fc37.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-5.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-11T20:55:32Z",
+    "generated": "2022-12-13T20:52:54Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-09T15:58:52Z"
+        "generated": "2022-12-11T22:14:38Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-11T01:20:14Z"
+        "generated": "2022-12-13T01:15:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d891d426a5..de183ea624 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1189,7 +1189,7 @@
       "evra": "3.2.0-3.fc37.x86_64"
     },
     "tzdata": {
-      "evra": "2022f-1.fc37.noarch"
+      "evra": "2022g-1.fc37.noarch"
     },
     "userspace-rcu": {
       "evra": "0.13.0-5.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-11T20:55:38Z",
+    "generated": "2022-12-13T20:53:02Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-09T15:59:54Z"
+        "generated": "2022-12-11T22:15:43Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-11T01:20:17Z"
+        "generated": "2022-12-13T01:15:45Z"
       }
     }
   }

From 3e902c27839359ebf88beb30ca2f87a879ea5ab7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 14 Dec 2022 12:27:24 +0100
Subject: [PATCH 1337/2157] test/validate-symlinks: Fix RHCOS skip list

Triggered by: 633b5a4c kola: fix shellcheck errors
Fixes: 073baa99 tests/validate-symlinks: Add RHCOS logic
---
 tests/kola/files/validate-symlinks | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 9a8f7bed6c..01a964c4d5 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -29,12 +29,13 @@ list_broken_symlinks_skip=(
 
 # If RHCOS, update the array of ignored symlinks
 if is_rhcos; then
-    list_broken_symlinks_skip+=(
+    rhcos_list=(
         '/etc/grub2-efi.cfg'
         '/etc/rhsm-host'
         '/etc/pki/entitlement-host'
         '/etc/sysconfig/grub'
     )
+    list_broken_symlinks_skip+=("${rhcos_list[@]}")
 fi
 
 find /usr/ /etc/ -type l -not -path "/usr/etc*" | while read -r file_name; do

From 5451667296eca1b38508527dc6eaf71487c5f604 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 14 Dec 2022 13:54:46 +0100
Subject: [PATCH 1338/2157] test/validate-symlinks: Also run on SCOS

---
 tests/kola/files/validate-symlinks | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 01a964c4d5..8fe31570a6 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -28,7 +28,7 @@ list_broken_symlinks_skip=(
 )
 
 # If RHCOS, update the array of ignored symlinks
-if is_rhcos; then
+if is_scos || is_rhcos; then
     rhcos_list=(
         '/etc/grub2-efi.cfg'
         '/etc/rhsm-host'

From 2c4f0ab5a985d823f5b40dbd9f4fc208a6174e1f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 14 Dec 2022 12:39:16 +0100
Subject: [PATCH 1339/2157] test/validate-symlinks: Update to new kola comment
 format

---
 tests/kola/files/validate-symlinks | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 8fe31570a6..cded63efd0 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -1,13 +1,12 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "qemu" }
+## kola:
+##   # This is a read-only test that can be run with other tests.
+##   exclusive: false
+##   # This test should pass everywhere if it passes anywhere
+##   platforms: qemu
 #
 # Check if there are broken symlinks in /etc/ and /usr/.
 # See: https://github.com/coreos/fedora-coreos-config/issues/1782
-#
-# - distros: fcos
-#   - Only run on FCOS until we've tested it on RHCOS.
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
 
 set -xeuo pipefail
 

From 8433d0fc391bab9e5cab9d810b5d44d1dbc2cc78 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 14 Dec 2022 13:47:47 +0100
Subject: [PATCH 1340/2157] test/validate-symlinks: Use qemu-unpriv as platform

---
 tests/kola/files/validate-symlinks | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index cded63efd0..adaf2a94d2 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -3,7 +3,7 @@
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
 ##   # This test should pass everywhere if it passes anywhere
-##   platforms: qemu
+##   platforms: qemu-unpriv
 #
 # Check if there are broken symlinks in /etc/ and /usr/.
 # See: https://github.com/coreos/fedora-coreos-config/issues/1782

From 9c3a2d16af9810145f5a859c99c523a47c36d8e5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Dec 2022 11:58:29 +0000
Subject: [PATCH 1341/2157] =?UTF-8?q?Sync=20repo=20templates=20=E2=9A=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Sync with coreos/repo-templates@e576e284a6796c208f775a1152ed3ccc37856c25.
---
 .github/workflows/shellcheck.yml | 24 ++++++++++++++++++++++
 ci/shellcheck                    | 35 ++++++++++++++++++++++++++++++++
 2 files changed, 59 insertions(+)
 create mode 100644 .github/workflows/shellcheck.yml
 create mode 100755 ci/shellcheck

diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
new file mode 100644
index 0000000000..39bf30138f
--- /dev/null
+++ b/.github/workflows/shellcheck.yml
@@ -0,0 +1,24 @@
+# Template generated by https://github.com/coreos/repo-templates; do not edit downstream
+
+name: ShellCheck
+
+on:
+  pull_request:
+    branches: [testing-devel]
+
+permissions:
+  contents: read
+
+jobs:
+  shellcheck:
+    name: Shellcheck
+    runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      # https://github.com/actions/checkout/issues/760
+      - name: Mark git checkout as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      - name: Run ShellCheck
+        run: ci/shellcheck
diff --git a/ci/shellcheck b/ci/shellcheck
new file mode 100755
index 0000000000..4f2cb23965
--- /dev/null
+++ b/ci/shellcheck
@@ -0,0 +1,35 @@
+#!/bin/bash
+# Template generated by https://github.com/coreos/repo-templates; do not edit downstream
+
+set -euo pipefail
+
+main() {
+    local found_errors="false"
+    # Let's start with error, then we can do warning, info, style
+    local -r severity="error"
+
+    while IFS= read -r -d '' f; do
+        # Skip non-text files that are very unlikely to be shell scripts
+        if [[ "$(file -b --mime-type "${f}" | sed 's|/.*||')" != "text" ]]; then
+            continue
+        fi
+        shebang="$(head -1 "${f}")"
+        if [[ "${f}" == *.sh ]] || \
+            [[ ${shebang} =~ ^#!/.*/bash.* ]] || \
+            [[ ${shebang} =~ ^#!/.*/env\ bash ]]; then
+            echo "[+] Checking ${f}"
+            shellcheck --external-sources --shell bash --severity="${severity}" "${f}" || found_errors="true"
+            bash -n "${f}" || found_errors="true"
+        fi
+    done< <(find . -path "./.git" -prune -o -type f -print0)
+
+    if [[ "${found_errors}" != "false" ]]; then
+        echo "[+] Found errors with ShellCheck"
+        exit 1
+    fi
+
+    echo "[+] No error found with ShellCheck"
+    exit 0
+}
+
+main "${@}"

From d150c1a0c9b4592763d6ced2f890b3f18d2a9238 Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Wed, 14 Dec 2022 17:48:41 +0000
Subject: [PATCH 1342/2157] denylist: aws.nvme: extend snooze and re-apply to
 all streams

It seems as if the fix that AWS had applied is no longer working.
See: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1337660156
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 20959251a7..19148cadbb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -49,8 +49,8 @@
     - testing
     - stable
 - pattern: ext.config.platforms.aws.nvme
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1300781645
-  snooze: 2022-12-05
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1337660156
+  snooze: 2023-01-10
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-01-05

From e33f1cdb17385049d775b7448588ed23b0060ef1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Dec 2022 22:07:53 +0000
Subject: [PATCH 1343/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/297/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 79e0f09c7c..4f12d2f3cb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.0-2.fc37.aarch64"
+      "evra": "1.14.1-1.fc37.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.aarch64"
@@ -442,7 +442,7 @@
       "evra": "1.8.8-3.fc37.aarch64"
     },
     "iputils": {
-      "evra": "20211215-3.fc37.aarch64"
+      "evra": "20221126-1.fc37.aarch64"
     },
     "irqbalance": {
       "evra": "2:1.9.1-1.fc37.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.3.4-3.fc37.aarch64"
     },
     "libtasn1": {
-      "evra": "4.18.0-3.fc37.aarch64"
+      "evra": "4.19.0-1.fc37.aarch64"
     },
     "libtdb": {
       "evra": "1.4.7-3.fc37.aarch64"
@@ -1021,7 +1021,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-11.fc37.aarch64"
+      "evra": "2:7.0.0-12.fc37.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-13T20:52:54Z",
+    "generated": "2022-12-14T20:53:39Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-11T22:15:05Z"
+        "generated": "2022-12-13T22:19:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-13T01:15:24Z"
+        "generated": "2022-12-14T01:51:18Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8ac2eaf459..998926c4ac 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -304,7 +304,7 @@
       "evra": "1:4.9.0-2.fc37.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.0-2.fc37.ppc64le"
+      "evra": "1.14.1-1.fc37.ppc64le"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.ppc64le"
@@ -436,7 +436,7 @@
       "evra": "1.8.8-3.fc37.ppc64le"
     },
     "iputils": {
-      "evra": "20211215-3.fc37.ppc64le"
+      "evra": "20221126-1.fc37.ppc64le"
     },
     "irqbalance": {
       "evra": "2:1.9.1-1.fc37.ppc64le"
@@ -766,7 +766,7 @@
       "evra": "2.3.4-3.fc37.ppc64le"
     },
     "libtasn1": {
-      "evra": "4.18.0-3.fc37.ppc64le"
+      "evra": "4.19.0-1.fc37.ppc64le"
     },
     "libtdb": {
       "evra": "1.4.7-3.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-13T20:53:54Z",
+    "generated": "2022-12-14T20:54:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-11T22:14:52Z"
+        "generated": "2022-12-13T22:18:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-13T01:15:31Z"
+        "generated": "2022-12-14T01:51:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 651b24f119..75ffd01128 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -301,7 +301,7 @@
       "evra": "1:4.9.0-2.fc37.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.0-2.fc37.s390x"
+      "evra": "1.14.1-1.fc37.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.s390x"
@@ -406,7 +406,7 @@
       "evra": "1.8.8-3.fc37.s390x"
     },
     "iputils": {
-      "evra": "20211215-3.fc37.s390x"
+      "evra": "20221126-1.fc37.s390x"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-6.git2a8f9d8.fc37.s390x"
@@ -715,7 +715,7 @@
       "evra": "2.3.4-3.fc37.s390x"
     },
     "libtasn1": {
-      "evra": "4.18.0-3.fc37.s390x"
+      "evra": "4.19.0-1.fc37.s390x"
     },
     "libtdb": {
       "evra": "1.4.7-3.fc37.s390x"
@@ -955,7 +955,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-11.fc37.s390x"
+      "evra": "2:7.0.0-12.fc37.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-13T20:52:54Z",
+    "generated": "2022-12-14T20:53:29Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-11T22:14:38Z"
+        "generated": "2022-12-13T22:17:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-13T01:15:37Z"
+        "generated": "2022-12-14T01:51:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index de183ea624..22a84a3a79 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.0-2.fc37.x86_64"
+      "evra": "1.14.1-1.fc37.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.x86_64"
@@ -448,7 +448,7 @@
       "evra": "1.8.8-3.fc37.x86_64"
     },
     "iputils": {
-      "evra": "20211215-3.fc37.x86_64"
+      "evra": "20221126-1.fc37.x86_64"
     },
     "irqbalance": {
       "evra": "2:1.9.1-1.fc37.x86_64"
@@ -775,7 +775,7 @@
       "evra": "2.3.4-3.fc37.x86_64"
     },
     "libtasn1": {
-      "evra": "4.18.0-3.fc37.x86_64"
+      "evra": "4.19.0-1.fc37.x86_64"
     },
     "libtdb": {
       "evra": "1.4.7-3.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-13T20:53:02Z",
+    "generated": "2022-12-14T20:53:38Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-11T22:15:43Z"
+        "generated": "2022-12-13T22:18:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-13T01:15:45Z"
+        "generated": "2022-12-14T01:51:33Z"
       }
     }
   }

From 7c3634aae54f9df003d64ddd185cc4ae5d5a7f0d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 15 Dec 2022 22:12:35 +0000
Subject: [PATCH 1344/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/298/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 49 insertions(+), 49 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4f12d2f3cb..d99a4349aa 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -670,7 +670,7 @@
       "evra": "1.0.1-22.fc37.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc4.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc5.fc37.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.aarch64"
@@ -868,7 +868,7 @@
       "evra": "2:0.6.0-5.fc37.aarch64"
     },
     "mozjs102": {
-      "evra": "102.5.0-1.fc37.aarch64"
+      "evra": "102.6.0-1.fc37.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.aarch64"
@@ -901,7 +901,7 @@
       "evra": "0.52.23-1.fc37.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc4.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc5.fc37.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.aarch64"
@@ -946,10 +946,10 @@
       "evra": "1.81-1.fc37.aarch64"
     },
     "ostree": {
-      "evra": "2022.6-1.fc37.aarch64"
+      "evra": "2022.7-2.fc37.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.6-1.fc37.aarch64"
+      "evra": "2022.7-2.fc37.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-3.fc37.aarch64"
@@ -1063,10 +1063,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1078,10 +1078,10 @@
       "evra": "1.46-4.fc37.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-3.fc37.aarch64"
+      "evra": "2:4.12.3-4.fc37.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-3.fc37.aarch64"
+      "evra": "2:4.12.3-4.fc37.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-14T20:53:39Z",
+    "generated": "2022-12-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-13T22:19:09Z"
+        "generated": "2022-12-14T22:12:11Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-14T01:51:18Z"
+        "generated": "2022-12-15T01:20:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 998926c4ac..34d7d0a7ab 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -664,7 +664,7 @@
       "evra": "1.0.1-22.fc37.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc4.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc5.fc37.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.ppc64le"
@@ -865,7 +865,7 @@
       "evra": "20.10.20-1.fc37.ppc64le"
     },
     "mozjs102": {
-      "evra": "102.5.0-1.fc37.ppc64le"
+      "evra": "102.6.0-1.fc37.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.ppc64le"
@@ -898,7 +898,7 @@
       "evra": "0.52.23-1.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc4.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc5.fc37.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.ppc64le"
@@ -943,13 +943,13 @@
       "evra": "1.81-1.fc37.ppc64le"
     },
     "ostree": {
-      "evra": "2022.6-1.fc37.ppc64le"
+      "evra": "2022.7-2.fc37.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2022.6-1.fc37.ppc64le"
+      "evra": "2022.7-2.fc37.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2022.6-1.fc37.ppc64le"
+      "evra": "2022.7-2.fc37.ppc64le"
     },
     "p11-kit": {
       "evra": "0.24.1-3.fc37.ppc64le"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1084,10 +1084,10 @@
       "evra": "1.46-4.fc37.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-3.fc37.ppc64le"
+      "evra": "2:4.12.3-4.fc37.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-3.fc37.ppc64le"
+      "evra": "2:4.12.3-4.fc37.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-14T20:54:38Z",
+    "generated": "2022-12-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-13T22:18:02Z"
+        "generated": "2022-12-14T22:11:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-14T01:51:25Z"
+        "generated": "2022-12-15T01:21:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 75ffd01128..7a35143960 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -619,7 +619,7 @@
       "evra": "1.0.1-22.fc37.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc4.fc37.s390x"
+      "evra": "1:2.6.2-2.rc5.fc37.s390x"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.s390x"
@@ -808,7 +808,7 @@
       "evra": "20.10.20-1.fc37.s390x"
     },
     "mozjs102": {
-      "evra": "102.5.0-1.fc37.s390x"
+      "evra": "102.6.0-1.fc37.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.s390x"
@@ -841,7 +841,7 @@
       "evra": "0.52.23-1.fc37.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc4.fc37.s390x"
+      "evra": "1:2.6.2-2.rc5.fc37.s390x"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.s390x"
@@ -880,10 +880,10 @@
       "evra": "1:3.0.5-3.fc37.s390x"
     },
     "ostree": {
-      "evra": "2022.6-1.fc37.s390x"
+      "evra": "2022.7-2.fc37.s390x"
     },
     "ostree-libs": {
-      "evra": "2022.6-1.fc37.s390x"
+      "evra": "2022.7-2.fc37.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-3.fc37.s390x"
@@ -1000,10 +1000,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1015,10 +1015,10 @@
       "evra": "1.46-4.fc37.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-3.fc37.s390x"
+      "evra": "2:4.12.3-4.fc37.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-3.fc37.s390x"
+      "evra": "2:4.12.3-4.fc37.s390x"
     },
     "skopeo": {
       "evra": "1:1.10.0-3.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-14T20:53:29Z",
+    "generated": "2022-12-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-13T22:17:48Z"
+        "generated": "2022-12-14T22:10:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-14T01:51:29Z"
+        "generated": "2022-12-15T01:21:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 22a84a3a79..48e9b97e99 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -676,7 +676,7 @@
       "evra": "1.0.1-22.fc37.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc4.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc5.fc37.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.x86_64"
@@ -880,7 +880,7 @@
       "evra": "2:0.6.0-5.fc37.x86_64"
     },
     "mozjs102": {
-      "evra": "102.5.0-1.fc37.x86_64"
+      "evra": "102.6.0-1.fc37.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.x86_64"
@@ -913,7 +913,7 @@
       "evra": "0.52.23-1.fc37.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc4.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc5.fc37.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.x86_64"
@@ -958,10 +958,10 @@
       "evra": "1.81-1.fc37.x86_64"
     },
     "ostree": {
-      "evra": "2022.6-1.fc37.x86_64"
+      "evra": "2022.7-2.fc37.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.6-1.fc37.x86_64"
+      "evra": "2022.7-2.fc37.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-3.fc37.x86_64"
@@ -1072,10 +1072,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.15-1.fc37.noarch"
+      "evra": "37.16-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1087,10 +1087,10 @@
       "evra": "1.46-4.fc37.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-3.fc37.x86_64"
+      "evra": "2:4.12.3-4.fc37.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-3.fc37.x86_64"
+      "evra": "2:4.12.3-4.fc37.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-14T20:53:38Z",
+    "generated": "2022-12-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-13T22:18:41Z"
+        "generated": "2022-12-14T22:11:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-14T01:51:33Z"
+        "generated": "2022-12-15T01:21:14Z"
       }
     }
   }

From 2ae9190e5584f8f23b5a2dd0044f111d7a8680e3 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 14 Dec 2022 09:14:09 -0800
Subject: [PATCH 1345/2157] kola: Update kola tests to use new YAML format for
 kola options

---
 README.md                                     |  7 ++--
 tests/kola/README.md                          |  3 +-
 tests/kola/binfmt/qemu                        | 25 +++++++-------
 tests/kola/boot/bootupd                       |  3 +-
 tests/kola/clhm/ignition-warnings/test.sh     | 12 +++----
 tests/kola/containers/cgroups-v2              | 10 +++---
 tests/kola/disks/root-boot-ro                 |  3 +-
 tests/kola/disks/root-prjquota                |  3 +-
 tests/kola/disks/systemd-repart-service       | 12 ++++---
 tests/kola/disks/tmpfs                        |  3 +-
 tests/kola/extensions/module                  | 21 ++++++------
 tests/kola/extensions/package                 | 20 ++++++-----
 tests/kola/files/aleph-version                |  3 +-
 tests/kola/files/check-symlink                |  3 +-
 tests/kola/files/etc-passwd-group-permissions |  3 +-
 tests/kola/files/fcos_groups                  |  4 ++-
 tests/kola/files/fcos_users                   |  4 ++-
 tests/kola/files/file-directory-permissions   |  3 +-
 tests/kola/files/kernel-headers               |  3 +-
 tests/kola/files/license                      |  3 +-
 tests/kola/files/logrotate-service            |  3 +-
 tests/kola/files/remove-manifest-files        | 10 +++---
 tests/kola/files/root-immutable-bit           |  3 +-
 tests/kola/files/rpmdb-sqlite                 |  8 +++--
 tests/kola/files/setgid                       |  3 +-
 tests/kola/files/setuid                       |  3 +-
 tests/kola/files/sudoers                      |  3 +-
 tests/kola/files/system-generators            |  3 +-
 tests/kola/files/trust-cpu                    |  3 +-
 tests/kola/files/unlabeled-contexts           |  3 +-
 tests/kola/files/yum-repo-dir                 |  3 +-
 tests/kola/firewall/iptables-legacy/test.sh   |  8 +++--
 tests/kola/firewall/iptables/test.sh          |  3 +-
 tests/kola/ignition/delete-config/test.sh     |  8 ++---
 tests/kola/ignition/remote/test.sh            |  3 +-
 .../resource/authenticated-gs/test.sh         | 10 +++---
 .../resource/authenticated-s3/test.sh         | 10 +++---
 tests/kola/ignition/resource/remote/test.sh   | 14 ++++----
 tests/kola/ignition/stable-boot/test.sh       |  9 ++---
 tests/kola/ignition/systemd-disable/test.sh   | 15 +++++----
 .../ignition/systemd-enable-units/test.sh     |  7 ++--
 tests/kola/ignition/systemd-unmasking/test.sh | 16 +++++----
 tests/kola/k8s/node-e2e/master                | 10 ++++--
 tests/kola/kdump/crash/test.sh                | 18 +++++-----
 tests/kola/kdump/service                      |  3 +-
 tests/kola/kubernetes/kube-watch/test.sh      |  3 +-
 .../kola/kubernetes/systemd-env-read/test.sh  |  3 +-
 tests/kola/logging/printk                     |  3 +-
 tests/kola/multipath/multipathd-service-fix   |  6 ++--
 .../default-network-behavior-change/test.sh   |  6 ++--
 tests/kola/networking/dnsmasq-service         | 10 +++---
 .../kola/networking/force-persist-ip/test.sh  | 27 ++++++++-------
 .../hostname/fallback-hostname/test.sh        |  3 +-
 tests/kola/networking/kargs-rd-net            | 21 ++++++------
 .../networking/mtu-on-bond-ignition/test.sh   | 25 +++++++-------
 tests/kola/networking/mtu-on-bond-kargs       | 27 ++++++++-------
 tests/kola/networking/nameserver              | 14 ++++----
 tests/kola/networking/network-online-service  |  3 +-
 tests/kola/networking/nic-naming              | 12 ++++---
 tests/kola/networking/nm-dhcp-client          |  3 +-
 tests/kola/networking/nm-start                |  3 +-
 .../bootif                                    | 18 +++++-----
 .../default                                   |  3 +-
 .../prefer-ignition-networking/test.sh        | 30 ++++++++---------
 tests/kola/networking/resolv/systemd-resolved |  8 +++--
 .../chrony/coreos-platform-chrony-generator   |  4 ++-
 ...reos-platform-chrony-generator-permissions |  3 +-
 tests/kola/ntp/chrony/dhcp-propagation        |  2 +-
 .../ntp/timesyncd/dhcp-propagation/test.sh    |  2 +-
 tests/kola/podman/dns/test.sh                 | 25 +++++++-------
 tests/kola/podman/rootless-systemd            | 28 ++++++++--------
 tests/kola/reboot/test.sh                     |  3 +-
 .../root-reprovision/filesystem-only/test.sh  | 21 ++++++------
 tests/kola/root-reprovision/linear/test.sh    | 26 +++++++--------
 tests/kola/root-reprovision/luks/test.sh      | 25 +++++++-------
 tests/kola/root-reprovision/raid1/test.sh     | 26 +++++++--------
 .../root-reprovision/swap-before-root/test.sh | 33 +++++++++----------
 tests/kola/rpm-ostree-countme/test.sh         |  9 +++--
 tests/kola/rpm-ostree/container-deps          |  3 +-
 .../security/coreos-update-ca-trust/test.sh   |  3 +-
 tests/kola/security/passwd/test.sh            |  8 +++--
 tests/kola/selinux/enforcing                  |  3 +-
 tests/kola/selinux/stub-resolve-context       |  8 +++--
 tests/kola/selinux/usrlocal-context           |  3 +-
 tests/kola/swap/zram-default                  |  3 +-
 tests/kola/swap/zram-generator/test.sh        |  8 +++--
 tests/kola/toolbox/test.sh                    | 20 ++++++-----
 tests/kola/var-mount/luks/test.sh             |  6 ++--
 tests/kola/var-mount/scsi-id/test.sh          |  4 ++-
 tests/kola/var-mount/simple/test.sh           |  3 +-
 90 files changed, 457 insertions(+), 377 deletions(-)

diff --git a/README.md b/README.md
index af09c028c6..1809f276c9 100644
--- a/README.md
+++ b/README.md
@@ -160,9 +160,10 @@ Tests should follow the following format:
 
 ```bash
 #!/bin/bash
-# kola: { "exclusive": false, ... }
-# ^^----- kola option comment
-# ^^----- See all options in <https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson>
+## kola:
+##   exclusive: false
+##   platforms: aws gcp
+##   # See all options in https://coreos.github.io/coreos-assembler/kola/external-tests/#kolajson
 #
 # Short summary of what the test does, why we need it, etc.
 #
diff --git a/tests/kola/README.md b/tests/kola/README.md
index 4364c00fce..7bcce15636 100644
--- a/tests/kola/README.md
+++ b/tests/kola/README.md
@@ -12,6 +12,7 @@ so:
 
 ```bash
 #!/bin/bash
-# kola: {"distros": "fcos"}
+## kola:
+##   distros: fcos
 ...
 ```
diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 9ab2904839..b6345b55f2 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,20 +1,19 @@
 #!/bin/bash
-# kola: {"platforms": "qemu", "exclusive": false, "tags": "needs-internet", "distros": "fcos", "architectures": "aarch64 s390x"}
 # Test the x86_64 emulator on aarch64 and s390x images for now
 # https://github.com/coreos/fedora-coreos-tracker/issues/1237
 #
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - exclusive: false
-#   - This test doesn't make meaningful changes to the system and
-#     should be able to be combined with other tests.
-# - tags: needs-internet
-#   - This test pulls a container from a registry.
-# - distros:
-#   - Only run on fcos, as rhel does not support emulation
-# - architectures: aarch64 s390x
-#   - We decided to ship x86_64 emulator to only these arches for now.
-#   - Refer to the above referenced issue for more details
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # This test doesn't make meaningful changes to the system and should
+##   # be able to be combined with other tests.
+##   exclusive: false
+##   # This test pulls a container from a registry.
+##   tags: needs-internet
+##   # Only run on fcos, as rhel does not support emulation
+##   distros: fcos
+##   # We decided to ship x86_64 emulator to only these arches for now.
+##   architectures: aarch64 s390x
 
 set -xeuo pipefail
 
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index f30cf4989a..51a5ba431b 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # This is just a basic sanity check; at some point we
 # will implement "project-owned tests run in the pipeline"
 # and be able to run the existing bootupd tests:
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index e687c525c0..f9d6febbcf 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
-# kola: { "platforms": "qemu-unpriv", "allowConfigWarnings": true }
-# - platforms: qemu-unpriv
-#   - This test should pass everywhere if it passes anywhere.
-# - allowConfigWarnings: true
-#   - We intentionally exclude the Install section from a systemd unit.
-#     This is valid but not ideal, so Butane warns about it.
 # This test ensures that Ignition warnings are displayed on the console.
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu-unpriv
+##   # We intentionally exclude the Install section from a systemd unit.
+##   # This is valid but not ideal, so Butane warns about it.
+##   allowConfigWarnings: true
 
 set -xeuo pipefail
 
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index 1549393826..5f95258548 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -1,8 +1,10 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS because RHCOS does not currently support cgroupsv2
-# by default.
-# TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
+## kola:
+##   # This test only runs on FCOS because RHCOS does not currently
+##   # support cgroupsv2 by default.
+##   # TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
+##   distros: fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
index 41f81fc0d3..9857ceccdb 100755
--- a/tests/kola/disks/root-boot-ro
+++ b/tests/kola/disks/root-boot-ro
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
index 4032037114..2a2eb03a01 100755
--- a/tests/kola/disks/root-prjquota
+++ b/tests/kola/disks/root-prjquota
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index 307c8ff327..b12b6e3afb 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -1,9 +1,11 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS because the version of `systemd-udev` in RHCOS does
-# not include `systemd-repart`
-# TODO-RHCOS: consider dropping the "fcos" tag if/when `systemd-udev` in RHEL
-# starts to include `systemd-repart`
+## kola:
+##   # This test only runs on FCOS because the version of `systemd-udev` in RHCOS does
+##   # not include `systemd-repart`
+##   # TODO-RHCOS: consider dropping the "fcos" tag if/when `systemd-udev` in RHEL
+##   # starts to include `systemd-repart`
+##   distros: fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
index 8d3af04481..e2fb240fb3 100755
--- a/tests/kola/disks/tmpfs
+++ b/tests/kola/disks/tmpfs
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index 3dffd4465f..e562fc6695 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -1,16 +1,17 @@
 #!/bin/bash
+# This test ensures that we can install some common tools as OS extensions.
 set -xeuo pipefail
 
-# This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15, "minMemory": 1536 }
-#
-# This test ensures that we can install some common tools as OS extensions.
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - timeoutMin: 15
-#   - This is dependent on network and disk speed but we've seen the
-#     test take longer than 10 minutes in our aarch64 qemu tests.
+## kola:
+##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
+##   distros: fcos
+##   tags: needs-internet
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # This is dependent on network and disk speed but we've seen the
+##   # test take longer than 10 minutes in our aarch64 qemu tests.
+##   timeoutMin: 15
+##   minMemory: 1536
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index a9d9d6c6db..9c296920a4 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -1,16 +1,18 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu", "timeoutMin": 15, "minMemory": 1536 }
-#
+## kola:
+##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
+##   distros: fcos
+##   tags: needs-internet
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # This is dependent on network and disk speed but we've seen the
+##   # test take longer than 10 minutes in our aarch64 qemu tests.
+##   timeoutMin: 15
+##   minMemory: 1536
+
 # This test ensures that we can install some common tools as OS extensions.
-#
-# - timeoutMin: 15
-#   - This is dependent on network and disk speed but we've seen the
-#     test take longer than 10 minutes in our aarch64 qemu tests.
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index 3819e7b235..b5a521e4b8 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index 3c8614a5a9..ba19453713 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # Verify /etc release symlinks are valid
 # See:
 # - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
index e2d1574b13..7c6e10c3f4 100755
--- a/tests/kola/files/etc-passwd-group-permissions
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
index d2e637a063..8bf3b4b2ad 100755
--- a/tests/kola/files/fcos_groups
+++ b/tests/kola/files/fcos_groups
@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# kola: { "distros": "fcos", "exclusive": false }
+## kola:
+##   distros: fcos
+##   exclusive: false
 #
 # This performs a sanity check on system groups that are shipped
 # as part of the base OS. Those groups come in different shapes
diff --git a/tests/kola/files/fcos_users b/tests/kola/files/fcos_users
index 48716ecc4f..b097823a8d 100755
--- a/tests/kola/files/fcos_users
+++ b/tests/kola/files/fcos_users
@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# kola: { "distros": "fcos", "exclusive": false }
+## kola:
+##   distros: fcos
+##   exclusive: false
 #
 # This performs a sanity check on system users that are shipped
 # as part of the base OS. Those users come in different shapes
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index 43d38f8537..c9f541b1c8 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index ecf1f16762..2712b153e4 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # check that we are not including the kernel headers on the host
 # See:
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
diff --git a/tests/kola/files/license b/tests/kola/files/license
index 1f31ca2c08..28eafc764b 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index 8e0d1f7680..a7b53c879e 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # Test some services are enabled or disabled appropriately
 
 set -xeuo pipefail
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index f858be3a0e..69f3b32848 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -1,8 +1,10 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS bceause RHCOS does ship `info` which is a
-# Requires on a number of RHCOS packages.
-# TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
+## kola:
+##   # This test only runs on FCOS bceause RHCOS does ship `info` which is a
+##   # Requires on a number of RHCOS packages.
+##   # TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
+##   distros: fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index e4d81d8649..627e878800 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 3479ddf094..d1eef68ec9 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -1,7 +1,9 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS as the RHCOS rpmdb has not migrated to sqlite yet.
-# TODO-RHCOS: drop the "fcos" tag when RHCOS migrates to using sqlite
+## kola:
+##   # This test only runs on FCOS as the RHCOS rpmdb has not migrated to sqlite yet.
+##   # TODO-RHCOS: drop the "fcos" tag when RHCOS migrates to using sqlite
+##   distros: fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index b777dd1326..63df1b0766 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 0efd5d1148..51a0494a1e 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/sudoers b/tests/kola/files/sudoers
index 7e56a4c6cb..e8cecd57f7 100755
--- a/tests/kola/files/sudoers
+++ b/tests/kola/files/sudoers
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index 10795ae23a..b30aa790be 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
index 3c7bbf337c..b8d0274f91 100755
--- a/tests/kola/files/trust-cpu
+++ b/tests/kola/files/trust-cpu
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index bf918bb02a..be6fe589e9 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
index ff06413695..c9c079b78d 100755
--- a/tests/kola/files/yum-repo-dir
+++ b/tests/kola/files/yum-repo-dir
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index 8ef28366cd..e5153d5b04 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -1,7 +1,9 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": true }
-# This test verifies that one can configure a node to use the legacy iptables
-# backend. It is scoped to only FCOS because RHCOS only supports nft.
+## kola:
+##   # This test verifies that one can configure a node to use the legacy iptables
+##   # backend. It is scoped to only FCOS because RHCOS only supports nft.
+##   distros: fcos
+##   exclusive: true
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index d255c4a426..af6fd2c1e0 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # Verifies that the expected iptables backend is configured.
 # https://github.com/coreos/fedora-coreos-tracker/issues/676
 set -xeuo pipefail
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 185377e7b6..70233c0e4f 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -1,8 +1,8 @@
 #!/bin/bash
-# kola: { "platforms": "qemu-unpriv" }
-# - platforms: qemu-unpriv
-#   - Ideally we'd test on virtualbox and vmware, but we don't have tests
-#     there, so we mock specifically for ignition.platform.id=qemu
+## kola:
+##   # Ideally we'd test on virtualbox and vmware, but we don't have tests
+##   # there, so we mock specifically for ignition.platform.id=qemu
+##   platforms: qemu-unpriv
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 86a0e29177..8b1e6c3562 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet" }
+## kola:
+##   tags: needs-internet
 # To test https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 # remote.ign on github: inject kernelArguments and write something to /etc/testfile
 # config.ign to include remote kargsfile.ign
diff --git a/tests/kola/ignition/resource/authenticated-gs/test.sh b/tests/kola/ignition/resource/authenticated-gs/test.sh
index a3d3b50125..3f65697aa4 100755
--- a/tests/kola/ignition/resource/authenticated-gs/test.sh
+++ b/tests/kola/ignition/resource/authenticated-gs/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "gce" }
-# - tags: needs-internet
-#   - We fetch resources from GCS.
-# - platforms: gce
-#   - We authenticate to GCS with the GCE instance's credentials.
+## kola:
+##   # We fetch resources from GCS.
+##   tags: needs-internet
+##   # We authenticate to GCS with the GCE instance's credentials.
+##   platforms: gce
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
index 152eed0c73..ccf499b922 100755
--- a/tests/kola/ignition/resource/authenticated-s3/test.sh
+++ b/tests/kola/ignition/resource/authenticated-s3/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "aws" }
-# - tags: needs-internet
-#   - We fetch resources from S3.
-# - platforms: aws
-#   - We authenticate to S3 with the EC2 instance's IAM role.
+## kola:
+##   # We fetch resources from S3.
+##   tags: needs-internet
+##   # We authenticate to S3 with the EC2 instance's IAM role.
+##   platforms: aws
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 44d1ab2ee1..76faea9d52 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "noInstanceCreds": true }
-# - tags: needs-internet
-#   - We fetch resources from S3 and GCS.
-# - noInstanceCreds: don't pass AWS or GCP credentials to instance
-#   - This test verifies that Ignition can fetch anonymous resources within
-#     a cloud platform (S3 -> EC2, GCS -> GCE) when no credentials are
-#     supplied
+## kola:
+##   # We fetch resources from S3 and GCS
+##   tags: needs-internet
+##   # Don't pass AWS or GCP credentials to instance
+##   # This test verifies that Ignition can fetch anonymous resources within
+##   # a cloud platform (S3 -> EC2, GCS -> GCE) when no credentials are supplied
+##   noInstanceCreds: true
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index 5714e70337..6b72dbd6aa 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,8 +1,9 @@
 #!/bin/bash
-# kola: { "platforms": "qemu-unpriv" }
-# This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
-# We don't need to test this on every platform. If it passes in one place it
-# will pass everywhere.
+## kola:
+##   # This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
+##   # We don't need to test this on every platform. If it passes in one place it
+##   # will pass everywhere.
+##   platforms: qemu-unpriv
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 404ce44595..66917532ff 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -1,14 +1,15 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
+## kola:
+##   # This test is currently scoped to FCOS because `zincati` is only available on
+##   # FCOS.
+##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
+##   distros: fcos
+##   # We don't need to test this on every platform. If it passes in
+##   # one place it will pass everywhere.
+##   platforms: qemu-unpriv
 # This test makes sure that ignition is able to disable units
 # https://github.com/coreos/fedora-coreos-tracker/issues/392
 
-# We don't need to test this on every platform. If it passes in
-# one place it will pass everywhere.
-# This test is currently scoped to FCOS because `zincati` is only available on
-# FCOS.
-# TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index ac80c7c01a..f5658950a2 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,11 +1,12 @@
 #!/bin/bash
-# kola: { "platforms": "qemu-unpriv" }
+## kola:
+##   # We don't need to test this on every platform. If it passes in
+##   # one place it will pass everywhere.
+##   platforms: qemu-unpriv
 # This test makes sure that ignition is able to enable systemd units of
 # different types.
 # https://github.com/coreos/ignition/issues/586
 # https://github.com/systemd/systemd/pull/9901
-# We don't need to test this on every platform. If it passes in one place it
-# will pass everywhere.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 147e3c49f5..7a5c7b15be 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -1,15 +1,17 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "platforms": "qemu-unpriv" }
+## kola:
+##   # This test is currently scoped to FCOS because `dnsmasq` is not masked on
+##   # RHCOS.
+##   # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
+##   distros: fcos
+##   # We don't need to test this on every platform. If it passes in one place it
+##   # will pass everywhere.
+##   platforms: qemu-unpriv
+
 # This test makes sure that ignition is able to unmask units
 # It just so happens we have masked dnsmasq in FCOS so we can
 # test this by unmasking it.
 
-# We don't need to test this on every platform. If it passes in one place it
-# will pass everywhere.
-# This test is currently scoped to FCOS because `dnsmasq` is not masked on
-# RHCOS.
-# TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index a575717ea9..80cb9bb583 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -1,6 +1,12 @@
 #!/bin/bash
-# kola: {"minMemory": 4096, "timeoutMin": 45, "minDisk": 20, "architectures": "x86_64", "requiredTag": "k8s", "tags": "needs-internet"}
-# Just run on x86_64 for now. We'd need multi-arch images with go 1.17.
+## kola:
+##   minMemory: 4096
+##   timeoutMin: 45
+##   minDisk: 20
+##   # Just run on x86_64 for now. We'd need multi-arch images with go 1.17.
+##   architectures: x86_64
+##   requiredTag: k8s
+##   tags: needs-internet
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 02406e59a4..9f48f9e61d 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -1,14 +1,14 @@
 #!/bin/bash
 # https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
-# kola: {"minMemory": 4096, "tags": "skip-base-checks", "timeoutMin": 15}
-# - minMemory: 4096
-#   - Testing kdump requires some reserved memory for the crashkernel.
-# - tags: skip-base-checks
-#   - Skip checks for things like kernel crashes in the console logs.
-#     For this test we trigger a kernel crash on purpose.
-# - timeoutMin: 15
-#   - This test includes a few reboots and the generation of a vmcore,
-#     which can take longer than the default 10 minute timeout.
+## kola:
+##   # Testing kdump requires some reserved memory for the crashkernel.
+##   minMemory: 4096
+##   # Skip checks for things like kernel crashes in the console logs.
+##   # For this test we trigger a kernel crash on purpose.
+##   tags: skip-base-checks
+##   # This test includes a few reboots and the generation of a vmcore,
+##   # which can take longer than the default 10 minute timeout.
+##   timeoutMin: 15
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 78a9afd3b2..5e532e0bb7 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # Make sure that kdump didn't start (it's either disabled, or enabled but
 # conditional on crashkernel= karg, which we don't bake).
 
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index 90824e5fe3..e09e4f5406 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # This is for verifying that `kubernetes_file_t` labeled files can be
 # watched by systemd
 # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index d47005ff9d..9880981d5e 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
index 1996c60a38..5a70463465 100755
--- a/tests/kola/logging/printk
+++ b/tests/kola/logging/printk
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # Verify default console log level; xref https://github.com/coreos/fedora-coreos-tracker/issues/1244
 
 set -xeuo pipefail
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index 9fb9e9ed98..cbb510244b 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -1,6 +1,8 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
-# Just run on qemu since the answer is the same everywhere
+## kola:
+##   exclusive: false
+##   # Just run on qemu since the answer is the same everywhere
+##   platforms: qemu-unpriv
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 3dfde50b75..bc3bbd47d4 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "qemu-unpriv" }
-# No need to run on any other platform than QEMU.
+## kola:
+##   exclusive: false
+##   # No need to run on any other platform than QEMU.
+##   platforms: qemu-unpriv
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index a9dc3e6ccf..e25a34ea7c 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -1,8 +1,10 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS because the `dnsmasq` service on RHCOS is simply
-# disabled, not masked.
-# TODO-RHCOS: adapt test to check that `dnsmasq` is in the proper state on RHCOS
+## kola:
+##   # This test only runs on FCOS because the `dnsmasq` service on RHCOS is simply
+##   # disabled, not masked.
+##   # TODO-RHCOS: adapt test to check that `dnsmasq` is in the proper state on RHCOS
+##   distros: fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index da20c52a4c..c157de3267 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -10,20 +10,19 @@ set -xeuo pipefail
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip", "architectures": "!s390x" }
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - additionalNics: 1
-#   - Add 1 NIC for this test
-# - appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip"
-#   - The functionality we're testing here and the configuration for the NIC
-#   - We use net.ifnames=0 to disable consistent network naming here because on
-#     different firmwares (BIOS vs UEFI) the NIC names are different.
-#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# - architectures: !s390x
-#   - appendKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 1 NIC for this test
+##   additionalNics: 1
+##   # The functionality we're testing here and the configuration for the NIC
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip"
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index f54bc818bb..972752116e 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,7 +1,8 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# kola: { "platforms": "qemu" }
+## kola:
+##   platforms: qemu
 #
 # Test that the fallback hostname is `localhost`. This test
 # validates that the fallback hostname is set to `localhost`
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index f7e4aa1447..faa9152753 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -1,7 +1,14 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8", "architectures": "!s390x"}
-#
-# Veirfy rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # The functionality we're testing here.
+##   appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
+##   # appendFirstbootKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
+# Verify rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
 # by NetworkManager. Append them to kernel parameter when boot,
 # get total timeout is `timeout * retry`, 30*8(240) seconds
 # in this test scenario
@@ -9,14 +16,6 @@
 # - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
-#   - The functionality we're testing here.
-# - architectures: !s390x
-#   - appendFirstbootKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index f79618b768..997f1fe555 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,5 +1,16 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "net.ifnames=0", "architectures": "!s390x"}
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 2 NIC for this test
+##   additionalNics: 2
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: net.ifnames=0
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
 
 # Set MTU on a VLAN subinterface for the bond using ignition config and check
 # - verify MTU on the bond matches config
@@ -16,18 +27,6 @@
 # Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to
 # https://github.com/coreos/fedora-coreos-config/pull/1401
 
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - additionalNics: 2
-#   - Add 2 NIC for this test
-# - appendKernelArgs: "net.ifnames=0"
-#   - We use net.ifnames=0 to disable consistent network naming here because on
-#     different firmwares (BIOS vs UEFI) the NIC names are different.
-#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# - architectures: !s390x
-#   - appendKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 242bfe3cee..c7514a7a2f 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,5 +1,17 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "additionalNics": 2, "appendKernelArgs": "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0", "architectures": "!s390x"}
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 2 NIC for this test
+##   additionalNics: 2
+##   # Configuration of the 2 NICs for this test
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
 
 # Configuring MTU on a VLAN subinterface for the bond,
 # - verify MTU on the bond matches config
@@ -7,19 +19,6 @@
 # - verify ip address on the VLAN subinterface for the bond matches config
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
 
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - additionalNics: 2
-#   - Add 2 NIC for this test
-# - appendKernelArgs: "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"
-#   - Configuration of the 2 NICs for this test
-#   - We use net.ifnames=0 to disable consistent network naming here because on
-#     different firmwares (BIOS vs UEFI) the NIC names are different.
-#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# - architectures: !s390x
-#   - appendKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index f602d7747d..9b3e45f61e 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -1,17 +1,17 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "appendKernelArgs": "nameserver=8.8.8.8 nameserver=1.1.1.1", "architectures": "!s390x"}
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   appendKernelArgs: "nameserver=8.8.8.8 nameserver=1.1.1.1"
+##   # appendKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
 
 # Verify multiple nameservers config via kernel arguments work well
 # RHCOS: need to check /etc/resolv.conf and nmconnection
 # FCOS:  using systemd-resolved which needs to run resolvectl to check
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
 
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - architectures: !s390x
-#   - appendKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index a615a2ca7c..80a14d72c7 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 7af6d5acb0..79c24121de 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -1,9 +1,11 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "!azure" }
-# Disable on azure because of a limitation of the hv_netvsc driver
-# there. According to [1] and [2] the driver does not provide sufficient
-# information to systemd-udev for systemd's naming to work. It falls
-# back to basic ethX naming.
+## kola:
+##   exclusive: false
+##   # Disable on azure because of a limitation of the hv_netvsc driver
+##   # there. According to [1] and [2] the driver does not provide sufficient
+##   # information to systemd-udev for systemd's naming to work. It falls
+##   # back to basic ethX naming.
+##   platforms: "!azure"
 #
 # [1] https://access.redhat.com/solutions/3204751
 # [2] https://github.com/Azure/WALinuxAgent/issues/1877
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
index 4ab6a399c2..f58ee57168 100755
--- a/tests/kola/networking/nm-dhcp-client
+++ b/tests/kola/networking/nm-dhcp-client
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index 19b914f3b2..683d871af4 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index a53345ec1c..6928b8dc48 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -1,18 +1,16 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "appendFirstbootKernelArgs": "BOOTIF=52:54:00:12:34:56" }
-#
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
+##   # and the coreos-teardown-initramfs interact. The MAC address is from:
+##   # https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
+##   appendFirstbootKernelArgs: BOOTIF=52:54:00:12:34:56
+
 # In addition to the pure network defaults case we should also make
 # sure that when BOOTIF= or rd.bootif= are provided on the kernel
 # command line (typically from PXE servers) that we don't propagate
 # networking configs either. See https://github.com/coreos/fedora-coreos-tracker/issues/1048
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - appendFirstbootKernelArgs: "BOOTIF=52:54:00:12:34:56"
-#   - Append BOOTIF kernel argument so we can test how nm-initrd-generator
-#     and the coreos-teardown-initramfs interact. The MAC address is from:
-#     https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
-
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/default b/tests/kola/networking/no-default-initramfs-net-propagation/default
index da6af16d3f..ca3fd45efa 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/default
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/default
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # With pure network defaults no networking should have been propagated
 # from the initramfs. This test tries to verify that is the case.
 # https://github.com/coreos/fedora-coreos-tracker/issues/696
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 72d199cedd..63e534d68c 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -1,6 +1,20 @@
 #!/bin/bash
 set -xeuo pipefail
 
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Add 1 additional NIC for this test
+##   additionalNics: 1
+##   # Set the kernel arguments so that we can set the configuration for the NIC.
+##   # We use net.ifnames=0 to disable consistent network naming here because on
+##   # different firmwares (BIOS vs UEFI) the NIC names are different.
+##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
+##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0"
+##   # appendKernelArgs doesn't work on s390x so skip there
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
 # Setup configuration for a single NIC with two different ways:
 # - kargs provide static network config for eth1 without coreos.force_persist_ip
 # - ignition provides dhcp network config for eth1
@@ -10,22 +24,6 @@ set -xeuo pipefail
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
-# https://github.com/coreos/fedora-coreos-config/issues/1499
-# - Disable the test on s390x
-# kola: { "platforms": "qemu", "additionalNics": 1, "appendKernelArgs": "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0", "architectures": "!s390x" }
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - additionalNics: 1
-#   - Add 1 NIC for this test
-# - appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0"
-#   - The functionality we're testing here and the configuration for the NIC
-#   - We use net.ifnames=0 to disable consistent network naming here because on
-#     different firmwares (BIOS vs UEFI) the NIC names are different.
-#     See https://github.com/coreos/fedora-coreos-tracker/issues/1060
-# - architectures: !s390x
-#   - appendKernelArgs doesn't work on s390x
-#   - https://github.com/coreos/coreos-assembler/issues/2776
-
 . $KOLA_EXT_DATA/commonlib.sh
 
 # Verify eth1 gets ip address via dhcp
diff --git a/tests/kola/networking/resolv/systemd-resolved b/tests/kola/networking/resolv/systemd-resolved
index fff9b96117..9507789cd9 100755
--- a/tests/kola/networking/resolv/systemd-resolved
+++ b/tests/kola/networking/resolv/systemd-resolved
@@ -1,7 +1,9 @@
 #!/bin/bash
-# This test only runs on FCOS because `systemd-resolved` is not installed on
-# RHCOS
-# kola: { "distros": "fcos", "exclusive": false }
+## kola:
+##  # This test only runs on FCOS because `systemd-resolved` is not installed on
+##  # RHCOS
+##   distros:  fcos
+##   exclusive: false
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
index 6b881e685c..39a290e897 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
@@ -1,5 +1,7 @@
 #!/bin/bash
-# kola: { "exclusive": false, "platforms": "aws azure gce" }
+## kola:
+##   exclusive: false
+##   platforms: "aws azure gce"
 # Test the coreos-platform-chrony generator.
 
 set -xeuo pipefail
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
index 6942ddfdeb..9c3015dee5 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index c6b3ba5ec6..1d15cab034 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -6,7 +6,7 @@
 # regression that might cause in RHCOS or FCOS when the upstream changes
 # come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 #
-## kola: 
+## kola:
 ##   # Add the needs-internet tag. This test builds a container from remote
 ##   # sources and uses a remote NTP server.
 ##   tags: "needs-internet"
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index b38fff20e5..2ca5e89267 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -6,7 +6,7 @@
 # regression that might cause in RHCOS or FCOS when the upstream changes
 # come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 #
-## kola: 
+## kola:
 ##   # Add the needs-internet tag. This test builds a container from remote
 ##   # sources and uses a remote NTP server.
 ##   tags: "needs-internet"
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 86867567ed..dea14216c8 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,21 +1,20 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# kola: { "platforms": "qemu", "tags": "needs-internet", "exclusive": false, "timeoutMin": 3 }
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # This test pulls a container from a registry.
+##   tags: needs-internet
+##   # This test doesn't make meaningful changes to the system and
+##   # should be able to be combined with other tests.
+##   exclusive: false
+##   # This test reaches out to the internet and it could take more
+##   # time to pull down the container.
+##   timeoutMin: 3
+
 # Tests that rootless podman containers can DNS resolve external domains.
 # https://github.com/coreos/fedora-coreos-tracker/issues/923
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - tags: needs-internet
-#   - This test pulls a container from a registry.
-# - exclusive: false
-#   - This test doesn't make meaningful changes to the system and
-#     should be able to be combined with other tests.
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - timeoutMin: 3
-#   - This test reaches out to the internet and it could take more
-#     time to pull down the container.
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 7c093c7909..707998382f 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,5 +1,18 @@
 #!/bin/bash
-# kola: { "tags": "needs-internet", "platforms": "qemu-unpriv", "timeoutMin": 15, "minMemory": 1536 }
+## kola:
+##   # This test builds a container from remote sources.
+##   # This test uses a remote NTP server.
+##   tags: needs-internet
+##   # If the test works anywhere it should work everywhere.
+##   platforms: qemu-unpriv
+##   # Pulling and building the container can take a long time if a
+##   # slow mirror gets chosen.
+##   timeoutMin: 15
+##   # There's a bug in dnf that is causing OOM on low memory systems:
+##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
+##   # https://pagure.io/releng/issue/10935#comment-808601
+##   minMemory: 1536
+
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
 # It tests that rootless+systemd works. See issue:
@@ -7,19 +20,6 @@
 #
 # If it gets easy to change the kargs in the future we should try this
 # both on cgroups v1 and cgroups v2.
-#
-# - tags: needs-internet
-#   - This test builds a container from remote sources.
-#   - This test uses a remote NTP server.
-# - platforms: qemu-unpriv
-#   - If the test works anywhere it should work everywhere.
-# - timeoutMin: 15
-#   - Pulling and building the container can take a long time if a
-#     slow mirror gets chosen.
-# - minMemory: 1536
-#   - There's a bug in dnf that is causing OOM on low memory systems:
-#     https://bugzilla.redhat.com/show_bug.cgi?id=1907030
-#     https://pagure.io/releng/issue/10935#comment-808601
 
 set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index f4164f0d76..d749bc134f 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: {"platforms": "qemu"}
+## kola:
+##   platforms: qemu
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
 
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 06a53d9ccc..da56b961b3 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,15 +1,14 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "tags": "reprovision" }
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - tags: reprovision
-#   - This test reprovisions the rootfs.
-# - minMemory: 4096
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - timeoutMin: 15
-#   - This test includes a lot of disk I/O and needs a higher
-#     timeout value than the default.
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # This test reprovisions the rootfs.
+##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index d9ca084b33..3aaa6c865b 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -1,18 +1,16 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15, "tags": "reprovision" }
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-#   - additionalDisks is only supported on qemu.
-# - tags: reprovision
-#   - This test reprovisions the rootfs.
-# - minMemory: 4096
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - additionalDisks: ["5G", "5G"]
-#   - Linear RAID is setup on these disks.
-# - timeoutMin: 15
-#   - This test includes a lot of disk I/O and needs a higher
-#     timeout value than the default.
+## kola:
+##   # additionalDisks is only supported on qemu.
+##   platforms: qemu
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # Linear RAID is setup on these disks.
+##   additionalDisks: ["5G", "5G"]
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # This test reprovisions the rootfs.
+##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 42a162bbce..ac783de40c 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,17 +1,16 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "architectures": "!s390x", "timeoutMin": 15, "tags": "reprovision" }
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - tags: reprovision
-#   - This test reprovisions the rootfs.
-# - minMemory: 4096
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - architectures: !s390x
-#   - A TPM backend device is not available on s390x to suport TPM.
-# - timeoutMin: 15
-#   - This test includes a lot of disk I/O and needs a higher
-#     timeout value than the default.
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: qemu
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # A TPM backend device is not available on s390x to suport TPM.
+##   architectures: "!s390x"
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # This test reprovisions the rootfs.
+##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 3da3d74aea..15c15b3ca1 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -1,18 +1,16 @@
 #!/bin/bash
-# kola: { "platforms": "qemu", "minMemory": 4096, "additionalDisks": ["5G", "5G"], "timeoutMin": 15, "tags": "reprovision" }
-#
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-#   - additionalDisks is only supported on qemu.
-# - tags: reprovision
-#   - This test reprovisions the rootfs.
-# - minMemory: 4096
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - additionalDisks: ["5G", "5G"]
-#   - A RAID1 is setup on these disks.
-# - timeoutMin: 15
-#   - This test includes a lot of disk I/O and needs a higher
-#     timeout value than the default.
+## kola:
+##   # additionalDisks is only supported on qemu.
+##   platforms: qemu
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # Linear RAID is setup on these disks.
+##   additionalDisks: ["5G", "5G"]
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # This test reprovisions the rootfs.
+##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index b5ffb90599..c4ea978aad 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,21 +1,20 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "platforms": "qemu", "minMemory": 4096, "timeoutMin": 15, "allowConfigWarnings": true, "tags": "reprovision" }
-#
-# - distros: fcos
-#   - This test only runs on FCOS due to a problem enabling a swap partition on
-#     RHCOS. See: https://github.com/openshift/os/issues/665
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-# - tags: reprovision
-#   - This test reprovisions the rootfs.
-# - minMemory: 4096
-#   - Root reprovisioning requires at least 4GiB of memory.
-# - timeoutMin: 15
-#   - This test includes a lot of disk I/O and needs a higher
-#     timeout value than the default.
-# - allowConfigWarnings: true
-#   - We intentionally put the root filesystem on partition 5.  This is
-#     legal but usually not intended, so Butane warns about it.
+## kola:
+##   # This test only runs on FCOS due to a problem enabling a swap partition on
+##   # RHCOS. See: https://github.com/openshift/os/issues/665
+##   distros: fcos
+##   # additionalDisks is only supported on qemu.
+##   platforms: qemu
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # We intentionally put the root filesystem on partition 5.  This is
+##   # legal but usually not intended, so Butane warns about it.
+##   allowConfigWarnings: true
+##   # This test reprovisions the rootfs.
+##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index c859ffd732..66986b95e3 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -1,7 +1,10 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv" }
-# No need to run on any other platform than QEMU.
-# This test only runs on FCOS because countme support is not available in RHCOS
+## kola:
+##   # This test only runs on FCOS because countme support is not available in RHCOS
+##   distros: fcos
+##   tags: needs-internet
+##   # No need to run on any other platform than QEMU.
+##   platforms: qemu-unpriv
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/container-deps b/tests/kola/rpm-ostree/container-deps
index a6c8473ef9..98888bc5e0 100755
--- a/tests/kola/rpm-ostree/container-deps
+++ b/tests/kola/rpm-ostree/container-deps
@@ -1,6 +1,7 @@
 #!/bin/bash
 # Verify some dependencies of the rpm-ostree container stack.
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
index e3fe4ca9a3..1eb8fcda44 100755
--- a/tests/kola/security/coreos-update-ca-trust/test.sh
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index 92e2ff4938..3602bd1cc8 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -1,7 +1,9 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS because RHCOS does not support `yescrypt`
-# TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
+## kola:
+##   # This test only runs on FCOS because RHCOS does not support `yescrypt`
+##   # TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
+##   distros:  fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index a866024064..abb3ab3ba9 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/stub-resolve-context b/tests/kola/selinux/stub-resolve-context
index c4c87d9bc0..da75375891 100755
--- a/tests/kola/selinux/stub-resolve-context
+++ b/tests/kola/selinux/stub-resolve-context
@@ -1,7 +1,9 @@
 #!/usr/bin/env bash
-# kola: { "distros": "fcos", "exclusive": false }
-# This test only runs on FCOS because `systemd-resolved` is not installed on
-# RHCOS
+## kola:
+##   # This test only runs on FCOS because `systemd-resolved` is not installed on
+##   # RHCOS
+##   distros:  fcos
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index bd1f717f55..8cfe357f04 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 4c61eb8b80..472fd35437 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -1,5 +1,6 @@
 #!/bin/bash
-# kola: { "exclusive": false }
+## kola:
+##   exclusive: false
 # We can run this on both FCOS and RHCOS as neither should have a zram device
 # enabled by default. (In RHCOS, there is no zram support at all)
 
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index a610a0cd79..5fcd5abfb3 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -1,7 +1,9 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "exclusive": true}
-# This test conflicts with swap/zram-default so we cannot set this to non-exclusive
-# This test only runs on FCOS because RHCOS does not have zram support.
+## kola:
+##   # This test only runs on FCOS because RHCOS does not have zram support.
+##   distros: fcos
+##   # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
+##   exclusive: true
 
 set -xeuo pipefail
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 7ea3360655..55a8ef03d5 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -1,5 +1,16 @@
 #!/bin/bash
-# kola: { "distros": "fcos", "tags": "needs-internet", "platforms": "qemu-unpriv", "architectures": "x86_64 aarch64" }
+## kola:
+##   # This test only runs on FCOS because RHCOS is missing the `machinectl` command.
+##   # Additionally, there are some distro specific choices made for this test that
+##   # should/could be adapted for RHCOS.
+##   # TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
+##   distros: fcos
+##   tags: needs-internet
+##   # Only run on QEMU to reduce CI costs as nothing is platform specific here.
+##   platforms: qemu-unpriv
+##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
+##   architectures: x86_64 aarch64
+
 # Make sure that basic toolbox functionnality is working:
 # - Creating a toolbox
 # - Running a command in a toolbox
@@ -11,13 +22,6 @@
 # code/status of the invoked shell process thus we need additionnal checks to
 # ensure that previous commands were successful.
 
-# Only run on QEMU to reduce CI costs as nothing is platform specific here.
-# Toolbox container is currently available only for x86_64 and aarch64 in Fedora
-# This test only runs on FCOS because RHCOS is missing the `machinectl` command.
-# Additionally, there are some distro specific choices made for this test that
-# should/could be adpated for RHCOS.
-# TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index f27dd70a97..c332c1c5f5 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -1,8 +1,10 @@
 #!/bin/bash
 set -xeuo pipefail
 
-# restrict to qemu for now because the primary disk path is platform-dependent
-# kola: {"platforms": "qemu", "architectures": "!s390x"}
+## kola:
+##   # restrict to qemu for now because the primary disk path is platform-dependent
+##   platforms: qemu
+##   architectures: "!s390x"
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index b02eaf2a0d..f26818b323 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -4,7 +4,9 @@ set -xeuo pipefail
 # symlinks present in initramfs
 # https://bugzilla.redhat.com/show_bug.cgi?id=1990506
 
-# kola: {"platforms": "qemu", "additionalDisks": ["5G:mpath"]}
+## kola:
+##   platforms: qemu
+##   additionalDisks: ["5G:mpath"]
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index 2c1c608ea1..8c4f8ae4fc 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -2,7 +2,8 @@
 set -xeuo pipefail
 
 # restrict to qemu for now because the primary disk path is platform-dependent
-# kola: {"platforms": "qemu"}
+## kola:
+##   platforms: qemu
 
 . $KOLA_EXT_DATA/commonlib.sh
 

From 89897bce216bc8a6af526f33bd84339986d2f859 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Dec 2022 23:29:27 +0000
Subject: [PATCH 1346/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/300/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d99a4349aa..85951dd467 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1147,22 +1147,22 @@
       "evra": "1.9.11-4.p3.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.8-586.fc37.aarch64"
+      "evra": "251.9-587.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-15T00:00:00Z",
+    "generated": "2022-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-14T22:12:11Z"
+        "generated": "2022-12-16T16:38:54Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-15T01:20:58Z"
+        "generated": "2022-12-16T01:44:55Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 34d7d0a7ab..bcbaf0ee64 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1150,22 +1150,22 @@
       "evra": "1.9.11-4.p3.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.8-586.fc37.ppc64le"
+      "evra": "251.9-587.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-15T00:00:00Z",
+    "generated": "2022-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-14T22:11:12Z"
+        "generated": "2022-12-16T16:38:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-15T01:21:06Z"
+        "generated": "2022-12-16T01:45:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7a35143960..f798d21bdd 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1078,22 +1078,22 @@
       "evra": "1.9.11-4.p3.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.8-586.fc37.s390x"
+      "evra": "251.9-587.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-15T00:00:00Z",
+    "generated": "2022-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-14T22:10:54Z"
+        "generated": "2022-12-16T16:39:05Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-15T01:21:10Z"
+        "generated": "2022-12-16T01:45:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 48e9b97e99..5c17e934bb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1156,22 +1156,22 @@
       "evra": "1.9.11-4.p3.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.8-586.fc37.x86_64"
+      "evra": "251.9-587.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-15T00:00:00Z",
+    "generated": "2022-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-14T22:11:47Z"
+        "generated": "2022-12-16T16:40:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-15T01:21:14Z"
+        "generated": "2022-12-16T01:45:11Z"
       }
     }
   }

From 6574ae81a6a454fbf02339335b73ac1afd370745 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Dec 2022 22:10:40 +0000
Subject: [PATCH 1347/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/301/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 85951dd467..b7510285b9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.7-2.fc37.aarch64"
+      "evra": "1.8.8-1.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-16T00:00:00Z",
+    "generated": "2022-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T16:38:54Z"
+        "generated": "2022-12-16T23:33:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-16T01:44:55Z"
+        "generated": "2022-12-17T01:36:17Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bcbaf0ee64..2253283ed6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.7-2.fc37.ppc64le"
+      "evra": "1.8.8-1.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-16T00:00:00Z",
+    "generated": "2022-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T16:38:46Z"
+        "generated": "2022-12-16T23:32:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-16T01:45:03Z"
+        "generated": "2022-12-17T01:36:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f798d21bdd..af1dba451d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-16T00:00:00Z",
+    "generated": "2022-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T16:39:05Z"
+        "generated": "2022-12-16T23:32:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-16T01:45:07Z"
+        "generated": "2022-12-17T01:36:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5c17e934bb..862261456b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.7-2.fc37.x86_64"
+      "evra": "1.8.8-1.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-16T00:00:00Z",
+    "generated": "2022-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T16:40:19Z"
+        "generated": "2022-12-16T23:33:39Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-16T01:45:11Z"
+        "generated": "2022-12-17T01:36:33Z"
       }
     }
   }

From a1976c38ef9e5f446724238d2089e110ce1919d1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 19 Dec 2022 22:13:49 +0000
Subject: [PATCH 1348/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/303/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 62 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 72 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 62 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 62 ++++++++++++++++----------------
 4 files changed, 129 insertions(+), 129 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b7510285b9..eda7274b92 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -76,7 +76,7 @@
       "evra": "0.2.8-3.fc37.aarch64"
     },
     "bsdtar": {
-      "evra": "3.6.1-2.fc37.aarch64"
+      "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
       "evra": "6.0.2-1.fc37.aarch64"
@@ -136,10 +136,10 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.10-1.fc37.aarch64"
+      "evra": "1.6.12-1.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -523,7 +523,7 @@
       "evra": "0.3.111-14.fc37.aarch64"
     },
     "libarchive": {
-      "evra": "3.6.1-2.fc37.aarch64"
+      "evra": "3.6.1-3.fc37.aarch64"
     },
     "libargon2": {
       "evra": "20190702-1.fc37.aarch64"
@@ -622,7 +622,7 @@
       "evra": "1.3.1-52.fc37.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.aarch64"
@@ -709,7 +709,7 @@
       "evra": "0.1.5-52.fc37.aarch64"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc37.aarch64"
+      "evra": "1.15.1-1.fc37.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.4-1.fc37.noarch"
@@ -739,7 +739,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.3-0.fc37.aarch64"
+      "evra": "2:4.17.4-0.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -748,16 +748,16 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "libstdc++": {
       "evra": "12.2.1-4.fc37.aarch64"
@@ -805,10 +805,10 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.3-0.fc37.aarch64"
+      "evra": "2:4.17.4-0.fc37.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-3.fc37.aarch64"
+      "evra": "4.4.33-4.fc37.aarch64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.aarch64"
@@ -1051,13 +1051,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.3-0.fc37.aarch64"
+      "evra": "2:4.17.4-0.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.3-0.fc37.noarch"
+      "evra": "2:4.17.4-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.3-0.fc37.aarch64"
+      "evra": "2:4.17.4-0.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1114,31 +1114,31 @@
       "evra": "0.1.4-1.fc37.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-client": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-common": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.1-1.fc37.aarch64"
+      "evra": "2.8.2-1.fc37.aarch64"
     },
     "stalld": {
       "evra": "1.16-2.fc37.aarch64"
@@ -1174,7 +1174,7 @@
       "evra": "0.0.99.3-7.fc37.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.3-1.fc37.aarch64"
+      "evra": "5.4-1.fc37.aarch64"
     },
     "tpm2-tss": {
       "evra": "3.2.0-3.fc37.aarch64"
@@ -1192,10 +1192,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1006-1.fc37.noarch"
+      "evra": "2:9.0.1054-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1006-1.fc37.aarch64"
+      "evra": "2:9.0.1054-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-17T00:00:00Z",
+    "generated": "2022-12-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T23:33:07Z"
+        "generated": "2022-12-17T22:13:10Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-17T01:36:17Z"
+        "generated": "2022-12-19T01:05:51Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2253283ed6..9b89c542b1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -76,7 +76,7 @@
       "evra": "32:9.18.8-1.fc37.ppc64le"
     },
     "bsdtar": {
-      "evra": "3.6.1-2.fc37.ppc64le"
+      "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
       "evra": "6.0.2-1.fc37.ppc64le"
@@ -136,10 +136,10 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.10-1.fc37.ppc64le"
+      "evra": "1.6.12-1.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-67.fc37.noarch"
+      "evra": "1:2.06-70.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-67.fc37.ppc64le"
+      "evra": "1:2.06-70.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-67.fc37.noarch"
+      "evra": "1:2.06-70.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-67.fc37.ppc64le"
+      "evra": "1:2.06-70.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-67.fc37.ppc64le"
+      "evra": "1:2.06-70.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -517,7 +517,7 @@
       "evra": "0.3.111-14.fc37.ppc64le"
     },
     "libarchive": {
-      "evra": "3.6.1-2.fc37.ppc64le"
+      "evra": "3.6.1-3.fc37.ppc64le"
     },
     "libargon2": {
       "evra": "20190702-1.fc37.ppc64le"
@@ -616,7 +616,7 @@
       "evra": "1.3.1-52.fc37.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.ppc64le"
@@ -703,7 +703,7 @@
       "evra": "0.1.5-52.fc37.ppc64le"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc37.ppc64le"
+      "evra": "1.15.1-1.fc37.ppc64le"
     },
     "libreport-filesystem": {
       "evra": "2.17.4-1.fc37.noarch"
@@ -739,7 +739,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.3-0.fc37.ppc64le"
+      "evra": "2:4.17.4-0.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -748,16 +748,16 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libstdc++": {
       "evra": "12.2.1-4.fc37.ppc64le"
@@ -805,10 +805,10 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.3-0.fc37.ppc64le"
+      "evra": "2:4.17.4-0.fc37.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.33-3.fc37.ppc64le"
+      "evra": "4.4.33-4.fc37.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.ppc64le"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.3-0.fc37.ppc64le"
+      "evra": "2:4.17.4-0.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.3-0.fc37.noarch"
+      "evra": "2:4.17.4-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.3-0.fc37.ppc64le"
+      "evra": "2:4.17.4-0.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1117,31 +1117,31 @@
       "evra": "0.1.4-1.fc37.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.1-1.fc37.ppc64le"
+      "evra": "2.8.2-1.fc37.ppc64le"
     },
     "stalld": {
       "evra": "1.16-2.fc37.ppc64le"
@@ -1177,7 +1177,7 @@
       "evra": "0.0.99.3-7.fc37.ppc64le"
     },
     "tpm2-tools": {
-      "evra": "5.3-1.fc37.ppc64le"
+      "evra": "5.4-1.fc37.ppc64le"
     },
     "tpm2-tss": {
       "evra": "3.2.0-3.fc37.ppc64le"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1006-1.fc37.noarch"
+      "evra": "2:9.0.1054-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1006-1.fc37.ppc64le"
+      "evra": "2:9.0.1054-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-17T00:00:00Z",
+    "generated": "2022-12-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T23:32:41Z"
+        "generated": "2022-12-17T22:15:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-17T01:36:25Z"
+        "generated": "2022-12-19T01:05:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index af1dba451d..cce6300179 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,7 +73,7 @@
       "evra": "32:9.18.8-1.fc37.s390x"
     },
     "bsdtar": {
-      "evra": "3.6.1-2.fc37.s390x"
+      "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
       "evra": "6.0.2-1.fc37.s390x"
@@ -133,10 +133,10 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.10-1.fc37.s390x"
+      "evra": "1.6.12-1.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -484,7 +484,7 @@
       "evra": "0.3.111-14.fc37.s390x"
     },
     "libarchive": {
-      "evra": "3.6.1-2.fc37.s390x"
+      "evra": "3.6.1-3.fc37.s390x"
     },
     "libargon2": {
       "evra": "20190702-1.fc37.s390x"
@@ -574,7 +574,7 @@
       "evra": "1.3.1-52.fc37.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "libjose": {
       "evra": "11-6.fc37.s390x"
@@ -658,7 +658,7 @@
       "evra": "0.1.5-52.fc37.s390x"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc37.s390x"
+      "evra": "1.15.1-1.fc37.s390x"
     },
     "libreport-filesystem": {
       "evra": "2.17.4-1.fc37.noarch"
@@ -688,7 +688,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.3-0.fc37.s390x"
+      "evra": "2:4.17.4-0.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -697,16 +697,16 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "libstdc++": {
       "evra": "12.2.1-4.fc37.s390x"
@@ -751,10 +751,10 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.3-0.fc37.s390x"
+      "evra": "2:4.17.4-0.fc37.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.33-3.fc37.s390x"
+      "evra": "4.4.33-4.fc37.s390x"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.s390x"
@@ -988,13 +988,13 @@
       "evra": "2:2.24.0-1.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.3-0.fc37.s390x"
+      "evra": "2:4.17.4-0.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.3-0.fc37.noarch"
+      "evra": "2:4.17.4-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.3-0.fc37.s390x"
+      "evra": "2:4.17.4-0.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1045,31 +1045,31 @@
       "evra": "0.1.4-1.fc37.s390x"
     },
     "sssd-ad": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-client": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-common": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.1-1.fc37.s390x"
+      "evra": "2.8.2-1.fc37.s390x"
     },
     "stalld": {
       "evra": "1.16-2.fc37.s390x"
@@ -1105,7 +1105,7 @@
       "evra": "0.0.99.3-7.fc37.s390x"
     },
     "tpm2-tools": {
-      "evra": "5.3-1.fc37.s390x"
+      "evra": "5.4-1.fc37.s390x"
     },
     "tpm2-tss": {
       "evra": "3.2.0-3.fc37.s390x"
@@ -1126,10 +1126,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1006-1.fc37.noarch"
+      "evra": "2:9.0.1054-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1006-1.fc37.s390x"
+      "evra": "2:9.0.1054-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1169,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-17T00:00:00Z",
+    "generated": "2022-12-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T23:32:21Z"
+        "generated": "2022-12-17T22:12:48Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-17T01:36:29Z"
+        "generated": "2022-12-19T01:06:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 862261456b..04665f80f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -76,7 +76,7 @@
       "evra": "0.2.8-3.fc37.x86_64"
     },
     "bsdtar": {
-      "evra": "3.6.1-2.fc37.x86_64"
+      "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
       "evra": "6.0.2-1.fc37.x86_64"
@@ -136,10 +136,10 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.10-1.fc37.x86_64"
+      "evra": "1.6.12-1.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -529,7 +529,7 @@
       "evra": "0.3.111-14.fc37.x86_64"
     },
     "libarchive": {
-      "evra": "3.6.1-2.fc37.x86_64"
+      "evra": "3.6.1-3.fc37.x86_64"
     },
     "libargon2": {
       "evra": "20190702-1.fc37.x86_64"
@@ -628,7 +628,7 @@
       "evra": "1.3.1-52.fc37.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "libjcat": {
       "evra": "0.1.12-1.fc37.x86_64"
@@ -715,7 +715,7 @@
       "evra": "0.1.5-52.fc37.x86_64"
     },
     "librepo": {
-      "evra": "1.14.4-1.fc37.x86_64"
+      "evra": "1.15.1-1.fc37.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.4-1.fc37.noarch"
@@ -745,7 +745,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.3-0.fc37.x86_64"
+      "evra": "2:4.17.4-0.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -757,16 +757,16 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "libstdc++": {
       "evra": "12.2.1-4.fc37.x86_64"
@@ -814,10 +814,10 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.3-0.fc37.x86_64"
+      "evra": "2:4.17.4-0.fc37.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-3.fc37.x86_64"
+      "evra": "4.4.33-4.fc37.x86_64"
     },
     "libxml2": {
       "evra": "2.10.3-2.fc37.x86_64"
@@ -1060,13 +1060,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.3-0.fc37.x86_64"
+      "evra": "2:4.17.4-0.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.3-0.fc37.noarch"
+      "evra": "2:4.17.4-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.3-0.fc37.x86_64"
+      "evra": "2:4.17.4-0.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1123,31 +1123,31 @@
       "evra": "0.1.4-1.fc37.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-client": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-common": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.1-1.fc37.x86_64"
+      "evra": "2.8.2-1.fc37.x86_64"
     },
     "stalld": {
       "evra": "1.16-2.fc37.x86_64"
@@ -1183,7 +1183,7 @@
       "evra": "0.0.99.3-7.fc37.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.3-1.fc37.x86_64"
+      "evra": "5.4-1.fc37.x86_64"
     },
     "tpm2-tss": {
       "evra": "3.2.0-3.fc37.x86_64"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1006-1.fc37.noarch"
+      "evra": "2:9.0.1054-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1006-1.fc37.x86_64"
+      "evra": "2:9.0.1054-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-17T00:00:00Z",
+    "generated": "2022-12-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-16T23:33:39Z"
+        "generated": "2022-12-17T22:13:58Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-17T01:36:33Z"
+        "generated": "2022-12-19T01:06:08Z"
       }
     }
   }

From a41936f8058c396b0b3709b1a903b4ffa7a9e88e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 20 Dec 2022 22:19:36 +0000
Subject: [PATCH 1349/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/304/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 23 +++++++++++++----------
 manifest-lock.ppc64le.json | 23 +++++++++++++----------
 manifest-lock.s390x.json   | 23 +++++++++++++----------
 manifest-lock.x86_64.json  | 23 +++++++++++++----------
 4 files changed, 52 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index eda7274b92..13a27ae036 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -262,13 +262,13 @@
       "evra": "38-5.fc37.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-8.fc37.noarch"
+      "evra": "0.188-3.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-8.fc37.aarch64"
+      "evra": "0.188-3.fc37.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.187-8.fc37.aarch64"
+      "evra": "0.188-3.fc37.aarch64"
     },
     "ethtool": {
       "evra": "2:6.0-1.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.12-300.fc37.aarch64"
+      "evra": "6.0.13-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.12-300.fc37.aarch64"
+      "evra": "6.0.13-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.12-300.fc37.aarch64"
+      "evra": "6.0.13-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -544,7 +544,7 @@
       "evra": "2:0.8.0-2.fc37.aarch64"
     },
     "libbsd": {
-      "evra": "0.10.0-10.fc37.aarch64"
+      "evra": "0.11.7-2.fc37.aarch64"
     },
     "libcap": {
       "evra": "2.48-5.fc37.aarch64"
@@ -648,6 +648,9 @@
     "libmaxminddb": {
       "evra": "1.7.1-1.fc37.aarch64"
     },
+    "libmd": {
+      "evra": "1.0.4-2.fc37.aarch64"
+    },
     "libmnl": {
       "evra": "1.0.5-1.fc37.aarch64"
     },
@@ -1235,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-19T00:00:00Z",
+    "generated": "2022-12-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-17T22:13:10Z"
+        "generated": "2022-12-19T22:20:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-19T01:05:51Z"
+        "generated": "2022-12-20T01:20:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 9b89c542b1..96cb0439c5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -253,13 +253,13 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-8.fc37.noarch"
+      "evra": "0.188-3.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-8.fc37.ppc64le"
+      "evra": "0.188-3.fc37.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.187-8.fc37.ppc64le"
+      "evra": "0.188-3.fc37.ppc64le"
     },
     "ethtool": {
       "evra": "2:6.0-1.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.12-300.fc37.ppc64le"
+      "evra": "6.0.13-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.12-300.fc37.ppc64le"
+      "evra": "6.0.13-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.12-300.fc37.ppc64le"
+      "evra": "6.0.13-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -538,7 +538,7 @@
       "evra": "2:0.8.0-2.fc37.ppc64le"
     },
     "libbsd": {
-      "evra": "0.10.0-10.fc37.ppc64le"
+      "evra": "0.11.7-2.fc37.ppc64le"
     },
     "libcap": {
       "evra": "2.48-5.fc37.ppc64le"
@@ -642,6 +642,9 @@
     "libmaxminddb": {
       "evra": "1.7.1-1.fc37.ppc64le"
     },
+    "libmd": {
+      "evra": "1.0.4-2.fc37.ppc64le"
+    },
     "libmnl": {
       "evra": "1.0.5-1.fc37.ppc64le"
     },
@@ -1238,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-19T00:00:00Z",
+    "generated": "2022-12-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-17T22:15:23Z"
+        "generated": "2022-12-19T22:20:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-19T01:05:59Z"
+        "generated": "2022-12-20T01:20:23Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index cce6300179..a3f7da00a7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -250,13 +250,13 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-8.fc37.noarch"
+      "evra": "0.188-3.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-8.fc37.s390x"
+      "evra": "0.188-3.fc37.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.187-8.fc37.s390x"
+      "evra": "0.188-3.fc37.s390x"
     },
     "ethtool": {
       "evra": "2:6.0-1.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.12-300.fc37.s390x"
+      "evra": "6.0.13-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.12-300.fc37.s390x"
+      "evra": "6.0.13-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.12-300.fc37.s390x"
+      "evra": "6.0.13-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -505,7 +505,7 @@
       "evra": "2:0.8.0-2.fc37.s390x"
     },
     "libbsd": {
-      "evra": "0.10.0-10.fc37.s390x"
+      "evra": "0.11.7-2.fc37.s390x"
     },
     "libcap": {
       "evra": "2.48-5.fc37.s390x"
@@ -597,6 +597,9 @@
     "libmaxminddb": {
       "evra": "1.7.1-1.fc37.s390x"
     },
+    "libmd": {
+      "evra": "1.0.4-2.fc37.s390x"
+    },
     "libmnl": {
       "evra": "1.0.5-1.fc37.s390x"
     },
@@ -1169,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-19T00:00:00Z",
+    "generated": "2022-12-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-17T22:12:48Z"
+        "generated": "2022-12-19T22:20:35Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-19T01:06:03Z"
+        "generated": "2022-12-20T01:20:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 04665f80f9..eb4949905d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -262,13 +262,13 @@
       "evra": "38-5.fc37.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.187-8.fc37.noarch"
+      "evra": "0.188-3.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.187-8.fc37.x86_64"
+      "evra": "0.188-3.fc37.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.187-8.fc37.x86_64"
+      "evra": "0.188-3.fc37.x86_64"
     },
     "ethtool": {
       "evra": "2:6.0-1.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.12-300.fc37.x86_64"
+      "evra": "6.0.13-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.12-300.fc37.x86_64"
+      "evra": "6.0.13-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.12-300.fc37.x86_64"
+      "evra": "6.0.13-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -550,7 +550,7 @@
       "evra": "2:0.8.0-2.fc37.x86_64"
     },
     "libbsd": {
-      "evra": "0.10.0-10.fc37.x86_64"
+      "evra": "0.11.7-2.fc37.x86_64"
     },
     "libcap": {
       "evra": "2.48-5.fc37.x86_64"
@@ -654,6 +654,9 @@
     "libmaxminddb": {
       "evra": "1.7.1-1.fc37.x86_64"
     },
+    "libmd": {
+      "evra": "1.0.4-2.fc37.x86_64"
+    },
     "libmnl": {
       "evra": "1.0.5-1.fc37.x86_64"
     },
@@ -1244,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-19T00:00:00Z",
+    "generated": "2022-12-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-17T22:13:58Z"
+        "generated": "2022-12-19T22:21:30Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-19T01:06:08Z"
+        "generated": "2022-12-20T01:20:31Z"
       }
     }
   }

From 7feb0aae25971e7d398d10f9fcc0ce75846b08ea Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 21 Dec 2022 22:09:31 +0000
Subject: [PATCH 1350/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/305/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 13a27ae036..2596ac38f3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.3.0-1.fc37.aarch64"
+      "evra": "1.4.0-1.fc37.aarch64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.aarch64"
@@ -895,7 +895,7 @@
       "evra": "2.0-0.63.20160912git.fc37.aarch64"
     },
     "netavark": {
-      "evra": "1.3.0-1.fc37.aarch64"
+      "evra": "1.4.0-1.fc37.aarch64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-20T00:00:00Z",
+    "generated": "2022-12-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-19T22:20:30Z"
+        "generated": "2022-12-20T22:25:12Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-20T01:20:15Z"
+        "generated": "2022-12-21T01:10:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 96cb0439c5..d8c5152f65 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.3.0-1.fc37.ppc64le"
+      "evra": "1.4.0-1.fc37.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.ppc64le"
@@ -892,7 +892,7 @@
       "evra": "2.0-0.63.20160912git.fc37.ppc64le"
     },
     "netavark": {
-      "evra": "1.3.0-1.fc37.ppc64le"
+      "evra": "1.4.0-1.fc37.ppc64le"
     },
     "nettle": {
       "evra": "3.8-2.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-20T00:00:00Z",
+    "generated": "2022-12-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-19T22:20:49Z"
+        "generated": "2022-12-20T22:24:06Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-20T01:20:23Z"
+        "generated": "2022-12-21T01:10:20Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a3f7da00a7..1aad087d94 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.3.0-1.fc37.s390x"
+      "evra": "1.4.0-1.fc37.s390x"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.s390x"
@@ -835,7 +835,7 @@
       "evra": "2.0-0.63.20160912git.fc37.s390x"
     },
     "netavark": {
-      "evra": "1.3.0-1.fc37.s390x"
+      "evra": "1.4.0-1.fc37.s390x"
     },
     "nettle": {
       "evra": "3.8-2.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-20T00:00:00Z",
+    "generated": "2022-12-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-19T22:20:35Z"
+        "generated": "2022-12-20T22:24:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-20T01:20:27Z"
+        "generated": "2022-12-21T01:10:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index eb4949905d..cfec6109bc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.3.0-1.fc37.x86_64"
+      "evra": "1.4.0-1.fc37.x86_64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.x86_64"
@@ -907,7 +907,7 @@
       "evra": "2.0-0.63.20160912git.fc37.x86_64"
     },
     "netavark": {
-      "evra": "1.3.0-1.fc37.x86_64"
+      "evra": "1.4.0-1.fc37.x86_64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-20T00:00:00Z",
+    "generated": "2022-12-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-19T22:21:30Z"
+        "generated": "2022-12-20T22:26:00Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-20T01:20:31Z"
+        "generated": "2022-12-21T01:10:28Z"
       }
     }
   }

From 6033e96cbfbad1afe11b21256529f7fe4ca9ecef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 22 Dec 2022 22:13:11 +0000
Subject: [PATCH 1351/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/306/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2596ac38f3..554ffecefd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.aarch64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.7.2-1.fc37.aarch64"
+      "evra": "1.7.2-2.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -415,7 +415,7 @@
       "evra": "56-2.fc37.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.13-300.fc37.aarch64"
+      "evra": "6.0.14-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.13-300.fc37.aarch64"
+      "evra": "6.0.14-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.13-300.fc37.aarch64"
+      "evra": "6.0.14-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.aarch64"
@@ -919,7 +919,7 @@
       "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-21T00:00:00Z",
+    "generated": "2022-12-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-20T22:25:12Z"
+        "generated": "2022-12-21T22:12:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-21T01:10:12Z"
+        "generated": "2022-12-22T01:18:33Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d8c5152f65..e3806ad6a2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.ppc64le"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.7.2-1.fc37.ppc64le"
+      "evra": "1.7.2-2.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -409,7 +409,7 @@
       "evra": "56-2.fc37.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.13-300.fc37.ppc64le"
+      "evra": "6.0.14-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.13-300.fc37.ppc64le"
+      "evra": "6.0.14-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.13-300.fc37.ppc64le"
+      "evra": "6.0.14-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.ppc64le"
@@ -916,7 +916,7 @@
       "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-21T00:00:00Z",
+    "generated": "2022-12-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-20T22:24:06Z"
+        "generated": "2022-12-21T22:11:32Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-21T01:10:20Z"
+        "generated": "2022-12-22T01:18:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1aad087d94..ebe18dc789 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.s390x"
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.7.2-1.fc37.s390x"
+      "evra": "1.7.2-2.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -379,7 +379,7 @@
       "evra": "56-2.fc37.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.13-300.fc37.s390x"
+      "evra": "6.0.14-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.13-300.fc37.s390x"
+      "evra": "6.0.14-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.13-300.fc37.s390x"
+      "evra": "6.0.14-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -772,10 +772,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.18.1-21.fc37.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-21T00:00:00Z",
+    "generated": "2022-12-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-20T22:24:17Z"
+        "generated": "2022-12-21T22:11:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-21T01:10:24Z"
+        "generated": "2022-12-22T01:18:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cfec6109bc..edf5801b39 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.x86_64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.7.2-1.fc37.x86_64"
+      "evra": "1.7.2-2.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -421,7 +421,7 @@
       "evra": "56-2.fc37.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.13-300.fc37.x86_64"
+      "evra": "6.0.14-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.13-300.fc37.x86_64"
+      "evra": "6.0.14-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.13-300.fc37.x86_64"
+      "evra": "6.0.14-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -838,10 +838,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.x86_64"
@@ -931,7 +931,7 @@
       "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221109-144.fc37.noarch"
+      "evra": "20221214-145.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-21T00:00:00Z",
+    "generated": "2022-12-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-20T22:26:00Z"
+        "generated": "2022-12-21T22:12:03Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-21T01:10:28Z"
+        "generated": "2022-12-22T01:18:51Z"
       }
     }
   }

From 2013ef13db54e395777c7db0d81921d33bdd89e9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Dec 2022 22:08:54 +0000
Subject: [PATCH 1352/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/307/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 41 insertions(+), 41 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 554ffecefd..7b19cd6b11 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1150,22 +1150,22 @@
       "evra": "1.9.11-4.p3.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.9-587.fc37.aarch64"
+      "evra": "251.10-588.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-22T00:00:00Z",
+    "generated": "2022-12-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-21T22:12:20Z"
+        "generated": "2022-12-22T22:15:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-22T01:18:33Z"
+        "generated": "2022-12-23T01:06:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e3806ad6a2..b3089d1e3c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-70.fc37.noarch"
+      "evra": "1:2.06-72.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-70.fc37.ppc64le"
+      "evra": "1:2.06-72.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-70.fc37.noarch"
+      "evra": "1:2.06-72.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-70.fc37.ppc64le"
+      "evra": "1:2.06-72.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-70.fc37.ppc64le"
+      "evra": "1:2.06-72.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -1153,22 +1153,22 @@
       "evra": "1.9.11-4.p3.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.9-587.fc37.ppc64le"
+      "evra": "251.10-588.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-22T00:00:00Z",
+    "generated": "2022-12-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-21T22:11:32Z"
+        "generated": "2022-12-22T22:16:14Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-22T01:18:42Z"
+        "generated": "2022-12-23T01:06:44Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ebe18dc789..a99d359607 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1081,22 +1081,22 @@
       "evra": "1.9.11-4.p3.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.9-587.fc37.s390x"
+      "evra": "251.10-588.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-22T00:00:00Z",
+    "generated": "2022-12-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-21T22:11:18Z"
+        "generated": "2022-12-22T22:15:20Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-22T01:18:46Z"
+        "generated": "2022-12-23T01:06:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index edf5801b39..b6fe483547 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1159,22 +1159,22 @@
       "evra": "1.9.11-4.p3.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.9-587.fc37.x86_64"
+      "evra": "251.10-588.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-22T00:00:00Z",
+    "generated": "2022-12-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-21T22:12:03Z"
+        "generated": "2022-12-22T22:16:24Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-22T01:18:51Z"
+        "generated": "2022-12-23T01:06:53Z"
       }
     }
   }

From d9aa8a3e9fb2b41ffb6721ad9d374957d12a3848 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 24 Dec 2022 22:06:40 +0000
Subject: [PATCH 1353/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/308/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7b19cd6b11..b143eabc60 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -844,7 +844,7 @@
       "evra": "4.94.0-4.fc37.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-4.fc37.aarch64"
+      "evra": "5.4.4-7.fc37.aarch64"
     },
     "luksmeta": {
       "evra": "9-14.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-23T00:00:00Z",
+    "generated": "2022-12-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-22T22:15:45Z"
+        "generated": "2022-12-23T22:11:49Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-23T01:06:36Z"
+        "generated": "2022-12-24T01:01:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b3089d1e3c..5cb1310330 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -844,7 +844,7 @@
       "evra": "4.94.0-4.fc37.ppc64le"
     },
     "lua-libs": {
-      "evra": "5.4.4-4.fc37.ppc64le"
+      "evra": "5.4.4-7.fc37.ppc64le"
     },
     "luksmeta": {
       "evra": "9-14.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-23T00:00:00Z",
+    "generated": "2022-12-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-22T22:16:14Z"
+        "generated": "2022-12-23T22:11:51Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-23T01:06:44Z"
+        "generated": "2022-12-24T01:01:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a99d359607..6418a78f20 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -787,7 +787,7 @@
       "evra": "4.94.0-4.fc37.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-4.fc37.s390x"
+      "evra": "5.4.4-7.fc37.s390x"
     },
     "luksmeta": {
       "evra": "9-14.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-23T00:00:00Z",
+    "generated": "2022-12-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-22T22:15:20Z"
+        "generated": "2022-12-23T22:11:19Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-23T01:06:48Z"
+        "generated": "2022-12-24T01:02:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b6fe483547..72a029e446 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -853,7 +853,7 @@
       "evra": "4.94.0-4.fc37.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-4.fc37.x86_64"
+      "evra": "5.4.4-7.fc37.x86_64"
     },
     "luksmeta": {
       "evra": "9-14.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-23T00:00:00Z",
+    "generated": "2022-12-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-22T22:16:24Z"
+        "generated": "2022-12-23T22:12:23Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-23T01:06:53Z"
+        "generated": "2022-12-24T01:02:07Z"
       }
     }
   }

From 66099a4b8ab86cef46bf27dd8fdcfc7ef67d58ae Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 25 Dec 2022 22:14:58 +0000
Subject: [PATCH 1354/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/309/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b143eabc60..e37dd65281 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.14-300.fc37.aarch64"
+      "evra": "6.0.15-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.14-300.fc37.aarch64"
+      "evra": "6.0.15-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.14-300.fc37.aarch64"
+      "evra": "6.0.15-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-24T00:00:00Z",
+    "generated": "2022-12-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-23T22:11:49Z"
+        "generated": "2022-12-24T22:08:46Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-24T01:01:50Z"
+        "generated": "2022-12-25T01:02:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5cb1310330..e435d95239 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.14-300.fc37.ppc64le"
+      "evra": "6.0.15-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.14-300.fc37.ppc64le"
+      "evra": "6.0.15-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.14-300.fc37.ppc64le"
+      "evra": "6.0.15-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-24T00:00:00Z",
+    "generated": "2022-12-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-23T22:11:51Z"
+        "generated": "2022-12-24T22:09:15Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-24T01:01:58Z"
+        "generated": "2022-12-25T01:02:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6418a78f20..1037638d01 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.14-300.fc37.s390x"
+      "evra": "6.0.15-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.14-300.fc37.s390x"
+      "evra": "6.0.15-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.14-300.fc37.s390x"
+      "evra": "6.0.15-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-24T00:00:00Z",
+    "generated": "2022-12-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-23T22:11:19Z"
+        "generated": "2022-12-24T22:08:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-24T01:02:03Z"
+        "generated": "2022-12-25T01:02:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 72a029e446..6fae5fd590 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.14-300.fc37.x86_64"
+      "evra": "6.0.15-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.14-300.fc37.x86_64"
+      "evra": "6.0.15-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.14-300.fc37.x86_64"
+      "evra": "6.0.15-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-24T00:00:00Z",
+    "generated": "2022-12-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-23T22:12:23Z"
+        "generated": "2022-12-24T22:09:07Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-24T01:02:07Z"
+        "generated": "2022-12-25T01:02:32Z"
       }
     }
   }

From 55ab7414c5dad5a6bf35ad22d23488d298e3bb92 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 27 Dec 2022 22:16:08 +0000
Subject: [PATCH 1355/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/311/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e37dd65281..7a5482becd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.0.2-1.fc37.aarch64"
+      "evra": "6.1-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -139,7 +139,7 @@
       "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.12-1.fc37.aarch64"
+      "evra": "1.6.14-2.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -187,7 +187,7 @@
       "evra": "2.5.0-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-4.fc37.aarch64"
+      "evra": "7.85.0-5.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.aarch64"
@@ -562,7 +562,7 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-4.fc37.aarch64"
+      "evra": "7.85.0-5.fc37.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.aarch64"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc37.aarch64"
+      "evra": "20.10.21-1.fc37.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.aarch64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-25T00:00:00Z",
+    "generated": "2022-12-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-24T22:08:46Z"
+        "generated": "2022-12-25T22:17:18Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-25T01:02:15Z"
+        "generated": "2022-12-27T01:01:04Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e435d95239..efe78bc186 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.0.2-1.fc37.ppc64le"
+      "evra": "6.1-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -139,7 +139,7 @@
       "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.12-1.fc37.ppc64le"
+      "evra": "1.6.14-2.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -187,7 +187,7 @@
       "evra": "2.5.0-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-4.fc37.ppc64le"
+      "evra": "7.85.0-5.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.ppc64le"
@@ -556,7 +556,7 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-4.fc37.ppc64le"
+      "evra": "7.85.0-5.fc37.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.ppc64le"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc37.ppc64le"
+      "evra": "20.10.21-1.fc37.ppc64le"
     },
     "mozjs102": {
       "evra": "102.6.0-1.fc37.ppc64le"
@@ -1069,10 +1069,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-25T00:00:00Z",
+    "generated": "2022-12-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-24T22:09:15Z"
+        "generated": "2022-12-25T22:17:37Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-25T01:02:24Z"
+        "generated": "2022-12-27T01:01:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1037638d01..095c1e94d1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.0.2-1.fc37.s390x"
+      "evra": "6.1-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -136,7 +136,7 @@
       "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.12-1.fc37.s390x"
+      "evra": "1.6.14-2.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -184,7 +184,7 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.85.0-4.fc37.s390x"
+      "evra": "7.85.0-5.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.s390x"
@@ -523,7 +523,7 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-4.fc37.s390x"
+      "evra": "7.85.0-5.fc37.s390x"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.s390x"
@@ -808,7 +808,7 @@
       "evra": "4.2-2.fc37.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc37.s390x"
+      "evra": "20.10.21-1.fc37.s390x"
     },
     "mozjs102": {
       "evra": "102.6.0-1.fc37.s390x"
@@ -1003,10 +1003,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-25T00:00:00Z",
+    "generated": "2022-12-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-24T22:08:21Z"
+        "generated": "2022-12-25T22:17:21Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-25T01:02:28Z"
+        "generated": "2022-12-27T01:01:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6fae5fd590..a5bf919b38 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.0.2-1.fc37.x86_64"
+      "evra": "6.1-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -139,7 +139,7 @@
       "evra": "2:2.195.1-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.12-1.fc37.x86_64"
+      "evra": "1.6.14-2.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -187,7 +187,7 @@
       "evra": "2.5.0-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-4.fc37.x86_64"
+      "evra": "7.85.0-5.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.x86_64"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-4.fc37.x86_64"
+      "evra": "7.85.0-5.fc37.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:2.1-53.fc37.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.20-1.fc37.x86_64"
+      "evra": "20.10.21-1.fc37.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.16-1.fc37.noarch"
+      "evra": "37.17-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-25T00:00:00Z",
+    "generated": "2022-12-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-24T22:09:07Z"
+        "generated": "2022-12-25T22:18:40Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-25T01:02:32Z"
+        "generated": "2022-12-27T01:01:21Z"
       }
     }
   }

From 4cac44acecaeaf088e72c57e0e6770b911fd0acd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Dec 2022 22:12:46 +0000
Subject: [PATCH 1356/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/312/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7a5482becd..79e8496dab 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -607,7 +607,7 @@
       "evra": "237-3.fc37.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.2-1.fc37.aarch64"
+      "evra": "0.4.3-1.fc37.aarch64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-27T00:00:00Z",
+    "generated": "2022-12-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-25T22:17:18Z"
+        "generated": "2022-12-27T22:18:28Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-27T01:01:04Z"
+        "generated": "2022-12-28T01:15:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index efe78bc186..57b007d525 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -601,7 +601,7 @@
       "evra": "237-3.fc37.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.2-1.fc37.ppc64le"
+      "evra": "0.4.3-1.fc37.ppc64le"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-27T00:00:00Z",
+    "generated": "2022-12-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-25T22:17:37Z"
+        "generated": "2022-12-27T22:18:59Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-27T01:01:13Z"
+        "generated": "2022-12-28T01:15:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 095c1e94d1..802cee5f18 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-27T00:00:00Z",
+    "generated": "2022-12-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-25T22:17:21Z"
+        "generated": "2022-12-27T22:18:09Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-27T01:01:17Z"
+        "generated": "2022-12-28T01:15:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a5bf919b38..5f8e73febc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -613,7 +613,7 @@
       "evra": "237-3.fc37.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.2-1.fc37.x86_64"
+      "evra": "0.4.3-1.fc37.x86_64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-27T00:00:00Z",
+    "generated": "2022-12-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-25T22:18:40Z"
+        "generated": "2022-12-27T22:19:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-27T01:01:21Z"
+        "generated": "2022-12-28T01:16:00Z"
       }
     }
   }

From 4f50c56858a83aaf3fdfe536d7ba89b75ad6ad52 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Dec 2022 22:15:59 +0000
Subject: [PATCH 1357/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/313/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 79e8496dab..8c490eeff9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -271,7 +271,7 @@
       "evra": "0.188-3.fc37.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc37.aarch64"
+      "evra": "2:6.1-1.fc37.aarch64"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.16-2.fc37.aarch64"
+      "evra": "2022.19-2.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-2.fc37.aarch64"
+      "evra": "2022.19-2.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-28T00:00:00Z",
+    "generated": "2022-12-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-27T22:18:28Z"
+        "generated": "2022-12-28T22:15:26Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-28T01:15:41Z"
+        "generated": "2022-12-29T01:01:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 57b007d525..1c06d56cd7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -262,7 +262,7 @@
       "evra": "0.188-3.fc37.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc37.ppc64le"
+      "evra": "2:6.1-1.fc37.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.ppc64le"
@@ -1042,10 +1042,10 @@
       "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.16-2.fc37.ppc64le"
+      "evra": "2022.19-2.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-2.fc37.ppc64le"
+      "evra": "2022.19-2.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-28T00:00:00Z",
+    "generated": "2022-12-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-27T22:18:59Z"
+        "generated": "2022-12-28T22:15:17Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-28T01:15:51Z"
+        "generated": "2022-12-29T01:01:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 802cee5f18..fabe1f182d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -259,7 +259,7 @@
       "evra": "0.188-3.fc37.s390x"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc37.s390x"
+      "evra": "2:6.1-1.fc37.s390x"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.s390x"
@@ -973,10 +973,10 @@
       "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.16-2.fc37.s390x"
+      "evra": "2022.19-2.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-2.fc37.s390x"
+      "evra": "2022.19-2.fc37.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-28T00:00:00Z",
+    "generated": "2022-12-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-27T22:18:09Z"
+        "generated": "2022-12-28T22:15:02Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-28T01:15:55Z"
+        "generated": "2022-12-29T01:01:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5f8e73febc..9edf637ba3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -271,7 +271,7 @@
       "evra": "0.188-3.fc37.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.0-1.fc37.x86_64"
+      "evra": "2:6.1-1.fc37.x86_64"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.16-2.fc37.x86_64"
+      "evra": "2022.19-2.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.16-2.fc37.x86_64"
+      "evra": "2022.19-2.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-28T00:00:00Z",
+    "generated": "2022-12-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-27T22:19:55Z"
+        "generated": "2022-12-28T22:15:55Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-28T01:16:00Z"
+        "generated": "2022-12-29T01:01:52Z"
       }
     }
   }

From d2eafc7193bd29de0314f60d39455b6ffe22b659 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 31 Dec 2022 22:18:28 +0000
Subject: [PATCH 1358/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/315/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8c490eeff9..1b72cdd895 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.1-1.fc37.aarch64"
+      "evra": "6.1-2.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -637,7 +637,7 @@
       "evra": "1.4.0-2.fc37.aarch64"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc37.aarch64"
+      "evra": "1.6.3-1.fc37.aarch64"
     },
     "libldb": {
       "evra": "2.6.1-1.fc37.aarch64"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-0.fc37.aarch64"
+      "evra": "2:4.17.4-2.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-0.fc37.aarch64"
+      "evra": "2:4.17.4-2.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-0.fc37.aarch64"
+      "evra": "2:4.17.4-2.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.4-0.fc37.noarch"
+      "evra": "2:4.17.4-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-0.fc37.aarch64"
+      "evra": "2:4.17.4-2.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-29T00:00:00Z",
+    "generated": "2022-12-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-28T22:15:26Z"
+        "generated": "2022-12-29T22:18:47Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-29T01:01:34Z"
+        "generated": "2022-12-31T01:02:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1c06d56cd7..293f6f6fee 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.1-1.fc37.ppc64le"
+      "evra": "6.1-2.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -631,7 +631,7 @@
       "evra": "1.4.0-2.fc37.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc37.ppc64le"
+      "evra": "1.6.3-1.fc37.ppc64le"
     },
     "libldb": {
       "evra": "2.6.1-1.fc37.ppc64le"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-0.fc37.ppc64le"
+      "evra": "2:4.17.4-2.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-0.fc37.ppc64le"
+      "evra": "2:4.17.4-2.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -1057,13 +1057,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-0.fc37.ppc64le"
+      "evra": "2:4.17.4-2.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.4-0.fc37.noarch"
+      "evra": "2:4.17.4-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-0.fc37.ppc64le"
+      "evra": "2:4.17.4-2.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-29T00:00:00Z",
+    "generated": "2022-12-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-28T22:15:17Z"
+        "generated": "2022-12-29T22:18:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-29T01:01:43Z"
+        "generated": "2022-12-31T01:02:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index fabe1f182d..3d21df29f6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.1-1.fc37.s390x"
+      "evra": "6.1-2.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -586,7 +586,7 @@
       "evra": "1.4.0-2.fc37.s390x"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc37.s390x"
+      "evra": "1.6.3-1.fc37.s390x"
     },
     "libldb": {
       "evra": "2.6.1-1.fc37.s390x"
@@ -691,7 +691,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-0.fc37.s390x"
+      "evra": "2:4.17.4-2.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -754,7 +754,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-0.fc37.s390x"
+      "evra": "2:4.17.4-2.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -991,13 +991,13 @@
       "evra": "2:2.24.0-1.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-0.fc37.s390x"
+      "evra": "2:4.17.4-2.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.4-0.fc37.noarch"
+      "evra": "2:4.17.4-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-0.fc37.s390x"
+      "evra": "2:4.17.4-2.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-29T00:00:00Z",
+    "generated": "2022-12-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-28T22:15:02Z"
+        "generated": "2022-12-29T22:18:13Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-29T01:01:48Z"
+        "generated": "2022-12-31T01:02:13Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9edf637ba3..32b291950c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.1-1.fc37.x86_64"
+      "evra": "6.1-2.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -643,7 +643,7 @@
       "evra": "1.4.0-2.fc37.x86_64"
     },
     "libksba": {
-      "evra": "1.6.2-1.fc37.x86_64"
+      "evra": "1.6.3-1.fc37.x86_64"
     },
     "libldb": {
       "evra": "2.6.1-1.fc37.x86_64"
@@ -748,7 +748,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-0.fc37.x86_64"
+      "evra": "2:4.17.4-2.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -817,7 +817,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-0.fc37.x86_64"
+      "evra": "2:4.17.4-2.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -1063,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-0.fc37.x86_64"
+      "evra": "2:4.17.4-2.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.4-0.fc37.noarch"
+      "evra": "2:4.17.4-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-0.fc37.x86_64"
+      "evra": "2:4.17.4-2.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-29T00:00:00Z",
+    "generated": "2022-12-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-28T22:15:55Z"
+        "generated": "2022-12-29T22:18:31Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-29T01:01:52Z"
+        "generated": "2022-12-31T01:02:18Z"
       }
     }
   }

From 9a6782a8093170ec01eb0852f850d65752f414c5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 2 Jan 2023 22:14:38 +0000
Subject: [PATCH 1359/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/317/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1b72cdd895..54b4dbd51e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.aarch64"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.39.0-1.fc37.aarch64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-31T00:00:00Z",
+    "generated": "2023-01-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-29T22:18:47Z"
+        "generated": "2022-12-31T22:21:45Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-31T01:02:00Z"
+        "generated": "2023-01-02T01:02:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 293f6f6fee..396ffbaa9d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -352,7 +352,7 @@
       "evra": "0.21.1-1.fc37.ppc64le"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.39.0-1.fc37.ppc64le"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-31T00:00:00Z",
+    "generated": "2023-01-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-29T22:18:36Z"
+        "generated": "2022-12-31T22:21:41Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-31T01:02:09Z"
+        "generated": "2023-01-02T01:02:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3d21df29f6..09254191c2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,7 +337,7 @@
       "evra": "1.0.9-4.fc37.s390x"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.39.0-1.fc37.s390x"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-31T00:00:00Z",
+    "generated": "2023-01-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-29T22:18:13Z"
+        "generated": "2022-12-31T22:20:50Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-31T01:02:13Z"
+        "generated": "2023-01-02T01:02:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 32b291950c..408cee6007 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.x86_64"
     },
     "git-core": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.39.0-1.fc37.x86_64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2022-12-31T00:00:00Z",
+    "generated": "2023-01-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-29T22:18:31Z"
+        "generated": "2022-12-31T22:21:36Z"
       },
       "fedora-updates": {
-        "generated": "2022-12-31T01:02:18Z"
+        "generated": "2023-01-02T01:02:30Z"
       }
     }
   }

From 2191e129e5c3fa59709e20aeb57d51b93f4c66ec Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 3 Jan 2023 04:06:55 +0000
Subject: [PATCH 1360/2157] overrides: pin container-selinux-2.193.0-1.fc37

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2983914c14..b3494237b8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -34,3 +34,8 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
       type: pin
+  container-selinux:
+    evra: 2:2.193.0-1.fc37.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1366
+      type: pin

From 3781a9ec66f3099eafe295686f1ae55fe99d3567 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 3 Jan 2023 13:51:02 -0500
Subject: [PATCH 1361/2157] workflows: update actions to current major versions

Fixes deprecation warnings for Node.js 12:

    https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/
---
 .github/workflows/add-override.yml               | 4 ++--
 .github/workflows/next-devel.yml                 | 4 ++--
 .github/workflows/openshift-os.yml               | 4 ++--
 .github/workflows/promotion-diff.yml             | 6 +++---
 .github/workflows/remove-graduated-overrides.yml | 4 ++--
 5 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/add-override.yml b/.github/workflows/add-override.yml
index a1e088d5bf..6f412df46d 100644
--- a/.github/workflows/add-override.yml
+++ b/.github/workflows/add-override.yml
@@ -42,7 +42,7 @@ jobs:
       - name: Install dependencies
         run: dnf install -y git jq python3-bodhi-client python3-pyyaml
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: ${{ github.event.inputs.target }}
           # We need an unbroken commit chain when pushing to the fork.  Don't
@@ -80,7 +80,7 @@ jobs:
           echo "COMMIT_TITLE=${title}" >> ${GITHUB_ENV}
           echo "PR_TITLE=${pr_title}" >> ${GITHUB_ENV}
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v3.8.2
+        uses: peter-evans/create-pull-request@v4.2.3
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           branch: ${{ env.BRANCH_NAME }}
diff --git a/.github/workflows/next-devel.yml b/.github/workflows/next-devel.yml
index 6a531e45bd..1fcc9b7036 100644
--- a/.github/workflows/next-devel.yml
+++ b/.github/workflows/next-devel.yml
@@ -19,13 +19,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post PR comment
-        uses: actions/github-script@v3
+        uses: actions/github-script@v6
         with:
           script: |
             const url = 'https://raw.githubusercontent.com/coreos/fedora-coreos-pipeline/main/next-devel/status.json'
             const resp = await github.request(url)
             if (!JSON.parse(resp.data).enabled) {
-              await github.issues.createComment({
+              await github.rest.issues.createComment({
                 owner: context.repo.owner,
                 repo: context.repo.repo,
                 issue_number: context.issue.number,
diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index ff19cf6a5a..8b86c0569f 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           repository: openshift/os
           # We need an unbroken commit chain when pushing to the fork.  Don't
@@ -70,7 +70,7 @@ jobs:
           EOF
 
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v4.0.4
+        uses: peter-evans/create-pull-request@v4.2.3
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           push-to-fork: coreosbot-releng/os
diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index 29ce106eea..0f69d4df79 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -19,17 +19,17 @@ jobs:
         run: |
           echo "ORIGIN_COMMIT=$(echo ${COMMIT_TITLE} | awk '{print $NF}')" >> $GITHUB_ENV
       - name: Check out origin commit
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           path: origin
           ref: ${{ env.ORIGIN_COMMIT }}
       - name: Check out base branch
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           path: base
           ref: ${{ github.base_ref }}
       - name: Check out PR
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           path: new
       - name: Ignore manifest files
diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 05a9a8abde..5630d633b7 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Install dependencies
         run: dnf install -y python3-bodhi-client rpm-ostree # see related TODO above
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: ${{ matrix.branch }}
       # https://github.com/actions/checkout/issues/766
@@ -49,7 +49,7 @@ jobs:
                 -m "Triggered by remove-graduated-overrides GitHub Action."
           fi
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v3.8.2
+        uses: peter-evans/create-pull-request@v4.2.3
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           branch: ${{ matrix.branch }}-graduation

From 8d4ace160fefef9ae1f1aa87857f5731f10fb94f Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 3 Jan 2023 13:51:13 -0500
Subject: [PATCH 1362/2157] Revert "workflows: add stamp file in openshift/os
 to ensure we push rebases"

The underlying bug was fixed in create-pull-request 4.2.1.

This reverts commit 2dfcd0f842f40d97ee16b4ba20a121e3fea17250.
---
 .github/workflows/openshift-os.yml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index 8b86c0569f..a60cbee83d 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -53,14 +53,7 @@ jobs:
               echo "No non-trivial changes; exiting"
               exit 0
           fi
-
-          base=$(git rev-parse HEAD)
           git checkout testing-devel
-          # Hack: update a stamp to force create-pull-request to update the
-          # branch, even if we're just rebasing on a previous manual
-          # fedora-coreos-config sync
-          # https://github.com/peter-evans/create-pull-request/issues/1191
-          echo $base > ../.fedora-coreos-config-base
 
           marker=OPENSHIFT-OS-END-OF-LOG-MARKER-$RANDOM$RANDOM$RANDOM
           cat >> $GITHUB_ENV <<EOF

From b970993dce2b67d4b0dad21afe4505c835334eda Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 3 Jan 2023 23:33:34 +0000
Subject: [PATCH 1363/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/319/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 54b4dbd51e..fd05067483 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -106,16 +106,16 @@
       "evra": "6.15-2.fc37.aarch64"
     },
     "clevis": {
-      "evra": "18-12.fc37.aarch64"
+      "evra": "18-14.fc37.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-12.fc37.aarch64"
+      "evra": "18-14.fc37.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-12.fc37.aarch64"
+      "evra": "18-14.fc37.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-12.fc37.aarch64"
+      "evra": "18-14.fc37.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.195.1-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.aarch64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.87-3.fc37.aarch64"
+      "evra": "2.88-1.fc37.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-02T00:00:00Z",
+    "generated": "2023-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-31T22:21:45Z"
+        "generated": "2023-01-02T22:17:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-02T01:02:11Z"
+        "generated": "2023-01-03T01:03:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 396ffbaa9d..d8b4f6dae6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -106,16 +106,16 @@
       "evra": "6.15-2.fc37.ppc64le"
     },
     "clevis": {
-      "evra": "18-12.fc37.ppc64le"
+      "evra": "18-14.fc37.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "18-12.fc37.ppc64le"
+      "evra": "18-14.fc37.ppc64le"
     },
     "clevis-luks": {
-      "evra": "18-12.fc37.ppc64le"
+      "evra": "18-14.fc37.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "18-12.fc37.ppc64le"
+      "evra": "18-14.fc37.ppc64le"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.195.1-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.ppc64le"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.87-3.fc37.ppc64le"
+      "evra": "2.88-1.fc37.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.ppc64le"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-02T00:00:00Z",
+    "generated": "2023-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-31T22:21:41Z"
+        "generated": "2023-01-02T22:16:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-02T01:02:21Z"
+        "generated": "2023-01-03T01:03:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 09254191c2..6d4a584f9f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -103,16 +103,16 @@
       "evra": "6.15-2.fc37.s390x"
     },
     "clevis": {
-      "evra": "18-12.fc37.s390x"
+      "evra": "18-14.fc37.s390x"
     },
     "clevis-dracut": {
-      "evra": "18-12.fc37.s390x"
+      "evra": "18-14.fc37.s390x"
     },
     "clevis-luks": {
-      "evra": "18-12.fc37.s390x"
+      "evra": "18-14.fc37.s390x"
     },
     "clevis-systemd": {
-      "evra": "18-12.fc37.s390x"
+      "evra": "18-14.fc37.s390x"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.195.1-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.s390x"
@@ -229,7 +229,7 @@
       "evra": "3.8-3.fc37.s390x"
     },
     "dnsmasq": {
-      "evra": "2.87-3.fc37.s390x"
+      "evra": "2.88-1.fc37.s390x"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-02T00:00:00Z",
+    "generated": "2023-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-31T22:20:50Z"
+        "generated": "2023-01-02T22:16:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-02T01:02:25Z"
+        "generated": "2023-01-03T01:03:39Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 408cee6007..d60a5964e8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -106,16 +106,16 @@
       "evra": "6.15-2.fc37.x86_64"
     },
     "clevis": {
-      "evra": "18-12.fc37.x86_64"
+      "evra": "18-14.fc37.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-12.fc37.x86_64"
+      "evra": "18-14.fc37.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-12.fc37.x86_64"
+      "evra": "18-14.fc37.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-12.fc37.x86_64"
+      "evra": "18-14.fc37.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.195.1-1.fc37.noarch"
+      "evra": "2:2.193.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.x86_64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.87-3.fc37.x86_64"
+      "evra": "2.88-1.fc37.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-02T00:00:00Z",
+    "generated": "2023-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2022-12-31T22:21:36Z"
+        "generated": "2023-01-02T22:17:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-02T01:02:30Z"
+        "generated": "2023-01-03T01:03:43Z"
       }
     }
   }

From 251f60f98480bd924b3b9837e7084959be7257cd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 3 Jan 2023 20:45:32 -0500
Subject: [PATCH 1364/2157] denylist: extend snooze for ext.config.kdump.crash
 on ppc64le

We still don't have a 6.1+ kernel yet in anything other than rawhide
so we need to snooze for longer.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 19148cadbb..0f877400b4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
-  snooze: 2023-01-04
+  snooze: 2023-02-04
   arches:
     - ppc64le
   streams:

From aaccb950a0f197487fd8d2003ad045848ca0da19 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 3 Jan 2023 20:48:04 -0500
Subject: [PATCH 1365/2157] denylist: extend snooze for
 default-network-behavior-change test

No one has looked at the root cause of
https://github.com/coreos/fedora-coreos-tracker/issues/1341 yet so
this one is going to start failing if we don't extend the snooze.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0f877400b4..90d79df53d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -53,7 +53,7 @@
   snooze: 2023-01-10
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
-  snooze: 2023-01-05
+  snooze: 2023-02-05
 - pattern: ext.config.ntp.timesyncd.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1359
   snooze: 2023-01-15

From 71e41dfead6df55e20c6ab30261aa204c5d315d8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 3 Jan 2023 22:43:53 -0500
Subject: [PATCH 1366/2157] Revert "denylist: snooze timesyncd.dhcp-propagation
 until January"

The SELinux issue has been resolved.

This reverts commit 44b011046ed9936a1cd55184af9b0f1295298d5a.
---
 kola-denylist.yaml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 90d79df53d..0df75d5961 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -54,6 +54,3 @@
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-02-05
-- pattern: ext.config.ntp.timesyncd.dhcp-propagation
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1359
-  snooze: 2023-01-15

From f6e2fbbefb14b696644b55a33d8c28db58aee06b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 4 Jan 2023 22:11:20 +0000
Subject: [PATCH 1367/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/320/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fd05067483..6b1b97a987 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1180,7 +1180,7 @@
       "evra": "5.4-1.fc37.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc37.aarch64"
+      "evra": "3.2.1-1.fc37.aarch64"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-03T00:00:00Z",
+    "generated": "2023-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-02T22:17:05Z"
+        "generated": "2023-01-03T23:35:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-03T01:03:24Z"
+        "generated": "2023-01-04T01:15:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d8b4f6dae6..fff413308d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1183,7 +1183,7 @@
       "evra": "5.4-1.fc37.ppc64le"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc37.ppc64le"
+      "evra": "3.2.1-1.fc37.ppc64le"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-03T00:00:00Z",
+    "generated": "2023-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-02T22:16:57Z"
+        "generated": "2023-01-03T23:36:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-03T01:03:34Z"
+        "generated": "2023-01-04T01:16:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6d4a584f9f..48c9ae7aee 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1111,7 +1111,7 @@
       "evra": "5.4-1.fc37.s390x"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc37.s390x"
+      "evra": "3.2.1-1.fc37.s390x"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-03T00:00:00Z",
+    "generated": "2023-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-02T22:16:43Z"
+        "generated": "2023-01-03T23:35:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-03T01:03:39Z"
+        "generated": "2023-01-04T01:16:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d60a5964e8..154cd12088 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1189,7 +1189,7 @@
       "evra": "5.4-1.fc37.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.2.0-3.fc37.x86_64"
+      "evra": "3.2.1-1.fc37.x86_64"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-03T00:00:00Z",
+    "generated": "2023-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-02T22:17:29Z"
+        "generated": "2023-01-03T23:36:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-03T01:03:43Z"
+        "generated": "2023-01-04T01:16:16Z"
       }
     }
   }

From 959d885de776b580056620a97e89f29771299c11 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 4 Jan 2023 14:30:26 -0500
Subject: [PATCH 1368/2157] overrides: drop grub2 pin, bump to 2.06-72.fc37

The related GRUB issue is now fixed in the latest version in f37 as per
https://github.com/coreos/fedora-coreos-tracker/issues/1352#issuecomment-1371225262.

Bump the base lockfiles manually so that CI actually tests it.
---
 manifest-lock.aarch64.json           |  8 +++---
 manifest-lock.overrides.aarch64.yaml | 31 ---------------------
 manifest-lock.overrides.x86_64.yaml  | 41 ----------------------------
 manifest-lock.x86_64.json            | 12 ++++----
 4 files changed, 10 insertions(+), 82 deletions(-)
 delete mode 100644 manifest-lock.overrides.aarch64.yaml
 delete mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6b1b97a987..57009ac81a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -391,16 +391,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-63.fc37.noarch"
+      "evra": "1:2.06-72.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-63.fc37.aarch64"
+      "evra": "1:2.06-72.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-63.fc37.aarch64"
+      "evra": "1:2.06-72.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-63.fc37.aarch64"
+      "evra": "1:2.06-72.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
deleted file mode 100644
index 4cfe3c90eb..0000000000
--- a/manifest-lock.overrides.aarch64.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  grub2-common:
-    evra: 1:2.06-63.fc37.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-tools-minimal:
-    evra: 1:2.06-63.fc37.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-efi-aa64:
-    evra: 1:2.06-63.fc37.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-tools:
-    evra: 1:2.06-63.fc37.aarch64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
deleted file mode 100644
index e7d42e89bd..0000000000
--- a/manifest-lock.overrides.x86_64.yaml
+++ /dev/null
@@ -1,41 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  grub2-pc-modules:
-    evra: 1:2.06-63.fc37.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-common:
-    evra: 1:2.06-63.fc37.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-tools-minimal:
-    evra: 1:2.06-63.fc37.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-efi-x64:
-    evra: 1:2.06-63.fc37.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-pc:
-    evra: 1:2.06-63.fc37.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
-  grub2-tools:
-    evra: 1:2.06-63.fc37.x86_64
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1352
-      type: pin
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 154cd12088..b968587fe0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -391,22 +391,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-63.fc37.noarch"
+      "evra": "1:2.06-72.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-63.fc37.x86_64"
+      "evra": "1:2.06-72.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-63.fc37.x86_64"
+      "evra": "1:2.06-72.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-63.fc37.noarch"
+      "evra": "1:2.06-72.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-63.fc37.x86_64"
+      "evra": "1:2.06-72.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-63.fc37.x86_64"
+      "evra": "1:2.06-72.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"

From 33469321e9b9ee104eddeb3669af68d696357390 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 4 Jan 2023 22:31:52 -0500
Subject: [PATCH 1369/2157] denylist: deny
 ext.config.ntp.timesyncd.dhcp-propagation on rawhide

We recently removed the denial for this but it turns out
`selinux-policy` is pinned in `rawhide` so we need to still
deny the test on that stream for a period of time.

See https://github.com/coreos/fedora-coreos-tracker/issues/1364#issuecomment-1371727078
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0df75d5961..aac34fa825 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -54,3 +54,8 @@
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-02-05
+- pattern: ext.config.ntp.timesyncd.dhcp-propagation                                                                                                       
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1364#issuecomment-1371727078
+  snooze: 2023-02-05
+  streams:
+    - rawhide

From 1fa0c357a3beac7c8076be7d62e4f3bc58dce595 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 5 Jan 2023 12:32:25 -0500
Subject: [PATCH 1370/2157] tests: remove trust-cpu

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1369

We can assume that CONFIG_RANDOM_TRUST_CPU is enabled due to
upstream changes. Let's remove this test from FCOS as it's no
longer needed.
---
 tests/kola/files/trust-cpu | 18 ------------------
 1 file changed, 18 deletions(-)
 delete mode 100755 tests/kola/files/trust-cpu

diff --git a/tests/kola/files/trust-cpu b/tests/kola/files/trust-cpu
deleted file mode 100755
index b8d0274f91..0000000000
--- a/tests/kola/files/trust-cpu
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-## kola:
-##   exclusive: false
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1830280
-case "$(arch)" in
-    x86_64)
-        config=$(grep ^CONFIG_RANDOM_TRUST_CPU /lib/modules/$(uname -r)/config)
-        if [ "$config" != "CONFIG_RANDOM_TRUST_CPU=y" ]; then
-            fatal "Error: Failed to find crng trusting CPU"
-        fi
-        ok "random trust cpu" ;;
-    *) echo "Don't know how to test hardware RNG state on arch=$(arch)" ;;
-esac

From e1e366641e40aebab9d159f9690ed0c57fc39927 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 5 Jan 2023 22:06:32 +0000
Subject: [PATCH 1371/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/321/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 39 ++++++++++++++++++--------------------
 manifest-lock.ppc64le.json | 39 ++++++++++++++++++--------------------
 manifest-lock.s390x.json   | 39 ++++++++++++++++++--------------------
 manifest-lock.x86_64.json  | 39 ++++++++++++++++++--------------------
 4 files changed, 72 insertions(+), 84 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 57009ac81a..bb0f4ebd01 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -58,7 +58,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.9-3.fc37.aarch64"
+      "evra": "5.2.15-1.fc37.aarch64"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.1-2.fc37.aarch64"
+      "evra": "6.1.1-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -157,10 +157,10 @@
       "evra": "0.16.1-2.fc37.aarch64"
     },
     "coreutils": {
-      "evra": "9.1-6.fc37.aarch64"
+      "evra": "9.1-7.fc37.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.1-6.fc37.aarch64"
+      "evra": "9.1-7.fc37.aarch64"
     },
     "cpio": {
       "evra": "2.13-13.fc37.aarch64"
@@ -168,14 +168,11 @@
     "cracklib": {
       "evra": "2.9.7-30.fc37.aarch64"
     },
-    "cracklib-dicts": {
-      "evra": "2.9.7-30.fc37.aarch64"
-    },
     "criu": {
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.7.2-2.fc37.aarch64"
+      "evra": "1.7.2-3.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -484,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.15-300.fc37.aarch64"
+      "evra": "6.0.16-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.15-300.fc37.aarch64"
+      "evra": "6.0.16-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.15-300.fc37.aarch64"
+      "evra": "6.0.16-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -601,7 +598,7 @@
       "evra": "1.10.1-4.fc37.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.45-2.fc37.aarch64"
+      "evra": "1.46-1.fc37.aarch64"
     },
     "libgudev": {
       "evra": "237-3.fc37.aarch64"
@@ -697,7 +694,7 @@
       "evra": "0.2.1-52.fc37.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-4.fc37.aarch64"
+      "evra": "14:1.10.2-1.fc37.aarch64"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.aarch64"
@@ -706,7 +703,7 @@
       "evra": "0.21.1-6.fc37.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.4-11.fc37.aarch64"
+      "evra": "1.4.5-1.fc37.aarch64"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.aarch64"
@@ -883,16 +880,16 @@
       "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.3-3.20220501.fc37.aarch64"
+      "evra": "6.3-4.20220501.fc37.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.3-3.20220501.fc37.noarch"
+      "evra": "6.3-4.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-3.20220501.fc37.aarch64"
+      "evra": "6.3-4.20220501.fc37.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.63.20160912git.fc37.aarch64"
+      "evra": "2.0-0.64.20160912git.fc37.aarch64"
     },
     "netavark": {
       "evra": "1.4.0-1.fc37.aarch64"
@@ -1238,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-04T00:00:00Z",
+    "generated": "2023-01-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-03T23:35:32Z"
+        "generated": "2023-01-04T22:13:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-04T01:15:57Z"
+        "generated": "2023-01-05T01:07:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fff413308d..8a85847817 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -58,7 +58,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.9-3.fc37.ppc64le"
+      "evra": "5.2.15-1.fc37.ppc64le"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.1-2.fc37.ppc64le"
+      "evra": "6.1.1-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -157,10 +157,10 @@
       "evra": "0.16.1-2.fc37.ppc64le"
     },
     "coreutils": {
-      "evra": "9.1-6.fc37.ppc64le"
+      "evra": "9.1-7.fc37.ppc64le"
     },
     "coreutils-common": {
-      "evra": "9.1-6.fc37.ppc64le"
+      "evra": "9.1-7.fc37.ppc64le"
     },
     "cpio": {
       "evra": "2.13-13.fc37.ppc64le"
@@ -168,14 +168,11 @@
     "cracklib": {
       "evra": "2.9.7-30.fc37.ppc64le"
     },
-    "cracklib-dicts": {
-      "evra": "2.9.7-30.fc37.ppc64le"
-    },
     "criu": {
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.7.2-2.fc37.ppc64le"
+      "evra": "1.7.2-3.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -478,13 +475,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.15-300.fc37.ppc64le"
+      "evra": "6.0.16-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.15-300.fc37.ppc64le"
+      "evra": "6.0.16-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.15-300.fc37.ppc64le"
+      "evra": "6.0.16-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -595,7 +592,7 @@
       "evra": "1.10.1-4.fc37.ppc64le"
     },
     "libgpg-error": {
-      "evra": "1.45-2.fc37.ppc64le"
+      "evra": "1.46-1.fc37.ppc64le"
     },
     "libgudev": {
       "evra": "237-3.fc37.ppc64le"
@@ -691,7 +688,7 @@
       "evra": "0.2.1-52.fc37.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.1-4.fc37.ppc64le"
+      "evra": "14:1.10.2-1.fc37.ppc64le"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.ppc64le"
@@ -700,7 +697,7 @@
       "evra": "0.21.1-6.fc37.ppc64le"
     },
     "libpwquality": {
-      "evra": "1.4.4-11.fc37.ppc64le"
+      "evra": "1.4.5-1.fc37.ppc64le"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.ppc64le"
@@ -880,16 +877,16 @@
       "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.3-3.20220501.fc37.ppc64le"
+      "evra": "6.3-4.20220501.fc37.ppc64le"
     },
     "ncurses-base": {
-      "evra": "6.3-3.20220501.fc37.noarch"
+      "evra": "6.3-4.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-3.20220501.fc37.ppc64le"
+      "evra": "6.3-4.20220501.fc37.ppc64le"
     },
     "net-tools": {
-      "evra": "2.0-0.63.20160912git.fc37.ppc64le"
+      "evra": "2.0-0.64.20160912git.fc37.ppc64le"
     },
     "netavark": {
       "evra": "1.4.0-1.fc37.ppc64le"
@@ -1241,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-04T00:00:00Z",
+    "generated": "2023-01-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-03T23:36:08Z"
+        "generated": "2023-01-04T22:13:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-04T01:16:07Z"
+        "generated": "2023-01-05T01:07:49Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 48c9ae7aee..b3fbac282e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -58,7 +58,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.9-3.fc37.s390x"
+      "evra": "5.2.15-1.fc37.s390x"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.1-2.fc37.s390x"
+      "evra": "6.1.1-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -154,10 +154,10 @@
       "evra": "0.16.1-2.fc37.s390x"
     },
     "coreutils": {
-      "evra": "9.1-6.fc37.s390x"
+      "evra": "9.1-7.fc37.s390x"
     },
     "coreutils-common": {
-      "evra": "9.1-6.fc37.s390x"
+      "evra": "9.1-7.fc37.s390x"
     },
     "cpio": {
       "evra": "2.13-13.fc37.s390x"
@@ -165,14 +165,11 @@
     "cracklib": {
       "evra": "2.9.7-30.fc37.s390x"
     },
-    "cracklib-dicts": {
-      "evra": "2.9.7-30.fc37.s390x"
-    },
     "criu": {
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.7.2-2.fc37.s390x"
+      "evra": "1.7.2-3.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -445,13 +442,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.15-300.fc37.s390x"
+      "evra": "6.0.16-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.15-300.fc37.s390x"
+      "evra": "6.0.16-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.15-300.fc37.s390x"
+      "evra": "6.0.16-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -559,7 +556,7 @@
       "evra": "1.10.1-4.fc37.s390x"
     },
     "libgpg-error": {
-      "evra": "1.45-2.fc37.s390x"
+      "evra": "1.46-1.fc37.s390x"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.s390x"
@@ -646,7 +643,7 @@
       "evra": "0.2.1-52.fc37.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.1-4.fc37.s390x"
+      "evra": "14:1.10.2-1.fc37.s390x"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.s390x"
@@ -655,7 +652,7 @@
       "evra": "0.21.1-6.fc37.s390x"
     },
     "libpwquality": {
-      "evra": "1.4.4-11.fc37.s390x"
+      "evra": "1.4.5-1.fc37.s390x"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.s390x"
@@ -823,16 +820,16 @@
       "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.3-3.20220501.fc37.s390x"
+      "evra": "6.3-4.20220501.fc37.s390x"
     },
     "ncurses-base": {
-      "evra": "6.3-3.20220501.fc37.noarch"
+      "evra": "6.3-4.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-3.20220501.fc37.s390x"
+      "evra": "6.3-4.20220501.fc37.s390x"
     },
     "net-tools": {
-      "evra": "2.0-0.63.20160912git.fc37.s390x"
+      "evra": "2.0-0.64.20160912git.fc37.s390x"
     },
     "netavark": {
       "evra": "1.4.0-1.fc37.s390x"
@@ -1172,16 +1169,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-04T00:00:00Z",
+    "generated": "2023-01-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-03T23:35:10Z"
+        "generated": "2023-01-04T22:13:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-04T01:16:11Z"
+        "generated": "2023-01-05T01:07:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b968587fe0..68ac27584c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -58,7 +58,7 @@
       "evra": "11-14.fc37.noarch"
     },
     "bash": {
-      "evra": "5.2.9-3.fc37.x86_64"
+      "evra": "5.2.15-1.fc37.x86_64"
     },
     "bash-completion": {
       "evra": "1:2.11-8.fc37.noarch"
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.1-2.fc37.x86_64"
+      "evra": "6.1.1-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -157,10 +157,10 @@
       "evra": "0.16.1-2.fc37.x86_64"
     },
     "coreutils": {
-      "evra": "9.1-6.fc37.x86_64"
+      "evra": "9.1-7.fc37.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.1-6.fc37.x86_64"
+      "evra": "9.1-7.fc37.x86_64"
     },
     "cpio": {
       "evra": "2.13-13.fc37.x86_64"
@@ -168,14 +168,11 @@
     "cracklib": {
       "evra": "2.9.7-30.fc37.x86_64"
     },
-    "cracklib-dicts": {
-      "evra": "2.9.7-30.fc37.x86_64"
-    },
     "criu": {
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.7.2-2.fc37.x86_64"
+      "evra": "1.7.2-3.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -490,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.15-300.fc37.x86_64"
+      "evra": "6.0.16-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.15-300.fc37.x86_64"
+      "evra": "6.0.16-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.15-300.fc37.x86_64"
+      "evra": "6.0.16-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -607,7 +604,7 @@
       "evra": "1.10.1-4.fc37.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.45-2.fc37.x86_64"
+      "evra": "1.46-1.fc37.x86_64"
     },
     "libgudev": {
       "evra": "237-3.fc37.x86_64"
@@ -703,7 +700,7 @@
       "evra": "0.2.1-52.fc37.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.1-4.fc37.x86_64"
+      "evra": "14:1.10.2-1.fc37.x86_64"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.x86_64"
@@ -712,7 +709,7 @@
       "evra": "0.21.1-6.fc37.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.4-11.fc37.x86_64"
+      "evra": "1.4.5-1.fc37.x86_64"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.x86_64"
@@ -895,16 +892,16 @@
       "evra": "6.4-1.fc37.noarch"
     },
     "ncurses": {
-      "evra": "6.3-3.20220501.fc37.x86_64"
+      "evra": "6.3-4.20220501.fc37.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.3-3.20220501.fc37.noarch"
+      "evra": "6.3-4.20220501.fc37.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-3.20220501.fc37.x86_64"
+      "evra": "6.3-4.20220501.fc37.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.63.20160912git.fc37.x86_64"
+      "evra": "2.0-0.64.20160912git.fc37.x86_64"
     },
     "netavark": {
       "evra": "1.4.0-1.fc37.x86_64"
@@ -1247,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-04T00:00:00Z",
+    "generated": "2023-01-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-03T23:36:42Z"
+        "generated": "2023-01-04T22:14:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-04T01:16:16Z"
+        "generated": "2023-01-05T01:07:59Z"
       }
     }
   }

From 5949ad7eda09e875be0e09118c21bd4be3eab3d3 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 5 Jan 2023 16:29:40 -0500
Subject: [PATCH 1372/2157] manifests: install the x86_64 emulator on ppc64le
 instances

This gets ppc64le in line with the other non-x86_64 arches.
---
 manifest-lock.ppc64le.json        | 3 +++
 manifests/fedora-coreos-base.yaml | 5 +++--
 tests/kola/binfmt/qemu            | 8 ++++----
 3 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8a85847817..5c3b66740e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1026,6 +1026,9 @@
     "publicsuffix-list-dafsa": {
       "evra": "20210518-5.fc37.noarch"
     },
+    "qemu-user-static-x86": {
+      "evra": "2:7.0.0-12.fc37.ppc64le"
+    },
     "readline": {
       "evra": "8.2-2.fc37.ppc64le"
     },
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2c0b7ef6e4..0ea309f877 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -174,8 +174,8 @@ packages:
 # https://serverfault.com/questions/513807/is-there-still-a-use-for-irqbalance-on-modern-hardware
 # https://access.redhat.com/solutions/41535
 #
-# Include the qemu-user-static-x86 package on aarch64 and s390x FCOS images
-# to allow access to the large inventory of containers only built for x86_64.
+# Include the qemu-user-static-x86 package on non-x86_64 FCOS images to allow
+# access to the large inventory of containers only built for x86_64.
 # https://github.com/coreos/fedora-coreos-tracker/issues/1237
 packages-x86_64:
   - irqbalance
@@ -184,6 +184,7 @@ packages-ppc64le:
   - librtas
   - powerpc-utils-core
   - ppc64-diag-rtas
+  - qemu-user-static-x86
 packages-aarch64:
   - irqbalance
   - qemu-user-static-x86
diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index b6345b55f2..1ca472aff1 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,5 +1,5 @@
 #!/bin/bash
-# Test the x86_64 emulator on aarch64 and s390x images for now
+# Test the x86_64 emulator on non-x86_64 instances.
 # https://github.com/coreos/fedora-coreos-tracker/issues/1237
 #
 ## kola:
@@ -12,15 +12,15 @@
 ##   tags: needs-internet
 ##   # Only run on fcos, as rhel does not support emulation
 ##   distros: fcos
-##   # We decided to ship x86_64 emulator to only these arches for now.
-##   architectures: aarch64 s390x
+##   # We ship the x86_64 on all non-x86_64 arches.
+##   architectures: "! x86_64"
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
 case "$(arch)" in
-    aarch64|s390x)
+    aarch64|ppc64le|s390x)
         containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:37 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"

From f1e494217565c2627e85298641254cb3c083b779 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 6 Jan 2023 15:17:27 -0500
Subject: [PATCH 1373/2157] manifests: explicitly name criu criu-libs

The `crun` upstream code switched to dynamically linking against
libcriu dynamically [1] and the `crun` RPM switched the `criu` dep
from a Requires to a Recommends. Let's just name them both here
because we know we want them installed.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1370

[1] https://github.com/containers/crun/commit/8c3fc125ba40d54675726fff55b4c03693a0d3dc
[2] https://src.fedoraproject.org/rpms/crun/c/c14e1218f5937622122158e11f5e777c1ee7065f
---
 manifest-lock.aarch64.json     | 3 +++
 manifest-lock.ppc64le.json     | 3 +++
 manifest-lock.s390x.json       | 3 +++
 manifest-lock.x86_64.json      | 3 +++
 manifests/user-experience.yaml | 4 +++-
 5 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bb0f4ebd01..5191a1ae16 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -171,6 +171,9 @@
     "criu": {
       "evra": "3.17.1-3.fc37.aarch64"
     },
+    "criu-libs": {
+      "evra": "3.17.1-3.fc37.aarch64"
+    },
     "crun": {
       "evra": "1.7.2-3.fc37.aarch64"
     },
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5c3b66740e..f9e7947a51 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -171,6 +171,9 @@
     "criu": {
       "evra": "3.17.1-3.fc37.ppc64le"
     },
+    "criu-libs": {
+      "evra": "3.17.1-3.fc37.ppc64le"
+    },
     "crun": {
       "evra": "1.7.2-3.fc37.ppc64le"
     },
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b3fbac282e..5f3b1b7add 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -168,6 +168,9 @@
     "criu": {
       "evra": "3.17.1-3.fc37.s390x"
     },
+    "criu-libs": {
+      "evra": "3.17.1-3.fc37.s390x"
+    },
     "crun": {
       "evra": "1.7.2-3.fc37.s390x"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 68ac27584c..2ce84a8e40 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -171,6 +171,9 @@
     "criu": {
       "evra": "3.17.1-3.fc37.x86_64"
     },
+    "criu-libs": {
+      "evra": "3.17.1-3.fc37.x86_64"
+    },
     "crun": {
       "evra": "1.7.2-3.fc37.x86_64"
     },
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index 5f8445d2e3..ed80c3c79c 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -37,7 +37,9 @@ packages:
   # Remote Access
   - openssh-clients openssh-server
   # Container tooling
-  - crun
+  ## crun recommends but doesn't require criu and criu-libs. We want them for
+  ## checkpoint/restore. https://github.com/coreos/fedora-coreos-tracker/issues/1370
+  - crun criu criu-libs
   - podman
   - runc
   - skopeo

From e26bdead945c32a9a77adc35d42934b6348555a0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 7 Jan 2023 22:11:49 +0000
Subject: [PATCH 1374/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/323/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   |  8 ++++----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5191a1ae16..d1186d10c9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.1.1-1.fc37.aarch64"
+      "evra": "6.1.2-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.8-1.fc37.aarch64"
+      "evra": "1.8.9-1.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-05T00:00:00Z",
+    "generated": "2023-01-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-04T22:13:58Z"
+        "generated": "2023-01-05T22:09:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-05T01:07:40Z"
+        "generated": "2023-01-07T01:13:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f9e7947a51..10f5c5d281 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.1.1-1.fc37.ppc64le"
+      "evra": "6.1.2-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.8-1.fc37.ppc64le"
+      "evra": "1.8.9-1.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-05T00:00:00Z",
+    "generated": "2023-01-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-04T22:13:58Z"
+        "generated": "2023-01-05T22:09:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-05T01:07:49Z"
+        "generated": "2023-01-07T01:13:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5f3b1b7add..1ee9e57938 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.1.1-1.fc37.s390x"
+      "evra": "6.1.2-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-05T00:00:00Z",
+    "generated": "2023-01-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-04T22:13:33Z"
+        "generated": "2023-01-05T22:09:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-05T01:07:54Z"
+        "generated": "2023-01-07T01:13:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2ce84a8e40..ce43f13ece 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.1.1-1.fc37.x86_64"
+      "evra": "6.1.2-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.8-1.fc37.x86_64"
+      "evra": "1.8.9-1.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-05T00:00:00Z",
+    "generated": "2023-01-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-04T22:14:34Z"
+        "generated": "2023-01-05T22:11:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-05T01:07:59Z"
+        "generated": "2023-01-07T01:13:22Z"
       }
     }
   }

From b5886062d7fd97c872e7281cecba94c6301adb07 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 6 Jan 2023 16:46:05 -0500
Subject: [PATCH 1375/2157] overrides: fast-track container-selinux; add test
 for container tmpfs mount

We have an update that now fixes the problem and a test to make sure
that the problem doesn't come back in the future.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1366
---
 manifest-lock.overrides.yaml            |  5 +++--
 tests/kola/selinux/podman-tmpfs-context | 21 +++++++++++++++++++++
 2 files changed, 24 insertions(+), 2 deletions(-)
 create mode 100755 tests/kola/selinux/podman-tmpfs-context

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b3494237b8..da4bc2c040 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -35,7 +35,8 @@ packages:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
       type: pin
   container-selinux:
-    evra: 2:2.193.0-1.fc37.noarch
+    evra: 2:2.198.0-1.fc37.noarch
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d03c3d75ec
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1366
-      type: pin
+      type: fast-track
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
new file mode 100755
index 0000000000..d22082c73b
--- /dev/null
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -0,0 +1,21 @@
+#!/bin/bash
+## kola:
+##   # This test doesn't meaningfully change the system and
+##   # can be run with other tests.
+##   exclusive: false
+##   # - This test pulls a container image from the network.
+##   # - This test should pass everywhere if it passes anywhere.
+##   tags: "needs-internet platform-independent"
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Make sure that tmpfs mounts inside a container have the `container_file_t` label.
+# https://github.com/coreos/fedora-coreos-tracker/issues/1366
+context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:37 \
+            bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
+if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
+    fatal "SELinux context for files on a tmpfs inside a container is wrong"
+fi
+ok "SELinux context for files on a tmpfs inside a container is correct"

From 40bd5d5c08e139444eda42d844f41ea02a5bc612 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 9 Jan 2023 22:14:53 +0000
Subject: [PATCH 1376/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/326/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d1186d10c9..1f263d5789 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.aarch64"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.16-300.fc37.aarch64"
+      "evra": "6.0.17-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.16-300.fc37.aarch64"
+      "evra": "6.0.17-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.16-300.fc37.aarch64"
+      "evra": "6.0.17-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-07T00:00:00Z",
+    "generated": "2023-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-05T22:09:18Z"
+        "generated": "2023-01-09T14:47:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-07T01:13:03Z"
+        "generated": "2023-01-09T00:57:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 10f5c5d281..796e3dd832 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.ppc64le"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.16-300.fc37.ppc64le"
+      "evra": "6.0.17-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.16-300.fc37.ppc64le"
+      "evra": "6.0.17-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.16-300.fc37.ppc64le"
+      "evra": "6.0.17-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-07T00:00:00Z",
+    "generated": "2023-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-05T22:09:29Z"
+        "generated": "2023-01-09T14:47:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-07T01:13:12Z"
+        "generated": "2023-01-09T00:57:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1ee9e57938..b3e2384c26 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.s390x"
@@ -142,10 +142,10 @@
       "evra": "1.1.1-8.fc37.s390x"
     },
     "containers-common": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.16-300.fc37.s390x"
+      "evra": "6.0.17-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.16-300.fc37.s390x"
+      "evra": "6.0.17-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.16-300.fc37.s390x"
+      "evra": "6.0.17-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-07T00:00:00Z",
+    "generated": "2023-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-05T22:09:11Z"
+        "generated": "2023-01-09T14:47:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-07T01:13:17Z"
+        "generated": "2023-01-09T00:58:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ce43f13ece..f8de33c72e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.193.0-1.fc37.noarch"
+      "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.14-2.fc37.x86_64"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-73.fc37.noarch"
+      "evra": "4:1-76.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.16-300.fc37.x86_64"
+      "evra": "6.0.17-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.16-300.fc37.x86_64"
+      "evra": "6.0.17-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.16-300.fc37.x86_64"
+      "evra": "6.0.17-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-07T00:00:00Z",
+    "generated": "2023-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-05T22:11:15Z"
+        "generated": "2023-01-09T14:47:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-07T01:13:22Z"
+        "generated": "2023-01-09T00:58:05Z"
       }
     }
   }

From a19dac0ea04cd8f6f64ff44378a340e51da8669a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 10 Jan 2023 22:10:07 +0000
Subject: [PATCH 1377/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/327/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1f263d5789..8b0764f908 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.17-300.fc37.aarch64"
+      "evra": "6.0.18-300.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.17-300.fc37.aarch64"
+      "evra": "6.0.18-300.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.17-300.fc37.aarch64"
+      "evra": "6.0.18-300.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-09T00:00:00Z",
+    "generated": "2023-01-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T14:47:21Z"
+        "generated": "2023-01-09T22:18:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-09T00:57:45Z"
+        "generated": "2023-01-10T01:16:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 796e3dd832..6c83a0ed9c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.17-300.fc37.ppc64le"
+      "evra": "6.0.18-300.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.17-300.fc37.ppc64le"
+      "evra": "6.0.18-300.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.17-300.fc37.ppc64le"
+      "evra": "6.0.18-300.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-09T00:00:00Z",
+    "generated": "2023-01-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T14:47:11Z"
+        "generated": "2023-01-09T22:17:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-09T00:57:55Z"
+        "generated": "2023-01-10T01:17:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b3e2384c26..ca08fed465 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.17-300.fc37.s390x"
+      "evra": "6.0.18-300.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.17-300.fc37.s390x"
+      "evra": "6.0.18-300.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.17-300.fc37.s390x"
+      "evra": "6.0.18-300.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-09T00:00:00Z",
+    "generated": "2023-01-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T14:47:01Z"
+        "generated": "2023-01-09T22:17:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-09T00:58:00Z"
+        "generated": "2023-01-10T01:17:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f8de33c72e..7042e2cbd1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.17-300.fc37.x86_64"
+      "evra": "6.0.18-300.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.17-300.fc37.x86_64"
+      "evra": "6.0.18-300.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.17-300.fc37.x86_64"
+      "evra": "6.0.18-300.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-09T00:00:00Z",
+    "generated": "2023-01-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T14:47:53Z"
+        "generated": "2023-01-09T22:25:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-09T00:58:05Z"
+        "generated": "2023-01-10T01:17:16Z"
       }
     }
   }

From 455ef7a603ca470f04b2832369f450563184f310 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 10 Jan 2023 15:08:50 -0500
Subject: [PATCH 1378/2157] Consistently Use Title Case for Service
 Descriptions

Also do some minor wording cleanups.

Fixes https://issues.redhat.com/browse/COS-1840.
---
 .../modules.d/35coreos-ignition/coreos-unique-boot.service      | 2 +-
 .../35coreos-live/coreos-live-clear-sssd-cache.service          | 2 +-
 .../35coreos-live/coreos-live-unmount-tmpfs-var.service         | 2 +-
 .../35coreos-live/coreos-liveiso-persist-osmet.service          | 2 +-
 .../35coreos-live/coreos-livepxe-persist-osmet.service          | 2 +-
 .../modules.d/35coreos-live/coreos-livepxe-rootfs.service       | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.service  | 2 +-
 .../ignition-ostree-mount-firstboot-sysroot.service             | 2 +-
 .../ignition-ostree-mount-subsequent-sysroot.service            | 2 +-
 .../modules.d/50coreos-kernel/coreos-check-kernel.service       | 2 +-
 .../ignition-virtio-dump-journal.service                        | 2 +-
 .../15fcos/usr/lib/systemd/system/coreos-check-cgroups.service  | 2 +-
 .../15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service | 2 +-
 13 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
index 7505ff564a..85565ae9d2 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ensure filesystem labeled `boot` is unique
+Description=Ensure Unique `boot` Filesystem Label
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=no
 Before=ignition-diskful.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service
index 758bb617af..e30b62d408 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-clear-sssd-cache.service
@@ -4,7 +4,7 @@
 # cache to avoid this.
 
 [Unit]
-Description=Clear SSSD NSS cache in persistent /var
+Description=Clear SSSD NSS Cache in Persistent /var
 DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionPathExists=/sysroot/var/lib/sss/mc
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service
index de5080f611..17ae51faaa 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-live-unmount-tmpfs-var.service
@@ -7,7 +7,7 @@
 # before switching roots.
 
 [Unit]
-Description=Unmount live /var if persistent /var is configured
+Description=Unmount Live /var if Persistent /var Is Configured
 DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionPathExists=|/sysroot/etc/systemd/system/var.mount
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
index ea82d77430..3cef6adc30 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Persist osmet files (ISO)
+Description=Persist Osmet Files (ISO)
 DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionKernelCommandLine=coreos.liveiso
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service
index 17484e66a1..63baa687df 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-persist-osmet.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Persist osmet files (PXE)
+Description=Persist Osmet Files (PXE)
 DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionKernelCommandLine=!coreos.liveiso
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
index ed935ba162..fdb5ad9647 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Acquire live PXE rootfs image
+Description=Acquire Live PXE rootfs Image
 DefaultDependencies=false
 ConditionPathExists=/usr/lib/initrd-release
 ConditionPathExists=/run/ostree-live
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index 8704894f3b..0599484824 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ignition OSTree: Grow root filesystem
+Description=Ignition OSTree: Grow Root Filesystem
 DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
index 3ba677d0e3..3dddf50969 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ignition OSTree: Mount (firstboot) /sysroot
+Description=Ignition OSTree: Mount /sysroot (First Boot)
 # These dependencies should match the "other" in
 # ignition-ostree-mount-subsequent-sysroot.service
 DefaultDependencies=false
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
index 92dde886f0..fe08fe6aab 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
@@ -1,6 +1,6 @@
 # Note this unit is conditionally enabled by ignition-ostree-generator
 [Unit]
-Description=CoreOS: Mount (subsequent) /sysroot
+Description=CoreOS: Mount /sysroot (Subsequent Boot)
 # These dependencies should match the "other" in
 # ignition-ostree-mount-firsboot-sysroot.service
 DefaultDependencies=false
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/coreos-check-kernel.service b/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/coreos-check-kernel.service
index ce8a0ac524..f325a7278e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/coreos-check-kernel.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/50coreos-kernel/coreos-check-kernel.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Check that initrd matches kernel
+Description=Check That Initrd Matches Kernel
 DefaultDependencies=false
 Before=sysinit.target systemd-modules-load.service
 ConditionPathIsDirectory=!/usr/lib/modules/%v
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
index 513043a6ff..b4b7b52aae 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Dump journal to virtio port
+Description=Dump Journal to Virtio Port
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=false
 ConditionVirtualization=|kvm
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
index 18e4b85ad7..08055efe73 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
@@ -1,7 +1,7 @@
 # This service is used for printing a message if
 # cgroups v1 is still being used
 [Unit]
-Description=Check if cgroupsv1 is still being used
+Description=Check if cgroupsv1 Is Still Being Used
 ConditionControlGroupController=v1
 [Service]
 Type=oneshot
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index 6c97fa1b90..0e24ae8aaa 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -1,7 +1,7 @@
 # This service is used for printing a message if no ssh keys were added
 # by Ignition/Afterburn
 [Unit]
-Description=Check that ssh-keys are added by Afterburn/Ignition
+Description=Check That SSH Keys Are Added by Afterburn/Ignition
 # It allows other units to synchronize around any instance
 # of `afterburn-sshkeys@` and not just the `core` user.
 # See https://github.com/coreos/afterburn/pull/481

From b04dc5eb6ae6a2019a2029628af501b7cb99481f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 11 Jan 2023 09:49:28 -0500
Subject: [PATCH 1379/2157] denylist: extend snooze again for
 platforms.aws.nvme test

It's still failing. I'm hoping AWS get's it fixed on their end soon.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index aac34fa825..c547153917 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -49,8 +49,8 @@
     - testing
     - stable
 - pattern: ext.config.platforms.aws.nvme
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1337660156
-  snooze: 2023-01-10
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1378864963
+  snooze: 2023-02-10
 - pattern: ext.config.networking.default-network-behavior-change
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
   snooze: 2023-02-05

From 90ca2c4c58f2327d062cb86d8e97a12434ed0500 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 Jan 2023 06:06:14 +0000
Subject: [PATCH 1380/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index da4bc2c040..2983914c14 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -34,9 +34,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
       type: pin
-  container-selinux:
-    evra: 2:2.198.0-1.fc37.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d03c3d75ec
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1366
-      type: fast-track

From 342a91f506c26c21db0fe16a540ab91418a7f029 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 12 Jan 2023 14:08:04 -0500
Subject: [PATCH 1381/2157] overlay/35-coreos-live: Lazily unmount
 /proc/cmdline

It's possible that some other process has a file descriptor open
for `/proc/cmdline`; if so our unmount will fail.  Do the unmount
lazily - it was designed for exactly this situation.

This was seen in an OCP installation on vSphere at least once.
---
 .../usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh
index 444a536e5a..c42f99db96 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/ostree-cmdline.sh
@@ -15,7 +15,7 @@ case "${1:-unset}" in
         mount --bind /tmp/cmdline /proc/cmdline
         ;;
     stop)
-        umount /proc/cmdline
+        umount -l /proc/cmdline
         rm /tmp/cmdline
         ;;
     *)

From 003cfe1aaece631d9f99eef9815763cad7a17e2c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 12 Jan 2023 15:02:08 -0500
Subject: [PATCH 1382/2157] workflows: normalize the denylist in the
 promotion-diff workflow

In https://github.com/coreos/fedora-coreos-releng-automation/pull/165
we started stripping out the snooze lines so we need to do the same
here in the origin path to make it so we don't get unwanted warnings.
---
 .github/workflows/promotion-diff.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index 0f69d4df79..c852f2b906 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -37,6 +37,12 @@ jobs:
           # manifest.yaml is per-branch, so we care about changes vs. the
           # one in the base, not the one from the origin
           cp base/manifest.yaml origin/
+      - name: Normalize kola-denylist.yaml
+        run: |
+          # When we promote to a production branch we strip out the
+          # snooze lines. Let's do the same here so we don't get warnings.
+          # See https://github.com/coreos/fedora-coreos-releng-automation/pull/165
+          sed -E -i 's/^(\s+)(snooze:\s+.*)/\1# \2 (disabled on promotion)/' origin/kola-denylist.yaml
       - name: Compare trees
         uses: coreos/actions-lib/check-diff@main
         with:

From db26036b1c3f4db1b8762d965d5341a765b8a9be Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 13 Jan 2023 02:13:29 +0000
Subject: [PATCH 1383/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/331/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8b0764f908..258d29c35f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-1.fc37.aarch64"
+      "evra": "1.14.1-2.fc37.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.aarch64"
@@ -856,7 +856,7 @@
       "evra": "2.03.11-9.fc37.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-5.fc37.aarch64"
+      "evra": "1.9.4-1.fc37.aarch64"
     },
     "lzo": {
       "evra": "2.10-7.fc37.aarch64"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.21-1.fc37.aarch64"
+      "evra": "20.10.22-1.fc37.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1054-1.fc37.noarch"
+      "evra": "2:9.0.1160-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1054-1.fc37.aarch64"
+      "evra": "2:9.0.1160-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-10T00:00:00Z",
+    "generated": "2023-01-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T22:18:09Z"
+        "generated": "2023-01-10T22:13:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-10T01:16:57Z"
+        "generated": "2023-01-12T01:29:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6c83a0ed9c..73dd24a083 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -304,7 +304,7 @@
       "evra": "1:4.9.0-2.fc37.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-1.fc37.ppc64le"
+      "evra": "1.14.1-2.fc37.ppc64le"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.ppc64le"
@@ -856,7 +856,7 @@
       "evra": "2.03.11-9.fc37.ppc64le"
     },
     "lz4-libs": {
-      "evra": "1.9.3-5.fc37.ppc64le"
+      "evra": "1.9.4-1.fc37.ppc64le"
     },
     "lzo": {
       "evra": "2.10-7.fc37.ppc64le"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.21-1.fc37.ppc64le"
+      "evra": "20.10.22-1.fc37.ppc64le"
     },
     "mozjs102": {
       "evra": "102.6.0-1.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1054-1.fc37.noarch"
+      "evra": "2:9.0.1160-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1054-1.fc37.ppc64le"
+      "evra": "2:9.0.1160-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-10T00:00:00Z",
+    "generated": "2023-01-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T22:17:59Z"
+        "generated": "2023-01-10T22:15:02Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-10T01:17:07Z"
+        "generated": "2023-01-12T01:29:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ca08fed465..af7be29887 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -301,7 +301,7 @@
       "evra": "1:4.9.0-2.fc37.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-1.fc37.s390x"
+      "evra": "1.14.1-2.fc37.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.s390x"
@@ -799,7 +799,7 @@
       "evra": "2.03.11-9.fc37.s390x"
     },
     "lz4-libs": {
-      "evra": "1.9.3-5.fc37.s390x"
+      "evra": "1.9.4-1.fc37.s390x"
     },
     "lzo": {
       "evra": "2.10-7.fc37.s390x"
@@ -808,7 +808,7 @@
       "evra": "4.2-2.fc37.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.21-1.fc37.s390x"
+      "evra": "20.10.22-1.fc37.s390x"
     },
     "mozjs102": {
       "evra": "102.6.0-1.fc37.s390x"
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1054-1.fc37.noarch"
+      "evra": "2:9.0.1160-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1054-1.fc37.s390x"
+      "evra": "2:9.0.1160-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-10T00:00:00Z",
+    "generated": "2023-01-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T22:17:38Z"
+        "generated": "2023-01-10T22:17:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-10T01:17:12Z"
+        "generated": "2023-01-12T01:30:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7042e2cbd1..9c1b674217 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-1.fc37.x86_64"
+      "evra": "1.14.1-2.fc37.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.x86_64"
@@ -865,7 +865,7 @@
       "evra": "2.03.11-9.fc37.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.3-5.fc37.x86_64"
+      "evra": "1.9.4-1.fc37.x86_64"
     },
     "lzo": {
       "evra": "2.10-7.fc37.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:2.1-53.fc37.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.21-1.fc37.x86_64"
+      "evra": "20.10.22-1.fc37.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1054-1.fc37.noarch"
+      "evra": "2:9.0.1160-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1054-1.fc37.x86_64"
+      "evra": "2:9.0.1160-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-10T00:00:00Z",
+    "generated": "2023-01-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-09T22:25:31Z"
+        "generated": "2023-01-10T22:16:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-10T01:17:16Z"
+        "generated": "2023-01-12T01:30:06Z"
       }
     }
   }

From 93b3173b0e77f8f4d6a370016bf1d63ab649a48b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 14 Jan 2023 22:15:26 +0000
Subject: [PATCH 1384/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/334/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 258d29c35f..9416670b01 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -391,16 +391,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-72.fc37.noarch"
+      "evra": "1:2.06-75.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-72.fc37.aarch64"
+      "evra": "1:2.06-75.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-72.fc37.aarch64"
+      "evra": "1:2.06-75.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-72.fc37.aarch64"
+      "evra": "1:2.06-75.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1160-1.fc37.noarch"
+      "evra": "2:9.0.1182-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1160-1.fc37.aarch64"
+      "evra": "2:9.0.1182-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-13T00:00:00Z",
+    "generated": "2023-01-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-10T22:13:28Z"
+        "generated": "2023-01-13T03:51:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-12T01:29:46Z"
+        "generated": "2023-01-14T01:01:49Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 73dd24a083..088d44750e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-72.fc37.noarch"
+      "evra": "1:2.06-75.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-72.fc37.ppc64le"
+      "evra": "1:2.06-75.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-72.fc37.noarch"
+      "evra": "1:2.06-75.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-72.fc37.ppc64le"
+      "evra": "1:2.06-75.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-72.fc37.ppc64le"
+      "evra": "1:2.06-75.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1160-1.fc37.noarch"
+      "evra": "2:9.0.1182-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1160-1.fc37.ppc64le"
+      "evra": "2:9.0.1182-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-13T00:00:00Z",
+    "generated": "2023-01-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-10T22:15:02Z"
+        "generated": "2023-01-13T03:51:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-12T01:29:56Z"
+        "generated": "2023-01-14T01:01:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index af7be29887..839bed6930 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1160-1.fc37.noarch"
+      "evra": "2:9.0.1182-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1160-1.fc37.s390x"
+      "evra": "2:9.0.1182-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-13T00:00:00Z",
+    "generated": "2023-01-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-10T22:17:46Z"
+        "generated": "2023-01-13T03:51:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-12T01:30:01Z"
+        "generated": "2023-01-14T01:02:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9c1b674217..cc49ec8f8b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -391,22 +391,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-72.fc37.noarch"
+      "evra": "1:2.06-75.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-72.fc37.x86_64"
+      "evra": "1:2.06-75.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-72.fc37.x86_64"
+      "evra": "1:2.06-75.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-72.fc37.noarch"
+      "evra": "1:2.06-75.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-72.fc37.x86_64"
+      "evra": "1:2.06-75.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-72.fc37.x86_64"
+      "evra": "1:2.06-75.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1160-1.fc37.noarch"
+      "evra": "2:9.0.1182-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1160-1.fc37.x86_64"
+      "evra": "2:9.0.1182-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-13T00:00:00Z",
+    "generated": "2023-01-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-10T22:16:38Z"
+        "generated": "2023-01-13T03:54:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-12T01:30:06Z"
+        "generated": "2023-01-14T01:02:10Z"
       }
     }
   }

From 10ed94fb6ce3d6441f1b3accf75a38be6d637771 Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Fri, 6 Jan 2023 10:57:14 -0500
Subject: [PATCH 1385/2157] tests/kola/rpm-ostree: add test for kernel
 replacement

---
 tests/kola/rpm-ostree/kernel-replace | 122 +++++++++++++++++++++++++++
 1 file changed, 122 insertions(+)
 create mode 100755 tests/kola/rpm-ostree/kernel-replace

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
new file mode 100755
index 0000000000..9a4136c90b
--- /dev/null
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -0,0 +1,122 @@
+#!/bin/bash
+## kola:
+##   # This test only runs on FCOS due to a problem with skopeo copy on
+##   # RHCOS. See: https://github.com/containers/skopeo/issues/1846
+##   distros: fcos
+##   # We fetch packages from centos mirrors.
+##   tags: needs-internet
+#
+# Build container image with a new kernel and reboot into the new image.
+#
+# Copyright (C) 2023 Red Hat, Inc.
+#
+# This library is free software; you can redistribute it and/or
+# modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation; either
+# version 2 of the License, or (at your option) any later version.
+#
+# This library is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public
+# License along with this library; if not, write to the
+# Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+# Boston, MA 02111-1307, USA.
+
+set -euo pipefail
+. $KOLA_EXT_DATA/commonlib.sh
+set -x
+cd $(mktemp -d)
+
+# TODO: It'd be much better to test this via a registry
+image_dir=/var/tmp/fcos
+image=oci:$image_dir
+image_pull=ostree-unverified-image:$image
+tmp_imagedir=/var/tmp/fcos-tmp
+arch=$(arch)
+fversion="37"
+kver="6.0.7-301.fc$fversion.${arch}"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+    # Take the existing ostree commit, and export it to a container image, then rebase to it.
+    checksum=$(rpm-ostree status --json | jq -r '.deployments[0].checksum')
+    v0=$(rpm-ostree status --json | jq -r '.deployments[0].version')
+    rm ${image_dir} -rf
+    # Since we're switching OS update stream, turn off zincati
+    systemctl mask --now zincati
+    ostree container encapsulate --repo=/ostree/repo ${checksum} "${image}"
+    # This one keeps --experimental, but we also test without it below
+    rpm-ostree rebase --experimental "$image_pull"
+    ostree container image list --repo=/ostree/repo | tee imglist.txt
+    # Test rebasing back to ostree https://github.com/coreos/rpm-ostree/issues/3677
+    rpm-ostree rebase "$checksum"
+    rpm-ostree rebase "$image_pull"
+    /tmp/autopkgtest-reboot 1
+    ;;
+  1)
+    # Setup
+    # copy the OCI dir to containers-storage for a local build
+    skopeo copy $image containers-storage:localhost/fcos
+    rm "${image_dir}" -rf
+    td=$(mktemp -d)
+    cd ${td}
+    version=$(rpm-ostree --version | grep Version)
+cat > dracut_call.sh << EOF
+#!/bin/bash
+# Temporary workaround for: https://github.com/coreos/rpm-ostree/issues/4190
+# This has been fixed on rpm-ostree 2022.18 and this script will be removed
+# once that version reaches the stable coreos stream.
+if [[ "$version" == *"2023"* ]] || [[ "$version" == *"2022.19"* ]]; then
+    echo "Running rpm-ostree 2022.19 or newer.";
+else
+    echo "Running rpm-ostree 2022.18 or older, rebuilding the initramfs.";
+    echo "Building initramfs for Kernel: $kver" 
+    /usr/libexec/rpm-ostree/wrapped/dracut --tmpdir /tmp/ --no-hostonly --kver $kver --reproducible \
+    -v --add ostree -f /tmp/initramfs2.img
+    mv /tmp/initramfs2.img /lib/modules/$kver/initramfs.img
+fi;
+EOF
+cat > Dockerfile << EOF
+FROM localhost/fcos
+RUN rpm-ostree cliwrap install-to-root /
+ADD dracut_call.sh dracut_call.sh
+RUN cat dracut_call.sh
+RUN chmod +x dracut_call.sh && rpm-ostree override replace https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-$kver.rpm \
+    https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-core-$kver.rpm \
+    https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-modules-$kver.rpm && \
+    ./dracut_call.sh && \
+    ostree container commit
+EOF
+    # Older podman found in RHEL8 blows up without /etc/resolv.conf
+    # which happens in our qemu path.
+    touched_resolv_conf=0
+    if test '!' -f /etc/resolv.conf; then
+      podmanv=$(podman --version)
+      case "${podmanv#podman version }" in
+        3.*) touched_resolv_conf=1; touch /etc/resolv.conf;;
+      esac
+    fi
+    podman build --net=host -t localhost/fcos-derived --squash .
+    if test "${touched_resolv_conf}" -eq 1; then
+      rm -vf /etc/resolv.conf
+    fi
+    derived=oci:$image_dir:derived
+    skopeo copy containers-storage:localhost/fcos-derived $derived
+    rpm-ostree --version
+    rpm-ostree rebase ostree-unverified-image:$derived
+    ostree container image list --repo=/ostree/repo
+    rm $image_dir -rf
+    /tmp/autopkgtest-reboot 2
+    ;;
+  2)
+    un=$(uname -r)
+    if test "$un" != "$kver"; then
+      echo "Expected kernel $kver but found $un"
+      exit 1
+    fi
+    test -f /usr/lib/modules/$kver/initramfs.img
+    test -f /usr/lib/modules/$kver/vmlinuz
+esac

From 07df2caf9139104f76f0a100e49f2cf6247489e4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 16 Jan 2023 16:58:05 +0000
Subject: [PATCH 1386/2157] overrides: fast-track NetworkManager-1.40.10-1.fc37

---
 manifest-lock.overrides.yaml | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2983914c14..8344013a8c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,27 +10,32 @@
 
 packages:
   NetworkManager:
-    evr: 1:1.40.0-1.fc37
+    evr: 1:1.40.10-1.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: pin
+      type: fast-track
   NetworkManager-cloud-setup:
-    evr: 1:1.40.0-1.fc37
+    evr: 1:1.40.10-1.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: pin
+      type: fast-track
   NetworkManager-libnm:
-    evr: 1:1.40.0-1.fc37
+    evr: 1:1.40.10-1.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: pin
+      type: fast-track
   NetworkManager-team:
-    evr: 1:1.40.0-1.fc37
+    evr: 1:1.40.10-1.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: pin
+      type: fast-track
   NetworkManager-tui:
-    evr: 1:1.40.0-1.fc37
+    evr: 1:1.40.10-1.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: pin
+      type: fast-track

From 03234192cf0c31503a51747cb10c87314de2fe57 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 16 Jan 2023 12:32:12 -0500
Subject: [PATCH 1387/2157] denylist: drop denial from
 default-network-behavior-change test

Now that we have unpinned NetworkManager we can start to run this
test again.
---
 kola-denylist.yaml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c547153917..b7c58a93b3 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -51,9 +51,6 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1378864963
   snooze: 2023-02-10
-- pattern: ext.config.networking.default-network-behavior-change
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1341#issuecomment-1309756265
-  snooze: 2023-02-05
 - pattern: ext.config.ntp.timesyncd.dhcp-propagation                                                                                                       
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1364#issuecomment-1371727078
   snooze: 2023-02-05

From 1923b7b6ce9b398f797d981f50fb750533df3700 Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Tue, 17 Jan 2023 14:53:49 -0500
Subject: [PATCH 1388/2157] kola/rpm-ostree/kernel-replace: update to work on
 all arches

Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 tests/kola/rpm-ostree/kernel-replace | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 9a4136c90b..a2f690ea5d 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -1,10 +1,14 @@
 #!/bin/bash
 ## kola:
+##   # Increase timeout since this test has a lot of I/O and involves rebasing
+##   timeoutMin: 15
 ##   # This test only runs on FCOS due to a problem with skopeo copy on
 ##   # RHCOS. See: https://github.com/containers/skopeo/issues/1846
 ##   distros: fcos
-##   # We fetch packages from centos mirrors.
-##   tags: needs-internet
+##   # tags:
+##   #   - needs-internet - we fetch files from koji
+##   #   - platform-independent - should pass everywhere if it passes anywhere
+##   tags: "needs-internet platform-independent"
 #
 # Build container image with a new kernel and reboot into the new image.
 #
@@ -36,8 +40,7 @@ image=oci:$image_dir
 image_pull=ostree-unverified-image:$image
 tmp_imagedir=/var/tmp/fcos-tmp
 arch=$(arch)
-fversion="37"
-kver="6.0.7-301.fc$fversion.${arch}"
+kver="6.0.7-301.fc37.${arch}"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
@@ -84,9 +87,8 @@ FROM localhost/fcos
 RUN rpm-ostree cliwrap install-to-root /
 ADD dracut_call.sh dracut_call.sh
 RUN cat dracut_call.sh
-RUN chmod +x dracut_call.sh && rpm-ostree override replace https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-$kver.rpm \
-    https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-core-$kver.rpm \
-    https://dl.fedoraproject.org/pub/fedora/linux/releases/$fversion/Everything/$arch/os/Packages/k/kernel-modules-$kver.rpm && \
+RUN chmod +x dracut_call.sh && rpm-ostree override replace \ 
+    https://koji.fedoraproject.org/koji/buildinfo?buildID=2084352 && \
     ./dracut_call.sh && \
     ostree container commit
 EOF

From 937d3295bd4ecd4ccb426c5e07ee0ab3f35a5ce5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 16 Jan 2023 15:22:57 -0500
Subject: [PATCH 1389/2157] overlay.d: only run coreos-enable-network on first
 boot

I noticed recently that Azure is bringing up networking in the initramfs
on every boot [1]. This behavior was originally introduced in c1cf903. After
some discussion with @jlebon and @bgilbert we are going to convert the
coreos-enable-network.service to only be pulled in and enalbed on the
Ignition boot so that it doesn't run on subsequent boots.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1383#issuecomment-1384526420
---
 .../usr/lib/dracut/modules.d/35coreos-network/module-setup.sh   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
index 0cf3a1a464..31da969cdd 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/module-setup.sh
@@ -11,7 +11,7 @@ install() {
     inst_simple "$moddir/coreos-enable-network.sh" \
         "/usr/sbin/coreos-enable-network"
     install_and_enable_unit "coreos-enable-network.service" \
-        "initrd.target"
+        "ignition-complete.target"
 
     inst_simple "$moddir/coreos-copy-firstboot-network.sh" \
         "/usr/sbin/coreos-copy-firstboot-network"

From 8d631783693b0722fbcd40276518998ea5d10f81 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 16 Jan 2023 22:15:32 -0500
Subject: [PATCH 1390/2157] overlay.d: create new 25-azure-udev-rules overlay

We previously had the 68-azure-sriov-nm-unmanaged.rules but we
figured out we also want those rules in the initramfs. This
commit makes a new overlay.d entry and groups together a new
dracut module along with the udev rules in that overlay.d directory.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1383
---
 manifests/fedora-coreos-base.yaml               |  1 +
 overlay.d/25-azure-udev-rules/statoverride      |  2 ++
 .../25azure-udev-rules/module-setup.sh          | 17 +++++++++++++++++
 .../rules.d/68-azure-sriov-nm-unmanaged.rules   |  0
 overlay.d/README.md                             | 13 +++++++++++++
 5 files changed, 33 insertions(+)
 create mode 100644 overlay.d/25-azure-udev-rules/statoverride
 create mode 100644 overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
 rename overlay.d/{05core => 25-azure-udev-rules}/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules (100%)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 0ea309f877..6d1a22666d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -20,6 +20,7 @@ ostree-layers:
   - overlay/08nouveau
   - overlay/09misc
   - overlay/20platform-chrony
+  - overlay/25-azure-udev-rules
 
 # Be minimal
 recommends: false
diff --git a/overlay.d/25-azure-udev-rules/statoverride b/overlay.d/25-azure-udev-rules/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/25-azure-udev-rules/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh b/overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
new file mode 100644
index 0000000000..1be75d0e3d
--- /dev/null
+++ b/overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/bash
+# Install 68-azure-sriov-nm-unmanaged.rules into the initramfs
+
+# called by dracut
+check() {
+    return 0
+}
+
+# called by dracut
+depends() {
+    return 0
+}
+
+# called by dracut
+install() {
+    inst_rules 68-azure-sriov-nm-unmanaged.rules
+}
diff --git a/overlay.d/05core/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules b/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
similarity index 100%
rename from overlay.d/05core/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
rename to overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
diff --git a/overlay.d/README.md b/overlay.d/README.md
index ece8485284..1e5eed2da1 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -53,3 +53,16 @@ Add static chrony configuration for NTP servers provided on platforms
 such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
 should override other chrony configuration (e.g. DHCP-provided)
 configuration.
+
+25-azure-udev-rules
+-------------------
+
+Add udev rules for SRIOV networking on Azure. The udev rules are also
+needed in the initramfs [1] and are delivered here via a dracut
+module. This may be able to be removed once an upstream PR [2]
+merges, though we need to make sure the RPM [3] includes the dracut
+bits to include the rules in the initramfs too.
+
+[1] https://github.com/coreos/fedora-coreos-tracker/issues/1383
+[2] https://github.com/Azure/WALinuxAgent/pull/1622
+[3] https://src.fedoraproject.org/rpms/WALinuxAgent/pull-request/4

From aeb031c7e02935aa25ce57d941c676ddfa494a72 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 17 Jan 2023 21:24:01 -0500
Subject: [PATCH 1391/2157] overlay.d: add change/move to action for azure
 sriov rules

When testing out if these rules applied correctly in the initramfs
I wasn't observing the device would properly get NM_UNMANAGED=1
until I added change/move.

This is similar to what is done by NM over in
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/38d3834e2c464bd4820392800a3a1fe3f286fc62/data/85-nm-unmanaged.rules#L5
---
 .../usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules b/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
index 59cf73bb0a..e47ef35466 100644
--- a/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
+++ b/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
@@ -1,4 +1,4 @@
 # Accelerated Networking on Azure exposes a new SRIOV interface to the VM.
 # This interface is transparently bonded to the synthetic interface,
 # so NetworkManager should just ignore any SRIOV interfaces.
-SUBSYSTEM=="net", DRIVERS=="hv_pci", ACTION=="add", ENV{NM_UNMANAGED}="1"
+SUBSYSTEM=="net", DRIVERS=="hv_pci", ACTION=="add|change|move", ENV{NM_UNMANAGED}="1"

From a82da64da2e8a750f4ae3962469efe074cc7bf10 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 17 Jan 2023 16:56:01 -0500
Subject: [PATCH 1392/2157] coreos-teardown-initramfs: fix spelling error

---
 .../modules.d/35coreos-ignition/coreos-teardown-initramfs.sh    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index bfc9320059..ddb4ff4a72 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -177,7 +177,7 @@ down_interface() {
 }
 
 # Iterate through the interfaces in the machine and take them down.
-# Note that in the futre we would like to possibly use `nmcli` networking off`
+# Note that in the future we would like to possibly use `nmcli` networking off`
 # for this. See the following two comments for details:
 # https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
 # https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599746049

From 2583e8c9be36045a6c2c3f39367b79d4bac09d53 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 17 Jan 2023 16:57:33 -0500
Subject: [PATCH 1393/2157] coreos-teardown-initramfs: ignore lo.nmconnection

Upstream NetworkManager now autogenerates a lo.nmconnection connection
to manage the local loopback device. Let's ignore that connection for
the purposes of our comparison and propagation here.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1385
---
 .../35coreos-ignition/coreos-teardown-initramfs.sh          | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index ddb4ff4a72..12e8821f39 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -58,6 +58,9 @@ are_default_NM_configs() {
     # Copy over the previously generated connection(s) profiles
     cp  /run/NetworkManager/system-connections/* \
         /run/coreos-teardown-initramfs/connections-compare-1/
+    # Delete lo.nmconnection if it was created.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1385
+    rm -f /run/coreos-teardown-initramfs/connections-compare-1/lo.nmconnection
     # Do a new run with the default input
     /usr/libexec/nm-initrd-generator \
         -c /run/coreos-teardown-initramfs/connections-compare-2 \
@@ -127,6 +130,9 @@ propagate_initramfs_networking() {
             else
                 echo "info: propagating initramfs networking config to the real root"
                 cp -v /run/NetworkManager/system-connections/* /sysroot/etc/NetworkManager/system-connections/
+                # Delete lo.nmconnection if it was created.
+                # https://github.com/coreos/fedora-coreos-tracker/issues/1385
+                rm -vf /sysroot/etc/NetworkManager/system-connections/lo.nmconnection
                 coreos-relabel /etc/NetworkManager/system-connections/
             fi
         else

From f63fd9bf6d603ea24ff293dab427caf54adc9afa Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 17 Jan 2023 17:01:02 -0500
Subject: [PATCH 1394/2157] tests: update comment in bootif net propagation
 test

This improves the accuracy of the comment since we're forced to
use qemu because the features we need aren't available on other
platforms.
---
 .../kola/networking/no-default-initramfs-net-propagation/bootif | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index 6928b8dc48..fd85608870 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
+##   # appendFirstbootKernelArgs is only supported on qemu
 ##   platforms: qemu
 ##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
 ##   # and the coreos-teardown-initramfs interact. The MAC address is from:

From 7ce9c45e66f77dc97e96256d299381e487802a69 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 17 Jan 2023 17:02:21 -0500
Subject: [PATCH 1395/2157] tests: set rd.neednet=1 in bootif net propagation
 test

Normally on qemu networking isn't brought up in the initramfs because
it's not needed (the Ignition config is passed via fw_cfg, not network).
This will force networking to be brought up to verify that bringing up
NetworkManager doesn't materially change things.

One case where it did materially change things and we needed to adapt
is described in https://github.com/coreos/fedora-coreos-tracker/issues/1385
---
 .../networking/no-default-initramfs-net-propagation/bootif    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index fd85608870..3d1f81c871 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -5,7 +5,9 @@
 ##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
 ##   # and the coreos-teardown-initramfs interact. The MAC address is from:
 ##   # https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
-##   appendFirstbootKernelArgs: BOOTIF=52:54:00:12:34:56
+##   # Add rd.neednet=1 so we can force networking to be brought up on
+##   # qemu to test that doing so doesn't materially change things.
+##   appendFirstbootKernelArgs: "BOOTIF=52:54:00:12:34:56 rd.neednet=1"
 
 # In addition to the pure network defaults case we should also make
 # sure that when BOOTIF= or rd.bootif= are provided on the kernel

From e41fd27e3e5dafe671be47c449358aaee984b143 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 18 Jan 2023 17:36:08 -0500
Subject: [PATCH 1396/2157] ignition-ostree-firstboot-uuid: nuke libblkid cache
 after UUID restamp

We're hitting an issue right now where
`coreos-ignition-unique-boot.service` (backed by `rdcore`) is failing
on multipath with:

```
Error: System has 2 devices with a filesystem labeled 'boot': ["/dev/sdb3", "/dev/mapper/mpatha3"]
```

The unique label detection code in `rdcore` determines whether multiple
lower-level devices actually refer to the same higher-level device (e.g.
multipath or RAID1) by looking at the filesystem UUID. It uses blkid to
query device UUIDs.

libblkid maintains a cache of devices to avoid reprobing all devices
all the time. This cache normally gets updated (I *think* via udev,
but I'm not sure) when changes occur. But something changed recently
at least in the multipath case where the cache is only updated for the
multipathed device, but not the underlying backing paths.

This then leads `rdcore` to think that they're separate devices. We
probably should make `rdcore` smarter here in how it handles multipath
devices, but still we don't want to have this stale cache around for
the sake of other tools relying on it.

We started hitting this more frequently starting with kernel v6.0.17,
but the issue triggers equally as easily on v6.0.16 when reproduced
artificially. So I think we've just been lucky so far that this hasn't
bit us (possibly we raced with another service that helped refresh the
cache).

There's likely a bug here either in the kernel, or multipath or blkid.
This is tracked by https://bugzilla.redhat.com/show_bug.cgi?id=2162151.
Until then, nuke the blkid cache to force a reprobe on the next call.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1373
---
 .../40ignition-ostree/ignition-ostree-firstboot-uuid          | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index b2177352e8..94e2055287 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -62,6 +62,10 @@ if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac
   udevadm settle || :
+  # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2162151.
+  # We nuke the blkid cache containing stale UUIDs so that future blkid calls
+  # (or tools leveraging libblkid) will be forced to re-probe.
+  rm -rf /run/blkid
   echo "Regenerated UUID for ${target}"
 else
   echo "No changes required for ${target} TYPE=${TYPE} UUID=${UUID}"

From 6f4c62d8fb17ca5a06397b5ac8cfab14086de79f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 Jan 2023 04:20:20 +0000
Subject: [PATCH 1397/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/342/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9416670b01..c079af2099 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.0-1.fc37.aarch64"
+      "evra": "1:1.40.10-1.fc37.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.0-1.fc37.aarch64"
+      "evra": "1:1.40.10-1.fc37.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.0-1.fc37.aarch64"
+      "evra": "1:1.40.10-1.fc37.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.0-1.fc37.aarch64"
+      "evra": "1:1.40.10-1.fc37.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.0-1.fc37.aarch64"
+      "evra": "1:1.40.10-1.fc37.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -367,13 +367,13 @@
       "evra": "2.74.1-2.fc37.aarch64"
     },
     "glibc": {
-      "evra": "2.36-8.fc37.aarch64"
+      "evra": "2.36-9.fc37.aarch64"
     },
     "glibc-common": {
-      "evra": "2.36-8.fc37.aarch64"
+      "evra": "2.36-9.fc37.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-8.fc37.aarch64"
+      "evra": "2.36-9.fc37.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.18-300.fc37.aarch64"
+      "evra": "6.1.6-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.0.18-300.fc37.aarch64"
+      "evra": "6.1.6-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.0.18-300.fc37.aarch64"
+      "evra": "6.1.6-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-14T00:00:00Z",
+    "generated": "2023-01-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-13T03:51:28Z"
+        "generated": "2023-01-16T18:43:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-14T01:01:49Z"
+        "generated": "2023-01-18T01:25:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 088d44750e..c06ad8c7c6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.0-1.fc37.ppc64le"
+      "evra": "1:1.40.10-1.fc37.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.0-1.fc37.ppc64le"
+      "evra": "1:1.40.10-1.fc37.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.0-1.fc37.ppc64le"
+      "evra": "1:1.40.10-1.fc37.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.0-1.fc37.ppc64le"
+      "evra": "1:1.40.10-1.fc37.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.0-1.fc37.ppc64le"
+      "evra": "1:1.40.10-1.fc37.ppc64le"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -358,13 +358,13 @@
       "evra": "2.74.1-2.fc37.ppc64le"
     },
     "glibc": {
-      "evra": "2.36-8.fc37.ppc64le"
+      "evra": "2.36-9.fc37.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.36-8.fc37.ppc64le"
+      "evra": "2.36-9.fc37.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-8.fc37.ppc64le"
+      "evra": "2.36-9.fc37.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.18-300.fc37.ppc64le"
+      "evra": "6.1.6-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.0.18-300.fc37.ppc64le"
+      "evra": "6.1.6-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.0.18-300.fc37.ppc64le"
+      "evra": "6.1.6-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-14T00:00:00Z",
+    "generated": "2023-01-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-13T03:51:18Z"
+        "generated": "2023-01-16T18:40:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-14T01:01:58Z"
+        "generated": "2023-01-18T01:26:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 839bed6930..c255ce5b25 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.0-1.fc37.s390x"
+      "evra": "1:1.40.10-1.fc37.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.0-1.fc37.s390x"
+      "evra": "1:1.40.10-1.fc37.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.0-1.fc37.s390x"
+      "evra": "1:1.40.10-1.fc37.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.0-1.fc37.s390x"
+      "evra": "1:1.40.10-1.fc37.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.0-1.fc37.s390x"
+      "evra": "1:1.40.10-1.fc37.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -343,13 +343,13 @@
       "evra": "2.74.1-2.fc37.s390x"
     },
     "glibc": {
-      "evra": "2.36-8.fc37.s390x"
+      "evra": "2.36-9.fc37.s390x"
     },
     "glibc-common": {
-      "evra": "2.36-8.fc37.s390x"
+      "evra": "2.36-9.fc37.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-8.fc37.s390x"
+      "evra": "2.36-9.fc37.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.18-300.fc37.s390x"
+      "evra": "6.1.6-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.0.18-300.fc37.s390x"
+      "evra": "6.1.6-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.0.18-300.fc37.s390x"
+      "evra": "6.1.6-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-14T00:00:00Z",
+    "generated": "2023-01-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-13T03:51:03Z"
+        "generated": "2023-01-16T18:42:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-14T01:02:04Z"
+        "generated": "2023-01-18T01:26:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cc49ec8f8b..7bc68d7654 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.0-1.fc37.x86_64"
+      "evra": "1:1.40.10-1.fc37.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.0-1.fc37.x86_64"
+      "evra": "1:1.40.10-1.fc37.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.0-1.fc37.x86_64"
+      "evra": "1:1.40.10-1.fc37.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.0-1.fc37.x86_64"
+      "evra": "1:1.40.10-1.fc37.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.0-1.fc37.x86_64"
+      "evra": "1:1.40.10-1.fc37.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.8.0.11-1.fc37.noarch"
@@ -367,13 +367,13 @@
       "evra": "2.74.1-2.fc37.x86_64"
     },
     "glibc": {
-      "evra": "2.36-8.fc37.x86_64"
+      "evra": "2.36-9.fc37.x86_64"
     },
     "glibc-common": {
-      "evra": "2.36-8.fc37.x86_64"
+      "evra": "2.36-9.fc37.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-8.fc37.x86_64"
+      "evra": "2.36-9.fc37.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-3.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.0.18-300.fc37.x86_64"
+      "evra": "6.1.6-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.0.18-300.fc37.x86_64"
+      "evra": "6.1.6-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.0.18-300.fc37.x86_64"
+      "evra": "6.1.6-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-14T00:00:00Z",
+    "generated": "2023-01-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-13T03:54:31Z"
+        "generated": "2023-01-16T18:40:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-14T01:02:10Z"
+        "generated": "2023-01-18T01:26:15Z"
       }
     }
   }

From 302215f7e768f915bdef8998f26878f330b1f162 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 Jan 2023 12:07:17 +0000
Subject: [PATCH 1398/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 32 +-------------------------------
 1 file changed, 1 insertion(+), 31 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 8344013a8c..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,34 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  NetworkManager:
-    evr: 1:1.40.10-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: fast-track
-  NetworkManager-cloud-setup:
-    evr: 1:1.40.10-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: fast-track
-  NetworkManager-libnm:
-    evr: 1:1.40.10-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: fast-track
-  NetworkManager-team:
-    evr: 1:1.40.10-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: fast-track
-  NetworkManager-tui:
-    evr: 1:1.40.10-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7f92dd90a3
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1341
-      type: fast-track
+packages: {}

From fd7080f5c59a8073ed890ca86f6678745d0a6457 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 19 Jan 2023 09:19:47 +0100
Subject: [PATCH 1399/2157] overlay.d: remove boot-disk workaround for secex
 ignition config

RHCOS 4.12 comes with new kernel >= 5.14.0-70.36.1.el9_0, so we
no longer need the workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2075085

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 .../modules.d/35coreos-ignition/01-secex.ign   |  2 +-
 .../35coreos-ignition/coreos-diskful-generator |  1 +
 .../ignition-ostree-secex-config.service       | 18 ------------------
 .../ignition-ostree-secex-config.sh            |  5 -----
 .../40ignition-ostree/module-setup.sh          |  5 -----
 5 files changed, 2 insertions(+), 29 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
 delete mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index 215c179378..637228d107 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -5,7 +5,7 @@
   "storage": {
     "disks": [
       {
-        "device": "${BOOTDEV}",
+        "device": "/dev/disk/by-id/coreos-boot-disk",
         "partitions": [
           {
             "label": "boot",
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index b8eab207c0..f2d313dce7 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -73,5 +73,6 @@ EOF
     if [[ "${secure_execution}" = "1" ]]; then
         mkdir -p /run/coreos/
         touch /run/coreos/secure-execution
+        cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
     fi
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
deleted file mode 100644
index 292f571e6c..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.service
+++ /dev/null
@@ -1,18 +0,0 @@
-# RHOCS 4.12.s390x has an old kernel with a known issue: https://bugzilla.redhat.com/show_bug.cgi?id=2075085
-# Once we have kernel >= 4.18.0-387.el8.s390x we should drop this unit and copy config in coreos-diskful-generator
-[Unit]
-Description=Ignition OSTree: Inject Secure Execution Config
-DefaultDependencies=false
-ConditionArchitecture=s390x
-ConditionKernelCommandLine=ostree
-ConditionPathExists=/run/coreos/secure-execution
-OnFailure=emergency.target
-OnFailureJobMode=isolate
-
-After=coreos-gpt-setup.service
-Before=ignition-fetch-offline.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/libexec/ignition-ostree-secex-config
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
deleted file mode 100755
index 5a9736ebff..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-secex-config.sh
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-bootdev=$(blkid --list-one --output device --match-token PARTLABEL=boot | sed 's,[0-9]\+$,,')
-sed "s,\${BOOTDEV},$bootdev," < /usr/lib/coreos/01-secex.ign > /usr/lib/ignition/base.d/01-secex.ign
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index f027b2c209..d0a4c89a9b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -107,9 +107,4 @@ install() {
         /usr/libexec/coreos-check-rootfs-size
 
     inst_script "$moddir/coreos-relabel" /usr/bin/coreos-relabel
-
-    # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2075085
-    install_ignition_unit ignition-ostree-secex-config.service
-    inst_script "$moddir/ignition-ostree-secex-config.sh" \
-        /usr/libexec/ignition-ostree-secex-config
 }

From 8ed927fa739a90bff7ac21a9c880449d1bed7ba9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 Jan 2023 22:21:24 +0000
Subject: [PATCH 1400/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/343/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c079af2099..6917d50722 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -259,7 +259,7 @@
       "evra": "18-2.fc37.aarch64"
     },
     "efivar-libs": {
-      "evra": "38-5.fc37.aarch64"
+      "evra": "38-6.fc37.aarch64"
     },
     "elfutils-default-yama-scope": {
       "evra": "0.188-3.fc37.noarch"
@@ -424,22 +424,22 @@
       "evra": "5.18.0-2.fc37.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-3.fc37.aarch64"
+      "evra": "1.8.8-4.fc37.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-3.fc37.aarch64"
+      "evra": "1.8.8-4.fc37.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.8-3.fc37.aarch64"
+      "evra": "1.8.8-4.fc37.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.8-3.fc37.aarch64"
+      "evra": "1.8.8-4.fc37.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.8-3.fc37.noarch"
+      "evra": "1.8.8-4.fc37.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-3.fc37.aarch64"
+      "evra": "1.8.8-4.fc37.aarch64"
     },
     "iputils": {
       "evra": "20221126-1.fc37.aarch64"
@@ -871,7 +871,7 @@
       "evra": "2:0.6.0-5.fc37.aarch64"
     },
     "mozjs102": {
-      "evra": "102.6.0-1.fc37.aarch64"
+      "evra": "102.7.0-1.fc37.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.aarch64"
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1247,7 +1247,7 @@
         "generated": "2023-01-16T18:43:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-18T01:25:54Z"
+        "generated": "2023-01-19T06:01:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c06ad8c7c6..34278a27c8 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -418,22 +418,22 @@
       "evra": "5.18.0-2.fc37.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-3.fc37.ppc64le"
+      "evra": "1.8.8-4.fc37.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-3.fc37.ppc64le"
+      "evra": "1.8.8-4.fc37.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.8-3.fc37.ppc64le"
+      "evra": "1.8.8-4.fc37.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.8-3.fc37.ppc64le"
+      "evra": "1.8.8-4.fc37.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.8-3.fc37.noarch"
+      "evra": "1.8.8-4.fc37.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-3.fc37.ppc64le"
+      "evra": "1.8.8-4.fc37.ppc64le"
     },
     "iputils": {
       "evra": "20221126-1.fc37.ppc64le"
@@ -868,7 +868,7 @@
       "evra": "20.10.22-1.fc37.ppc64le"
     },
     "mozjs102": {
-      "evra": "102.6.0-1.fc37.ppc64le"
+      "evra": "102.7.0-1.fc37.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.ppc64le"
@@ -1072,10 +1072,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1253,7 +1253,7 @@
         "generated": "2023-01-16T18:40:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-18T01:26:03Z"
+        "generated": "2023-01-19T06:02:04Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c255ce5b25..798d26d7b0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -388,22 +388,22 @@
       "evra": "5.18.0-2.fc37.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-3.fc37.s390x"
+      "evra": "1.8.8-4.fc37.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-3.fc37.s390x"
+      "evra": "1.8.8-4.fc37.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.8-3.fc37.s390x"
+      "evra": "1.8.8-4.fc37.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.8-3.fc37.s390x"
+      "evra": "1.8.8-4.fc37.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.8-3.fc37.noarch"
+      "evra": "1.8.8-4.fc37.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-3.fc37.s390x"
+      "evra": "1.8.8-4.fc37.s390x"
     },
     "iputils": {
       "evra": "20221126-1.fc37.s390x"
@@ -811,7 +811,7 @@
       "evra": "20.10.22-1.fc37.s390x"
     },
     "mozjs102": {
-      "evra": "102.6.0-1.fc37.s390x"
+      "evra": "102.7.0-1.fc37.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.s390x"
@@ -1003,10 +1003,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1181,7 +1181,7 @@
         "generated": "2023-01-16T18:42:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-18T01:26:08Z"
+        "generated": "2023-01-19T06:02:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7bc68d7654..c71bbdecb7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -259,7 +259,7 @@
       "evra": "18-2.fc37.x86_64"
     },
     "efivar-libs": {
-      "evra": "38-5.fc37.x86_64"
+      "evra": "38-6.fc37.x86_64"
     },
     "elfutils-default-yama-scope": {
       "evra": "0.188-3.fc37.noarch"
@@ -430,22 +430,22 @@
       "evra": "5.18.0-2.fc37.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-3.fc37.x86_64"
+      "evra": "1.8.8-4.fc37.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-3.fc37.x86_64"
+      "evra": "1.8.8-4.fc37.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.8-3.fc37.x86_64"
+      "evra": "1.8.8-4.fc37.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.8-3.fc37.x86_64"
+      "evra": "1.8.8-4.fc37.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.8-3.fc37.noarch"
+      "evra": "1.8.8-4.fc37.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-3.fc37.x86_64"
+      "evra": "1.8.8-4.fc37.x86_64"
     },
     "iputils": {
       "evra": "20221126-1.fc37.x86_64"
@@ -883,7 +883,7 @@
       "evra": "2:0.6.0-5.fc37.x86_64"
     },
     "mozjs102": {
-      "evra": "102.6.0-1.fc37.x86_64"
+      "evra": "102.7.0-1.fc37.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.17-1.fc37.noarch"
+      "evra": "37.18-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1256,7 +1256,7 @@
         "generated": "2023-01-16T18:40:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-18T01:26:15Z"
+        "generated": "2023-01-19T06:02:14Z"
       }
     }
   }

From 4e4d01c46e2d0184975d078f4f91978956f33920 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 19 Jan 2023 14:27:47 -0500
Subject: [PATCH 1401/2157] overlay: always use `-p` with `blkid`

By default, `blkid` will return cached data, which we don't want because
it might be stale. Add `-p` to make sure we always bypass the cache.
Some of these callsites could probably be changed to use `lsblk`, which
uses the udev database, but it's safer to keep using `blkid`.

See also: https://github.com/coreos/fedora-coreos-config/pull/2181#issuecomment-1397386896
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh  | 2 +-
 .../lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh  | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid  | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.sh       | 2 +-
 tests/kola/reboot/test.sh                                       | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index dc55409429..e3faab91a3 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -20,7 +20,7 @@ else
         # Get the PKNAME
         eval $(lsblk --output PKNAME --pairs --paths --nodeps "$1")
         # Get the PTUUID
-        eval $(blkid -o export $PKNAME)
+        eval $(blkid -p -o export $PKNAME)
     else
         # PTUUID is the disk guid, PKNAME is the parent kernel name
         eval $(lsblk --output PTUUID,PKNAME --pairs --paths --nodeps "$1")
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
index 1a7c0a2996..a84c76119d 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
@@ -21,7 +21,7 @@ if [ -d /run/ignition-ostree-transposefs/root ]; then
     fi
 fi
 
-eval $(blkid -o export ${rootpath})
+eval $(blkid -p -o export ${rootpath})
 if [ "${TYPE}" == "xfs" ]; then
     # We use prjquota on XFS by default to aid multi-tenant Kubernetes (and
     # other container) clusters.  See
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 94e2055287..21aca809e9 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -18,7 +18,7 @@ if ! [ -b "${target}" ]; then
   exit 1
 fi
 
-eval $(blkid -o export ${target})
+eval $(blkid -p -o export ${target})
 case "${label}" in
   root) orig_uuid="${rootfs_uuid}"; orig_type=xfs ;;
   boot) orig_uuid="${bootfs_uuid}"; orig_type=ext4 ;;
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 0717c32420..161c91165b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -58,7 +58,7 @@ done
 # because the partition, once extended, might include leftover superblocks
 # from the previous contents of the disk (notably ZFS), causing blkid to
 # refuse to return any filesystem type at all.
-eval $(blkid -o export "${src}")
+eval $(blkid -p -o export "${src}")
 ROOTFS_TYPE=${TYPE:-}
 case "${ROOTFS_TYPE}" in
     xfs|ext4|btrfs) ;;
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index d749bc134f..5384c1fec3 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -56,7 +56,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       ok "found root karg"
 
       bootsrc=$(findmnt -nvr /boot -o SOURCE)
-      eval $(blkid -o export "${bootsrc}")
+      eval $(blkid -p -o export "${bootsrc}")
       grep boot=UUID="${UUID}" /proc/cmdline
       ok "found boot karg"
 

From 695ffeb01f5770e3643861643f30d6713029fd87 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 20 Jan 2023 13:36:35 -0500
Subject: [PATCH 1402/2157] overlay: rename azure overlay to conform with
 others

The other overlays don't have a `-` between the number and the
start of the name so let's drop the dash here.
---
 manifests/fedora-coreos-base.yaml                               | 2 +-
 .../{25-azure-udev-rules => 25azure-udev-rules}/statoverride    | 0
 .../usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh | 0
 .../usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules      | 0
 4 files changed, 1 insertion(+), 1 deletion(-)
 rename overlay.d/{25-azure-udev-rules => 25azure-udev-rules}/statoverride (100%)
 rename overlay.d/{25-azure-udev-rules => 25azure-udev-rules}/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh (100%)
 rename overlay.d/{25-azure-udev-rules => 25azure-udev-rules}/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules (100%)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 6d1a22666d..512fb43bf3 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -20,7 +20,7 @@ ostree-layers:
   - overlay/08nouveau
   - overlay/09misc
   - overlay/20platform-chrony
-  - overlay/25-azure-udev-rules
+  - overlay/25azure-udev-rules
 
 # Be minimal
 recommends: false
diff --git a/overlay.d/25-azure-udev-rules/statoverride b/overlay.d/25azure-udev-rules/statoverride
similarity index 100%
rename from overlay.d/25-azure-udev-rules/statoverride
rename to overlay.d/25azure-udev-rules/statoverride
diff --git a/overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh b/overlay.d/25azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
similarity index 100%
rename from overlay.d/25-azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
rename to overlay.d/25azure-udev-rules/usr/lib/dracut/modules.d/25azure-udev-rules/module-setup.sh
diff --git a/overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules b/overlay.d/25azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
similarity index 100%
rename from overlay.d/25-azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
rename to overlay.d/25azure-udev-rules/usr/lib/udev/rules.d/68-azure-sriov-nm-unmanaged.rules

From aa58a86c96e0e3fdc231c62e98b45357cc8aabf8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 21 Jan 2023 22:22:45 +0000
Subject: [PATCH 1403/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/345/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6917d50722..45c895fd81 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.aarch64"
     },
     "git-core": {
-      "evra": "2.39.0-1.fc37.aarch64"
+      "evra": "2.39.1-1.fc37.aarch64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.aarch64"
@@ -1238,7 +1238,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-19T00:00:00Z",
+    "generated": "2023-01-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
@@ -1247,7 +1247,7 @@
         "generated": "2023-01-16T18:43:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-19T06:01:54Z"
+        "generated": "2023-01-21T03:20:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 34278a27c8..16605e1f34 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -352,7 +352,7 @@
       "evra": "0.21.1-1.fc37.ppc64le"
     },
     "git-core": {
-      "evra": "2.39.0-1.fc37.ppc64le"
+      "evra": "2.39.1-1.fc37.ppc64le"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.ppc64le"
@@ -1244,7 +1244,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-19T00:00:00Z",
+    "generated": "2023-01-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
@@ -1253,7 +1253,7 @@
         "generated": "2023-01-16T18:40:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-19T06:02:04Z"
+        "generated": "2023-01-21T03:21:11Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 798d26d7b0..9846c36ed6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,7 +337,7 @@
       "evra": "1.0.9-4.fc37.s390x"
     },
     "git-core": {
-      "evra": "2.39.0-1.fc37.s390x"
+      "evra": "2.39.1-1.fc37.s390x"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.s390x"
@@ -1172,7 +1172,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-19T00:00:00Z",
+    "generated": "2023-01-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
@@ -1181,7 +1181,7 @@
         "generated": "2023-01-16T18:42:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-19T06:02:09Z"
+        "generated": "2023-01-21T03:21:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c71bbdecb7..ed6d8f3460 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.x86_64"
     },
     "git-core": {
-      "evra": "2.39.0-1.fc37.x86_64"
+      "evra": "2.39.1-1.fc37.x86_64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.x86_64"
@@ -1247,7 +1247,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-19T00:00:00Z",
+    "generated": "2023-01-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
@@ -1256,7 +1256,7 @@
         "generated": "2023-01-16T18:40:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-19T06:02:14Z"
+        "generated": "2023-01-21T03:21:42Z"
       }
     }
   }

From 91caf41265b47e10891b780bafc172225f44b9f5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 22 Jan 2023 22:19:18 +0000
Subject: [PATCH 1404/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/346/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 45c895fd81..58fe61635a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1147,7 +1147,7 @@
       "evra": "1.16-2.fc37.aarch64"
     },
     "sudo": {
-      "evra": "1.9.11-4.p3.fc37.aarch64"
+      "evra": "1.9.12-1.p2.fc37.aarch64"
     },
     "systemd": {
       "evra": "251.10-588.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1182-1.fc37.noarch"
+      "evra": "2:9.0.1221-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1182-1.fc37.aarch64"
+      "evra": "2:9.0.1221-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-21T00:00:00Z",
+    "generated": "2023-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-16T18:43:27Z"
+        "generated": "2023-01-21T22:38:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-21T03:20:54Z"
+        "generated": "2023-01-22T01:34:35Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 16605e1f34..ef07204784 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1153,7 +1153,7 @@
       "evra": "1.16-2.fc37.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.11-4.p3.fc37.ppc64le"
+      "evra": "1.9.12-1.p2.fc37.ppc64le"
     },
     "systemd": {
       "evra": "251.10-588.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1182-1.fc37.noarch"
+      "evra": "2:9.0.1221-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1182-1.fc37.ppc64le"
+      "evra": "2:9.0.1221-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-21T00:00:00Z",
+    "generated": "2023-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-16T18:40:19Z"
+        "generated": "2023-01-21T22:34:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-21T03:21:11Z"
+        "generated": "2023-01-22T01:34:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9846c36ed6..4fe644a1ce 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1078,7 +1078,7 @@
       "evra": "1.16-2.fc37.s390x"
     },
     "sudo": {
-      "evra": "1.9.11-4.p3.fc37.s390x"
+      "evra": "1.9.12-1.p2.fc37.s390x"
     },
     "systemd": {
       "evra": "251.10-588.fc37.s390x"
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1182-1.fc37.noarch"
+      "evra": "2:9.0.1221-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1182-1.fc37.s390x"
+      "evra": "2:9.0.1221-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-21T00:00:00Z",
+    "generated": "2023-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-16T18:42:26Z"
+        "generated": "2023-01-21T22:33:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-21T03:21:22Z"
+        "generated": "2023-01-22T01:34:51Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ed6d8f3460..ad297c8334 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1156,7 +1156,7 @@
       "evra": "1.16-2.fc37.x86_64"
     },
     "sudo": {
-      "evra": "1.9.11-4.p3.fc37.x86_64"
+      "evra": "1.9.12-1.p2.fc37.x86_64"
     },
     "systemd": {
       "evra": "251.10-588.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1182-1.fc37.noarch"
+      "evra": "2:9.0.1221-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1182-1.fc37.x86_64"
+      "evra": "2:9.0.1221-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-21T00:00:00Z",
+    "generated": "2023-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-16T18:40:54Z"
+        "generated": "2023-01-21T22:49:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-21T03:21:42Z"
+        "generated": "2023-01-22T01:34:56Z"
       }
     }
   }

From 9590697afa867fbe1b9c790e21972ae1d5b3f646 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 23 Jan 2023 14:52:28 +0000
Subject: [PATCH 1405/2157] overrides: fast-track qemu-7.0.0-13.fc37

---
 manifest-lock.overrides.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..996989659e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,10 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  qemu-user-static-x86:
+    evr: 2:7.0.0-13.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf93567517
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1389
+      type: fast-track

From 52d3b620d22b840c7c32e7bac86beff14c8ed005 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 23 Jan 2023 23:25:17 +0000
Subject: [PATCH 1406/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/348/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 58fe61635a..57b59b70f4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.6-200.fc37.aarch64"
+      "evra": "6.1.7-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.6-200.fc37.aarch64"
+      "evra": "6.1.7-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.6-200.fc37.aarch64"
+      "evra": "6.1.7-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -673,7 +673,7 @@
       "evra": "1.0.1-22.fc37.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc5.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc6.fc37.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.aarch64"
@@ -904,7 +904,7 @@
       "evra": "0.52.23-1.fc37.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc5.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc6.fc37.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.aarch64"
@@ -1024,7 +1024,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-12.fc37.aarch64"
+      "evra": "2:7.0.0-13.fc37.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-22T00:00:00Z",
+    "generated": "2023-01-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-21T22:38:59Z"
+        "generated": "2023-01-23T15:21:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-22T01:34:35Z"
+        "generated": "2023-01-23T01:54:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ef07204784..d969b39706 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.6-200.fc37.ppc64le"
+      "evra": "6.1.7-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.6-200.fc37.ppc64le"
+      "evra": "6.1.7-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.6-200.fc37.ppc64le"
+      "evra": "6.1.7-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -667,7 +667,7 @@
       "evra": "1.0.1-22.fc37.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc5.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc6.fc37.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.ppc64le"
@@ -901,7 +901,7 @@
       "evra": "0.52.23-1.fc37.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc5.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc6.fc37.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.ppc64le"
@@ -1030,7 +1030,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-12.fc37.ppc64le"
+      "evra": "2:7.0.0-13.fc37.ppc64le"
     },
     "readline": {
       "evra": "8.2-2.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-22T00:00:00Z",
+    "generated": "2023-01-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-21T22:34:51Z"
+        "generated": "2023-01-23T15:12:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-22T01:34:46Z"
+        "generated": "2023-01-23T01:54:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4fe644a1ce..d7f2db828b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.6-200.fc37.s390x"
+      "evra": "6.1.7-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.6-200.fc37.s390x"
+      "evra": "6.1.7-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.6-200.fc37.s390x"
+      "evra": "6.1.7-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -622,7 +622,7 @@
       "evra": "1.0.1-22.fc37.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc5.fc37.s390x"
+      "evra": "1:2.6.2-2.rc6.fc37.s390x"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.s390x"
@@ -844,7 +844,7 @@
       "evra": "0.52.23-1.fc37.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc5.fc37.s390x"
+      "evra": "1:2.6.2-2.rc6.fc37.s390x"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.s390x"
@@ -958,7 +958,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-12.fc37.s390x"
+      "evra": "2:7.0.0-13.fc37.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-22T00:00:00Z",
+    "generated": "2023-01-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-21T22:33:17Z"
+        "generated": "2023-01-23T15:12:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-22T01:34:51Z"
+        "generated": "2023-01-23T01:54:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ad297c8334..998c1a53ec 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.6-200.fc37.x86_64"
+      "evra": "6.1.7-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.6-200.fc37.x86_64"
+      "evra": "6.1.7-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.6-200.fc37.x86_64"
+      "evra": "6.1.7-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -679,7 +679,7 @@
       "evra": "1.0.1-22.fc37.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc5.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc6.fc37.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.2-2.fc37.x86_64"
@@ -916,7 +916,7 @@
       "evra": "0.52.23-1.fc37.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc5.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc6.fc37.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.4-3.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-22T00:00:00Z",
+    "generated": "2023-01-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-21T22:49:14Z"
+        "generated": "2023-01-23T15:13:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-22T01:34:56Z"
+        "generated": "2023-01-23T01:54:25Z"
       }
     }
   }

From ec498b44d0f7bcde71335f652461a3ebb7217d1e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 25 Jan 2023 04:10:12 +0000
Subject: [PATCH 1407/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 996989659e..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  qemu-user-static-x86:
-    evr: 2:7.0.0-13.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf93567517
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1389
-      type: fast-track
+packages: {}

From a92669719ba12f806c206bff906b46b4261adc25 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 26 Jan 2023 16:23:46 +0000
Subject: [PATCH 1408/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/354/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 57b59b70f4..1b64bc76cc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.aarch64"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.8-1.fc37.aarch64"
+      "evra": "32:9.18.10-1.fc37.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.8-1.fc37.noarch"
+      "evra": "32:9.18.10-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.8-1.fc37.aarch64"
+      "evra": "32:9.18.10-1.fc37.aarch64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.aarch64"
@@ -94,7 +94,7 @@
       "evra": "1.17.2-3.fc37.aarch64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-5.fc37.noarch"
+      "evra": "2023.2.60-1.0.fc37.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-10.fc37.aarch64"
@@ -139,7 +139,7 @@
       "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.14-2.fc37.aarch64"
+      "evra": "1.6.15-1.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -415,7 +415,7 @@
       "evra": "56-2.fc37.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.aarch64"
@@ -697,7 +697,7 @@
       "evra": "0.2.1-52.fc37.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.2-1.fc37.aarch64"
+      "evra": "14:1.10.3-1.fc37.aarch64"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.aarch64"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.aarch64"
@@ -919,7 +919,7 @@
       "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2022.19-2.fc37.aarch64"
+      "evra": "2023.1-1.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.19-2.fc37.aarch64"
+      "evra": "2023.1-1.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1213,10 +1213,10 @@
       "evra": "0.8.1-3.fc37.aarch64"
     },
     "xz": {
-      "evra": "5.2.5-10.fc37.aarch64"
+      "evra": "5.4.1-1.fc37.aarch64"
     },
     "xz-libs": {
-      "evra": "5.2.5-10.fc37.aarch64"
+      "evra": "5.4.1-1.fc37.aarch64"
     },
     "yajl": {
       "evra": "2.1.0-19.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-23T00:00:00Z",
+    "generated": "2023-01-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-23T15:21:12Z"
+        "generated": "2023-01-24T16:26:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-23T01:54:05Z"
+        "generated": "2023-01-26T01:13:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d969b39706..8614f3d23a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.ppc64le"
@@ -67,13 +67,13 @@
       "evra": "1.07.1-16.fc37.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.8-1.fc37.ppc64le"
+      "evra": "32:9.18.10-1.fc37.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.8-1.fc37.noarch"
+      "evra": "32:9.18.10-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.8-1.fc37.ppc64le"
+      "evra": "32:9.18.10-1.fc37.ppc64le"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.ppc64le"
@@ -94,7 +94,7 @@
       "evra": "1.17.2-3.fc37.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-5.fc37.noarch"
+      "evra": "2023.2.60-1.0.fc37.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-10.fc37.ppc64le"
@@ -139,7 +139,7 @@
       "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.14-2.fc37.ppc64le"
+      "evra": "1.6.15-1.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -409,7 +409,7 @@
       "evra": "56-2.fc37.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.ppc64le"
@@ -691,7 +691,7 @@
       "evra": "0.2.1-52.fc37.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.2-1.fc37.ppc64le"
+      "evra": "14:1.10.3-1.fc37.ppc64le"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.ppc64le"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.ppc64le"
@@ -916,7 +916,7 @@
       "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.ppc64le"
@@ -1045,10 +1045,10 @@
       "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2022.19-2.fc37.ppc64le"
+      "evra": "2023.1-1.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.19-2.fc37.ppc64le"
+      "evra": "2023.1-1.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1219,10 +1219,10 @@
       "evra": "0.8.1-3.fc37.ppc64le"
     },
     "xz": {
-      "evra": "5.2.5-10.fc37.ppc64le"
+      "evra": "5.4.1-1.fc37.ppc64le"
     },
     "xz-libs": {
-      "evra": "5.2.5-10.fc37.ppc64le"
+      "evra": "5.4.1-1.fc37.ppc64le"
     },
     "yajl": {
       "evra": "2.1.0-19.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-23T00:00:00Z",
+    "generated": "2023-01-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-23T15:12:06Z"
+        "generated": "2023-01-24T16:26:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-23T01:54:15Z"
+        "generated": "2023-01-26T01:13:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d7f2db828b..698bb9b21c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.s390x"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.8-1.fc37.s390x"
+      "evra": "32:9.18.10-1.fc37.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.8-1.fc37.noarch"
+      "evra": "32:9.18.10-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.8-1.fc37.s390x"
+      "evra": "32:9.18.10-1.fc37.s390x"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.s390x"
@@ -91,7 +91,7 @@
       "evra": "1.17.2-3.fc37.s390x"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-5.fc37.noarch"
+      "evra": "2023.2.60-1.0.fc37.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-10.fc37.s390x"
@@ -136,7 +136,7 @@
       "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.14-2.fc37.s390x"
+      "evra": "1.6.15-1.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -379,7 +379,7 @@
       "evra": "56-2.fc37.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.s390x"
@@ -646,7 +646,7 @@
       "evra": "0.2.1-52.fc37.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.2-1.fc37.s390x"
+      "evra": "14:1.10.3-1.fc37.s390x"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.s390x"
@@ -772,10 +772,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.18.1-21.fc37.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.s390x"
@@ -973,10 +973,10 @@
       "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2022.19-2.fc37.s390x"
+      "evra": "2023.1-1.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.19-2.fc37.s390x"
+      "evra": "2023.1-1.fc37.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -1147,10 +1147,10 @@
       "evra": "0.8.1-3.fc37.s390x"
     },
     "xz": {
-      "evra": "5.2.5-10.fc37.s390x"
+      "evra": "5.4.1-1.fc37.s390x"
     },
     "xz-libs": {
-      "evra": "5.2.5-10.fc37.s390x"
+      "evra": "5.4.1-1.fc37.s390x"
     },
     "yajl": {
       "evra": "2.1.0-19.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-23T00:00:00Z",
+    "generated": "2023-01-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-23T15:12:06Z"
+        "generated": "2023-01-24T16:26:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-23T01:54:20Z"
+        "generated": "2023-01-26T01:13:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 998c1a53ec..17050f654e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.x86_64"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.8-1.fc37.x86_64"
+      "evra": "32:9.18.10-1.fc37.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.8-1.fc37.noarch"
+      "evra": "32:9.18.10-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.8-1.fc37.x86_64"
+      "evra": "32:9.18.10-1.fc37.x86_64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.x86_64"
@@ -94,7 +94,7 @@
       "evra": "1.17.2-3.fc37.x86_64"
     },
     "ca-certificates": {
-      "evra": "2022.2.54-5.fc37.noarch"
+      "evra": "2023.2.60-1.0.fc37.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-10.fc37.x86_64"
@@ -139,7 +139,7 @@
       "evra": "2:2.198.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.14-2.fc37.x86_64"
+      "evra": "1.6.15-1.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -421,7 +421,7 @@
       "evra": "56-2.fc37.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.x86_64"
@@ -703,7 +703,7 @@
       "evra": "0.2.1-52.fc37.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.2-1.fc37.x86_64"
+      "evra": "14:1.10.3-1.fc37.x86_64"
     },
     "libpkgconf": {
       "evra": "1.8.0-3.fc37.x86_64"
@@ -838,10 +838,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.29-4.fc37.x86_64"
@@ -931,7 +931,7 @@
       "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20221214-145.fc37.noarch"
+      "evra": "20230117-146.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2022.19-2.fc37.x86_64"
+      "evra": "2023.1-1.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2022.19-2.fc37.x86_64"
+      "evra": "2023.1-1.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1222,10 +1222,10 @@
       "evra": "0.8.1-3.fc37.x86_64"
     },
     "xz": {
-      "evra": "5.2.5-10.fc37.x86_64"
+      "evra": "5.4.1-1.fc37.x86_64"
     },
     "xz-libs": {
-      "evra": "5.2.5-10.fc37.x86_64"
+      "evra": "5.4.1-1.fc37.x86_64"
     },
     "yajl": {
       "evra": "2.1.0-19.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-23T00:00:00Z",
+    "generated": "2023-01-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-23T15:13:30Z"
+        "generated": "2023-01-24T16:27:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-23T01:54:25Z"
+        "generated": "2023-01-26T01:13:21Z"
       }
     }
   }

From c182fb16fee48e978e1721f2e3ce0cd26da692d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 16 Dec 2022 11:39:26 +0100
Subject: [PATCH 1409/2157] tests: Enable rpmdb-sqlite for EL9

Only skip it for RHEL 8.
---
 tests/kola/files/rpmdb-sqlite | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index d1eef68ec9..8d61fc5430 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -1,14 +1,17 @@
 #!/bin/bash
 ## kola:
-##   # This test only runs on FCOS as the RHCOS rpmdb has not migrated to sqlite yet.
-##   # TODO-RHCOS: drop the "fcos" tag when RHCOS migrates to using sqlite
-##   distros: fcos
+##   # Read only test thus safe to run in parallel
 ##   exclusive: false
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
+if is_rhcos8; then
+    ok "nothing to check for RHCOS 8"
+    exit 0
+fi
+
 # make sure we're using the sqlite rpmdb backend
 # https://github.com/coreos/fedora-coreos-tracker/issues/623
 if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then

From fefbf00be5845625da0a4053407a172c53ae71c0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 Jan 2023 22:07:10 +0000
Subject: [PATCH 1410/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/356/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   |  8 ++++----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1b64bc76cc..000ba76d1c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.1.2-1.fc37.aarch64"
+      "evra": "6.1.3-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.9-1.fc37.aarch64"
+      "evra": "1.8.10-2.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-26T00:00:00Z",
+    "generated": "2023-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-24T16:26:42Z"
+        "generated": "2023-01-27T19:08:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-26T01:13:02Z"
+        "generated": "2023-01-27T08:43:37Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8614f3d23a..cde5af2be9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.1.2-1.fc37.ppc64le"
+      "evra": "6.1.3-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.9-1.fc37.ppc64le"
+      "evra": "1.8.10-2.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-26T00:00:00Z",
+    "generated": "2023-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-24T16:26:34Z"
+        "generated": "2023-01-27T19:09:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-26T01:13:12Z"
+        "generated": "2023-01-27T08:43:47Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 698bb9b21c..73a4df08f5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.1.2-1.fc37.s390x"
+      "evra": "6.1.3-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-26T00:00:00Z",
+    "generated": "2023-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-24T16:26:07Z"
+        "generated": "2023-01-27T19:10:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-26T01:13:17Z"
+        "generated": "2023-01-27T08:43:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 17050f654e..c59ec06797 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.1.2-1.fc37.x86_64"
+      "evra": "6.1.3-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.9-1.fc37.x86_64"
+      "evra": "1.8.10-2.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-26T00:00:00Z",
+    "generated": "2023-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-24T16:27:30Z"
+        "generated": "2023-01-27T19:10:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-26T01:13:21Z"
+        "generated": "2023-01-27T08:43:57Z"
       }
     }
   }

From 1a305128e5979aba7f2ebfc04170a0deb679ec0a Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Fri, 27 Jan 2023 06:35:14 -0800
Subject: [PATCH 1411/2157] kola/setuid: Update known files with SetUID bit set
 See https://github.com/coreos/fedora-coreos-tracker/issues/1391

---
 tests/kola/files/setgid | 3 +++
 tests/kola/files/setuid | 1 +
 2 files changed, 4 insertions(+)

diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index 63df1b0766..d1f03c0216 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -6,6 +6,9 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 # List of known files and directories with SetGID bit set
+# Drop '/usr/libexec/openssh/ssh-keysign' after
+# https://src.fedoraproject.org/rpms/openssh/c/b615362fd0b4da657d624571441cb74983de6e3f?branch=rawhide
+# is in all OS.
 list_setgid_files=(
     '/usr/bin/write'
     '/usr/libexec/openssh/ssh-keysign'
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index 51a0494a1e..d173ec769b 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -20,6 +20,7 @@ list_setuid_files=(
     '/usr/bin/sudo'
     '/usr/bin/umount'
     '/usr/lib/polkit-1/polkit-agent-helper-1'
+    '/usr/libexec/openssh/ssh-keysign'
     '/usr/sbin/grub2-set-bootflag'
     '/usr/sbin/mount.nfs'
     '/usr/sbin/pam_timestamp_check'

From af7f460358d34163bb5c8d0d19d37fe2efc2bd3f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 26 Jan 2023 09:55:55 -0500
Subject: [PATCH 1412/2157] coreos-livepxe-rootfs: print initramfs version on
 error

If the rootfs doesn't match the initramfs, let's include the version of
the initramfs in the error message. This version string also appears in
e.g. the boot menu and initramfs welcome message, but having it be
directly part of the final error message is clearer and easier.

The only caveat to this is that we don't have easy access to the OSTree
version in RHCOS 8, since it has an ancient dracut which doesn't have
https://github.com/dracutdevs/dracut/pull/655. But it should work fine
on el9.

Related: https://github.com/coreos/fedora-coreos-tracker/issues/1390
---
 .../dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh   | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index c7188bfbfb..a16f350fe6 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -59,6 +59,10 @@ elif [[ -n "${rootfs_url}" ]]; then
         echo "Couldn't fetch, verify, and unpack image specified by:" >&2
         echo "coreos.live.rootfs_url=${rootfs_url}" >&2
         echo "Check that the URL is correct and that the rootfs version matches the initramfs." >&2
+        source /etc/os-release
+        if [ -n "${OSTREE_VERSION:-}" ]; then
+            echo "The version of this initramfs is ${OSTREE_VERSION}." >&2
+        fi
         exit 1
     fi
 else

From 9d6f60f9a8c6e26ab8457a7beb069357afe80606 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 26 Jan 2023 12:07:34 -0500
Subject: [PATCH 1413/2157] coreos-livepxe-rootfs: move TLS comment to above
 `--insecure`

The `--insecure` flag is part of the common args and applies to the
earlier `curl` invocation too. Move it there.
---
 .../dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh  | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index a16f350fe6..7824e7c12f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -37,7 +37,8 @@ elif [[ -n "${rootfs_url}" ]]; then
     # Doing this allows us to retry all errors (including transient
     # "no route to host" errors during startup). Note we can't use
     # curl's --retry-all-errors here because it's not in el8's curl yet.
-    # We retry forever, matching Ignition's semantics.
+    # We don't need to verify TLS certificates because we're checking the
+    # image hash. We retry forever, matching Ignition's semantics.
     curl_common_args="--silent --show-error --insecure --location"
     while ! curl --head $curl_common_args "${rootfs_url}" >/dev/null; do
         echo "Couldn't establish connectivity with the server specified by:" >&2
@@ -46,8 +47,6 @@ elif [[ -n "${rootfs_url}" ]]; then
         sleep 5
     done
 
-    # We don't need to verify TLS certificates because we're checking the
-    # image hash.
     # bsdtar can read cpio archives and we already depend on it for
     # coreos-liveiso-persist-osmet.service, so use it instead of cpio.
     # We shouldn't need a --retry here since we've just successfully HEADed the

From eed4cb02cae15563abc3e43e8698f7294222329a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 26 Jan 2023 12:25:09 -0500
Subject: [PATCH 1414/2157] coreos-livepxe-rootfs: use `curl --fail`

Currently, if the server returns a 404 when fetching the rootfs, we
still try to hash the server's HTML response and compare it, which
leads to a confusing error message about mismatched hashes.

Do a single `HEAD` after establishing server connectivity, but before
the pipeline. Use `--fail` so that `curl` exits with a nonzero code and
clearly prints out the erroring HTTP code it got. Also use `--fail`
during the pipeline invocation for the same reason.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1390
---
 .../35coreos-live/coreos-livepxe-rootfs.sh    | 20 +++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index 7824e7c12f..d383d6187f 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -47,12 +47,24 @@ elif [[ -n "${rootfs_url}" ]]; then
         sleep 5
     done
 
+    # We shouldn't need a --retry from here on since we've just successfully
+    # HEADed the file, but let's add one just to be safe (e.g. if the
+    # connection just went online and flickers or something).
+    curl_common_args+=" --retry 5"
+
+    # Do a HEAD again but just once and with `--fail` so that if e.g. it's
+    # missing, we get a clearer error than if it were part of the pipeline
+    # below.
+    curl_common_args+=" --fail"
+    if ! curl --head $curl_common_args "${rootfs_url}" >/dev/null; then
+        echo "Couldn't query the server for the rootfs specified by:" >&2
+        echo "coreos.live.rootfs_url=${rootfs_url}" >&2
+        exit 1
+    fi
+
     # bsdtar can read cpio archives and we already depend on it for
     # coreos-liveiso-persist-osmet.service, so use it instead of cpio.
-    # We shouldn't need a --retry here since we've just successfully HEADed the
-    # file, but let's add one just to be safe (e.g. if the connection just went
-    # online and flickers or something).
-    if ! curl $curl_common_args --retry 5 "${rootfs_url}" | \
+    if ! curl $curl_common_args "${rootfs_url}" | \
             rdcore stream-hash /etc/coreos-live-want-rootfs | \
             bsdtar -xf - -C / ; then
         echo "Couldn't fetch, verify, and unpack image specified by:" >&2

From e6e644b82f283ed8e80486c57d55625dfef55786 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 30 Jan 2023 22:17:34 +0000
Subject: [PATCH 1415/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/359/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 000ba76d1c..2bf7aedef2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.7-200.fc37.aarch64"
+      "evra": "6.1.8-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.7-200.fc37.aarch64"
+      "evra": "6.1.8-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.7-200.fc37.aarch64"
+      "evra": "6.1.8-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-2.fc37.aarch64"
+      "evra": "2:4.17.5-0.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-2.fc37.aarch64"
+      "evra": "2:4.17.5-0.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.22-1.fc37.aarch64"
+      "evra": "20.10.23-1.fc37.aarch64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.aarch64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-2.fc37.aarch64"
+      "evra": "2:4.17.5-0.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.4-2.fc37.noarch"
+      "evra": "2:4.17.5-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-2.fc37.aarch64"
+      "evra": "2:4.17.5-0.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-27T00:00:00Z",
+    "generated": "2023-01-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T19:08:48Z"
+        "generated": "2023-01-27T22:10:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-27T08:43:37Z"
+        "generated": "2023-01-30T01:15:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index cde5af2be9..492d278790 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.7-200.fc37.ppc64le"
+      "evra": "6.1.8-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.7-200.fc37.ppc64le"
+      "evra": "6.1.8-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.7-200.fc37.ppc64le"
+      "evra": "6.1.8-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-2.fc37.ppc64le"
+      "evra": "2:4.17.5-0.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-2.fc37.ppc64le"
+      "evra": "2:4.17.5-0.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -865,7 +865,7 @@
       "evra": "4.2-2.fc37.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.22-1.fc37.ppc64le"
+      "evra": "20.10.23-1.fc37.ppc64le"
     },
     "mozjs102": {
       "evra": "102.7.0-1.fc37.ppc64le"
@@ -1060,13 +1060,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-2.fc37.ppc64le"
+      "evra": "2:4.17.5-0.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.4-2.fc37.noarch"
+      "evra": "2:4.17.5-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-2.fc37.ppc64le"
+      "evra": "2:4.17.5-0.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-27T00:00:00Z",
+    "generated": "2023-01-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T19:09:43Z"
+        "generated": "2023-01-27T22:10:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-27T08:43:47Z"
+        "generated": "2023-01-30T01:15:53Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 73a4df08f5..04dfd6f70e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.7-200.fc37.s390x"
+      "evra": "6.1.8-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.7-200.fc37.s390x"
+      "evra": "6.1.8-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.7-200.fc37.s390x"
+      "evra": "6.1.8-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -691,7 +691,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-2.fc37.s390x"
+      "evra": "2:4.17.5-0.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -754,7 +754,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-2.fc37.s390x"
+      "evra": "2:4.17.5-0.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -808,7 +808,7 @@
       "evra": "4.2-2.fc37.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.22-1.fc37.s390x"
+      "evra": "20.10.23-1.fc37.s390x"
     },
     "mozjs102": {
       "evra": "102.7.0-1.fc37.s390x"
@@ -991,13 +991,13 @@
       "evra": "2:2.24.0-1.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-2.fc37.s390x"
+      "evra": "2:4.17.5-0.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.4-2.fc37.noarch"
+      "evra": "2:4.17.5-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-2.fc37.s390x"
+      "evra": "2:4.17.5-0.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-27T00:00:00Z",
+    "generated": "2023-01-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T19:10:45Z"
+        "generated": "2023-01-27T22:09:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-27T08:43:52Z"
+        "generated": "2023-01-30T01:15:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c59ec06797..73b38e692b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.7-200.fc37.x86_64"
+      "evra": "6.1.8-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.7-200.fc37.x86_64"
+      "evra": "6.1.8-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.7-200.fc37.x86_64"
+      "evra": "6.1.8-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -748,7 +748,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.4-2.fc37.x86_64"
+      "evra": "2:4.17.5-0.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -817,7 +817,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.4-2.fc37.x86_64"
+      "evra": "2:4.17.5-0.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -877,7 +877,7 @@
       "evra": "2:2.1-53.fc37.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.22-1.fc37.x86_64"
+      "evra": "20.10.23-1.fc37.x86_64"
     },
     "mokutil": {
       "evra": "2:0.6.0-5.fc37.x86_64"
@@ -1063,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.4-2.fc37.x86_64"
+      "evra": "2:4.17.5-0.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.4-2.fc37.noarch"
+      "evra": "2:4.17.5-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.4-2.fc37.x86_64"
+      "evra": "2:4.17.5-0.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-27T00:00:00Z",
+    "generated": "2023-01-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T19:10:53Z"
+        "generated": "2023-01-27T22:10:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-27T08:43:57Z"
+        "generated": "2023-01-30T01:16:04Z"
       }
     }
   }

From cb8c9cf6adf8b1ae79ddb420eece60469a5d3e10 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 31 Jan 2023 17:30:08 -0500
Subject: [PATCH 1416/2157] tests/kola/ntp: use different server for NTP for
 DHCP propagation tests

The time-c-g.nist.gov can't resolve in our Fedora OpenShift because they
require DNSSEC validation and that server started failing. I picked
another server on the https://tf.nist.gov/tf-cgi/servers.cgi page that
is passing validation and also added some commentary.
---
 tests/kola/ntp/chrony/dhcp-propagation            | 5 ++++-
 tests/kola/ntp/timesyncd/dhcp-propagation/test.sh | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 1d15cab034..4f9fc83445 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -28,7 +28,10 @@ set -xeuo pipefail
 
 main() {
 
-    ntp_host_ip=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+    # Choose a host from https://tf.nist.gov/tf-cgi/servers.cgi
+    # that can get DNS over DNSSEC since the environment our OpenShift
+    # runs in requires DNSSEC validation. Test with https://dnsviz.net/
+    ntp_host_ip=$(getent hosts utcnist.colorado.edu | cut -d ' ' -f 1)
 
     ntp_test_setup $ntp_host_ip
 
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index 2ca5e89267..6c29c8af4d 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -30,7 +30,10 @@ set -xeuo pipefail
 
 main() {
 
-    ntp_host_ip=$(getent hosts time-c-g.nist.gov | cut -d ' ' -f 1)
+    # Choose a host from https://tf.nist.gov/tf-cgi/servers.cgi
+    # that can get DNS over DNSSEC since the environment our OpenShift
+    # runs in requires DNSSEC validation. Test with https://dnsviz.net/
+    ntp_host_ip=$(getent hosts utcnist.colorado.edu | cut -d ' ' -f 1)
 
     ntp_test_setup $ntp_host_ip
 

From b990d7a3519407e37f9f7957c6a0f845f8ff545c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Feb 2023 01:16:11 +0000
Subject: [PATCH 1417/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/361/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2bf7aedef2..9ac2e697b2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.10-1.fc37.aarch64"
+      "evra": "32:9.18.11-1.fc37.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.10-1.fc37.noarch"
+      "evra": "32:9.18.11-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.10-1.fc37.aarch64"
+      "evra": "32:9.18.11-1.fc37.aarch64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-30T00:00:00Z",
+    "generated": "2023-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T22:10:00Z"
+        "generated": "2023-01-30T22:38:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-30T01:15:43Z"
+        "generated": "2023-01-31T01:41:56Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 492d278790..8e34c5f182 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -67,13 +67,13 @@
       "evra": "1.07.1-16.fc37.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.10-1.fc37.ppc64le"
+      "evra": "32:9.18.11-1.fc37.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.10-1.fc37.noarch"
+      "evra": "32:9.18.11-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.10-1.fc37.ppc64le"
+      "evra": "32:9.18.11-1.fc37.ppc64le"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-30T00:00:00Z",
+    "generated": "2023-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T22:10:06Z"
+        "generated": "2023-01-30T22:20:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-30T01:15:53Z"
+        "generated": "2023-01-31T01:42:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 04dfd6f70e..eca0366800 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.10-1.fc37.s390x"
+      "evra": "32:9.18.11-1.fc37.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.10-1.fc37.noarch"
+      "evra": "32:9.18.11-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.10-1.fc37.s390x"
+      "evra": "32:9.18.11-1.fc37.s390x"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-30T00:00:00Z",
+    "generated": "2023-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T22:09:52Z"
+        "generated": "2023-01-30T22:20:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-30T01:15:59Z"
+        "generated": "2023-01-31T01:42:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 73b38e692b..916135a4bd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.10-1.fc37.x86_64"
+      "evra": "32:9.18.11-1.fc37.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.10-1.fc37.noarch"
+      "evra": "32:9.18.11-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.10-1.fc37.x86_64"
+      "evra": "32:9.18.11-1.fc37.x86_64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-30T00:00:00Z",
+    "generated": "2023-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-27T22:10:42Z"
+        "generated": "2023-01-30T22:21:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-30T01:16:04Z"
+        "generated": "2023-01-31T01:42:17Z"
       }
     }
   }

From 4e23c1563a790a7405a03edd05945eb2b03cd8a8 Mon Sep 17 00:00:00 2001
From: Shilpi Das <shilpi12@in.ibm.com>
Date: Tue, 31 Jan 2023 19:21:25 +0530
Subject: [PATCH 1418/2157] denylist: remove ext.config.kdump.crash denial

The underlying issue for kdump crash test failure on ppc64le
has been fixed in the upstream kernel [1]. We can remove
this test from the denylist now since the fix has made it to
all streams that we care about.

[1] https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
Signed-off-by: Shilpi Das <shdas@redhat.com>
---
 kola-denylist.yaml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b7c58a93b3..7b3dff99e5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,17 +5,6 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/coreos-assembler/issues/2725#issuecomment-1292616121
-  snooze: 2023-02-04
-  arches:
-    - ppc64le
-  streams:
-    - next-devel
-    - next
-    - testing-devel
-    - testing
-    - stable
 - pattern: coreos.boot-mirror.luks
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:

From 1e6a97b79484422f9aafb089ed54744d1b668b4f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Feb 2023 22:15:18 +0000
Subject: [PATCH 1419/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/362/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9ac2e697b2..e1be850026 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -277,7 +277,7 @@
       "evra": "2.5.0-1.fc37.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-release-common": {
       "evra": "37-15.noarch"
@@ -289,16 +289,16 @@
       "evra": "37-15.noarch"
     },
     "fedora-repos": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "file": {
       "evra": "5.42-4.fc37.aarch64"
@@ -607,7 +607,7 @@
       "evra": "237-3.fc37.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.3-1.fc37.aarch64"
+      "evra": "0.4.4-1.fc37.aarch64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1221-1.fc37.noarch"
+      "evra": "2:9.0.1262-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1221-1.fc37.aarch64"
+      "evra": "2:9.0.1262-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-31T00:00:00Z",
+    "generated": "2023-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-30T22:38:14Z"
+        "generated": "2023-02-01T20:12:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-31T01:41:56Z"
+        "generated": "2023-02-01T02:34:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8e34c5f182..326fd3bc4e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -268,7 +268,7 @@
       "evra": "2.5.0-1.fc37.ppc64le"
     },
     "fedora-gpg-keys": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-release-common": {
       "evra": "37-15.noarch"
@@ -280,16 +280,16 @@
       "evra": "37-15.noarch"
     },
     "fedora-repos": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "file": {
       "evra": "5.42-4.fc37.ppc64le"
@@ -601,7 +601,7 @@
       "evra": "237-3.fc37.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.3-1.fc37.ppc64le"
+      "evra": "0.4.4-1.fc37.ppc64le"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1221-1.fc37.noarch"
+      "evra": "2:9.0.1262-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1221-1.fc37.ppc64le"
+      "evra": "2:9.0.1262-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-31T00:00:00Z",
+    "generated": "2023-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-30T22:20:15Z"
+        "generated": "2023-02-01T20:09:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-31T01:42:06Z"
+        "generated": "2023-02-01T02:35:00Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index eca0366800..a80d34cdfe 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -265,7 +265,7 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "fedora-gpg-keys": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-release-common": {
       "evra": "37-15.noarch"
@@ -277,16 +277,16 @@
       "evra": "37-15.noarch"
     },
     "fedora-repos": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "file": {
       "evra": "5.42-4.fc37.s390x"
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1221-1.fc37.noarch"
+      "evra": "2:9.0.1262-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1221-1.fc37.s390x"
+      "evra": "2:9.0.1262-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-31T00:00:00Z",
+    "generated": "2023-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-30T22:20:35Z"
+        "generated": "2023-02-01T20:09:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-31T01:42:12Z"
+        "generated": "2023-02-01T02:35:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 916135a4bd..77b34dbac0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -277,7 +277,7 @@
       "evra": "2.5.0-1.fc37.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-release-common": {
       "evra": "37-15.noarch"
@@ -289,16 +289,16 @@
       "evra": "37-15.noarch"
     },
     "fedora-repos": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-1.noarch"
+      "evra": "37-2.noarch"
     },
     "file": {
       "evra": "5.42-4.fc37.x86_64"
@@ -613,7 +613,7 @@
       "evra": "237-3.fc37.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.3-1.fc37.x86_64"
+      "evra": "0.4.4-1.fc37.x86_64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1221-1.fc37.noarch"
+      "evra": "2:9.0.1262-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1221-1.fc37.x86_64"
+      "evra": "2:9.0.1262-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-01-31T00:00:00Z",
+    "generated": "2023-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-01-30T22:21:44Z"
+        "generated": "2023-02-01T20:10:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-01-31T01:42:17Z"
+        "generated": "2023-02-01T02:35:11Z"
       }
     }
   }

From f10a3357571e4a32784eb10d4636b4469d2fae65 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 27 Jan 2023 14:18:40 +0100
Subject: [PATCH 1420/2157] tests: Use a unified format and layout

Unify test layout based on the format described in the README and fix
whitespace.
---
 tests/kola/binfmt/qemu                        |  6 ++---
 tests/kola/boot/bootupd                       |  1 +
 tests/kola/boot/grub2-install                 | 20 ++++++++---------
 tests/kola/clhm/ignition-warnings/test.sh     |  3 ++-
 tests/kola/clhm/network-device-info           |  1 +
 tests/kola/content-origins/test.sh            |  4 +++-
 tests/kola/extensions/module                  |  7 +++---
 tests/kola/extensions/package                 |  6 ++---
 tests/kola/files/check-symlink                |  1 +
 tests/kola/files/kernel-headers               |  3 ++-
 tests/kola/files/logrotate-service            |  1 +
 tests/kola/files/setgid                       |  1 +
 tests/kola/firewall/iptables-legacy/test.sh   |  1 +
 tests/kola/firewall/iptables/test.sh          |  2 ++
 tests/kola/gshadow                            |  4 +++-
 tests/kola/ignition/remote/test.sh            |  1 +
 tests/kola/ignition/stable-boot/test.sh       |  9 ++++----
 tests/kola/ignition/systemd-disable/test.sh   |  5 +++--
 .../ignition/systemd-enable-units/test.sh     |  1 +
 tests/kola/ignition/systemd-unmasking/test.sh |  9 ++++----
 tests/kola/kdump/crash/test.sh                |  3 ++-
 tests/kola/kdump/service                      |  1 +
 tests/kola/kubernetes/kube-watch/test.sh      |  1 +
 tests/kola/logging/printk                     |  1 +
 tests/kola/networking/bridge-static-via-kargs |  5 ++---
 .../default-network-behavior-change/test.sh   |  6 ++---
 .../kola/networking/force-persist-ip/test.sh  | 22 +++++++++----------
 .../hostname/fallback-hostname/test.sh        | 14 +++++-------
 tests/kola/networking/kargs-rd-net            |  2 +-
 .../networking/mtu-on-bond-ignition/test.sh   |  6 ++---
 tests/kola/networking/mtu-on-bond-kargs       |  2 +-
 tests/kola/networking/nameserver              |  4 ++--
 .../bootif                                    |  2 +-
 .../default                                   |  1 +
 tests/kola/networking/no-persist-ip           | 11 +++++-----
 .../prefer-ignition-networking/test.sh        |  8 +++----
 .../networking/rd-net-timeout-carrier/test.sh | 15 ++++++-------
 .../networking/team-dhcp-via-ignition/test.sh |  8 +++----
 .../chrony/coreos-platform-chrony-generator   |  1 +
 tests/kola/ntp/chrony/dhcp-propagation        | 13 +++++------
 .../ntp/timesyncd/dhcp-propagation/test.sh    | 13 +++++------
 tests/kola/platforms/aws/assert-xen           |  3 +--
 tests/kola/platforms/aws/nvme                 | 20 ++++++++---------
 tests/kola/podman/dns/test.sh                 |  6 ++---
 tests/kola/podman/rootless-systemd            |  2 +-
 tests/kola/reboot/test.sh                     |  1 +
 tests/kola/rpm-ostree/container-deps          |  3 ++-
 tests/kola/rpm-ostree/kernel-replace          |  2 +-
 tests/kola/selinux/default                    |  5 +++--
 tests/kola/swap/zram-default                  |  1 +
 tests/kola/toolbox/test.sh                    |  2 +-
 tests/kola/var-mount/luks/test.sh             |  4 ++--
 tests/kola/var-mount/scsi-id/test.sh          |  9 ++++----
 tests/kola/var-mount/simple/test.sh           |  7 +++---
 tests/manual/coreos-docs-net-testing.sh       |  4 ++--
 tests/manual/coreos-network-testing.sh        |  7 +++---
 56 files changed, 161 insertions(+), 140 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 1ca472aff1..606ce1aa87 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,7 +1,4 @@
 #!/bin/bash
-# Test the x86_64 emulator on non-x86_64 instances.
-# https://github.com/coreos/fedora-coreos-tracker/issues/1237
-#
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -14,6 +11,9 @@
 ##   distros: fcos
 ##   # We ship the x86_64 on all non-x86_64 arches.
 ##   architectures: "! x86_64"
+#
+# Test the x86_64 emulator on non-x86_64 instances.
+# https://github.com/coreos/fedora-coreos-tracker/issues/1237
 
 set -xeuo pipefail
 
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 51a5ba431b..4df5b503b6 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # This is just a basic sanity check; at some point we
 # will implement "project-owned tests run in the pipeline"
 # and be able to run the existing bootupd tests:
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index b10785cb6d..f6f16a6eae 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,17 +1,17 @@
 #!/bin/bash
-
-# Verify to install BIOS/PReP bootloader using grub2-install from 
-# the target system.
-# See:
-#  - https://github.com/coreos/coreos-assembler/pull/3190
-#  - https://github.com/coreos/coreos-assembler/issues/3148
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"
+#
+# Verify to install BIOS/PReP bootloader using grub2-install from
+# the target system.
+# See:
+#  - https://github.com/coreos/coreos-assembler/pull/3190
+#  - https://github.com/coreos/coreos-assembler/issues/3148
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
@@ -21,20 +21,20 @@ arch=$(arch)
 case ${arch} in
   x86_64)
     target=i386-pc
-    core="${boot_dev}/grub2/${target}/core.img"   
+    core="${boot_dev}/grub2/${target}/core.img"
     partition=$(findmnt -no SOURCE ${boot_dev})
     device=$(lsblk --paths -no PKNAME ${partition})
     # sync grub2-install parameter according to image build script
     # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
     grub_install_args="--modules mdraid1x"
     ;;
-  
+
   ppc64le)
     target=powerpc-ieee1275
     core="${boot_dev}/grub2/${target}/core.elf"
     device=$(realpath /dev/disk/by-partlabel/PowerPC-PReP-boot)
     # sync grub2-install parameter according to image build script
-    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh    
+    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
     grub_install_args="--no-nvram"   
     ;;
 
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index f9d6febbcf..df461fd235 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,11 +1,12 @@
 #!/bin/bash
-# This test ensures that Ignition warnings are displayed on the console.
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu-unpriv
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
 ##   allowConfigWarnings: true
+#
+# This test ensures that Ignition warnings are displayed on the console.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
index 7cfafbb726..171ae3db7d 100755
--- a/tests/kola/clhm/network-device-info
+++ b/tests/kola/clhm/network-device-info
@@ -2,6 +2,7 @@
 ## kola:
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
+#
 # This test makes sure CLHM wrote a snippet for the NIC IP info.
 # See - https://github.com/coreos/fedora-coreos-tracker/issues/1153
 
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index 89213591b7..5fd8d85980 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -1,11 +1,13 @@
 #!/bin/bash
-# Verify the RPM %{vendor} flag for everything installed matches what we expect.
 ## kola:
 ##   tags: "platform-independent"
 ##   # This is a read-only, nondestructive test.
 ##   exclusive: false
 ##   # May support e.g. centos in the future
 ##   distros: "fcos rhcos"
+#
+# Verify the RPM %{vendor} flag for everything installed matches what we expect.
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index e562fc6695..51fae6779f 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -1,7 +1,4 @@
 #!/bin/bash
-# This test ensures that we can install some common tools as OS extensions.
-set -xeuo pipefail
-
 ## kola:
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
@@ -12,6 +9,10 @@ set -xeuo pipefail
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
 ##   minMemory: 1536
+#
+# This test ensures that we can install some common tools as OS extensions.
+
+set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 9c296920a4..dfa0b194ce 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -1,6 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
-
 ## kola:
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
@@ -11,9 +9,11 @@ set -xeuo pipefail
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
 ##   minMemory: 1536
-
+#
 # This test ensures that we can install some common tools as OS extensions.
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 commands=(
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index ba19453713..b4f570b8cc 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # Verify /etc release symlinks are valid
 # See:
 # - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index 2712b153e4..6302a13e81 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -1,7 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-# check that we are not including the kernel headers on the host
+#
+# Check that we are not including the kernel headers on the host.
 # See:
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
 # - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index a7b53c879e..8086f251a2 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # Test some services are enabled or disabled appropriately
 
 set -xeuo pipefail
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index d1f03c0216..91f117c742 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index e5153d5b04..eae1f08fb0 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -4,6 +4,7 @@
 ##   # backend. It is scoped to only FCOS because RHCOS only supports nft.
 ##   distros: fcos
 ##   exclusive: true
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index af6fd2c1e0..16b0e22d07 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -1,8 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # Verifies that the expected iptables backend is configured.
 # https://github.com/coreos/fedora-coreos-tracker/issues/676
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/gshadow b/tests/kola/gshadow
index 7a2ab2f940..f84c89a8b0 100755
--- a/tests/kola/gshadow
+++ b/tests/kola/gshadow
@@ -1,5 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
 # Verify that glibc's parsing of /etc/gshadow does not cause systemd-sysusers
 # to segfault on specially constructed lines.
 #
@@ -13,6 +12,9 @@ set -xeuo pipefail
 # causing segfaults when those pointers are dereferenced.
 #
 # Tests: https://github.com/coreos/bugs/issues/1394
+
+set -xeuo pipefail
+
 echo 'grp0:*::root' >> /etc/gshadow
 echo 'grp1:*::somebody.a1,somebody.a2,somebody.a3,somebody.a4,somebody.a5,somebody.a6,somebody.a7,somebody.a8,somebody.a9,somebody.a10,somebody.a11,somebody.a12,somebody.a13,somebody.a14,somebody.a15,somebody.a16,somebody.a17,somebody.a18,somebody.a19,somebody.a20,somebody.a21,somebody.a22,somebody.a23,somebody.a24,somebody.a25,somebody.a26,somebody.a27,somebody.a28,somebody.a29,somebody.a30,somebody.a31,somebody.a32,somebody.a33,somebody.a34,somebody.a35,somebody.a36,somebody.a37,somebody.a38,somebody.a39,somebody.a40,somebody.a41,somebody.a42,somebody.a43,somebody.a44,somebody.a45,somebody.a46,somebody.a47,a1234' >> /etc/gshadow
 echo 'grp2:*::root' >> /etc/gshadow
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 8b1e6c3562..d30b07127e 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: needs-internet
+#
 # To test https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 # remote.ign on github: inject kernelArguments and write something to /etc/testfile
 # config.ign to include remote kargsfile.ign
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index 6b72dbd6aa..e8dbc04f21 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,9 +1,10 @@
 #!/bin/bash
 ## kola:
-##   # This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
-##   # We don't need to test this on every platform. If it passes in one place it
-##   # will pass everywhere.
-##   platforms: qemu-unpriv
+##   # We don't need to test this on every platform. If it passes in one place
+##   # it will pass everywhere.
+##   platforms: platform-independent
+#
+# This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 66917532ff..bb6aafbdc8 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -1,12 +1,13 @@
 #!/bin/bash
 ## kola:
-##   # This test is currently scoped to FCOS because `zincati` is only available on
-##   # FCOS.
+##   # This test is currently scoped to FCOS because `zincati` is only available
+##   # on FCOS.
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
 ##   distros: fcos
 ##   # We don't need to test this on every platform. If it passes in
 ##   # one place it will pass everywhere.
 ##   platforms: qemu-unpriv
+#
 # This test makes sure that ignition is able to disable units
 # https://github.com/coreos/fedora-coreos-tracker/issues/392
 
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index f5658950a2..a07bee2ea6 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -3,6 +3,7 @@
 ##   # We don't need to test this on every platform. If it passes in
 ##   # one place it will pass everywhere.
 ##   platforms: qemu-unpriv
+#
 # This test makes sure that ignition is able to enable systemd units of
 # different types.
 # https://github.com/coreos/ignition/issues/586
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 7a5c7b15be..cc07c2f982 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -7,16 +7,15 @@
 ##   # We don't need to test this on every platform. If it passes in one place it
 ##   # will pass everywhere.
 ##   platforms: qemu-unpriv
-
-# This test makes sure that ignition is able to unmask units
-# It just so happens we have masked dnsmasq in FCOS so we can
-# test this by unmasking it.
+#
+# This test makes sure that ignition is able to unmask units It just so happens
+# we have masked dnsmasq in FCOS so we can test this by unmasking it.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# make sure the systemd unit (dnsmasq) is unmasked and enabled
+# Make sure the systemd unit (dnsmasq) is unmasked and enabled
 if [ "$(systemctl is-enabled dnsmasq.service)" != 'enabled' ]; then
     fatal "dnsmasq.service systemd unit should be unmasked and enabled"
 fi
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 9f48f9e61d..05470d78eb 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -1,5 +1,4 @@
 #!/bin/bash
-# https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 ## kola:
 ##   # Testing kdump requires some reserved memory for the crashkernel.
 ##   minMemory: 4096
@@ -9,6 +8,8 @@
 ##   # This test includes a few reboots and the generation of a vmcore,
 ##   # which can take longer than the default 10 minute timeout.
 ##   timeoutMin: 15
+#
+# https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 5e532e0bb7..591317648f 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # Make sure that kdump didn't start (it's either disabled, or enabled but
 # conditional on crashkernel= karg, which we don't bake).
 
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index e09e4f5406..905a46e37e 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # This is for verifying that `kubernetes_file_t` labeled files can be
 # watched by systemd
 # See: https://github.com/coreos/fedora-coreos-tracker/issues/861
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
index 5a70463465..0ae53956e1 100755
--- a/tests/kola/logging/printk
+++ b/tests/kola/logging/printk
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # Verify default console log level; xref https://github.com/coreos/fedora-coreos-tracker/issues/1244
 
 set -xeuo pipefail
diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index 4603f944f8..d70468de9c 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -1,6 +1,4 @@
 #!/bin/bash
-
-# Verify bridge networks works via kernel arguments.
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -14,7 +12,8 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
+# Verify bridge networks works via kernel arguments.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index bc3bbd47d4..9f2832464a 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -3,15 +3,15 @@
 ##   exclusive: false
 ##   # No need to run on any other platform than QEMU.
 ##   platforms: qemu-unpriv
-
-set -xeuo pipefail
-
+#
 # Since we depend so much on the default networking configurations let's
 # alert ourselves when any default networking configuration changes in
 # NetworkManager. This allows us to react and adjust to the changes
 # (if needed) instead of finding out later that problems were introduced.
 # some context in: https://github.com/coreos/fedora-coreos-tracker/issues/1000
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 # EXPECTED_INITRD_NETWORK_CFG2
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index c157de3267..170d20ac74 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -1,15 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
-
-# Setup configuration for a single NIC with two different ways:
-# - kargs provide static network config for eth1 and also coreos.force_persist_ip
-# - ignition provides dhcp network config for eth1
-# Expected result:
-# - with coreos.force_persist_ip ip=kargs win, verify that
-#   eth1 has the static IP address via kargs
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -23,6 +12,17 @@ set -xeuo pipefail
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
+#
+# Setup configuration for a single NIC with two different ways:
+# - kargs provide static network config for eth1 and also coreos.force_persist_ip
+# - ignition provides dhcp network config for eth1
+# Expected result:
+# - with coreos.force_persist_ip ip=kargs win, verify that
+#   eth1 has the static IP address via kargs
+#
+# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+
+set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 972752116e..5487b2358c 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,6 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
-
 ## kola:
 ##   platforms: qemu
 #
@@ -11,11 +9,6 @@ set -xeuo pipefail
 # hostname is set from the fallback hostname and is `localhost`.
 # https://github.com/coreos/fedora-coreos-tracker/issues/902
 #
-# - platforms: qemu
-#   - This test should pass everywhere if it passes anywhere.
-
-. $KOLA_EXT_DATA/commonlib.sh
-
 # Use the output of hostnamectl to gather information about how
 # the hostname is/was set. We're expecting something like this:
 #   {
@@ -38,8 +31,8 @@ set -xeuo pipefail
 #       "HardwareModel" : "Standard PC _i440FX + PIIX, 1996_",
 #       "ProductUUID" : null
 #   }
-
-# "hostnamectl --json=pretty" is not supported on rhel8 yet, the 
+#
+# "hostnamectl --json=pretty" is not supported on rhel8 yet, the
 # expected output like this:
 #    Static hostname: n/a
 # Transient hostname: localhost
@@ -53,6 +46,9 @@ set -xeuo pipefail
 #             Kernel: Linux 4.18.0-372.19.1.el8_6.x86_64
 #       Architecture: x86-64
 
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
 
 if is_rhcos8; then
     if [ $(hostnamectl --transient) != 'localhost' ]; then
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index faa9152753..436c564ee4 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -7,7 +7,7 @@
 ##   # appendFirstbootKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
 # Verify rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
 # by NetworkManager. Append them to kernel parameter when boot,
 # get total timeout is `timeout * retry`, 30*8(240) seconds
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 997f1fe555..1fd7aef492 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -11,19 +11,19 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
 # Set MTU on a VLAN subinterface for the bond using ignition config and check
 # - verify MTU on the bond matches config
 # - verify MTU on the VLAN subinterface for the bond matches config
 # - verify ip address on the VLAN subinterface for the bond matches config
-
+#
 # The ignition config is generated using nm-initrd-generator according to
 # https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 # kargs="bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 \
 #        ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: \
 #        vlan=bond0.100:bond0"
 # $/usr/libexec/nm-initrd-generator -s -- $kargs
-
+#
 # Using kernel args to `configure MTU on a VLAN subinterface for the bond` refer to
 # https://github.com/coreos/fedora-coreos-config/pull/1401
 
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index c7514a7a2f..5c3dceeddc 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -12,7 +12,7 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
 # Configuring MTU on a VLAN subinterface for the bond,
 # - verify MTU on the bond matches config
 # - verify MTU on the VLAN subinterface for the bond matches config
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 9b3e45f61e..03e066a282 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -6,7 +6,7 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
 # Verify multiple nameservers config via kernel arguments work well
 # RHCOS: need to check /etc/resolv.conf and nmconnection
 # FCOS:  using systemd-resolved which needs to run resolvectl to check
@@ -30,7 +30,7 @@ elif is_rhcos; then
         grep -q "nameserver 1.1.1.1" ${resolv}); then
         fatal "Error: can not find nameserver in ${resolv}"
     fi
-fi 
+fi
 
 # check nameserver in config file
 conf=/etc/NetworkManager/system-connections/default_connection.nmconnection
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index 3d1f81c871..58d263f696 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -8,7 +8,7 @@
 ##   # Add rd.neednet=1 so we can force networking to be brought up on
 ##   # qemu to test that doing so doesn't materially change things.
 ##   appendFirstbootKernelArgs: "BOOTIF=52:54:00:12:34:56 rd.neednet=1"
-
+#
 # In addition to the pure network defaults case we should also make
 # sure that when BOOTIF= or rd.bootif= are provided on the kernel
 # command line (typically from PXE servers) that we don't propagate
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/default b/tests/kola/networking/no-default-initramfs-net-propagation/default
index ca3fd45efa..a5e1d11222 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/default
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/default
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # With pure network defaults no networking should have been propagated
 # from the initramfs. This test tries to verify that is the case.
 # https://github.com/coreos/fedora-coreos-tracker/issues/696
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 96cbc3ef7b..b4ee4641b4 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -1,10 +1,4 @@
 #!/bin/bash
-
-# This test verifies that the coreos.no_persist_ip kernel argument will
-# prevent propagating kernel argument based networking configuration into
-# the real root. It does this by providing karg static networking config
-# for eth1 and then verifying that DHCP is used in the real root.
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -17,6 +11,11 @@
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
 ##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
+#
+# This test verifies that the coreos.no_persist_ip kernel argument will
+# prevent propagating kernel argument based networking configuration into
+# the real root. It does this by providing karg static networking config
+# for eth1 and then verifying that DHCP is used in the real root.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 63e534d68c..792d2b7ae3 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -1,6 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -14,16 +12,18 @@ set -xeuo pipefail
 ##   # appendKernelArgs doesn't work on s390x so skip there
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-
+#
 # Setup configuration for a single NIC with two different ways:
 # - kargs provide static network config for eth1 without coreos.force_persist_ip
 # - ignition provides dhcp network config for eth1
 # Expected result:
 # - without coreos.force_persist_ip Ignition networking
 #   configuration wins, verify that eth1 gets ip via dhcp
-
+#
 # https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 # Verify eth1 gets ip address via dhcp
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index 57b7324a3d..d391ccbe5e 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,12 +1,15 @@
 #!/bin/bash
-
+## kola:
+##   # This test should pass everywhere if it passes anywhere.
+##   platforms: platform-qemu-unpriv
+#
 # This test verifies that NetworkManager supports configuring the
 # carrier timeout via the `rd.net.timeout.carrier=` karg. Without
 # recreating an environment that requires this setting to be set
 # (which would be hard to do), we'll test this by just making sure
 # that setting the kernel argument ensures the runtime configuration
 # file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
-# 
+#
 # Checking that this file gets created is also tricky because we
 # `rm -rf /run/NetworkManager` in coreos-teardown-initramfs on first boot,
 # so we'll workaround that by setting the karg permanently and then
@@ -16,10 +19,6 @@
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1917773
 # - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/e300138892ee0fc3824d38b527b60103a01758ab#
 
-## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu-unpriv
-
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
@@ -29,11 +28,11 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       ok "first boot"
       /tmp/autopkgtest-reboot rebooted
       ;;
-  
+
   rebooted)
       ok "second boot"
       grep rd.net.timeout.carrier=15 /proc/cmdline
-      
+
       generator_conf="/run/NetworkManager/conf.d/15-carrier-timeout.conf"
       if [ ! -f ${generator_conf} ]; then
         fatal "Error: can not generate ${generator_conf} with karg rd.net.timeout.carrier"
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 64abf74933..99c74ea037 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -1,8 +1,4 @@
 #!/bin/bash
-# Verify team networking using ignition config works.
-# The ignition config refers to
-# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -15,6 +11,10 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
+#
+# Verify team networking using ignition config works.
+# The ignition config refers to
+# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
index 39a290e897..7460509dc1 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
@@ -2,6 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   platforms: "aws azure gce"
+#
 # Test the coreos-platform-chrony generator.
 
 set -xeuo pipefail
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 4f9fc83445..753a402af7 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -1,11 +1,4 @@
 #!/bin/bash
-#
-# This script creates two veth interfaces i.e. one for the host machine
-# and other for the container(dnsmasq server). This setup will be helpful
-# to verify the DHCP propagation of NTP servers. This will also avoid any
-# regression that might cause in RHCOS or FCOS when the upstream changes
-# come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
-#
 ## kola:
 ##   # Add the needs-internet tag. This test builds a container from remote
 ##   # sources and uses a remote NTP server.
@@ -20,6 +13,12 @@
 ##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
+#
+# This script creates two veth interfaces i.e. one for the host machine
+# and other for the container(dnsmasq server). This setup will be helpful
+# to verify the DHCP propagation of NTP servers. This will also avoid any
+# regression that might cause in RHCOS or FCOS when the upstream changes
+# come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index 6c29c8af4d..7ab04ade2b 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -1,11 +1,4 @@
 #!/bin/bash
-#
-# This script creates two veth interfaces i.e. one for the host machine
-# and other for the container(dnsmasq server). This setup will be helpful
-# to verify the DHCP propagation of NTP servers. This will also avoid any
-# regression that might cause in RHCOS or FCOS when the upstream changes
-# come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
-#
 ## kola:
 ##   # Add the needs-internet tag. This test builds a container from remote
 ##   # sources and uses a remote NTP server.
@@ -22,6 +15,12 @@
 ##   minMemory: 1536
 ##   # We only care about timesyncd in Fedora. It's not available elsewhere.
 ##   distros: fcos
+#
+# This script creates two veth interfaces i.e. one for the host machine
+# and other for the container(dnsmasq server). This setup will be helpful
+# to verify the DHCP propagation of NTP servers. This will also avoid any
+# regression that might cause in RHCOS or FCOS when the upstream changes
+# come down and obsolete the temporary work (https://github.com/coreos/fedora-coreos-config/pull/412)
 
 set -xeuo pipefail
 
diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index 88394be5e0..8a665891a0 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -1,6 +1,4 @@
 #!/bin/bash
-# Test to make sure the booted AWS instance is XEN based
-#
 ## kola:
 ##   # This is a read-only test and can be run with other tests
 ##   exclusive: false
@@ -12,6 +10,7 @@
 ##   # the test.
 ##   requiredTag: aws-xen-test
 #
+# Test to make sure the booted AWS instance is XEN based
 
 set -xeuo pipefail
 
diff --git a/tests/kola/platforms/aws/nvme b/tests/kola/platforms/aws/nvme
index 7db2d020a0..3468f6e717 100755
--- a/tests/kola/platforms/aws/nvme
+++ b/tests/kola/platforms/aws/nvme
@@ -1,21 +1,16 @@
 #!/bin/bash
-# Test to make sure AWS instances with nvme storage get a device
-# properly created for it. See https://github.com/coreos/fedora-coreos-tracker/issues/1306
-#
 ## kola:
 ##   # This is a read-only test and can be run with other tests
 ##   exclusive: false
 ##   # This test is targeted at AWS
 ##   platforms: aws
-
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
+#
+# Test to make sure AWS instances with nvme storage get a device
+# properly created for it. See https://github.com/coreos/fedora-coreos-tracker/issues/1306
+#
 # We'll check to see if anything is listed in `nvme list-subsys`
 # and then run the test based on that. Example output:
-# 
+#
 # [core@ip-10-0-1-155 ~]$ nvme list-subsys -o json
 # [
 #   {
@@ -37,6 +32,11 @@ set -xeuo pipefail
 #     ]
 #   }
 # ]
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
 nvme_info=$(nvme list-subsys -o json || true)
 has_nvme=$(jq -r ".[].Subsystems[].Paths[] | select(.Name == \"nvme0\").Name" <<< "$nvme_info")
 if [ -n "${has_nvme}" ]; then
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index dea14216c8..a785e07fc1 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,6 +1,4 @@
 #!/bin/bash
-set -xeuo pipefail
-
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: qemu
@@ -12,10 +10,12 @@ set -xeuo pipefail
 ##   # This test reaches out to the internet and it could take more
 ##   # time to pull down the container.
 ##   timeoutMin: 3
-
+#
 # Tests that rootless podman containers can DNS resolve external domains.
 # https://github.com/coreos/fedora-coreos-tracker/issues/923
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 runascoreuserscript='
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 707998382f..c55fa4ef88 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -12,7 +12,7 @@
 ##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
-
+#
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
 # It tests that rootless+systemd works. See issue:
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 5384c1fec3..6001033566 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
+#
 # These are read-only not-necessarily-related checks that verify default system
 # configuration both on first and subsequent boots.
 
diff --git a/tests/kola/rpm-ostree/container-deps b/tests/kola/rpm-ostree/container-deps
index 98888bc5e0..75d86d2942 100755
--- a/tests/kola/rpm-ostree/container-deps
+++ b/tests/kola/rpm-ostree/container-deps
@@ -1,7 +1,8 @@
 #!/bin/bash
-# Verify some dependencies of the rpm-ostree container stack.
 ## kola:
 ##   exclusive: false
+#
+# Verify some dependencies of the rpm-ostree container stack.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index a2f690ea5d..1c71fad22b 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -76,7 +76,7 @@ if [[ "$version" == *"2023"* ]] || [[ "$version" == *"2022.19"* ]]; then
     echo "Running rpm-ostree 2022.19 or newer.";
 else
     echo "Running rpm-ostree 2022.18 or older, rebuilding the initramfs.";
-    echo "Building initramfs for Kernel: $kver" 
+    echo "Building initramfs for Kernel: $kver"
     /usr/libexec/rpm-ostree/wrapped/dracut --tmpdir /tmp/ --no-hostonly --kver $kver --reproducible \
     -v --add ostree -f /tmp/initramfs2.img
     mv /tmp/initramfs2.img /lib/modules/$kver/initramfs.img
diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
index 46102952a8..cc67b7fb21 100755
--- a/tests/kola/selinux/default
+++ b/tests/kola/selinux/default
@@ -1,9 +1,10 @@
 #!/bin/bash
-# Verify that the SELinux policy isn't marked as modified.
-# See: https://github.com/openshift/os/issues/1036.
 ## kola:
 ##   exclusive: false
 ##   tags: "platform-independent"
+#
+# Verify that the SELinux policy isn't marked as modified.
+# See: https://github.com/openshift/os/issues/1036.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 472fd35437..8cc0f85000 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+#
 # We can run this on both FCOS and RHCOS as neither should have a zram device
 # enabled by default. (In RHCOS, there is no zram support at all)
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 55a8ef03d5..7bdb0c71ee 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -10,7 +10,7 @@
 ##   platforms: qemu-unpriv
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
-
+#
 # Make sure that basic toolbox functionnality is working:
 # - Creating a toolbox
 # - Running a command in a toolbox
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index c332c1c5f5..5d8997e624 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
-set -xeuo pipefail
-
 ## kola:
 ##   # restrict to qemu for now because the primary disk path is platform-dependent
 ##   platforms: qemu
 ##   architectures: "!s390x"
 
+set -xeuo pipefail
+
 . $KOLA_EXT_DATA/commonlib.sh
 
 # /var
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index f26818b323..fc84061fb0 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -1,12 +1,13 @@
 #!/bin/bash
-set -xeuo pipefail
+## kola:
+##   platforms: qemu
+##   additionalDisks: ["5G:mpath"]
+#
 # This is to verify udev rules /dev/disk/by-id/scsi-*
 # symlinks present in initramfs
 # https://bugzilla.redhat.com/show_bug.cgi?id=1990506
 
-## kola:
-##   platforms: qemu
-##   additionalDisks: ["5G:mpath"]
+set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index 8c4f8ae4fc..c12e19c67c 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -1,9 +1,10 @@
 #!/bin/bash
-set -xeuo pipefail
-
-# restrict to qemu for now because the primary disk path is platform-dependent
 ## kola:
 ##   platforms: qemu
+#
+# Restrict to qemu for now because the primary disk path is platform-dependent
+
+set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
diff --git a/tests/manual/coreos-docs-net-testing.sh b/tests/manual/coreos-docs-net-testing.sh
index e9633bf172..b1426c879f 100755
--- a/tests/manual/coreos-docs-net-testing.sh
+++ b/tests/manual/coreos-docs-net-testing.sh
@@ -1,6 +1,4 @@
 #!/usr/bin/bash
-set -eu -o pipefail
-
 # This script attempts to test the configurations in our documentation
 # at https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/.
 # All it does is test the various documented scenarios via both the
@@ -33,6 +31,8 @@ set -eu -o pipefail
 #
 # - Dusty Mabe - dusty@dustymabe.com
 
+set -eu -o pipefail
+
 vmname="coreos-docs-nettest"
 
 butane_common=\
diff --git a/tests/manual/coreos-network-testing.sh b/tests/manual/coreos-network-testing.sh
index a192559158..f276c69a63 100755
--- a/tests/manual/coreos-network-testing.sh
+++ b/tests/manual/coreos-network-testing.sh
@@ -1,7 +1,4 @@
 #!/usr/bin/bash
-set -eu -o pipefail
-#set -x
-
 # This script attempts to test networking configuration in various
 # scenarios/configurations. It tries to test what should happen
 # when initramfs networking is passed and/or networking config is
@@ -9,8 +6,12 @@ set -eu -o pipefail
 # configured network is passed properly to the real root when it
 # should be and not when it shouldn't be. See the following issue
 # for more details: https://github.com/coreos/fedora-coreos-tracker/issues/394
+#
 # - Dusty Mabe - dusty@dustymabe.com
 
+set -eu -o pipefail
+#set -x
+
 vmname="coreos-nettest"
 
 butane_common=\

From ff295cb64eeb122b2540b343e7cdd4c450f4de4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 27 Jan 2023 14:18:56 +0100
Subject: [PATCH 1421/2157] tests: Use 'platform-independent' as much as
 possible

Mark test indentified as idependent from the platform as such with the
'platform-independent' platform.
---
 tests/kola/binfmt/qemu                                        | 2 +-
 tests/kola/boot/grub2-install                                 | 2 +-
 tests/kola/butane/grub-users/test.sh                          | 2 +-
 tests/kola/clhm/ignition-warnings/test.sh                     | 2 +-
 tests/kola/extensions/module                                  | 4 ++--
 tests/kola/extensions/package                                 | 2 +-
 tests/kola/files/validate-symlinks                            | 2 +-
 tests/kola/ignition/systemd-disable/test.sh                   | 2 +-
 tests/kola/ignition/systemd-enable-units/test.sh              | 2 +-
 tests/kola/ignition/systemd-unmasking/test.sh                 | 2 +-
 tests/kola/multipath/multipathd-service-fix                   | 2 +-
 tests/kola/networking/bridge-static-via-kargs                 | 2 +-
 tests/kola/networking/default-network-behavior-change/test.sh | 2 +-
 tests/kola/networking/force-persist-ip/test.sh                | 2 +-
 tests/kola/networking/hostname/fallback-hostname/test.sh      | 2 +-
 tests/kola/networking/kargs-rd-net                            | 2 +-
 tests/kola/networking/mtu-on-bond-ignition/test.sh            | 2 +-
 tests/kola/networking/mtu-on-bond-kargs                       | 2 +-
 tests/kola/networking/nameserver                              | 2 +-
 .../networking/no-default-initramfs-net-propagation/bootif    | 2 +-
 tests/kola/networking/no-persist-ip                           | 2 +-
 tests/kola/networking/prefer-ignition-networking/test.sh      | 2 +-
 tests/kola/networking/rd-net-timeout-carrier/test.sh          | 2 +-
 tests/kola/podman/dns/test.sh                                 | 2 +-
 tests/kola/podman/rootless-systemd                            | 2 +-
 tests/kola/root-reprovision/filesystem-only/test.sh           | 2 +-
 tests/kola/root-reprovision/luks/test.sh                      | 2 +-
 tests/kola/root-reprovision/swap-before-root/test.sh          | 2 +-
 tests/kola/rpm-ostree-countme/test.sh                         | 2 +-
 tests/kola/toolbox/test.sh                                    | 2 +-
 tests/kola/var-mount/luks/test.sh                             | 2 +-
 31 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 606ce1aa87..46d1772b39 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # This test doesn't make meaningful changes to the system and should
 ##   # be able to be combined with other tests.
 ##   exclusive: false
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index f6f16a6eae..76f1c2896d 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index 38dbffa8b9..ae01dced07 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -6,7 +6,7 @@
 ##  # ppc64le and s390x
 ##  architectures: "!ppc64le s390x"
 ##  # Running on multiple platforms won't prove anything further
-##  platforms: qemu
+##  platforms: platform-independent
 #
 # Check Butane GRUB sugar as best we can from inside the OS.
 
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index df461fd235..620dfcb958 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
 ##   allowConfigWarnings: true
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index 51fae6779f..83f9879d4f 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -1,10 +1,10 @@
 #!/bin/bash
 ## kola:
+##   # Should pass on all platforms if it passes on one
+##   platforms: platform-independent
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
 ##   tags: needs-internet
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
 ##   # This is dependent on network and disk speed but we've seen the
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index dfa0b194ce..741a728d68 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -4,7 +4,7 @@
 ##   distros: fcos
 ##   tags: needs-internet
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # This is dependent on network and disk speed but we've seen the
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index adaf2a94d2..8093377145 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -3,7 +3,7 @@
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
 ##   # This test should pass everywhere if it passes anywhere
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 #
 # Check if there are broken symlinks in /etc/ and /usr/.
 # See: https://github.com/coreos/fedora-coreos-config/issues/1782
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index bb6aafbdc8..9a65f6f109 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -6,7 +6,7 @@
 ##   distros: fcos
 ##   # We don't need to test this on every platform. If it passes in
 ##   # one place it will pass everywhere.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to disable units
 # https://github.com/coreos/fedora-coreos-tracker/issues/392
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index a07bee2ea6..0be219024a 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   # We don't need to test this on every platform. If it passes in
 ##   # one place it will pass everywhere.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to enable systemd units of
 # different types.
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index cc07c2f982..d03c2474c1 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -6,7 +6,7 @@
 ##   distros: fcos
 ##   # We don't need to test this on every platform. If it passes in one place it
 ##   # will pass everywhere.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to unmask units It just so happens
 # we have masked dnsmasq in FCOS so we can test this by unmasking it.
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index cbb510244b..cf20be88f7 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -2,7 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   # Just run on qemu since the answer is the same everywhere
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index d70468de9c..b6a6e66888 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # Configuration of the 2 NICs for this test
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 9f2832464a..92dd85d863 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   # No need to run on any other platform than QEMU.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 #
 # Since we depend so much on the default networking configurations let's
 # alert ourselves when any default networking configuration changes in
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 170d20ac74..4cdef084bf 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
 ##   # The functionality we're testing here and the configuration for the NIC
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 5487b2358c..0efc2af587 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: qemu
+##   platforms: platform-independent
 #
 # Test that the fallback hostname is `localhost`. This test
 # validates that the fallback hostname is set to `localhost`
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 436c564ee4..07a5a947a1 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # The functionality we're testing here.
 ##   appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
 ##   # appendFirstbootKernelArgs doesn't work on s390x
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 1fd7aef492..03929ca591 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # We use net.ifnames=0 to disable consistent network naming here because on
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 5c3dceeddc..760688b521 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # Configuration of the 2 NICs for this test
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 03e066a282..06eac1d90e 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   appendKernelArgs: "nameserver=8.8.8.8 nameserver=1.1.1.1"
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index 58d263f696..e495ad8ff7 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # appendFirstbootKernelArgs is only supported on qemu
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
 ##   # and the coreos-teardown-initramfs interact. The MAC address is from:
 ##   # https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index b4ee4641b4..d1ec0a6d8f 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
 ##   # The functionality we're testing here and the configuration for the NIC.
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 792d2b7ae3..726245d4d9 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Add 1 additional NIC for this test
 ##   additionalNics: 1
 ##   # Set the kernel arguments so that we can set the configuration for the NIC.
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index d391ccbe5e..5026c438fd 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-qemu-unpriv
+##   platforms: platform-independent
 #
 # This test verifies that NetworkManager supports configuring the
 # carrier timeout via the `rd.net.timeout.carrier=` karg. Without
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index a785e07fc1..cf05280b50 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # This test pulls a container from a registry.
 ##   tags: needs-internet
 ##   # This test doesn't make meaningful changes to the system and
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index c55fa4ef88..139aed777e 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -4,7 +4,7 @@
 ##   # This test uses a remote NTP server.
 ##   tags: needs-internet
 ##   # If the test works anywhere it should work everywhere.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 ##   # Pulling and building the container can take a long time if a
 ##   # slow mirror gets chosen.
 ##   timeoutMin: 15
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index da56b961b3..c10dc8de55 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index ac783de40c..f69f2c8cf0 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # This test should pass everywhere if it passes anywhere.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # A TPM backend device is not available on s390x to suport TPM.
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index c4ea978aad..ca0eaac032 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -4,7 +4,7 @@
 ##   # RHCOS. See: https://github.com/openshift/os/issues/665
 ##   distros: fcos
 ##   # additionalDisks is only supported on qemu.
-##   platforms: qemu
+##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 66986b95e3..ca83876f93 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -4,7 +4,7 @@
 ##   distros: fcos
 ##   tags: needs-internet
 ##   # No need to run on any other platform than QEMU.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 
 set -xeuo pipefail
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 7bdb0c71ee..304568486a 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -7,7 +7,7 @@
 ##   distros: fcos
 ##   tags: needs-internet
 ##   # Only run on QEMU to reduce CI costs as nothing is platform specific here.
-##   platforms: qemu-unpriv
+##   platforms: platform-independent
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
 #
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index 5d8997e624..10fc4da57f 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # restrict to qemu for now because the primary disk path is platform-dependent
-##   platforms: qemu
+##   platforms: platform-independent
 ##   architectures: "!s390x"
 
 set -xeuo pipefail

From a45d6600a4e96bd75371500b163c06eba6c82d53 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 14 Dec 2022 20:16:30 +0100
Subject: [PATCH 1422/2157] tests/delete-config: Use qemu platform

We're going to remove support for the qemu-unpriv platform.
---
 tests/kola/ignition/delete-config/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 70233c0e4f..04c3c2d233 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   # Ideally we'd test on virtualbox and vmware, but we don't have tests
 ##   # there, so we mock specifically for ignition.platform.id=qemu
-##   platforms: qemu-unpriv
+##   platforms: qemu
 
 set -xeuo pipefail
 

From 03cb1ad505de8e6611bb9e0ba1c97403f2a25783 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 27 Jan 2023 14:33:00 +0100
Subject: [PATCH 1423/2157] tests/kola/rpm-ostree/kernel-replace: Significant
 whitespace change

---
 tests/kola/rpm-ostree/kernel-replace | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 1c71fad22b..2945427a4a 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -87,7 +87,7 @@ FROM localhost/fcos
 RUN rpm-ostree cliwrap install-to-root /
 ADD dracut_call.sh dracut_call.sh
 RUN cat dracut_call.sh
-RUN chmod +x dracut_call.sh && rpm-ostree override replace \ 
+RUN chmod +x dracut_call.sh && rpm-ostree override replace \
     https://koji.fedoraproject.org/koji/buildinfo?buildID=2084352 && \
     ./dracut_call.sh && \
     ostree container commit

From 0eb47fb3bbe7764c42fe42d0ee3dbe23d377eaeb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 2 Feb 2023 12:52:59 +0100
Subject: [PATCH 1424/2157] tests: Fix tests incorrectly marked as
 platform-independent

Fixes: https://github.com/coreos/fedora-coreos-config/pull/2133
---
 tests/kola/networking/bridge-static-via-kargs                 | 4 ++--
 tests/kola/networking/force-persist-ip/test.sh                | 4 ++--
 tests/kola/networking/kargs-rd-net                            | 4 ++--
 tests/kola/networking/mtu-on-bond-ignition/test.sh            | 4 ++--
 tests/kola/networking/mtu-on-bond-kargs                       | 4 ++--
 tests/kola/networking/nameserver                              | 4 ++--
 .../networking/no-default-initramfs-net-propagation/bootif    | 2 +-
 tests/kola/networking/no-persist-ip                           | 4 ++--
 tests/kola/networking/prefer-ignition-networking/test.sh      | 4 ++--
 tests/kola/networking/team-dhcp-via-ignition/test.sh          | 2 +-
 tests/kola/root-reprovision/swap-before-root/test.sh          | 4 ++--
 tests/kola/var-mount/luks/test.sh                             | 4 ++--
 tests/kola/var-mount/scsi-id/test.sh                          | 1 +
 13 files changed, 23 insertions(+), 22 deletions(-)

diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index b6a6e66888..0402bfbe22 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # Configuration of the 2 NICs for this test
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 4cdef084bf..cf325d2d72 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
 ##   # The functionality we're testing here and the configuration for the NIC
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 07a5a947a1..967208983f 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # appendFirstbootKernelArgs is only supported on QEMU
+##   platforms: qemu
 ##   # The functionality we're testing here.
 ##   appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
 ##   # appendFirstbootKernelArgs doesn't work on s390x
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 03929ca591..8bccfb5c4b 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # We use net.ifnames=0 to disable consistent network naming here because on
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 760688b521..0563d51c60 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
 ##   # Configuration of the 2 NICs for this test
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 06eac1d90e..285881ce90 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # appendKernelArgs is only supported on QEMU
+##   platforms: qemu
 ##   appendKernelArgs: "nameserver=8.8.8.8 nameserver=1.1.1.1"
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index e495ad8ff7..58d263f696 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # appendFirstbootKernelArgs is only supported on qemu
-##   platforms: platform-independent
+##   platforms: qemu
 ##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
 ##   # and the coreos-teardown-initramfs interact. The MAC address is from:
 ##   # https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index d1ec0a6d8f..a4a013557b 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
 ##   # The functionality we're testing here and the configuration for the NIC.
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 726245d4d9..1d727ea6f4 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
+##   # additionalNics is only suppoorted on QEMU
+##   platforms: qemu
 ##   # Add 1 additional NIC for this test
 ##   additionalNics: 1
 ##   # Set the kernel arguments so that we can set the configuration for the NIC.
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 99c74ea037..2b60406091 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
+##   # additionalNics is only suppoorted on QEMU
 ##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index ca0eaac032..8550c16c7a 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,10 +1,10 @@
 #!/bin/bash
 ## kola:
+##   # This test's config manually references /dev/vda and is thus QEMU only
+##   platforms: qemu
 ##   # This test only runs on FCOS due to a problem enabling a swap partition on
 ##   # RHCOS. See: https://github.com/openshift/os/issues/665
 ##   distros: fcos
-##   # additionalDisks is only supported on qemu.
-##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index 10fc4da57f..0bc5a6b008 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # restrict to qemu for now because the primary disk path is platform-dependent
-##   platforms: platform-independent
+##   # Restrict to qemu for now because the primary disk path is platform-dependent
+##   platforms: qemu
 ##   architectures: "!s390x"
 
 set -xeuo pipefail
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index fc84061fb0..2ddde3420d 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -1,5 +1,6 @@
 #!/bin/bash
 ## kola:
+##   # additionalDisks is only supported on QEMU
 ##   platforms: qemu
 ##   additionalDisks: ["5G:mpath"]
 #

From e887b5618da46eb340f8bc0071747649a1c9f655 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 2 Feb 2023 12:53:58 +0100
Subject: [PATCH 1425/2157] tests: Remove redundant comments for
 platform-independent tests

See: https://github.com/coreos/fedora-coreos-config/pull/2133
---
 tests/kola/binfmt/qemu                                        | 1 -
 tests/kola/boot/grub2-install                                 | 1 -
 tests/kola/butane/grub-users/test.sh                          | 3 +--
 tests/kola/clhm/ignition-warnings/test.sh                     | 1 -
 tests/kola/extensions/module                                  | 1 -
 tests/kola/extensions/package                                 | 3 +--
 tests/kola/files/validate-symlinks                            | 3 +--
 tests/kola/ignition/stable-boot/test.sh                       | 2 --
 tests/kola/ignition/systemd-disable/test.sh                   | 4 +---
 tests/kola/ignition/systemd-enable-units/test.sh              | 2 --
 tests/kola/ignition/systemd-unmasking/test.sh                 | 4 +---
 tests/kola/multipath/multipathd-service-fix                   | 3 +--
 tests/kola/networking/default-network-behavior-change/test.sh | 3 +--
 tests/kola/networking/rd-net-timeout-carrier/test.sh          | 1 -
 tests/kola/podman/dns/test.sh                                 | 1 -
 tests/kola/podman/rootless-systemd                            | 3 +--
 tests/kola/root-reprovision/filesystem-only/test.sh           | 1 -
 tests/kola/root-reprovision/luks/test.sh                      | 1 -
 tests/kola/rpm-ostree-countme/test.sh                         | 3 +--
 tests/kola/rpm-ostree/kernel-replace                          | 4 +---
 tests/kola/selinux/podman-tmpfs-context                       | 3 +--
 tests/kola/toolbox/test.sh                                    | 3 +--
 22 files changed, 12 insertions(+), 39 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 46d1772b39..ff855b1bb7 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # This test doesn't make meaningful changes to the system and should
 ##   # be able to be combined with other tests.
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 76f1c2896d..37e7b7e7ea 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index ae01dced07..bbd8c2bfed 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -1,12 +1,11 @@
 #!/bin/bash
 ## kola:
+##  platforms: platform-independent
 ##  # GRUB sugar currently only exists in FCOS
 ##  distros: fcos
 ##  # coreos-post-ignition-checks.service forbids GRUB passwords on
 ##  # ppc64le and s390x
 ##  architectures: "!ppc64le s390x"
-##  # Running on multiple platforms won't prove anything further
-##  platforms: platform-independent
 #
 # Check Butane GRUB sugar as best we can from inside the OS.
 
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index 620dfcb958..d110b89fd3 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index 83f9879d4f..7b98c0278d 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # Should pass on all platforms if it passes on one
 ##   platforms: platform-independent
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 741a728d68..4d3c259d0d 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -1,10 +1,9 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
 ##   tags: needs-internet
-##   # This test should pass everywhere if it passes anywhere.
-##   platforms: platform-independent
 ##   # This is dependent on network and disk speed but we've seen the
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 8093377145..2d1ece9ed9 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
-##   # This test should pass everywhere if it passes anywhere
-##   platforms: platform-independent
 #
 # Check if there are broken symlinks in /etc/ and /usr/.
 # See: https://github.com/coreos/fedora-coreos-config/issues/1782
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index e8dbc04f21..6264f42711 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # We don't need to test this on every platform. If it passes in one place
-##   # it will pass everywhere.
 ##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 9a65f6f109..59bc999414 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -1,12 +1,10 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test is currently scoped to FCOS because `zincati` is only available
 ##   # on FCOS.
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
 ##   distros: fcos
-##   # We don't need to test this on every platform. If it passes in
-##   # one place it will pass everywhere.
-##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to disable units
 # https://github.com/coreos/fedora-coreos-tracker/issues/392
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index 0be219024a..1e1cb3f32a 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # We don't need to test this on every platform. If it passes in
-##   # one place it will pass everywhere.
 ##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to enable systemd units of
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index d03c2474c1..7e4832afa2 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -1,12 +1,10 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test is currently scoped to FCOS because `dnsmasq` is not masked on
 ##   # RHCOS.
 ##   # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
 ##   distros: fcos
-##   # We don't need to test this on every platform. If it passes in one place it
-##   # will pass everywhere.
-##   platforms: platform-independent
 #
 # This test makes sure that ignition is able to unmask units It just so happens
 # we have masked dnsmasq in FCOS so we can test this by unmasking it.
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index cf20be88f7..66ac2fce49 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
-##   exclusive: false
-##   # Just run on qemu since the answer is the same everywhere
 ##   platforms: platform-independent
+##   exclusive: false
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 92dd85d863..7145e3cf40 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
-##   exclusive: false
-##   # No need to run on any other platform than QEMU.
 ##   platforms: platform-independent
+##   exclusive: false
 #
 # Since we depend so much on the default networking configurations let's
 # alert ourselves when any default networking configuration changes in
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index 5026c438fd..67fca47bf1 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 #
 # This test verifies that NetworkManager supports configuring the
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index cf05280b50..2271ac668f 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # This test pulls a container from a registry.
 ##   tags: needs-internet
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 139aed777e..744536ca5e 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,10 +1,9 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test builds a container from remote sources.
 ##   # This test uses a remote NTP server.
 ##   tags: needs-internet
-##   # If the test works anywhere it should work everywhere.
-##   platforms: platform-independent
 ##   # Pulling and building the container can take a long time if a
 ##   # slow mirror gets chosen.
 ##   timeoutMin: 15
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index c10dc8de55..d594510520 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index f69f2c8cf0..aacb6a3edd 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test should pass everywhere if it passes anywhere.
 ##   platforms: platform-independent
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index ca83876f93..c490ee3ddb 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -1,10 +1,9 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test only runs on FCOS because countme support is not available in RHCOS
 ##   distros: fcos
 ##   tags: needs-internet
-##   # No need to run on any other platform than QEMU.
-##   platforms: platform-independent
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 2945427a4a..b6533a302d 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -5,9 +5,7 @@
 ##   # This test only runs on FCOS due to a problem with skopeo copy on
 ##   # RHCOS. See: https://github.com/containers/skopeo/issues/1846
 ##   distros: fcos
-##   # tags:
-##   #   - needs-internet - we fetch files from koji
-##   #   - platform-independent - should pass everywhere if it passes anywhere
+##   # Needs internet access as we fetch files from koji
 ##   tags: "needs-internet platform-independent"
 #
 # Build container image with a new kernel and reboot into the new image.
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index d22082c73b..950d4c7d69 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -3,8 +3,7 @@
 ##   # This test doesn't meaningfully change the system and
 ##   # can be run with other tests.
 ##   exclusive: false
-##   # - This test pulls a container image from the network.
-##   # - This test should pass everywhere if it passes anywhere.
+##   # This test pulls a container image from the network.
 ##   tags: "needs-internet platform-independent"
 
 set -xeuo pipefail
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 304568486a..3ffd9ae3f0 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -1,13 +1,12 @@
 #!/bin/bash
 ## kola:
+##   platforms: platform-independent
 ##   # This test only runs on FCOS because RHCOS is missing the `machinectl` command.
 ##   # Additionally, there are some distro specific choices made for this test that
 ##   # should/could be adapted for RHCOS.
 ##   # TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
 ##   distros: fcos
 ##   tags: needs-internet
-##   # Only run on QEMU to reduce CI costs as nothing is platform specific here.
-##   platforms: platform-independent
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
 #

From eadf2dfb91e13656d3c685d4f2e7669a293a2184 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 2 Feb 2023 14:58:44 +0100
Subject: [PATCH 1426/2157] tests: Fix typo

---
 tests/kola/networking/bridge-static-via-kargs            | 2 +-
 tests/kola/networking/force-persist-ip/test.sh           | 2 +-
 tests/kola/networking/mtu-on-bond-ignition/test.sh       | 2 +-
 tests/kola/networking/mtu-on-bond-kargs                  | 2 +-
 tests/kola/networking/no-persist-ip                      | 2 +-
 tests/kola/networking/prefer-ignition-networking/test.sh | 2 +-
 tests/kola/networking/team-dhcp-via-ignition/test.sh     | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index 0402bfbe22..60f1dc4e0d 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index cf325d2d72..fc45906845 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 8bccfb5c4b..f13a37250a 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 0563d51c60..b923d4a6c7 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index a4a013557b..3410841923 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 1 NIC for this test
 ##   additionalNics: 1
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 1d727ea6f4..9ddcbadd61 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 1 additional NIC for this test
 ##   additionalNics: 1
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 2b60406091..7b47c46a45 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # additionalNics is only suppoorted on QEMU
+##   # additionalNics is only supported on QEMU
 ##   platforms: qemu
 ##   # Add 2 NIC for this test
 ##   additionalNics: 2

From 65d942edf9cc56597ccb3e9ad8d51389380b00df Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 2 Feb 2023 09:38:30 -0500
Subject: [PATCH 1427/2157] tests: fix platform-independent usage

It's a tag, not a platform.
---
 tests/kola/binfmt/qemu                                       | 5 ++---
 tests/kola/boot/grub2-install                                | 2 +-
 tests/kola/butane/grub-users/test.sh                         | 2 +-
 tests/kola/clhm/ignition-warnings/test.sh                    | 2 +-
 tests/kola/extensions/module                                 | 3 +--
 tests/kola/extensions/package                                | 3 +--
 tests/kola/files/validate-symlinks                           | 2 +-
 tests/kola/ignition/stable-boot/test.sh                      | 2 +-
 tests/kola/ignition/systemd-disable/test.sh                  | 2 +-
 tests/kola/ignition/systemd-enable-units/test.sh             | 2 +-
 tests/kola/ignition/systemd-unmasking/test.sh                | 2 +-
 tests/kola/multipath/multipathd-service-fix                  | 2 +-
 .../kola/networking/default-network-behavior-change/test.sh  | 2 +-
 tests/kola/networking/hostname/fallback-hostname/test.sh     | 2 +-
 tests/kola/networking/rd-net-timeout-carrier/test.sh         | 2 +-
 tests/kola/podman/dns/test.sh                                | 3 +--
 tests/kola/podman/rootless-systemd                           | 3 +--
 tests/kola/root-reprovision/filesystem-only/test.sh          | 5 ++---
 tests/kola/root-reprovision/luks/test.sh                     | 5 ++---
 tests/kola/rpm-ostree-countme/test.sh                        | 3 +--
 tests/kola/toolbox/test.sh                                   | 3 +--
 21 files changed, 24 insertions(+), 33 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index ff855b1bb7..9aa72c41e2 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -1,11 +1,10 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   # This test pulls a container from a registry.
+##   tags: "platform-independent needs-internet"
 ##   # This test doesn't make meaningful changes to the system and should
 ##   # be able to be combined with other tests.
 ##   exclusive: false
-##   # This test pulls a container from a registry.
-##   tags: needs-internet
 ##   # Only run on fcos, as rhel does not support emulation
 ##   distros: fcos
 ##   # We ship the x86_64 on all non-x86_64 arches.
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 37e7b7e7ea..1f25388364 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index bbd8c2bfed..05729f9222 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##  platforms: platform-independent
+##  tags: "platform-independent"
 ##  # GRUB sugar currently only exists in FCOS
 ##  distros: fcos
 ##  # coreos-post-ignition-checks.service forbids GRUB passwords on
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index d110b89fd3..0e30ba5360 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
 ##   allowConfigWarnings: true
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index 7b98c0278d..eda28892ae 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent needs-internet"
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
-##   tags: needs-internet
 ##   # This is dependent on network and disk speed but we've seen the
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 4d3c259d0d..16b43dbccc 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent needs-internet"
 ##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
 ##   distros: fcos
-##   tags: needs-internet
 ##   # This is dependent on network and disk speed but we've seen the
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 2d1ece9ed9..e070653fae 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
 #
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index 6264f42711..8232dbfb4b 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 #
 # This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
 
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 59bc999414..42f07fbe98 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   # This test is currently scoped to FCOS because `zincati` is only available
 ##   # on FCOS.
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index 1e1cb3f32a..c8e8adad81 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 #
 # This test makes sure that ignition is able to enable systemd units of
 # different types.
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 7e4832afa2..ddbb92c233 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   # This test is currently scoped to FCOS because `dnsmasq` is not masked on
 ##   # RHCOS.
 ##   # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
index 66ac2fce49..30646ca468 100755
--- a/tests/kola/multipath/multipathd-service-fix
+++ b/tests/kola/multipath/multipathd-service-fix
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   exclusive: false
 
 set -xeuo pipefail
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 7145e3cf40..d8cbd9b4b7 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 ##   exclusive: false
 #
 # Since we depend so much on the default networking configurations let's
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 0efc2af587..6add6525b0 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 #
 # Test that the fallback hostname is `localhost`. This test
 # validates that the fallback hostname is set to `localhost`
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index 67fca47bf1..f997485703 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent"
 #
 # This test verifies that NetworkManager supports configuring the
 # carrier timeout via the `rd.net.timeout.carrier=` karg. Without
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 2271ac668f..dce787866a 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
 ##   # This test pulls a container from a registry.
-##   tags: needs-internet
+##   tags: "platform-independent needs-internet"
 ##   # This test doesn't make meaningful changes to the system and
 ##   # should be able to be combined with other tests.
 ##   exclusive: false
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 744536ca5e..d6b0b8051d 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
 ##   # This test builds a container from remote sources.
 ##   # This test uses a remote NTP server.
-##   tags: needs-internet
+##   tags: "platform-independent needs-internet"
 ##   # Pulling and building the container can take a long time if a
 ##   # slow mirror gets chosen.
 ##   timeoutMin: 15
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index d594510520..92750c950d 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -1,13 +1,12 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   # This test reprovisions the rootfs.
+##   tags: "platform-independent reprovision"
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
-##   # This test reprovisions the rootfs.
-##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index aacb6a3edd..2532f65425 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   # This test reprovisions the rootfs.
+##   tags: "platform-independent reprovision"
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # A TPM backend device is not available on s390x to suport TPM.
@@ -8,8 +9,6 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
-##   # This test reprovisions the rootfs.
-##   tags: reprovision
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index c490ee3ddb..6deb244466 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent needs-internet"
 ##   # This test only runs on FCOS because countme support is not available in RHCOS
 ##   distros: fcos
-##   tags: needs-internet
 
 set -xeuo pipefail
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 3ffd9ae3f0..294d4e7b3b 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -1,12 +1,11 @@
 #!/bin/bash
 ## kola:
-##   platforms: platform-independent
+##   tags: "platform-independent needs-internet"
 ##   # This test only runs on FCOS because RHCOS is missing the `machinectl` command.
 ##   # Additionally, there are some distro specific choices made for this test that
 ##   # should/could be adapted for RHCOS.
 ##   # TODO-RHCOS: adapt test for RHCOS specifics or create separate RHCOS toolbox test
 ##   distros: fcos
-##   tags: needs-internet
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
 #

From 2a2501c17fed43fa9dc0c82e463eb01cf864ce3c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 1 Feb 2023 16:03:51 -0500
Subject: [PATCH 1428/2157] denylist: drop ntp.timesyncd.dhcp-propagation from
 denylist

This test was denylisted for rawhide because the fix for [1],
which was an updated container-selinux RPM, was held back [2]
because it needed a newer selinux-policy RPM, which was pinned
because of [3]. Now that selinux-policy and container-selinux
are no longer pinned, we can start running this test in rawhide.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1359
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1364#issuecomment-1371727078
[3] https://github.com/coreos/fedora-coreos-tracker/issues/1364
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7b3dff99e5..ab8fd92a68 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -40,8 +40,3 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1378864963
   snooze: 2023-02-10
-- pattern: ext.config.ntp.timesyncd.dhcp-propagation                                                                                                       
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1364#issuecomment-1371727078
-  snooze: 2023-02-05
-  streams:
-    - rawhide

From c9f238e4ca9625aec70e6a5b7997b6099725a887 Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Fri, 3 Feb 2023 12:35:18 -0500
Subject: [PATCH 1429/2157] kola/rpm-ostree/kernel-replace: add path for
 kernel-modules-core

Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 tests/kola/rpm-ostree/kernel-replace | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index b6533a302d..a4e8ec8130 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -85,7 +85,9 @@ FROM localhost/fcos
 RUN rpm-ostree cliwrap install-to-root /
 ADD dracut_call.sh dracut_call.sh
 RUN cat dracut_call.sh
-RUN chmod +x dracut_call.sh && rpm-ostree override replace \
+# Once kernel-modules-core is in all supported releases, we can remove this conditional.
+RUN if rpm -q kernel-modules-core; then echo "kernel-modules-core installed.. removing"; remove="--remove kernel-modules-core"; fi && \
+    chmod +x dracut_call.sh && rpm-ostree override replace \$remove \
     https://koji.fedoraproject.org/koji/buildinfo?buildID=2084352 && \
     ./dracut_call.sh && \
     ostree container commit

From c61e2e960bec544fe372bb12179b22048800a836 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 Feb 2023 21:52:52 +0000
Subject: [PATCH 1430/2157] overrides: fast-track rust-afterburn-5.4.0-1.fc37

---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..2dde1700b7 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  afterburn:
+    evr: 5.4.0-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1cd8776f0
+      type: fast-track
+  afterburn-dracut:
+    evr: 5.4.0-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1cd8776f0
+      type: fast-track

From 2f0a701b31b556268f509b4a79c2bf20c3a2db15 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 4 Feb 2023 22:34:06 +0000
Subject: [PATCH 1431/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/365/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e1be850026..8d72d8eae5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.aarch64"
     },
     "afterburn": {
-      "evra": "5.3.0-3.fc37.aarch64"
+      "evra": "5.4.0-1.fc37.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-3.fc37.aarch64"
+      "evra": "5.4.0-1.fc37.aarch64"
     },
     "alternatives": {
       "evra": "1.21-1.fc37.aarch64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.198.0-1.fc37.noarch"
+      "evra": "2:2.199.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.aarch64"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.8-200.fc37.aarch64"
+      "evra": "6.1.9-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.8-200.fc37.aarch64"
+      "evra": "6.1.9-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.8-200.fc37.aarch64"
+      "evra": "6.1.9-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-01T00:00:00Z",
+    "generated": "2023-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-01T20:12:20Z"
+        "generated": "2023-02-03T22:59:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-01T02:34:50Z"
+        "generated": "2023-02-04T01:18:30Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 326fd3bc4e..2d88ff9b3a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.ppc64le"
     },
     "afterburn": {
-      "evra": "5.3.0-3.fc37.ppc64le"
+      "evra": "5.4.0-1.fc37.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-3.fc37.ppc64le"
+      "evra": "5.4.0-1.fc37.ppc64le"
     },
     "alternatives": {
       "evra": "1.21-1.fc37.ppc64le"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.198.0-1.fc37.noarch"
+      "evra": "2:2.199.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.ppc64le"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.8-200.fc37.ppc64le"
+      "evra": "6.1.9-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.8-200.fc37.ppc64le"
+      "evra": "6.1.9-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.8-200.fc37.ppc64le"
+      "evra": "6.1.9-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-01T00:00:00Z",
+    "generated": "2023-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-01T20:09:52Z"
+        "generated": "2023-02-03T22:58:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-01T02:35:00Z"
+        "generated": "2023-02-04T01:18:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a80d34cdfe..56eb9bfda9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.s390x"
     },
     "afterburn": {
-      "evra": "5.3.0-3.fc37.s390x"
+      "evra": "5.4.0-1.fc37.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-3.fc37.s390x"
+      "evra": "5.4.0-1.fc37.s390x"
     },
     "alternatives": {
       "evra": "1.21-1.fc37.s390x"
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.198.0-1.fc37.noarch"
+      "evra": "2:2.199.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.s390x"
@@ -142,10 +142,10 @@
       "evra": "1.1.1-8.fc37.s390x"
     },
     "containers-common": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.8-200.fc37.s390x"
+      "evra": "6.1.9-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.8-200.fc37.s390x"
+      "evra": "6.1.9-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.8-200.fc37.s390x"
+      "evra": "6.1.9-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-01T00:00:00Z",
+    "generated": "2023-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-01T20:09:28Z"
+        "generated": "2023-02-03T22:58:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-01T02:35:06Z"
+        "generated": "2023-02-04T01:18:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 77b34dbac0..60a362acc6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.x86_64"
     },
     "afterburn": {
-      "evra": "5.3.0-3.fc37.x86_64"
+      "evra": "5.4.0-1.fc37.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.3.0-3.fc37.x86_64"
+      "evra": "5.4.0-1.fc37.x86_64"
     },
     "alternatives": {
       "evra": "1.21-1.fc37.x86_64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.198.0-1.fc37.noarch"
+      "evra": "2:2.199.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.x86_64"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-76.fc37.noarch"
+      "evra": "4:1-78.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.8-200.fc37.x86_64"
+      "evra": "6.1.9-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.8-200.fc37.x86_64"
+      "evra": "6.1.9-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.8-200.fc37.x86_64"
+      "evra": "6.1.9-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-01T00:00:00Z",
+    "generated": "2023-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-01T20:10:30Z"
+        "generated": "2023-02-03T23:03:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-01T02:35:11Z"
+        "generated": "2023-02-04T01:18:53Z"
       }
     }
   }

From 220ed9c03cf733c746380907bcaad41af83080f4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 5 Feb 2023 22:26:34 +0000
Subject: [PATCH 1432/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/366/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8d72d8eae5..a1b368e687 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1066,10 +1066,10 @@
       "evra": "4.8-11.fc37.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-04T00:00:00Z",
+    "generated": "2023-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-03T22:59:04Z"
+        "generated": "2023-02-04T22:37:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-04T01:18:30Z"
+        "generated": "2023-02-05T01:33:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2d88ff9b3a..aaf68a2936 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1072,10 +1072,10 @@
       "evra": "4.8-11.fc37.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-2.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-04T00:00:00Z",
+    "generated": "2023-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-03T22:58:48Z"
+        "generated": "2023-02-04T22:44:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-04T01:18:41Z"
+        "generated": "2023-02-05T01:34:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 56eb9bfda9..b1f1a3038e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1003,10 +1003,10 @@
       "evra": "4.8-11.fc37.s390x"
     },
     "selinux-policy": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-04T00:00:00Z",
+    "generated": "2023-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-03T22:58:11Z"
+        "generated": "2023-02-04T22:36:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-04T01:18:47Z"
+        "generated": "2023-02-05T01:34:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 60a362acc6..99e18dacef 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1075,10 +1075,10 @@
       "evra": "4.8-11.fc37.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.18-1.fc37.noarch"
+      "evra": "37.19-1.fc37.noarch"
     },
     "setup": {
       "evra": "2.14.1-2.fc37.noarch"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-04T00:00:00Z",
+    "generated": "2023-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-03T23:03:42Z"
+        "generated": "2023-02-04T22:38:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-04T01:18:53Z"
+        "generated": "2023-02-05T01:34:48Z"
       }
     }
   }

From 771fcfddeb41138417a7d4b02f0d77e4be12671a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 5 Feb 2023 10:29:24 -0500
Subject: [PATCH 1433/2157] fedora-rawhide.repo: include kernel-modules-core in
 nodebug kernel repo

It's a new subpackage in the kernel and needs to be treated like the
others.
---
 fedora-rawhide.repo | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo
index 05034e53e9..2d21e543d0 100644
--- a/fedora-rawhide.repo
+++ b/fedora-rawhide.repo
@@ -14,7 +14,7 @@ type=rpm
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
-excludepkgs=kernel kernel-core kernel-modules
+excludepkgs=kernel kernel-core kernel-modules kernel-modules-core
 
 # We are choosing to use only nodebug kernels in Fedora CoreOS
 # for our testing. We've seen too many issues where an issue either
@@ -35,4 +35,4 @@ type=rpm
 gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
-includepkgs=kernel kernel-core kernel-modules
+includepkgs=kernel kernel-core kernel-modules kernel-modules-core

From 085451442ca3e0ee821c50a4454c7d061bde9c32 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 8 Feb 2023 22:20:07 +0000
Subject: [PATCH 1434/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/370/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a1b368e687..28b41f0ad0 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -706,7 +706,7 @@
       "evra": "0.21.1-6.fc37.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.5-1.fc37.aarch64"
+      "evra": "1.4.5-3.fc37.aarch64"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-05T00:00:00Z",
+    "generated": "2023-02-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-04T22:37:55Z"
+        "generated": "2023-02-05T22:28:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-05T01:33:50Z"
+        "generated": "2023-02-08T00:54:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index aaf68a2936..4263697b73 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -700,7 +700,7 @@
       "evra": "0.21.1-6.fc37.ppc64le"
     },
     "libpwquality": {
-      "evra": "1.4.5-1.fc37.ppc64le"
+      "evra": "1.4.5-3.fc37.ppc64le"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-05T00:00:00Z",
+    "generated": "2023-02-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-04T22:44:56Z"
+        "generated": "2023-02-05T22:28:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-05T01:34:13Z"
+        "generated": "2023-02-08T00:54:22Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b1f1a3038e..8696eefd7b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -655,7 +655,7 @@
       "evra": "0.21.1-6.fc37.s390x"
     },
     "libpwquality": {
-      "evra": "1.4.5-1.fc37.s390x"
+      "evra": "1.4.5-3.fc37.s390x"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-05T00:00:00Z",
+    "generated": "2023-02-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-04T22:36:54Z"
+        "generated": "2023-02-05T22:28:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-05T01:34:30Z"
+        "generated": "2023-02-08T00:54:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 99e18dacef..88af1517ed 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -712,7 +712,7 @@
       "evra": "0.21.1-6.fc37.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.5-1.fc37.x86_64"
+      "evra": "1.4.5-3.fc37.x86_64"
     },
     "libref_array": {
       "evra": "0.1.5-52.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-05T00:00:00Z",
+    "generated": "2023-02-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-04T22:38:23Z"
+        "generated": "2023-02-05T22:29:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-05T01:34:48Z"
+        "generated": "2023-02-08T00:54:33Z"
       }
     }
   }

From eacfc22f5c00d15993ae8ed3486b37e036a7f8ee Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 8 Feb 2023 17:21:50 -0500
Subject: [PATCH 1435/2157] coreos-livepxe-rootfs: add comment about separate
 `--fail`

Follow-up to 84905567 ("coreos-livepxe-rootfs: use `curl --fail`") and
review feedback in #2201.
---
 .../dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh  | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
index d383d6187f..d05709e360 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-livepxe-rootfs.sh
@@ -54,7 +54,10 @@ elif [[ -n "${rootfs_url}" ]]; then
 
     # Do a HEAD again but just once and with `--fail` so that if e.g. it's
     # missing, we get a clearer error than if it were part of the pipeline
-    # below.
+    # below. Otherwise, the `curl` error emitted there would get lost among
+    # all the spurious errors from the other commands in that pipeline and also
+    # wouldn't show up in the journal logs dumped by `emergency-shell.sh` since
+    # it only prints 10 lines.
     curl_common_args+=" --fail"
     if ! curl --head $curl_common_args "${rootfs_url}" >/dev/null; then
         echo "Couldn't query the server for the rootfs specified by:" >&2

From 30720f1348c73d1476277c0c962dd97c2f005671 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Feb 2023 22:23:27 +0000
Subject: [PATCH 1436/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/371/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 28b41f0ad0..704243a9cf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -103,7 +103,7 @@
       "evra": "4.3-1.fc37.aarch64"
     },
     "cifs-utils": {
-      "evra": "6.15-2.fc37.aarch64"
+      "evra": "7.0-1.fc37.aarch64"
     },
     "clevis": {
       "evra": "18-14.fc37.aarch64"
@@ -199,7 +199,7 @@
       "evra": "1:1.14.4-1.fc37.aarch64"
     },
     "dbus-broker": {
-      "evra": "32-1.fc37.aarch64"
+      "evra": "33-1.fc37.aarch64"
     },
     "dbus-common": {
       "evra": "1:1.14.4-1.fc37.noarch"
@@ -586,7 +586,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libffi": {
-      "evra": "3.4.2-9.fc37.aarch64"
+      "evra": "3.4.4-1.fc37.aarch64"
     },
     "libfido2": {
       "evra": "1.11.0-3.fc37.aarch64"
@@ -1180,7 +1180,7 @@
       "evra": "5.4-1.fc37.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.2.1-1.fc37.aarch64"
+      "evra": "3.2.2-1.fc37.aarch64"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1238,7 +1238,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-08T00:00:00Z",
+    "generated": "2023-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
@@ -1247,7 +1247,7 @@
         "generated": "2023-02-05T22:28:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-08T00:54:11Z"
+        "generated": "2023-02-09T08:58:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4263697b73..90f6123dcb 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -103,7 +103,7 @@
       "evra": "4.3-1.fc37.ppc64le"
     },
     "cifs-utils": {
-      "evra": "6.15-2.fc37.ppc64le"
+      "evra": "7.0-1.fc37.ppc64le"
     },
     "clevis": {
       "evra": "18-14.fc37.ppc64le"
@@ -199,7 +199,7 @@
       "evra": "1:1.14.4-1.fc37.ppc64le"
     },
     "dbus-broker": {
-      "evra": "32-1.fc37.ppc64le"
+      "evra": "33-1.fc37.ppc64le"
     },
     "dbus-common": {
       "evra": "1:1.14.4-1.fc37.noarch"
@@ -580,7 +580,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libffi": {
-      "evra": "3.4.2-9.fc37.ppc64le"
+      "evra": "3.4.4-1.fc37.ppc64le"
     },
     "libfido2": {
       "evra": "1.11.0-3.fc37.ppc64le"
@@ -1186,7 +1186,7 @@
       "evra": "5.4-1.fc37.ppc64le"
     },
     "tpm2-tss": {
-      "evra": "3.2.1-1.fc37.ppc64le"
+      "evra": "3.2.2-1.fc37.ppc64le"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1244,7 +1244,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-08T00:00:00Z",
+    "generated": "2023-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
@@ -1253,7 +1253,7 @@
         "generated": "2023-02-05T22:28:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-08T00:54:22Z"
+        "generated": "2023-02-09T08:58:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8696eefd7b..2e6f20ea8e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -100,7 +100,7 @@
       "evra": "4.3-1.fc37.s390x"
     },
     "cifs-utils": {
-      "evra": "6.15-2.fc37.s390x"
+      "evra": "7.0-1.fc37.s390x"
     },
     "clevis": {
       "evra": "18-14.fc37.s390x"
@@ -196,7 +196,7 @@
       "evra": "1:1.14.4-1.fc37.s390x"
     },
     "dbus-broker": {
-      "evra": "32-1.fc37.s390x"
+      "evra": "33-1.fc37.s390x"
     },
     "dbus-common": {
       "evra": "1:1.14.4-1.fc37.noarch"
@@ -547,7 +547,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libffi": {
-      "evra": "3.4.2-9.fc37.s390x"
+      "evra": "3.4.4-1.fc37.s390x"
     },
     "libfido2": {
       "evra": "1.11.0-3.fc37.s390x"
@@ -1111,7 +1111,7 @@
       "evra": "5.4-1.fc37.s390x"
     },
     "tpm2-tss": {
-      "evra": "3.2.1-1.fc37.s390x"
+      "evra": "3.2.2-1.fc37.s390x"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1172,7 +1172,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-08T00:00:00Z",
+    "generated": "2023-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
@@ -1181,7 +1181,7 @@
         "generated": "2023-02-05T22:28:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-08T00:54:27Z"
+        "generated": "2023-02-09T08:58:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 88af1517ed..e2296a0100 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -103,7 +103,7 @@
       "evra": "4.3-1.fc37.x86_64"
     },
     "cifs-utils": {
-      "evra": "6.15-2.fc37.x86_64"
+      "evra": "7.0-1.fc37.x86_64"
     },
     "clevis": {
       "evra": "18-14.fc37.x86_64"
@@ -199,7 +199,7 @@
       "evra": "1:1.14.4-1.fc37.x86_64"
     },
     "dbus-broker": {
-      "evra": "32-1.fc37.x86_64"
+      "evra": "33-1.fc37.x86_64"
     },
     "dbus-common": {
       "evra": "1:1.14.4-1.fc37.noarch"
@@ -592,7 +592,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libffi": {
-      "evra": "3.4.2-9.fc37.x86_64"
+      "evra": "3.4.4-1.fc37.x86_64"
     },
     "libfido2": {
       "evra": "1.11.0-3.fc37.x86_64"
@@ -1189,7 +1189,7 @@
       "evra": "5.4-1.fc37.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.2.1-1.fc37.x86_64"
+      "evra": "3.2.2-1.fc37.x86_64"
     },
     "tzdata": {
       "evra": "2022g-1.fc37.noarch"
@@ -1247,7 +1247,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-08T00:00:00Z",
+    "generated": "2023-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
@@ -1256,7 +1256,7 @@
         "generated": "2023-02-05T22:29:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-08T00:54:33Z"
+        "generated": "2023-02-09T08:58:55Z"
       }
     }
   }

From 089ce432b45606841aa66b71f09621ae74e03513 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 3 Feb 2023 15:44:50 +0100
Subject: [PATCH 1437/2157] test: Add basic quadlet test

---
 tests/kola/containers/quadlet/config.bu       | 36 +++++++++++++++++++
 .../kola/containers/quadlet/data/commonlib.sh |  1 +
 tests/kola/containers/quadlet/test.sh         | 32 +++++++++++++++++
 3 files changed, 69 insertions(+)
 create mode 100644 tests/kola/containers/quadlet/config.bu
 create mode 120000 tests/kola/containers/quadlet/data/commonlib.sh
 create mode 100755 tests/kola/containers/quadlet/test.sh

diff --git a/tests/kola/containers/quadlet/config.bu b/tests/kola/containers/quadlet/config.bu
new file mode 100644
index 0000000000..cda6fbd045
--- /dev/null
+++ b/tests/kola/containers/quadlet/config.bu
@@ -0,0 +1,36 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/containers/systemd/test.container
+      contents:
+        inline: |
+          [Unit]
+          Description=A minimal container
+
+          [Container]
+          Image=registry.fedoraproject.org/fedora-minimal
+          Exec=sleep 60
+          Volume=test.volume:/data
+          Network=test.network
+
+          [Service]
+          Restart=always
+
+          [Install]
+          WantedBy=multi-user.target default.target
+    - path: /etc/containers/systemd/test.volume
+      contents:
+        inline: |
+          [Volume]
+          User=root
+          Group=root
+          Label=org.test.Key=quadlet-test-volume
+    - path: /etc/containers/systemd/test.network
+      contents:
+        inline: |
+          [Network]
+          Subnet=172.16.0.0/24
+          Gateway=172.16.0.1
+          IPRange=172.16.0.0/28
+          Label=org.test.Key=quadlet-test-network
diff --git a/tests/kola/containers/quadlet/data/commonlib.sh b/tests/kola/containers/quadlet/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/containers/quadlet/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
new file mode 100755
index 0000000000..2803ead6b2
--- /dev/null
+++ b/tests/kola/containers/quadlet/test.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+## kola:
+##   # We're pulling a container image from Quay.io
+##   tags: "platform-independent needs-internet"
+#
+# Ensure that basic quadlet functionality works
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [[ "$(podman volume inspect systemd-test | jq -r '.[0].Labels."org.test.Key"')" != "quadlet-test-volume" ]]; then
+    fatal "Volume not correctly created"
+fi
+
+if [[ "$(podman network inspect systemd-test | jq -r '.[0].labels."org.test.Key"')" != "quadlet-test-network" ]]; then
+    fatal "Network not correctly created"
+fi
+
+if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "registry.fedoraproject.org/fedora-minimal:latest" ]]; then
+    fatal "Container not using the correct image"
+fi
+
+if [[ "$(podman inspect systemd-test | jq -r '.[0].NetworkSettings.Networks[].NetworkID')" != "systemd-test" ]]; then
+    fatal "Container not using the correct network"
+fi
+
+if [[ "$(podman inspect systemd-test | jq -r '.[0].HostConfig.Binds[0]')" != "systemd-test:/data:rw,rprivate,nosuid,nodev,rbind" ]]; then
+    fatal "Container not using the correct volume"
+fi
+
+ok "Successfully tested basic quadlet functionality"

From 41061b1ed23c8452e1d50f30fa8bf19a55fee7e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Fri, 3 Feb 2023 13:21:59 +0100
Subject: [PATCH 1438/2157] manifest-lock.overrides: podman 4.4.1 for quadlet

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2dde1700b7..d97986a020 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,9 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1cd8776f0
       type: fast-track
+  podman:
+    evr: 5:4.4.1-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-539e1ce6d7
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/998
+      type: fast-track

From 4643834d5be727a427f68aa06cf7c4bbe47155ae Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 10 Feb 2023 12:15:52 -0500
Subject: [PATCH 1439/2157] denylist: extend snooze again for
 platforms.aws.nvme test

---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index ab8fd92a68..97d98ca3cc 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -38,5 +38,5 @@
     - testing
     - stable
 - pattern: ext.config.platforms.aws.nvme
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1378864963
-  snooze: 2023-02-10
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1426106534
+  snooze: 2023-03-10

From 93c169993547dacc9a3db20c5aa9b010edc9b7fe Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 11 Feb 2023 22:20:16 +0000
Subject: [PATCH 1440/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/374/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 704243a9cf..1a39efec74 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.7.2-3.fc37.aarch64"
+      "evra": "1.8-1.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.9-200.fc37.aarch64"
+      "evra": "6.1.10-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.9-200.fc37.aarch64"
+      "evra": "6.1.10-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.9-200.fc37.aarch64"
+      "evra": "6.1.10-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -607,7 +607,7 @@
       "evra": "237-3.fc37.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.4-1.fc37.aarch64"
+      "evra": "0.4.5-1.fc37.aarch64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.aarch64"
@@ -940,10 +940,10 @@
       "evra": "8.8p1-7.fc37.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.5-3.fc37.aarch64"
+      "evra": "1:3.0.8-1.fc37.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-3.fc37.aarch64"
+      "evra": "1:3.0.8-1.fc37.aarch64"
     },
     "os-prober": {
       "evra": "1.81-1.fc37.aarch64"
@@ -991,7 +991,7 @@
       "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "4:4.3.1-1.fc37.aarch64"
+      "evra": "5:4.4.1-1.fc37.aarch64"
     },
     "podman-plugins": {
       "evra": "4:4.3.1-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-09T00:00:00Z",
+    "generated": "2023-02-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-05T22:28:53Z"
+        "generated": "2023-02-10T17:19:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-09T08:58:05Z"
+        "generated": "2023-02-11T00:26:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 90f6123dcb..86ac4d1fb9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.7.2-3.fc37.ppc64le"
+      "evra": "1.8-1.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.9-200.fc37.ppc64le"
+      "evra": "6.1.10-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.9-200.fc37.ppc64le"
+      "evra": "6.1.10-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.9-200.fc37.ppc64le"
+      "evra": "6.1.10-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -601,7 +601,7 @@
       "evra": "237-3.fc37.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.4-1.fc37.ppc64le"
+      "evra": "0.4.5-1.fc37.ppc64le"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.ppc64le"
@@ -937,10 +937,10 @@
       "evra": "8.8p1-7.fc37.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.5-3.fc37.ppc64le"
+      "evra": "1:3.0.8-1.fc37.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-3.fc37.ppc64le"
+      "evra": "1:3.0.8-1.fc37.ppc64le"
     },
     "os-prober": {
       "evra": "1.81-1.fc37.ppc64le"
@@ -991,7 +991,7 @@
       "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "4:4.3.1-1.fc37.ppc64le"
+      "evra": "5:4.4.1-1.fc37.ppc64le"
     },
     "podman-plugins": {
       "evra": "4:4.3.1-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-09T00:00:00Z",
+    "generated": "2023-02-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-05T22:28:45Z"
+        "generated": "2023-02-10T17:16:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-09T08:58:17Z"
+        "generated": "2023-02-11T00:26:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2e6f20ea8e..9380995e65 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.7.2-3.fc37.s390x"
+      "evra": "1.8-1.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.9-200.fc37.s390x"
+      "evra": "6.1.10-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.9-200.fc37.s390x"
+      "evra": "6.1.10-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.9-200.fc37.s390x"
+      "evra": "6.1.10-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -877,10 +877,10 @@
       "evra": "8.8p1-7.fc37.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.5-3.fc37.s390x"
+      "evra": "1:3.0.8-1.fc37.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-3.fc37.s390x"
+      "evra": "1:3.0.8-1.fc37.s390x"
     },
     "ostree": {
       "evra": "2022.7-2.fc37.s390x"
@@ -925,7 +925,7 @@
       "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "4:4.3.1-1.fc37.s390x"
+      "evra": "5:4.4.1-1.fc37.s390x"
     },
     "podman-plugins": {
       "evra": "4:4.3.1-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-09T00:00:00Z",
+    "generated": "2023-02-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-05T22:28:29Z"
+        "generated": "2023-02-10T17:16:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-09T08:58:24Z"
+        "generated": "2023-02-11T00:27:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e2296a0100..9aac49ff77 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.7.2-3.fc37.x86_64"
+      "evra": "1.8-1.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.9-200.fc37.x86_64"
+      "evra": "6.1.10-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.9-200.fc37.x86_64"
+      "evra": "6.1.10-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.9-200.fc37.x86_64"
+      "evra": "6.1.10-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -613,7 +613,7 @@
       "evra": "237-3.fc37.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.4-1.fc37.x86_64"
+      "evra": "0.4.5-1.fc37.x86_64"
     },
     "libibverbs": {
       "evra": "41.0-1.fc37.x86_64"
@@ -952,10 +952,10 @@
       "evra": "8.8p1-7.fc37.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.5-3.fc37.x86_64"
+      "evra": "1:3.0.8-1.fc37.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.5-3.fc37.x86_64"
+      "evra": "1:3.0.8-1.fc37.x86_64"
     },
     "os-prober": {
       "evra": "1.81-1.fc37.x86_64"
@@ -1003,7 +1003,7 @@
       "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "4:4.3.1-1.fc37.x86_64"
+      "evra": "5:4.4.1-1.fc37.x86_64"
     },
     "podman-plugins": {
       "evra": "4:4.3.1-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-09T00:00:00Z",
+    "generated": "2023-02-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-05T22:29:26Z"
+        "generated": "2023-02-10T17:19:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-09T08:58:55Z"
+        "generated": "2023-02-11T00:27:10Z"
       }
     }
   }

From ff94607a889f343e109d38dba61c9fe9a7360a37 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 12 Feb 2023 22:19:32 +0000
Subject: [PATCH 1441/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/375/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1a39efec74..16df0278bf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1093,7 +1093,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc37.aarch64"
+      "evra": "1:1.11.0-2.fc37.aarch64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.aarch64"
@@ -1150,22 +1150,22 @@
       "evra": "1.9.12-1.p2.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.10-588.fc37.aarch64"
+      "evra": "251.11-2.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-11T00:00:00Z",
+    "generated": "2023-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-10T17:19:01Z"
+        "generated": "2023-02-11T22:23:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-11T00:26:47Z"
+        "generated": "2023-02-12T00:26:29Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 86ac4d1fb9..b6d8ee4e0f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1099,7 +1099,7 @@
       "evra": "2.2-2.fc37.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc37.ppc64le"
+      "evra": "1:1.11.0-2.fc37.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.ppc64le"
@@ -1156,22 +1156,22 @@
       "evra": "1.9.12-1.p2.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.10-588.fc37.ppc64le"
+      "evra": "251.11-2.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-11T00:00:00Z",
+    "generated": "2023-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-10T17:16:00Z"
+        "generated": "2023-02-11T22:23:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-11T00:26:58Z"
+        "generated": "2023-02-12T00:26:40Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9380995e65..dc31603bb5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1024,7 +1024,7 @@
       "evra": "2:4.12.3-4.fc37.s390x"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc37.s390x"
+      "evra": "1:1.11.0-2.fc37.s390x"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.s390x"
@@ -1081,22 +1081,22 @@
       "evra": "1.9.12-1.p2.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.10-588.fc37.s390x"
+      "evra": "251.11-2.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-11T00:00:00Z",
+    "generated": "2023-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-10T17:16:32Z"
+        "generated": "2023-02-11T22:22:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-11T00:27:04Z"
+        "generated": "2023-02-12T00:26:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9aac49ff77..4a7981437a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1102,7 +1102,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.10.0-3.fc37.x86_64"
+      "evra": "1:1.11.0-2.fc37.x86_64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.x86_64"
@@ -1159,22 +1159,22 @@
       "evra": "1.9.12-1.p2.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.10-588.fc37.x86_64"
+      "evra": "251.11-2.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-11T00:00:00Z",
+    "generated": "2023-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-10T17:19:57Z"
+        "generated": "2023-02-11T22:23:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-11T00:27:10Z"
+        "generated": "2023-02-12T00:26:52Z"
       }
     }
   }

From 1a37a6ec05e7f611b5d4acf343c35ea51bc4d35a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Feb 2023 00:16:17 +0000
Subject: [PATCH 1442/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d97986a020..55fe480b88 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  afterburn:
-    evr: 5.4.0-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1cd8776f0
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.4.0-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1cd8776f0
-      type: fast-track
   podman:
     evr: 5:4.4.1-1.fc37
     metadata:

From 53b5cc8297647ff0c5f376610c70bb214c3a7bea Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 13 Feb 2023 11:25:46 -0500
Subject: [PATCH 1443/2157] denylist: drop multipath.day2

This is fixed now as per [1] and following.

[1]  https://github.com/coreos/fedora-coreos-tracker/issues/1206#issuecomment-1424249539
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 97d98ca3cc..3420f0aa2d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,10 +13,6 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/2725
   arches:
     - ppc64le
-- pattern: multipath.day2
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1206
-  arches:
-    - s390x
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 12e5f8120f1d0a11620a40e37b9e5e16c4387ec4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 13 Feb 2023 12:59:33 -0500
Subject: [PATCH 1444/2157] Revert "overlay.d/35coreos-live: add workaround for
 stalled iso-live-login boot"

This reverts commit 22913cef0ffcddca22dec7cb356d36da05b8a4af.

We haven't seen this workaround being used in a good while (we put in
a helper to let us know when it was being used [1]) so we'll
remove it and see if tests start failing again.

[1] https://github.com/coreos/fedora-coreos-pipeline/pull/624
---
 .../dracut/modules.d/35coreos-live/live-generator  | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index dfca3469b7..49b80e5f66 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -152,20 +152,6 @@ Type=squashfs
 # is checked by coreos-assembler cmd-buildextend-live at build time.
 Options=loop,offset=124
 EOF
-
-    # And one more unit to workaround what we think is a systemd bug.
-    # We've found the system can stall waiting for run-media-iso.mount
-    # and apparently any operation seems to be effective at reviving
-    # the system.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1233#issuecomment-1238814171
-    cat >"${UNIT_DIR}/workaround-stalled-media-iso-mount.service" <<EOF
-[Service]
-Type=simple
-StandardOutput=journal
-StandardError=journal
-ExecStart=bash -c "sleep 10; echo 'warn: tracker issue workaround engaged for https://github.com/coreos/fedora-coreos-tracker/issues/1233'"
-EOF
-    add_requires workaround-stalled-media-iso-mount.service basic.target
 fi
 
 # It turns out that `tmpfs` currently munches all SELinux labels

From 7ab529ffae0a2aaeb0218b13a7431f0829f4fb70 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Feb 2023 22:15:43 +0000
Subject: [PATCH 1445/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/376/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 16df0278bf..4fc9e171b7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -43,7 +43,7 @@
       "evra": "2.5.1-5.fc37.aarch64"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc37.aarch64"
+      "evra": "3.1-2.fc37.aarch64"
     },
     "authselect": {
       "evra": "1.4.2-1.fc37.aarch64"
@@ -196,16 +196,16 @@
       "evra": "2.1.28-8.fc37.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc37.aarch64"
+      "evra": "1:1.14.6-1.fc37.aarch64"
     },
     "dbus-broker": {
       "evra": "33-1.fc37.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc37.aarch64"
+      "evra": "1:1.14.6-1.fc37.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.175-9.fc37.aarch64"
@@ -835,7 +835,7 @@
       "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-4.fc37.aarch64"
+      "evra": "0.9.30-1.fc37.aarch64"
     },
     "logrotate": {
       "evra": "3.20.1-3.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1262-1.fc37.noarch"
+      "evra": "2:9.0.1293-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1262-1.fc37.aarch64"
+      "evra": "2:9.0.1293-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-12T00:00:00Z",
+    "generated": "2023-02-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-11T22:23:11Z"
+        "generated": "2023-02-12T22:21:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-12T00:26:29Z"
+        "generated": "2023-02-13T00:32:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b6d8ee4e0f..689e27b454 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -43,7 +43,7 @@
       "evra": "2.5.1-5.fc37.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc37.ppc64le"
+      "evra": "3.1-2.fc37.ppc64le"
     },
     "authselect": {
       "evra": "1.4.2-1.fc37.ppc64le"
@@ -196,16 +196,16 @@
       "evra": "2.1.28-8.fc37.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc37.ppc64le"
+      "evra": "1:1.14.6-1.fc37.ppc64le"
     },
     "dbus-broker": {
       "evra": "33-1.fc37.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc37.ppc64le"
+      "evra": "1:1.14.6-1.fc37.ppc64le"
     },
     "device-mapper": {
       "evra": "1.02.175-9.fc37.ppc64le"
@@ -835,7 +835,7 @@
       "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-4.fc37.ppc64le"
+      "evra": "0.9.30-1.fc37.ppc64le"
     },
     "logrotate": {
       "evra": "3.20.1-3.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1262-1.fc37.noarch"
+      "evra": "2:9.0.1293-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1262-1.fc37.ppc64le"
+      "evra": "2:9.0.1293-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-12T00:00:00Z",
+    "generated": "2023-02-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-11T22:23:11Z"
+        "generated": "2023-02-12T22:22:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-12T00:26:40Z"
+        "generated": "2023-02-13T00:33:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dc31603bb5..ddb5bdcee8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -43,7 +43,7 @@
       "evra": "2.5.1-5.fc37.s390x"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc37.s390x"
+      "evra": "3.1-2.fc37.s390x"
     },
     "authselect": {
       "evra": "1.4.2-1.fc37.s390x"
@@ -193,16 +193,16 @@
       "evra": "2.1.28-8.fc37.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc37.s390x"
+      "evra": "1:1.14.6-1.fc37.s390x"
     },
     "dbus-broker": {
       "evra": "33-1.fc37.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc37.s390x"
+      "evra": "1:1.14.6-1.fc37.s390x"
     },
     "device-mapper": {
       "evra": "1.02.175-9.fc37.s390x"
@@ -778,7 +778,7 @@
       "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-4.fc37.s390x"
+      "evra": "0.9.30-1.fc37.s390x"
     },
     "logrotate": {
       "evra": "3.20.1-3.fc37.s390x"
@@ -1129,10 +1129,10 @@
       "evra": "2.5.0-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1262-1.fc37.noarch"
+      "evra": "2:9.0.1293-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1262-1.fc37.s390x"
+      "evra": "2:9.0.1293-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-12T00:00:00Z",
+    "generated": "2023-02-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-11T22:22:33Z"
+        "generated": "2023-02-12T22:21:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-12T00:26:46Z"
+        "generated": "2023-02-13T00:33:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4a7981437a..581f65f723 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -43,7 +43,7 @@
       "evra": "2.5.1-5.fc37.x86_64"
     },
     "audit-libs": {
-      "evra": "3.0.9-1.fc37.x86_64"
+      "evra": "3.1-2.fc37.x86_64"
     },
     "authselect": {
       "evra": "1.4.2-1.fc37.x86_64"
@@ -196,16 +196,16 @@
       "evra": "2.1.28-8.fc37.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.4-1.fc37.x86_64"
+      "evra": "1:1.14.6-1.fc37.x86_64"
     },
     "dbus-broker": {
       "evra": "33-1.fc37.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.4-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc37.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.4-1.fc37.x86_64"
+      "evra": "1:1.14.6-1.fc37.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.175-9.fc37.x86_64"
@@ -844,7 +844,7 @@
       "evra": "20230117-146.fc37.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.29-4.fc37.x86_64"
+      "evra": "0.9.30-1.fc37.x86_64"
     },
     "logrotate": {
       "evra": "3.20.1-3.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1262-1.fc37.noarch"
+      "evra": "2:9.0.1293-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1262-1.fc37.x86_64"
+      "evra": "2:9.0.1293-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-12T00:00:00Z",
+    "generated": "2023-02-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-11T22:23:55Z"
+        "generated": "2023-02-12T22:23:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-12T00:26:52Z"
+        "generated": "2023-02-13T00:33:13Z"
       }
     }
   }

From 0551699b3cd512a77c65dff7041cbee7241f47dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 14 Feb 2023 11:51:00 +0100
Subject: [PATCH 1446/2157] denylist: Snooze ext.config.toolbox until
 2023-02-21 for rawhide

See: https://github.com/coreos/fedora-coreos-tracker/issues/1416
See: https://github.com/containers/toolbox/issues/1233
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3420f0aa2d..8ec40f2d9e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -36,3 +36,8 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1426106534
   snooze: 2023-03-10
+- pattern: ext.config.toolbox
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1416
+  snooze: 2023-02-21
+  streams:
+    - rawhide

From 8e69574f60ec52cc30d7d8844951803a4d540848 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Feb 2023 06:06:16 +0000
Subject: [PATCH 1447/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 55fe480b88..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  podman:
-    evr: 5:4.4.1-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-539e1ce6d7
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/998
-      type: fast-track
+packages: {}

From adeee22d397c5dc08e53b0e57491327183a43829 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Feb 2023 22:16:35 +0000
Subject: [PATCH 1448/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/377/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4fc9e171b7..56643e2bb2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.aarch64"
@@ -415,7 +415,7 @@
       "evra": "56-2.fc37.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.aarch64"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.aarch64"
@@ -919,7 +919,7 @@
       "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.aarch64"
@@ -994,7 +994,7 @@
       "evra": "5:4.4.1-1.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.1-1.fc37.aarch64"
+      "evra": "5:4.4.1-1.fc37.aarch64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-13T00:00:00Z",
+    "generated": "2023-02-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-12T22:21:43Z"
+        "generated": "2023-02-13T22:19:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-13T00:32:50Z"
+        "generated": "2023-02-14T01:44:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 689e27b454..a991d87b14 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.ppc64le"
@@ -409,7 +409,7 @@
       "evra": "56-2.fc37.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.ppc64le"
@@ -829,10 +829,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.ppc64le"
@@ -916,7 +916,7 @@
       "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.ppc64le"
@@ -994,7 +994,7 @@
       "evra": "5:4.4.1-1.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "4:4.3.1-1.fc37.ppc64le"
+      "evra": "5:4.4.1-1.fc37.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-13T00:00:00Z",
+    "generated": "2023-02-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-12T22:22:19Z"
+        "generated": "2023-02-13T22:18:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-13T00:33:02Z"
+        "generated": "2023-02-14T01:44:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ddb5bdcee8..fea59775f5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.s390x"
@@ -379,7 +379,7 @@
       "evra": "56-2.fc37.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.s390x"
@@ -772,10 +772,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.18.1-21.fc37.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.s390x"
@@ -928,7 +928,7 @@
       "evra": "5:4.4.1-1.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "4:4.3.1-1.fc37.s390x"
+      "evra": "5:4.4.1-1.fc37.s390x"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-13T00:00:00Z",
+    "generated": "2023-02-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-12T22:21:19Z"
+        "generated": "2023-02-13T22:22:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-13T00:33:08Z"
+        "generated": "2023-02-14T01:44:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 581f65f723..3b35adbb76 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.x86_64"
@@ -421,7 +421,7 @@
       "evra": "56-2.fc37.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.x86_64"
@@ -838,10 +838,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.x86_64"
@@ -931,7 +931,7 @@
       "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230117-146.fc37.noarch"
+      "evra": "20230210-147.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.x86_64"
@@ -1006,7 +1006,7 @@
       "evra": "5:4.4.1-1.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "4:4.3.1-1.fc37.x86_64"
+      "evra": "5:4.4.1-1.fc37.x86_64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-13T00:00:00Z",
+    "generated": "2023-02-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-12T22:23:30Z"
+        "generated": "2023-02-13T22:24:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-13T00:33:13Z"
+        "generated": "2023-02-14T01:44:27Z"
       }
     }
   }

From ad89d09421bbd8aa4cec1683cf718399f4ebb9db Mon Sep 17 00:00:00 2001
From: Shilpi Das <shilpi12@in.ibm.com>
Date: Wed, 15 Feb 2023 14:13:15 +0530
Subject: [PATCH 1449/2157] denylist: Changing tracker issues for
 coreos.boot-mirror and coreos.boot-mirror.luks

Changed tracker issues for  coreos.boot-mirror and coreos.boot-mirror.luks for ppc64le arch
Updated the issues with latest kola runs
https://github.com/coreos/coreos-assembler/issues/3360 (coreos.boot-mirror.luks)
https://github.com/coreos/coreos-assembler/issues/3361 (coreos.boot-mirror)
Signed-off-by: Shilpi Das <shdas@redhat.com>
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8ec40f2d9e..c7365ef2ad 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -6,11 +6,11 @@
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.boot-mirror.luks
-  tracker: https://github.com/coreos/coreos-assembler/issues/2725
+  tracker: https://github.com/coreos/coreos-assembler/issues/3360
   arches:
     - ppc64le
 - pattern: coreos.boot-mirror
-  tracker: https://github.com/coreos/coreos-assembler/issues/2725
+  tracker: https://github.com/coreos/coreos-assembler/issues/3361
   arches:
     - ppc64le
 - pattern: ext.config.ignition.resource.remote

From 70daa7ef94580227f99420965fc1c9c837adebfa Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 15 Feb 2023 01:44:11 -0800
Subject: [PATCH 1450/2157] denylist: snooze ext.config.extensions.module for
 now Issue: coreos/fedora-coreos-tracker#1420

---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c7365ef2ad..5053b8857f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -41,3 +41,8 @@
   snooze: 2023-02-21
   streams:
     - rawhide
+- pattern: ext.config.extensions.module
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1420
+  snooze: 2023-03-08
+  streams:
+    - rawhide

From d38f53808985cebfefdc427d64d42b1b12fb19d0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Feb 2023 22:27:59 +0000
Subject: [PATCH 1451/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/378/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 56643e2bb2..010e83dee2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.10-200.fc37.aarch64"
+      "evra": "6.1.11-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.10-200.fc37.aarch64"
+      "evra": "6.1.11-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.10-200.fc37.aarch64"
+      "evra": "6.1.11-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -823,7 +823,7 @@
       "evra": "0.2.5-8.fc37.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.2-3.fc37.aarch64"
+      "evra": "1.5.4-1.fc37.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.aarch64"
@@ -1234,20 +1234,20 @@
       "evra": "1.1.2-2.fc37.aarch64"
     },
     "zstd": {
-      "evra": "1.5.2-3.fc37.aarch64"
+      "evra": "1.5.4-1.fc37.aarch64"
     }
   },
   "metadata": {
-    "generated": "2023-02-14T00:00:00Z",
+    "generated": "2023-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-13T22:19:11Z"
+        "generated": "2023-02-15T19:13:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-14T01:44:05Z"
+        "generated": "2023-02-15T01:15:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a991d87b14..c054b8a69d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.10-200.fc37.ppc64le"
+      "evra": "6.1.11-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.10-200.fc37.ppc64le"
+      "evra": "6.1.11-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.10-200.fc37.ppc64le"
+      "evra": "6.1.11-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -823,7 +823,7 @@
       "evra": "0.2.5-8.fc37.ppc64le"
     },
     "libzstd": {
-      "evra": "1.5.2-3.fc37.ppc64le"
+      "evra": "1.5.4-1.fc37.ppc64le"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.ppc64le"
@@ -1240,20 +1240,20 @@
       "evra": "1.1.2-2.fc37.ppc64le"
     },
     "zstd": {
-      "evra": "1.5.2-3.fc37.ppc64le"
+      "evra": "1.5.4-1.fc37.ppc64le"
     }
   },
   "metadata": {
-    "generated": "2023-02-14T00:00:00Z",
+    "generated": "2023-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-13T22:18:53Z"
+        "generated": "2023-02-15T19:13:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-14T01:44:16Z"
+        "generated": "2023-02-15T01:15:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index fea59775f5..0b58bac19c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.10-200.fc37.s390x"
+      "evra": "6.1.11-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.10-200.fc37.s390x"
+      "evra": "6.1.11-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.10-200.fc37.s390x"
+      "evra": "6.1.11-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -766,7 +766,7 @@
       "evra": "0.2.5-8.fc37.s390x"
     },
     "libzstd": {
-      "evra": "1.5.2-3.fc37.s390x"
+      "evra": "1.5.4-1.fc37.s390x"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.s390x"
@@ -1168,20 +1168,20 @@
       "evra": "1.1.2-2.fc37.s390x"
     },
     "zstd": {
-      "evra": "1.5.2-3.fc37.s390x"
+      "evra": "1.5.4-1.fc37.s390x"
     }
   },
   "metadata": {
-    "generated": "2023-02-14T00:00:00Z",
+    "generated": "2023-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-13T22:22:43Z"
+        "generated": "2023-02-15T19:13:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-14T01:44:21Z"
+        "generated": "2023-02-15T01:15:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3b35adbb76..a57985e708 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.10-200.fc37.x86_64"
+      "evra": "6.1.11-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.10-200.fc37.x86_64"
+      "evra": "6.1.11-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.10-200.fc37.x86_64"
+      "evra": "6.1.11-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -832,7 +832,7 @@
       "evra": "0.2.5-8.fc37.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.2-3.fc37.x86_64"
+      "evra": "1.5.4-1.fc37.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.x86_64"
@@ -1243,20 +1243,20 @@
       "evra": "1.1.2-2.fc37.x86_64"
     },
     "zstd": {
-      "evra": "1.5.2-3.fc37.x86_64"
+      "evra": "1.5.4-1.fc37.x86_64"
     }
   },
   "metadata": {
-    "generated": "2023-02-14T00:00:00Z",
+    "generated": "2023-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-13T22:24:35Z"
+        "generated": "2023-02-15T19:13:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-14T01:44:27Z"
+        "generated": "2023-02-15T01:15:26Z"
       }
     }
   }

From 0d9c14f0e32c67cdb7cd1e75a85733cf23a19e93 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 16 Feb 2023 11:39:48 +0100
Subject: [PATCH 1452/2157] Revert "denylist: Snooze ext.config.toolbox until
 2023-02-21 for rawhide"

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1416

This reverts commit 0551699b3cd512a77c65dff7041cbee7241f47dd.
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5053b8857f..0b99ceea60 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -36,11 +36,6 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1426106534
   snooze: 2023-03-10
-- pattern: ext.config.toolbox
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1416
-  snooze: 2023-02-21
-  streams:
-    - rawhide
 - pattern: ext.config.extensions.module
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1420
   snooze: 2023-03-08

From 122179445418200c4a9774b4037a0d267721bbc8 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Fri, 19 Aug 2022 09:39:12 +0200
Subject: [PATCH 1453/2157] s390x: secex: remove the Ignition config before
 entering the emergency-shell

---
 .../modules.d/99emergency-shell-setup/emergency-shell.sh  | 8 +++++++-
 .../ignition-virtio-dump-journal.service                  | 1 +
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
index 8fa214e269..5623e60c70 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
@@ -32,7 +32,7 @@ _display_relevant_errors() {
 
         # Print Ignition logs
         if echo ${failed} | grep -qFe 'ignition-'; then
-        cat <<EOF
+            cat <<EOF
 ------
 Ignition has failed. Please ensure your config is valid. Note that only
 Ignition spec v3.0.0+ configs are accepted.
@@ -70,6 +70,12 @@ EOF
     fi
 }
 
+# in SE case drop config before entering shell
+if [ -f /run/coreos/secure-execution ]; then
+    rm -f /run/ignition.json
+    rm -f /usr/lib/ignition/user.ign
+fi
+
 # Print warnings/informational messages to all configured consoles on the
 # machine. Code inspired by https://github.com/dracutdevs/dracut/commit/32f68c1
 MESSAGE="$(_display_relevant_errors)"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
index b4b7b52aae..27160589db 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/ignition-virtio-dump-journal.service
@@ -1,6 +1,7 @@
 [Unit]
 Description=Dump Journal to Virtio Port
 ConditionPathExists=/etc/initrd-release
+ConditionPathExists=!/run/coreos/secure-execution
 DefaultDependencies=false
 ConditionVirtualization=|kvm
 ConditionVirtualization=|qemu

From 1b6bffc6878b4b99a359fe929c06101d84477fcb Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 15 Sep 2022 17:09:18 +0200
Subject: [PATCH 1454/2157] s390x: secex: disable login on serial console

---
 .../dracut/modules.d/35coreos-ignition/01-secex.ign  | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
index 637228d107..6848038632 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/01-secex.ign
@@ -66,5 +66,17 @@
         "wipeFilesystem": true
       }
     ]
+  },
+  "systemd": {
+    "units": [
+      {
+        "mask": true,
+        "name": "serial-getty@.service"
+      },
+      {
+        "mask": true,
+        "name": "autovt@.service"
+      }
+    ]
   }
 }

From 24d4a2ac046789e17f0e90b9c534b9632384f732 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 18 Aug 2022 13:46:58 +0200
Subject: [PATCH 1455/2157] s390x: secex: disable Ignition's logs

---
 .../35coreos-ignition/coreos-diskful-generator       | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index f2d313dce7..c6cb313cea 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -74,5 +74,17 @@ EOF
         mkdir -p /run/coreos/
         touch /run/coreos/secure-execution
         cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
+        # Add dropins to disable Ignition logging for all stages
+        stages=("fetch-offline" "fetch" "kargs" "disks" "mount" "files")
+        for s in "${stages[@]}"; do
+            dropin="${UNIT_DIR}/ignition-${s}.service.d"
+            mkdir -p "${dropin}"
+            cat > "${dropin}/10-secex.conf" <<EOF
+[Service]
+Environment=IGNITION_ARGS=-log-to-stdout
+StandardOutput=null
+StandardError=null
+EOF
+        done
     fi
 fi

From d07f9fd89128487913ec23b9c52ee6307f3855e3 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Mon, 22 Aug 2022 14:17:08 +0200
Subject: [PATCH 1456/2157] s390x: secex: decrypt ignition config on firstboot

---
 .../coreos-secex-ignition-decrypt.service     | 17 ++++++++++++
 .../coreos-secex-ignition-decrypt.sh          | 26 +++++++++++++++++++
 .../35coreos-ignition/module-setup.sh         | 11 ++++++++
 .../emergency-shell.sh                        |  3 ++-
 4 files changed, 56 insertions(+), 1 deletion(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
new file mode 100644
index 0000000000..02283bc3d0
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=CoreOS Secex Ignition Config Decryptor
+ConditionPathExists=/etc/initrd-release
+ConditionPathExists=/run/coreos/secure-execution
+DefaultDependencies=false
+
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+# Run after virtio_blk and before Ignition
+After=coreos-gpt-setup.service
+Before=ignition-fetch-offline.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/sbin/coreos-secex-ignition-decrypt
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.sh
new file mode 100755
index 0000000000..fcbf822529
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+set -euo pipefail
+
+disk=/dev/disk/by-id/virtio-ignition_crypted
+conf=/usr/lib/ignition/user.ign
+pkey=/usr/lib/coreos/ignition.asc
+tmpd=
+
+cleanup() {
+    rm -f "${pkey}"
+    if [[ -n "${tmpd}" ]]; then
+        rm -rf "${tmpd}"
+    fi
+}
+
+trap cleanup EXIT
+
+tmpd=$(mktemp -d)
+
+if [ ! -e "${disk}" ]; then
+    echo "Ignition config must be encrypted"
+    exit 1
+fi
+
+gpg --homedir "${tmpd}" --import "${pkey}" && rm "${pkey}"
+gpg --homedir "${tmpd}" --skip-verify --output "${conf}" --decrypt "${disk}"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index f53564dd7c..d39da6fa08 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -26,6 +26,13 @@ install() {
         sgdisk \
         uname
 
+    # For IBM SecureExecution
+    if [[ $(uname -m) = s390x ]]; then
+        inst_multiple \
+            gpg \
+            gpg-agent
+    fi
+
     inst_simple "$moddir/coreos-diskful-generator" \
         "$systemdutildir/system-generators/coreos-diskful-generator"
 
@@ -76,4 +83,8 @@ install() {
 
     # IBM Secure Execution. Ignition config for reencryption of / and /boot
     inst_simple "$moddir/01-secex.ign" /usr/lib/coreos/01-secex.ign
+    install_ignition_unit "coreos-secex-ignition-decrypt.service"
+    inst_script "$moddir/coreos-secex-ignition-decrypt.sh" \
+        "/usr/sbin/coreos-secex-ignition-decrypt"
+
 }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
index 5623e60c70..b9b89e671a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/99emergency-shell-setup/emergency-shell.sh
@@ -70,10 +70,11 @@ EOF
     fi
 }
 
-# in SE case drop config before entering shell
+# in SE case drop everything before entering shell
 if [ -f /run/coreos/secure-execution ]; then
     rm -f /run/ignition.json
     rm -f /usr/lib/ignition/user.ign
+    rm -f /usr/lib/coreos/ignition.asc
 fi
 
 # Print warnings/informational messages to all configured consoles on the

From 5f33f203837aa1a9bc47dae8516f2d914c734b42 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 16 Feb 2023 22:16:07 +0000
Subject: [PATCH 1457/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/379/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json |  8 ++++----
 manifest-lock.ppc64le.json |  8 ++++----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  |  8 ++++----
 4 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 010e83dee2..e0abbdf0a6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.aarch64"
     },
     "git-core": {
-      "evra": "2.39.1-1.fc37.aarch64"
+      "evra": "2.39.2-1.fc37.aarch64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-15T00:00:00Z",
+    "generated": "2023-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T19:13:09Z"
+        "generated": "2023-02-15T22:45:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-15T01:15:03Z"
+        "generated": "2023-02-16T01:51:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c054b8a69d..5e41d3791b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -352,7 +352,7 @@
       "evra": "0.21.1-1.fc37.ppc64le"
     },
     "git-core": {
-      "evra": "2.39.1-1.fc37.ppc64le"
+      "evra": "2.39.2-1.fc37.ppc64le"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-15T00:00:00Z",
+    "generated": "2023-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T19:13:47Z"
+        "generated": "2023-02-15T22:42:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-15T01:15:15Z"
+        "generated": "2023-02-16T01:51:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0b58bac19c..edddb4a551 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,7 +337,7 @@
       "evra": "1.0.9-4.fc37.s390x"
     },
     "git-core": {
-      "evra": "2.39.1-1.fc37.s390x"
+      "evra": "2.39.2-1.fc37.s390x"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.s390x"
@@ -988,7 +988,7 @@
       "evra": "2:1.1.4-1.fc37.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.24.0-1.fc37.s390x"
+      "evra": "2:2.25.0-4.fc37.s390x"
     },
     "samba-client-libs": {
       "evra": "2:4.17.5-0.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-15T00:00:00Z",
+    "generated": "2023-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T19:13:29Z"
+        "generated": "2023-02-15T22:37:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-15T01:15:20Z"
+        "generated": "2023-02-16T01:51:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a57985e708..ab76020cab 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-1.fc37.x86_64"
     },
     "git-core": {
-      "evra": "2.39.1-1.fc37.x86_64"
+      "evra": "2.39.2-1.fc37.x86_64"
     },
     "glib2": {
       "evra": "2.74.1-2.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-15T00:00:00Z",
+    "generated": "2023-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T19:13:48Z"
+        "generated": "2023-02-15T22:53:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-15T01:15:26Z"
+        "generated": "2023-02-16T01:51:25Z"
       }
     }
   }

From 93b5a70e61e4b05a80cf320ca79fcf8450adcfc7 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 16 Feb 2023 19:11:49 +0800
Subject: [PATCH 1458/2157] network: fix `default-network-behavior-change`
 script

Fix the script as we are moving to RHEL 9.
---
 tests/kola/data/commonlib.sh                                | 6 ++++++
 .../kola/networking/default-network-behavior-change/test.sh | 6 +++---
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index f2f72c65d9..ff840cd59e 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -53,6 +53,12 @@ is_rhcos8() {
     [ "${ID}" == "rhcos" ] && [ "${RHEL_VERSION%%.*}" -eq 8 ]
 }
 
+# rhcos9
+is_rhcos9() {
+    source /etc/os-release
+    [ "${ID}" == "rhcos" ] && [ "${RHEL_VERSION%%.*}" -eq 9 ]
+}
+
 # scos
 is_scos() {
     source /etc/os-release
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index d8cbd9b4b7..359ddda708 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -65,7 +65,7 @@ method=auto
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG5
-#   - used on Fedora 37+ and scos
+#   - used on Fedora 37+, scos and RHEL 9.2
 EXPECTED_INITRD_NETWORK_CFG5="# Created by nm-initrd-generator
 
 [connection]
@@ -143,7 +143,7 @@ method=auto
 [.nmmeta]
 nm-generated=true"
 # EXPECTED_REALROOT_NETWORK_CFG3:
-#   - used on all Fedora 37+ and scos
+#   - used on all Fedora 37+, scos and RHEL 9.2
 EXPECTED_REALROOT_NETWORK_CFG3="[connection]
 id=Wired connection 1
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -189,7 +189,7 @@ elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
     # For the version comparison use string substitution to remove the
     # '.` from the version so we can use integer comparison
 
-    if is_scos; then
+    if is_scos || is_rhcos9; then
         EXPECTED_INITRD_NETWORK_CFG=$EXPECTED_INITRD_NETWORK_CFG5
         EXPECTED_REALROOT_NETWORK_CFG=$EXPECTED_REALROOT_NETWORK_CFG3
     elif [ "${RHEL_VERSION/\./}" -ge 86 ]; then

From 4209afbf92b1ae683281ae79aa637e643097f48b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 18 Feb 2023 22:15:20 +0000
Subject: [PATCH 1459/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/381/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 44 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 44 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 46 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 ++++++++++++++++++------------------
 4 files changed, 89 insertions(+), 89 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e0abbdf0a6..13fccbb0ae 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.4.0-1.fc37.aarch64"
+      "evra": "1.5.0-4.fc37.aarch64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.aarch64"
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.aarch64"
     },
     "clevis": {
-      "evra": "18-14.fc37.aarch64"
+      "evra": "19-1.fc37.aarch64"
     },
     "clevis-dracut": {
-      "evra": "18-14.fc37.aarch64"
+      "evra": "19-1.fc37.aarch64"
     },
     "clevis-luks": {
-      "evra": "18-14.fc37.aarch64"
+      "evra": "19-1.fc37.aarch64"
     },
     "clevis-systemd": {
-      "evra": "18-14.fc37.aarch64"
+      "evra": "19-1.fc37.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.aarch64"
@@ -181,10 +181,10 @@
       "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.5.0-1.fc37.aarch64"
+      "evra": "2.6.1-1.fc37.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.5.0-1.fc37.aarch64"
+      "evra": "2.6.1-1.fc37.aarch64"
     },
     "curl": {
       "evra": "7.85.0-5.fc37.aarch64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.88-1.fc37.aarch64"
+      "evra": "2.89-1.fc37.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.aarch64"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-0.fc37.aarch64"
+      "evra": "2:4.17.5-1.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-0.fc37.aarch64"
+      "evra": "2:4.17.5-1.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -844,7 +844,7 @@
       "evra": "4.94.0-4.fc37.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-7.fc37.aarch64"
+      "evra": "5.4.4-9.fc37.aarch64"
     },
     "luksmeta": {
       "evra": "9-14.fc37.aarch64"
@@ -895,7 +895,7 @@
       "evra": "2.0-0.64.20160912git.fc37.aarch64"
     },
     "netavark": {
-      "evra": "1.4.0-1.fc37.aarch64"
+      "evra": "1.5.0-4.fc37.aarch64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.aarch64"
@@ -1054,13 +1054,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-0.fc37.aarch64"
+      "evra": "2:4.17.5-1.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-0.fc37.noarch"
+      "evra": "2:4.17.5-1.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-0.fc37.aarch64"
+      "evra": "2:4.17.5-1.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1195,10 +1195,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1293-1.fc37.noarch"
+      "evra": "2:9.0.1307-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1293-1.fc37.aarch64"
+      "evra": "2:9.0.1307-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-16T00:00:00Z",
+    "generated": "2023-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T22:45:15Z"
+        "generated": "2023-02-16T22:22:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-16T01:51:02Z"
+        "generated": "2023-02-18T01:07:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5e41d3791b..c4cf839329 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.4.0-1.fc37.ppc64le"
+      "evra": "1.5.0-4.fc37.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.ppc64le"
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.ppc64le"
     },
     "clevis": {
-      "evra": "18-14.fc37.ppc64le"
+      "evra": "19-1.fc37.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "18-14.fc37.ppc64le"
+      "evra": "19-1.fc37.ppc64le"
     },
     "clevis-luks": {
-      "evra": "18-14.fc37.ppc64le"
+      "evra": "19-1.fc37.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "18-14.fc37.ppc64le"
+      "evra": "19-1.fc37.ppc64le"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.ppc64le"
@@ -181,10 +181,10 @@
       "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.5.0-1.fc37.ppc64le"
+      "evra": "2.6.1-1.fc37.ppc64le"
     },
     "cryptsetup-libs": {
-      "evra": "2.5.0-1.fc37.ppc64le"
+      "evra": "2.6.1-1.fc37.ppc64le"
     },
     "curl": {
       "evra": "7.85.0-5.fc37.ppc64le"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.88-1.fc37.ppc64le"
+      "evra": "2.89-1.fc37.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.ppc64le"
@@ -742,7 +742,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-0.fc37.ppc64le"
+      "evra": "2:4.17.5-1.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -808,7 +808,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-0.fc37.ppc64le"
+      "evra": "2:4.17.5-1.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -844,7 +844,7 @@
       "evra": "4.94.0-4.fc37.ppc64le"
     },
     "lua-libs": {
-      "evra": "5.4.4-7.fc37.ppc64le"
+      "evra": "5.4.4-9.fc37.ppc64le"
     },
     "luksmeta": {
       "evra": "9-14.fc37.ppc64le"
@@ -892,7 +892,7 @@
       "evra": "2.0-0.64.20160912git.fc37.ppc64le"
     },
     "netavark": {
-      "evra": "1.4.0-1.fc37.ppc64le"
+      "evra": "1.5.0-4.fc37.ppc64le"
     },
     "nettle": {
       "evra": "3.8-2.fc37.ppc64le"
@@ -1060,13 +1060,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-0.fc37.ppc64le"
+      "evra": "2:4.17.5-1.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.5-0.fc37.noarch"
+      "evra": "2:4.17.5-1.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-0.fc37.ppc64le"
+      "evra": "2:4.17.5-1.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1293-1.fc37.noarch"
+      "evra": "2:9.0.1307-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1293-1.fc37.ppc64le"
+      "evra": "2:9.0.1307-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-16T00:00:00Z",
+    "generated": "2023-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T22:42:03Z"
+        "generated": "2023-02-16T22:20:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-16T01:51:13Z"
+        "generated": "2023-02-18T01:07:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index edddb4a551..10c293f7f8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.4.0-1.fc37.s390x"
+      "evra": "1.5.0-4.fc37.s390x"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.s390x"
@@ -103,16 +103,16 @@
       "evra": "7.0-1.fc37.s390x"
     },
     "clevis": {
-      "evra": "18-14.fc37.s390x"
+      "evra": "19-1.fc37.s390x"
     },
     "clevis-dracut": {
-      "evra": "18-14.fc37.s390x"
+      "evra": "19-1.fc37.s390x"
     },
     "clevis-luks": {
-      "evra": "18-14.fc37.s390x"
+      "evra": "19-1.fc37.s390x"
     },
     "clevis-systemd": {
-      "evra": "18-14.fc37.s390x"
+      "evra": "19-1.fc37.s390x"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -142,10 +142,10 @@
       "evra": "1.1.1-8.fc37.s390x"
     },
     "containers-common": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.s390x"
@@ -178,10 +178,10 @@
       "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.5.0-1.fc37.s390x"
+      "evra": "2.6.1-1.fc37.s390x"
     },
     "cryptsetup-libs": {
-      "evra": "2.5.0-1.fc37.s390x"
+      "evra": "2.6.1-1.fc37.s390x"
     },
     "curl": {
       "evra": "7.85.0-5.fc37.s390x"
@@ -229,7 +229,7 @@
       "evra": "3.8-3.fc37.s390x"
     },
     "dnsmasq": {
-      "evra": "2.88-1.fc37.s390x"
+      "evra": "2.89-1.fc37.s390x"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.s390x"
@@ -691,7 +691,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-0.fc37.s390x"
+      "evra": "2:4.17.5-1.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -754,7 +754,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-0.fc37.s390x"
+      "evra": "2:4.17.5-1.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -787,7 +787,7 @@
       "evra": "4.94.0-4.fc37.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-7.fc37.s390x"
+      "evra": "5.4.4-9.fc37.s390x"
     },
     "luksmeta": {
       "evra": "9-14.fc37.s390x"
@@ -835,7 +835,7 @@
       "evra": "2.0-0.64.20160912git.fc37.s390x"
     },
     "netavark": {
-      "evra": "1.4.0-1.fc37.s390x"
+      "evra": "1.5.0-4.fc37.s390x"
     },
     "nettle": {
       "evra": "3.8-2.fc37.s390x"
@@ -991,13 +991,13 @@
       "evra": "2:2.25.0-4.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-0.fc37.s390x"
+      "evra": "2:4.17.5-1.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.5-0.fc37.noarch"
+      "evra": "2:4.17.5-1.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-0.fc37.s390x"
+      "evra": "2:4.17.5-1.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1126,13 +1126,13 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "veritysetup": {
-      "evra": "2.5.0-1.fc37.s390x"
+      "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1293-1.fc37.noarch"
+      "evra": "2:9.0.1307-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1293-1.fc37.s390x"
+      "evra": "2:9.0.1307-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-16T00:00:00Z",
+    "generated": "2023-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T22:37:09Z"
+        "generated": "2023-02-16T22:18:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-16T01:51:19Z"
+        "generated": "2023-02-18T01:07:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ab76020cab..9b433e6ea6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.8.0.11-1.fc37.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.4.0-1.fc37.x86_64"
+      "evra": "1.5.0-4.fc37.x86_64"
     },
     "acl": {
       "evra": "2.3.1-4.fc37.x86_64"
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.x86_64"
     },
     "clevis": {
-      "evra": "18-14.fc37.x86_64"
+      "evra": "19-1.fc37.x86_64"
     },
     "clevis-dracut": {
-      "evra": "18-14.fc37.x86_64"
+      "evra": "19-1.fc37.x86_64"
     },
     "clevis-luks": {
-      "evra": "18-14.fc37.x86_64"
+      "evra": "19-1.fc37.x86_64"
     },
     "clevis-systemd": {
-      "evra": "18-14.fc37.x86_64"
+      "evra": "19-1.fc37.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -145,10 +145,10 @@
       "evra": "1.1.1-8.fc37.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-78.fc37.noarch"
+      "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
       "evra": "0.16.1-2.fc37.x86_64"
@@ -181,10 +181,10 @@
       "evra": "20220815-1.gite4ed860.fc37.noarch"
     },
     "cryptsetup": {
-      "evra": "2.5.0-1.fc37.x86_64"
+      "evra": "2.6.1-1.fc37.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.5.0-1.fc37.x86_64"
+      "evra": "2.6.1-1.fc37.x86_64"
     },
     "curl": {
       "evra": "7.85.0-5.fc37.x86_64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.88-1.fc37.x86_64"
+      "evra": "2.89-1.fc37.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.x86_64"
@@ -748,7 +748,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-0.fc37.x86_64"
+      "evra": "2:4.17.5-1.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -817,7 +817,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-0.fc37.x86_64"
+      "evra": "2:4.17.5-1.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -853,7 +853,7 @@
       "evra": "4.94.0-4.fc37.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-7.fc37.x86_64"
+      "evra": "5.4.4-9.fc37.x86_64"
     },
     "luksmeta": {
       "evra": "9-14.fc37.x86_64"
@@ -907,7 +907,7 @@
       "evra": "2.0-0.64.20160912git.fc37.x86_64"
     },
     "netavark": {
-      "evra": "1.4.0-1.fc37.x86_64"
+      "evra": "1.5.0-4.fc37.x86_64"
     },
     "nettle": {
       "evra": "3.8-2.fc37.x86_64"
@@ -1063,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-0.fc37.x86_64"
+      "evra": "2:4.17.5-1.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-0.fc37.noarch"
+      "evra": "2:4.17.5-1.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-0.fc37.x86_64"
+      "evra": "2:4.17.5-1.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1293-1.fc37.noarch"
+      "evra": "2:9.0.1307-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1293-1.fc37.x86_64"
+      "evra": "2:9.0.1307-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-16T00:00:00Z",
+    "generated": "2023-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-15T22:53:59Z"
+        "generated": "2023-02-16T22:23:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-16T01:51:25Z"
+        "generated": "2023-02-18T01:08:04Z"
       }
     }
   }

From acf2d073bdbda652d4c2cdf19cb339c24e531236 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Mon, 20 Feb 2023 15:46:19 -0500
Subject: [PATCH 1460/2157] denylist: snooze tests that use Butane
 1.5.0-experimental

We're ratcheting in a spec stabilization.  The Ignition repo has a
workaround for ratcheting Ignition configs using the experimental spec,
but we've started using Butane configs in tests, and that requires a
double ratchet.  For now, just snooze the affected tests.
---
 kola-denylist.yaml | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0b99ceea60..6ef4eb1abc 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -14,15 +14,20 @@
   arches:
     - ppc64le
 - pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  arches:
-    - s390x
-  streams:
-    - next-devel
-    - next
-    - testing-devel
-    - testing
-    - stable
+  tracker: https://github.com/coreos/ignition/pull/1558
+  snooze: 2023-03-06
+  #tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  #arches:
+  #  - s390x
+  #streams:
+  #  - next-devel
+  #  - next
+  #  - testing-devel
+  #  - testing
+  #  - stable
+- pattern: ext.config.butane.grub-users
+  tracker: https://github.com/coreos/ignition/pull/1558
+  snooze: 2023-03-06
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 98c9891d6427409e14cb6d62de495fdc2b813ae1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Feb 2023 02:08:05 +0000
Subject: [PATCH 1461/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/386/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 13fccbb0ae..cdb6ee66f6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-5.fc37.aarch64"
+      "evra": "7.85.0-6.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.aarch64"
@@ -391,16 +391,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-75.fc37.noarch"
+      "evra": "1:2.06-84.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-75.fc37.aarch64"
+      "evra": "1:2.06-84.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-75.fc37.aarch64"
+      "evra": "1:2.06-84.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-75.fc37.aarch64"
+      "evra": "1:2.06-84.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -562,7 +562,7 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-5.fc37.aarch64"
+      "evra": "7.85.0-6.fc37.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.aarch64"
@@ -871,7 +871,7 @@
       "evra": "2:0.6.0-5.fc37.aarch64"
     },
     "mozjs102": {
-      "evra": "102.7.0-1.fc37.aarch64"
+      "evra": "102.8.0-1.fc37.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-18T00:00:00Z",
+    "generated": "2023-02-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-16T22:22:32Z"
+        "generated": "2023-02-18T22:18:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-18T01:07:41Z"
+        "generated": "2023-02-20T01:11:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c4cf839329..9c634c3536 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-5.fc37.ppc64le"
+      "evra": "7.85.0-6.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.ppc64le"
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-75.fc37.noarch"
+      "evra": "1:2.06-84.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-75.fc37.ppc64le"
+      "evra": "1:2.06-84.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-75.fc37.noarch"
+      "evra": "1:2.06-84.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-75.fc37.ppc64le"
+      "evra": "1:2.06-84.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-75.fc37.ppc64le"
+      "evra": "1:2.06-84.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -556,7 +556,7 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-5.fc37.ppc64le"
+      "evra": "7.85.0-6.fc37.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.ppc64le"
@@ -868,7 +868,7 @@
       "evra": "20.10.23-1.fc37.ppc64le"
     },
     "mozjs102": {
-      "evra": "102.7.0-1.fc37.ppc64le"
+      "evra": "102.8.0-1.fc37.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-18T00:00:00Z",
+    "generated": "2023-02-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-16T22:20:25Z"
+        "generated": "2023-02-18T22:19:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-18T01:07:52Z"
+        "generated": "2023-02-20T01:11:40Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 10c293f7f8..db57349dc3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -184,7 +184,7 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.85.0-5.fc37.s390x"
+      "evra": "7.85.0-6.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.s390x"
@@ -523,7 +523,7 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-5.fc37.s390x"
+      "evra": "7.85.0-6.fc37.s390x"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.s390x"
@@ -811,7 +811,7 @@
       "evra": "20.10.23-1.fc37.s390x"
     },
     "mozjs102": {
-      "evra": "102.7.0-1.fc37.s390x"
+      "evra": "102.8.0-1.fc37.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-18T00:00:00Z",
+    "generated": "2023-02-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-16T22:18:56Z"
+        "generated": "2023-02-18T22:18:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-18T01:07:58Z"
+        "generated": "2023-02-20T01:11:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9b433e6ea6..e8dcc900fa 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-5.fc37.x86_64"
+      "evra": "7.85.0-6.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.x86_64"
@@ -391,22 +391,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-75.fc37.noarch"
+      "evra": "1:2.06-84.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-75.fc37.x86_64"
+      "evra": "1:2.06-84.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-75.fc37.x86_64"
+      "evra": "1:2.06-84.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-75.fc37.noarch"
+      "evra": "1:2.06-84.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-75.fc37.x86_64"
+      "evra": "1:2.06-84.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-75.fc37.x86_64"
+      "evra": "1:2.06-84.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-5.fc37.x86_64"
+      "evra": "7.85.0-6.fc37.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.x86_64"
@@ -883,7 +883,7 @@
       "evra": "2:0.6.0-5.fc37.x86_64"
     },
     "mozjs102": {
-      "evra": "102.7.0-1.fc37.x86_64"
+      "evra": "102.8.0-1.fc37.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-18T00:00:00Z",
+    "generated": "2023-02-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-16T22:23:18Z"
+        "generated": "2023-02-18T22:19:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-18T01:08:04Z"
+        "generated": "2023-02-20T01:11:52Z"
       }
     }
   }

From 66da416fe3f75eaa6c96b4f3c4eee3f45ff13242 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 Feb 2023 09:33:57 -0500
Subject: [PATCH 1462/2157] denylist: snooze files.file-directory-permissions
 test

This is failing because the 98-default-mac-none.link  from systemd-udev
has group write permissions. See
https://github.com/coreos/fedora-coreos-tracker/issues/1427
---
 kola-denylist.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6ef4eb1abc..13636dec2c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -46,3 +46,10 @@
   snooze: 2023-03-08
   streams:
     - rawhide
+- pattern: ext.config.files.file-directory-permissions
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1427
+  snooze: 2023-03-08
+  streams:
+    - rawhide
+    - branched
+    - next-devel

From 3f24b4f958174815bdcfd4b1f1a916f63dcc40ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Feb 2023 22:42:18 +0000
Subject: [PATCH 1463/2157] overrides: fast-track ignition-2.15.0-1.fc37

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..d8ac2e21f8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ignition:
+    evr: 2.15.0-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-bcd536e05c
+      type: fast-track

From 9f809bbc8d8d924ac566b6d0dd451cf110e758e7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 21 Feb 2023 15:03:06 -0500
Subject: [PATCH 1464/2157] workflow: don't remove graduated overrides on
 next-devel when disabled

The `next-devel` stream uses the -next repos which recently became
invalid since it still assumes f37. The graduation workflow has been
failing since then and I've been receiving notifications each time it
runs.

Since `next-devel` is unmaintained when it's disabled, it doesn't
make sense to run this workflow there (e.g. there's currently a stale
NetworkManager pin there).

Rework the job so that the matrix is built dynamically, and we only
include `next-devel` in the matrix when it's enabled.
---
 .../workflows/remove-graduated-overrides.yml  | 31 ++++++++++++++++---
 1 file changed, 26 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index 5630d633b7..ec49c86268 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -9,19 +9,40 @@ permissions:
   contents: read
 
 jobs:
+  buildmatrix:
+    name: "Build job matrix"
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{steps.build.outputs.matrix}}
+    steps:
+      - name: Build job matrix
+        id: build
+        run: |
+          set -xeuo pipefail
+
+          branches=(testing-devel branched rawhide)
+
+          enabled="$(curl -L https://raw.githubusercontent.com/coreos/fedora-coreos-pipeline/main/next-devel/status.json | jq .enabled)"
+          case "${enabled}" in
+          true) branches+=(next-devel) ;;
+          false) ;;
+          *)
+            echo "Unexpected value: ${enabled}"
+            exit 1
+            ;;
+          esac
+
+          echo "matrix=$(xargs -n 1 echo <<< "${branches[@]}" | jq -cnR '[inputs]')" >> $GITHUB_OUTPUT
   remove-graduated-overrides:
     name: Remove graduated overrides
+    needs: buildmatrix
     runs-on: ubuntu-latest
     # TODO: use cosa directly here
     # https://github.com/coreos/coreos-assembler/issues/2223
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     strategy:
       matrix:
-        branch:
-          - testing-devel
-          - next-devel
-          - branched
-          - rawhide
+        branch: ${{fromJson(needs.buildmatrix.outputs.matrix)}}
       fail-fast: false
     steps:
       - name: Enable CoreOS continuous repo

From af513018f91d03ed56c804144ad02fba57126bb7 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 22 Feb 2023 11:52:03 -0600
Subject: [PATCH 1465/2157] denylist: snooze another test that uses Butane
 1.5.0-experimental

This one only runs on AWS, so we missed it before.

Fixes: acf2d073bd ("denylist: snooze tests that use Butane 1.5.0-experimental")
---
 kola-denylist.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 13636dec2c..aeedc539a0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,6 +25,9 @@
   #  - testing-devel
   #  - testing
   #  - stable
+- pattern: ext.config.ignition.resource.authenticated-s3
+  tracker: https://github.com/coreos/ignition/pull/1558
+  snooze: 2023-03-06
 - pattern: ext.config.butane.grub-users
   tracker: https://github.com/coreos/ignition/pull/1558
   snooze: 2023-03-06

From f60b9d0a8de7fb1510dfabb311e34a15fab88fc2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 Feb 2023 03:48:07 +0000
Subject: [PATCH 1466/2157] overrides: fast-track ignition-2.15.0-3.fc37

---
 manifest-lock.overrides.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d8ac2e21f8..792c311863 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,7 +10,7 @@
 
 packages:
   ignition:
-    evr: 2.15.0-1.fc37
+    evr: 2.15.0-3.fc37
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-bcd536e05c
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5a7c2a5c5b
       type: fast-track

From 568c8342db0f33411981943e3d8c1694dfb2f1ab Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 Feb 2023 14:45:42 +0000
Subject: [PATCH 1467/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/391/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 63 insertions(+), 63 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cdb6ee66f6..03b7a169f1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "1.0.8-12.fc37.aarch64"
     },
     "c-ares": {
-      "evra": "1.17.2-3.fc37.aarch64"
+      "evra": "1.19.0-1.fc37.aarch64"
     },
     "ca-certificates": {
       "evra": "2023.2.60-1.0.fc37.noarch"
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.5-1.fc37.aarch64"
+      "evra": "2:2.1.6-3.fc37.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -391,16 +391,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-84.fc37.noarch"
+      "evra": "1:2.06-88.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-84.fc37.aarch64"
+      "evra": "1:2.06-88.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-84.fc37.aarch64"
+      "evra": "1:2.06-88.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-84.fc37.aarch64"
+      "evra": "1:2.06-88.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -409,7 +409,7 @@
       "evra": "3.23-7.fc37.aarch64"
     },
     "ignition": {
-      "evra": "2.14.0-4.fc37.aarch64"
+      "evra": "2.15.0-3.fc37.aarch64"
     },
     "inih": {
       "evra": "56-2.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.11-200.fc37.aarch64"
+      "evra": "6.1.12-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.11-200.fc37.aarch64"
+      "evra": "6.1.12-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.11-200.fc37.aarch64"
+      "evra": "6.1.12-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -991,10 +991,10 @@
       "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "5:4.4.1-1.fc37.aarch64"
+      "evra": "5:4.4.1-3.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-1.fc37.aarch64"
+      "evra": "5:4.4.1-3.fc37.aarch64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.aarch64"
@@ -1222,7 +1222,7 @@
       "evra": "2.1.0-19.fc37.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc37.aarch64"
+      "evra": "1.2.4-1.fc37.aarch64"
     },
     "zincati": {
       "evra": "0.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-21T00:00:00Z",
+    "generated": "2023-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-18T22:18:32Z"
+        "generated": "2023-02-23T04:54:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-20T01:11:28Z"
+        "generated": "2023-02-23T02:10:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 9c634c3536..4165b3d8d0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -91,7 +91,7 @@
       "evra": "1.0.8-12.fc37.ppc64le"
     },
     "c-ares": {
-      "evra": "1.17.2-3.fc37.ppc64le"
+      "evra": "1.19.0-1.fc37.ppc64le"
     },
     "ca-certificates": {
       "evra": "2023.2.60-1.0.fc37.noarch"
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.5-1.fc37.ppc64le"
+      "evra": "2:2.1.6-3.fc37.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -382,19 +382,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-84.fc37.noarch"
+      "evra": "1:2.06-88.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-84.fc37.ppc64le"
+      "evra": "1:2.06-88.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-84.fc37.noarch"
+      "evra": "1:2.06-88.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-84.fc37.ppc64le"
+      "evra": "1:2.06-88.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-84.fc37.ppc64le"
+      "evra": "1:2.06-88.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -403,7 +403,7 @@
       "evra": "3.23-7.fc37.ppc64le"
     },
     "ignition": {
-      "evra": "2.14.0-4.fc37.ppc64le"
+      "evra": "2.15.0-3.fc37.ppc64le"
     },
     "inih": {
       "evra": "56-2.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.11-200.fc37.ppc64le"
+      "evra": "6.1.12-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.11-200.fc37.ppc64le"
+      "evra": "6.1.12-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.11-200.fc37.ppc64le"
+      "evra": "6.1.12-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -991,10 +991,10 @@
       "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "5:4.4.1-1.fc37.ppc64le"
+      "evra": "5:4.4.1-3.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-1.fc37.ppc64le"
+      "evra": "5:4.4.1-3.fc37.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.ppc64le"
@@ -1228,7 +1228,7 @@
       "evra": "2.1.0-19.fc37.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc37.ppc64le"
+      "evra": "1.2.4-1.fc37.ppc64le"
     },
     "zincati": {
       "evra": "0.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-21T00:00:00Z",
+    "generated": "2023-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-18T22:19:09Z"
+        "generated": "2023-02-23T04:54:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-20T01:11:40Z"
+        "generated": "2023-02-23T02:10:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index db57349dc3..dad891cb15 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -88,7 +88,7 @@
       "evra": "1.0.8-12.fc37.s390x"
     },
     "c-ares": {
-      "evra": "1.17.2-3.fc37.s390x"
+      "evra": "1.19.0-1.fc37.s390x"
     },
     "ca-certificates": {
       "evra": "2023.2.60-1.0.fc37.noarch"
@@ -118,7 +118,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.5-1.fc37.s390x"
+      "evra": "2:2.1.6-3.fc37.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -373,7 +373,7 @@
       "evra": "3.23-7.fc37.s390x"
     },
     "ignition": {
-      "evra": "2.14.0-4.fc37.s390x"
+      "evra": "2.15.0-3.fc37.s390x"
     },
     "inih": {
       "evra": "56-2.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.11-200.fc37.s390x"
+      "evra": "6.1.12-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.11-200.fc37.s390x"
+      "evra": "6.1.12-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.11-200.fc37.s390x"
+      "evra": "6.1.12-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -925,10 +925,10 @@
       "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "5:4.4.1-1.fc37.s390x"
+      "evra": "5:4.4.1-3.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-1.fc37.s390x"
+      "evra": "5:4.4.1-3.fc37.s390x"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.s390x"
@@ -1156,7 +1156,7 @@
       "evra": "2.1.0-19.fc37.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc37.s390x"
+      "evra": "1.2.4-1.fc37.s390x"
     },
     "zincati": {
       "evra": "0.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-21T00:00:00Z",
+    "generated": "2023-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-18T22:18:15Z"
+        "generated": "2023-02-23T04:54:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-20T01:11:46Z"
+        "generated": "2023-02-23T02:11:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e8dcc900fa..8c0e1ef9b4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -91,7 +91,7 @@
       "evra": "1.0.8-12.fc37.x86_64"
     },
     "c-ares": {
-      "evra": "1.17.2-3.fc37.x86_64"
+      "evra": "1.19.0-1.fc37.x86_64"
     },
     "ca-certificates": {
       "evra": "2023.2.60-1.0.fc37.noarch"
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.5-1.fc37.x86_64"
+      "evra": "2:2.1.6-3.fc37.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -391,22 +391,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-84.fc37.noarch"
+      "evra": "1:2.06-88.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-84.fc37.x86_64"
+      "evra": "1:2.06-88.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-84.fc37.x86_64"
+      "evra": "1:2.06-88.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-84.fc37.noarch"
+      "evra": "1:2.06-88.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-84.fc37.x86_64"
+      "evra": "1:2.06-88.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-84.fc37.x86_64"
+      "evra": "1:2.06-88.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -415,7 +415,7 @@
       "evra": "3.23-7.fc37.x86_64"
     },
     "ignition": {
-      "evra": "2.14.0-4.fc37.x86_64"
+      "evra": "2.15.0-3.fc37.x86_64"
     },
     "inih": {
       "evra": "56-2.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.11-200.fc37.x86_64"
+      "evra": "6.1.12-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.11-200.fc37.x86_64"
+      "evra": "6.1.12-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.11-200.fc37.x86_64"
+      "evra": "6.1.12-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1003,10 +1003,10 @@
       "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "5:4.4.1-1.fc37.x86_64"
+      "evra": "5:4.4.1-3.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-1.fc37.x86_64"
+      "evra": "5:4.4.1-3.fc37.x86_64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.x86_64"
@@ -1231,7 +1231,7 @@
       "evra": "2.1.0-19.fc37.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.3-1.fc37.x86_64"
+      "evra": "1.2.4-1.fc37.x86_64"
     },
     "zincati": {
       "evra": "0.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-21T00:00:00Z",
+    "generated": "2023-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-18T22:19:14Z"
+        "generated": "2023-02-23T04:54:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-20T01:11:52Z"
+        "generated": "2023-02-23T02:11:06Z"
       }
     }
   }

From a2b167c64b74401fe6f5ae47633a0a0f45885331 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 13 Feb 2023 12:10:11 +0800
Subject: [PATCH 1468/2157] ignition-ostree-transposefs: add workaround when
 removing the zram device

Add workaround for luks.tang and luks.sss.* tests failure on aarch64
and ppc64le.
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh  | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 4578531f24..4d1754e0dd 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -24,6 +24,11 @@ saved_prep=${saved_data}/prep
 zram_dev=${saved_data}/zram_dev
 partstate_root=/run/ignition-ostree-rootfs-partstate.sh
 
+is_rhcos9() {
+    source /etc/os-release
+    [ "${ID}" == "rhcos" ] && [ "${RHEL_VERSION%%.*}" -eq 9 ]
+}
+
 # Print jq query string for wiped filesystems with label $1
 query_fslabel() {
     echo ".storage?.filesystems? // [] | map(select(.label == \"$1\" and .wipeFilesystem == true))"
@@ -289,6 +294,12 @@ case "${1:-}" in
         if [ -d "${saved_data}" ]; then
             read dev < "${zram_dev}"
             umount "${saved_data}"
+            # After unmounting, make sure zram device state is stable before we remove it.
+            # See https://github.com/openshift/os/issues/1149
+            # Should remove when https://bugzilla.redhat.com/show_bug.cgi?id=2172058 is fixed.
+            if [ $(uname -m) != x86_64 ] && is_rhcos9; then
+                udevadm trigger --settle "/dev/zram${dev}"
+            fi
             rm -rf "${saved_data}" "${partstate_root}"
             echo "${dev}" > /sys/class/zram-control/hot_remove
         fi

From 43ac7a1a1b7bb7976a90e83fc1cd7bb75b004259 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 23 Feb 2023 15:03:06 -0500
Subject: [PATCH 1469/2157] denylist: deny kdump.crash test on aarch64 for f38
 streams

It's failing with the latest kernel updates. See
https://github.com/coreos/fedora-coreos-tracker/issues/1430
---
 kola-denylist.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index aeedc539a0..367b6f0c7b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -56,3 +56,12 @@
     - rawhide
     - branched
     - next-devel
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
+  snooze: 2023-03-08
+  arches:
+    - aarch64
+  streams:
+    - rawhide
+    - branched
+    - next-devel

From ab182f0a919d79846ad0480f1c03f0c737f6f72c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 24 Feb 2023 22:25:40 +0000
Subject: [PATCH 1470/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/393/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 03b7a169f1..d9a968c888 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.12-200.fc37.aarch64"
+      "evra": "6.1.13-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.12-200.fc37.aarch64"
+      "evra": "6.1.13-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.12-200.fc37.aarch64"
+      "evra": "6.1.13-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-23T00:00:00Z",
+    "generated": "2023-02-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T04:54:20Z"
+        "generated": "2023-02-23T14:52:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-23T02:10:43Z"
+        "generated": "2023-02-24T04:36:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4165b3d8d0..3fae7e8d70 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.12-200.fc37.ppc64le"
+      "evra": "6.1.13-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.12-200.fc37.ppc64le"
+      "evra": "6.1.13-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.12-200.fc37.ppc64le"
+      "evra": "6.1.13-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-23T00:00:00Z",
+    "generated": "2023-02-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T04:54:29Z"
+        "generated": "2023-02-23T14:50:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-23T02:10:54Z"
+        "generated": "2023-02-24T04:37:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dad891cb15..ef626503fa 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.12-200.fc37.s390x"
+      "evra": "6.1.13-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.12-200.fc37.s390x"
+      "evra": "6.1.13-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.12-200.fc37.s390x"
+      "evra": "6.1.13-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-23T00:00:00Z",
+    "generated": "2023-02-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T04:54:36Z"
+        "generated": "2023-02-23T14:50:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-23T02:11:00Z"
+        "generated": "2023-02-24T04:37:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8c0e1ef9b4..f0278a77ea 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.12-200.fc37.x86_64"
+      "evra": "6.1.13-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.12-200.fc37.x86_64"
+      "evra": "6.1.13-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.12-200.fc37.x86_64"
+      "evra": "6.1.13-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-23T00:00:00Z",
+    "generated": "2023-02-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T04:54:52Z"
+        "generated": "2023-02-23T14:52:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-23T02:11:06Z"
+        "generated": "2023-02-24T04:37:22Z"
       }
     }
   }

From ff34efd954225b848293f370f801ff0ec499183d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Feb 2023 22:29:19 +0000
Subject: [PATCH 1471/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/395/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   |  8 ++++----
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d9a968c888..98cc1f028a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.10-2.fc37.aarch64"
+      "evra": "1.8.12-1.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -625,7 +625,7 @@
       "evra": "2.8.2-1.fc37.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc37.aarch64"
+      "evra": "0.1.13-1.fc37.aarch64"
     },
     "libjose": {
       "evra": "11-6.fc37.aarch64"
@@ -817,7 +817,7 @@
       "evra": "2.10.3-2.fc37.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc37.aarch64"
+      "evra": "0.3.11-1.fc37.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-8.fc37.aarch64"
@@ -1093,7 +1093,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.11.0-2.fc37.aarch64"
+      "evra": "1:1.11.1-1.fc37.aarch64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-24T00:00:00Z",
+    "generated": "2023-02-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T14:52:56Z"
+        "generated": "2023-02-24T22:29:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-24T04:36:58Z"
+        "generated": "2023-02-26T03:24:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3fae7e8d70..60c779b020 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.10-2.fc37.ppc64le"
+      "evra": "1.8.12-1.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -619,7 +619,7 @@
       "evra": "2.8.2-1.fc37.ppc64le"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc37.ppc64le"
+      "evra": "0.1.13-1.fc37.ppc64le"
     },
     "libjose": {
       "evra": "11-6.fc37.ppc64le"
@@ -817,7 +817,7 @@
       "evra": "2.10.3-2.fc37.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc37.ppc64le"
+      "evra": "0.3.11-1.fc37.ppc64le"
     },
     "libyaml": {
       "evra": "0.2.5-8.fc37.ppc64le"
@@ -1099,7 +1099,7 @@
       "evra": "2.2-2.fc37.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.11.0-2.fc37.ppc64le"
+      "evra": "1:1.11.1-1.fc37.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-24T00:00:00Z",
+    "generated": "2023-02-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T14:50:31Z"
+        "generated": "2023-02-24T22:29:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-24T04:37:10Z"
+        "generated": "2023-02-26T03:24:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ef626503fa..64d7d8e35c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1024,7 +1024,7 @@
       "evra": "2:4.12.3-4.fc37.s390x"
     },
     "skopeo": {
-      "evra": "1:1.11.0-2.fc37.s390x"
+      "evra": "1:1.11.1-1.fc37.s390x"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-24T00:00:00Z",
+    "generated": "2023-02-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T14:50:07Z"
+        "generated": "2023-02-24T22:29:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-24T04:37:16Z"
+        "generated": "2023-02-26T03:24:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f0278a77ea..7b8372a00a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.10-2.fc37.x86_64"
+      "evra": "1.8.12-1.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -631,7 +631,7 @@
       "evra": "2.8.2-1.fc37.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.12-1.fc37.x86_64"
+      "evra": "0.1.13-1.fc37.x86_64"
     },
     "libjose": {
       "evra": "11-6.fc37.x86_64"
@@ -826,7 +826,7 @@
       "evra": "2.10.3-2.fc37.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.10-1.fc37.x86_64"
+      "evra": "0.3.11-1.fc37.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-8.fc37.x86_64"
@@ -1102,7 +1102,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.11.0-2.fc37.x86_64"
+      "evra": "1:1.11.1-1.fc37.x86_64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-24T00:00:00Z",
+    "generated": "2023-02-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-23T14:52:05Z"
+        "generated": "2023-02-24T22:30:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-24T04:37:22Z"
+        "generated": "2023-02-26T03:24:59Z"
       }
     }
   }

From 87407df959055ddb101b072196a8d9574ed9d322 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 27 Feb 2023 22:17:30 +0000
Subject: [PATCH 1472/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/396/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 98cc1f028a..8404eaa9a5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.11-1.fc37.aarch64"
+      "evra": "32:9.18.12-1.fc37.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.11-1.fc37.noarch"
+      "evra": "32:9.18.12-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.11-1.fc37.aarch64"
+      "evra": "32:9.18.12-1.fc37.aarch64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.aarch64"
@@ -271,7 +271,7 @@
       "evra": "0.188-3.fc37.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.1-1.fc37.aarch64"
+      "evra": "2:6.2-1.fc37.aarch64"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.aarch64"
@@ -280,13 +280,13 @@
       "evra": "37-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-repos": {
       "evra": "37-2.noarch"
@@ -364,7 +364,7 @@
       "evra": "2.39.2-1.fc37.aarch64"
     },
     "glib2": {
-      "evra": "2.74.1-2.fc37.aarch64"
+      "evra": "2.74.6-1.fc37.aarch64"
     },
     "glibc": {
       "evra": "2.36-9.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-26T00:00:00Z",
+    "generated": "2023-02-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-24T22:29:30Z"
+        "generated": "2023-02-26T22:32:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-26T03:24:34Z"
+        "generated": "2023-02-27T01:35:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 60c779b020..de3ff8078c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -67,13 +67,13 @@
       "evra": "1.07.1-16.fc37.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.11-1.fc37.ppc64le"
+      "evra": "32:9.18.12-1.fc37.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.11-1.fc37.noarch"
+      "evra": "32:9.18.12-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.11-1.fc37.ppc64le"
+      "evra": "32:9.18.12-1.fc37.ppc64le"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.ppc64le"
@@ -262,7 +262,7 @@
       "evra": "0.188-3.fc37.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.1-1.fc37.ppc64le"
+      "evra": "2:6.2-1.fc37.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.ppc64le"
@@ -271,13 +271,13 @@
       "evra": "37-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-repos": {
       "evra": "37-2.noarch"
@@ -355,7 +355,7 @@
       "evra": "2.39.2-1.fc37.ppc64le"
     },
     "glib2": {
-      "evra": "2.74.1-2.fc37.ppc64le"
+      "evra": "2.74.6-1.fc37.ppc64le"
     },
     "glibc": {
       "evra": "2.36-9.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-26T00:00:00Z",
+    "generated": "2023-02-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-24T22:29:21Z"
+        "generated": "2023-02-26T22:32:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-26T03:24:46Z"
+        "generated": "2023-02-27T01:35:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 64d7d8e35c..1d6a7557ce 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.11-1.fc37.s390x"
+      "evra": "32:9.18.12-1.fc37.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.11-1.fc37.noarch"
+      "evra": "32:9.18.12-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.11-1.fc37.s390x"
+      "evra": "32:9.18.12-1.fc37.s390x"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.s390x"
@@ -259,7 +259,7 @@
       "evra": "0.188-3.fc37.s390x"
     },
     "ethtool": {
-      "evra": "2:6.1-1.fc37.s390x"
+      "evra": "2:6.2-1.fc37.s390x"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.s390x"
@@ -268,13 +268,13 @@
       "evra": "37-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-repos": {
       "evra": "37-2.noarch"
@@ -340,7 +340,7 @@
       "evra": "2.39.2-1.fc37.s390x"
     },
     "glib2": {
-      "evra": "2.74.1-2.fc37.s390x"
+      "evra": "2.74.6-1.fc37.s390x"
     },
     "glibc": {
       "evra": "2.36-9.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-26T00:00:00Z",
+    "generated": "2023-02-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-24T22:29:01Z"
+        "generated": "2023-02-26T22:31:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-26T03:24:52Z"
+        "generated": "2023-02-27T01:36:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7b8372a00a..749ca16875 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.11-1.fc37.x86_64"
+      "evra": "32:9.18.12-1.fc37.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.11-1.fc37.noarch"
+      "evra": "32:9.18.12-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.11-1.fc37.x86_64"
+      "evra": "32:9.18.12-1.fc37.x86_64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.x86_64"
@@ -271,7 +271,7 @@
       "evra": "0.188-3.fc37.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.1-1.fc37.x86_64"
+      "evra": "2:6.2-1.fc37.x86_64"
     },
     "expat": {
       "evra": "2.5.0-1.fc37.x86_64"
@@ -280,13 +280,13 @@
       "evra": "37-2.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-15.noarch"
+      "evra": "37-16.noarch"
     },
     "fedora-repos": {
       "evra": "37-2.noarch"
@@ -364,7 +364,7 @@
       "evra": "2.39.2-1.fc37.x86_64"
     },
     "glib2": {
-      "evra": "2.74.1-2.fc37.x86_64"
+      "evra": "2.74.6-1.fc37.x86_64"
     },
     "glibc": {
       "evra": "2.36-9.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-26T00:00:00Z",
+    "generated": "2023-02-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-24T22:30:06Z"
+        "generated": "2023-02-26T22:32:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-26T03:24:59Z"
+        "generated": "2023-02-27T01:36:07Z"
       }
     }
   }

From a80271ae030d1413d73caf1d950ae1c8bb5b3b37 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 23 Feb 2023 15:55:19 -0500
Subject: [PATCH 1473/2157] overlay.d/35coreos-live: pull in
 coreos-enable-network.service on live boots

After 937d329 coreos-enable-network.service is load bearing for
coreos-livepxe-rootfs.service if ignition.firstboot isn't provided
on the kernel command line. Let's pull it back in for live boots.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1423
---
 .../usr/lib/dracut/modules.d/35coreos-live/live-generator      | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index 49b80e5f66..5e2019d62e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -30,6 +30,9 @@ fi
 add_requires sysroot.mount     initrd-root-fs.target
 add_requires sysroot-etc.mount initrd-root-fs.target
 add_requires sysroot-var.mount initrd-root-fs.target
+# make sure we enable network if required for coreos-livepxe-rootfs
+# https://github.com/coreos/fedora-coreos-tracker/issues/1423
+add_requires coreos-enable-network.service initrd-root-fs.target
 
 mkdir -p "${UNIT_DIR}/ostree-prepare-root.service.d"
 cat > "${UNIT_DIR}/ostree-prepare-root.service.d/10-live.conf" <<EOF

From 7205d4152399141b246d3545fff9df5fd4757f58 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 19 Jan 2023 15:44:21 -0500
Subject: [PATCH 1474/2157] overlay/live-generator: Allow 50% of RAM for /etc
 and /var

Today we default to sizing the ephemeral storage at the tmpfs default
of only 20%, but the goal here is to be able to run fully from RAM,
so there's no reason not to allow more.

(We should also likely enable zram here, but that's another topic)

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1344
---
 .../modules.d/35coreos-live/live-generator    | 26 ++++++++++++++-----
 1 file changed, 20 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index 5e2019d62e..15fda8c241 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -157,9 +157,22 @@ Options=loop,offset=124
 EOF
 fi
 
-# It turns out that `tmpfs` currently munches all SELinux labels
+# The systemd default for /run is 20% of RAM, but we want to use basically all of RAM,
+# so we make a distinct tmpfs that allows more.  Note the file we create there is
+# "thinly provisioned", so we're not actually allocating all of that.
+cat >>"${UNIT_DIR}/run-ephemeral_base.mount" <<EOF
+[Unit]
+DefaultDependencies=false
+[Mount]
+What=tmpfs
+Where=/run/ephemeral_base
+Type=tmpfs
+Options=size=50%%
+EOF
+
+# But it turns out that `tmpfs` currently munches all SELinux labels
 # we set before policy is loaded, so we make an XFS filesystem
-# loopback mounted that's sized the same as /run.
+# loopback mounted on top of the base tmpfs.
 # https://github.com/coreos/fedora-coreos-config/pull/499
 cat >"${UNIT_DIR}/sysroot-xfs-ephemeral-mkfs.service" <<'EOF'
 [Unit]
@@ -168,14 +181,15 @@ DefaultDependencies=false
 # can run really early.
 After=systemd-tmpfiles-setup-dev.service
 ConditionPathExists=/usr/lib/initrd-release
+RequiresMountsFor=/run/ephemeral_base
 # Something seems to be causing us to rerun?
-ConditionPathExists=!/run/ephemeral
+ConditionPathExists=!/run/ephemeral_base/loopfs
 
 [Service]
 Type=oneshot
 RemainAfterExit=yes
-ExecStart=/bin/sh -c 'set -euo pipefail; mem=$$(($$(stat -f -c "%%b * %%s / 1024" /run))) && /bin/truncate -s $${mem}k /run/ephemeral.xfsloop'
-ExecStart=/sbin/mkfs.xfs /run/ephemeral.xfsloop
+ExecStart=/bin/sh -c 'set -euo pipefail; mem=$$(($$(stat -f -c "%%b * %%s / 1024" /run/ephemeral_base))) && /bin/truncate -s $${mem}k /run/ephemeral_base/loopfs'
+ExecStart=/sbin/mkfs.xfs /run/ephemeral_base/loopfs
 ExecStart=/bin/mkdir /run/ephemeral
 EOF
 add_requires sysroot-xfs-ephemeral-mkfs.service initrd-root-fs.target
@@ -186,7 +200,7 @@ DefaultDependencies=false
 Requires=sysroot-xfs-ephemeral-mkfs.service
 After=sysroot-xfs-ephemeral-mkfs.service
 [Mount]
-What=/run/ephemeral.xfsloop
+What=/run/ephemeral_base/loopfs
 Where=/run/ephemeral
 Type=xfs
 Options=loop,discard

From d170f1919cdadb1cfaa70221c5ac7ac455e194b5 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 1 Mar 2023 00:08:30 -0600
Subject: [PATCH 1475/2157] denylist: extend snooze on Butane
 1.5.0-experimental tests

We'll need a bit more time to stabilize the Butane spec.
---
 kola-denylist.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 367b6f0c7b..515c4210be 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.ignition.resource.remote
   tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-06
+  snooze: 2023-03-13
   #tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   #arches:
   #  - s390x
@@ -27,10 +27,10 @@
   #  - stable
 - pattern: ext.config.ignition.resource.authenticated-s3
   tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-06
+  snooze: 2023-03-13
 - pattern: ext.config.butane.grub-users
   tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-06
+  snooze: 2023-03-13
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 3f87e4328be5d8d6893a7f54910e34bcb9c59570 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 1 Mar 2023 09:41:08 -0500
Subject: [PATCH 1476/2157] ci: update for new kolaTestIso()

The `extraArgs4k` parameter no longer does anything. Just remove it so
it's clear that we're accepting the default set of tests from
`kola testiso`.

This will run more tests than before. We'll likely cut down tests we
consider redundant soon, but that should be transparent to this code.
---
 .cci.jenkinsfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index ed3d127aa6..5b560f5de4 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -46,7 +46,7 @@ cosaPod(cpus: 4, memory: "9Gi") {
 
     stage("Test ISO") {
         shwrap("cd /srv/coreos && cosa buildextend-live")
-        kolaTestIso(extraArgs4k: "--no-pxe")
+        kolaTestIso()
     }
 
     // also print the pkgdiff as a separate stage to make it more visible

From a9473a923e961942f5df5ae2ff3d78992d992ebd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Mar 2023 22:16:24 +0000
Subject: [PATCH 1477/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/398/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8404eaa9a5..73be6988e8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-6.fc37.aarch64"
+      "evra": "7.85.0-7.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.aarch64"
@@ -382,7 +382,7 @@
       "evra": "2.3.8-1.fc37.aarch64"
     },
     "gnutls": {
-      "evra": "3.7.8-3.fc37.aarch64"
+      "evra": "3.8.0-1.fc37.aarch64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.aarch64"
@@ -484,13 +484,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.13-200.fc37.aarch64"
+      "evra": "6.1.14-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.13-200.fc37.aarch64"
+      "evra": "6.1.14-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.13-200.fc37.aarch64"
+      "evra": "6.1.14-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -562,7 +562,7 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-6.fc37.aarch64"
+      "evra": "7.85.0-7.fc37.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-27T00:00:00Z",
+    "generated": "2023-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-26T22:32:12Z"
+        "generated": "2023-02-27T22:20:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-27T01:35:41Z"
+        "generated": "2023-03-01T01:53:35Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index de3ff8078c..787f6d16fc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-6.fc37.ppc64le"
+      "evra": "7.85.0-7.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.ppc64le"
@@ -373,7 +373,7 @@
       "evra": "2.3.8-1.fc37.ppc64le"
     },
     "gnutls": {
-      "evra": "3.7.8-3.fc37.ppc64le"
+      "evra": "3.8.0-1.fc37.ppc64le"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.ppc64le"
@@ -478,13 +478,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.13-200.fc37.ppc64le"
+      "evra": "6.1.14-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.13-200.fc37.ppc64le"
+      "evra": "6.1.14-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.13-200.fc37.ppc64le"
+      "evra": "6.1.14-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -556,7 +556,7 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-6.fc37.ppc64le"
+      "evra": "7.85.0-7.fc37.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-27T00:00:00Z",
+    "generated": "2023-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-26T22:32:18Z"
+        "generated": "2023-02-27T22:21:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-27T01:35:54Z"
+        "generated": "2023-03-01T01:53:48Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1d6a7557ce..72e5eb1d51 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -184,7 +184,7 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.85.0-6.fc37.s390x"
+      "evra": "7.85.0-7.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.s390x"
@@ -358,7 +358,7 @@
       "evra": "2.3.8-1.fc37.s390x"
     },
     "gnutls": {
-      "evra": "3.7.8-3.fc37.s390x"
+      "evra": "3.8.0-1.fc37.s390x"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.s390x"
@@ -445,13 +445,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.13-200.fc37.s390x"
+      "evra": "6.1.14-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.13-200.fc37.s390x"
+      "evra": "6.1.14-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.13-200.fc37.s390x"
+      "evra": "6.1.14-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -523,7 +523,7 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-6.fc37.s390x"
+      "evra": "7.85.0-7.fc37.s390x"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-27T00:00:00Z",
+    "generated": "2023-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-26T22:31:59Z"
+        "generated": "2023-02-27T22:22:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-27T01:36:00Z"
+        "generated": "2023-03-01T01:53:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 749ca16875..eb89cc8055 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-6.fc37.x86_64"
+      "evra": "7.85.0-7.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.x86_64"
@@ -382,7 +382,7 @@
       "evra": "2.3.8-1.fc37.x86_64"
     },
     "gnutls": {
-      "evra": "3.7.8-3.fc37.x86_64"
+      "evra": "3.8.0-1.fc37.x86_64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.x86_64"
@@ -490,13 +490,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.13-200.fc37.x86_64"
+      "evra": "6.1.14-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.13-200.fc37.x86_64"
+      "evra": "6.1.14-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.13-200.fc37.x86_64"
+      "evra": "6.1.14-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-6.fc37.x86_64"
+      "evra": "7.85.0-7.fc37.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-02-27T00:00:00Z",
+    "generated": "2023-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-26T22:32:59Z"
+        "generated": "2023-02-27T22:21:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-02-27T01:36:07Z"
+        "generated": "2023-03-01T01:54:01Z"
       }
     }
   }

From 73ca278070b7af78575500c76727b3bd6461b344 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 Mar 2023 22:29:17 +0000
Subject: [PATCH 1478/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/400/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 73be6988e8..75333e9389 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.aarch64"
     },
     "clevis": {
-      "evra": "19-1.fc37.aarch64"
+      "evra": "19-2.fc37.aarch64"
     },
     "clevis-dracut": {
-      "evra": "19-1.fc37.aarch64"
+      "evra": "19-2.fc37.aarch64"
     },
     "clevis-luks": {
-      "evra": "19-1.fc37.aarch64"
+      "evra": "19-2.fc37.aarch64"
     },
     "clevis-systemd": {
-      "evra": "19-1.fc37.aarch64"
+      "evra": "19-2.fc37.aarch64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.8-1.fc37.aarch64"
+      "evra": "1.8.1-1.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1225,7 +1225,7 @@
       "evra": "1.2.4-1.fc37.aarch64"
     },
     "zincati": {
-      "evra": "0.0.25-1.fc37.aarch64"
+      "evra": "0.0.25-2.fc37.aarch64"
     },
     "zlib": {
       "evra": "1.2.12-5.fc37.aarch64"
@@ -1238,16 +1238,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-01T00:00:00Z",
+    "generated": "2023-03-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-27T22:20:37Z"
+        "generated": "2023-03-01T22:23:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-01T01:53:35Z"
+        "generated": "2023-03-03T02:20:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 787f6d16fc..c4a26eefd3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.ppc64le"
     },
     "clevis": {
-      "evra": "19-1.fc37.ppc64le"
+      "evra": "19-2.fc37.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "19-1.fc37.ppc64le"
+      "evra": "19-2.fc37.ppc64le"
     },
     "clevis-luks": {
-      "evra": "19-1.fc37.ppc64le"
+      "evra": "19-2.fc37.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "19-1.fc37.ppc64le"
+      "evra": "19-2.fc37.ppc64le"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.8-1.fc37.ppc64le"
+      "evra": "1.8.1-1.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1231,7 +1231,7 @@
       "evra": "1.2.4-1.fc37.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.25-1.fc37.ppc64le"
+      "evra": "0.0.25-2.fc37.ppc64le"
     },
     "zlib": {
       "evra": "1.2.12-5.fc37.ppc64le"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-01T00:00:00Z",
+    "generated": "2023-03-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-27T22:21:30Z"
+        "generated": "2023-03-01T22:24:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-01T01:53:48Z"
+        "generated": "2023-03-03T02:20:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 72e5eb1d51..3f69c85b58 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -103,16 +103,16 @@
       "evra": "7.0-1.fc37.s390x"
     },
     "clevis": {
-      "evra": "19-1.fc37.s390x"
+      "evra": "19-2.fc37.s390x"
     },
     "clevis-dracut": {
-      "evra": "19-1.fc37.s390x"
+      "evra": "19-2.fc37.s390x"
     },
     "clevis-luks": {
-      "evra": "19-1.fc37.s390x"
+      "evra": "19-2.fc37.s390x"
     },
     "clevis-systemd": {
-      "evra": "19-1.fc37.s390x"
+      "evra": "19-2.fc37.s390x"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.8-1.fc37.s390x"
+      "evra": "1.8.1-1.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1159,7 +1159,7 @@
       "evra": "1.2.4-1.fc37.s390x"
     },
     "zincati": {
-      "evra": "0.0.25-1.fc37.s390x"
+      "evra": "0.0.25-2.fc37.s390x"
     },
     "zlib": {
       "evra": "1.2.12-5.fc37.s390x"
@@ -1172,16 +1172,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-01T00:00:00Z",
+    "generated": "2023-03-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-27T22:22:22Z"
+        "generated": "2023-03-01T22:23:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-01T01:53:55Z"
+        "generated": "2023-03-03T02:20:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index eb89cc8055..27a1df7bbd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -106,16 +106,16 @@
       "evra": "7.0-1.fc37.x86_64"
     },
     "clevis": {
-      "evra": "19-1.fc37.x86_64"
+      "evra": "19-2.fc37.x86_64"
     },
     "clevis-dracut": {
-      "evra": "19-1.fc37.x86_64"
+      "evra": "19-2.fc37.x86_64"
     },
     "clevis-luks": {
-      "evra": "19-1.fc37.x86_64"
+      "evra": "19-2.fc37.x86_64"
     },
     "clevis-systemd": {
-      "evra": "19-1.fc37.x86_64"
+      "evra": "19-2.fc37.x86_64"
     },
     "cloud-utils-growpart": {
       "evra": "0.31-11.fc37.noarch"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.8-1.fc37.x86_64"
+      "evra": "1.8.1-1.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1234,7 +1234,7 @@
       "evra": "1.2.4-1.fc37.x86_64"
     },
     "zincati": {
-      "evra": "0.0.25-1.fc37.x86_64"
+      "evra": "0.0.25-2.fc37.x86_64"
     },
     "zlib": {
       "evra": "1.2.12-5.fc37.x86_64"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-01T00:00:00Z",
+    "generated": "2023-03-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-02-27T22:21:13Z"
+        "generated": "2023-03-01T22:24:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-01T01:54:01Z"
+        "generated": "2023-03-03T02:20:29Z"
       }
     }
   }

From 6d3438e41796863338b30624ed261a7b575071b5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 4 Mar 2023 06:05:56 +0000
Subject: [PATCH 1479/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 792c311863..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ignition:
-    evr: 2.15.0-3.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5a7c2a5c5b
-      type: fast-track
+packages: {}

From 192c8e3d316372538185b4a010e5d887e8fc010f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 6 Mar 2023 17:39:25 +0000
Subject: [PATCH 1480/2157] =?UTF-8?q?Sync=20repo=20templates=20=E2=9A=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Sync with coreos/repo-templates@71058122bf8a1256ef655f1b5218e49b977b7660.
---
 ci/shellcheck | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/shellcheck b/ci/shellcheck
index 4f2cb23965..7543bd3804 100755
--- a/ci/shellcheck
+++ b/ci/shellcheck
@@ -21,7 +21,7 @@ main() {
             shellcheck --external-sources --shell bash --severity="${severity}" "${f}" || found_errors="true"
             bash -n "${f}" || found_errors="true"
         fi
-    done< <(find . -path "./.git" -prune -o -type f -print0)
+    done< <(find . -path "./.git" -prune -o -path "./vendor" -prune -o -type f -print0)
 
     if [[ "${found_errors}" != "false" ]]; then
         echo "[+] Found errors with ShellCheck"

From 5e4f40c08f41cb635b6a6f8e1dbe39563042bc32 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 1 Mar 2023 17:20:19 -0800
Subject: [PATCH 1481/2157] Move chrony config from generator to systemd
 service

With latest changes from systemd, we now run certain
steps before NetworkManager.service to access and write
to /etc/sysconfig/network.
Issue: coreos/fedora-coreos-tracker#1402
---
 .../lib/systemd/system-preset/20-fcos.preset  |  2 +
 .../chronyd.service.d/platform-chrony.conf    |  4 ++
 .../coreos-platform-chrony-config.service     | 15 ++++++
 .../coreos-platform-chrony-config}            | 48 +++++++++----------
 ...reos-platform-chrony-generator-permissions | 14 ------
 5 files changed, 43 insertions(+), 40 deletions(-)
 create mode 100644 overlay.d/20platform-chrony/usr/lib/systemd/system-preset/20-fcos.preset
 create mode 100644 overlay.d/20platform-chrony/usr/lib/systemd/system/chronyd.service.d/platform-chrony.conf
 create mode 100644 overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
 rename overlay.d/20platform-chrony/usr/{lib/systemd/system-generators/coreos-platform-chrony => libexec/coreos-platform-chrony-config} (79%)
 delete mode 100755 tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-preset/20-fcos.preset b/overlay.d/20platform-chrony/usr/lib/systemd/system-preset/20-fcos.preset
new file mode 100644
index 0000000000..df54774a6a
--- /dev/null
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system-preset/20-fcos.preset
@@ -0,0 +1,2 @@
+# To inspect the platform and configure chrony
+enable coreos-platform-chrony-config.service
diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system/chronyd.service.d/platform-chrony.conf b/overlay.d/20platform-chrony/usr/lib/systemd/system/chronyd.service.d/platform-chrony.conf
new file mode 100644
index 0000000000..996df36b34
--- /dev/null
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system/chronyd.service.d/platform-chrony.conf
@@ -0,0 +1,4 @@
+# Override chrony configuration with the output of
+# coreos-platform-chrony-config.service.
+[Service]
+EnvironmentFile=-/run/coreos/sysconfig-chrony
diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
new file mode 100644
index 0000000000..f64f84da58
--- /dev/null
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=CoreOS Configure Chrony Based On The Platform
+ConditionKernelCommandLine=|ignition.platform.id=azurestack
+ConditionKernelCommandLine=|ignition.platform.id=azure
+ConditionKernelCommandLine=|ignition.platform.id=aws
+ConditionKernelCommandLine=|ignition.platform.id=gcp
+Before=NetworkManager.service
+Before=chronyd.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-platform-chrony-config
+RemainAfterExit=yes
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
similarity index 79%
rename from overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
rename to overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index c917af2c0b..523583e0d6 100755
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system-generators/coreos-platform-chrony
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -3,7 +3,7 @@ set -euo pipefail
 # Configuring the timeserver for the platform is often handled
 # by pre-baking a config into a particular image for a platform, but
 # that doesn't work for us because we have a single update stream.  Hence
-# this generator dynamically inspects the platform and reconfigures chrony.
+# this service dynamically inspects the platform and reconfigures chrony.
 #
 # AWS: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html
 # Azure: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/time-sync
@@ -11,29 +11,28 @@ set -euo pipefail
 #
 # Originally spawned from discussion in https://github.com/openshift/installer/pull/3513
 
-. /usr/lib/coreos/generator-lib.sh
+self=$(basename "$0")
 
-self=$(basename $0)
-confpath=/run/coreos-platform-chrony.conf
-
-platform=$(karg ignition.platform.id)
-case "${platform}" in
-    azure|azurestack|aws|gcp) ;;  # OK, this is a platform we know how to support
-    *) exit 0 ;;
-esac
-
-# Exit early if we have already been run once
-if [[ -f "${confpath}" ]]; then
-    echo "$self: ${confpath} already exists; skipping"
-    exit 0
-fi
-
-# Exit early if chrony configuration as been changed from the image default
+# Exit early if chrony configuration has been changed from the image default
 if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
     echo "$self: /etc/chrony.conf is modified; not changing the default"
     exit 0
 fi
 
+confpath=/run/coreos/platform-chrony.conf
+altenvfilepath=/run/coreos/sysconfig-chrony
+cmdline=( $(</proc/cmdline) )
+cmdline_arg() {
+    local name="$1" value
+    for arg in "${cmdline[@]}"; do
+        if [[ "${arg%%=*}" == "${name}" ]]; then
+            value="${arg#*=}"
+        fi
+    done
+    echo "${value}"
+}
+platform=$(cmdline_arg ignition.platform.id)
+
 # If not set already (by host customization or this script), set
 # PEERNTP=no so that DHCP-provided NTP servers are not added to chrony.
 # By doing this we assume the better NTP server choice is the
@@ -82,14 +81,11 @@ esac
 # Policy doesn't allow chronyd to read run_t
 chcon --reference=/etc/chrony.conf "${confpath}"
 
-UNIT_DIR="${1:-/tmp}"
 
-unitconfpath="${UNIT_DIR}/chronyd.service.d/coreos-platform-chrony.conf"
-mkdir -p $(dirname "${unitconfpath}")
-cat >"${unitconfpath}" << EOF
-[Service]
-ExecStart=
-ExecStart=/usr/sbin/chronyd -f ${confpath} \$OPTIONS
-EOF
+# Read in the existing $OPTIONS variable setting from /etc/sysconfig/chronyd
+# and write out a new $OPTIONS variable (with specified new configuration path)
+# to /etc/sysconfig/chronyd
+source /etc/sysconfig/chronyd
+echo "OPTIONS='${OPTIONS} -f ${confpath}'" > ${altenvfilepath}
 
 echo "$self: Updated chrony to use ${platform} configuration ${confpath}"
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions b/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
deleted file mode 100755
index 9c3015dee5..0000000000
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-generator-permissions
+++ /dev/null
@@ -1,14 +0,0 @@
-#!/bin/bash
-## kola:
-##   exclusive: false
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# See https://github.com/coreos/coreos-assembler/pull/1786
-path=/usr/lib/systemd/system-generators/coreos-platform-chrony
-mode=$(stat -c '%a' ${path})
-if test "${mode}" != 555; then
-    fatal "For path ${path} expected mode 555, found ${mode}"
-fi

From 636a7a7fccee037052fd74e7bea775fd9db94199 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Mar 2023 00:00:59 +0000
Subject: [PATCH 1482/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/404/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 39 ++++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 39 ++++++++++++++++++++------------------
 manifest-lock.s390x.json   | 39 ++++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 37 +++++++++++++++++++-----------------
 4 files changed, 83 insertions(+), 71 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 75333e9389..f1704c9e71 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.199.0-1.fc37.noarch"
+      "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.aarch64"
@@ -372,6 +372,9 @@
     "glibc-common": {
       "evra": "2.36-9.fc37.aarch64"
     },
+    "glibc-gconv-extra": {
+      "evra": "2.36-9.fc37.aarch64"
+    },
     "glibc-minimal-langpack": {
       "evra": "2.36-9.fc37.aarch64"
     },
@@ -382,7 +385,7 @@
       "evra": "2.3.8-1.fc37.aarch64"
     },
     "gnutls": {
-      "evra": "3.8.0-1.fc37.aarch64"
+      "evra": "3.8.0-2.fc37.aarch64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.aarch64"
@@ -742,7 +745,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-1.fc37.aarch64"
+      "evra": "2:4.17.5-2.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -808,7 +811,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-1.fc37.aarch64"
+      "evra": "2:4.17.5-2.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -991,10 +994,10 @@
       "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "5:4.4.1-3.fc37.aarch64"
+      "evra": "5:4.4.2-2.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-3.fc37.aarch64"
+      "evra": "5:4.4.2-2.fc37.aarch64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.aarch64"
@@ -1024,13 +1027,13 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-13.fc37.aarch64"
+      "evra": "2:7.0.0-14.fc37.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc37.aarch64"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.fc37.aarch64"
+      "evra": "1.2.6-3.rc2.fc37.aarch64"
     },
     "rpm": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1054,13 +1057,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-1.fc37.aarch64"
+      "evra": "2:4.17.5-2.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-1.fc37.noarch"
+      "evra": "2:4.17.5-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-1.fc37.aarch64"
+      "evra": "2:4.17.5-2.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1147,7 +1150,7 @@
       "evra": "1.16-2.fc37.aarch64"
     },
     "sudo": {
-      "evra": "1.9.12-1.p2.fc37.aarch64"
+      "evra": "1.9.13-1.p2.fc37.aarch64"
     },
     "systemd": {
       "evra": "251.11-2.fc37.aarch64"
@@ -1195,10 +1198,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1307-1.fc37.noarch"
+      "evra": "2:9.0.1367-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1307-1.fc37.aarch64"
+      "evra": "2:9.0.1367-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-35.fc37.aarch64"
@@ -1222,7 +1225,7 @@
       "evra": "2.1.0-19.fc37.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.2.4-1.fc37.aarch64"
+      "evra": "1.3.0-1.fc37.aarch64"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.aarch64"
@@ -1238,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-03T00:00:00Z",
+    "generated": "2023-03-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-01T22:23:54Z"
+        "generated": "2023-03-03T22:38:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-03T02:20:03Z"
+        "generated": "2023-03-06T02:03:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c4a26eefd3..1e142bcb33 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.199.0-1.fc37.noarch"
+      "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.ppc64le"
@@ -363,6 +363,9 @@
     "glibc-common": {
       "evra": "2.36-9.fc37.ppc64le"
     },
+    "glibc-gconv-extra": {
+      "evra": "2.36-9.fc37.ppc64le"
+    },
     "glibc-minimal-langpack": {
       "evra": "2.36-9.fc37.ppc64le"
     },
@@ -373,7 +376,7 @@
       "evra": "2.3.8-1.fc37.ppc64le"
     },
     "gnutls": {
-      "evra": "3.8.0-1.fc37.ppc64le"
+      "evra": "3.8.0-2.fc37.ppc64le"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.ppc64le"
@@ -742,7 +745,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-1.fc37.ppc64le"
+      "evra": "2:4.17.5-2.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -808,7 +811,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-1.fc37.ppc64le"
+      "evra": "2:4.17.5-2.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -991,10 +994,10 @@
       "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "5:4.4.1-3.fc37.ppc64le"
+      "evra": "5:4.4.2-2.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-3.fc37.ppc64le"
+      "evra": "5:4.4.2-2.fc37.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.ppc64le"
@@ -1030,13 +1033,13 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-13.fc37.ppc64le"
+      "evra": "2:7.0.0-14.fc37.ppc64le"
     },
     "readline": {
       "evra": "8.2-2.fc37.ppc64le"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.fc37.ppc64le"
+      "evra": "1.2.6-3.rc2.fc37.ppc64le"
     },
     "rpm": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1060,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-1.fc37.ppc64le"
+      "evra": "2:4.17.5-2.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.5-1.fc37.noarch"
+      "evra": "2:4.17.5-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-1.fc37.ppc64le"
+      "evra": "2:4.17.5-2.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1153,7 +1156,7 @@
       "evra": "1.16-2.fc37.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.12-1.p2.fc37.ppc64le"
+      "evra": "1.9.13-1.p2.fc37.ppc64le"
     },
     "systemd": {
       "evra": "251.11-2.fc37.ppc64le"
@@ -1201,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1307-1.fc37.noarch"
+      "evra": "2:9.0.1367-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1307-1.fc37.ppc64le"
+      "evra": "2:9.0.1367-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-35.fc37.ppc64le"
@@ -1228,7 +1231,7 @@
       "evra": "2.1.0-19.fc37.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.2.4-1.fc37.ppc64le"
+      "evra": "1.3.0-1.fc37.ppc64le"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.ppc64le"
@@ -1244,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-03T00:00:00Z",
+    "generated": "2023-03-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-01T22:24:26Z"
+        "generated": "2023-03-03T22:37:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-03T02:20:16Z"
+        "generated": "2023-03-06T02:03:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3f69c85b58..626ff91782 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.199.0-1.fc37.noarch"
+      "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.s390x"
@@ -348,6 +348,9 @@
     "glibc-common": {
       "evra": "2.36-9.fc37.s390x"
     },
+    "glibc-gconv-extra": {
+      "evra": "2.36-9.fc37.s390x"
+    },
     "glibc-minimal-langpack": {
       "evra": "2.36-9.fc37.s390x"
     },
@@ -358,7 +361,7 @@
       "evra": "2.3.8-1.fc37.s390x"
     },
     "gnutls": {
-      "evra": "3.8.0-1.fc37.s390x"
+      "evra": "3.8.0-2.fc37.s390x"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.s390x"
@@ -691,7 +694,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-1.fc37.s390x"
+      "evra": "2:4.17.5-2.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -754,7 +757,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-1.fc37.s390x"
+      "evra": "2:4.17.5-2.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -925,10 +928,10 @@
       "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "5:4.4.1-3.fc37.s390x"
+      "evra": "5:4.4.2-2.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-3.fc37.s390x"
+      "evra": "5:4.4.2-2.fc37.s390x"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.s390x"
@@ -958,13 +961,13 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-13.fc37.s390x"
+      "evra": "2:7.0.0-14.fc37.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc37.s390x"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.fc37.s390x"
+      "evra": "1.2.6-3.rc2.fc37.s390x"
     },
     "rpm": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -991,13 +994,13 @@
       "evra": "2:2.25.0-4.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-1.fc37.s390x"
+      "evra": "2:4.17.5-2.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.5-1.fc37.noarch"
+      "evra": "2:4.17.5-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-1.fc37.s390x"
+      "evra": "2:4.17.5-2.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1078,7 +1081,7 @@
       "evra": "1.16-2.fc37.s390x"
     },
     "sudo": {
-      "evra": "1.9.12-1.p2.fc37.s390x"
+      "evra": "1.9.13-1.p2.fc37.s390x"
     },
     "systemd": {
       "evra": "251.11-2.fc37.s390x"
@@ -1129,10 +1132,10 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1307-1.fc37.noarch"
+      "evra": "2:9.0.1367-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1307-1.fc37.s390x"
+      "evra": "2:9.0.1367-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-35.fc37.s390x"
@@ -1156,7 +1159,7 @@
       "evra": "2.1.0-19.fc37.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.2.4-1.fc37.s390x"
+      "evra": "1.3.0-1.fc37.s390x"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.s390x"
@@ -1172,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-03T00:00:00Z",
+    "generated": "2023-03-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-01T22:23:44Z"
+        "generated": "2023-03-03T22:37:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-03T02:20:22Z"
+        "generated": "2023-03-06T02:03:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 27a1df7bbd..11f06c45e9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.199.0-1.fc37.noarch"
+      "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.15-1.fc37.x86_64"
@@ -372,6 +372,9 @@
     "glibc-common": {
       "evra": "2.36-9.fc37.x86_64"
     },
+    "glibc-gconv-extra": {
+      "evra": "2.36-9.fc37.x86_64"
+    },
     "glibc-minimal-langpack": {
       "evra": "2.36-9.fc37.x86_64"
     },
@@ -382,7 +385,7 @@
       "evra": "2.3.8-1.fc37.x86_64"
     },
     "gnutls": {
-      "evra": "3.8.0-1.fc37.x86_64"
+      "evra": "3.8.0-2.fc37.x86_64"
     },
     "gpgme": {
       "evra": "1.17.0-4.fc37.x86_64"
@@ -748,7 +751,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-1.fc37.x86_64"
+      "evra": "2:4.17.5-2.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -817,7 +820,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-1.fc37.x86_64"
+      "evra": "2:4.17.5-2.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -1003,10 +1006,10 @@
       "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "5:4.4.1-3.fc37.x86_64"
+      "evra": "5:4.4.2-2.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.1-3.fc37.x86_64"
+      "evra": "5:4.4.2-2.fc37.x86_64"
     },
     "policycoreutils": {
       "evra": "3.4-6.fc37.x86_64"
@@ -1039,7 +1042,7 @@
       "evra": "8.2-2.fc37.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.fc37.x86_64"
+      "evra": "1.2.6-3.rc2.fc37.x86_64"
     },
     "rpm": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1063,13 +1066,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-1.fc37.x86_64"
+      "evra": "2:4.17.5-2.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-1.fc37.noarch"
+      "evra": "2:4.17.5-2.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-1.fc37.x86_64"
+      "evra": "2:4.17.5-2.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1156,7 +1159,7 @@
       "evra": "1.16-2.fc37.x86_64"
     },
     "sudo": {
-      "evra": "1.9.12-1.p2.fc37.x86_64"
+      "evra": "1.9.13-1.p2.fc37.x86_64"
     },
     "systemd": {
       "evra": "251.11-2.fc37.x86_64"
@@ -1204,10 +1207,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1307-1.fc37.noarch"
+      "evra": "2:9.0.1367-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1307-1.fc37.x86_64"
+      "evra": "2:9.0.1367-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-35.fc37.x86_64"
@@ -1231,7 +1234,7 @@
       "evra": "2.1.0-19.fc37.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.2.4-1.fc37.x86_64"
+      "evra": "1.3.0-1.fc37.x86_64"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.x86_64"
@@ -1247,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-03T00:00:00Z",
+    "generated": "2023-03-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-01T22:24:52Z"
+        "generated": "2023-03-03T22:38:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-03T02:20:29Z"
+        "generated": "2023-03-06T02:03:30Z"
       }
     }
   }

From d74ac7e713be9b3d4ff83bbc7dea48104072a0ca Mon Sep 17 00:00:00 2001
From: Adam0Brien <aobrien@redhat.com>
Date: Fri, 17 Feb 2023 12:30:04 +0000
Subject: [PATCH 1483/2157] F38 Changes: Kola test for shorter shutdown timer

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1404
---
 tests/kola/systemd/data/commonlib.sh     |  1 +
 tests/kola/systemd/default-unit-timeouts | 52 ++++++++++++++++++++++++
 2 files changed, 53 insertions(+)
 create mode 120000 tests/kola/systemd/data/commonlib.sh
 create mode 100755 tests/kola/systemd/default-unit-timeouts

diff --git a/tests/kola/systemd/data/commonlib.sh b/tests/kola/systemd/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/systemd/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
new file mode 100755
index 0000000000..5b18fe311b
--- /dev/null
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -0,0 +1,52 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+#
+# Checks if default shutdown time is 1m 30s
+#
+# See: https://github.com/coreos/fedora-coreos-tracker/issues/1404
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+DefaultTimeoutStartUSec=$(systemctl show --value --property=DefaultTimeoutStartUSec)
+DefaultTimeoutStopUSec=$(systemctl show --value --property=DefaultTimeoutStopUSec)
+DefaultTimeoutAbortUSec=$(systemctl show --value --property=DefaultTimeoutAbortUSec)
+DefaultDeviceTimeoutUSec=$(systemctl show --value --property=DefaultDeviceTimeoutUSec)
+
+error="DefaultTimeoutStartUsec=$DefaultTimeoutStartUSec DefaultTimeoutStopUSec=$DefaultTimeoutStopUSec DefaultTimeoutAbortUSec=$DefaultTimeoutAbortUSec DefaultDeviceTimeoutUSec=$DefaultDeviceTimeoutUSec"
+timeout="1min 30s"
+
+systemd_version=$(rpm -q --queryformat '%{VERSION}' systemd)
+required_version="252.4"
+
+# Verify that the timeouts are 1 minute and 30 seconds (90 seconds)
+
+if [[ "$DefaultTimeoutStartUSec" == "$timeout" ]]; then
+    ok "The default start timeout is 1m 30 seconds."
+else
+    fatal $error
+fi
+
+if [[ $DefaultTimeoutStopUSec == "$timeout" ]]; then
+    ok "The default stop timeout is 1m 30 seconds."
+else
+    fatal $error
+fi
+
+if [[ $DefaultTimeoutAbortUSec == "$timeout" ]]; then
+    ok "The default abort timeout time is 1m 30 seconds."
+else
+    fatal $error
+fi
+
+if [[ "${systemd_version}" == "${required_version}" || "${systemd_version}" > "${required_version}" ]]; then
+    if [[ $DefaultDeviceTimeoutUSec == "$timeout" ]]; then
+        ok "The default device timeout is 1m 30 seconds."
+    else
+        fatal $error
+    fi
+else
+    ok "This variable is not available in the current systemd version"
+fi

From 49792bf32e1291548fa5fd1d9c5b584bc57e158d Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 7 Mar 2023 08:19:52 -0800
Subject: [PATCH 1484/2157] platform-chrony: Make /run/coreos dir so we can
 create platform-chrony.conf

---
 .../20platform-chrony/usr/libexec/coreos-platform-chrony-config  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index 523583e0d6..4f69312f74 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -19,6 +19,7 @@ if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
     exit 0
 fi
 
+mkdir -p /run/coreos
 confpath=/run/coreos/platform-chrony.conf
 altenvfilepath=/run/coreos/sysconfig-chrony
 cmdline=( $(</proc/cmdline) )

From ef4afa35c816349c5fc99f5fe806bdc89ed14d86 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 7 Mar 2023 00:03:21 -0500
Subject: [PATCH 1485/2157] tests/kola: add version comparison functions to
 commonlib.sh

Leveraging these functions will make it easier to do comparision
checks inside of our tests.

Specifically for RPM version comparisons something like
/usr/bin/rpmdev-vercmp would be better but that would require
having rpmdevtools installed in FCOS, which we don't have.

In this commit we go ahead and update the ext.config.systemd.default-unit-timeouts
test to use one of the new functions.
---
 tests/kola/data/commonlib.sh             | 28 ++++++++++++++++++++++++
 tests/kola/systemd/default-unit-timeouts |  2 +-
 2 files changed, 29 insertions(+), 1 deletion(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index ff840cd59e..35482770ec 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -86,3 +86,31 @@ is_service_active() {
     # return actual result
     systemctl is-active "${service}"
 }
+
+## Some functions to support version comparison
+# Returns true iff $1 is equal to $2
+vereq() {
+    [ "$1" == "$2" ]
+}
+
+# Returns true iff $1 is less than $2
+verlt() {
+    vereq $1 $2 && return 1
+    local lowest="$(echo -e "$1\n$2" | sort -V | head -n 1)"
+    [ "$1" == "$lowest" ]
+}
+
+# Returns true iff $1 is less than or equal to $2
+verlte() {
+    vereq $1 $2 || verlt $1 $2
+}
+
+# Returns true iff $1 is greater than to $2
+vergt() {
+    ! verlte $1 $2
+}
+
+# Returns true iff $1 is greater than or equal to $2
+vergte() {
+    vereq $1 $2 || vergt $1 $2
+}
diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index 5b18fe311b..2d94e3353a 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -41,7 +41,7 @@ else
     fatal $error
 fi
 
-if [[ "${systemd_version}" == "${required_version}" || "${systemd_version}" > "${required_version}" ]]; then
+if vergte "${systemd_version}" "${required_version}"; then
     if [[ $DefaultDeviceTimeoutUSec == "$timeout" ]]; then
         ok "The default device timeout is 1m 30 seconds."
     else

From c7e9c4dd4cc05b5ac403f2b2cdd621cc7ffd1636 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 7 Mar 2023 12:24:27 -0500
Subject: [PATCH 1486/2157] tests/kola: mark systemd.default-unit-timeouts as
 platform-independent

It should be the same everywhere.
---
 tests/kola/systemd/default-unit-timeouts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index 2d94e3353a..cfb78dc2ba 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   tags: "platform-independent"
 #
 # Checks if default shutdown time is 1m 30s
 #

From cdfce18ffdee3939a2c82cf42f2e9bf476ccf787 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 7 Mar 2023 12:25:04 -0500
Subject: [PATCH 1487/2157] tests/kola: break up long line in
 systemd.default-unit-timeouts

---
 tests/kola/systemd/default-unit-timeouts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index cfb78dc2ba..c04dc17ab6 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -16,7 +16,10 @@ DefaultTimeoutStopUSec=$(systemctl show --value --property=DefaultTimeoutStopUSe
 DefaultTimeoutAbortUSec=$(systemctl show --value --property=DefaultTimeoutAbortUSec)
 DefaultDeviceTimeoutUSec=$(systemctl show --value --property=DefaultDeviceTimeoutUSec)
 
-error="DefaultTimeoutStartUsec=$DefaultTimeoutStartUSec DefaultTimeoutStopUSec=$DefaultTimeoutStopUSec DefaultTimeoutAbortUSec=$DefaultTimeoutAbortUSec DefaultDeviceTimeoutUSec=$DefaultDeviceTimeoutUSec"
+error="DefaultTimeoutStartUsec=$DefaultTimeoutStartUSec "
+error+="DefaultTimeoutStopUSec=$DefaultTimeoutStopUSec "
+error+="DefaultTimeoutAbortUSec=$DefaultTimeoutAbortUSec "
+error+="DefaultDeviceTimeoutUSec=$DefaultDeviceTimeoutUSec"
 timeout="1min 30s"
 
 systemd_version=$(rpm -q --queryformat '%{VERSION}' systemd)

From eea65d96ce6c9834a392e34b851d1cd71714f396 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Mar 2023 23:51:26 +0000
Subject: [PATCH 1488/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/408/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f1704c9e71..c1361a4d4d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1153,22 +1153,22 @@
       "evra": "1.9.13-1.p2.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.11-2.fc37.aarch64"
+      "evra": "251.13-4.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1241,16 +1241,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-06T00:00:00Z",
+    "generated": "2023-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-03T22:38:31Z"
+        "generated": "2023-03-07T21:16:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-06T02:03:05Z"
+        "generated": "2023-03-07T01:24:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1e142bcb33..0e83e5f680 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1159,22 +1159,22 @@
       "evra": "1.9.13-1.p2.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.11-2.fc37.ppc64le"
+      "evra": "251.13-4.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-06T00:00:00Z",
+    "generated": "2023-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-03T22:37:41Z"
+        "generated": "2023-03-07T21:15:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-06T02:03:18Z"
+        "generated": "2023-03-07T01:24:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 626ff91782..d5fae9a260 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1084,22 +1084,22 @@
       "evra": "1.9.13-1.p2.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.11-2.fc37.s390x"
+      "evra": "251.13-4.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-06T00:00:00Z",
+    "generated": "2023-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-03T22:37:28Z"
+        "generated": "2023-03-07T21:15:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-06T02:03:24Z"
+        "generated": "2023-03-07T01:25:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 11f06c45e9..cb1612ef1f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1162,22 +1162,22 @@
       "evra": "1.9.13-1.p2.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.11-2.fc37.x86_64"
+      "evra": "251.13-4.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-06T00:00:00Z",
+    "generated": "2023-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-03T22:38:34Z"
+        "generated": "2023-03-07T21:17:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-06T02:03:30Z"
+        "generated": "2023-03-07T01:25:09Z"
       }
     }
   }

From 704b640d47624fe5987170e00fdd94b69ec5ca90 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 7 Mar 2023 17:26:18 -0500
Subject: [PATCH 1489/2157] denylist: bump snooze for
 files.file-directory-permissions

The systemd package in F38 (next-devel/branched) is frozen right
now so we won't get the fix for this until after beta is released.
Let's snooze again for now.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 515c4210be..6713bc2411 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -51,11 +51,11 @@
     - rawhide
 - pattern: ext.config.files.file-directory-permissions
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1427
-  snooze: 2023-03-08
+  snooze: 2023-03-20
   streams:
-    - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
   snooze: 2023-03-08

From 7bb42e400c593249ac498a73ceb5d7d24957ed75 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 2 Mar 2023 20:27:53 +0800
Subject: [PATCH 1490/2157] transposefs: add new workaround using try in loop

Seems the previous workaround https://github.com/coreos/fedora-coreos-config/pull/2226
can not completely resolve the race issue, try in loop with a
small sleep for el9 + !x86_64.
---
 .../ignition-ostree-transposefs.sh            | 20 ++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 4d1754e0dd..9ec484c88c 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -294,14 +294,28 @@ case "${1:-}" in
         if [ -d "${saved_data}" ]; then
             read dev < "${zram_dev}"
             umount "${saved_data}"
+            rm -rf "${saved_data}" "${partstate_root}"
             # After unmounting, make sure zram device state is stable before we remove it.
             # See https://github.com/openshift/os/issues/1149
             # Should remove when https://bugzilla.redhat.com/show_bug.cgi?id=2172058 is fixed.
+            # Seems the previous workaround https://github.com/coreos/fedora-coreos-config/pull/2226
+            # can not completely resolve the race issue, try in loop with a small sleep for el9 + !x86_64.
             if [ $(uname -m) != x86_64 ] && is_rhcos9; then
-                udevadm trigger --settle "/dev/zram${dev}"
+                for x in {0..10}; do
+                    if ! echo "${dev}" > /sys/class/zram-control/hot_remove 2>/dev/null; then
+                        sleep 0.1
+                    else
+                        dev=
+                        break
+                    fi
+                done
+                # try it one last time and let it possibly fail
+                if [ -n "${dev}" ]; then
+                    echo "${dev}" > /sys/class/zram-control/hot_remove
+                fi
+            else
+                echo "${dev}" > /sys/class/zram-control/hot_remove
             fi
-            rm -rf "${saved_data}" "${partstate_root}"
-            echo "${dev}" > /sys/class/zram-control/hot_remove
         fi
         ;;
     *)

From f00040e1616ef244dfe622cad50b876d8087039e Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Thu, 2 Mar 2023 15:18:28 +0000
Subject: [PATCH 1491/2157] tests/kola/selinux/enforcing: Enhance SELinux mode
 test

See: https://github.com/coreos/coreos-assembler/issues/3369
See: https://github.com/coreos/coreos-assembler/pull/3373
See: https://github.com/coreos/fedora-coreos-config/issues/2266
---
 tests/kola/selinux/enforcing | 51 +++++++++++++++++++++++++++++++-----
 1 file changed, 44 insertions(+), 7 deletions(-)

diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index abb3ab3ba9..86bc4da654 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -1,14 +1,51 @@
 #!/bin/bash
 ## kola:
-##   exclusive: false
+##   exclusive: true
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# SELinux should be on
-enforce=$(getenforce)
-if [ "${enforce}" != "Enforcing" ]; then
-    fatal "Error: Expected SELinux Enforcing, found ${enforce}"
-fi
-ok "selinux is Enforcing"
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+    # SELinux should be on
+    enforce=$(getenforce)
+    if [ "${enforce}" != "Enforcing" ]; then
+      fatal "Error: Expected SELinux Enforcing, found ${enforce}"
+    fi
+    ok "SELinux is Enforcing"
+
+    # Check SELinux switches to Permissive mode
+    setenforce 0
+    enforce=$(getenforce)
+    if [ "${enforce}" != "Permissive" ]; then
+      fatal "Error: Expected SELinux Permissive, found ${enforce}"
+    fi
+    ok "SELinux is Permissive"
+
+    # Check SELinux switches back to Enforcing mode
+    setenforce 1
+    enforce=$(getenforce)
+    if [ "${enforce}" != "Enforcing" ]; then
+      fatal "Error: Expected SELinux Enforcing, found ${enforce}"
+    fi
+    ok "SELinux is Enforcing"
+
+    # Modify config to permanently switch to permissive
+    sed -i 's/SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config
+    ok "First boot"
+    /tmp/autopkgtest-reboot rebooted
+    ;;
+  rebooted)
+    # check SELinux is in permissive mode
+    enforce=$(getenforce)  
+    if [ "${enforce}" != "Permissive" ]; then
+      fatal "Error: Expected SELinux Permissive, found ${enforce}"
+    fi
+    ok "SELinux is Permissive"
+    ok "Second boot"
+    ;;
+  *) 
+    fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"
+    ;;
+esac

From e395b458f77aa195136e73481071ea4433659b78 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 8 Mar 2023 05:51:34 -0800
Subject: [PATCH 1492/2157] denylist: bump snooze for kdump.crash

---
 kola-denylist.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6713bc2411..40e69701b0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -58,10 +58,11 @@
     - next
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-03-08
+  snooze: 2023-03-22
   arches:
     - aarch64
   streams:
     - rawhide
     - branched
     - next-devel
+    - next

From 423235a7b1b8ced48511ca5ae6161cbe04f82126 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 8 Mar 2023 10:23:49 -0800
Subject: [PATCH 1493/2157] denylist: drop extensions.module from denylist Ref:
 https://github.com/coreos/fedora-coreos-tracker/issues/1420#issuecomment-1460646570

---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 40e69701b0..09f570c5d5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -44,11 +44,6 @@
 - pattern: ext.config.platforms.aws.nvme
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1426106534
   snooze: 2023-03-10
-- pattern: ext.config.extensions.module
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1420
-  snooze: 2023-03-08
-  streams:
-    - rawhide
 - pattern: ext.config.files.file-directory-permissions
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1427
   snooze: 2023-03-20

From d4660be52ce35afbbcfc54c2ee435789b2f9b24a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 8 Mar 2023 16:43:48 -0500
Subject: [PATCH 1494/2157] tests/kola: add test for custom SSH host key with
 mode 640

Exclude the embedded SSH private key from Red Hat secret scanning.

For https://github.com/coreos/fedora-coreos-tracker/issues/1394.
---
 .gitleaks.toml                                |  5 ++
 .../ssh/custom-host-key-permissions/config.bu | 56 +++++++++++++++++++
 .../data/commonlib.sh                         |  1 +
 .../ssh/custom-host-key-permissions/test.sh   | 33 +++++++++++
 4 files changed, 95 insertions(+)
 create mode 100644 .gitleaks.toml
 create mode 100644 tests/kola/ssh/custom-host-key-permissions/config.bu
 create mode 120000 tests/kola/ssh/custom-host-key-permissions/data/commonlib.sh
 create mode 100755 tests/kola/ssh/custom-host-key-permissions/test.sh

diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000000..ca5e283ce8
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,5 @@
+[allowlist]
+description = "Exclude test keys from Red Hat secret scanning"
+files = [
+    ".*custom-host-key-permissions.*",
+]
diff --git a/tests/kola/ssh/custom-host-key-permissions/config.bu b/tests/kola/ssh/custom-host-key-permissions/config.bu
new file mode 100644
index 0000000000..edb2977afe
--- /dev/null
+++ b/tests/kola/ssh/custom-host-key-permissions/config.bu
@@ -0,0 +1,56 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/ssh-host-key
+      mode: 0640
+      group:
+        name: ssh_keys
+      contents:
+        inline: |
+          -----BEGIN OPENSSH PRIVATE KEY-----
+          b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn
+          NhAAAAAwEAAQAAAYEAkJuYAEhET69RcKmN45holIk3HbzNs3hM4tBofA9R/dw5EMoUd6BY
+          SXHV0QqMGYjS2UqICG/zKrYMWY6uBjL/Xq7aiezZ4AaVNNDyFNHuY9Or0/W1j50JhEBDJc
+          e7rjRPtb7jGtHNdioTftdvb2UQQWm0Ko8krndPZqNd/zNXDEYtBoMjxOLYgt88BDdIKXD1
+          w0/3GdLysQdrzIsnomYhgQlVmxE3VRhTAYUgTuKVDPO33OmuA8LE8wUH9PwV3yfB4x470E
+          bT/8c9y/tgFtGtrTT0IERrU9rXmA9ZPKVBHMbpCghGcMmdatlzibOZInQ3FlUvNFn4HDVx
+          r6ZZS8ZCOPwjVrx50LbVvUHw6/tv8jrojpkW3HL9RkU49RiHpG72/Y1umIPWaWjGtLqRCj
+          iWGkl0Pjxs/OkkizRL39hzbRszypBMSeKU7/QsPLuiSj8mI5s6fm7tKp8sCQydy2k4BBiq
+          o801KWo3V+q5X2Ly1g20T1WsHPl6ohISu15ln1KrAAAFiPA9CfnwPQn5AAAAB3NzaC1yc2
+          EAAAGBAJCbmABIRE+vUXCpjeOYaJSJNx28zbN4TOLQaHwPUf3cORDKFHegWElx1dEKjBmI
+          0tlKiAhv8yq2DFmOrgYy/16u2ons2eAGlTTQ8hTR7mPTq9P1tY+dCYRAQyXHu640T7W+4x
+          rRzXYqE37Xb29lEEFptCqPJK53T2ajXf8zVwxGLQaDI8Ti2ILfPAQ3SClw9cNP9xnS8rEH
+          a8yLJ6JmIYEJVZsRN1UYUwGFIE7ilQzzt9zprgPCxPMFB/T8Fd8nweMeO9BG0//HPcv7YB
+          bRra009CBEa1Pa15gPWTylQRzG6QoIRnDJnWrZc4mzmSJ0NxZVLzRZ+Bw1ca+mWUvGQjj8
+          I1a8edC21b1B8Ov7b/I66I6ZFtxy/UZFOPUYh6Ru9v2NbpiD1mloxrS6kQo4lhpJdD48bP
+          zpJIs0S9/Yc20bM8qQTEnilO/0LDy7oko/JiObOn5u7SqfLAkMnctpOAQYqqPNNSlqN1fq
+          uV9i8tYNtE9VrBz5eqISErteZZ9SqwAAAAMBAAEAAAGANMdNNYEqyYib6UpBGrnkJZ5lKu
+          nfi+rS6Q+WqvzueICZpVqUGMtBneC54NeAJcut5RfSSX4Omt6h6EfulR2k3fpkkeWL6buN
+          Vp8SU+4BG5dEhhKOZzGyKP5JY68f/WdjVlqqyf2cB045Gljn95jD05QQaV4gTbsHFFd49a
+          1XzoeIZHGVqwT+b9mpLoK8yD9Nu7DiZ5757Ang2uFJIHk1LkLpZzTj5J+BoDLmBVSmgPks
+          +KijVgUO3AHQkyY0l2OLUGlTqdT2vOSehu+a2+oCEMt38NeoSz5B2vMxPYwC1fbCyxELso
+          J8z6NgJGdGdJ2TNz+nTOycKp8Wm0Lq5ze3UnGOBRfJigfhrLSPVkq2Q6zR8CR85h3wvWjU
+          Kp6BLkoX6wO3KRCkpU5m63JWpFz8LVUUUT3/afxl31Qe0y6tmq1MlZ2WwdZgPGau2xm6G7
+          jWxK27ZJ1PR2UacFFXeHFAZyGmvpLArQQ2sFZUXhrujWhtc9UUXaieCx7AktobkZ3FAAAA
+          wCvP6W7p7M87EsoamwOZ9hChjJr9bhHquc11nm1CCk1WoquCJwBzLY+einj/Sjk6QxKu2C
+          AxqJrKAu1B93EBU5ZXNnqax0jcbO8xBeiiqlP05o4RpM6iw/kIwQ9GINjxBh0/u16IRmJx
+          /50TCu9iTxmtMOTRq+qFlNZqA//3qnpFBRCa/lKwhkn4nNOa9d+XZbD7arVDpR6omAkbnc
+          1skzzwVDuvECHnij4c+fOIMOmub0KShBLB2A5Ig+d8jU8PzgAAAMEAxZ956C+NO0O452Ax
+          Rx4jDAdOQR8Z/zj79oU2WWWrjpkjQPq82XLX3S4ZJJieW6+olSr43+6JGOeIRJRGOqvsAd
+          xnKfapFQyb45Jitgj3lnkezaauEbbjRdJze5q+wXZfOiq/xbn0racw1d7AS0USsWeljNb1
+          BET+XXv/dEth0/SPzDxfWigd0sJW/xhVvxj1O+STg0IvWSda4l1FgQSbNiUMKSt5NFx/S5
+          xtIqLL7+1Vwvzji47MEze4Bjfw3gTlAAAAwQC7UwljKIn3GHkQ6dPW3j1X2A6Xymy5kU4s
+          SYG98R/87Cx/7eiXhjZ1cS0i235VYm6XZUCdNXGOwYuTDL4q0eKltwLHM7wRgBfXja5yzS
+          kQeAkXhU/zPYd62lK/vbwT7VDBgtec+8p6L7kdnv9Ejio6KELCQp6R+pcExv8xSUfubhUw
+          p6BVaBu3biDjiZbWAOSIDHF5rqk6yxGU1oz3MFvg7psyQBeQHm8kQ2qcpHJZL0Czi2uoEa
+          JluaUsyXI/kE8AAAARYmdpbGJlcnRAc2lyeXN0ZXMBAg==
+          -----END OPENSSH PRIVATE KEY-----
+    - path: /etc/ssh-host-key.pub
+      mode: 0644
+      contents:
+        inline: ssh-rsa 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
+    - path: /etc/ssh/sshd_config.d/80-hostkey.conf
+      mode: 0600
+      contents:
+        inline: HostKey /etc/ssh-host-key
diff --git a/tests/kola/ssh/custom-host-key-permissions/data/commonlib.sh b/tests/kola/ssh/custom-host-key-permissions/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/ssh/custom-host-key-permissions/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ssh/custom-host-key-permissions/test.sh b/tests/kola/ssh/custom-host-key-permissions/test.sh
new file mode 100755
index 0000000000..b6f2360df1
--- /dev/null
+++ b/tests/kola/ssh/custom-host-key-permissions/test.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+## kola:
+##   tags: platform-independent
+#
+# Check that sshd still works with a custom host key with mode 640 and
+# group ssh_keys
+# https://github.com/coreos/fedora-coreos-tracker/issues/1394
+# https://src.fedoraproject.org/rpms/openssh/pull-request/37
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# recent Fedora sshd binaries will fail to start if all configured host keys
+# have mode > 600 and their modes haven't automatically been fixed
+# that part is implicitly tested by kola, which needs sshd to connect
+
+# make sure our key was actually used
+# grep -q causes sshd -T to fail on SIGPIPE
+if ! sshd -T | grep "^hostkey /etc/ssh-host-key$" >/dev/null; then
+    sshd -T
+    fatal "configured host key not used by sshd"
+fi
+ok "configured host key used by sshd"
+
+# sshd starts successfully if any keys are mode 600, which would invalidate
+# the test except that our HostKey directive should replace the default
+# keys.  verify this.
+if [[ $(sshd -T | grep "^hostkey " | wc -l) != 1 ]]; then
+    sshd -T | grep "^hostkey "
+    fatal "sshd uses multiple host keys"
+fi
+ok "sshd uses only the configured host key"

From 413b7dbd61363b7b434874c2e0a2434671994a41 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Thu, 9 Mar 2023 14:11:25 -0500
Subject: [PATCH 1495/2157] denylist: drop snoozes for Ignition spec bump

---
 kola-denylist.yaml | 26 +++++++++-----------------
 1 file changed, 9 insertions(+), 17 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 09f570c5d5..1bb3b54977 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -14,23 +14,15 @@
   arches:
     - ppc64le
 - pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-13
-  #tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  #arches:
-  #  - s390x
-  #streams:
-  #  - next-devel
-  #  - next
-  #  - testing-devel
-  #  - testing
-  #  - stable
-- pattern: ext.config.ignition.resource.authenticated-s3
-  tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-13
-- pattern: ext.config.butane.grub-users
-  tracker: https://github.com/coreos/ignition/pull/1558
-  snooze: 2023-03-13
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  arches:
+    - s390x
+  streams:
+    - next-devel
+    - next
+    - testing-devel
+    - testing
+    - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 4869ff4dd222b2924973b22b68ade78af0ddd3bb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 10 Mar 2023 16:46:22 +0000
Subject: [PATCH 1496/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/415/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 29 ++++++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 29 ++++++++++++++++-------------
 4 files changed, 58 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c1361a4d4d..20e5d0eb3c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.1.3-1.fc37.aarch64"
+      "evra": "6.2.1-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -262,13 +262,13 @@
       "evra": "38-6.fc37.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.188-3.fc37.noarch"
+      "evra": "0.189-1.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.188-3.fc37.aarch64"
+      "evra": "0.189-1.fc37.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.188-3.fc37.aarch64"
+      "evra": "0.189-1.fc37.aarch64"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc37.aarch64"
@@ -1153,22 +1153,25 @@
       "evra": "1.9.13-1.p2.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
+    },
+    "systemd-boot-unsigned": {
+      "evra": "251.13-5.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.13-4.fc37.aarch64"
+      "evra": "251.13-5.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1241,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-07T00:00:00Z",
+    "generated": "2023-03-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-07T21:16:20Z"
+        "generated": "2023-03-08T00:04:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-07T01:24:43Z"
+        "generated": "2023-03-10T01:18:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0e83e5f680..5c931d4969 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.1.3-1.fc37.ppc64le"
+      "evra": "6.2.1-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -253,13 +253,13 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.188-3.fc37.noarch"
+      "evra": "0.189-1.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.188-3.fc37.ppc64le"
+      "evra": "0.189-1.fc37.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.188-3.fc37.ppc64le"
+      "evra": "0.189-1.fc37.ppc64le"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc37.ppc64le"
@@ -1159,22 +1159,22 @@
       "evra": "1.9.13-1.p2.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.13-4.fc37.ppc64le"
+      "evra": "251.7-611.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-07T00:00:00Z",
+    "generated": "2023-03-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-07T21:15:47Z"
+        "generated": "2023-03-08T00:03:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-07T01:24:56Z"
+        "generated": "2023-03-10T01:18:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d5fae9a260..9419e98654 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.1.3-1.fc37.s390x"
+      "evra": "6.2.1-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -250,13 +250,13 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.188-3.fc37.noarch"
+      "evra": "0.189-1.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.188-3.fc37.s390x"
+      "evra": "0.189-1.fc37.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.188-3.fc37.s390x"
+      "evra": "0.189-1.fc37.s390x"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc37.s390x"
@@ -1084,22 +1084,22 @@
       "evra": "1.9.13-1.p2.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.13-4.fc37.s390x"
+      "evra": "251.7-611.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-07T00:00:00Z",
+    "generated": "2023-03-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-07T21:15:46Z"
+        "generated": "2023-03-08T00:04:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-07T01:25:03Z"
+        "generated": "2023-03-10T01:19:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cb1612ef1f..fa074ea3fd 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.1.3-1.fc37.x86_64"
+      "evra": "6.2.1-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -262,13 +262,13 @@
       "evra": "38-6.fc37.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.188-3.fc37.noarch"
+      "evra": "0.189-1.fc37.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.188-3.fc37.x86_64"
+      "evra": "0.189-1.fc37.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.188-3.fc37.x86_64"
+      "evra": "0.189-1.fc37.x86_64"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc37.x86_64"
@@ -1162,22 +1162,25 @@
       "evra": "1.9.13-1.p2.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
+    },
+    "systemd-boot-unsigned": {
+      "evra": "251.13-5.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.13-4.fc37.x86_64"
+      "evra": "251.13-5.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1250,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-07T00:00:00Z",
+    "generated": "2023-03-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-07T21:17:14Z"
+        "generated": "2023-03-08T00:04:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-07T01:25:09Z"
+        "generated": "2023-03-10T01:19:11Z"
       }
     }
   }

From 4991765d80b27b130076184dacc43a74d471867c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 10 Mar 2023 15:14:33 -0500
Subject: [PATCH 1497/2157] platforms.yaml: Add serial console information for
 KubeVirt platform.

---
 platforms.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/platforms.yaml b/platforms.yaml
index ae0ddf4d5d..8e615549bf 100644
--- a/platforms.yaml
+++ b/platforms.yaml
@@ -115,6 +115,18 @@ x86_64:
     kernel_arguments:
       - console=tty0
       - console=ttyS0,115200n8
+  kubevirt:
+    # No official docs on this for kubevirt. Requested some:
+    # https://github.com/kubevirt/kubevirt/issues/9400
+    # The web UI displays the VNC console first, so go with
+    # graphical console primary, serial console secondary.
+    grub_commands:
+      - serial --speed=115200
+      - terminal_input serial console
+      - terminal_output serial console
+    kernel_arguments:
+      - console=ttyS0,115200n8
+      - console=tty0
   openstack:
     # Graphical console primary, serial console available for logging
     # https://docs.openstack.org/diskimage-builder/latest/elements/bootloader/README.html

From 9f4120721011c9ed09a185c51d3aca3459754a6f Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 10 Mar 2023 17:29:09 -0500
Subject: [PATCH 1498/2157] denylist: drop snooze for
 ext.config.platforms.aws.nvme

Recent tests are passing. Hopefully the issue in the AWS environment
is fully resolved now.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1464560791
---
 kola-denylist.yaml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1bb3b54977..151c1cdc8e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -33,9 +33,6 @@
     - testing-devel
     - testing
     - stable
-- pattern: ext.config.platforms.aws.nvme
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1306#issuecomment-1426106534
-  snooze: 2023-03-10
 - pattern: ext.config.files.file-directory-permissions
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1427
   snooze: 2023-03-20

From 40dbe471a1d424aa024fabb2b910ce07b1a94317 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 12 Mar 2023 22:30:05 +0000
Subject: [PATCH 1499/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/421/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 20e5d0eb3c..108f51035a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.14-200.fc37.aarch64"
+      "evra": "6.1.15-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.14-200.fc37.aarch64"
+      "evra": "6.1.15-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.14-200.fc37.aarch64"
+      "evra": "6.1.15-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -745,7 +745,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-2.fc37.aarch64"
+      "evra": "2:4.17.6-0.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -811,7 +811,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-2.fc37.aarch64"
+      "evra": "2:4.17.6-0.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -931,7 +931,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.aarch64"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc37.aarch64"
+      "evra": "2.6.4-1.fc37.aarch64"
     },
     "openssh": {
       "evra": "8.8p1-7.fc37.aarch64"
@@ -1057,13 +1057,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-2.fc37.aarch64"
+      "evra": "2:4.17.6-0.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-2.fc37.noarch"
+      "evra": "2:4.17.6-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-2.fc37.aarch64"
+      "evra": "2:4.17.6-0.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1207,7 +1207,7 @@
       "evra": "2:9.0.1367-1.fc37.aarch64"
     },
     "which": {
-      "evra": "2.21-35.fc37.aarch64"
+      "evra": "2.21-39.fc37.aarch64"
     },
     "wireguard-tools": {
       "evra": "1.0.20210914-3.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-10T00:00:00Z",
+    "generated": "2023-03-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-08T00:04:54Z"
+        "generated": "2023-03-10T19:25:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-10T01:18:45Z"
+        "generated": "2023-03-12T00:36:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5c931d4969..dee7a96ea6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.14-200.fc37.ppc64le"
+      "evra": "6.1.15-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.14-200.fc37.ppc64le"
+      "evra": "6.1.15-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.14-200.fc37.ppc64le"
+      "evra": "6.1.15-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -745,7 +745,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-2.fc37.ppc64le"
+      "evra": "2:4.17.6-0.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -811,7 +811,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-2.fc37.ppc64le"
+      "evra": "2:4.17.6-0.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -928,7 +928,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc37.ppc64le"
+      "evra": "2.6.4-1.fc37.ppc64le"
     },
     "openssh": {
       "evra": "8.8p1-7.fc37.ppc64le"
@@ -1063,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-2.fc37.ppc64le"
+      "evra": "2:4.17.6-0.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.5-2.fc37.noarch"
+      "evra": "2:4.17.6-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-2.fc37.ppc64le"
+      "evra": "2:4.17.6-0.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1210,7 +1210,7 @@
       "evra": "2:9.0.1367-1.fc37.ppc64le"
     },
     "which": {
-      "evra": "2.21-35.fc37.ppc64le"
+      "evra": "2.21-39.fc37.ppc64le"
     },
     "wireguard-tools": {
       "evra": "1.0.20210914-3.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-10T00:00:00Z",
+    "generated": "2023-03-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-08T00:03:40Z"
+        "generated": "2023-03-10T19:24:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-10T01:18:58Z"
+        "generated": "2023-03-12T00:36:35Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9419e98654..685f3b8e12 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -448,13 +448,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.14-200.fc37.s390x"
+      "evra": "6.1.15-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.14-200.fc37.s390x"
+      "evra": "6.1.15-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.14-200.fc37.s390x"
+      "evra": "6.1.15-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -694,7 +694,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-2.fc37.s390x"
+      "evra": "2:4.17.6-0.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -757,7 +757,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-2.fc37.s390x"
+      "evra": "2:4.17.6-0.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -868,7 +868,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.s390x"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc37.s390x"
+      "evra": "2.6.4-1.fc37.s390x"
     },
     "openssh": {
       "evra": "8.8p1-7.fc37.s390x"
@@ -994,13 +994,13 @@
       "evra": "2:2.25.0-4.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-2.fc37.s390x"
+      "evra": "2:4.17.6-0.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.5-2.fc37.noarch"
+      "evra": "2:4.17.6-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-2.fc37.s390x"
+      "evra": "2:4.17.6-0.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1138,7 +1138,7 @@
       "evra": "2:9.0.1367-1.fc37.s390x"
     },
     "which": {
-      "evra": "2.21-35.fc37.s390x"
+      "evra": "2.21-39.fc37.s390x"
     },
     "wireguard-tools": {
       "evra": "1.0.20210914-3.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-10T00:00:00Z",
+    "generated": "2023-03-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-08T00:04:46Z"
+        "generated": "2023-03-10T19:24:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-10T01:19:04Z"
+        "generated": "2023-03-12T00:36:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fa074ea3fd..02106ea186 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -493,13 +493,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.14-200.fc37.x86_64"
+      "evra": "6.1.15-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.14-200.fc37.x86_64"
+      "evra": "6.1.15-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.14-200.fc37.x86_64"
+      "evra": "6.1.15-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -751,7 +751,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.5-2.fc37.x86_64"
+      "evra": "2:4.17.6-0.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -820,7 +820,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.5-2.fc37.x86_64"
+      "evra": "2:4.17.6-0.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -943,7 +943,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc37.x86_64"
     },
     "openldap": {
-      "evra": "2.6.3-1.fc37.x86_64"
+      "evra": "2.6.4-1.fc37.x86_64"
     },
     "openssh": {
       "evra": "8.8p1-7.fc37.x86_64"
@@ -1066,13 +1066,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.5-2.fc37.x86_64"
+      "evra": "2:4.17.6-0.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.5-2.fc37.noarch"
+      "evra": "2:4.17.6-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.5-2.fc37.x86_64"
+      "evra": "2:4.17.6-0.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1216,7 +1216,7 @@
       "evra": "2:9.0.1367-1.fc37.x86_64"
     },
     "which": {
-      "evra": "2.21-35.fc37.x86_64"
+      "evra": "2.21-39.fc37.x86_64"
     },
     "wireguard-tools": {
       "evra": "1.0.20210914-3.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-10T00:00:00Z",
+    "generated": "2023-03-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-08T00:04:36Z"
+        "generated": "2023-03-10T19:24:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-10T01:19:11Z"
+        "generated": "2023-03-12T00:36:48Z"
       }
     }
   }

From d6084ac01e47d0defa8965e18945106b51034690 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 13 Mar 2023 07:31:00 +0000
Subject: [PATCH 1500/2157] overrides: fast-track
 rust-coreos-installer-0.17.0-1.fc37

---
 manifest-lock.overrides.yaml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..d28d2fa65e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,14 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  coreos-installer:
+    evr: 0.17.0-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6f3402ea1
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.17.0-1.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6f3402ea1
+      type: fast-track

From 842329ae0572f3a32e5cbe24ecb2baf2b5434175 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Wed, 8 Mar 2023 10:04:57 +0100
Subject: [PATCH 1501/2157] tests: add "ext.config.secex.ensure" test

This is the 1st test for qemu-secex images.
To run `--qemu-secex` and `--tag secex` options should be provided:
```
cosa kola run --qemu-secex --tag secex
```
---
 tests/kola/secex/ensure/test.sh | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100755 tests/kola/secex/ensure/test.sh

diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
new file mode 100755
index 0000000000..7c9a427b4a
--- /dev/null
+++ b/tests/kola/secex/ensure/test.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+## kola:
+##   # This test verifies the s390x Secure Execution QEMU image works. It also
+##   # implicitly tests Ignition config decryption. We don't run it by default
+##   # because it requires running with `--qemu-secex`.
+##   architectures: s390x
+##   platforms: qemu
+##   requiredTag: secex
+##   timeoutMin: 3
+
+set -xeuo pipefail
+
+check_luks() {
+    local mnt dev type
+    mnt=${1}
+    dev=$(findmnt -nvr ${mnt} -o SOURCE)
+    type=$(lsblk -o TYPE "${dev}" --noheadings)
+    [[ ${type} == crypt ]]
+}
+
+# 1 means system runs with Secure Execution
+grep -q 1 /sys/firmware/uv/prot_virt_guest
+
+# Check firstboot kargs have dm-verity hashes
+grep -q rootfs.roothash /proc/cmdline
+grep -q bootfs.roothash /proc/cmdline
+
+# Check we have SE partition with sdboot image
+mount /dev/disk/by-label/se /sysroot/se
+[[ -f /sysroot/se/sdboot ]]
+
+check_luks /
+check_luks /boot

From e0b38afe041f77c9ebc4f7d586b00987e8d280f2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 13 Mar 2023 14:58:02 -0400
Subject: [PATCH 1502/2157] denylist: drop next/next-devel streams for some
 tests

These tests pass on F38+ and `next`/`next-devel` have moved to F38.
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 151c1cdc8e..7e90e1325d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,8 +18,6 @@
   arches:
     - s390x
   streams:
-    - next-devel
-    - next
     - testing-devel
     - testing
     - stable
@@ -28,8 +26,6 @@
   arches:
     - s390x
   streams:
-    - next-devel
-    - next
     - testing-devel
     - testing
     - stable

From cb764ddc9bde944a07ff615d29306699d4283462 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 Mar 2023 03:42:43 +0000
Subject: [PATCH 1503/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/427/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 108f51035a..0fbd634dd2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.6-3.fc37.aarch64"
+      "evra": "2:2.1.7-2.fc37.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -151,10 +151,10 @@
       "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc37.aarch64"
+      "evra": "0.17.0-1.fc37.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc37.aarch64"
+      "evra": "0.17.0-1.fc37.aarch64"
     },
     "coreutils": {
       "evra": "9.1-7.fc37.aarch64"
@@ -487,13 +487,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.15-200.fc37.aarch64"
+      "evra": "6.1.18-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.15-200.fc37.aarch64"
+      "evra": "6.1.18-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.15-200.fc37.aarch64"
+      "evra": "6.1.18-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1213,7 +1213,7 @@
       "evra": "1.0.20210914-3.fc37.aarch64"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.aarch64"
+      "evra": "6.1.0-1.fc37.aarch64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-12T00:00:00Z",
+    "generated": "2023-03-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-10T19:25:05Z"
+        "generated": "2023-03-13T15:24:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-12T00:36:23Z"
+        "generated": "2023-03-14T00:48:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index dee7a96ea6..4ed504c4d2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.6-3.fc37.ppc64le"
+      "evra": "2:2.1.7-2.fc37.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -151,10 +151,10 @@
       "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc37.ppc64le"
+      "evra": "0.17.0-1.fc37.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc37.ppc64le"
+      "evra": "0.17.0-1.fc37.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-7.fc37.ppc64le"
@@ -481,13 +481,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.15-200.fc37.ppc64le"
+      "evra": "6.1.18-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.15-200.fc37.ppc64le"
+      "evra": "6.1.18-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.15-200.fc37.ppc64le"
+      "evra": "6.1.18-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1216,7 +1216,7 @@
       "evra": "1.0.20210914-3.fc37.ppc64le"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.ppc64le"
+      "evra": "6.1.0-1.fc37.ppc64le"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-12T00:00:00Z",
+    "generated": "2023-03-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-10T19:24:45Z"
+        "generated": "2023-03-13T15:23:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-12T00:36:35Z"
+        "generated": "2023-03-14T00:48:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 685f3b8e12..62ba4556d5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -118,7 +118,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.6-3.fc37.s390x"
+      "evra": "2:2.1.7-2.fc37.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -148,10 +148,10 @@
       "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc37.s390x"
+      "evra": "0.17.0-1.fc37.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc37.s390x"
+      "evra": "0.17.0-1.fc37.s390x"
     },
     "coreutils": {
       "evra": "9.1-7.fc37.s390x"
@@ -448,13 +448,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.15-200.fc37.s390x"
+      "evra": "6.1.18-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.15-200.fc37.s390x"
+      "evra": "6.1.18-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.15-200.fc37.s390x"
+      "evra": "6.1.18-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1144,7 +1144,7 @@
       "evra": "1.0.20210914-3.fc37.s390x"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.s390x"
+      "evra": "6.1.0-1.fc37.s390x"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-12T00:00:00Z",
+    "generated": "2023-03-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-10T19:24:17Z"
+        "generated": "2023-03-13T15:23:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-12T00:36:42Z"
+        "generated": "2023-03-14T00:48:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 02106ea186..c1b32c0abf 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -121,7 +121,7 @@
       "evra": "0.31-11.fc37.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.6-3.fc37.x86_64"
+      "evra": "2:2.1.7-2.fc37.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-3.fc37.noarch"
@@ -151,10 +151,10 @@
       "evra": "4:1-80.fc37.noarch"
     },
     "coreos-installer": {
-      "evra": "0.16.1-2.fc37.x86_64"
+      "evra": "0.17.0-1.fc37.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.16.1-2.fc37.x86_64"
+      "evra": "0.17.0-1.fc37.x86_64"
     },
     "coreutils": {
       "evra": "9.1-7.fc37.x86_64"
@@ -493,13 +493,13 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.15-200.fc37.x86_64"
+      "evra": "6.1.18-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.15-200.fc37.x86_64"
+      "evra": "6.1.18-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.15-200.fc37.x86_64"
+      "evra": "6.1.18-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1222,7 +1222,7 @@
       "evra": "1.0.20210914-3.fc37.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.x86_64"
+      "evra": "6.1.0-1.fc37.x86_64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-12T00:00:00Z",
+    "generated": "2023-03-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-10T19:24:49Z"
+        "generated": "2023-03-13T15:25:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-12T00:36:48Z"
+        "generated": "2023-03-14T00:48:26Z"
       }
     }
   }

From c357ecd5f9405c092086be96f7048b281e3d974b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 30 Sep 2022 10:00:31 -0400
Subject: [PATCH 1504/2157] tests/kola: add
 ext.config.networking.nm-ifcfg-rh-plugin test

This test checks that the ifcfg-rh NetworkManager plugin is in
the state we expect it to be in. Some more context in:

- https://github.com/coreos/fedora-coreos-config/pull/1993
- https://github.com/coreos/fedora-coreos-config/pull/1991
- https://github.com/openshift/os/issues/1022
---
 tests/kola/networking/nm-ifcfg-rh-plugin | 32 ++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100755 tests/kola/networking/nm-ifcfg-rh-plugin

diff --git a/tests/kola/networking/nm-ifcfg-rh-plugin b/tests/kola/networking/nm-ifcfg-rh-plugin
new file mode 100755
index 0000000000..4de79087c6
--- /dev/null
+++ b/tests/kola/networking/nm-ifcfg-rh-plugin
@@ -0,0 +1,32 @@
+#!/bin/bash
+#
+# We want to do a check here to make sure the ifcfg-rh plugin
+# is not loaded on FCOS (it can't be because it should never
+# even be included in the filesystem). We also want to make
+# sure that at least for RHCOS8 it is included.
+#
+## kola:
+##   # This test should behave the same on every platform.
+##   tags: "platform-independent"
+##   # This is a read-only, nondestructive test.
+##   exclusive: false
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+
+# Check if it exists or not. The plugin provides a dbus interface
+# so if it is loaded there will be something listening at that name
+exists=0
+busctl status com.redhat.ifcfgrh1 && exists=1
+
+if is_fcos; then
+    [ "$exists" == "0" ] || fatal "ifcfg-rh plugin detected on FCOS"
+elif is_rhcos || is_scos; then
+    [ "$exists" == "1" ] || fatal "ifcfg-rh plugin not detected on RHCOS/SCOS"
+else
+    fatal "nm-ifcfg-rh-plugin does not support this distro/version"
+fi
+
+ok "ifcfg-rh plugin test successful"

From a938a2bd981cabbab5a14cf142e7adbbfc2e3180 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 15 Mar 2023 09:56:13 -0400
Subject: [PATCH 1505/2157] denylist: drop
 ext.config.files.file-directory-permissions denial

The new systemd made it into Fedora 38 now too.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1427
---
 kola-denylist.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7e90e1325d..7a8fad9c0d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -29,13 +29,6 @@
     - testing-devel
     - testing
     - stable
-- pattern: ext.config.files.file-directory-permissions
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1427
-  snooze: 2023-03-20
-  streams:
-    - branched
-    - next-devel
-    - next
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
   snooze: 2023-03-22

From 80c8aa406b1c402606c990bada3b0b9d6b416bd9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Mar 2023 22:24:33 +0000
Subject: [PATCH 1506/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/433/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0fbd634dd2..6cb7bf1751 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.aarch64"
@@ -418,7 +418,7 @@
       "evra": "56-2.fc37.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.aarch64"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-33.fc37.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.aarch64"
@@ -922,7 +922,7 @@
       "evra": "2.0.14-6.fc37.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-14T00:00:00Z",
+    "generated": "2023-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-13T15:24:11Z"
+        "generated": "2023-03-15T19:08:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-14T00:48:00Z"
+        "generated": "2023-03-15T00:50:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4ed504c4d2..d1756c5c32 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.ppc64le"
@@ -412,7 +412,7 @@
       "evra": "56-2.fc37.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.ppc64le"
@@ -832,10 +832,10 @@
       "evra": "2.5.1-33.fc37.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.ppc64le"
@@ -919,7 +919,7 @@
       "evra": "2.0.14-6.fc37.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-14T00:00:00Z",
+    "generated": "2023-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-13T15:23:57Z"
+        "generated": "2023-03-15T19:07:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-14T00:48:13Z"
+        "generated": "2023-03-15T00:50:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 62ba4556d5..731bae5663 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.s390x"
@@ -382,7 +382,7 @@
       "evra": "56-2.fc37.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.s390x"
@@ -775,10 +775,10 @@
       "evra": "2.5.1-33.fc37.s390x"
     },
     "linux-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.s390x"
@@ -859,7 +859,7 @@
       "evra": "2.18.1-21.fc37.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-14T00:00:00Z",
+    "generated": "2023-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-13T15:23:51Z"
+        "generated": "2023-03-15T19:07:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-14T00:48:19Z"
+        "generated": "2023-03-15T00:50:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c1b32c0abf..a9c3adf02c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       "evra": "1.21-1.fc37.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "attr": {
       "evra": "2.5.1-5.fc37.x86_64"
@@ -424,7 +424,7 @@
       "evra": "56-2.fc37.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "iproute": {
       "evra": "5.18.0-2.fc37.x86_64"
@@ -841,10 +841,10 @@
       "evra": "2.5.1-33.fc37.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc37.x86_64"
@@ -934,7 +934,7 @@
       "evra": "2.0.14-6.fc37.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230210-147.fc37.noarch"
+      "evra": "20230310-148.fc37.noarch"
     },
     "nvme-cli": {
       "evra": "2.2.1-1.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-14T00:00:00Z",
+    "generated": "2023-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-13T15:25:08Z"
+        "generated": "2023-03-15T19:08:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-14T00:48:26Z"
+        "generated": "2023-03-15T00:50:46Z"
       }
     }
   }

From 9f68d87d46c5d629ec821b852a83bfdac7fe3aab Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 15 Mar 2023 21:14:08 -0700
Subject: [PATCH 1507/2157] kola: Add ignition.journald-log test

Converting coreos.ignition.journald-log test to
an external one.
Ref: https://github.com/coreos/coreos-assembler/pull/3391#pullrequestreview-1339641509
---
 tests/kola/ignition/data/commonlib.sh |  1 +
 tests/kola/ignition/journald-log      | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 120000 tests/kola/ignition/data/commonlib.sh
 create mode 100755 tests/kola/ignition/journald-log

diff --git a/tests/kola/ignition/data/commonlib.sh b/tests/kola/ignition/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/ignition/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/ignition/journald-log b/tests/kola/ignition/journald-log
new file mode 100755
index 0000000000..9d84b2e2bf
--- /dev/null
+++ b/tests/kola/ignition/journald-log
@@ -0,0 +1,19 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+ignitionJournalMsgId="57124006b5c94805b77ce473e92a8aeb"
+
+# See https://github.com/coreos/ignition/pull/958
+# for the MESSAGE_ID source. It will track the
+# journal messages related to an ignition config
+# provided by the user.
+num=$(journalctl -o json-pretty MESSAGE_ID=$ignitionJournalMsgId | jq -s ".[] | select(.IGNITION_CONFIG_TYPE == \"user\")" | wc -l)
+
+if [ "$num" -eq 0 ]; then
+  fatal "Ignition didn't write $ignitionJournalMsgId"
+fi
+ok "ignition successfully wrote $ignitionJournalMsgId"

From 1df40565cff88c993031203a307c1d70797fa6a8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 16 Mar 2023 22:19:38 +0000
Subject: [PATCH 1508/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/435/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 62 insertions(+), 62 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6cb7bf1751..705e821b66 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -139,7 +139,7 @@
       "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.15-1.fc37.aarch64"
+      "evra": "1.6.19-1.fc37.aarch64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.aarch64"
@@ -934,13 +934,13 @@
       "evra": "2.6.4-1.fc37.aarch64"
     },
     "openssh": {
-      "evra": "8.8p1-7.fc37.aarch64"
+      "evra": "8.8p1-9.fc37.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-7.fc37.aarch64"
+      "evra": "8.8p1-9.fc37.aarch64"
     },
     "openssh-server": {
-      "evra": "8.8p1-7.fc37.aarch64"
+      "evra": "8.8p1-9.fc37.aarch64"
     },
     "openssl": {
       "evra": "1:3.0.8-1.fc37.aarch64"
@@ -1042,10 +1042,10 @@
       "evra": "4.18.0-1.fc37.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.1-1.fc37.aarch64"
+      "evra": "2023.2-1.fc37.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.1-1.fc37.aarch64"
+      "evra": "2023.2-1.fc37.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.aarch64"
@@ -1153,25 +1153,25 @@
       "evra": "1.9.13-1.p2.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-boot-unsigned": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.13-5.fc37.aarch64"
+      "evra": "251.13-6.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-15T00:00:00Z",
+    "generated": "2023-03-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T19:08:19Z"
+        "generated": "2023-03-15T22:27:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-15T00:50:21Z"
+        "generated": "2023-03-16T18:22:59Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d1756c5c32..3d0bbd4b9c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -139,7 +139,7 @@
       "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.15-1.fc37.ppc64le"
+      "evra": "1.6.19-1.fc37.ppc64le"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.ppc64le"
@@ -931,13 +931,13 @@
       "evra": "2.6.4-1.fc37.ppc64le"
     },
     "openssh": {
-      "evra": "8.8p1-7.fc37.ppc64le"
+      "evra": "8.8p1-9.fc37.ppc64le"
     },
     "openssh-clients": {
-      "evra": "8.8p1-7.fc37.ppc64le"
+      "evra": "8.8p1-9.fc37.ppc64le"
     },
     "openssh-server": {
-      "evra": "8.8p1-7.fc37.ppc64le"
+      "evra": "8.8p1-9.fc37.ppc64le"
     },
     "openssl": {
       "evra": "1:3.0.8-1.fc37.ppc64le"
@@ -1048,10 +1048,10 @@
       "evra": "4.18.0-1.fc37.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.1-1.fc37.ppc64le"
+      "evra": "2023.2-1.fc37.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.1-1.fc37.ppc64le"
+      "evra": "2023.2-1.fc37.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.ppc64le"
@@ -1159,22 +1159,22 @@
       "evra": "1.9.13-1.p2.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.ppc64le"
+      "evra": "251.13-6.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-15T00:00:00Z",
+    "generated": "2023-03-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T19:07:34Z"
+        "generated": "2023-03-15T22:27:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-15T00:50:33Z"
+        "generated": "2023-03-16T18:23:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 731bae5663..3406a2d0e0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -136,7 +136,7 @@
       "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.15-1.fc37.s390x"
+      "evra": "1.6.19-1.fc37.s390x"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.s390x"
@@ -871,13 +871,13 @@
       "evra": "2.6.4-1.fc37.s390x"
     },
     "openssh": {
-      "evra": "8.8p1-7.fc37.s390x"
+      "evra": "8.8p1-9.fc37.s390x"
     },
     "openssh-clients": {
-      "evra": "8.8p1-7.fc37.s390x"
+      "evra": "8.8p1-9.fc37.s390x"
     },
     "openssh-server": {
-      "evra": "8.8p1-7.fc37.s390x"
+      "evra": "8.8p1-9.fc37.s390x"
     },
     "openssl": {
       "evra": "1:3.0.8-1.fc37.s390x"
@@ -976,10 +976,10 @@
       "evra": "4.18.0-1.fc37.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.1-1.fc37.s390x"
+      "evra": "2023.2-1.fc37.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.1-1.fc37.s390x"
+      "evra": "2023.2-1.fc37.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.s390x"
@@ -1084,22 +1084,22 @@
       "evra": "1.9.13-1.p2.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.7-611.fc37.s390x"
+      "evra": "251.13-6.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-15T00:00:00Z",
+    "generated": "2023-03-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T19:07:21Z"
+        "generated": "2023-03-15T22:27:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-15T00:50:40Z"
+        "generated": "2023-03-16T18:23:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a9c3adf02c..ff730c6731 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -139,7 +139,7 @@
       "evra": "2:2.201.0-1.fc37.noarch"
     },
     "containerd": {
-      "evra": "1.6.15-1.fc37.x86_64"
+      "evra": "1.6.19-1.fc37.x86_64"
     },
     "containernetworking-plugins": {
       "evra": "1.1.1-8.fc37.x86_64"
@@ -946,13 +946,13 @@
       "evra": "2.6.4-1.fc37.x86_64"
     },
     "openssh": {
-      "evra": "8.8p1-7.fc37.x86_64"
+      "evra": "8.8p1-9.fc37.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-7.fc37.x86_64"
+      "evra": "8.8p1-9.fc37.x86_64"
     },
     "openssh-server": {
-      "evra": "8.8p1-7.fc37.x86_64"
+      "evra": "8.8p1-9.fc37.x86_64"
     },
     "openssl": {
       "evra": "1:3.0.8-1.fc37.x86_64"
@@ -1051,10 +1051,10 @@
       "evra": "4.18.0-1.fc37.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.1-1.fc37.x86_64"
+      "evra": "2023.2-1.fc37.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.1-1.fc37.x86_64"
+      "evra": "2023.2-1.fc37.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.0-1.fc37.x86_64"
@@ -1162,25 +1162,25 @@
       "evra": "1.9.13-1.p2.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-boot-unsigned": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.13-5.fc37.x86_64"
+      "evra": "251.13-6.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-5.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-15T00:00:00Z",
+    "generated": "2023-03-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T19:08:47Z"
+        "generated": "2023-03-15T22:28:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-15T00:50:46Z"
+        "generated": "2023-03-16T18:23:26Z"
       }
     }
   }

From 117bba51ca6550883725b54e23d92fde0990a3fb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 16 Mar 2023 17:04:55 +0000
Subject: [PATCH 1509/2157] overrides: pin kernel-6.1.18-200.fc37

---
 manifest-lock.overrides.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d28d2fa65e..ea2ae3b8a7 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,3 +19,18 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6f3402ea1
       type: fast-track
+  kernel:
+    evr: 6.1.18-200.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
+      type: pin
+  kernel-core:
+    evr: 6.1.18-200.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
+      type: pin
+  kernel-modules:
+    evr: 6.1.18-200.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
+      type: pin

From 0560af656f77c4d3e3f63c9eb70b0f2f87db7efd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 18 Mar 2023 22:22:31 +0000
Subject: [PATCH 1510/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/440/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 705e821b66..766a832d62 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,13 +136,13 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.201.0-1.fc37.noarch"
+      "evra": "2:2.204.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-8.fc37.aarch64"
+      "evra": "1.1.1-16.fc37.aarch64"
     },
     "containers-common": {
       "evra": "4:1-80.fc37.noarch"
@@ -874,7 +874,7 @@
       "evra": "2:0.6.0-5.fc37.aarch64"
     },
     "mozjs102": {
-      "evra": "102.8.0-1.fc37.aarch64"
+      "evra": "102.9.0-1.fc37.aarch64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.aarch64"
@@ -1180,7 +1180,7 @@
       "evra": "1.31-6.fc37.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-7.fc37.aarch64"
+      "evra": "0.0.99.4-1.fc37.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.4-1.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-16T00:00:00Z",
+    "generated": "2023-03-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T22:27:43Z"
+        "generated": "2023-03-17T04:43:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-16T18:22:59Z"
+        "generated": "2023-03-18T04:48:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3d0bbd4b9c..7ec5b9ee9f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,13 +136,13 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.201.0-1.fc37.noarch"
+      "evra": "2:2.204.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.ppc64le"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-8.fc37.ppc64le"
+      "evra": "1.1.1-16.fc37.ppc64le"
     },
     "containers-common": {
       "evra": "4:1-80.fc37.noarch"
@@ -871,7 +871,7 @@
       "evra": "20.10.23-1.fc37.ppc64le"
     },
     "mozjs102": {
-      "evra": "102.8.0-1.fc37.ppc64le"
+      "evra": "102.9.0-1.fc37.ppc64le"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.ppc64le"
@@ -1183,7 +1183,7 @@
       "evra": "1.31-6.fc37.ppc64le"
     },
     "toolbox": {
-      "evra": "0.0.99.3-7.fc37.ppc64le"
+      "evra": "0.0.99.4-1.fc37.ppc64le"
     },
     "tpm2-tools": {
       "evra": "5.4-1.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-16T00:00:00Z",
+    "generated": "2023-03-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T22:27:32Z"
+        "generated": "2023-03-17T04:43:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-16T18:23:12Z"
+        "generated": "2023-03-18T04:48:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3406a2d0e0..0d33b29c0b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,13 +133,13 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.201.0-1.fc37.noarch"
+      "evra": "2:2.204.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.s390x"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-8.fc37.s390x"
+      "evra": "1.1.1-16.fc37.s390x"
     },
     "containers-common": {
       "evra": "4:1-80.fc37.noarch"
@@ -814,7 +814,7 @@
       "evra": "20.10.23-1.fc37.s390x"
     },
     "mozjs102": {
-      "evra": "102.8.0-1.fc37.s390x"
+      "evra": "102.9.0-1.fc37.s390x"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.s390x"
@@ -1108,7 +1108,7 @@
       "evra": "1.31-6.fc37.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.3-7.fc37.s390x"
+      "evra": "0.0.99.4-1.fc37.s390x"
     },
     "tpm2-tools": {
       "evra": "5.4-1.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-16T00:00:00Z",
+    "generated": "2023-03-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T22:27:11Z"
+        "generated": "2023-03-17T04:43:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-16T18:23:19Z"
+        "generated": "2023-03-18T04:49:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ff730c6731..16580bead6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,13 +136,13 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.201.0-1.fc37.noarch"
+      "evra": "2:2.204.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-8.fc37.x86_64"
+      "evra": "1.1.1-16.fc37.x86_64"
     },
     "containers-common": {
       "evra": "4:1-80.fc37.noarch"
@@ -886,7 +886,7 @@
       "evra": "2:0.6.0-5.fc37.x86_64"
     },
     "mozjs102": {
-      "evra": "102.8.0-1.fc37.x86_64"
+      "evra": "102.9.0-1.fc37.x86_64"
     },
     "mpfr": {
       "evra": "4.1.0-10.fc37.x86_64"
@@ -1189,7 +1189,7 @@
       "evra": "1.31-6.fc37.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.3-7.fc37.x86_64"
+      "evra": "0.0.99.4-1.fc37.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.4-1.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-16T00:00:00Z",
+    "generated": "2023-03-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-15T22:28:12Z"
+        "generated": "2023-03-17T04:44:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-16T18:23:26Z"
+        "generated": "2023-03-18T04:49:31Z"
       }
     }
   }

From 8ce6fd6827b06e3c462ddc8c18d2fe1bdc7f5e86 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Fri, 17 Mar 2023 14:19:20 -0400
Subject: [PATCH 1511/2157] overlay/15fcos: upgrade bootloader on aarch64 at
 boot

On aarch64, kernel 6.2 won't boot with older versions of GRUB.  In
preparation for switching to the new kernel, add a systemd service that
uses bootupd to update the bootloader on aarch64 systems.

Revert this after the next barrier release.

For https://github.com/coreos/fedora-coreos-tracker/issues/1441.
---
 .../usr/lib/systemd/system-preset/45-fcos.preset  |  3 +++
 .../coreos-bootupctl-update-aarch64.service       | 15 +++++++++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index fd18bec843..4e4e9da284 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,3 +1,6 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
+# Upgrade aarch64 bootloader to avoid
+# https://github.com/coreos/fedora-coreos-tracker/issues/1441
+enable coreos-bootupctl-update-aarch64.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service
new file mode 100644
index 0000000000..43c9312e9d
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service
@@ -0,0 +1,15 @@
+# Remove after the next barrier release
+# https://github.com/coreos/fedora-coreos-tracker/issues/1441
+
+[Unit]
+Description=Update aarch64 Bootloader
+ConditionArchitecture=arm64
+ConditionFirmware=uefi
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/bootupctl update
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target

From 56d26da22547bd199363b0aa880fb5e4a8a81290 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Mar 2023 00:08:12 +0000
Subject: [PATCH 1512/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/446/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 766a832d62..bf75ef4ff9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1201,10 +1201,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1367-1.fc37.noarch"
+      "evra": "2:9.0.1407-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1367-1.fc37.aarch64"
+      "evra": "2:9.0.1407-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc37.aarch64"
@@ -1244,16 +1244,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-18T00:00:00Z",
+    "generated": "2023-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-17T04:43:55Z"
+        "generated": "2023-03-20T22:19:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-18T04:48:23Z"
+        "generated": "2023-03-20T01:26:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7ec5b9ee9f..cf08d5d21a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1204,10 +1204,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1367-1.fc37.noarch"
+      "evra": "2:9.0.1407-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1367-1.fc37.ppc64le"
+      "evra": "2:9.0.1407-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc37.ppc64le"
@@ -1247,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-18T00:00:00Z",
+    "generated": "2023-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-17T04:43:49Z"
+        "generated": "2023-03-20T22:19:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-18T04:48:54Z"
+        "generated": "2023-03-20T01:26:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0d33b29c0b..43a1264663 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1132,10 +1132,10 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1367-1.fc37.noarch"
+      "evra": "2:9.0.1407-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1367-1.fc37.s390x"
+      "evra": "2:9.0.1407-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-39.fc37.s390x"
@@ -1175,16 +1175,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-18T00:00:00Z",
+    "generated": "2023-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-17T04:43:22Z"
+        "generated": "2023-03-20T22:18:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-18T04:49:17Z"
+        "generated": "2023-03-20T01:26:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 16580bead6..0d3d1f86a2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1210,10 +1210,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1367-1.fc37.noarch"
+      "evra": "2:9.0.1407-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1367-1.fc37.x86_64"
+      "evra": "2:9.0.1407-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc37.x86_64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-18T00:00:00Z",
+    "generated": "2023-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-17T04:44:29Z"
+        "generated": "2023-03-20T22:20:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-18T04:49:31Z"
+        "generated": "2023-03-20T01:26:26Z"
       }
     }
   }

From 95e06dfcbb1e53d72d39603d101f209a5b5987a7 Mon Sep 17 00:00:00 2001
From: Enrique Llorente <ellorent@redhat.com>
Date: Wed, 1 Mar 2023 14:37:26 +0100
Subject: [PATCH 1513/2157] networking-tools: Add nmstate

As discussed at [1] the nmstatectl tool is going to be added to FCOS, it
will allow to declare the network configuration at boot time

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1175

Signed-off-by: Enrique Llorente <ellorent@redhat.com>
---
 manifest-lock.overrides.yaml                  |  5 ++++
 manifests/networking-tools.yaml               |  3 +++
 .../systemd/system-preset/40-coreos.preset    |  3 +++
 .../networking/nmstate/data/nmstate-common.sh | 23 ++++++++++++++++++
 .../kola/networking/nmstate/policy/config.bu  | 24 +++++++++++++++++++
 .../nmstate/policy/data/commonlib.sh          |  1 +
 .../nmstate/policy/data/nmstate-common.sh     |  1 +
 tests/kola/networking/nmstate/policy/test.sh  | 11 +++++++++
 tests/kola/networking/nmstate/state/config.bu | 17 +++++++++++++
 .../nmstate/state/data/commonlib.sh           |  1 +
 .../nmstate/state/data/nmstate-common.sh      |  1 +
 tests/kola/networking/nmstate/state/test.sh   | 11 +++++++++
 12 files changed, 101 insertions(+)
 create mode 100755 tests/kola/networking/nmstate/data/nmstate-common.sh
 create mode 100644 tests/kola/networking/nmstate/policy/config.bu
 create mode 120000 tests/kola/networking/nmstate/policy/data/commonlib.sh
 create mode 120000 tests/kola/networking/nmstate/policy/data/nmstate-common.sh
 create mode 100755 tests/kola/networking/nmstate/policy/test.sh
 create mode 100644 tests/kola/networking/nmstate/state/config.bu
 create mode 120000 tests/kola/networking/nmstate/state/data/commonlib.sh
 create mode 120000 tests/kola/networking/nmstate/state/data/nmstate-common.sh
 create mode 100755 tests/kola/networking/nmstate/state/test.sh

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ea2ae3b8a7..60abf0d581 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -34,3 +34,8 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
       type: pin
+  nmstate:
+    evr: 2.2.8-2.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-59543876eb
+      type: fast-track
diff --git a/manifests/networking-tools.yaml b/manifests/networking-tools.yaml
index ffb51ee70d..c5c66336e2 100644
--- a/manifests/networking-tools.yaml
+++ b/manifests/networking-tools.yaml
@@ -19,3 +19,6 @@ packages:
   - iptables nftables
   # Interactive network tools for admins
   - socat net-tools bind-utils
+  # Declarative network configuration
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1175
+  - nmstate
diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index f4577d8fe9..17c9d4051f 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -32,3 +32,6 @@ enable rtas_errd.service
 enable clevis-luks-askpass.path
 # Provide status information about the Ignition run
 enable coreos-ignition-write-issues.service
+# Apply network configuration from /etc/nmstate/*.yml
+# We can drop this after merging https://src.fedoraproject.org/rpms/fedora-release/pull-request/255
+enable nmstate.service
diff --git a/tests/kola/networking/nmstate/data/nmstate-common.sh b/tests/kola/networking/nmstate/data/nmstate-common.sh
new file mode 100755
index 0000000000..ca8293fa8d
--- /dev/null
+++ b/tests/kola/networking/nmstate/data/nmstate-common.sh
@@ -0,0 +1,23 @@
+. $KOLA_EXT_DATA/commonlib.sh
+
+main() {
+    nmstatectl show
+    journalctl -u nmstate
+    
+    local prefix="first boot"
+    if [ "${AUTOPKGTEST_REBOOT_MARK:-}" == rebooted ]; then
+        prefix="second boot"
+    fi
+    
+    if ! nmcli c show br-ex; then
+        fatal "${prefix}: bridge not configured"
+    fi
+
+    if ! ls /etc/nmstate/*applied; then
+        fatal "${prefix}: nmstate yamls files not marked as applied"    
+    fi
+
+    if [ "${AUTOPKGTEST_REBOOT_MARK:-}" == "" ]; then
+        /tmp/autopkgtest-reboot rebooted
+    fi
+}
diff --git a/tests/kola/networking/nmstate/policy/config.bu b/tests/kola/networking/nmstate/policy/config.bu
new file mode 100644
index 0000000000..dd4f8d55fc
--- /dev/null
+++ b/tests/kola/networking/nmstate/policy/config.bu
@@ -0,0 +1,24 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/nmstate/br-ex-policy.yml
+      contents:
+        inline: |
+          capture:
+            default-gw-route: routes.running.destination=="0.0.0.0/0"
+            default-gw-iface: interfaces.name==capture.default-gw-route.routes.running.0.next-hop-interface
+          desiredState:
+            interfaces:
+            - name: "{{ capture.default-gw-iface.interfaces.0.name }}"
+              type: ethernet
+              state: up
+            - name: br-ex
+              type: linux-bridge
+              copy-mac-from: "{{ capture.default-gw-iface.interfaces.0.name }}"
+              state: up
+              ipv4: "{{ capture.default-gw-iface.interfaces.0.ipv4 }}"
+              ipv6: "{{ capture.default-gw-iface.interfaces.0.ipv6 }}"
+              bridge:
+                port:
+                - name: "{{ capture.default-gw-iface.interfaces.0.name }}"
diff --git a/tests/kola/networking/nmstate/policy/data/commonlib.sh b/tests/kola/networking/nmstate/policy/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/nmstate/policy/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/nmstate/policy/data/nmstate-common.sh b/tests/kola/networking/nmstate/policy/data/nmstate-common.sh
new file mode 120000
index 0000000000..fe39f3bae7
--- /dev/null
+++ b/tests/kola/networking/nmstate/policy/data/nmstate-common.sh
@@ -0,0 +1 @@
+../../data/nmstate-common.sh
\ No newline at end of file
diff --git a/tests/kola/networking/nmstate/policy/test.sh b/tests/kola/networking/nmstate/policy/test.sh
new file mode 100755
index 0000000000..0a932495b0
--- /dev/null
+++ b/tests/kola/networking/nmstate/policy/test.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+## kola:
+##   tags: "platform-independent needs-internet"
+#
+# Configure a DHCP linux bridge using butane and nmstate service with policy
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/nmstate-common.sh
+
+main
diff --git a/tests/kola/networking/nmstate/state/config.bu b/tests/kola/networking/nmstate/state/config.bu
new file mode 100644
index 0000000000..d2d7e834b5
--- /dev/null
+++ b/tests/kola/networking/nmstate/state/config.bu
@@ -0,0 +1,17 @@
+variant: fcos
+version: 1.4.0
+storage:
+  files:
+    - path: /etc/nmstate/br-ex.yml
+      contents:
+        inline: |
+          interfaces:
+           - name: br-ex
+             type: linux-bridge
+             state: up
+             ipv4:
+               enabled: false
+             ipv6:
+               enabled: false
+             bridge:
+               port: []
diff --git a/tests/kola/networking/nmstate/state/data/commonlib.sh b/tests/kola/networking/nmstate/state/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/nmstate/state/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/nmstate/state/data/nmstate-common.sh b/tests/kola/networking/nmstate/state/data/nmstate-common.sh
new file mode 120000
index 0000000000..fe39f3bae7
--- /dev/null
+++ b/tests/kola/networking/nmstate/state/data/nmstate-common.sh
@@ -0,0 +1 @@
+../../data/nmstate-common.sh
\ No newline at end of file
diff --git a/tests/kola/networking/nmstate/state/test.sh b/tests/kola/networking/nmstate/state/test.sh
new file mode 100755
index 0000000000..9693a4cdbf
--- /dev/null
+++ b/tests/kola/networking/nmstate/state/test.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+## kola:
+##   tags: "platform-independent needs-internet"
+#
+# Configure a DHCP linux bridge using butane and nmstate service with state
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/nmstate-common.sh
+
+main

From e7f64d1e88d7763674f1f439136630cc21e888da Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Mar 2023 17:45:00 +0000
Subject: [PATCH 1514/2157] overrides: pin xfsprogs-5.18.0-3.fc37

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 60abf0d581..90f91662a5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -39,3 +39,8 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-59543876eb
       type: fast-track
+  xfsprogs:
+    evr: 5.18.0-3.fc37
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1443
+      type: pin

From a71bd956e3352cc1c4df564ae4a1ac2fa937aace Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Mar 2023 12:14:17 +0000
Subject: [PATCH 1515/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/451/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 11 +++++++----
 manifest-lock.ppc64le.json | 11 +++++++----
 manifest-lock.s390x.json   | 11 +++++++----
 manifest-lock.x86_64.json  | 11 +++++++----
 4 files changed, 28 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bf75ef4ff9..ce411ff02d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -912,6 +912,9 @@
     "nftables": {
       "evra": "1:1.0.4-3.fc37.aarch64"
     },
+    "nmstate": {
+      "evra": "2.2.8-2.fc37.aarch64"
+    },
     "npth": {
       "evra": "1.6-9.fc37.aarch64"
     },
@@ -1213,7 +1216,7 @@
       "evra": "1.0.20210914-3.fc37.aarch64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-1.fc37.aarch64"
+      "evra": "5.18.0-3.fc37.aarch64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.aarch64"
@@ -1244,16 +1247,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-20T00:00:00Z",
+    "generated": "2023-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-20T22:19:08Z"
+        "generated": "2023-03-21T17:45:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-20T01:26:00Z"
+        "generated": "2023-03-22T01:20:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index cf08d5d21a..69c7994c2e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -909,6 +909,9 @@
     "nftables": {
       "evra": "1:1.0.4-3.fc37.ppc64le"
     },
+    "nmstate": {
+      "evra": "2.2.8-2.fc37.ppc64le"
+    },
     "npth": {
       "evra": "1.6-9.fc37.ppc64le"
     },
@@ -1216,7 +1219,7 @@
       "evra": "1.0.20210914-3.fc37.ppc64le"
     },
     "xfsprogs": {
-      "evra": "6.1.0-1.fc37.ppc64le"
+      "evra": "5.18.0-3.fc37.ppc64le"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.ppc64le"
@@ -1247,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-20T00:00:00Z",
+    "generated": "2023-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-20T22:19:05Z"
+        "generated": "2023-03-21T17:45:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-20T01:26:13Z"
+        "generated": "2023-03-22T01:20:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 43a1264663..9eba9c36a2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -852,6 +852,9 @@
     "nftables": {
       "evra": "1:1.0.4-3.fc37.s390x"
     },
+    "nmstate": {
+      "evra": "2.2.8-2.fc37.s390x"
+    },
     "npth": {
       "evra": "1.6-9.fc37.s390x"
     },
@@ -1144,7 +1147,7 @@
       "evra": "1.0.20210914-3.fc37.s390x"
     },
     "xfsprogs": {
-      "evra": "6.1.0-1.fc37.s390x"
+      "evra": "5.18.0-3.fc37.s390x"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.s390x"
@@ -1175,16 +1178,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-20T00:00:00Z",
+    "generated": "2023-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-20T22:18:36Z"
+        "generated": "2023-03-21T17:45:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-20T01:26:20Z"
+        "generated": "2023-03-22T01:20:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0d3d1f86a2..ae4ba77f2e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -924,6 +924,9 @@
     "nftables": {
       "evra": "1:1.0.4-3.fc37.x86_64"
     },
+    "nmstate": {
+      "evra": "2.2.8-2.fc37.x86_64"
+    },
     "npth": {
       "evra": "1.6-9.fc37.x86_64"
     },
@@ -1222,7 +1225,7 @@
       "evra": "1.0.20210914-3.fc37.x86_64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-1.fc37.x86_64"
+      "evra": "5.18.0-3.fc37.x86_64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.x86_64"
@@ -1253,16 +1256,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-20T00:00:00Z",
+    "generated": "2023-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-20T22:20:50Z"
+        "generated": "2023-03-21T17:47:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-20T01:26:26Z"
+        "generated": "2023-03-22T01:20:28Z"
       }
     }
   }

From 87b03224bd8b4da1e5722d8126019cb8be4f1d3a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 22 Mar 2023 11:59:53 -0400
Subject: [PATCH 1516/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64

This is still a problem. See
https://github.com/coreos/fedora-coreos-tracker/issues/1430#issuecomment-1479842542
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7a8fad9c0d..82e034609a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -31,7 +31,7 @@
     - stable
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-03-22
+  snooze: 2023-04-12
   arches:
     - aarch64
   streams:

From ff39c7df83d473291ce926352de0c2f8ae3d7e5b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 22 Mar 2023 12:16:46 -0400
Subject: [PATCH 1517/2157] Revert "overlay/15fcos: upgrade bootloader on
 aarch64 at boot"

This reverts commit 8ce6fd6827b06e3c462ddc8c18d2fe1bdc7f5e86.

The testing-devel promotion with this has already happened in
https://github.com/coreos/fedora-coreos-config/pull/2315
and we have already shipped a `next` with the unit, so we can
drop it now (before we execute the `next-devel`->`next` promotion)
to prevent it from shipping in more than one release per stream.

We can do this because we have barriers.

Full context in https://github.com/coreos/fedora-coreos-tracker/issues/1441
---
 .../usr/lib/systemd/system-preset/45-fcos.preset  |  3 ---
 .../coreos-bootupctl-update-aarch64.service       | 15 ---------------
 2 files changed, 18 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index 4e4e9da284..fd18bec843 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,6 +1,3 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
-# Upgrade aarch64 bootloader to avoid
-# https://github.com/coreos/fedora-coreos-tracker/issues/1441
-enable coreos-bootupctl-update-aarch64.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service
deleted file mode 100644
index 43c9312e9d..0000000000
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-bootupctl-update-aarch64.service
+++ /dev/null
@@ -1,15 +0,0 @@
-# Remove after the next barrier release
-# https://github.com/coreos/fedora-coreos-tracker/issues/1441
-
-[Unit]
-Description=Update aarch64 Bootloader
-ConditionArchitecture=arm64
-ConditionFirmware=uefi
-
-[Service]
-Type=oneshot
-ExecStart=/usr/bin/bootupctl update
-RemainAfterExit=yes
-
-[Install]
-WantedBy=multi-user.target

From 0bd4b65d0d783b80748f25a54fcc7405de73d1f6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 22 Mar 2023 11:18:43 -0400
Subject: [PATCH 1518/2157] manifests/shared-workarounds: drop
 multipathd-service-fix

This has reached RHEL (9) now so we can drop the workaround
and the test.
---
 manifests/shared-workarounds.yaml           | 32 ---------------------
 tests/kola/multipath/data/commonlib.sh      |  1 -
 tests/kola/multipath/multipathd-service-fix | 23 ---------------
 3 files changed, 56 deletions(-)
 delete mode 120000 tests/kola/multipath/data/commonlib.sh
 delete mode 100755 tests/kola/multipath/multipathd-service-fix

diff --git a/manifests/shared-workarounds.yaml b/manifests/shared-workarounds.yaml
index 06c1ca685f..500582942b 100644
--- a/manifests/shared-workarounds.yaml
+++ b/manifests/shared-workarounds.yaml
@@ -1,34 +1,2 @@
 # This manifest is a list of shared workarounds that are needed in both Fedora CoreOS
 # and downstreams (i.e. Red Hat CoreOS).
-
-postprocess:
-  # Put in the fix for multipathd.service in dracut on releases that haven't
-  # been fixed yet.
-  # https://github.com/dracutdevs/dracut/pull/1606
-  # https://github.com/coreos/fedora-coreos-config/pull/1233
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    source /etc/os-release
-    # This has landed in Fedora but not in any version of RHEL yet
-    if [[ ${ID} != "rhel" ]]; then
-        exit 0
-    fi
-    mkdir /usr/lib/dracut/modules.d/36coreos-multipath-fix
-    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf <<'EOF'
-    # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-    [Service]
-    ExecStop=
-    EOF
-    cat > /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh <<'EOF'
-    #!/bin/bash
-    # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
-    # ex: ts=8 sw=4 sts=4 et filetype=sh
-    install() {
-        # Temporary workaround for https://github.com/dracutdevs/dracut/pull/1606.
-        mkdir -p "$systemdsystemunitdir/multipathd.service.d"
-        inst_simple "$moddir/90-multipathd-remove-execstop.conf" \
-        "$systemdsystemunitdir/multipathd.service.d/90-multipathd-remove-execstop.conf"
-    }
-    EOF
-    chmod +x /usr/lib/dracut/modules.d/36coreos-multipath-fix/module-setup.sh
diff --git a/tests/kola/multipath/data/commonlib.sh b/tests/kola/multipath/data/commonlib.sh
deleted file mode 120000
index 1742d51e67..0000000000
--- a/tests/kola/multipath/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/multipath/multipathd-service-fix b/tests/kola/multipath/multipathd-service-fix
deleted file mode 100755
index 30646ca468..0000000000
--- a/tests/kola/multipath/multipathd-service-fix
+++ /dev/null
@@ -1,23 +0,0 @@
-#!/bin/bash
-## kola:
-##   tags: "platform-independent"
-##   exclusive: false
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# We need either a fixed dracut or temporary workaround, no need for both.
-# See https://github.com/coreos/fedora-coreos-tracker/issues/803.
-has_fixed_dracut_multipathd_service=0
-grep -q 'ExecStop=/sbin/multipathd shutdown' /usr/lib/dracut/modules.d/90multipath/multipathd.service || has_fixed_dracut_multipathd_service=1
-has_overlay_multipathd_service_quickfix=1
-test -f /usr/lib/dracut/modules.d/36coreos-multipath-fix/90-multipathd-remove-execstop.conf || has_overlay_multipathd_service_quickfix=0
-if test "${has_fixed_dracut_multipathd_service}" -eq "${has_overlay_multipathd_service_quickfix}"; then
-    if test "${has_fixed_dracut_multipathd_service}" -eq 1; then
-        fatal "Found fixed dracut multipath module but quickfix is present too"
-    else
-        fatal "Found buggy dracut multipath module but quickfix is missing too"
-    fi
-fi
-ok "either dracut multipath module fixed or quickfix present"

From 0fbd4c2e14f191fbd405fce95bc358230d84ef26 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Mar 2023 18:05:58 +0000
Subject: [PATCH 1519/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 90f91662a5..5090c61d6a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  coreos-installer:
-    evr: 0.17.0-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6f3402ea1
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.17.0-1.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6f3402ea1
-      type: fast-track
   kernel:
     evr: 6.1.18-200.fc37
     metadata:
@@ -34,11 +24,6 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
       type: pin
-  nmstate:
-    evr: 2.2.8-2.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-59543876eb
-      type: fast-track
   xfsprogs:
     evr: 5.18.0-3.fc37
     metadata:

From 30ef14e24d3beac493223337078daf1809e3d617 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 22 Mar 2023 18:23:05 -0400
Subject: [PATCH 1520/2157] overrides: drop kernel-6.1.18-200.fc37 pin

Since the barrier release for [1] shipped in 37.20230322.2.0
we can now unpin and ship the 6.2 kernel.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1441
---
 manifest-lock.overrides.yaml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5090c61d6a..baafe36522 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,21 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.1.18-200.fc37
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
-      type: pin
-  kernel-core:
-    evr: 6.1.18-200.fc37
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
-      type: pin
-  kernel-modules:
-    evr: 6.1.18-200.fc37
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1441
-      type: pin
   xfsprogs:
     evr: 5.18.0-3.fc37
     metadata:

From 9880aa85a1211e753ea96158c0983e33e76423d8 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 23 Mar 2023 12:45:17 -0400
Subject: [PATCH 1521/2157] Remove the fedora-rawhide-nodebug-kernel repo from
 fedora-rawhide.repo

This was originally added in ff9bf0e. There is no longer any need to
pull from the separate repo because the policy has changed [1] and now
forced debug won't be on for any kernels built and submitted to rawhide.

[1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/MDJUE324EVG7CVG5UCTZCXPCOMOWMX5M/
---
 fedora-rawhide.repo | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo
index 2d21e543d0..674eea3332 100644
--- a/fedora-rawhide.repo
+++ b/fedora-rawhide.repo
@@ -14,25 +14,3 @@ type=rpm
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
-excludepkgs=kernel kernel-core kernel-modules kernel-modules-core
-
-# We are choosing to use only nodebug kernels in Fedora CoreOS
-# for our testing. We've seen too many issues where an issue either
-# shows up only on the debug kernels OR a debug kernel gives us a
-# false positive or negative when trying to root cause a failure.
-# Thus we use the nodebug kernel repo [1] and includepkgs=kernel
-# here and excludepkgs=kernel above.
-#
-# [1] https://fedoraproject.org/wiki/RawhideKernelNodebug
-[fedora-rawhide-nodebug-kernel]
-name=nodebug kernels for Rawhide
-baseurl=https://dl.fedoraproject.org/pub/alt/rawhide-kernel-nodebug/$basearch/
-enabled=1
-countme=1
-metadata_expire=6h
-repo_gpgcheck=0
-type=rpm
-gpgcheck=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-includepkgs=kernel kernel-core kernel-modules kernel-modules-core

From c9937ccf5c99185f0ca16a358b60cc0d9b8ebc66 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 Mar 2023 16:40:42 -0400
Subject: [PATCH 1522/2157] tests/kola: add extended upgrade test

This test will attempt to test an upgrade from a given starting
point (assumed by the caller passing in a specific
`cosa kola run --build=x.y.z`) all the way to the latest build
that is staged to be released. The test is basic in that it
essentially tests 1) updates work 2) boot works.

An example invocation for this test would look like:

```
cosa buildfetch --stream=next --build=34.20210904.1.0 --artifact=qemu
cosa decompress --build=34.20210904.1.0
cosa kola run --build=34.20210904.1.0 --tag extended-upgrade
```

You can then monitor the console.txt or journal.txt to watch the
upgrades happen via `tail -f tmp/kola/ext.config.upgrade.extened/*/console.txt'.

Another useful thing to do is to just monitor the major events:

```
$ tail -f  tmp/kola/ext.config.upgrade.extended/*/journal.txt | grep --color -i 'ok reached version'
Mar 20 02:25:12.584096 kola-runext-test.sh[2085]: ok Reached version: 34.20210904.1.0
Mar 20 02:26:37.107738 kola-runext-test.sh[3538]: ok Reached version: 35.20210924.1.0
Mar 20 02:28:08.509482 kola-runext-test.sh[1668]: ok Reached version: 36.20220418.1.0
Mar 20 02:28:41.242555 kola-runext-test.sh[1649]: ok Reached version: 36.20220906.1.0
Mar 20 02:29:33.635979 kola-runext-test.sh[1635]: ok Reached version: 37.20221111.1.0
Mar 20 02:30:16.657854 kola-runext-test.sh[1469]: ok Reached version: 37.20230303.1.0
```
---
 tests/kola/upgrade/extended/config.bu         |  24 +++
 tests/kola/upgrade/extended/data/commonlib.sh |   1 +
 tests/kola/upgrade/extended/test.sh           | 158 ++++++++++++++++++
 3 files changed, 183 insertions(+)
 create mode 100644 tests/kola/upgrade/extended/config.bu
 create mode 120000 tests/kola/upgrade/extended/data/commonlib.sh
 create mode 100755 tests/kola/upgrade/extended/test.sh

diff --git a/tests/kola/upgrade/extended/config.bu b/tests/kola/upgrade/extended/config.bu
new file mode 100644
index 0000000000..671e295a4e
--- /dev/null
+++ b/tests/kola/upgrade/extended/config.bu
@@ -0,0 +1,24 @@
+variant: fcos
+# Must use version 1.0.0 here to use Ignition spec 3.0.0 for
+# our oldest supported starting points (i.e. 31.20200108.3.0)
+version: 1.0.0
+storage:
+  files:
+    - path: /etc/systemd/journald.conf.d/forward-to-console.conf
+      mode: 0644
+      contents:
+        inline: |
+          # Send journal messages to the console. This is so we can see the
+          # progress even after autopkgtest-reboot-prepare has been called.
+          [Journal]
+          ForwardToConsole=yes
+    - path: /etc/zincati/config.d/99-config.toml
+      mode: 0644
+      contents:
+        inline: |
+          # Don't wait for any rollout window, update ASAP
+          [identity]
+          rollout_wariness = 0.0000
+          # Increase the frequency at which we check for updates
+          [agent.timing]
+          steady_interval_secs = 20
diff --git a/tests/kola/upgrade/extended/data/commonlib.sh b/tests/kola/upgrade/extended/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/upgrade/extended/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
new file mode 100755
index 0000000000..6b6baece66
--- /dev/null
+++ b/tests/kola/upgrade/extended/test.sh
@@ -0,0 +1,158 @@
+#!/bin/bash
+## kola:
+##   # - needs-internet: to pull updates
+##   tags: "needs-internet"
+##   # Extend the timeout since a lot of updates/reboots can happen.
+##   timeoutMin: 45
+##   # Only run this test when specifically requested.
+##   requiredTag: extended-upgrade
+
+set -eux -o pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# This test will attempt to test an upgrade from a given starting
+# point (assumed by the caller passing in a specific
+# `cosa kola run --build=x.y.z`) all the way to the latest build
+# that is staged to be released. The test is basic in that it
+# essentially tests 1) updates work 2) boot works.
+#
+# An example invocation for this test would look like:
+
+# ```
+# cosa buildfetch --stream=next --build=34.20210904.1.0 --artifact=qemu
+# cosa decompress --build=34.20210904.1.0
+# cosa kola run --build=34.20210904.1.0 --tag extended-upgrade
+# ```
+#
+# You can monitor the progress from the console and journal:
+#   - everything:
+#       - tail -f tmp/kola/ext.config.upgrade.extended/*/console.txt
+#   - major events:
+#       - tail -f tmp/kola/ext.config.upgrade.extended/*/journal.txt | grep --color -i 'ok reached version'
+#
+# For convenience, here is a list of the earliest releases on each
+# stream/architecture:
+#
+# stable
+#   - x86_64  31.20200108.3.0
+#   - aarch64 34.20210821.3.0
+#   - s390x   36.20220618.3.1
+# testing
+#   - x86_64  30.20190716.1
+#   - aarch64 34.20210904.2.0
+#   - s390x   36.20220618.2.0
+# next
+#   - x86_64  32.20200416.1.0
+#   - aarch64 34.20210904.1.0
+#   - s390x   36.20220618.1.1
+
+. /etc/os-release # for $VERSION_ID
+
+# delete the disabling of updates that was done by the test framework
+if [ -f /etc/zincati/config.d/90-disable-auto-updates.toml ]; then
+    rm -f /etc/zincati/config.d/90-disable-auto-updates.toml
+    systemctl restart zincati
+fi
+
+version=$(rpm-ostree status  --json | jq -r '.deployments[0].version')
+stream=$(rpm-ostree status  --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
+
+test -f /srv/releases.json || \
+    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/releases.json" > /srv/releases.json
+test -f /srv/builds.json || \
+    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/builds/builds.json" > /srv/builds.json
+
+last_release=$(jq -r .releases[-1].version /srv/releases.json)
+target_version=$(jq -r .builds[0].id /srv/builds.json)
+
+grab-gpg-keys() {
+    # For older FCOS we had an issue where when we tried to pull the
+    # commits from the repo it would fail if we were on N-2 because
+    # the newer commits would be signed with a key the old OS didn't
+    # know anything about. We applied a workaround in newer releases,
+    # so this workaround should be limited to zincati older than v0.0.24
+    # https://github.com/coreos/fedora-coreos-tracker/issues/749
+    max_version=${target_version:0:2} # i.e. 36, 37, 38, etc..
+    for ver in $(seq $VERSION_ID $max_version); do
+        test -e "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary" && continue
+        curl -L "https://src.fedoraproject.org/rpms/fedora-repos/raw/rawhide/f/RPM-GPG-KEY-fedora-${ver}-primary" | \
+            sudo tee "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
+        sudo chcon -v --reference="/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${VERSION_ID}-primary" "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
+    done
+}
+
+fix-update-url() {
+    # We switched to non stg URL in zincati v0.0.10 [1]. For older clients
+    # we need to update the runtime configuration of zincati to get past the problem.
+    # [1] https://github.com/coreos/zincati/commit/1d73801ccd015cdce89f082cb1eeb9b4b8335760
+    cat <<'EOF' > /run/zincati/config.d/50-fedora-coreos-cincinnati.toml
+[cincinnati]
+base_url= "https://updates.coreos.fedoraproject.org"
+EOF
+    systemctl restart zincati
+}
+
+ok "Reached version: $version"
+
+# Are we all the way at the desired target version?
+# If so then we can exit with success!
+if vereq $version $target_version; then
+    ok "Fully upgraded to $target_version"
+    bootupctl status
+    exit 0
+fi
+
+# Apply workarounds based on the current version of the system.
+#
+# First release on each stream with new enough zincati for updates stg.fedoraprojec.org
+# - 31.20200505.3.0
+# - 31.20200505.2.0
+# - 32.20200505.1.0
+#
+# First release with new enough zincati with workaround for N-2 gpg key issue
+# - 35.20211119.3.0
+# - 35.20211119.2.0
+# - 35.20211119.1.0
+#
+case "$stream" in
+    'next')
+        verlt $version '35.20211119.1.0' && grab-gpg-keys
+        verlt $version '31.20200505.1.0' && fix-update-url
+        ;;
+    'testing')
+        verlt $version '35.20211119.2.0' && grab-gpg-keys
+        verlt $version '31.20200505.2.0' && fix-update-url
+        ;;
+    'stable')
+        verlt $version '35.20211119.3.0' && grab-gpg-keys
+        verlt $version '31.20200505.3.0' && fix-update-url
+        ;;
+    *) fatal "unexpected stream: $stream";;
+esac
+
+# If we have made it all the way to the last release then
+# we have one more test. We'll now rebase to the target
+# version, which should be in the compose OSTree repo.
+if vereq $version $last_release; then
+    systemctl stop zincati
+    rpm-ostree rebase fedora-compose: $target_version
+    /tmp/autopkgtest-reboot reboot # execute the reboot
+    sleep infinity
+fi
+
+# Watch the Zincati logs to see if it got a lead on a new update.
+# Timeout after some time if no update. Unset pipefail since the
+# journalctl -f will give a bad exit code when grep exits early.
+set +o pipefail
+cmd="journalctl -b 0 -f --no-tail -u zincati.service"
+if ! timeout 90s $cmd | grep --max-count=1 'proceeding to stage it'; then
+    # No update initiated within timeout; let's error.
+    fatal "Updating the system stalled out on version: $version"
+fi
+set -o pipefail
+
+
+# OK update has been initiated, prepare for reboot and sleep
+/tmp/autopkgtest-reboot-prepare reboot
+sleep infinity

From fc5f1a48bf7cd724d17793d97cf31039a93b7d64 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 23 Mar 2023 14:08:16 -0400
Subject: [PATCH 1523/2157] denylist: expand kdump.crash denial to all streams

The 6.2 kernel is now heading towards our production streams so
the failure will propagate there.

See https://github.com/coreos/fedora-coreos-tracker/issues/1430
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 82e034609a..f9fc832b91 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,8 +34,3 @@
   snooze: 2023-04-12
   arches:
     - aarch64
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next

From 82033dfcda8f617f86aa5249ff8465c3811076ad Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 Mar 2023 21:59:47 +0000
Subject: [PATCH 1524/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/461/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 17 ++++++++++-------
 manifest-lock.ppc64le.json | 17 ++++++++++-------
 manifest-lock.s390x.json   | 17 ++++++++++-------
 manifest-lock.x86_64.json  | 17 ++++++++++-------
 4 files changed, 40 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ce411ff02d..3a2bdb90e7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -487,13 +487,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.18-200.fc37.aarch64"
+      "evra": "6.2.7-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.1.18-200.fc37.aarch64"
+      "evra": "6.2.7-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.1.18-200.fc37.aarch64"
+      "evra": "6.2.7-200.fc37.aarch64"
+    },
+    "kernel-modules-core": {
+      "evra": "6.2.7-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -1177,7 +1180,7 @@
       "evra": "251.13-6.fc37.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-5.fc37.aarch64"
+      "evra": "2:1.34-6.fc37.aarch64"
     },
     "teamd": {
       "evra": "1.31-6.fc37.aarch64"
@@ -1247,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-03-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:31Z"
+        "generated": "2023-03-23T00:37:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-22T01:20:02Z"
+        "generated": "2023-03-23T01:21:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 69c7994c2e..c22ca1b4df 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -481,13 +481,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.18-200.fc37.ppc64le"
+      "evra": "6.2.7-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.1.18-200.fc37.ppc64le"
+      "evra": "6.2.7-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.1.18-200.fc37.ppc64le"
+      "evra": "6.2.7-200.fc37.ppc64le"
+    },
+    "kernel-modules-core": {
+      "evra": "6.2.7-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -1180,7 +1183,7 @@
       "evra": "251.13-6.fc37.ppc64le"
     },
     "tar": {
-      "evra": "2:1.34-5.fc37.ppc64le"
+      "evra": "2:1.34-6.fc37.ppc64le"
     },
     "teamd": {
       "evra": "1.31-6.fc37.ppc64le"
@@ -1250,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-03-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:15Z"
+        "generated": "2023-03-23T00:36:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-22T01:20:15Z"
+        "generated": "2023-03-23T01:21:37Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9eba9c36a2..e25bf76120 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -448,13 +448,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.18-200.fc37.s390x"
+      "evra": "6.2.7-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.1.18-200.fc37.s390x"
+      "evra": "6.2.7-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.1.18-200.fc37.s390x"
+      "evra": "6.2.7-200.fc37.s390x"
+    },
+    "kernel-modules-core": {
+      "evra": "6.2.7-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -1105,7 +1108,7 @@
       "evra": "251.13-6.fc37.s390x"
     },
     "tar": {
-      "evra": "2:1.34-5.fc37.s390x"
+      "evra": "2:1.34-6.fc37.s390x"
     },
     "teamd": {
       "evra": "1.31-6.fc37.s390x"
@@ -1178,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-03-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:41Z"
+        "generated": "2023-03-23T00:36:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-22T01:20:22Z"
+        "generated": "2023-03-23T01:21:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ae4ba77f2e..65df2a1fe2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -493,13 +493,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.1.18-200.fc37.x86_64"
+      "evra": "6.2.7-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.1.18-200.fc37.x86_64"
+      "evra": "6.2.7-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.1.18-200.fc37.x86_64"
+      "evra": "6.2.7-200.fc37.x86_64"
+    },
+    "kernel-modules-core": {
+      "evra": "6.2.7-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -1186,7 +1189,7 @@
       "evra": "251.13-6.fc37.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-5.fc37.x86_64"
+      "evra": "2:1.34-6.fc37.x86_64"
     },
     "teamd": {
       "evra": "1.31-6.fc37.x86_64"
@@ -1256,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-03-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:47:06Z"
+        "generated": "2023-03-23T00:37:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-22T01:20:28Z"
+        "generated": "2023-03-23T01:21:50Z"
       }
     }
   }

From e652eb9aa27bffbc439cee1e93d00e01bb403c96 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 24 Mar 2023 02:07:57 +0000
Subject: [PATCH 1525/2157] overrides: fast-track nmstate-2.2.9-2.fc37

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index baafe36522..029d74adb2 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,12 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  nmstate:
+    evr: 2.2.9-2.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2122902605
+      reason: https://github.com/coreos/coreos-assembler/pull/3397
+      type: fast-track
   xfsprogs:
     evr: 5.18.0-3.fc37
     metadata:

From 50fd1935509ea9f0cdf8e456dae9831af8474aa6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 25 Mar 2023 01:31:07 +0000
Subject: [PATCH 1526/2157] overrides: fast-track xfsprogs-6.1.0-2.fc37

---
 manifest-lock.overrides.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 029d74adb2..b947bc2e1a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -16,7 +16,8 @@ packages:
       reason: https://github.com/coreos/coreos-assembler/pull/3397
       type: fast-track
   xfsprogs:
-    evr: 5.18.0-3.fc37
+    evr: 6.1.0-2.fc37
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-59700c9754
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1443
-      type: pin
+      type: fast-track

From 56386f92980fb2a4cd45def81a9a84bc11a3357c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 25 Mar 2023 05:13:15 +0000
Subject: [PATCH 1527/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/468/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 68 insertions(+), 68 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3a2bdb90e7..8e03d6b3e2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc37.noarch"
+      "evra": "2:2.205.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.aarch64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.8.1-1.fc37.aarch64"
+      "evra": "1.8.2-2.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-2.fc37.aarch64"
+      "evra": "1.14.4-1.fc37.aarch64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.aarch64"
@@ -727,16 +727,16 @@
       "evra": "2.5.3-3.fc37.aarch64"
     },
     "libselinux": {
-      "evra": "3.4-5.fc37.aarch64"
+      "evra": "3.5-1.fc37.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.4-5.fc37.aarch64"
+      "evra": "3.5-1.fc37.aarch64"
     },
     "libsemanage": {
-      "evra": "3.4-5.fc37.aarch64"
+      "evra": "3.5-1.fc37.aarch64"
     },
     "libsepol": {
-      "evra": "3.4-3.fc37.aarch64"
+      "evra": "3.5-1.fc37.aarch64"
     },
     "libsigsegv": {
       "evra": "2.14-3.fc37.aarch64"
@@ -916,7 +916,7 @@
       "evra": "1:1.0.4-3.fc37.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.8-2.fc37.aarch64"
+      "evra": "2.2.9-2.fc37.aarch64"
     },
     "npth": {
       "evra": "1.6-9.fc37.aarch64"
@@ -1006,7 +1006,7 @@
       "evra": "5:4.4.2-2.fc37.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.4-6.fc37.aarch64"
+      "evra": "3.5-1.fc37.aarch64"
     },
     "polkit": {
       "evra": "121-4.fc37.aarch64"
@@ -1090,10 +1090,10 @@
       "evra": "1.46-4.fc37.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-4.fc37.aarch64"
+      "evra": "2:4.12.3-5.fc37.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-4.fc37.aarch64"
+      "evra": "2:4.12.3-5.fc37.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.aarch64"
@@ -1207,10 +1207,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc37.noarch"
+      "evra": "2:9.0.1423-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc37.aarch64"
+      "evra": "2:9.0.1423-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc37.aarch64"
@@ -1219,7 +1219,7 @@
       "evra": "1.0.20210914-3.fc37.aarch64"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.aarch64"
+      "evra": "6.1.0-2.fc37.aarch64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-23T00:00:00Z",
+    "generated": "2023-03-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-23T00:37:10Z"
+        "generated": "2023-03-25T02:49:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-23T01:21:24Z"
+        "generated": "2023-03-25T01:53:20Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c22ca1b4df..a8662b1724 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc37.noarch"
+      "evra": "2:2.205.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.ppc64le"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.8.1-1.fc37.ppc64le"
+      "evra": "1.8.2-2.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -304,7 +304,7 @@
       "evra": "1:4.9.0-2.fc37.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-2.fc37.ppc64le"
+      "evra": "1.14.4-1.fc37.ppc64le"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.ppc64le"
@@ -724,16 +724,16 @@
       "evra": "2.5.3-3.fc37.ppc64le"
     },
     "libselinux": {
-      "evra": "3.4-5.fc37.ppc64le"
+      "evra": "3.5-1.fc37.ppc64le"
     },
     "libselinux-utils": {
-      "evra": "3.4-5.fc37.ppc64le"
+      "evra": "3.5-1.fc37.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.4-5.fc37.ppc64le"
+      "evra": "3.5-1.fc37.ppc64le"
     },
     "libsepol": {
-      "evra": "3.4-3.fc37.ppc64le"
+      "evra": "3.5-1.fc37.ppc64le"
     },
     "libservicelog": {
       "evra": "1.1.19-4.fc37.ppc64le"
@@ -913,7 +913,7 @@
       "evra": "1:1.0.4-3.fc37.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.8-2.fc37.ppc64le"
+      "evra": "2.2.9-2.fc37.ppc64le"
     },
     "npth": {
       "evra": "1.6-9.fc37.ppc64le"
@@ -1006,7 +1006,7 @@
       "evra": "5:4.4.2-2.fc37.ppc64le"
     },
     "policycoreutils": {
-      "evra": "3.4-6.fc37.ppc64le"
+      "evra": "3.5-1.fc37.ppc64le"
     },
     "polkit": {
       "evra": "121-4.fc37.ppc64le"
@@ -1099,10 +1099,10 @@
       "evra": "1.46-4.fc37.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-4.fc37.ppc64le"
+      "evra": "2:4.12.3-5.fc37.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-4.fc37.ppc64le"
+      "evra": "2:4.12.3-5.fc37.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.ppc64le"
@@ -1210,10 +1210,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc37.noarch"
+      "evra": "2:9.0.1423-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc37.ppc64le"
+      "evra": "2:9.0.1423-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc37.ppc64le"
@@ -1222,7 +1222,7 @@
       "evra": "1.0.20210914-3.fc37.ppc64le"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.ppc64le"
+      "evra": "6.1.0-2.fc37.ppc64le"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-23T00:00:00Z",
+    "generated": "2023-03-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-23T00:36:45Z"
+        "generated": "2023-03-25T02:49:02Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-23T01:21:37Z"
+        "generated": "2023-03-25T01:53:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e25bf76120..f2f104a422 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc37.noarch"
+      "evra": "2:2.205.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.s390x"
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.8.1-1.fc37.s390x"
+      "evra": "1.8.2-2.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -301,7 +301,7 @@
       "evra": "1:4.9.0-2.fc37.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-2.fc37.s390x"
+      "evra": "1.14.4-1.fc37.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.s390x"
@@ -676,16 +676,16 @@
       "evra": "2.5.3-3.fc37.s390x"
     },
     "libselinux": {
-      "evra": "3.4-5.fc37.s390x"
+      "evra": "3.5-1.fc37.s390x"
     },
     "libselinux-utils": {
-      "evra": "3.4-5.fc37.s390x"
+      "evra": "3.5-1.fc37.s390x"
     },
     "libsemanage": {
-      "evra": "3.4-5.fc37.s390x"
+      "evra": "3.5-1.fc37.s390x"
     },
     "libsepol": {
-      "evra": "3.4-3.fc37.s390x"
+      "evra": "3.5-1.fc37.s390x"
     },
     "libsigsegv": {
       "evra": "2.14-3.fc37.s390x"
@@ -856,7 +856,7 @@
       "evra": "1:1.0.4-3.fc37.s390x"
     },
     "nmstate": {
-      "evra": "2.2.8-2.fc37.s390x"
+      "evra": "2.2.9-2.fc37.s390x"
     },
     "npth": {
       "evra": "1.6-9.fc37.s390x"
@@ -940,7 +940,7 @@
       "evra": "5:4.4.2-2.fc37.s390x"
     },
     "policycoreutils": {
-      "evra": "3.4-6.fc37.s390x"
+      "evra": "3.5-1.fc37.s390x"
     },
     "polkit": {
       "evra": "121-4.fc37.s390x"
@@ -1027,10 +1027,10 @@
       "evra": "1.46-4.fc37.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-4.fc37.s390x"
+      "evra": "2:4.12.3-5.fc37.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-4.fc37.s390x"
+      "evra": "2:4.12.3-5.fc37.s390x"
     },
     "skopeo": {
       "evra": "1:1.11.1-1.fc37.s390x"
@@ -1138,10 +1138,10 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc37.noarch"
+      "evra": "2:9.0.1423-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc37.s390x"
+      "evra": "2:9.0.1423-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-39.fc37.s390x"
@@ -1150,7 +1150,7 @@
       "evra": "1.0.20210914-3.fc37.s390x"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.s390x"
+      "evra": "6.1.0-2.fc37.s390x"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-23T00:00:00Z",
+    "generated": "2023-03-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-23T00:36:29Z"
+        "generated": "2023-03-25T02:48:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-23T01:21:44Z"
+        "generated": "2023-03-25T01:53:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 65df2a1fe2..f1d1db387a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc37.noarch"
+      "evra": "2:2.205.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.x86_64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.8.1-1.fc37.x86_64"
+      "evra": "1.8.2-2.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-2.fc37.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.1-2.fc37.x86_64"
+      "evra": "1.14.4-1.fc37.x86_64"
     },
     "fstrm": {
       "evra": "0.6.1-5.fc37.x86_64"
@@ -733,16 +733,16 @@
       "evra": "2.5.3-3.fc37.x86_64"
     },
     "libselinux": {
-      "evra": "3.4-5.fc37.x86_64"
+      "evra": "3.5-1.fc37.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.4-5.fc37.x86_64"
+      "evra": "3.5-1.fc37.x86_64"
     },
     "libsemanage": {
-      "evra": "3.4-5.fc37.x86_64"
+      "evra": "3.5-1.fc37.x86_64"
     },
     "libsepol": {
-      "evra": "3.4-3.fc37.x86_64"
+      "evra": "3.5-1.fc37.x86_64"
     },
     "libsigsegv": {
       "evra": "2.14-3.fc37.x86_64"
@@ -928,7 +928,7 @@
       "evra": "1:1.0.4-3.fc37.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.8-2.fc37.x86_64"
+      "evra": "2.2.9-2.fc37.x86_64"
     },
     "npth": {
       "evra": "1.6-9.fc37.x86_64"
@@ -1018,7 +1018,7 @@
       "evra": "5:4.4.2-2.fc37.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.4-6.fc37.x86_64"
+      "evra": "3.5-1.fc37.x86_64"
     },
     "polkit": {
       "evra": "121-4.fc37.x86_64"
@@ -1099,10 +1099,10 @@
       "evra": "1.46-4.fc37.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-4.fc37.x86_64"
+      "evra": "2:4.12.3-5.fc37.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-4.fc37.x86_64"
+      "evra": "2:4.12.3-5.fc37.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.x86_64"
@@ -1216,10 +1216,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc37.noarch"
+      "evra": "2:9.0.1423-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc37.x86_64"
+      "evra": "2:9.0.1423-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc37.x86_64"
@@ -1228,7 +1228,7 @@
       "evra": "1.0.20210914-3.fc37.x86_64"
     },
     "xfsprogs": {
-      "evra": "5.18.0-3.fc37.x86_64"
+      "evra": "6.1.0-2.fc37.x86_64"
     },
     "xxhash-libs": {
       "evra": "0.8.1-3.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-23T00:00:00Z",
+    "generated": "2023-03-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-23T00:37:52Z"
+        "generated": "2023-03-25T02:49:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-23T01:21:50Z"
+        "generated": "2023-03-25T01:53:47Z"
       }
     }
   }

From 1b4f19cb2828373d4c5fc46adf733f166515be46 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 25 Mar 2023 03:42:29 -0400
Subject: [PATCH 1528/2157] denylist: re-snooze tests using Butane experimental
 spec

Allow ratcheting the Butane spec stabilization into coreos-assembler.
---
 kola-denylist.yaml | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f9fc832b91..09201b5997 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -14,13 +14,21 @@
   arches:
     - ppc64le
 - pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  arches:
-    - s390x
-  streams:
-    - testing-devel
-    - testing
-    - stable
+  tracker: https://github.com/coreos/butane/issues/430
+  snooze: 2023-03-31
+  #tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  #arches:
+  #  - s390x
+  #streams:
+  #  - testing-devel
+  #  - testing
+  #  - stable
+- pattern: ext.config.ignition.resource.authenticated-s3
+  tracker: https://github.com/coreos/butane/issues/430
+  snooze: 2023-03-31
+- pattern: ext.config.butane.grub-users
+  tracker: https://github.com/coreos/butane/issues/430
+  snooze: 2023-03-31
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 79f7861683c97dd4e05c7a4753b3a5b951d9eb14 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Mar 2023 22:17:51 +0000
Subject: [PATCH 1529/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/471/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8e03d6b3e2..6d53a2579f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -34,7 +34,7 @@
       "evra": "5.4.0-1.fc37.aarch64"
     },
     "alternatives": {
-      "evra": "1.21-1.fc37.aarch64"
+      "evra": "1.22-1.fc37.aarch64"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc37.noarch"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc37.aarch64"
+      "evra": "32:9.18.13-1.fc37.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc37.aarch64"
+      "evra": "32:9.18.13-1.fc37.aarch64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.aarch64"
@@ -394,16 +394,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc37.noarch"
+      "evra": "1:2.06-89.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-88.fc37.aarch64"
+      "evra": "1:2.06-89.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc37.aarch64"
+      "evra": "1:2.06-89.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc37.aarch64"
+      "evra": "1:2.06-89.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-25T00:00:00Z",
+    "generated": "2023-03-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T02:49:24Z"
+        "generated": "2023-03-25T05:18:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-25T01:53:20Z"
+        "generated": "2023-03-26T01:12:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a8662b1724..96b53a6ece 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -34,7 +34,7 @@
       "evra": "5.4.0-1.fc37.ppc64le"
     },
     "alternatives": {
-      "evra": "1.21-1.fc37.ppc64le"
+      "evra": "1.22-1.fc37.ppc64le"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc37.noarch"
@@ -67,13 +67,13 @@
       "evra": "1.07.1-16.fc37.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc37.ppc64le"
+      "evra": "32:9.18.13-1.fc37.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc37.ppc64le"
+      "evra": "32:9.18.13-1.fc37.ppc64le"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.ppc64le"
@@ -385,19 +385,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc37.noarch"
+      "evra": "1:2.06-89.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-88.fc37.ppc64le"
+      "evra": "1:2.06-89.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-88.fc37.noarch"
+      "evra": "1:2.06-89.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc37.ppc64le"
+      "evra": "1:2.06-89.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc37.ppc64le"
+      "evra": "1:2.06-89.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-25T00:00:00Z",
+    "generated": "2023-03-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T02:49:02Z"
+        "generated": "2023-03-25T05:18:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-25T01:53:34Z"
+        "generated": "2023-03-26T01:12:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f2f104a422..b7332e9b32 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -34,7 +34,7 @@
       "evra": "5.4.0-1.fc37.s390x"
     },
     "alternatives": {
-      "evra": "1.21-1.fc37.s390x"
+      "evra": "1.22-1.fc37.s390x"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc37.noarch"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc37.s390x"
+      "evra": "32:9.18.13-1.fc37.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc37.s390x"
+      "evra": "32:9.18.13-1.fc37.s390x"
     },
     "bsdtar": {
       "evra": "3.6.1-3.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-25T00:00:00Z",
+    "generated": "2023-03-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T02:48:44Z"
+        "generated": "2023-03-25T05:16:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-25T01:53:40Z"
+        "generated": "2023-03-26T01:12:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f1d1db387a..351d827922 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -34,7 +34,7 @@
       "evra": "5.4.0-1.fc37.x86_64"
     },
     "alternatives": {
-      "evra": "1.21-1.fc37.x86_64"
+      "evra": "1.22-1.fc37.x86_64"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc37.noarch"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-8.fc37.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc37.x86_64"
+      "evra": "32:9.18.13-1.fc37.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc37.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc37.x86_64"
+      "evra": "32:9.18.13-1.fc37.x86_64"
     },
     "bootupd": {
       "evra": "0.2.8-3.fc37.x86_64"
@@ -394,22 +394,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc37.noarch"
+      "evra": "1:2.06-89.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-88.fc37.x86_64"
+      "evra": "1:2.06-89.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-88.fc37.x86_64"
+      "evra": "1:2.06-89.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-88.fc37.noarch"
+      "evra": "1:2.06-89.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc37.x86_64"
+      "evra": "1:2.06-89.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc37.x86_64"
+      "evra": "1:2.06-89.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-25T00:00:00Z",
+    "generated": "2023-03-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T02:49:53Z"
+        "generated": "2023-03-25T05:19:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-25T01:53:47Z"
+        "generated": "2023-03-26T01:12:32Z"
       }
     }
   }

From e6d05c99d7ec98cf90d16c5dcaa563e98d67ae8d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 28 Mar 2023 19:56:27 +0000
Subject: [PATCH 1530/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/476/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 47 insertions(+), 47 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6d53a2579f..66d30e464e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc37.aarch64"
+      "evra": "6.2.2-1.fc37.aarch64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.aarch64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.205.0-1.fc37.noarch"
+      "evra": "2:2.206.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.aarch64"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-7.fc37.aarch64"
+      "evra": "7.85.0-8.fc37.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.aarch64"
@@ -487,16 +487,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-200.fc37.aarch64"
+      "evra": "6.2.8-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.7-200.fc37.aarch64"
+      "evra": "6.2.8-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.7-200.fc37.aarch64"
+      "evra": "6.2.8-200.fc37.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-200.fc37.aarch64"
+      "evra": "6.2.8-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-3.fc37.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-7.fc37.aarch64"
+      "evra": "7.85.0-8.fc37.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.aarch64"
@@ -1033,7 +1033,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-14.fc37.aarch64"
+      "evra": "2:7.0.0-15.fc37.aarch64"
     },
     "readline": {
       "evra": "8.2-2.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-26T00:00:00Z",
+    "generated": "2023-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T05:18:37Z"
+        "generated": "2023-03-26T22:36:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-26T01:12:05Z"
+        "generated": "2023-03-28T01:53:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 96b53a6ece..7e77517489 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc37.ppc64le"
+      "evra": "6.2.2-1.fc37.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.ppc64le"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.205.0-1.fc37.noarch"
+      "evra": "2:2.206.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.ppc64le"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-7.fc37.ppc64le"
+      "evra": "7.85.0-8.fc37.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.ppc64le"
@@ -481,16 +481,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-200.fc37.ppc64le"
+      "evra": "6.2.8-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.7-200.fc37.ppc64le"
+      "evra": "6.2.8-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.7-200.fc37.ppc64le"
+      "evra": "6.2.8-200.fc37.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-200.fc37.ppc64le"
+      "evra": "6.2.8-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -562,7 +562,7 @@
       "evra": "1.46.5-3.fc37.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-7.fc37.ppc64le"
+      "evra": "7.85.0-8.fc37.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.ppc64le"
@@ -1039,7 +1039,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-14.fc37.ppc64le"
+      "evra": "2:7.0.0-15.fc37.ppc64le"
     },
     "readline": {
       "evra": "8.2-2.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-26T00:00:00Z",
+    "generated": "2023-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T05:18:22Z"
+        "generated": "2023-03-26T22:37:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-26T01:12:18Z"
+        "generated": "2023-03-28T01:53:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b7332e9b32..5c00283628 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -76,7 +76,7 @@
       "evra": "3.6.1-3.fc37.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc37.s390x"
+      "evra": "6.2.2-1.fc37.s390x"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.s390x"
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.205.0-1.fc37.noarch"
+      "evra": "2:2.206.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.s390x"
@@ -184,7 +184,7 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "curl": {
-      "evra": "7.85.0-7.fc37.s390x"
+      "evra": "7.85.0-8.fc37.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.s390x"
@@ -448,16 +448,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-200.fc37.s390x"
+      "evra": "6.2.8-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.7-200.fc37.s390x"
+      "evra": "6.2.8-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.7-200.fc37.s390x"
+      "evra": "6.2.8-200.fc37.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-200.fc37.s390x"
+      "evra": "6.2.8-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -529,7 +529,7 @@
       "evra": "1.46.5-3.fc37.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-7.fc37.s390x"
+      "evra": "7.85.0-8.fc37.s390x"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.s390x"
@@ -967,7 +967,7 @@
       "evra": "20210518-5.fc37.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-14.fc37.s390x"
+      "evra": "2:7.0.0-15.fc37.s390x"
     },
     "readline": {
       "evra": "8.2-2.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-26T00:00:00Z",
+    "generated": "2023-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T05:16:46Z"
+        "generated": "2023-03-26T22:37:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-26T01:12:25Z"
+        "generated": "2023-03-28T01:53:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 351d827922..ac6053ef53 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -79,7 +79,7 @@
       "evra": "3.6.1-3.fc37.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc37.x86_64"
+      "evra": "6.2.2-1.fc37.x86_64"
     },
     "bubblewrap": {
       "evra": "0.5.0-3.fc37.x86_64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.205.0-1.fc37.noarch"
+      "evra": "2:2.206.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.x86_64"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc37.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-7.fc37.x86_64"
+      "evra": "7.85.0-8.fc37.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-8.fc37.x86_64"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-200.fc37.x86_64"
+      "evra": "6.2.8-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.7-200.fc37.x86_64"
+      "evra": "6.2.8-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.7-200.fc37.x86_64"
+      "evra": "6.2.8-200.fc37.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-200.fc37.x86_64"
+      "evra": "6.2.8-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -574,7 +574,7 @@
       "evra": "1.46.5-3.fc37.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-7.fc37.x86_64"
+      "evra": "7.85.0-8.fc37.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-24.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-26T00:00:00Z",
+    "generated": "2023-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-25T05:19:15Z"
+        "generated": "2023-03-26T22:37:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-26T01:12:32Z"
+        "generated": "2023-03-28T01:53:34Z"
       }
     }
   }

From 7faf4f50a90437a93a2a7f2905aa4c5f28983039 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 28 Mar 2023 14:53:56 -0400
Subject: [PATCH 1531/2157] tests/kola: hard-disable tests using Butane
 experimental spec

Allow ratcheting the Butane spec stabilization into coreos-assembler.
Snoozing them isn't enough, since kola still tries to parse the configs.
---
 tests/kola/butane/grub-users/test.sh                  | 0
 tests/kola/ignition/resource/authenticated-s3/test.sh | 0
 tests/kola/ignition/resource/remote/test.sh           | 0
 3 files changed, 0 insertions(+), 0 deletions(-)
 mode change 100755 => 100644 tests/kola/butane/grub-users/test.sh
 mode change 100755 => 100644 tests/kola/ignition/resource/authenticated-s3/test.sh
 mode change 100755 => 100644 tests/kola/ignition/resource/remote/test.sh

diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
old mode 100755
new mode 100644
diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
old mode 100755
new mode 100644
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
old mode 100755
new mode 100644

From fc7c5317072ec8ad98ea963341766278f50d349a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 28 Mar 2023 14:54:13 -0400
Subject: [PATCH 1532/2157] Revert "denylist: re-snooze tests using Butane
 experimental spec"

This reverts commit 1b4f19cb2828373d4c5fc46adf733f166515be46.
---
 kola-denylist.yaml | 22 +++++++---------------
 1 file changed, 7 insertions(+), 15 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 09201b5997..f9fc832b91 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -14,21 +14,13 @@
   arches:
     - ppc64le
 - pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/butane/issues/430
-  snooze: 2023-03-31
-  #tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  #arches:
-  #  - s390x
-  #streams:
-  #  - testing-devel
-  #  - testing
-  #  - stable
-- pattern: ext.config.ignition.resource.authenticated-s3
-  tracker: https://github.com/coreos/butane/issues/430
-  snooze: 2023-03-31
-- pattern: ext.config.butane.grub-users
-  tracker: https://github.com/coreos/butane/issues/430
-  snooze: 2023-03-31
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
+  arches:
+    - s390x
+  streams:
+    - testing-devel
+    - testing
+    - stable
 - pattern: rpmostree.install-uninstall
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
   arches:

From 5e61806bfc2be4578a95d20eee1d3b5bcaa76752 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 28 Mar 2023 16:11:28 -0400
Subject: [PATCH 1533/2157] overlay.d/20platform-chrony: additional skip of
 platform chrony config

Typically we'd think the user would only pass in optional arguments
to chrony via OPTIONS in /etc/sysconfig/chronyd but we found a case
where a user was providing actual config directives. Let's also
exit early out of coreos-platform-chrony-config if /etc/sysconfig/chronyd
has been touched. If either /etc/chrony.conf or /etc/sysconfig/chronyd
has been touched we just consider the user to own the config and not
do anything special based on the platform.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1449
---
 .../usr/libexec/coreos-platform-chrony-config                 | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index 4f69312f74..41e6c0b951 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -18,6 +18,10 @@ if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
     echo "$self: /etc/chrony.conf is modified; not changing the default"
     exit 0
 fi
+if ! cmp {/usr,}/etc/sysconfig/chronyd >/dev/null; then
+    echo "$self: /etc/sysconfig/chronyd is modified; not changing the default"
+    exit 0
+fi
 
 mkdir -p /run/coreos
 confpath=/run/coreos/platform-chrony.conf

From 340ea91ee71201e50fc6ab17c61ba30d447d4dd0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 29 Mar 2023 06:05:58 +0000
Subject: [PATCH 1534/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b947bc2e1a..cef6ccaf91 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,9 +15,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2122902605
       reason: https://github.com/coreos/coreos-assembler/pull/3397
       type: fast-track
-  xfsprogs:
-    evr: 6.1.0-2.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-59700c9754
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1443
-      type: fast-track

From b0ffe7c29d74d2d520a816ee4e194be13ff9fcce Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 25 Mar 2023 03:49:17 -0400
Subject: [PATCH 1535/2157] tests/kola: stabilize Butane 1.5.0 spec

---
 tests/kola/butane/grub-users/config.bu                  | 2 +-
 tests/kola/ignition/resource/authenticated-s3/config.bu | 2 +-
 tests/kola/ignition/resource/remote/config.bu           | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/kola/butane/grub-users/config.bu b/tests/kola/butane/grub-users/config.bu
index 10e389fa38..b29a490d51 100644
--- a/tests/kola/butane/grub-users/config.bu
+++ b/tests/kola/butane/grub-users/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 grub:
   users:
     - name: bovik
diff --git a/tests/kola/ignition/resource/authenticated-s3/config.bu b/tests/kola/ignition/resource/authenticated-s3/config.bu
index 73921033ec..444a258a72 100644
--- a/tests/kola/ignition/resource/authenticated-s3/config.bu
+++ b/tests/kola/ignition/resource/authenticated-s3/config.bu
@@ -2,7 +2,7 @@
 # associated with the instance
 
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 ignition:
   config:
     merge:
diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index b9e0b15f1e..ea45d98587 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 storage:
   files:
     - path: /var/resource/http

From 18845a9d0800f839fd5bf25172b828b875ec91b8 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 28 Mar 2023 14:56:19 -0400
Subject: [PATCH 1536/2157] Revert "tests/kola: hard-disable tests using Butane
 experimental spec"

This reverts commit 7f7f3edc31070a6e75162e3440b3727ca4c56355.
---
 tests/kola/butane/grub-users/test.sh                  | 0
 tests/kola/ignition/resource/authenticated-s3/test.sh | 0
 tests/kola/ignition/resource/remote/test.sh           | 0
 3 files changed, 0 insertions(+), 0 deletions(-)
 mode change 100644 => 100755 tests/kola/butane/grub-users/test.sh
 mode change 100644 => 100755 tests/kola/ignition/resource/authenticated-s3/test.sh
 mode change 100644 => 100755 tests/kola/ignition/resource/remote/test.sh

diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
old mode 100644
new mode 100755
diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
old mode 100644
new mode 100755
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
old mode 100644
new mode 100755

From 720085da04cac4e8e3b767136edf6f5d65a86d8f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 29 Mar 2023 22:15:25 +0000
Subject: [PATCH 1537/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/480/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 66d30e464e..5a570bd83c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1207,10 +1207,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1423-1.fc37.noarch"
+      "evra": "2:9.0.1429-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1423-1.fc37.aarch64"
+      "evra": "2:9.0.1429-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-28T00:00:00Z",
+    "generated": "2023-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-26T22:36:31Z"
+        "generated": "2023-03-28T23:58:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-28T01:53:08Z"
+        "generated": "2023-03-29T02:30:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7e77517489..51e6bff3bb 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1210,10 +1210,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1423-1.fc37.noarch"
+      "evra": "2:9.0.1429-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1423-1.fc37.ppc64le"
+      "evra": "2:9.0.1429-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-28T00:00:00Z",
+    "generated": "2023-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-26T22:37:27Z"
+        "generated": "2023-03-28T23:57:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-28T01:53:21Z"
+        "generated": "2023-03-29T02:31:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5c00283628..59a5c81d22 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1138,10 +1138,10 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1423-1.fc37.noarch"
+      "evra": "2:9.0.1429-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1423-1.fc37.s390x"
+      "evra": "2:9.0.1429-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-39.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-28T00:00:00Z",
+    "generated": "2023-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-26T22:37:00Z"
+        "generated": "2023-03-28T23:57:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-28T01:53:28Z"
+        "generated": "2023-03-29T02:31:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ac6053ef53..c8631750b2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1216,10 +1216,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1423-1.fc37.noarch"
+      "evra": "2:9.0.1429-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1423-1.fc37.x86_64"
+      "evra": "2:9.0.1429-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-28T00:00:00Z",
+    "generated": "2023-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-26T22:37:00Z"
+        "generated": "2023-03-29T00:00:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-28T01:53:34Z"
+        "generated": "2023-03-29T02:31:33Z"
       }
     }
   }

From b8c7b3615f48d174919dfe5d409510006f3e4abe Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 24 Mar 2023 23:54:56 -0400
Subject: [PATCH 1538/2157] tests/kola: update info about starting versions for
 upgrade test

We can't really perform the test for <F31 because of a bootloader
incompatibility. See https://github.com/coreos/fedora-coreos-tracker/issues/1448
---
 tests/kola/upgrade/extended/test.sh | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 6b6baece66..a47226923d 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -32,14 +32,16 @@ set -eux -o pipefail
 #       - tail -f tmp/kola/ext.config.upgrade.extended/*/journal.txt | grep --color -i 'ok reached version'
 #
 # For convenience, here is a list of the earliest releases on each
-# stream/architecture:
+# stream/architecture. x86_64 minimum version has to be 32.x because
+# of https://github.com/coreos/fedora-coreos-tracker/issues/1448
 #
 # stable
-#   - x86_64  31.20200108.3.0
+#   - x86_64  31.20200108.3.0 -> works for BIOS, not UEFI
+#             32.20200601.3.0
 #   - aarch64 34.20210821.3.0
 #   - s390x   36.20220618.3.1
 # testing
-#   - x86_64  30.20190716.1
+#   - x86_64  32.20200601.2.1
 #   - aarch64 34.20210904.2.0
 #   - s390x   36.20220618.2.0
 # next

From 9b7e65bc922d9b475c8f09a7b67e53a70ec660ca Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 24 Mar 2023 23:56:00 -0400
Subject: [PATCH 1539/2157] tests/kola: only print bootupctl info if exists in
 upgrade test

This won't exist on ppc64le and s390x. Let's avoice the failure
there.
---
 tests/kola/upgrade/extended/test.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index a47226923d..9f6ed9395c 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -101,7 +101,8 @@ ok "Reached version: $version"
 # If so then we can exit with success!
 if vereq $version $target_version; then
     ok "Fully upgraded to $target_version"
-    bootupctl status
+    # log bootupctl information for inspection where available
+    [ -f /usr/bin/bootupctl ] && /usr/bin/bootupctl status
     exit 0
 fi
 

From 2b0fe09b75c7200b538724be97081f035085164d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 28 Mar 2023 21:48:46 -0400
Subject: [PATCH 1540/2157] tests/kola: support injecting target stream for
 extended upgrade test

This will allow someone to inject (via --append-butane) an
/etc/target_stream file into the node used for the upgrade test.

```
$ cat stream.bu
variant: fcos
version: 1.4.0
storage:
  files:
    - path: /etc/target_stream
      mode: 0644
      contents:
        inline: |
          rawhide
$ cosa kola run --tag extended-upgrade --build=37.20230303.1.1 --append-butane=stream.bu
```
---
 tests/kola/upgrade/extended/test.sh | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 9f6ed9395c..3bd7b43efc 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -60,14 +60,20 @@ fi
 version=$(rpm-ostree status  --json | jq -r '.deployments[0].version')
 stream=$(rpm-ostree status  --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
 
+# Pick up the last release for the current stream
 test -f /srv/releases.json || \
     curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/releases.json" > /srv/releases.json
-test -f /srv/builds.json || \
-    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/builds/builds.json" > /srv/builds.json
-
 last_release=$(jq -r .releases[-1].version /srv/releases.json)
+
+# If the user dropped down a /etc/target_stream file then we'll
+# pick up the info from there.
+target_stream=$stream
+test -f /etc/target_stream && target_stream=$(< /etc/target_stream)
+test -f /srv/builds.json || \
+    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${target_stream}/builds/builds.json" > /srv/builds.json
 target_version=$(jq -r .builds[0].id /srv/builds.json)
 
+
 grab-gpg-keys() {
     # For older FCOS we had an issue where when we tried to pull the
     # commits from the repo it would fail if we were on N-2 because
@@ -139,7 +145,7 @@ esac
 # version, which should be in the compose OSTree repo.
 if vereq $version $last_release; then
     systemctl stop zincati
-    rpm-ostree rebase fedora-compose: $target_version
+    rpm-ostree rebase "fedora-compose:fedora/$(arch)/coreos/${target_stream}" $target_version
     /tmp/autopkgtest-reboot reboot # execute the reboot
     sleep infinity
 fi

From 4b380d86c0f9fe62e6d29798219870e81633fc75 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 30 Mar 2023 09:42:05 -0400
Subject: [PATCH 1541/2157] overlay.d/05core: don't omit dracut modules we
 don't ship anyway

We don't ship rngd, busybox, pcscd, or bluetooth, so there's no point in
listing them as modules to omit; the modules already know they can't be
installed.

This allows users to more easily include them in the initrd if they
do decide to overlay those packages and want them in the initrd (by
enabling local initramfs regeneration). Another use case is kata-
containers, which creates the guest OS using bits from the host and
wants to be able to include busybox for debugging purposes.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1450
---
 overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
index 6a32713b9f..3833a163ba 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
@@ -12,4 +12,4 @@ omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
 # We use systemd network naming
 omit_dracutmodules+=" biosdevname "
 # Random stuff we don't want
-omit_dracutmodules+=" rngd busybox dbus-daemon memstrack pcsc bluetooth "
+omit_dracutmodules+=" dbus-daemon memstrack "

From 668d24e4ba1a754e97a2d33ec130436fa8f702c0 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 19 Jan 2023 15:09:00 -0500
Subject: [PATCH 1542/2157] Revert "ignition-ostree-firstboot-uuid: nuke
 libblkid cache after UUID restamp"

This reverts commit e41fd27e3e5dafe671be47c449358aaee984b143.

We shouldn't need this anymore now that we don't rely on the cache:
- https://github.com/coreos/fedora-coreos-config/pull/2184
- https://github.com/coreos/coreos-installer/pull/1094

See also: https://github.com/coreos/fedora-coreos-config/pull/2181
---
 .../40ignition-ostree/ignition-ostree-firstboot-uuid          | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 21aca809e9..78e2fa70a0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -62,10 +62,6 @@ if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac
   udevadm settle || :
-  # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2162151.
-  # We nuke the blkid cache containing stale UUIDs so that future blkid calls
-  # (or tools leveraging libblkid) will be forced to re-probe.
-  rm -rf /run/blkid
   echo "Regenerated UUID for ${target}"
 else
   echo "No changes required for ${target} TYPE=${TYPE} UUID=${UUID}"

From 712bdca8020b72edb77db8637924fc0ebb8e825a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 7 Jul 2022 17:46:22 -0400
Subject: [PATCH 1543/2157] 35coreos-multipath: enter emergency.target if
 multipathd bootfs times out

This should be the default in almost all our initramfs systemd units.
Otherwise we'll keep limping on and other spurious errors might mislead
users.
---
 .../modules.d/35coreos-multipath/coreos-multipath-wait.target  | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
index b003f4d94b..e0fd500cd4 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -8,6 +8,9 @@ After=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
 Requires=multipathd.service
 After=multipathd.service
 
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
 # This is already enforced transitively by coreos-gpt-setup.service, but
 # let's be more explicit and list it directly here too.
 Before=coreos-ignition-setup-user.service

From fef40870aec5a7ad2b20f446791c592458bf10a9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 1 Apr 2023 22:27:37 +0000
Subject: [PATCH 1544/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/490/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5a570bd83c..c1964c48da 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc37.aarch64"
+      "evra": "5.4.0-2.fc37.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc37.aarch64"
+      "evra": "5.4.0-2.fc37.aarch64"
     },
     "alternatives": {
       "evra": "1.22-1.fc37.aarch64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.aarch64"
     },
     "crun": {
-      "evra": "1.8.2-2.fc37.aarch64"
+      "evra": "1.8.3-2.fc37.aarch64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1090,10 +1090,10 @@
       "evra": "1.46-4.fc37.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-5.fc37.aarch64"
+      "evra": "2:4.12.3-6.fc37.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-5.fc37.aarch64"
+      "evra": "2:4.12.3-6.fc37.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-29T00:00:00Z",
+    "generated": "2023-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-28T23:58:01Z"
+        "generated": "2023-03-31T22:55:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-29T02:30:58Z"
+        "generated": "2023-04-01T01:12:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 51e6bff3bb..18edb2f4e5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc37.ppc64le"
+      "evra": "5.4.0-2.fc37.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc37.ppc64le"
+      "evra": "5.4.0-2.fc37.ppc64le"
     },
     "alternatives": {
       "evra": "1.22-1.fc37.ppc64le"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.ppc64le"
     },
     "crun": {
-      "evra": "1.8.2-2.fc37.ppc64le"
+      "evra": "1.8.3-2.fc37.ppc64le"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1099,10 +1099,10 @@
       "evra": "1.46-4.fc37.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-5.fc37.ppc64le"
+      "evra": "2:4.12.3-6.fc37.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-5.fc37.ppc64le"
+      "evra": "2:4.12.3-6.fc37.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-29T00:00:00Z",
+    "generated": "2023-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-28T23:57:28Z"
+        "generated": "2023-03-31T22:54:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-29T02:31:15Z"
+        "generated": "2023-04-01T01:12:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 59a5c81d22..80d21b6e81 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc37.s390x"
+      "evra": "5.4.0-2.fc37.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc37.s390x"
+      "evra": "5.4.0-2.fc37.s390x"
     },
     "alternatives": {
       "evra": "1.22-1.fc37.s390x"
@@ -172,7 +172,7 @@
       "evra": "3.17.1-3.fc37.s390x"
     },
     "crun": {
-      "evra": "1.8.2-2.fc37.s390x"
+      "evra": "1.8.3-2.fc37.s390x"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1027,10 +1027,10 @@
       "evra": "1.46-4.fc37.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-5.fc37.s390x"
+      "evra": "2:4.12.3-6.fc37.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-5.fc37.s390x"
+      "evra": "2:4.12.3-6.fc37.s390x"
     },
     "skopeo": {
       "evra": "1:1.11.1-1.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-29T00:00:00Z",
+    "generated": "2023-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-28T23:57:58Z"
+        "generated": "2023-03-31T22:54:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-29T02:31:24Z"
+        "generated": "2023-04-01T01:13:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c8631750b2..ea332965a3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.1-11.fc37.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc37.x86_64"
+      "evra": "5.4.0-2.fc37.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc37.x86_64"
+      "evra": "5.4.0-2.fc37.x86_64"
     },
     "alternatives": {
       "evra": "1.22-1.fc37.x86_64"
@@ -175,7 +175,7 @@
       "evra": "3.17.1-3.fc37.x86_64"
     },
     "crun": {
-      "evra": "1.8.2-2.fc37.x86_64"
+      "evra": "1.8.3-2.fc37.x86_64"
     },
     "crypto-policies": {
       "evra": "20220815-1.gite4ed860.fc37.noarch"
@@ -1099,10 +1099,10 @@
       "evra": "1.46-4.fc37.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-5.fc37.x86_64"
+      "evra": "2:4.12.3-6.fc37.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-5.fc37.x86_64"
+      "evra": "2:4.12.3-6.fc37.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.2-2.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-29T00:00:00Z",
+    "generated": "2023-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-29T00:00:24Z"
+        "generated": "2023-03-31T22:55:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-03-29T02:31:33Z"
+        "generated": "2023-04-01T01:13:13Z"
       }
     }
   }

From a85766ed7a315e3c09629dbf11cc5bdf02560cfc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 2 Apr 2023 06:05:52 +0000
Subject: [PATCH 1545/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index cef6ccaf91..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  nmstate:
-    evr: 2.2.9-2.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2122902605
-      reason: https://github.com/coreos/coreos-assembler/pull/3397
-      type: fast-track
+packages: {}

From 9ab799300ee477d300322c77206bbf977532263f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 4 Apr 2023 18:30:36 +0000
Subject: [PATCH 1546/2157] overrides: fast-track podman-4.4.4-3.fc37

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..3b2fc192df 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  podman:
+    evr: 5:4.4.4-3.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c40519168b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1455
+      type: fast-track
+  podman-plugins:
+    evr: 5:4.4.4-3.fc37
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c40519168b
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1455
+      type: fast-track

From c1feb0e87e45f97f1f9b64ffa7126fb749660415 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 28 Jan 2023 21:35:32 -0500
Subject: [PATCH 1547/2157] tests/kola: test spec 3.4.0 LUKS discard and
 openOptions fields

Rather than adding a dedicated test for relatively obscure options,
change the rootfs test to enable them, check that it does so, and check
that the existing LUKS /var/log test doesn't do so.  In each case, check
both the first and second boots.

The rootfs is the important case, since its mount flow doesn't read
/etc/crypttab.
---
 tests/kola/root-reprovision/luks/config.ign | 4 +++-
 tests/kola/root-reprovision/luks/test.sh    | 9 +++++++++
 tests/kola/var-mount/luks/test.sh           | 9 +++++++++
 3 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/tests/kola/root-reprovision/luks/config.ign b/tests/kola/root-reprovision/luks/config.ign
index 950aa670d8..07317d10b4 100644
--- a/tests/kola/root-reprovision/luks/config.ign
+++ b/tests/kola/root-reprovision/luks/config.ign
@@ -1,6 +1,6 @@
 {
   "ignition": {
-    "version": "3.2.0"
+    "version": "3.4.0"
   },
   "storage": {
     "luks": [
@@ -10,6 +10,8 @@
         "clevis": {
           "tpm2": true
         },
+        "discard": true,
+        "openOptions": ["--perf-no_read_workqueue"],
         "label": "root",
         "wipeVolume": true
       }
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 2532f65425..8ec72f6bb8 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -30,6 +30,15 @@ if ! grep prjquota <<< "${rootflags}"; then
 fi
 ok "root mounted with prjquota"
 
+table=$(dmsetup table myluksdev)
+if ! grep -q allow_discards <<< "${table}"; then
+    fatal "missing allow_discards in root DM table: ${table}"
+fi
+if ! grep -q no_read_workqueue <<< "${table}"; then
+    fatal "missing no_read_workqueue in root DM table: ${table}"
+fi
+ok "discard and custom option enabled for root LUKS"
+
 # while we're here, sanity-check that boot is mounted by UUID
 if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
   systemctl cat boot.mount
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index 0bc5a6b008..e27b263175 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -27,6 +27,15 @@ blktype=$(lsblk -o TYPE "${src}" --noheadings)
 fstype=$(findmnt -nvr /var/log -o FSTYPE)
 [[ $fstype == ext4 ]]
 
+table=$(dmsetup table varlog)
+if grep -q allow_discards <<< "${table}"; then
+    fatal "found allow_discards in /var/log DM table: ${table}"
+fi
+if grep -q no_read_workqueue <<< "${table}"; then
+    fatal "found no_read_workqueue in /var/log DM table: ${table}"
+fi
+ok "discard and custom option not enabled for /var/log"
+
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
       ok "mounted on first boot"

From 04e624033e107e5acdfaab94b99371d66d67d575 Mon Sep 17 00:00:00 2001
From: Karel Van Hecke <25814162+karelvanhecke@users.noreply.github.com>
Date: Sat, 25 Feb 2023 15:22:22 +0100
Subject: [PATCH 1548/2157] coreos-platform-chrony-config: use `ptp_kvm` when
 available on QEMU

KVM supports a `ptp_kvm` kernel module which allows the guest to query
the host clock for synchronization purposes.

Configure chrony to make use of it if it's available.

Don't disable the default pool; it'll be used by chrony to determine
whether the host clock is accurate or a falseticker.

Don't disable `PEERNTP` as we do on other platforms since we
historically haven't done so on QEMU and it's possible users have been
using their own DHCP servers (e.g. dnsmasq) to feed NTP configuration.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1433

Co-authored-by: Jonathan Lebon <jonathan@jlebon.com>
---
 .../coreos-platform-chrony-config.service     |  1 +
 .../usr/libexec/coreos-platform-chrony-config | 24 +++++++++++++++----
 .../chrony/coreos-platform-chrony-generator   |  8 ++++++-
 3 files changed, 28 insertions(+), 5 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
index f64f84da58..6a1bce8823 100644
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
@@ -4,6 +4,7 @@ ConditionKernelCommandLine=|ignition.platform.id=azurestack
 ConditionKernelCommandLine=|ignition.platform.id=azure
 ConditionKernelCommandLine=|ignition.platform.id=aws
 ConditionKernelCommandLine=|ignition.platform.id=gcp
+ConditionKernelCommandLine=|ignition.platform.id=qemu
 Before=NetworkManager.service
 Before=chronyd.service
 
diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index 41e6c0b951..b91f880bac 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -23,9 +23,6 @@ if ! cmp {/usr,}/etc/sysconfig/chronyd >/dev/null; then
     exit 0
 fi
 
-mkdir -p /run/coreos
-confpath=/run/coreos/platform-chrony.conf
-altenvfilepath=/run/coreos/sysconfig-chrony
 cmdline=( $(</proc/cmdline) )
 cmdline_arg() {
     local name="$1" value
@@ -38,6 +35,15 @@ cmdline_arg() {
 }
 platform=$(cmdline_arg ignition.platform.id)
 
+# Exit early if the ptp_kvm module can't be loaded for the qemu platform
+if [[ ${platform} == "qemu" ]]; then
+    modprobe -q ptp_kvm || exit 0
+fi
+
+mkdir -p /run/coreos
+confpath=/run/coreos/platform-chrony.conf
+altenvfilepath=/run/coreos/sysconfig-chrony
+
 # If not set already (by host customization or this script), set
 # PEERNTP=no so that DHCP-provided NTP servers are not added to chrony.
 # By doing this we assume the better NTP server choice is the
@@ -45,12 +51,17 @@ platform=$(cmdline_arg ignition.platform.id)
 # TODO: once https://bugzilla.redhat.com/show_bug.cgi?id=1828434 is
 # resolved, this won't be required.
 if [ ! -e /etc/sysconfig/network ] || ! grep -q "PEERNTP" /etc/sysconfig/network; then
-    cat <<EOF >> /etc/sysconfig/network
+    # Historically on QEMU, we haven't been disabling PEERNTP. Let's keep doing
+    # that even if we have ptp_kvm. chrony will just use the NTP servers as
+    # additional sources.
+    if [[ ${platform} != "qemu" ]]; then
+        cat <<EOF >> /etc/sysconfig/network
 # PEERNTP=no is automatically added by default when a platform-provided time
 # source is available, but this behavior may be overridden through an Ignition
 # config specifying PEERNTP=yes. See https://github.com/coreos/fedora-coreos-config/pull/412.
 PEERNTP=no
 EOF
+    fi
 fi
 
 (echo "# Generated by $self - do not edit directly"
@@ -81,6 +92,11 @@ case "${platform}" in
          echo '# and https://cloud.google.com/compute/docs/images/configuring-imported-images'
          echo 'server metadata.google.internal prefer iburst'
         ) >> "${confpath}" ;;
+    qemu)
+        sed -i s,'^#pool,pool,' "${confpath}"
+        (echo '# KVM virtual PHC'
+         echo 'refclock PHC /dev/ptp0 poll 2'
+        ) >> "${confpath}" ;;
     *) echo "should not be reached" 1>&2; exit 1 ;;
 esac
 # Policy doesn't allow chronyd to read run_t
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
index 7460509dc1..04ad465a73 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-generator
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-generator
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   platforms: "aws azure gce"
+##   platforms: "aws azure gce qemu"
 #
 # Test the coreos-platform-chrony generator.
 
@@ -14,5 +14,11 @@ case "${platform}" in
     aws) chronyc sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
     azure) chronyc sources |grep 'PHC'; echo "ok chrony azure" ;;
     gcp) chronyc sources | grep '169.254.169.254'; echo "ok chrony gcp" ;;
+    qemu)
+        # ptp_kvm isn't available on all arches nor all hosts, so don't assume it's always there; see
+        # https://github.com/coreos/fedora-coreos-config/pull/2263#discussion_r1157694192
+        if lsmod | grep -q ptp_kvm; then
+            chronyc sources | grep 'PHC0'; echo "ok chrony qemu"
+        fi ;;
     *) echo "unhandled platform ${platform} ?"; exit 1 ;;
 esac

From de8b6560b2b52dcef6ad4d4e13dc95105151c5b7 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 23 Mar 2023 17:17:52 -0400
Subject: [PATCH 1549/2157] Rename coreos-platform-chrony-generator to
 coreos-platform-chrony-config

The chrony generator was converted to a regular systemd unit in 5e4f40c0
("Move chrony config from generator to systemd service"). Let's rename
the test to reflect this.
---
 ...os-platform-chrony-generator => coreos-platform-chrony-config} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename tests/kola/ntp/chrony/{coreos-platform-chrony-generator => coreos-platform-chrony-config} (100%)

diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-generator b/tests/kola/ntp/chrony/coreos-platform-chrony-config
similarity index 100%
rename from tests/kola/ntp/chrony/coreos-platform-chrony-generator
rename to tests/kola/ntp/chrony/coreos-platform-chrony-config

From 27ec89c0fda744bfb489eea7cb79e354e7a6b0aa Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 5 Apr 2023 03:38:50 +0000
Subject: [PATCH 1550/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/501/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 50 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 48 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 46 +++++++++++++++++------------------
 manifest-lock.x86_64.json  | 50 +++++++++++++++++++-------------------
 4 files changed, 97 insertions(+), 97 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c1964c48da..7ce54ba0b8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.12-1.fc37.aarch64"
+      "evra": "1.8.14-1.fc37.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.aarch64"
@@ -487,16 +487,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.8-200.fc37.aarch64"
+      "evra": "6.2.9-200.fc37.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.8-200.fc37.aarch64"
+      "evra": "6.2.9-200.fc37.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.8-200.fc37.aarch64"
+      "evra": "6.2.9-200.fc37.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.8-200.fc37.aarch64"
+      "evra": "6.2.9-200.fc37.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.aarch64"
@@ -646,7 +646,7 @@
       "evra": "1.6.3-1.fc37.aarch64"
     },
     "libldb": {
-      "evra": "2.6.1-1.fc37.aarch64"
+      "evra": "2.6.2-1.fc37.aarch64"
     },
     "libluksmeta": {
       "evra": "9-14.fc37.aarch64"
@@ -733,7 +733,7 @@
       "evra": "3.5-1.fc37.aarch64"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc37.aarch64"
+      "evra": "3.5-2.fc37.aarch64"
     },
     "libsepol": {
       "evra": "3.5-1.fc37.aarch64"
@@ -748,7 +748,7 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.6-0.fc37.aarch64"
+      "evra": "2:4.17.7-0.fc37.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.aarch64"
@@ -814,7 +814,7 @@
       "evra": "0.3.2-4.fc37.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.6-0.fc37.aarch64"
+      "evra": "2:4.17.7-0.fc37.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "1.8.0-3.fc37.aarch64"
     },
     "podman": {
-      "evra": "5:4.4.2-2.fc37.aarch64"
+      "evra": "5:4.4.4-3.fc37.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.2-2.fc37.aarch64"
+      "evra": "5:4.4.4-3.fc37.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc37.aarch64"
@@ -1030,7 +1030,7 @@
       "evra": "23.4-4.fc37.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-5.fc37.noarch"
+      "evra": "20230318-1.fc37.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.0.0-15.fc37.aarch64"
@@ -1063,13 +1063,13 @@
       "evra": "2:1.1.4-1.fc37.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.6-0.fc37.aarch64"
+      "evra": "2:4.17.7-0.fc37.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.6-0.fc37.noarch"
+      "evra": "2:4.17.7-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.6-0.fc37.aarch64"
+      "evra": "2:4.17.7-0.fc37.aarch64"
     },
     "sed": {
       "evra": "4.8-11.fc37.aarch64"
@@ -1159,25 +1159,25 @@
       "evra": "1.9.13-1.p2.fc37.aarch64"
     },
     "systemd": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-boot-unsigned": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-container": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.13-6.fc37.aarch64"
+      "evra": "251.14-2.fc37.aarch64"
     },
     "tar": {
       "evra": "2:1.34-6.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-01T00:00:00Z",
+    "generated": "2023-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-31T22:55:48Z"
+        "generated": "2023-04-04T21:53:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-01T01:12:45Z"
+        "generated": "2023-04-05T01:30:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 18edb2f4e5..f14acaa9f0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,7 +331,7 @@
       "evra": "3.10.5-5.fc37.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.12-1.fc37.ppc64le"
+      "evra": "1.8.14-1.fc37.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.ppc64le"
@@ -481,16 +481,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.8-200.fc37.ppc64le"
+      "evra": "6.2.9-200.fc37.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.8-200.fc37.ppc64le"
+      "evra": "6.2.9-200.fc37.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.8-200.fc37.ppc64le"
+      "evra": "6.2.9-200.fc37.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.8-200.fc37.ppc64le"
+      "evra": "6.2.9-200.fc37.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.ppc64le"
@@ -640,7 +640,7 @@
       "evra": "1.6.3-1.fc37.ppc64le"
     },
     "libldb": {
-      "evra": "2.6.1-1.fc37.ppc64le"
+      "evra": "2.6.2-1.fc37.ppc64le"
     },
     "libluksmeta": {
       "evra": "9-14.fc37.ppc64le"
@@ -730,7 +730,7 @@
       "evra": "3.5-1.fc37.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc37.ppc64le"
+      "evra": "3.5-2.fc37.ppc64le"
     },
     "libsepol": {
       "evra": "3.5-1.fc37.ppc64le"
@@ -748,7 +748,7 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.6-0.fc37.ppc64le"
+      "evra": "2:4.17.7-0.fc37.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.ppc64le"
@@ -814,7 +814,7 @@
       "evra": "0.3.2-4.fc37.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.6-0.fc37.ppc64le"
+      "evra": "2:4.17.7-0.fc37.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.ppc64le"
@@ -1000,10 +1000,10 @@
       "evra": "1.8.0-3.fc37.ppc64le"
     },
     "podman": {
-      "evra": "5:4.4.2-2.fc37.ppc64le"
+      "evra": "5:4.4.4-3.fc37.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.4.2-2.fc37.ppc64le"
+      "evra": "5:4.4.4-3.fc37.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc37.ppc64le"
@@ -1036,7 +1036,7 @@
       "evra": "23.4-4.fc37.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-5.fc37.noarch"
+      "evra": "20230318-1.fc37.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.0.0-15.fc37.ppc64le"
@@ -1069,13 +1069,13 @@
       "evra": "2:1.1.4-1.fc37.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.6-0.fc37.ppc64le"
+      "evra": "2:4.17.7-0.fc37.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.6-0.fc37.noarch"
+      "evra": "2:4.17.7-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.6-0.fc37.ppc64le"
+      "evra": "2:4.17.7-0.fc37.ppc64le"
     },
     "sed": {
       "evra": "4.8-11.fc37.ppc64le"
@@ -1165,22 +1165,22 @@
       "evra": "1.9.13-1.p2.fc37.ppc64le"
     },
     "systemd": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.13-6.fc37.ppc64le"
+      "evra": "251.14-2.fc37.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-6.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-01T00:00:00Z",
+    "generated": "2023-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-31T22:54:50Z"
+        "generated": "2023-04-04T21:52:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-01T01:12:59Z"
+        "generated": "2023-04-05T01:30:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 80d21b6e81..6cbd88c5c2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -448,16 +448,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.8-200.fc37.s390x"
+      "evra": "6.2.9-200.fc37.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.8-200.fc37.s390x"
+      "evra": "6.2.9-200.fc37.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.8-200.fc37.s390x"
+      "evra": "6.2.9-200.fc37.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.8-200.fc37.s390x"
+      "evra": "6.2.9-200.fc37.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.s390x"
@@ -595,7 +595,7 @@
       "evra": "1.6.3-1.fc37.s390x"
     },
     "libldb": {
-      "evra": "2.6.1-1.fc37.s390x"
+      "evra": "2.6.2-1.fc37.s390x"
     },
     "libluksmeta": {
       "evra": "9-14.fc37.s390x"
@@ -682,7 +682,7 @@
       "evra": "3.5-1.fc37.s390x"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc37.s390x"
+      "evra": "3.5-2.fc37.s390x"
     },
     "libsepol": {
       "evra": "3.5-1.fc37.s390x"
@@ -697,7 +697,7 @@
       "evra": "2.38.1-1.fc37.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.6-0.fc37.s390x"
+      "evra": "2:4.17.7-0.fc37.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-3.fc37.s390x"
@@ -760,7 +760,7 @@
       "evra": "0.3.2-4.fc37.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.6-0.fc37.s390x"
+      "evra": "2:4.17.7-0.fc37.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.s390x"
@@ -934,10 +934,10 @@
       "evra": "1.8.0-3.fc37.s390x"
     },
     "podman": {
-      "evra": "5:4.4.2-2.fc37.s390x"
+      "evra": "5:4.4.4-3.fc37.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.4.2-2.fc37.s390x"
+      "evra": "5:4.4.4-3.fc37.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc37.s390x"
@@ -964,7 +964,7 @@
       "evra": "23.4-4.fc37.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-5.fc37.noarch"
+      "evra": "20230318-1.fc37.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.0.0-15.fc37.s390x"
@@ -1000,13 +1000,13 @@
       "evra": "2:2.25.0-4.fc37.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.6-0.fc37.s390x"
+      "evra": "2:4.17.7-0.fc37.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.6-0.fc37.noarch"
+      "evra": "2:4.17.7-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.6-0.fc37.s390x"
+      "evra": "2:4.17.7-0.fc37.s390x"
     },
     "sed": {
       "evra": "4.8-11.fc37.s390x"
@@ -1090,22 +1090,22 @@
       "evra": "1.9.13-1.p2.fc37.s390x"
     },
     "systemd": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "systemd-container": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "systemd-libs": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "systemd-pam": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "systemd-udev": {
-      "evra": "251.13-6.fc37.s390x"
+      "evra": "251.14-2.fc37.s390x"
     },
     "tar": {
       "evra": "2:1.34-6.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-01T00:00:00Z",
+    "generated": "2023-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-31T22:54:20Z"
+        "generated": "2023-04-04T21:53:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-01T01:13:06Z"
+        "generated": "2023-04-05T01:30:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ea332965a3..6acc38fca0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -340,7 +340,7 @@
       "evra": "3.10.5-5.fc37.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.12-1.fc37.x86_64"
+      "evra": "1.8.14-1.fc37.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-4.fc37.x86_64"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-3.fc37.noarch"
     },
     "kernel": {
-      "evra": "6.2.8-200.fc37.x86_64"
+      "evra": "6.2.9-200.fc37.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.8-200.fc37.x86_64"
+      "evra": "6.2.9-200.fc37.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.8-200.fc37.x86_64"
+      "evra": "6.2.9-200.fc37.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.8-200.fc37.x86_64"
+      "evra": "6.2.9-200.fc37.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.25-1.fc37.x86_64"
@@ -652,7 +652,7 @@
       "evra": "1.6.3-1.fc37.x86_64"
     },
     "libldb": {
-      "evra": "2.6.1-1.fc37.x86_64"
+      "evra": "2.6.2-1.fc37.x86_64"
     },
     "libluksmeta": {
       "evra": "9-14.fc37.x86_64"
@@ -739,7 +739,7 @@
       "evra": "3.5-1.fc37.x86_64"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc37.x86_64"
+      "evra": "3.5-2.fc37.x86_64"
     },
     "libsepol": {
       "evra": "3.5-1.fc37.x86_64"
@@ -754,7 +754,7 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.6-0.fc37.x86_64"
+      "evra": "2:4.17.7-0.fc37.x86_64"
     },
     "libsmbios": {
       "evra": "2.4.3-7.fc37.x86_64"
@@ -823,7 +823,7 @@
       "evra": "0.3.2-4.fc37.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.6-0.fc37.x86_64"
+      "evra": "2:4.17.7-0.fc37.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-4.fc37.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "1.8.0-3.fc37.x86_64"
     },
     "podman": {
-      "evra": "5:4.4.2-2.fc37.x86_64"
+      "evra": "5:4.4.4-3.fc37.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.2-2.fc37.x86_64"
+      "evra": "5:4.4.4-3.fc37.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc37.x86_64"
@@ -1042,7 +1042,7 @@
       "evra": "23.4-4.fc37.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20210518-5.fc37.noarch"
+      "evra": "20230318-1.fc37.noarch"
     },
     "readline": {
       "evra": "8.2-2.fc37.x86_64"
@@ -1072,13 +1072,13 @@
       "evra": "2:1.1.4-1.fc37.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.6-0.fc37.x86_64"
+      "evra": "2:4.17.7-0.fc37.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.6-0.fc37.noarch"
+      "evra": "2:4.17.7-0.fc37.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.6-0.fc37.x86_64"
+      "evra": "2:4.17.7-0.fc37.x86_64"
     },
     "sed": {
       "evra": "4.8-11.fc37.x86_64"
@@ -1168,25 +1168,25 @@
       "evra": "1.9.13-1.p2.fc37.x86_64"
     },
     "systemd": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-boot-unsigned": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-container": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.13-6.fc37.x86_64"
+      "evra": "251.14-2.fc37.x86_64"
     },
     "tar": {
       "evra": "2:1.34-6.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-01T00:00:00Z",
+    "generated": "2023-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-03-31T22:55:58Z"
+        "generated": "2023-04-04T21:54:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-01T01:13:13Z"
+        "generated": "2023-04-05T01:30:35Z"
       }
     }
   }

From 6dea8540740c3517d4f99565eb514de4ee3ddce5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 6 Apr 2023 06:08:02 +0000
Subject: [PATCH 1551/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 3b2fc192df..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  podman:
-    evr: 5:4.4.4-3.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c40519168b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1455
-      type: fast-track
-  podman-plugins:
-    evr: 5:4.4.4-3.fc37
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c40519168b
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1455
-      type: fast-track
+packages: {}

From a44c50e22f01906476d1e62144a79aa45a8fe6e9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 6 Apr 2023 15:29:08 -0400
Subject: [PATCH 1552/2157] coreos-teardown-initramfs: teardown after NM has
 exited

We haven't seen this before, but recently there was
a case where in RHCOS based on RHEL 9 we saw the coreos-teardown-initramfs
happening before the nm-initrd.service had been stopped
during switch root. We need to guarantee that NetworkManager
is stopped before we start the teardown.

Seen in https://issues.redhat.com/browse/OCPBUGS-11052
---
 .../35coreos-ignition/coreos-teardown-initramfs.service   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
index 060530e721..b08c827bc5 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
@@ -18,6 +18,14 @@ DefaultDependencies=false
 Before=ignition-mount.service
 Before=ignition-complete.target
 
+# Since we are tearing down networking we need to make sure
+# NetworkManager has been stopped, otherwise it'll be trying
+# to react to our delete/down operations. Since the ordering
+# for ExecStop is the opposite of ExecStart we need to use
+# `Before=nm-initrd.service`.
+# https://issues.redhat.com/browse/OCPBUGS-11052
+Before=nm-initrd.service
+
 # Make sure ExecStop= runs before we switch root
 Conflicts=initrd-switch-root.target umount.target
 Before=initrd-switch-root.target

From 7cf12c2c8328e87ea768168aa9757ea3e41478a2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:41 -0400
Subject: [PATCH 1553/2157] 40ignition-ostree: run ignition-ostree-growfs
 before sysroot mount

Prep for automatic XFS reprovisioning.

The only way to know for sure whether the rootfs should be reprovisioned
is analyzing it after the filesystem was grown. We could do calculations
beforehand, but it'd get complex having to analyze the partition table.

Anyway, the partition growing and e.g. LUKS container resizing need
to happen before automatic reprovisioning and ignition-ostree-growfs
already knows how to do that.
---
 .../ignition-ostree-growfs.service            |  8 ++--
 .../ignition-ostree-growfs.sh                 | 37 ++++++++++++++++---
 ...gnition-ostree-transposefs-restore.service |  2 +-
 .../ignition-ostree-transposefs.sh            |  1 +
 4 files changed, 37 insertions(+), 11 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index 0599484824..da47d6660c 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -4,12 +4,12 @@ DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target
-After=sysroot.mount ignition-ostree-mount-firstboot-sysroot.service
-# This shouldn't be strictly necessary, but it's cleaner to not have OSTree muck
-# around with moving mounts while we're still resizing the filesystem.
-Before=ostree-prepare-root.service
+Before=sysroot.mount ignition-ostree-mount-firstboot-sysroot.service
+After=ignition-ostree-uuid-root.service
 
 [Service]
 Type=oneshot
 ExecStart=/usr/sbin/ignition-ostree-growfs
 RemainAfterExit=yes
+# So we can transiently mount sysroot
+MountFlags=slave
\ No newline at end of file
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 161c91165b..ca3de25224 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -5,17 +5,42 @@ set -euo pipefail
 # partition, unless it determines that either the rootfs was moved or the
 # partition was already resized (e.g. via Ignition).
 
+# This is copied from ignition-ostree-transposefs.sh.
+# Sometimes, for some reason the by-label symlinks aren't updated. Detect these
+# cases, and explicitly `udevadm trigger`.
+# See: https://bugzilla.redhat.com/show_bug.cgi?id=1908780
+udev_trigger_on_label_mismatch() {
+    local label=$1; shift
+    local expected_dev=$1; shift
+    local actual_dev
+    expected_dev=$(realpath "${expected_dev}")
+    # We `|| :` here because sometimes /dev/disk/by-label/$label is missing.
+    # We've seen this on Fedora kernels with debug enabled (common in `rawhide`).
+    # See https://github.com/coreos/fedora-coreos-tracker/issues/1092
+    actual_dev=$(realpath "/dev/disk/by-label/$label" || :)
+    if [ "$actual_dev" != "$expected_dev" ]; then
+        echo "Expected /dev/disk/by-label/$label to point to $expected_dev, but points to $actual_dev; triggering udev"
+        udevadm trigger --settle "$expected_dev"
+    fi
+}
+
+# This is also similar to bits from transposefs.sh.
+ignition_cfg=/run/ignition.json
+expected_dev=$(jq -r '.storage?.filesystems? // [] | map(select(.label == "root")) | .[0].device // ""' "${ignition_cfg}")
+if [ -n "${expected_dev}" ]; then
+    udev_trigger_on_label_mismatch root "${expected_dev}"
+fi
+
 # If root reprovisioning was triggered, this file contains state of the root
 # partition *before* ignition-disks.
 saved_partstate=/run/ignition-ostree-rootfs-partstate.sh
 
-# We run after the rootfs is mounted at /sysroot, but before ostree-prepare-root
-# moves it to /sysroot/sysroot.
+# We run before the rootfs is mounted at /sysroot, but we still need to mount it
+# (in a private namespace) since XFS and Btrfs can only do resizing online (EXT4
+# can do either).
 path=/sysroot
-
-# The use of tail is to avoid errors from duplicate mounts;
-# this shouldn't happen for us but we're being conservative.
-src=$(findmnt -nvr -o SOURCE "$path" | tail -n1)
+src=/dev/disk/by-label/root
+mount "${src}" "${path}"
 
 # In the IBM Secure Execution case we use Ignition to grow and reencrypt rootfs
 # see overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
index 4eca578934..b64858ffd7 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
@@ -4,7 +4,7 @@ DefaultDependencies=false
 After=ignition-disks.service
 # Avoid racing with UUID regeneration
 After=ignition-ostree-uuid-root.service
-Before=ignition-ostree-growfs.service
+After=ignition-ostree-growfs.service
 Before=ignition-ostree-mount-firstboot-sysroot.service
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 9ec484c88c..2ef083c4d5 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -54,6 +54,7 @@ mount_verbose() {
     mount -o "${mode}" "${srcdev}" "${destdir}"
 }
 
+# A copy of this exists in ignition-ostree-growfs.sh.
 # Sometimes, for some reason the by-label symlinks aren't updated. Detect these
 # cases, and explicitly `udevadm trigger`.
 # See: https://bugzilla.redhat.com/show_bug.cgi?id=1908780

From de36548ae4ea125c470c7e5fa3b5479100166200 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:42 -0400
Subject: [PATCH 1554/2157] 40ignition-ostree: factor out zram-related
 functions

No functional change.
Prep for future patch.
---
 .../ignition-ostree-transposefs.sh            | 64 +++++++++++--------
 1 file changed, 38 insertions(+), 26 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 2ef083c4d5..cd563e9897 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -125,6 +125,41 @@ mount_and_save_filesystem_by_label() {
     fi
 }
 
+ensure_zram_dev() {
+    if test -d "${saved_data}"; then
+        return 0
+    fi
+    mem_available=$(grep MemAvailable /proc/meminfo | awk '{print $2}')
+    # Just error out early if we don't even have 1G to work with. This
+    # commonly happens if you `cosa run` but forget to add `--memory`. That
+    # way you get a nicer error instead of the spew of EIO errors from `cp`.
+    # The amount we need is really dependent on a bunch of factors, but just
+    # ballpark it at 3G.
+    if [ "${mem_available}" -lt $((1*1024*1024)) ] && [ "${wipes_root}" != 0 ]; then
+        echo "Root reprovisioning requires at least 3G of RAM" >&2
+        exit 1
+    fi
+    modprobe zram num_devices=0
+    read dev < /sys/class/zram-control/hot_add
+    # disksize is set arbitrarily large, as zram is capped by mem_limit
+    echo 10G > /sys/block/zram"${dev}"/disksize
+    # Limit zram to 90% of available RAM: we want to be greedy since the
+    # boot breaks anyway, but we still want to leave room for everything
+    # else so it hits ENOSPC and doesn't invoke the OOM killer
+    echo $(( mem_available * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
+    mkfs.xfs -q /dev/zram"${dev}"
+    mkdir "${saved_data}"
+    mount /dev/zram"${dev}" "${saved_data}"
+    # save the zram device number created for when called to cleanup
+    echo "${dev}" > "${zram_dev}"
+}
+
+print_zram_mm_stat() {
+    echo "zram usage:"
+    read dev < "${zram_dev}"
+    cat /sys/block/zram"${dev}"/mm_stat
+}
+
 # In Secure Execution case user is not allowed to modify partition table
 check_and_set_secex_config() {
     if [[ -f /run/coreos/secure-execution ]]; then
@@ -163,29 +198,8 @@ case "${1:-}" in
             echo "Found duplicate or missing ESP, BIOS-BOOT, or PReP labels in config" >&2
             exit 1
         fi
-        mem_available=$(grep MemAvailable /proc/meminfo | awk '{print $2}')
-        # Just error out early if we don't even have 1G to work with. This
-        # commonly happens if you `cosa run` but forget to add `--memory`. That
-        # way you get a nicer error instead of the spew of EIO errors from `cp`.
-        # The amount we need is really dependent on a bunch of factors, but just
-        # ballpark it at 3G.
-        if [ "${mem_available}" -lt $((1*1024*1024)) ] && [ "${wipes_root}" != 0 ]; then
-            echo "Root reprovisioning requires at least 3G of RAM" >&2
-            exit 1
-        fi
-        modprobe zram num_devices=0
-        read dev < /sys/class/zram-control/hot_add
-        # disksize is set arbitrarily large, as zram is capped by mem_limit
-        echo 10G > /sys/block/zram"${dev}"/disksize
-        # Limit zram to 90% of available RAM: we want to be greedy since the
-        # boot breaks anyway, but we still want to leave room for everything
-        # else so it hits ENOSPC and doesn't invoke the OOM killer
-        echo $(( mem_available * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
-        mkfs.xfs -q /dev/zram"${dev}"
-        mkdir "${saved_data}"
-        mount /dev/zram"${dev}" "${saved_data}"
-        # save the zram device number created for when called to cleanup
-        echo "${dev}" > "${zram_dev}"
+
+        ensure_zram_dev
 
         if [ "${wipes_root}" != "0" ]; then
             mkdir "${saved_root}"
@@ -234,9 +248,7 @@ case "${1:-}" in
             echo "Moving PReP partition to RAM..."
             cat "${prep_part}" > "${saved_prep}/partition"
         fi
-        echo "zram usage:"
-        read dev < "${zram_dev}"
-        cat /sys/block/zram"${dev}"/mm_stat
+        print_zram_mm_stat
         ;;
     restore)
         # Mounts happen in a private mount namespace since we're not "offically" mounting

From 8081d8edacee268f5d652bb42517575e27fbb49b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:43 -0400
Subject: [PATCH 1555/2157] 40ignition-ostree: skip udev hack if Ignition did
 not reprovision rootfs

Currently, this code only executes via Ignition reprovisioning the
rootfs, but we're about to add code to reprovision the rootfs outside of
that path. In that case, we don't need to query the Ignition config.
---
 .../40ignition-ostree/ignition-ostree-transposefs.sh      | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index cd563e9897..a7976e2c63 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -96,8 +96,12 @@ mount_and_restore_filesystem_by_label() {
     local mountpoint=$1; shift
     local saved_fs=$1; shift
     local new_dev
-    new_dev=$(jq -r "$(query_fslabel "${label}") | .[0].device" "${ignition_cfg}")
-    udev_trigger_on_label_mismatch "${label}" "${new_dev}"
+    new_dev=$(jq -r "$(query_fslabel "${label}") | .[0].device // \"\"" "${ignition_cfg}")
+    # in the autosave-xfs path, it's not driven by the Ignition config so we
+    # don't expect a new device there
+    if [ -n "${new_dev}" ]; then
+        udev_trigger_on_label_mismatch "${label}" "${new_dev}"
+    fi
     mount_verbose "/dev/disk/by-label/${label}" "${mountpoint}" rw
     find "${saved_fs}" -mindepth 1 -maxdepth 1 -exec mv -t "${mountpoint}" {} +
 }

From 931e2ab25d75b3937f312e76098c6eba2b38dca2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:44 -0400
Subject: [PATCH 1556/2157] 40ignition-ostree: add autosave-xfs transposefs
 unit

Add a new transposefs unit: `autosave-xfs`. This unit runs after
`ignition-disks` and `ignition-ostree-growfs,` but before the `restore`
transposefs unit.

If the XFS root was grown, it checks if the allocation group count
(agcount) is within a reasonable amount (128 is chosen here). If
it isn't, it saves the rootfs and reformats the filesystem. The
`restore` unit will then restore it as usual. In the case of in-place
reprovisioning like LUKS (i.e. where the partition table isn't modified
by the Ignition config), the rootfs is still saved only once.

Ideally, instead of adding a new transposefs unit, we would make it
part of the initial `save` unit. But at that point, there's no way to
tell whether we should autosave without gazing even more deeply into the
Ignition config. We also don't want to unconditionally save the rootfs
when we may not need it.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1183
---
 .../ignition-ostree-growfs.sh                 |  3 +-
 ...on-ostree-transposefs-autosave-xfs.service | 19 +++++++++
 .../ignition-ostree-transposefs.sh            | 40 +++++++++++++++++++
 .../40ignition-ostree/module-setup.sh         |  4 +-
 4 files changed, 64 insertions(+), 2 deletions(-)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index ca3de25224..862cace7d5 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -147,5 +147,6 @@ case "${ROOTFS_TYPE}" in
     btrfs) btrfs filesystem resize max ${path} ;;
 esac
 
-# this is useful for tests
+# The ignition-ostree-transposefs-xfsauto.service unit needs to know if we
+# actually run. This is also useful for tests.
 touch /run/ignition-ostree-growfs.stamp
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
new file mode 100644
index 0000000000..b914e98c72
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=Ignition OSTree: Autosave XFS Rootfs Partition
+DefaultDependencies=false
+After=ignition-disks.service
+# Avoid racing with UUID regeneration
+After=ignition-ostree-uuid-root.service
+After=ignition-ostree-growfs.service
+Before=ignition-ostree-transposefs-restore.service
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
+ConditionKernelCommandLine=ostree
+# only run if ignition-ostree-growfs ran since that's when pathological cases occur
+ConditionPathExists=/run/ignition-ostree-growfs.stamp
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/libexec/ignition-ostree-transposefs autosave-xfs
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index a7976e2c63..244a6a5bc2 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -129,6 +129,29 @@ mount_and_save_filesystem_by_label() {
     fi
 }
 
+# This implements https://github.com/coreos/fedora-coreos-tracker/issues/1183.
+should_autosave_rootfs() {
+    local fstype
+    fstype=$(lsblk -no FSTYPE "${root_part}")
+    if [ "$fstype" != xfs ]; then
+        echo "Filesystem is not XFS (found $fstype); skipping" >&2
+        echo 0
+        return
+    fi
+    local agcount
+    eval $(xfs_info "${root_part}" | grep -o 'agcount=[0-9]*')
+    # Semi-arbitrarily chosen: this is roughly ~64G currently (based on initial
+    # ag sizing at build time) which seems like a good rootfs size at which to
+    # discriminate between "throwaway/short-lived systems" and "long-running
+    # workload systems". It's not like XFS performance is way worse at 128.
+    if [ "$agcount" -lt 128 ]; then
+        echo "Filesystem agcount is $agcount; skipping" >&2
+        echo 0
+        return
+    fi
+    echo 1
+}
+
 ensure_zram_dev() {
     if test -d "${saved_data}"; then
         return 0
@@ -221,6 +244,23 @@ case "${1:-}" in
             mkdir "${saved_prep}"
         fi
         ;;
+    autosave-xfs)
+        should_autosave=$(should_autosave_rootfs)
+        if [ "${should_autosave}" = "1" ]; then
+            wipes_root=1
+            ensure_zram_dev
+            # in the in-place reprovisioning case, the rootfs was already saved
+            if [ ! -d "${saved_root}" ]; then
+                mkdir "${saved_root}"
+                echo "Moving rootfs to RAM..."
+                mount_and_save_filesystem_by_label root "${saved_root}"
+                print_zram_mm_stat
+            fi
+            mkfs.xfs "${root_part}" -L root -f
+            # for tests
+            touch /run/ignition-ostree-autosaved-xfs.stamp
+        fi
+        ;;
     save)
         # Mounts happen in a private mount namespace since we're not "offically" mounting
         if [ -d "${saved_root}" ]; then
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index d0a4c89a9b..f8450b38c0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -28,6 +28,8 @@ install() {
         systemd-sysusers \
         systemd-tmpfiles \
         sort \
+        xfs_info \
+        xfs_spaceman \
         uniq
 
     if [[ $(uname -m) = s390x ]]; then
@@ -81,7 +83,7 @@ install() {
 
     inst_multiple jq chattr
     inst_script "$moddir/ignition-ostree-transposefs.sh" "/usr/libexec/ignition-ostree-transposefs"
-    for x in detect save restore; do
+    for x in detect save autosave-xfs restore; do
         install_ignition_unit ignition-ostree-transposefs-${x}.service
     done
 

From c413540e8246f230b7348d8aac0fc6961ad40ea2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:45 -0400
Subject: [PATCH 1557/2157] tests/kola: add non-exclusive check for growfs

We weren't checking anywhere in the non-reprovisioning case that we grow
the root filesystem on first boot. Add a trivial test for this.
---
 tests/kola/disks/growfs | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100755 tests/kola/disks/growfs

diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
new file mode 100755
index 0000000000..a2b421a2ef
--- /dev/null
+++ b/tests/kola/disks/growfs
@@ -0,0 +1,15 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+
+# This test verifies that the rootfs is automatically grown on first boot in the
+# default case.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [ ! -f /run/ignition-ostree-growfs.stamp ]; then
+    fatal "rootfs was not grown on first boot"
+fi
+ok "rootfs grown on first boot"

From 2248f8b30d379954b040c9a99b8468a89f45d5c2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:46 -0400
Subject: [PATCH 1558/2157] tests/kola: move LUKS checks to shared file

Prep for adding another LUKS where we want the same checks.
---
 .../root-reprovision/luks/data/luks-test.sh   | 59 +++++++++++++++++++
 tests/kola/root-reprovision/luks/test.sh      | 56 +-----------------
 2 files changed, 61 insertions(+), 54 deletions(-)
 create mode 100755 tests/kola/root-reprovision/luks/data/luks-test.sh

diff --git a/tests/kola/root-reprovision/luks/data/luks-test.sh b/tests/kola/root-reprovision/luks/data/luks-test.sh
new file mode 100755
index 0000000000..fe4b0dc3fe
--- /dev/null
+++ b/tests/kola/root-reprovision/luks/data/luks-test.sh
@@ -0,0 +1,59 @@
+# This file is sourced by both `ext.config.root-reprovision.luks`
+# and `ext.config.root-reprovision.luks.autosave-xfs`.
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+srcdev=$(findmnt -nvr / -o SOURCE)
+[[ ${srcdev} == /dev/mapper/myluksdev ]]
+
+blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
+[[ ${blktype} == crypt ]]
+
+fstype=$(findmnt -nvr / -o FSTYPE)
+[[ ${fstype} == xfs ]]
+ok "source is XFS on LUKS device"
+
+rootflags=$(findmnt /sysroot -no OPTIONS)
+if ! grep prjquota <<< "${rootflags}"; then
+    fatal "missing prjquota in root mount flags: ${rootflags}"
+fi
+ok "root mounted with prjquota"
+
+table=$(dmsetup table myluksdev)
+if ! grep -q allow_discards <<< "${table}"; then
+    fatal "missing allow_discards in root DM table: ${table}"
+fi
+if ! grep -q no_read_workqueue <<< "${table}"; then
+    fatal "missing no_read_workqueue in root DM table: ${table}"
+fi
+ok "discard and custom option enabled for root LUKS"
+
+# while we're here, sanity-check that boot is mounted by UUID
+if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
+  systemctl cat boot.mount
+  fatal "boot mounted not by UUID"
+fi
+ok "boot mounted by UUID"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      # check that ignition-ostree-growfs ran
+      if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
+          fatal "ignition-ostree-growfs did not run"
+      fi
+
+      # reboot once to sanity-check we can find root on second boot
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      grep root=UUID= /proc/cmdline
+      grep rd.luks.name= /proc/cmdline
+      ok "found root kargs"
+
+      # while we're here, sanity-check that we have a boot=UUID karg too
+      grep boot=UUID= /proc/cmdline
+      ok "found boot karg"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 8ec72f6bb8..ff3d283fa1 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -14,57 +14,5 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-srcdev=$(findmnt -nvr / -o SOURCE)
-[[ ${srcdev} == /dev/mapper/myluksdev ]]
-
-blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
-[[ ${blktype} == crypt ]]
-
-fstype=$(findmnt -nvr / -o FSTYPE)
-[[ ${fstype} == xfs ]]
-ok "source is XFS on LUKS device"
-
-rootflags=$(findmnt /sysroot -no OPTIONS)
-if ! grep prjquota <<< "${rootflags}"; then
-    fatal "missing prjquota in root mount flags: ${rootflags}"
-fi
-ok "root mounted with prjquota"
-
-table=$(dmsetup table myluksdev)
-if ! grep -q allow_discards <<< "${table}"; then
-    fatal "missing allow_discards in root DM table: ${table}"
-fi
-if ! grep -q no_read_workqueue <<< "${table}"; then
-    fatal "missing no_read_workqueue in root DM table: ${table}"
-fi
-ok "discard and custom option enabled for root LUKS"
-
-# while we're here, sanity-check that boot is mounted by UUID
-if ! systemctl cat boot.mount | grep -q What=/dev/disk/by-uuid; then
-  systemctl cat boot.mount
-  fatal "boot mounted not by UUID"
-fi
-ok "boot mounted by UUID"
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      # check that ignition-ostree-growfs ran
-      if [ ! -e /run/ignition-ostree-growfs.stamp ]; then
-          fatal "ignition-ostree-growfs did not run"
-      fi
-
-      # reboot once to sanity-check we can find root on second boot
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      grep root=UUID= /proc/cmdline
-      grep rd.luks.name= /proc/cmdline
-      ok "found root kargs"
-
-      # while we're here, sanity-check that we have a boot=UUID karg too
-      grep boot=UUID= /proc/cmdline
-      ok "found boot karg"
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac
+# run the tests
+. $KOLA_EXT_DATA/luks-test.sh

From 1744c68fc7942ce894ba8fde29fdfd9b2d40d99c Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Mar 2023 16:37:48 -0400
Subject: [PATCH 1559/2157] tests/kola: add autosave-xfs tests

Add a new `ext.config.root-reprovision.autosave-xfs` test that checks
that the logic kicks in on a large enough disk. Add a similar
`ext.config.root-reprovision.luks.autosave-xfs` for the LUKS version
of this.

Sanity-check in other reprovisioning tests that autosave-xfs didn't
kick in.
---
 tests/kola/disks/growfs                       |  7 +++-
 .../autosave-xfs/data/commonlib.sh            |  1 +
 .../root-reprovision/autosave-xfs/test.sh     | 26 ++++++++++++++
 tests/kola/root-reprovision/linear/test.sh    |  5 +++
 .../luks/autosave-xfs/config.ign              |  1 +
 .../root-reprovision/luks/autosave-xfs/data   |  1 +
 .../luks/autosave-xfs/test.sh                 | 34 +++++++++++++++++++
 tests/kola/root-reprovision/luks/test.sh      | 10 +++++-
 tests/kola/root-reprovision/raid1/test.sh     |  5 +++
 9 files changed, 88 insertions(+), 2 deletions(-)
 create mode 120000 tests/kola/root-reprovision/autosave-xfs/data/commonlib.sh
 create mode 100755 tests/kola/root-reprovision/autosave-xfs/test.sh
 create mode 120000 tests/kola/root-reprovision/luks/autosave-xfs/config.ign
 create mode 120000 tests/kola/root-reprovision/luks/autosave-xfs/data
 create mode 100755 tests/kola/root-reprovision/luks/autosave-xfs/test.sh

diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
index a2b421a2ef..a423837112 100755
--- a/tests/kola/disks/growfs
+++ b/tests/kola/disks/growfs
@@ -3,7 +3,7 @@
 ##   exclusive: false
 
 # This test verifies that the rootfs is automatically grown on first boot in the
-# default case.
+# default case and that the autosave-xfs logic didn't kick in.
 
 set -xeuo pipefail
 
@@ -13,3 +13,8 @@ if [ ! -f /run/ignition-ostree-growfs.stamp ]; then
     fatal "rootfs was not grown on first boot"
 fi
 ok "rootfs grown on first boot"
+
+if [ -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
+    fatal "unexpected autosaved XFS"
+fi
+ok "rootfs wasn't automatically reprovisioned"
diff --git a/tests/kola/root-reprovision/autosave-xfs/data/commonlib.sh b/tests/kola/root-reprovision/autosave-xfs/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/root-reprovision/autosave-xfs/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
new file mode 100755
index 0000000000..b50ca2f0a1
--- /dev/null
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+## kola:
+##   # This test reprovisions the rootfs automatically.
+##   tags: "platform-independent reprovision"
+##   # Trigger automatic XFS reprovisioning
+##   minDisk: 64
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if [ ! -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
+    fatal "expected autosaved XFS"
+fi
+ok "autosaved XFS on large disk"
+
+eval $(xfs_info / | grep -o 'agcount=[0-9]*')
+if [ "$agcount" -gt 4 ]; then
+    fatal "expected agcount of at most 4, got ${agcount}"
+fi
+ok "low agcount on large disk"
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index 3aaa6c865b..83bad0d232 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -39,6 +39,11 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
           fatal "ignition-ostree-growfs ran"
       fi
 
+      # check that autosave-xfs didn't run
+      if [ -e /run/ignition-ostree-autosaved-xfs.stamp ]; then
+          fatal "unexpected autosaved XFS"
+      fi
+
       # reboot once to sanity-check we can find root on second boot
       /tmp/autopkgtest-reboot rebooted
       ;;
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/config.ign b/tests/kola/root-reprovision/luks/autosave-xfs/config.ign
new file mode 120000
index 0000000000..f72ce41f73
--- /dev/null
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/config.ign
@@ -0,0 +1 @@
+../config.ign
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/data b/tests/kola/root-reprovision/luks/autosave-xfs/data
new file mode 120000
index 0000000000..4909e06efb
--- /dev/null
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/data
@@ -0,0 +1 @@
+../data
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
new file mode 100755
index 0000000000..6625fad734
--- /dev/null
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -0,0 +1,34 @@
+#!/bin/bash
+## kola:
+##   # This test reprovisions the rootfs.
+##   tags: "platform-independent reprovision"
+##   # Root reprovisioning requires at least 4GiB of memory.
+##   minMemory: 4096
+##   # A TPM backend device is not available on s390x to suport TPM.
+##   architectures: "!s390x"
+##   # This test includes a lot of disk I/O and needs a higher
+##   # timeout value than the default.
+##   timeoutMin: 15
+##   # Trigger automatic XFS reprovisioning
+##   minDisk: 64
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# check that we ran automatic XFS reprovisioning
+if [ -z "${AUTOPKGTEST_REBOOT_MARK:-}" ]; then
+    if [ ! -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
+        fatal "expected autosaved XFS"
+    fi
+    ok "autosaved XFS on large disk"
+
+    eval $(xfs_info / | grep -o 'agcount=[0-9]*')
+    if [ "$agcount" -gt 4 ]; then
+        fatal "expected agcount of at most 4, got ${agcount}"
+    fi
+    ok "low agcount on large disk"
+fi
+
+# run the rest of the tests
+. $KOLA_EXT_DATA/luks-test.sh
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index ff3d283fa1..58fd00ba7d 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -14,5 +14,13 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# run the tests
+# check that we didn't run automatic XFS reprovisioning
+if [ -z "${AUTOPKGTEST_REBOOT_MARK:-}" ]; then
+    if [ -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
+        fatal "unexpected autosaved XFS"
+    fi
+    ok "no autosaved XFS on large disk"
+fi
+
+# run the rest of the tests
 . $KOLA_EXT_DATA/luks-test.sh
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 15c15b3ca1..607c9877b0 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -39,6 +39,11 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
           fatal "ignition-ostree-growfs ran"
       fi
 
+      # check that autosave-xfs didn't run
+      if [ -e /run/ignition-ostree-autosaved-xfs.stamp ]; then
+          fatal "unexpected autosaved XFS"
+      fi
+
       # reboot once to sanity-check we can find root on second boot
       /tmp/autopkgtest-reboot rebooted
       ;;

From 95a07def71f4217069e9043a7518c6aaa27ee0c1 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 7 Apr 2023 16:16:24 -0400
Subject: [PATCH 1560/2157] denylist: snooze autosave-xfs and luks.autosave-xfs
 for aarch64 and ppc64le These tests are failing and blocking fcos pipeline
 multi-arch builds. See:
 https://github.com/coreos/fedora-coreos-tracker/issues/1458

---
 kola-denylist.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f9fc832b91..cdfbdec6f5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,3 +34,15 @@
   snooze: 2023-04-12
   arches:
     - aarch64
+- pattern: ext.config.root-reprovision.autosave-xfs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1458
+  snooze: 2023-04-21
+  arches:
+    - aarch64
+    - ppc64le
+- pattern: ext.config.root-reprovision.luks.autosave-xfs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1458
+  snooze: 2023-04-21
+  arches:
+    - aarch64
+    - ppc64le

From eef40155245d7b66918955e30c20233bba8eb0db Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 8 Apr 2023 14:15:51 +0000
Subject: [PATCH 1561/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/509/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7ce54ba0b8..5695f5f4b3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.206.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.aarch64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc37.aarch64"
+      "evra": "2.89-2.fc37.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.aarch64"
@@ -829,7 +829,7 @@
       "evra": "0.2.5-8.fc37.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.4-1.fc37.aarch64"
+      "evra": "1.5.5-1.fc37.aarch64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.aarch64"
@@ -1234,7 +1234,7 @@
       "evra": "2.1.0-19.fc37.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.3.0-1.fc37.aarch64"
+      "evra": "1.3.1-1.fc37.aarch64"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.aarch64"
@@ -1246,20 +1246,20 @@
       "evra": "1.1.2-2.fc37.aarch64"
     },
     "zstd": {
-      "evra": "1.5.4-1.fc37.aarch64"
+      "evra": "1.5.5-1.fc37.aarch64"
     }
   },
   "metadata": {
-    "generated": "2023-04-05T00:00:00Z",
+    "generated": "2023-04-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-04T21:53:15Z"
+        "generated": "2023-04-05T22:28:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-05T01:30:08Z"
+        "generated": "2023-04-08T02:28:07Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f14acaa9f0..d401ddacc2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.206.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.ppc64le"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc37.ppc64le"
+      "evra": "2.89-2.fc37.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.ppc64le"
@@ -829,7 +829,7 @@
       "evra": "0.2.5-8.fc37.ppc64le"
     },
     "libzstd": {
-      "evra": "1.5.4-1.fc37.ppc64le"
+      "evra": "1.5.5-1.fc37.ppc64le"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.ppc64le"
@@ -1237,7 +1237,7 @@
       "evra": "2.1.0-19.fc37.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.3.0-1.fc37.ppc64le"
+      "evra": "1.3.1-1.fc37.ppc64le"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.ppc64le"
@@ -1249,20 +1249,20 @@
       "evra": "1.1.2-2.fc37.ppc64le"
     },
     "zstd": {
-      "evra": "1.5.4-1.fc37.ppc64le"
+      "evra": "1.5.5-1.fc37.ppc64le"
     }
   },
   "metadata": {
-    "generated": "2023-04-05T00:00:00Z",
+    "generated": "2023-04-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-04T21:52:05Z"
+        "generated": "2023-04-05T22:28:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-05T01:30:21Z"
+        "generated": "2023-04-08T02:28:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6cbd88c5c2..d485038793 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.206.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.s390x"
@@ -229,7 +229,7 @@
       "evra": "3.8-3.fc37.s390x"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc37.s390x"
+      "evra": "2.89-2.fc37.s390x"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.s390x"
@@ -772,7 +772,7 @@
       "evra": "0.2.5-8.fc37.s390x"
     },
     "libzstd": {
-      "evra": "1.5.4-1.fc37.s390x"
+      "evra": "1.5.5-1.fc37.s390x"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.s390x"
@@ -1165,7 +1165,7 @@
       "evra": "2.1.0-19.fc37.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.3.0-1.fc37.s390x"
+      "evra": "1.3.1-1.fc37.s390x"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.s390x"
@@ -1177,20 +1177,20 @@
       "evra": "1.1.2-2.fc37.s390x"
     },
     "zstd": {
-      "evra": "1.5.4-1.fc37.s390x"
+      "evra": "1.5.5-1.fc37.s390x"
     }
   },
   "metadata": {
-    "generated": "2023-04-05T00:00:00Z",
+    "generated": "2023-04-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-04T21:53:25Z"
+        "generated": "2023-04-05T22:27:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-05T01:30:28Z"
+        "generated": "2023-04-08T02:28:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6acc38fca0..f2b7b573a8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.21.3-3.fc37.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.206.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc37.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc37.x86_64"
@@ -232,7 +232,7 @@
       "evra": "3.8-3.fc37.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc37.x86_64"
+      "evra": "2.89-2.fc37.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-4.fc37.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.2.5-8.fc37.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.4-1.fc37.x86_64"
+      "evra": "1.5.5-1.fc37.x86_64"
     },
     "linux-atm-libs": {
       "evra": "2.5.1-33.fc37.x86_64"
@@ -1243,7 +1243,7 @@
       "evra": "2.1.0-19.fc37.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.3.0-1.fc37.x86_64"
+      "evra": "1.3.1-1.fc37.x86_64"
     },
     "zincati": {
       "evra": "0.0.25-2.fc37.x86_64"
@@ -1255,20 +1255,20 @@
       "evra": "1.1.2-2.fc37.x86_64"
     },
     "zstd": {
-      "evra": "1.5.4-1.fc37.x86_64"
+      "evra": "1.5.5-1.fc37.x86_64"
     }
   },
   "metadata": {
-    "generated": "2023-04-05T00:00:00Z",
+    "generated": "2023-04-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-04T21:54:08Z"
+        "generated": "2023-04-05T22:30:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-05T01:30:35Z"
+        "generated": "2023-04-08T02:28:35Z"
       }
     }
   }

From dd7ee9c5ac2fccbd468d6b65d27a03bba26dff18 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Thu, 30 Mar 2023 12:04:31 -0300
Subject: [PATCH 1562/2157] overlay.d: create new 30gcp-udev-rules overlay

We previously had the 65-gce-disk-naming.rules under the 05core
overlay. This commit makes a new overlay.d entry specifically for
the GCP rules, in this way we can track it and have a better
maintenance

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
(cherry picked from commit 9da4327eabf56e6ef3e254c319c59837b789ae39)
---
 overlay.d/30gcp-udev-rules/statoverride            |  2 ++
 .../usr/lib/udev/rules.d/65-gce-disk-naming.rules  |  0
 overlay.d/README.md                                | 14 ++++++++++++++
 3 files changed, 16 insertions(+)
 create mode 100644 overlay.d/30gcp-udev-rules/statoverride
 rename overlay.d/{05core => 30gcp-udev-rules}/usr/lib/udev/rules.d/65-gce-disk-naming.rules (100%)

diff --git a/overlay.d/30gcp-udev-rules/statoverride b/overlay.d/30gcp-udev-rules/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/30gcp-udev-rules/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/05core/usr/lib/udev/rules.d/65-gce-disk-naming.rules b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
similarity index 100%
rename from overlay.d/05core/usr/lib/udev/rules.d/65-gce-disk-naming.rules
rename to overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 1e5eed2da1..8d9a53edb5 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -66,3 +66,17 @@ bits to include the rules in the initramfs too.
 [1] https://github.com/coreos/fedora-coreos-tracker/issues/1383
 [2] https://github.com/Azure/WALinuxAgent/pull/1622
 [3] https://src.fedoraproject.org/rpms/WALinuxAgent/pull-request/4
+
+
+30gcp-udev-rules
+-------------------
+
+Add udev rules and scripts needed from google-guest-configs [1] for disk
+configuration in GCP, such as local SSD controllers (nvme and scsi).
+
+There is an opened BZ [2] requesting a subpackage of google-compute-engine-guest-configs
+containing only what we need. Once we get it, we can include this rpm in the
+OS (Fedora/RHEL) and drop this module entirely.
+
+[1] https://github.com/GoogleCloudPlatform/guest-configs/tree/master/src/lib/udev
+[2] https://bugzilla.redhat.com/show_bug.cgi?id=218286

From 0463bf66eae58d0e4807c310fdfdc73b7d623e03 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Thu, 30 Mar 2023 15:19:44 -0300
Subject: [PATCH 1563/2157] overlay.d: Add/Update udev rules for GCP

 - This PR injects/updates the udev rules from google-guest-config package into
our overlay (GoogleCloudPlatform/guest-configs@18fbc05).

 - It works as an workaround for the BZ #2176212. The longer term solution
is to add these packages as part of the Fedora/RHEL itself, so we won't need to
maintain it, as we can entirely drop it.

For this matter the BZ https://bugzilla.redhat.com/show_bug.cgi?id=2182865
was opened requesting a subpackage of google-compute-engine-guest-configs
containing only what is needed.

For more info:

https://bugzilla.redhat.com/show_bug.cgi?id=2176212
https://github.com/GoogleCloudPlatform/guest-configs/tree/master/src/lib/udev

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
(cherry picked from commit b944dd4a3c74f497455c202f315b41761c568802)
---
 .../usr/lib/udev/google_nvme_id               | 308 ++++++++++++++++++
 .../udev/rules.d/64-gce-disk-removal.rules    |  19 ++
 .../lib/udev/rules.d/65-gce-disk-naming.rules |  31 +-
 3 files changed, 344 insertions(+), 14 deletions(-)
 create mode 100644 overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
 create mode 100644 overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules

diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id b/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
new file mode 100644
index 0000000000..a41cd340e3
--- /dev/null
+++ b/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
@@ -0,0 +1,308 @@
+#!/bin/bash
+# ATTENTION: This is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/google_nvme_id
+
+# Copyright 2020 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Used to generate symlinks for NVMe devices (both local SSD and
+# persistent disk) using the disk names reported by the metadata server.
+
+
+
+# Locations of the script's dependencies
+readonly nvme_cli_bin=/usr/sbin/nvme
+
+# Bash regex to parse device paths and controller identification
+readonly PD_CONTROLLER_REGEX="nvme_card-pd"
+readonly SSD_CONTROLLER_REGEX="nvme_card[0-9]*"
+readonly CONTROLLER_NUMBER_REGEX="nvme_card([[:digit:]]+)"
+readonly NAMESPACE_NUMBER_REGEX="/dev/nvme[[:digit:]]+n([[:digit:]]+).*"
+readonly PARTITION_NUMBER_REGEX="/dev/nvme[[:digit:]]+n[[:digit:]]+p([[:digit:]]+)"
+readonly PD_NVME_REGEX="sn[[:space:]]+:[[:space]]+nvme_card-pd"
+
+# Globals used to generate the symlinks for a NVMe disk.  These are populated
+# by the identify_pd_disk function and exported for consumption by udev rules.
+ID_SERIAL=''
+ID_SERIAL_SHORT=''
+
+#######################################
+# Helper function to log an error message to stderr.
+# Globals:
+#   None
+# Arguments:
+#   String to print as the log message
+# Outputs:
+#   Writes error to STDERR
+#######################################
+function err() {
+  echo "[$(date +'%Y-%m-%dT%H:%M:%S%z')]: $*" >&2
+}
+
+#######################################
+# Retrieves the device name for an NVMe namespace using nvme-cli.
+# Globals:
+#   Uses nvme_cli_bin
+# Arguments:
+#   The path to the nvme namespace (/dev/nvme0n?)
+# Outputs:
+#   The device name parsed from the JSON in the vendor ext of the ns-id command.
+# Returns:
+#   0 if the device name for the namespace could be retrieved, 1 otherwise
+#######################################
+function get_namespace_device_name() {
+  local nvme_json
+  nvme_json="$("$nvme_cli_bin" id-ns -b "$1" | xxd -p -seek 384 | xxd -p -r)"
+  if [[ $? -ne 0 ]]; then
+    return 1
+  fi
+
+  if [[ -z "$nvme_json" ]]; then
+    err "NVMe Vendor Extension disk information not present"
+    return 1
+  fi
+
+  local device_name
+  device_name="$(echo "$nvme_json" | grep device_name | sed -e 's/.*"device_name":[  \t]*"\([a-zA-Z0-9_-]\+\)".*/\1/')"
+
+  # Error if our device name is empty
+  if [[ -z "$device_name" ]]; then
+    err "Empty name"
+    return 1
+  fi
+
+  echo "$device_name"
+  return 0
+}
+
+#######################################
+# Retrieves the nsid for an NVMe namespace
+# Globals:
+#   None
+# Arguments:
+#   The path to the nvme namespace (/dev/nvme0n*)
+# Outputs:
+#   The namespace number/id
+# Returns:
+#   0 if the namespace id could be retrieved, 1 otherwise
+#######################################
+function get_namespace_number() {
+  local dev_path="$1"
+  local namespace_number
+  if [[ "$dev_path" =~ $NAMESPACE_NUMBER_REGEX ]]; then
+    namespace_number="${BASH_REMATCH[1]}"
+  else
+    return 1
+  fi
+
+  echo "$namespace_number"
+  return 0
+}
+
+#######################################
+# Retrieves the partition number for a device path if it exists
+# Globals:
+#   None
+# Arguments:
+#   The path to the device partition (/dev/nvme0n*p*)
+# Outputs:
+#   The value after 'p' in the device path, or an empty string if the path has
+#   no partition.
+#######################################
+function get_partition_number() {
+  local dev_path="$1"
+  local partition_number
+  if [[ "$dev_path" =~ $PARTITION_NUMBER_REGEX ]]; then
+    partition_number="${BASH_REMATCH[1]}"
+    echo "$partition_number"
+  else
+    echo ''
+  fi
+  return 0
+}
+
+#######################################
+# Retrieves the controller number from the device model if it exists
+# Globals:
+#   None
+# Arguments:
+#   The NVMe device model (nvme_card or nvme_card1/2/3/...)
+# Outputs:
+#   The controller id/number
+#######################################
+function get_controller_number() {
+  local dev_model="$1"
+  local controller_number
+  if [[ "$dev_model" =~ $CONTROLLER_NUMBER_REGEX ]]; then
+    controller_number="${BASH_REMATCH[1]}"
+    echo "$controller_number"
+  else
+    # if it's 'nvme_card', echo 0. This is for backward compatibility.
+    echo '0'
+  fi
+  return 0
+}
+
+#######################################
+# Generates a symlink for a PD-NVMe device using the metadata's disk name.
+# Primarily used for testing but can be used if the script is directly invoked.
+# Globals:
+#   Uses ID_SERIAL_SHORT (can be populated by identify_pd_disk)
+# Arguments:
+#   The device path for the disk
+#######################################
+function gen_symlink() {
+  local dev_path="$1"
+  local partition_number="$(get_partition_number "$dev_path")"
+
+  if [[ -n "$partition_number" ]]; then
+    ln -s "$dev_path" /dev/disk/by-id/google-"$ID_SERIAL_SHORT"-part"$partition_number" > /dev/null 2>&1
+  else
+    ln -s "$dev_path" /dev/disk/by-id/google-"$ID_SERIAL_SHORT" > /dev/null 2>&1
+  fi
+
+  return 0
+}
+
+#######################################
+# Populates the ID_* global variables with a disk's device name and namespace
+# Globals:
+#   Populates ID_SERIAL_SHORT, and ID_SERIAL
+# Arguments:
+#   The device path for the disk
+# Returns:
+#   0 on success and 1 if an error occurs
+#######################################
+function identify_pd_disk() {
+  local dev_path="$1"
+  local dev_name
+  dev_name="$(get_namespace_device_name "$dev_path")"
+  if [[ $? -ne 0 ]]; then
+    return 1
+  fi
+
+  ID_SERIAL_SHORT="$dev_name"
+  ID_SERIAL="Google_PersistentDisk_${ID_SERIAL_SHORT}"
+  return 0
+}
+
+#######################################
+# Populates the ID_* global variables with a disk's device name and namespace
+# Globals:
+#   Populates ID_SERIAL_SHORT, and ID_SERIAL
+# Arguments:
+#   The device path for the disk
+# Returns:
+#   0 on success and 1 if an error occurs
+#######################################
+function identify_local_ssd_disk() {
+  local dev_model="$1"
+  local dev_path="$2"
+  local controller_number
+  controller_number="$(get_controller_number "$dev_model")"
+  if [[ $? -ne 0 ]]; then
+    return 1
+  fi
+
+  local namespace_number
+  namespace_number="$(get_namespace_number "$dev_path")"
+  if [[ $? -ne 0 ]]; then
+    return 1
+  fi
+
+  ID_SERIAL_SHORT="local-nvme-ssd-$(($controller_number+$namespace_number-1))"
+  ID_SERIAL="Google_EphemeralDisk_${ID_SERIAL_SHORT}"
+  return 0
+}
+
+function print_help_message() {
+  echo "Usage: google_nvme_id [-s] [-h] -d device_path"
+  echo "  -d <device_path> (Required): Specifies the path to generate a name"
+  echo "        for.  This needs to be a path to an nvme device or namespace"
+  echo "  -s: Create symbolic link for the disk under /dev/disk/by-id."
+  echo "        Otherwise, the disk name will be printed to STDOUT"
+  echo "  -h: Print this help message"
+}
+
+function main() {
+  local opt_gen_symlink='false'
+  local device_path=''
+
+  while getopts :d:sh flag; do
+    case "$flag" in
+      d) device_path="$OPTARG";;
+      s) opt_gen_symlink='true';;
+      h) print_help_message
+         return 0
+         ;;
+      :) echo "Invalid option: ${OPTARG} requires an argument" 1>&2
+         return 1
+         ;;
+      *) return 1
+    esac
+  done
+
+  if [[ -z "$device_path" ]]; then
+    echo "Device path (-d) argument required. Use -h for full usage." 1>&2
+    exit 1
+  fi
+
+  # Ensure the nvme-cli command is installed
+  command -v "$nvme_cli_bin" > /dev/null 2>&1
+  if [[ $? -ne 0 ]]; then
+    err "The nvme utility (/usr/sbin/nvme) was not found. You may need to run \
+with sudo or install nvme-cli."
+    return 1
+  fi
+
+  # Ensure the passed device is actually an NVMe device
+  "$nvme_cli_bin" id-ctrl "$device_path" &>/dev/null
+  if [[ $? -ne 0 ]]; then
+    err "Passed device was not an NVMe device.  (You may need to run this \
+script as root/with sudo)."
+    return 1
+  fi
+
+  # Detect the type of attached nvme device
+  local controller_id
+  controller_id=$("$nvme_cli_bin" id-ctrl "$device_path")
+  if [[ "$controller_id" =~ $PD_CONTROLLER_REGEX ]] ; then
+    # Fill the global variables for the id command for the given disk type
+    # Error messages will be printed closer to error, no need to reprint here
+    identify_pd_disk "$device_path"
+    if [[ $? -ne 0 ]]; then
+      return $?
+    fi
+  elif [[ "$controller_id" =~ $SSD_CONTROLLER_REGEX ]] ; then
+    identify_local_ssd_disk "$controller_id" "$device_path"
+    if [[ $? -ne 0 ]]; then
+      return $?
+    fi
+  else
+    err "Device is not a NVMe device"
+    return 1
+  fi
+
+  # Gen symlinks or print out the globals set by the identify command
+  if [[ "$opt_gen_symlink" == 'true' ]]; then
+    gen_symlink "$device_path"
+  else
+    # These will be consumed by udev
+    echo "ID_SERIAL_SHORT=${ID_SERIAL_SHORT}"
+    echo "ID_SERIAL=${ID_SERIAL}"
+  fi
+
+  return $?
+
+}
+main "$@"
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules
new file mode 100644
index 0000000000..052d636b21
--- /dev/null
+++ b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules
@@ -0,0 +1,19 @@
+# ATTENTION: It is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/rules.d/64-gce-disk-removal.rules
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+#     distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# When a disk is removed, unmount any remaining attached volumes.
+
+ACTION=="remove", SUBSYSTEM=="block", KERNEL=="sd*|vd*|nvme*", RUN+="/bin/sh -c '/bin/umount -fl /dev/$name && /usr/bin/logger -p daemon.warn -s WARNING: hot-removed /dev/$name that was still mounted, data may have been corrupted'"
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
index e19c1c5b91..5c62b7564d 100644
--- a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
+++ b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
@@ -1,3 +1,4 @@
+# ATTENTION: It is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/rules.d/65-gce-disk-naming.rules
 # Copyright 2016 Google Inc. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -12,27 +13,29 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+
 # Name the attached disks as the specified by deviceName.
 
 ACTION!="add|change", GOTO="gce_disk_naming_end"
 SUBSYSTEM!="block", GOTO="gce_disk_naming_end"
 
 # SCSI naming
-KERNEL=="sd*|vd*", ENV{ID_VENDOR}=="Google", IMPORT{program}="scsi_id --export --whitelisted -d $tempnode"
-
-# NVME naming
-KERNEL=="nvme0n1*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-0"
-KERNEL=="nvme0n2*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-1"
-KERNEL=="nvme0n3*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-2"
-KERNEL=="nvme0n4*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-3"
-KERNEL=="nvme0n5*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-4"
-KERNEL=="nvme0n6*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-5"
-KERNEL=="nvme0n7*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-6"
-KERNEL=="nvme0n8*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-7"
-KERNEL=="nvme*", ENV{ID_VENDOR}=="Google", ENV{ID_SERIAL}="Google_EphemeralDisk_$env{ID_SERIAL_SHORT}"
+KERNEL=="sd*|vd*", IMPORT{program}="scsi_id --export --whitelisted -d $tempnode"
+
+# NVME Local SSD naming
+KERNEL=="nvme*n*", ATTRS{model}=="nvme_card", PROGRAM="/bin/sh -c 'nsid=$$(echo %k|sed -re s/nvme[0-9]+n\([0-9]+\).\*/\\1/); echo $$((nsid-1))'", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-%c"
+KERNEL=="nvme*", ATTRS{model}=="nvme_card", ENV{ID_SERIAL}="Google_EphemeralDisk_$env{ID_SERIAL_SHORT}"
+# Support for local SSD multi-controller
+KERNEL=="nvme*n*", ATTRS{model}=="nvme_card[0-9]*", IMPORT{program}="google_nvme_id -d $tempnode"
+
+# NVME Persistent Disk IO Timeout
+KERNEL=="nvme*n*", ENV{DEVTYPE}=="disk", ATTRS{model}=="nvme_card-pd", ATTR{queue/io_timeout}="4294967295"
+
+# NVME Persistent Disk Naming
+KERNEL=="nvme*n*", ATTRS{model}=="nvme_card-pd", IMPORT{program}="google_nvme_id -d $tempnode"
 
 # Symlinks
-KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="disk", ENV{ID_VENDOR}=="Google", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}"
-KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="partition", ENV{ID_VENDOR}=="Google", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}-part%n"
+KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="disk", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}"
+KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="partition", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}-part%n"
 
 LABEL="gce_disk_naming_end"

From 6b3e0034d47fe1de755b16016a4b6972c0f91646 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Wed, 5 Apr 2023 09:48:39 -0300
Subject: [PATCH 1564/2157] Add 30gcp-udev-rules overlay to the manifest

- Add the new 30gcp-udev-rules overlay into the manifest

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 manifests/fedora-coreos-base.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 512fb43bf3..cf39cbb75d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -21,6 +21,7 @@ ostree-layers:
   - overlay/09misc
   - overlay/20platform-chrony
   - overlay/25azure-udev-rules
+  - overlay/30gcp-udev-rules
 
 # Be minimal
 recommends: false

From 773528175403f8b6f78c70f74f0480bc6b00c038 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 10 Apr 2023 12:46:37 -0400
Subject: [PATCH 1565/2157] tests/kola: upgrade.extended: get info about booted
 deployment

I've seen a case where zincati/rpm-ostree stage an update before the
kola script even runs so the information we pick up from
`rpm-ostree status  --json | jq -r '.deployments[0]` is actually
from the staged (not booted) deployment, which leads to us thinking
we're one step further than we need to be in the process and then
hitting an error when the `rpm-ostree rebase` fails because there
is an rpm-ostree operation already in progress.

Let's pick up the information from the booted deployment to get
rid of this race condition.
---
 tests/kola/upgrade/extended/test.sh | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 3bd7b43efc..d69e2c35ae 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -57,8 +57,11 @@ if [ -f /etc/zincati/config.d/90-disable-auto-updates.toml ]; then
     systemctl restart zincati
 fi
 
-version=$(rpm-ostree status  --json | jq -r '.deployments[0].version')
-stream=$(rpm-ostree status  --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
+get_booted_deployment_json() {
+    rpm-ostree status  --json | jq -r '.deployments[] | select(.booted == true)'
+}
+version=$(get_booted_deployment_json | jq -r '.version')
+stream=$(get_booted_deployment_json | jq -r '.["base-commit-meta"]["fedora-coreos.stream"]')
 
 # Pick up the last release for the current stream
 test -f /srv/releases.json || \

From 07f87e3cc073dc5b4596e9adf33a51c9249c8d24 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 11 Apr 2023 10:11:21 -0400
Subject: [PATCH 1566/2157] tests/kola: bump `minDisk` in autosave-xfs tests

The actual agcount on a 64G disk depends on the agsize baked in the
image, which in turn depends on how large the rootfs was calculated to
be (see `estimate-commit-disk-size` in cosa).

Since the starting rootfs size will differ on different arches (notably,
be larger than x86_64) and minor variations are greatly amplified, the
agcount may be lower than expected for a 64G disk and in turn the test
can fail. Even on x86_64, the rootfs size can change e.g. in CI builds
where we bake non-stripped binaries.

Bump the requested disk size to 100G in the test to make it more
foolproof.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1458
---
 kola-denylist.yaml                                   | 12 ------------
 tests/kola/root-reprovision/autosave-xfs/test.sh     |  2 +-
 .../kola/root-reprovision/luks/autosave-xfs/test.sh  |  2 +-
 3 files changed, 2 insertions(+), 14 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index cdfbdec6f5..f9fc832b91 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,15 +34,3 @@
   snooze: 2023-04-12
   arches:
     - aarch64
-- pattern: ext.config.root-reprovision.autosave-xfs
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1458
-  snooze: 2023-04-21
-  arches:
-    - aarch64
-    - ppc64le
-- pattern: ext.config.root-reprovision.luks.autosave-xfs
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1458
-  snooze: 2023-04-21
-  arches:
-    - aarch64
-    - ppc64le
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
index b50ca2f0a1..e4c5b3405c 100755
--- a/tests/kola/root-reprovision/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -3,7 +3,7 @@
 ##   # This test reprovisions the rootfs automatically.
 ##   tags: "platform-independent reprovision"
 ##   # Trigger automatic XFS reprovisioning
-##   minDisk: 64
+##   minDisk: 100
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index 6625fad734..ab4e7a9528 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -10,7 +10,7 @@
 ##   # timeout value than the default.
 ##   timeoutMin: 15
 ##   # Trigger automatic XFS reprovisioning
-##   minDisk: 64
+##   minDisk: 100
 
 set -xeuo pipefail
 

From e018c684bd44a56255ee9420fbffd39af7712661 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 11 Apr 2023 15:01:17 -0400
Subject: [PATCH 1567/2157] 40ignition-ostree: give filesystem type when
 mounting zram-based XFS

We should do this anyway to be more explicit, but it also happens to
satisfy util-linux v2.39 in rawhide. (But likely we've exposed a bug in
that new code.)

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1462
---
 .../modules.d/40ignition-ostree/ignition-ostree-transposefs.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 244a6a5bc2..6f89c4007e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -176,7 +176,7 @@ ensure_zram_dev() {
     echo $(( mem_available * 90 / 100 ))K > /sys/block/zram"${dev}"/mem_limit
     mkfs.xfs -q /dev/zram"${dev}"
     mkdir "${saved_data}"
-    mount /dev/zram"${dev}" "${saved_data}"
+    mount -t xfs /dev/zram"${dev}" "${saved_data}"
     # save the zram device number created for when called to cleanup
     echo "${dev}" > "${zram_dev}"
 }

From b5682757af76e0048916935e77f52e18e596e7ad Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 12 Apr 2023 10:58:57 -0400
Subject: [PATCH 1568/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64 This is still causing issues. See:
 https://github.com/coreos/fedora-coreos-tracker/issues/1430

---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f9fc832b91..be9c357adb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -31,6 +31,6 @@
     - stable
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-04-12
+  snooze: 2023-05-03
   arches:
     - aarch64

From 1375c9fe569d017d5df6bab30982cf4d00d4e0da Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 12 Apr 2023 16:05:44 -0400
Subject: [PATCH 1569/2157] manifests/fedora-coreos-base: surgically remove
 qcom dtb files on aarch64

This will save us some space while we work on longer term
solutions for limited space in the /boot partition.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1464
---
 manifests/fedora-coreos-base.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index cf39cbb75d..8a85d93554 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -101,6 +101,13 @@ postprocess:
     ln -sf /usr/sbin/iptables-nft-restore  /etc/alternatives/iptables-restore
     ln -sf /usr/sbin/iptables-nft-save     /etc/alternatives/iptables-save
 
+  # Short term hack to avoid running out of space on aarch64. This should
+  # save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1464
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    rm -vrf /usr/lib/modules/*aarch64/dtb/qcom/
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.

From 64a4c2f50262d5781506617d3e324627e0ea9e97 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Tue, 11 Apr 2023 12:44:41 -0300
Subject: [PATCH 1570/2157] overlay.d: Add 30gcp-udev-rules dracut module

 - Add dracut module for 30gcp-udev-rules;
 - Udpate overlay documentation about it.

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 .../dracut/modules.d/30gcp-udev-rules/module-setup.sh | 11 +++++++++++
 overlay.d/README.md                                   |  8 ++++++--
 2 files changed, 17 insertions(+), 2 deletions(-)
 create mode 100644 overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh

diff --git a/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh b/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh
new file mode 100644
index 0000000000..9a3a622eec
--- /dev/null
+++ b/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+# Install 64-gce-disk-removal.rules, 65-gce-disk-naming.rules and
+# google_nvme_id into the initramfs
+
+# called by dracut
+install() {
+    inst_simple /usr/lib/udev/google_nvme_id
+    inst_multiple \
+        /usr/lib/udev/rules.d/64-gce-disk-removal.rules \
+        /usr/lib/udev/rules.d/65-gce-disk-naming.rules
+}
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 8d9a53edb5..cb19b091be 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -74,9 +74,13 @@ bits to include the rules in the initramfs too.
 Add udev rules and scripts needed from google-guest-configs [1] for disk
 configuration in GCP, such as local SSD controllers (nvme and scsi).
 
-There is an opened BZ [2] requesting a subpackage of google-compute-engine-guest-configs
+The udev rules are also needed in the initramfs [2] and are delivered here via a dracut
+module.
+
+There is an opened BZ [3] requesting a subpackage of google-compute-engine-guest-configs
 containing only what we need. Once we get it, we can include this rpm in the
 OS (Fedora/RHEL) and drop this module entirely.
 
 [1] https://github.com/GoogleCloudPlatform/guest-configs/tree/master/src/lib/udev
-[2] https://bugzilla.redhat.com/show_bug.cgi?id=218286
+[2] https://issues.redhat.com/browse/OCPBUGS-10942
+[3] https://bugzilla.redhat.com/show_bug.cgi?id=2182865

From aab01b0bee1830a4787bc1e8ad7109a017b1ec6b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 13 Apr 2023 22:23:47 +0000
Subject: [PATCH 1571/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/521/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 59 insertions(+), 59 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5695f5f4b3..31ced35c13 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.aarch64"
     },
     "dracut": {
-      "evra": "057-5.fc37.aarch64"
+      "evra": "059-1.fc37.aarch64"
     },
     "dracut-network": {
-      "evra": "057-5.fc37.aarch64"
+      "evra": "059-1.fc37.aarch64"
     },
     "dracut-squash": {
-      "evra": "057-5.fc37.aarch64"
+      "evra": "059-1.fc37.aarch64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.aarch64"
@@ -394,16 +394,16 @@
       "evra": "3.7-4.fc37.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc37.noarch"
+      "evra": "1:2.06-94.fc37.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-89.fc37.aarch64"
+      "evra": "1:2.06-94.fc37.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc37.aarch64"
+      "evra": "1:2.06-94.fc37.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc37.aarch64"
+      "evra": "1:2.06-94.fc37.aarch64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.aarch64"
@@ -1009,10 +1009,10 @@
       "evra": "3.5-1.fc37.aarch64"
     },
     "polkit": {
-      "evra": "121-4.fc37.aarch64"
+      "evra": "121-4.fc37.2.aarch64"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.aarch64"
+      "evra": "121-4.fc37.2.aarch64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-22.fc37.aarch64"
@@ -1102,7 +1102,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.11.1-1.fc37.aarch64"
+      "evra": "1:1.11.2-1.fc37.aarch64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.aarch64"
@@ -1207,10 +1207,10 @@
       "evra": "2.38.1-1.fc37.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1429-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1429-1.fc37.aarch64"
+      "evra": "2:9.0.1440-1.fc37.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc37.aarch64"
@@ -1250,16 +1250,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-08T00:00:00Z",
+    "generated": "2023-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:22Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-05T22:28:37Z"
+        "generated": "2023-04-08T14:19:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-08T02:28:07Z"
+        "generated": "2023-04-13T01:45:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d401ddacc2..06042e7d88 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.ppc64le"
     },
     "dracut": {
-      "evra": "057-5.fc37.ppc64le"
+      "evra": "059-1.fc37.ppc64le"
     },
     "dracut-network": {
-      "evra": "057-5.fc37.ppc64le"
+      "evra": "059-1.fc37.ppc64le"
     },
     "dracut-squash": {
-      "evra": "057-5.fc37.ppc64le"
+      "evra": "059-1.fc37.ppc64le"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.ppc64le"
@@ -385,19 +385,19 @@
       "evra": "3.7-4.fc37.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc37.noarch"
+      "evra": "1:2.06-94.fc37.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-89.fc37.ppc64le"
+      "evra": "1:2.06-94.fc37.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-89.fc37.noarch"
+      "evra": "1:2.06-94.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc37.ppc64le"
+      "evra": "1:2.06-94.fc37.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc37.ppc64le"
+      "evra": "1:2.06-94.fc37.ppc64le"
     },
     "gzip": {
       "evra": "1.12-2.fc37.ppc64le"
@@ -1009,10 +1009,10 @@
       "evra": "3.5-1.fc37.ppc64le"
     },
     "polkit": {
-      "evra": "121-4.fc37.ppc64le"
+      "evra": "121-4.fc37.2.ppc64le"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.ppc64le"
+      "evra": "121-4.fc37.2.ppc64le"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-22.fc37.ppc64le"
@@ -1108,7 +1108,7 @@
       "evra": "2.2-2.fc37.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.11.1-1.fc37.ppc64le"
+      "evra": "1:1.11.2-1.fc37.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.ppc64le"
@@ -1210,10 +1210,10 @@
       "evra": "2.38.1-1.fc37.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1429-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1429-1.fc37.ppc64le"
+      "evra": "2:9.0.1440-1.fc37.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc37.ppc64le"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-08T00:00:00Z",
+    "generated": "2023-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:20Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-05T22:28:06Z"
+        "generated": "2023-04-08T14:20:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-08T02:28:21Z"
+        "generated": "2023-04-13T01:45:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d485038793..eca0c5d444 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -235,13 +235,13 @@
       "evra": "4.2-4.fc37.s390x"
     },
     "dracut": {
-      "evra": "057-5.fc37.s390x"
+      "evra": "059-1.fc37.s390x"
     },
     "dracut-network": {
-      "evra": "057-5.fc37.s390x"
+      "evra": "059-1.fc37.s390x"
     },
     "dracut-squash": {
-      "evra": "057-5.fc37.s390x"
+      "evra": "059-1.fc37.s390x"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.s390x"
@@ -943,10 +943,10 @@
       "evra": "3.5-1.fc37.s390x"
     },
     "polkit": {
-      "evra": "121-4.fc37.s390x"
+      "evra": "121-4.fc37.2.s390x"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.s390x"
+      "evra": "121-4.fc37.2.s390x"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-22.fc37.s390x"
@@ -1033,7 +1033,7 @@
       "evra": "2:4.12.3-6.fc37.s390x"
     },
     "skopeo": {
-      "evra": "1:1.11.1-1.fc37.s390x"
+      "evra": "1:1.11.2-1.fc37.s390x"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.s390x"
@@ -1138,10 +1138,10 @@
       "evra": "2.6.1-1.fc37.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1429-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1429-1.fc37.s390x"
+      "evra": "2:9.0.1440-1.fc37.s390x"
     },
     "which": {
       "evra": "2.21-39.fc37.s390x"
@@ -1181,16 +1181,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-08T00:00:00Z",
+    "generated": "2023-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:18Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-05T22:27:48Z"
+        "generated": "2023-04-08T14:18:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-08T02:28:28Z"
+        "generated": "2023-04-13T01:45:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f2b7b573a8..2608869f98 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -238,13 +238,13 @@
       "evra": "4.2-4.fc37.x86_64"
     },
     "dracut": {
-      "evra": "057-5.fc37.x86_64"
+      "evra": "059-1.fc37.x86_64"
     },
     "dracut-network": {
-      "evra": "057-5.fc37.x86_64"
+      "evra": "059-1.fc37.x86_64"
     },
     "dracut-squash": {
-      "evra": "057-5.fc37.x86_64"
+      "evra": "059-1.fc37.x86_64"
     },
     "e2fsprogs": {
       "evra": "1.46.5-3.fc37.x86_64"
@@ -394,22 +394,22 @@
       "evra": "3.7-4.fc37.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc37.noarch"
+      "evra": "1:2.06-94.fc37.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-89.fc37.x86_64"
+      "evra": "1:2.06-94.fc37.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-89.fc37.x86_64"
+      "evra": "1:2.06-94.fc37.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-89.fc37.noarch"
+      "evra": "1:2.06-94.fc37.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc37.x86_64"
+      "evra": "1:2.06-94.fc37.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc37.x86_64"
+      "evra": "1:2.06-94.fc37.x86_64"
     },
     "gzip": {
       "evra": "1.12-2.fc37.x86_64"
@@ -1021,10 +1021,10 @@
       "evra": "3.5-1.fc37.x86_64"
     },
     "polkit": {
-      "evra": "121-4.fc37.x86_64"
+      "evra": "121-4.fc37.2.x86_64"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.x86_64"
+      "evra": "121-4.fc37.2.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-22.fc37.x86_64"
@@ -1111,7 +1111,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.11.1-1.fc37.x86_64"
+      "evra": "1:1.11.2-1.fc37.x86_64"
     },
     "slang": {
       "evra": "2.3.3-1.fc37.x86_64"
@@ -1216,10 +1216,10 @@
       "evra": "2.38.1-1.fc37.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1429-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc37.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1429-1.fc37.x86_64"
+      "evra": "2:9.0.1440-1.fc37.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc37.x86_64"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-08T00:00:00Z",
+    "generated": "2023-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2022-11-05T08:04:38Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-05T22:30:35Z"
+        "generated": "2023-04-08T14:19:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-08T02:28:35Z"
+        "generated": "2023-04-13T01:45:33Z"
       }
     }
   }

From 282e9b442ccf40688dc204ae2c795991844b1fad Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 14 Apr 2023 10:36:16 +0800
Subject: [PATCH 1572/2157] tests: change platform id `gce` to `gcp`

This is based on https://github.com/coreos/coreos-assembler/pull/3424
---
 tests/kola/ignition/resource/authenticated-gs/test.sh | 4 ++--
 tests/kola/ntp/chrony/coreos-platform-chrony-config   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/kola/ignition/resource/authenticated-gs/test.sh b/tests/kola/ignition/resource/authenticated-gs/test.sh
index 3f65697aa4..d0455185cf 100755
--- a/tests/kola/ignition/resource/authenticated-gs/test.sh
+++ b/tests/kola/ignition/resource/authenticated-gs/test.sh
@@ -2,8 +2,8 @@
 ## kola:
 ##   # We fetch resources from GCS.
 ##   tags: needs-internet
-##   # We authenticate to GCS with the GCE instance's credentials.
-##   platforms: gce
+##   # We authenticate to GCS with the GCP instance's credentials.
+##   platforms: gcp
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-config b/tests/kola/ntp/chrony/coreos-platform-chrony-config
index 04ad465a73..97ade69025 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-config
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-config
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   platforms: "aws azure gce qemu"
+##   platforms: "aws azure gcp qemu"
 #
 # Test the coreos-platform-chrony generator.
 

From 7e06893fe3f8e7295ffa936762f452cbb2de5c52 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 17 Apr 2023 13:26:11 -0400
Subject: [PATCH 1573/2157] tests/kola: fix version comparison for upgrade test

I had inappropriately used 31.20200505.1.0 when it should have been
32.20200505.1.0. Also fixed a typo in the comment URL above.
---
 tests/kola/upgrade/extended/test.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index d69e2c35ae..644ca4ecef 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -117,7 +117,7 @@ fi
 
 # Apply workarounds based on the current version of the system.
 #
-# First release on each stream with new enough zincati for updates stg.fedoraprojec.org
+# First release on each stream with new enough zincati for updates stg.fedoraproject.org
 # - 31.20200505.3.0
 # - 31.20200505.2.0
 # - 32.20200505.1.0
@@ -130,7 +130,7 @@ fi
 case "$stream" in
     'next')
         verlt $version '35.20211119.1.0' && grab-gpg-keys
-        verlt $version '31.20200505.1.0' && fix-update-url
+        verlt $version '32.20200505.1.0' && fix-update-url
         ;;
     'testing')
         verlt $version '35.20211119.2.0' && grab-gpg-keys

From 7ba21e719509860be20b94755e6a850ab7a6c92a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 17 Apr 2023 15:01:05 -0400
Subject: [PATCH 1574/2157] tests/kola: only restart zincati once

Let's just keep track of whether we want to restart Zincati
and then do it after all configuration has been handled.
---
 tests/kola/upgrade/extended/test.sh | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 644ca4ecef..18b32e7c13 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -51,10 +51,12 @@ set -eux -o pipefail
 
 . /etc/os-release # for $VERSION_ID
 
+need_zincati_restart='false'
+
 # delete the disabling of updates that was done by the test framework
 if [ -f /etc/zincati/config.d/90-disable-auto-updates.toml ]; then
     rm -f /etc/zincati/config.d/90-disable-auto-updates.toml
-    systemctl restart zincati
+    need_zincati_restart='true'
 fi
 
 get_booted_deployment_json() {
@@ -91,6 +93,9 @@ grab-gpg-keys() {
             sudo tee "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
         sudo chcon -v --reference="/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${VERSION_ID}-primary" "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
     done
+    # restart Zincati in case the process had been kicked off earlier
+    # than this script ran.
+    need_zincati_restart='true'
 }
 
 fix-update-url() {
@@ -101,7 +106,7 @@ fix-update-url() {
 [cincinnati]
 base_url= "https://updates.coreos.fedoraproject.org"
 EOF
-    systemctl restart zincati
+    need_zincati_restart='true'
 }
 
 ok "Reached version: $version"
@@ -153,6 +158,9 @@ if vereq $version $last_release; then
     sleep infinity
 fi
 
+# Restart Zincati if configuration was changed
+[ "${need_zincati_restart}" == "true" ] && systemctl restart zincati
+
 # Watch the Zincati logs to see if it got a lead on a new update.
 # Timeout after some time if no update. Unset pipefail since the
 # journalctl -f will give a bad exit code when grep exits early.

From 2969bcc98de4a66dfca98b046dca4bc0e51927b1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 17 Apr 2023 15:04:45 -0400
Subject: [PATCH 1575/2157] tests/kola: workaround early next builds zincati
 config

Early `next` releases before [1] had auto-updates disabled too. Let's
drop that config if it exists.

[1] https://github.com/coreos/fedora-coreos-config/commit/99eab318998441760cca224544fc713651f7a16d
---
 tests/kola/upgrade/extended/test.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 18b32e7c13..27831675b9 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -59,6 +59,14 @@ if [ -f /etc/zincati/config.d/90-disable-auto-updates.toml ]; then
     need_zincati_restart='true'
 fi
 
+# Early `next` releases before [1] had auto-updates disabled too. Let's
+# drop that config if it exists.
+# [1] https://github.com/coreos/fedora-coreos-config/commit/99eab318998441760cca224544fc713651f7a16d
+if [ -f /etc/zincati/config.d/90-disable-on-non-production-stream.toml ]; then
+    rm -f /etc/zincati/config.d/90-disable-on-non-production-stream.toml
+    need_zincati_restart='true'
+fi
+
 get_booted_deployment_json() {
     rpm-ostree status  --json | jq -r '.deployments[] | select(.booted == true)'
 }

From 5134c04ddf542701c2434e136a4ff16cfc57cd47 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 17 Apr 2023 15:47:37 -0400
Subject: [PATCH 1576/2157] tests/kola: workaound downgrade check for older
 zincati/rpm-ostree

Older FCOS will complain about an upgrade target being 'chronologically older than current'
This is documented in https://github.com/coreos/fedora-coreos-tracker/issues/481
We'll workaround the problem here in a config dropin.
---
 tests/kola/upgrade/extended/test.sh | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 27831675b9..796e33d9f6 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -117,6 +117,16 @@ EOF
     need_zincati_restart='true'
 }
 
+fix-allow-downgrade() {
+    # Older FCOS will complain about an upgrade target being 'chronologically older than current'
+    # This is documented in https://github.com/coreos/fedora-coreos-tracker/issues/481
+    # We can workaround the problem via a config dropin:
+    cat <<'EOF' > /run/zincati/config.d/99-fedora-coreos-allow-downgrade.toml
+updates.allow_downgrade = true
+EOF
+    need_zincati_restart='true'
+}
+
 ok "Reached version: $version"
 
 # Are we all the way at the desired target version?
@@ -140,17 +150,25 @@ fi
 # - 35.20211119.2.0
 # - 35.20211119.1.0
 #
+# First release with new enough rpm-ostree with fix for allow-downgrade issue
+# - 31.20200517.3.0
+# - 31.20200517.2.0
+# - 32.20200517.1.0
+#
 case "$stream" in
     'next')
         verlt $version '35.20211119.1.0' && grab-gpg-keys
+        verlt $version '32.20200517.1.0' && fix-allow-downgrade
         verlt $version '32.20200505.1.0' && fix-update-url
         ;;
     'testing')
         verlt $version '35.20211119.2.0' && grab-gpg-keys
+        verlt $version '31.20200517.2.0' && fix-allow-downgrade
         verlt $version '31.20200505.2.0' && fix-update-url
         ;;
     'stable')
         verlt $version '35.20211119.3.0' && grab-gpg-keys
+        verlt $version '31.20200517.3.0' && fix-allow-downgrade
         verlt $version '31.20200505.3.0' && fix-update-url
         ;;
     *) fatal "unexpected stream: $stream";;

From 49ca1064c94f7e0be561cb43817463818449f63b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 14 Apr 2023 16:24:20 -0400
Subject: [PATCH 1577/2157] Move to Fedora Linux 38

The Fedora 38 GA is to be released Tuesday April 18th.
---
 ci/buildroot/Dockerfile      |   2 +-
 kola-denylist.yaml           |  16 -
 manifest-lock.aarch64.json   | 859 +++++++++++++++++-----------------
 manifest-lock.overrides.yaml |  38 +-
 manifest-lock.ppc64le.json   | 862 +++++++++++++++++-----------------
 manifest-lock.s390x.json     | 811 ++++++++++++++++----------------
 manifest-lock.x86_64.json    | 863 +++++++++++++++++------------------
 manifest.yaml                |   2 +-
 8 files changed, 1741 insertions(+), 1712 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index fe04000daa..b20088190b 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:37
+FROM registry.fedoraproject.org/fedora:38
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf
diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index be9c357adb..257627e634 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,22 +13,6 @@
   tracker: https://github.com/coreos/coreos-assembler/issues/3361
   arches:
     - ppc64le
-- pattern: ext.config.ignition.resource.remote
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  arches:
-    - s390x
-  streams:
-    - testing-devel
-    - testing
-    - stable
-- pattern: rpmostree.install-uninstall
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1215
-  arches:
-    - s390x
-  streams:
-    - testing-devel
-    - testing
-    - stable
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
   snooze: 2023-05-03
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 31ced35c13..59419779ef 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1265 +1,1268 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.10-1.fc37.aarch64"
+      "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.10-1.fc37.aarch64"
+      "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.10-1.fc37.aarch64"
+      "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.10-1.fc37.aarch64"
+      "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.10-1.fc37.aarch64"
+      "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-1.fc37.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.5.0-4.fc37.aarch64"
+      "evra": "1.6.0-1.fc38.aarch64"
     },
     "acl": {
-      "evra": "2.3.1-4.fc37.aarch64"
+      "evra": "2.3.1-6.fc38.aarch64"
     },
     "adcli": {
-      "evra": "0.9.1-11.fc37.aarch64"
+      "evra": "0.9.2-2.fc38.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc37.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc37.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "alternatives": {
-      "evra": "1.22-1.fc37.aarch64"
+      "evra": "1.22-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "attr": {
-      "evra": "2.5.1-5.fc37.aarch64"
+      "evra": "2.5.1-6.fc38.aarch64"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc37.aarch64"
+      "evra": "3.1-2.fc38.aarch64"
     },
     "authselect": {
-      "evra": "1.4.2-1.fc37.aarch64"
+      "evra": "1.4.2-2.fc38.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.4.2-1.fc37.aarch64"
+      "evra": "1.4.2-2.fc38.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-18.fc37.aarch64"
+      "evra": "0.8-20.fc38.aarch64"
     },
     "basesystem": {
-      "evra": "11-14.fc37.noarch"
+      "evra": "11-15.fc38.noarch"
     },
     "bash": {
-      "evra": "5.2.15-1.fc37.aarch64"
+      "evra": "5.2.15-3.fc38.aarch64"
     },
     "bash-completion": {
-      "evra": "1:2.11-8.fc37.noarch"
+      "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc37.aarch64"
+      "evra": "32:9.18.13-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc37.aarch64"
+      "evra": "32:9.18.13-1.fc38.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.8-3.fc37.aarch64"
+      "evra": "0.2.9-1.fc38.aarch64"
     },
     "bsdtar": {
-      "evra": "3.6.1-3.fc37.aarch64"
+      "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc37.aarch64"
+      "evra": "6.2.2-1.fc38.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-3.fc37.aarch64"
+      "evra": "0.7.0-1.fc38.aarch64"
     },
     "bzip2": {
-      "evra": "1.0.8-12.fc37.aarch64"
+      "evra": "1.0.8-13.fc38.aarch64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-12.fc37.aarch64"
+      "evra": "1.0.8-13.fc38.aarch64"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc37.aarch64"
+      "evra": "1.19.0-1.fc38.aarch64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-1.0.fc37.noarch"
+      "evra": "2023.2.60-2.fc38.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc37.aarch64"
+      "evra": "0.1.7-14.fc38.aarch64"
     },
     "chrony": {
-      "evra": "4.3-1.fc37.aarch64"
+      "evra": "4.3-3.fc38.aarch64"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc37.aarch64"
+      "evra": "7.0-1.fc38.aarch64"
     },
     "clevis": {
-      "evra": "19-2.fc37.aarch64"
+      "evra": "19-2.fc38.aarch64"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc37.aarch64"
+      "evra": "19-2.fc38.aarch64"
     },
     "clevis-luks": {
-      "evra": "19-2.fc37.aarch64"
+      "evra": "19-2.fc38.aarch64"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc37.aarch64"
+      "evra": "19-2.fc38.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-11.fc37.noarch"
+      "evra": "0.31-12.fc38.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc37.aarch64"
+      "evra": "2:2.1.7-2.fc38.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc38.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc37.aarch64"
+      "evra": "1.6.19-1.fc38.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc37.aarch64"
+      "evra": "1.1.1-16.fc38.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc37.aarch64"
+      "evra": "0.17.0-1.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc37.aarch64"
+      "evra": "0.17.0-1.fc38.aarch64"
     },
     "coreutils": {
-      "evra": "9.1-7.fc37.aarch64"
+      "evra": "9.1-11.fc38.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.1-7.fc37.aarch64"
+      "evra": "9.1-11.fc38.aarch64"
     },
     "cpio": {
-      "evra": "2.13-13.fc37.aarch64"
+      "evra": "2.13-14.fc38.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.7-30.fc37.aarch64"
+      "evra": "2.9.7-31.fc38.aarch64"
     },
     "criu": {
-      "evra": "3.17.1-3.fc37.aarch64"
+      "evra": "3.17.1-5.fc38.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17.1-3.fc37.aarch64"
+      "evra": "3.17.1-5.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.3-2.fc37.aarch64"
+      "evra": "1.8.3-2.fc38.aarch64"
     },
     "crypto-policies": {
-      "evra": "20220815-1.gite4ed860.fc37.noarch"
+      "evra": "20230301-1.gita12f7b2.fc38.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc37.aarch64"
+      "evra": "2.6.1-1.fc38.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc37.aarch64"
+      "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "7.85.0-8.fc37.aarch64"
+      "evra": "7.87.0-7.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-8.fc37.aarch64"
+      "evra": "2.1.28-9.fc38.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-8.fc37.aarch64"
+      "evra": "2.1.28-9.fc38.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc37.aarch64"
+      "evra": "1:1.14.6-1.fc38.aarch64"
     },
     "dbus-broker": {
-      "evra": "33-1.fc37.aarch64"
+      "evra": "33-1.fc38.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc37.aarch64"
+      "evra": "1:1.14.6-1.fc38.aarch64"
     },
     "device-mapper": {
-      "evra": "1.02.175-9.fc37.aarch64"
+      "evra": "1.02.189-2.fc38.aarch64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-9.fc37.aarch64"
+      "evra": "1.02.189-2.fc38.aarch64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-9.fc37.aarch64"
+      "evra": "1.02.189-2.fc38.aarch64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-9.fc37.aarch64"
+      "evra": "1.02.189-2.fc38.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-4.fc37.aarch64"
+      "evra": "0.9.4-2.fc38.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-4.fc37.aarch64"
+      "evra": "0.9.4-2.fc38.aarch64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-8.fc37.aarch64"
+      "evra": "0.9.0-10.fc38.aarch64"
     },
     "diffutils": {
-      "evra": "3.8-3.fc37.aarch64"
+      "evra": "3.9-1.fc38.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc37.aarch64"
+      "evra": "2.89-1.fc38.aarch64"
     },
     "dosfstools": {
-      "evra": "4.2-4.fc37.aarch64"
+      "evra": "4.2-6.fc38.aarch64"
     },
     "dracut": {
-      "evra": "059-1.fc37.aarch64"
+      "evra": "059-2.fc38.aarch64"
     },
     "dracut-network": {
-      "evra": "059-1.fc37.aarch64"
+      "evra": "059-2.fc38.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-1.fc37.aarch64"
+      "evra": "059-2.fc38.aarch64"
+    },
+    "duktape": {
+      "evra": "2.7.0-2.fc38.aarch64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-3.fc37.aarch64"
+      "evra": "1.46.5-4.fc38.aarch64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-3.fc37.aarch64"
+      "evra": "1.46.5-4.fc38.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-6.fc37.noarch"
+      "evra": "5-7.fc38.noarch"
     },
     "efibootmgr": {
-      "evra": "18-2.fc37.aarch64"
+      "evra": "18-3.fc38.aarch64"
     },
     "efivar-libs": {
-      "evra": "38-6.fc37.aarch64"
+      "evra": "38-7.fc38.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc37.noarch"
+      "evra": "0.189-1.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc37.aarch64"
+      "evra": "0.189-1.fc38.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc37.aarch64"
+      "evra": "0.189-1.fc38.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc37.aarch64"
+      "evra": "2:6.2-1.fc38.aarch64"
     },
     "expat": {
-      "evra": "2.5.0-1.fc37.aarch64"
+      "evra": "2.5.0-2.fc38.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-repos": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "file": {
-      "evra": "5.42-4.fc37.aarch64"
+      "evra": "5.44-3.fc38.aarch64"
     },
     "file-libs": {
-      "evra": "5.42-4.fc37.aarch64"
+      "evra": "5.44-3.fc38.aarch64"
     },
     "filesystem": {
-      "evra": "3.18-2.fc37.aarch64"
+      "evra": "3.18-3.fc38.aarch64"
     },
     "findutils": {
-      "evra": "1:4.9.0-2.fc37.aarch64"
+      "evra": "1:4.9.0-3.fc38.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.4-1.fc37.aarch64"
+      "evra": "1.15.4-1.fc38.aarch64"
     },
     "fstrm": {
-      "evra": "0.6.1-5.fc37.aarch64"
+      "evra": "0.6.1-6.fc38.aarch64"
     },
     "fuse": {
-      "evra": "2.9.9-15.fc37.aarch64"
+      "evra": "2.9.9-16.fc38.aarch64"
     },
     "fuse-common": {
-      "evra": "3.10.5-5.fc37.aarch64"
+      "evra": "3.13.1-2.fc38.aarch64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-15.fc37.aarch64"
+      "evra": "2.9.9-16.fc38.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc37.aarch64"
+      "evra": "1.10-3.fc38.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-2.fc37.aarch64"
+      "evra": "3.7.3-3.fc38.aarch64"
     },
     "fuse3": {
-      "evra": "3.10.5-5.fc37.aarch64"
+      "evra": "3.13.1-2.fc38.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-5.fc37.aarch64"
+      "evra": "3.13.1-2.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc37.aarch64"
+      "evra": "1.8.14-1.fc38.aarch64"
     },
     "gawk": {
-      "evra": "5.1.1-4.fc37.aarch64"
+      "evra": "5.1.1-5.fc38.aarch64"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-2.fc37.aarch64"
+      "evra": "1:1.23-3.fc38.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.9-4.fc37.aarch64"
+      "evra": "1.0.9-5.fc38.aarch64"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-1.fc37.aarch64"
+      "evra": "0.21.1-2.fc38.aarch64"
     },
     "gettext-libs": {
-      "evra": "0.21.1-1.fc37.aarch64"
+      "evra": "0.21.1-2.fc38.aarch64"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-1.fc37.aarch64"
+      "evra": "0.21.1-2.fc38.aarch64"
     },
     "git-core": {
-      "evra": "2.39.2-1.fc37.aarch64"
+      "evra": "2.40.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.74.6-1.fc37.aarch64"
+      "evra": "2.76.1-1.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.36-9.fc37.aarch64"
+      "evra": "2.37-1.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.36-9.fc37.aarch64"
+      "evra": "2.37-1.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.36-9.fc37.aarch64"
+      "evra": "2.37-1.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-9.fc37.aarch64"
+      "evra": "2.37-1.fc38.aarch64"
     },
     "gmp": {
-      "evra": "1:6.2.1-3.fc37.aarch64"
+      "evra": "1:6.2.1-4.fc38.aarch64"
     },
     "gnupg2": {
-      "evra": "2.3.8-1.fc37.aarch64"
+      "evra": "2.4.0-3.fc38.aarch64"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc37.aarch64"
+      "evra": "3.8.0-2.fc38.aarch64"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc37.aarch64"
+      "evra": "1.17.1-3.fc38.aarch64"
     },
     "grep": {
-      "evra": "3.7-4.fc37.aarch64"
+      "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-94.fc37.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-94.fc37.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-94.fc37.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-94.fc37.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "gzip": {
-      "evra": "1.12-2.fc37.aarch64"
+      "evra": "1.12-3.fc38.aarch64"
     },
     "hostname": {
-      "evra": "3.23-7.fc37.aarch64"
+      "evra": "3.23-8.fc38.aarch64"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc37.aarch64"
+      "evra": "2.15.0-3.fc38.aarch64"
     },
     "inih": {
-      "evra": "56-2.fc37.aarch64"
+      "evra": "56-3.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "iproute": {
-      "evra": "5.18.0-2.fc37.aarch64"
+      "evra": "6.1.0-1.fc38.aarch64"
     },
     "iproute-tc": {
-      "evra": "5.18.0-2.fc37.aarch64"
+      "evra": "6.1.0-1.fc38.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-4.fc37.aarch64"
+      "evra": "1.8.9-2.fc38.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-4.fc37.aarch64"
+      "evra": "1.8.9-2.fc38.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.8-4.fc37.aarch64"
+      "evra": "1.8.9-2.fc38.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.8-4.fc37.aarch64"
+      "evra": "1.8.9-2.fc38.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.8-4.fc37.noarch"
+      "evra": "1.8.9-2.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-4.fc37.aarch64"
+      "evra": "1.8.9-2.fc38.aarch64"
     },
     "iputils": {
-      "evra": "20221126-1.fc37.aarch64"
+      "evra": "20221126-2.fc38.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-1.fc37.aarch64"
+      "evra": "2:1.9.1-2.fc38.aarch64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.aarch64"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.aarch64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.aarch64"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.aarch64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-5.fc37.aarch64"
+      "evra": "0.101-6.fc38.aarch64"
     },
     "jansson": {
-      "evra": "2.13.1-5.fc37.aarch64"
+      "evra": "2.13.1-6.fc38.aarch64"
     },
     "jemalloc": {
-      "evra": "5.3.0-2.fc37.aarch64"
+      "evra": "5.3.0-3.fc38.aarch64"
     },
     "jose": {
-      "evra": "11-6.fc37.aarch64"
+      "evra": "11-7.fc38.aarch64"
     },
     "jq": {
-      "evra": "1.6-14.fc37.aarch64"
+      "evra": "1.6-15.fc38.aarch64"
     },
     "json-c": {
-      "evra": "0.16-3.fc37.aarch64"
+      "evra": "0.16-4.fc38.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.6-3.fc37.aarch64"
+      "evra": "1.6.6-4.fc38.aarch64"
     },
     "kbd": {
-      "evra": "2.5.1-3.fc37.aarch64"
+      "evra": "2.5.1-5.fc38.aarch64"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.9-200.fc37.aarch64"
+      "evra": "6.2.11-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.9-200.fc37.aarch64"
+      "evra": "6.2.11-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.9-200.fc37.aarch64"
+      "evra": "6.2.11-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.9-200.fc37.aarch64"
+      "evra": "6.2.11-300.fc38.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc37.aarch64"
+      "evra": "2.0.26-3.fc38.aarch64"
     },
     "keyutils": {
-      "evra": "1.6.1-5.fc37.aarch64"
+      "evra": "1.6.1-6.fc38.aarch64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-5.fc37.aarch64"
+      "evra": "1.6.1-6.fc38.aarch64"
     },
     "kmod": {
-      "evra": "30-2.fc37.aarch64"
+      "evra": "30-4.fc38.aarch64"
     },
     "kmod-libs": {
-      "evra": "30-2.fc37.aarch64"
+      "evra": "30-4.fc38.aarch64"
     },
     "kpartx": {
-      "evra": "0.9.0-4.fc37.aarch64"
+      "evra": "0.9.4-2.fc38.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-13.fc37.aarch64"
+      "evra": "1.20.1-8.fc38.aarch64"
     },
     "less": {
-      "evra": "590-5.fc37.aarch64"
+      "evra": "608-2.fc38.aarch64"
     },
     "libacl": {
-      "evra": "2.3.1-4.fc37.aarch64"
+      "evra": "2.3.1-6.fc38.aarch64"
     },
     "libaio": {
-      "evra": "0.3.111-14.fc37.aarch64"
+      "evra": "0.3.111-15.fc38.aarch64"
     },
     "libarchive": {
-      "evra": "3.6.1-3.fc37.aarch64"
+      "evra": "3.6.1-4.fc38.aarch64"
     },
     "libargon2": {
-      "evra": "20190702-1.fc37.aarch64"
+      "evra": "20190702-2.fc38.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.5-5.fc37.aarch64"
+      "evra": "2.5.5-6.fc38.aarch64"
+    },
+    "libatomic": {
+      "evra": "13.0.1-0.12.fc38.aarch64"
     },
     "libattr": {
-      "evra": "2.5.1-5.fc37.aarch64"
+      "evra": "2.5.1-6.fc38.aarch64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-52.fc37.aarch64"
+      "evra": "0.1.1-53.fc38.aarch64"
     },
     "libblkid": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "libbpf": {
-      "evra": "2:0.8.0-2.fc37.aarch64"
+      "evra": "2:1.1.0-2.fc38.aarch64"
     },
     "libbsd": {
-      "evra": "0.11.7-2.fc37.aarch64"
+      "evra": "0.11.7-4.fc38.aarch64"
     },
     "libcap": {
-      "evra": "2.48-5.fc37.aarch64"
+      "evra": "2.48-6.fc38.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-3.fc37.aarch64"
+      "evra": "0.8.3-5.fc38.aarch64"
     },
     "libcbor": {
-      "evra": "0.7.0-7.fc37.aarch64"
+      "evra": "0.7.0-9.fc38.aarch64"
     },
     "libcollection": {
-      "evra": "0.7.0-52.fc37.aarch64"
+      "evra": "0.7.0-53.fc38.aarch64"
     },
     "libcom_err": {
-      "evra": "1.46.5-3.fc37.aarch64"
+      "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-8.fc37.aarch64"
+      "evra": "7.87.0-7.fc38.aarch64"
     },
     "libdaemon": {
-      "evra": "0.14-24.fc37.aarch64"
+      "evra": "0.14-25.fc38.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-53.fc37.aarch64"
+      "evra": "5.3.28-55.fc38.aarch64"
     },
     "libdhash": {
-      "evra": "0.5.0-52.fc37.aarch64"
+      "evra": "0.5.0-53.fc38.aarch64"
     },
     "libeconf": {
-      "evra": "0.4.0-4.fc37.aarch64"
+      "evra": "0.4.0-5.fc38.aarch64"
     },
     "libedit": {
-      "evra": "3.1-43.20221009cvs.fc37.aarch64"
+      "evra": "3.1-45.20221030cvs.fc38.aarch64"
     },
     "libevent": {
-      "evra": "2.1.12-7.fc37.aarch64"
+      "evra": "2.1.12-8.fc38.aarch64"
     },
     "libfdisk": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "libffi": {
-      "evra": "3.4.4-1.fc37.aarch64"
+      "evra": "3.4.4-2.fc38.aarch64"
     },
     "libfido2": {
-      "evra": "1.11.0-3.fc37.aarch64"
+      "evra": "1.12.0-3.fc38.aarch64"
     },
     "libgcab1": {
-      "evra": "1.5-1.fc37.aarch64"
+      "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "12.2.1-4.fc37.aarch64"
+      "evra": "13.0.1-0.12.fc38.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-4.fc37.aarch64"
+      "evra": "1.10.1-7.fc38.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.46-1.fc37.aarch64"
+      "evra": "1.46-2.fc38.aarch64"
     },
     "libgudev": {
-      "evra": "237-3.fc37.aarch64"
+      "evra": "237-4.fc38.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc37.aarch64"
+      "evra": "0.4.5-1.fc38.aarch64"
     },
     "libibverbs": {
-      "evra": "41.0-1.fc37.aarch64"
+      "evra": "44.0-3.fc38.aarch64"
     },
     "libicu": {
-      "evra": "71.1-2.fc37.aarch64"
+      "evra": "72.1-2.fc38.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc37.aarch64"
+      "evra": "2.3.4-2.fc38.aarch64"
     },
     "libini_config": {
-      "evra": "1.3.1-52.fc37.aarch64"
+      "evra": "1.3.1-53.fc38.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc37.aarch64"
+      "evra": "0.1.13-1.fc38.aarch64"
     },
     "libjose": {
-      "evra": "11-6.fc37.aarch64"
+      "evra": "11-7.fc38.aarch64"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc37.aarch64"
+      "evra": "1.4.0-5.fc38.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc37.aarch64"
+      "evra": "1.4.0-5.fc38.aarch64"
     },
     "libksba": {
-      "evra": "1.6.3-1.fc37.aarch64"
+      "evra": "1.6.3-2.fc38.aarch64"
     },
     "libldb": {
-      "evra": "2.6.2-1.fc37.aarch64"
+      "evra": "2.7.2-1.fc38.aarch64"
     },
     "libluksmeta": {
-      "evra": "9-14.fc37.aarch64"
+      "evra": "9-15.fc38.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc37.aarch64"
+      "evra": "1.7.1-2.fc38.aarch64"
     },
     "libmd": {
-      "evra": "1.0.4-2.fc37.aarch64"
+      "evra": "1.0.4-3.fc38.aarch64"
     },
     "libmnl": {
-      "evra": "1.0.5-1.fc37.aarch64"
+      "evra": "1.0.5-2.fc38.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-4.fc37.aarch64"
+      "evra": "2.14.0-5.fc38.aarch64"
     },
     "libmount": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "libndp": {
-      "evra": "1.8-4.fc37.aarch64"
+      "evra": "1.8-5.fc38.aarch64"
     },
     "libnet": {
-      "evra": "1.2-6.fc37.aarch64"
+      "evra": "1.2-7.fc38.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-5.fc37.aarch64"
+      "evra": "1.0.8-7.fc38.aarch64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-22.fc37.aarch64"
+      "evra": "1.0.1-23.fc38.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc6.fc38.1.aarch64"
     },
     "libnftnl": {
-      "evra": "1.2.2-2.fc37.aarch64"
+      "evra": "1.2.4-2.fc38.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.51.0-1.fc37.aarch64"
+      "evra": "1.52.0-1.fc38.aarch64"
     },
     "libnl3": {
-      "evra": "3.7.0-2.fc37.aarch64"
+      "evra": "3.7.0-3.fc38.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-2.fc37.aarch64"
+      "evra": "3.7.0-3.fc38.aarch64"
     },
     "libnsl2": {
-      "evra": "2.0.0-4.fc37.aarch64"
+      "evra": "2.0.0-5.fc38.aarch64"
     },
     "libnvme": {
-      "evra": "1.2-1.fc37.aarch64"
+      "evra": "1.4-1.fc38.aarch64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-52.fc37.aarch64"
+      "evra": "0.2.1-53.fc38.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.3-1.fc37.aarch64"
+      "evra": "14:1.10.3-2.fc38.aarch64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-3.fc37.aarch64"
+      "evra": "1.8.0-6.fc38.aarch64"
     },
     "libpsl": {
-      "evra": "0.21.1-6.fc37.aarch64"
+      "evra": "0.21.2-2.fc38.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc37.aarch64"
+      "evra": "1.4.5-3.fc38.aarch64"
     },
     "libref_array": {
-      "evra": "0.1.5-52.fc37.aarch64"
+      "evra": "0.1.5-53.fc38.aarch64"
     },
     "librepo": {
-      "evra": "1.15.1-1.fc37.aarch64"
+      "evra": "1.15.1-2.fc38.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc37.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-3.fc37.aarch64"
+      "evra": "2.5.3-4.fc38.aarch64"
     },
     "libselinux": {
-      "evra": "3.5-1.fc37.aarch64"
+      "evra": "3.5-1.fc38.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc37.aarch64"
+      "evra": "3.5-1.fc38.aarch64"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc37.aarch64"
+      "evra": "3.5-2.fc38.aarch64"
     },
     "libsepol": {
-      "evra": "3.5-1.fc37.aarch64"
+      "evra": "3.5-1.fc38.aarch64"
     },
     "libsigsegv": {
-      "evra": "2.14-3.fc37.aarch64"
+      "evra": "2.14-4.fc38.aarch64"
     },
     "libslirp": {
-      "evra": "4.7.0-2.fc37.aarch64"
+      "evra": "4.7.0-3.fc38.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.7-0.fc37.aarch64"
+      "evra": "2:4.18.1-0.fc38.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.22-3.fc37.aarch64"
+      "evra": "0.7.22-4.fc38.aarch64"
     },
     "libss": {
-      "evra": "1.46.5-3.fc37.aarch64"
+      "evra": "1.46.5-4.fc38.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "12.2.1-4.fc37.aarch64"
+      "evra": "13.0.1-0.12.fc38.aarch64"
     },
     "libtalloc": {
-      "evra": "2.3.4-3.fc37.aarch64"
+      "evra": "2.4.0-2.fc38.aarch64"
     },
     "libtasn1": {
-      "evra": "4.19.0-1.fc37.aarch64"
+      "evra": "4.19.0-2.fc38.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.7-3.fc37.aarch64"
+      "evra": "1.4.8-1.fc38.aarch64"
     },
     "libteam": {
-      "evra": "1.31-6.fc37.aarch64"
+      "evra": "1.31-7.fc38.aarch64"
     },
     "libtevent": {
-      "evra": "0.13.0-1.fc37.aarch64"
+      "evra": "0.14.1-1.fc38.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc37.aarch64"
+      "evra": "1.3.3-1.fc38.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-2.fc37.aarch64"
+      "evra": "2.4.7-6.fc38.aarch64"
     },
     "libunistring": {
-      "evra": "1.0-2.fc37.aarch64"
+      "evra": "1.1-3.fc38.aarch64"
+    },
+    "libunistring1.0": {
+      "evra": "1.0-1.fc38.aarch64"
     },
     "libusb1": {
-      "evra": "1.0.25-9.fc37.aarch64"
+      "evra": "1.0.26-2.fc38.aarch64"
     },
     "libuser": {
-      "evra": "0.63-13.fc37.aarch64"
+      "evra": "0.64-2.fc38.aarch64"
     },
     "libutempter": {
-      "evra": "1.2.1-7.fc37.aarch64"
+      "evra": "1.2.1-8.fc38.aarch64"
     },
     "libuuid": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "libuv": {
-      "evra": "1:1.44.2-2.fc37.aarch64"
+      "evra": "1:1.44.2-3.fc38.aarch64"
     },
     "libverto": {
-      "evra": "0.3.2-4.fc37.aarch64"
+      "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.17.7-0.fc37.aarch64"
+      "evra": "2:4.18.1-0.fc38.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-4.fc37.aarch64"
+      "evra": "4.4.33-7.fc38.aarch64"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc37.aarch64"
+      "evra": "2.10.3-3.fc38.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc37.aarch64"
+      "evra": "0.3.11-1.fc38.aarch64"
     },
     "libyaml": {
-      "evra": "0.2.5-8.fc37.aarch64"
+      "evra": "0.2.5-9.fc38.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc37.aarch64"
+      "evra": "1.5.5-1.fc38.aarch64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-33.fc37.aarch64"
+      "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc37.aarch64"
+      "evra": "0.9.30-1.fc38.aarch64"
     },
     "logrotate": {
-      "evra": "3.20.1-3.fc37.aarch64"
+      "evra": "3.21.0-2.fc38.aarch64"
     },
     "lsof": {
-      "evra": "4.94.0-4.fc37.aarch64"
+      "evra": "4.96.3-3.fc38.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc37.aarch64"
+      "evra": "5.4.4-9.fc38.aarch64"
     },
     "luksmeta": {
-      "evra": "9-14.fc37.aarch64"
+      "evra": "9-15.fc38.aarch64"
     },
     "lvm2": {
-      "evra": "2.03.11-9.fc37.aarch64"
+      "evra": "2.03.18-2.fc38.aarch64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-9.fc37.aarch64"
+      "evra": "2.03.18-2.fc38.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.4-1.fc37.aarch64"
+      "evra": "1.9.4-2.fc38.aarch64"
     },
     "lzo": {
-      "evra": "2.10-7.fc37.aarch64"
+      "evra": "2.10-8.fc38.aarch64"
     },
     "mdadm": {
-      "evra": "4.2-2.fc37.aarch64"
+      "evra": "4.2-4.fc38.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc37.aarch64"
+      "evra": "20.10.23-1.fc38.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-5.fc37.aarch64"
-    },
-    "mozjs102": {
-      "evra": "102.9.0-1.fc37.aarch64"
+      "evra": "2:0.6.0-6.fc38.aarch64"
     },
     "mpfr": {
-      "evra": "4.1.0-10.fc37.aarch64"
+      "evra": "4.1.1-3.fc38.aarch64"
     },
     "nano": {
-      "evra": "6.4-1.fc37.aarch64"
+      "evra": "7.2-2.fc38.aarch64"
     },
     "nano-default-editor": {
-      "evra": "6.4-1.fc37.noarch"
+      "evra": "7.2-2.fc38.noarch"
     },
     "ncurses": {
-      "evra": "6.3-4.20220501.fc37.aarch64"
+      "evra": "6.4-3.20230114.fc38.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.3-4.20220501.fc37.noarch"
+      "evra": "6.4-3.20230114.fc38.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-4.20220501.fc37.aarch64"
+      "evra": "6.4-3.20230114.fc38.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.64.20160912git.fc37.aarch64"
+      "evra": "2.0-0.65.20160912git.fc38.aarch64"
     },
     "netavark": {
-      "evra": "1.5.0-4.fc37.aarch64"
+      "evra": "1.6.0-2.fc38.aarch64"
     },
     "nettle": {
-      "evra": "3.8-2.fc37.aarch64"
+      "evra": "3.8-3.fc38.aarch64"
     },
     "newt": {
-      "evra": "0.52.23-1.fc37.aarch64"
+      "evra": "0.52.23-2.fc38.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc37.aarch64"
+      "evra": "1:2.6.2-2.rc6.fc38.1.aarch64"
     },
     "nftables": {
-      "evra": "1:1.0.4-3.fc37.aarch64"
+      "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.9-2.fc37.aarch64"
+      "evra": "2.2.9-1.fc38.aarch64"
     },
     "npth": {
-      "evra": "1.6-9.fc37.aarch64"
+      "evra": "1.6-12.fc38.aarch64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-21.fc37.aarch64"
+      "evra": "2.18.1-22.fc38.aarch64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-6.fc37.aarch64"
+      "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.2.1-1.fc37.aarch64"
+      "evra": "2.4-1.fc38.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.aarch64"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc37.aarch64"
+      "evra": "2.6.4-1.fc38.aarch64"
     },
     "openssh": {
-      "evra": "8.8p1-9.fc37.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-9.fc37.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssh-server": {
-      "evra": "8.8p1-9.fc37.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc37.aarch64"
+      "evra": "1:3.0.8-2.fc38.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc37.aarch64"
+      "evra": "1:3.0.8-2.fc38.aarch64"
     },
     "os-prober": {
-      "evra": "1.81-1.fc37.aarch64"
+      "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2022.7-2.fc37.aarch64"
+      "evra": "2023.1-2.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2022.7-2.fc37.aarch64"
+      "evra": "2023.1-2.fc38.aarch64"
     },
     "p11-kit": {
-      "evra": "0.24.1-3.fc37.aarch64"
+      "evra": "0.24.1-6.fc38.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-3.fc37.aarch64"
+      "evra": "0.24.1-6.fc38.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-14.fc37.aarch64"
+      "evra": "1.5.2-16.fc38.aarch64"
     },
     "pam-libs": {
-      "evra": "1.5.2-14.fc37.aarch64"
+      "evra": "1.5.2-16.fc38.aarch64"
     },
     "passwd": {
-      "evra": "0.80-13.fc37.aarch64"
-    },
-    "pcre": {
-      "evra": "8.45-1.fc37.2.aarch64"
+      "evra": "0.80-14.fc38.aarch64"
     },
     "pcre2": {
-      "evra": "10.40-1.fc37.1.aarch64"
+      "evra": "10.42-1.fc38.1.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc37.1.noarch"
+      "evra": "10.42-1.fc38.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-2.fc37.aarch64"
+      "evra": "2.7-3.fc38.aarch64"
     },
     "pkgconf": {
-      "evra": "1.8.0-3.fc37.aarch64"
+      "evra": "1.8.0-6.fc38.aarch64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-3.fc37.noarch"
+      "evra": "1.8.0-6.fc38.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-3.fc37.aarch64"
+      "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.4.4-3.fc37.aarch64"
+      "evra": "5:4.5.0-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.4-3.fc37.aarch64"
+      "evra": "5:4.5.0-1.fc38.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc37.aarch64"
+      "evra": "3.5-1.fc38.aarch64"
     },
     "polkit": {
-      "evra": "121-4.fc37.2.aarch64"
+      "evra": "122-3.fc38.aarch64"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.2.aarch64"
+      "evra": "122-3.fc38.aarch64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-22.fc37.aarch64"
+      "evra": "0.1-23.fc38.aarch64"
     },
     "popt": {
-      "evra": "1.19-1.fc37.aarch64"
+      "evra": "1.19-2.fc38.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-6.fc37.2.aarch64"
+      "evra": "3.3.17-9.fc38.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc37.aarch64"
+      "evra": "1.4.1-4.fc38.aarch64"
     },
     "psmisc": {
-      "evra": "23.4-4.fc37.aarch64"
+      "evra": "23.6-2.fc38.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc37.noarch"
+      "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-15.fc37.aarch64"
+      "evra": "2:7.2.0-6.fc38.aarch64"
     },
     "readline": {
-      "evra": "8.2-2.fc37.aarch64"
+      "evra": "8.2-3.fc38.aarch64"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.rc2.fc37.aarch64"
+      "evra": "1.2.6-4.rc2.fc38.aarch64"
     },
     "rpm": {
-      "evra": "4.18.0-1.fc37.aarch64"
+      "evra": "4.18.1-1.fc38.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.18.0-1.fc37.aarch64"
+      "evra": "4.18.1-1.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc37.aarch64"
+      "evra": "2023.2-1.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc37.aarch64"
+      "evra": "2023.2-1.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.0-1.fc37.aarch64"
+      "evra": "4.18.1-1.fc38.aarch64"
+    },
+    "rpm-sequoia": {
+      "evra": "1.3.0-1.fc38.aarch64"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc37.aarch64"
+      "evra": "3.2.7-2.fc38.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc37.aarch64"
+      "evra": "2:1.1.4-2.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.7-0.fc37.aarch64"
+      "evra": "2:4.18.1-0.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.17.7-0.fc37.noarch"
+      "evra": "2:4.18.1-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.7-0.fc37.aarch64"
+      "evra": "2:4.18.1-0.fc38.aarch64"
     },
     "sed": {
-      "evra": "4.8-11.fc37.aarch64"
+      "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "setup": {
-      "evra": "2.14.1-2.fc37.noarch"
+      "evra": "2.14.3-2.fc38.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-4.fc37.aarch64"
+      "evra": "1.46-5.fc38.aarch64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-4.fc37.aarch64"
+      "evra": "1.46-5.fc38.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-6.fc37.aarch64"
+      "evra": "2:4.13-6.fc38.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-6.fc37.aarch64"
+      "evra": "2:4.13-6.fc38.aarch64"
     },
     "shared-mime-info": {
-      "evra": "2.2-2.fc37.aarch64"
+      "evra": "2.2-3.fc38.aarch64"
     },
     "shim-aa64": {
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc37.aarch64"
+      "evra": "1:1.11.2-1.fc38.aarch64"
     },
     "slang": {
-      "evra": "2.3.3-1.fc37.aarch64"
+      "evra": "2.3.3-3.fc38.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-8.fc37.aarch64"
+      "evra": "1.2.0-12.fc38.aarch64"
     },
     "snappy": {
-      "evra": "1.1.9-5.fc37.aarch64"
+      "evra": "1.1.9-7.fc38.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.2-3.fc37.aarch64"
+      "evra": "1.7.4.4-2.fc38.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.40.0-1.fc37.aarch64"
+      "evra": "3.40.1-2.fc38.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-2.fc37.aarch64"
+      "evra": "4.5.1-3.fc38.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc37.aarch64"
+      "evra": "0.1.4-3.fc38.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-client": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-common": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-1.fc37.aarch64"
+      "evra": "2.8.2-4.fc38.aarch64"
     },
     "stalld": {
-      "evra": "1.16-2.fc37.aarch64"
+      "evra": "1.16-3.fc38.aarch64"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc37.aarch64"
+      "evra": "1.9.13-1.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "251.14-2.fc37.aarch64"
-    },
-    "systemd-boot-unsigned": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "251.14-2.fc37.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-6.fc37.aarch64"
+      "evra": "2:1.34-8.fc38.aarch64"
     },
     "teamd": {
-      "evra": "1.31-6.fc37.aarch64"
+      "evra": "1.31-7.fc38.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc37.aarch64"
+      "evra": "0.0.99.4-1.fc38.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.4-1.fc37.aarch64"
+      "evra": "5.5-1.fc38.aarch64"
     },
     "tpm2-tss": {
-      "evra": "3.2.2-1.fc37.aarch64"
+      "evra": "4.0.1-3.fc38.aarch64"
     },
     "tzdata": {
-      "evra": "2022g-1.fc37.noarch"
+      "evra": "2023c-1.fc38.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-5.fc37.aarch64"
+      "evra": "0.13.2-2.fc38.aarch64"
     },
     "util-linux": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.38.1-1.fc37.aarch64"
+      "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc37.aarch64"
+      "evra": "2:9.0.1440-1.fc38.aarch64"
     },
     "which": {
-      "evra": "2.21-39.fc37.aarch64"
+      "evra": "2.21-39.fc38.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-3.fc37.aarch64"
+      "evra": "1.0.20210914-4.fc38.aarch64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-2.fc37.aarch64"
+      "evra": "6.1.0-3.fc38.aarch64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-3.fc37.aarch64"
+      "evra": "0.8.1-4.fc38.aarch64"
     },
     "xz": {
-      "evra": "5.4.1-1.fc37.aarch64"
+      "evra": "5.4.1-1.fc38.aarch64"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc37.aarch64"
+      "evra": "5.4.1-1.fc38.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-19.fc37.aarch64"
+      "evra": "2.1.0-20.fc38.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc37.aarch64"
+      "evra": "1.3.1-1.fc38.aarch64"
     },
     "zincati": {
-      "evra": "0.0.25-2.fc37.aarch64"
+      "evra": "0.0.25-4.fc38.aarch64"
     },
     "zlib": {
-      "evra": "1.2.12-5.fc37.aarch64"
+      "evra": "1.2.13-3.fc38.aarch64"
     },
     "zram-generator": {
-      "evra": "1.1.2-2.fc37.aarch64"
+      "evra": "1.1.2-4.fc38.aarch64"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc37.aarch64"
+      "evra": "1.5.5-1.fc38.aarch64"
     }
   },
   "metadata": {
-    "generated": "2023-04-13T00:00:00Z",
+    "generated": "2023-04-17T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-11-05T08:04:22Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2023-04-08T14:19:34Z"
+        "generated": "2023-04-17T00:31:04Z"
+      },
+      "fedora-next": {
+        "generated": "2023-04-14T09:32:18Z"
       },
-      "fedora-updates": {
-        "generated": "2023-04-13T01:45:05Z"
+      "fedora-next-updates": {
+        "generated": "2023-04-16T01:55:02Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..9cf68f6631 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,40 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  aardvark-dns:
+    evr: 1.6.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
+  containers-common:
+    evra: 4:1-89.fc38.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
+  containers-common-extra:
+    evra: 4:1-89.fc38.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
+  netavark:
+    evr: 1.6.0-2.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
+  podman:
+    evr: 5:4.5.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
+  podman-plugins:
+    evr: 5:4.5.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
+      type: fast-track
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 06042e7d88..689c3fd165 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,1268 +1,1274 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.10-1.fc37.ppc64le"
+      "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.10-1.fc37.ppc64le"
+      "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.10-1.fc37.ppc64le"
+      "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.10-1.fc37.ppc64le"
+      "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.10-1.fc37.ppc64le"
+      "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-1.fc37.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.5.0-4.fc37.ppc64le"
+      "evra": "1.6.0-1.fc38.ppc64le"
     },
     "acl": {
-      "evra": "2.3.1-4.fc37.ppc64le"
+      "evra": "2.3.1-6.fc38.ppc64le"
     },
     "adcli": {
-      "evra": "0.9.1-11.fc37.ppc64le"
+      "evra": "0.9.2-2.fc38.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc37.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc37.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "alternatives": {
-      "evra": "1.22-1.fc37.ppc64le"
+      "evra": "1.22-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "attr": {
-      "evra": "2.5.1-5.fc37.ppc64le"
+      "evra": "2.5.1-6.fc38.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc37.ppc64le"
+      "evra": "3.1-2.fc38.ppc64le"
     },
     "authselect": {
-      "evra": "1.4.2-1.fc37.ppc64le"
+      "evra": "1.4.2-2.fc38.ppc64le"
     },
     "authselect-libs": {
-      "evra": "1.4.2-1.fc37.ppc64le"
+      "evra": "1.4.2-2.fc38.ppc64le"
     },
     "avahi-libs": {
-      "evra": "0.8-18.fc37.ppc64le"
+      "evra": "0.8-20.fc38.ppc64le"
     },
     "basesystem": {
-      "evra": "11-14.fc37.noarch"
+      "evra": "11-15.fc38.noarch"
     },
     "bash": {
-      "evra": "5.2.15-1.fc37.ppc64le"
+      "evra": "5.2.15-3.fc38.ppc64le"
     },
     "bash-completion": {
-      "evra": "1:2.11-8.fc37.noarch"
+      "evra": "1:2.11-9.fc38.noarch"
     },
     "bc": {
-      "evra": "1.07.1-16.fc37.ppc64le"
+      "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc37.ppc64le"
+      "evra": "32:9.18.13-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc37.ppc64le"
+      "evra": "32:9.18.13-1.fc38.ppc64le"
     },
     "bsdtar": {
-      "evra": "3.6.1-3.fc37.ppc64le"
+      "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc37.ppc64le"
+      "evra": "6.2.2-1.fc38.ppc64le"
     },
     "bubblewrap": {
-      "evra": "0.5.0-3.fc37.ppc64le"
+      "evra": "0.7.0-1.fc38.ppc64le"
     },
     "bzip2": {
-      "evra": "1.0.8-12.fc37.ppc64le"
+      "evra": "1.0.8-13.fc38.ppc64le"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-12.fc37.ppc64le"
+      "evra": "1.0.8-13.fc38.ppc64le"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc37.ppc64le"
+      "evra": "1.19.0-1.fc38.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-1.0.fc37.noarch"
+      "evra": "2023.2.60-2.fc38.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc37.ppc64le"
+      "evra": "0.1.7-14.fc38.ppc64le"
     },
     "chrony": {
-      "evra": "4.3-1.fc37.ppc64le"
+      "evra": "4.3-3.fc38.ppc64le"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc37.ppc64le"
+      "evra": "7.0-1.fc38.ppc64le"
     },
     "clevis": {
-      "evra": "19-2.fc37.ppc64le"
+      "evra": "19-2.fc38.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc37.ppc64le"
+      "evra": "19-2.fc38.ppc64le"
     },
     "clevis-luks": {
-      "evra": "19-2.fc37.ppc64le"
+      "evra": "19-2.fc38.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc37.ppc64le"
+      "evra": "19-2.fc38.ppc64le"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-11.fc37.noarch"
+      "evra": "0.31-12.fc38.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc37.ppc64le"
+      "evra": "2:2.1.7-2.fc38.ppc64le"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc38.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc37.ppc64le"
+      "evra": "1.6.19-1.fc38.ppc64le"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc37.ppc64le"
+      "evra": "1.1.1-16.fc38.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc37.ppc64le"
+      "evra": "0.17.0-1.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc37.ppc64le"
+      "evra": "0.17.0-1.fc38.ppc64le"
     },
     "coreutils": {
-      "evra": "9.1-7.fc37.ppc64le"
+      "evra": "9.1-11.fc38.ppc64le"
     },
     "coreutils-common": {
-      "evra": "9.1-7.fc37.ppc64le"
+      "evra": "9.1-11.fc38.ppc64le"
     },
     "cpio": {
-      "evra": "2.13-13.fc37.ppc64le"
+      "evra": "2.13-14.fc38.ppc64le"
     },
     "cracklib": {
-      "evra": "2.9.7-30.fc37.ppc64le"
+      "evra": "2.9.7-31.fc38.ppc64le"
     },
     "criu": {
-      "evra": "3.17.1-3.fc37.ppc64le"
+      "evra": "3.17.1-5.fc38.ppc64le"
     },
     "criu-libs": {
-      "evra": "3.17.1-3.fc37.ppc64le"
+      "evra": "3.17.1-5.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.3-2.fc37.ppc64le"
+      "evra": "1.8.3-2.fc38.ppc64le"
     },
     "crypto-policies": {
-      "evra": "20220815-1.gite4ed860.fc37.noarch"
+      "evra": "20230301-1.gita12f7b2.fc38.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc37.ppc64le"
+      "evra": "2.6.1-1.fc38.ppc64le"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc37.ppc64le"
+      "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "7.85.0-8.fc37.ppc64le"
+      "evra": "7.87.0-7.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-8.fc37.ppc64le"
+      "evra": "2.1.28-9.fc38.ppc64le"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-8.fc37.ppc64le"
+      "evra": "2.1.28-9.fc38.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc37.ppc64le"
+      "evra": "1:1.14.6-1.fc38.ppc64le"
     },
     "dbus-broker": {
-      "evra": "33-1.fc37.ppc64le"
+      "evra": "33-1.fc38.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc37.ppc64le"
+      "evra": "1:1.14.6-1.fc38.ppc64le"
     },
     "device-mapper": {
-      "evra": "1.02.175-9.fc37.ppc64le"
+      "evra": "1.02.189-2.fc38.ppc64le"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-9.fc37.ppc64le"
+      "evra": "1.02.189-2.fc38.ppc64le"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-9.fc37.ppc64le"
+      "evra": "1.02.189-2.fc38.ppc64le"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-9.fc37.ppc64le"
+      "evra": "1.02.189-2.fc38.ppc64le"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-4.fc37.ppc64le"
+      "evra": "0.9.4-2.fc38.ppc64le"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-4.fc37.ppc64le"
+      "evra": "0.9.4-2.fc38.ppc64le"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-8.fc37.ppc64le"
+      "evra": "0.9.0-10.fc38.ppc64le"
     },
     "diffutils": {
-      "evra": "3.8-3.fc37.ppc64le"
+      "evra": "3.9-1.fc38.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc37.ppc64le"
+      "evra": "2.89-1.fc38.ppc64le"
     },
     "dosfstools": {
-      "evra": "4.2-4.fc37.ppc64le"
+      "evra": "4.2-6.fc38.ppc64le"
     },
     "dracut": {
-      "evra": "059-1.fc37.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-1.fc37.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-1.fc37.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
+    },
+    "duktape": {
+      "evra": "2.7.0-2.fc38.ppc64le"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-3.fc37.ppc64le"
+      "evra": "1.46.5-4.fc38.ppc64le"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-3.fc37.ppc64le"
+      "evra": "1.46.5-4.fc38.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc37.noarch"
+      "evra": "0.189-1.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc37.ppc64le"
+      "evra": "0.189-1.fc38.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc37.ppc64le"
+      "evra": "0.189-1.fc38.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc37.ppc64le"
+      "evra": "2:6.2-1.fc38.ppc64le"
     },
     "expat": {
-      "evra": "2.5.0-1.fc37.ppc64le"
+      "evra": "2.5.0-2.fc38.ppc64le"
     },
     "fedora-gpg-keys": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-repos": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "file": {
-      "evra": "5.42-4.fc37.ppc64le"
+      "evra": "5.44-3.fc38.ppc64le"
     },
     "file-libs": {
-      "evra": "5.42-4.fc37.ppc64le"
+      "evra": "5.44-3.fc38.ppc64le"
     },
     "filesystem": {
-      "evra": "3.18-2.fc37.ppc64le"
+      "evra": "3.18-3.fc38.ppc64le"
     },
     "findutils": {
-      "evra": "1:4.9.0-2.fc37.ppc64le"
+      "evra": "1:4.9.0-3.fc38.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.4-1.fc37.ppc64le"
+      "evra": "1.15.4-1.fc38.ppc64le"
     },
     "fstrm": {
-      "evra": "0.6.1-5.fc37.ppc64le"
+      "evra": "0.6.1-6.fc38.ppc64le"
     },
     "fuse": {
-      "evra": "2.9.9-15.fc37.ppc64le"
+      "evra": "2.9.9-16.fc38.ppc64le"
     },
     "fuse-common": {
-      "evra": "3.10.5-5.fc37.ppc64le"
+      "evra": "3.13.1-2.fc38.ppc64le"
     },
     "fuse-libs": {
-      "evra": "2.9.9-15.fc37.ppc64le"
+      "evra": "2.9.9-16.fc38.ppc64le"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc37.ppc64le"
+      "evra": "1.10-3.fc38.ppc64le"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-2.fc37.ppc64le"
+      "evra": "3.7.3-3.fc38.ppc64le"
     },
     "fuse3": {
-      "evra": "3.10.5-5.fc37.ppc64le"
+      "evra": "3.13.1-2.fc38.ppc64le"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-5.fc37.ppc64le"
+      "evra": "3.13.1-2.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc37.ppc64le"
+      "evra": "1.8.14-1.fc38.ppc64le"
     },
     "gawk": {
-      "evra": "5.1.1-4.fc37.ppc64le"
+      "evra": "5.1.1-5.fc38.ppc64le"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-2.fc37.ppc64le"
+      "evra": "1:1.23-3.fc38.ppc64le"
     },
     "gdisk": {
-      "evra": "1.0.9-4.fc37.ppc64le"
+      "evra": "1.0.9-5.fc38.ppc64le"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-1.fc37.ppc64le"
+      "evra": "0.21.1-2.fc38.ppc64le"
     },
     "gettext-libs": {
-      "evra": "0.21.1-1.fc37.ppc64le"
+      "evra": "0.21.1-2.fc38.ppc64le"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-1.fc37.ppc64le"
+      "evra": "0.21.1-2.fc38.ppc64le"
     },
     "git-core": {
-      "evra": "2.39.2-1.fc37.ppc64le"
+      "evra": "2.40.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.74.6-1.fc37.ppc64le"
+      "evra": "2.76.1-1.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.36-9.fc37.ppc64le"
+      "evra": "2.37-1.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.36-9.fc37.ppc64le"
+      "evra": "2.37-1.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.36-9.fc37.ppc64le"
+      "evra": "2.37-1.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-9.fc37.ppc64le"
+      "evra": "2.37-1.fc38.ppc64le"
     },
     "gmp": {
-      "evra": "1:6.2.1-3.fc37.ppc64le"
+      "evra": "1:6.2.1-4.fc38.ppc64le"
     },
     "gnupg2": {
-      "evra": "2.3.8-1.fc37.ppc64le"
+      "evra": "2.4.0-3.fc38.ppc64le"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc37.ppc64le"
+      "evra": "3.8.0-2.fc38.ppc64le"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc37.ppc64le"
+      "evra": "1.17.1-3.fc38.ppc64le"
     },
     "grep": {
-      "evra": "3.7-4.fc37.ppc64le"
+      "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-94.fc37.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-94.fc37.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-94.fc37.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-94.fc37.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-94.fc37.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "gzip": {
-      "evra": "1.12-2.fc37.ppc64le"
+      "evra": "1.12-3.fc38.ppc64le"
     },
     "hostname": {
-      "evra": "3.23-7.fc37.ppc64le"
+      "evra": "3.23-8.fc38.ppc64le"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc37.ppc64le"
+      "evra": "2.15.0-3.fc38.ppc64le"
     },
     "inih": {
-      "evra": "56-2.fc37.ppc64le"
+      "evra": "56-3.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "iproute": {
-      "evra": "5.18.0-2.fc37.ppc64le"
+      "evra": "6.1.0-1.fc38.ppc64le"
     },
     "iproute-tc": {
-      "evra": "5.18.0-2.fc37.ppc64le"
+      "evra": "6.1.0-1.fc38.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-4.fc37.ppc64le"
+      "evra": "1.8.9-2.fc38.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-4.fc37.ppc64le"
+      "evra": "1.8.9-2.fc38.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.8-4.fc37.ppc64le"
+      "evra": "1.8.9-2.fc38.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.8-4.fc37.ppc64le"
+      "evra": "1.8.9-2.fc38.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.8-4.fc37.noarch"
+      "evra": "1.8.9-2.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-4.fc37.ppc64le"
+      "evra": "1.8.9-2.fc38.ppc64le"
     },
     "iputils": {
-      "evra": "20221126-1.fc37.ppc64le"
+      "evra": "20221126-2.fc38.ppc64le"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-1.fc37.ppc64le"
+      "evra": "2:1.9.1-2.fc38.ppc64le"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.ppc64le"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.ppc64le"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.ppc64le"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.ppc64le"
     },
     "isns-utils-libs": {
-      "evra": "0.101-5.fc37.ppc64le"
+      "evra": "0.101-6.fc38.ppc64le"
     },
     "jansson": {
-      "evra": "2.13.1-5.fc37.ppc64le"
+      "evra": "2.13.1-6.fc38.ppc64le"
     },
     "jemalloc": {
-      "evra": "5.3.0-2.fc37.ppc64le"
+      "evra": "5.3.0-3.fc38.ppc64le"
     },
     "jose": {
-      "evra": "11-6.fc37.ppc64le"
+      "evra": "11-7.fc38.ppc64le"
     },
     "jq": {
-      "evra": "1.6-14.fc37.ppc64le"
+      "evra": "1.6-15.fc38.ppc64le"
     },
     "json-c": {
-      "evra": "0.16-3.fc37.ppc64le"
+      "evra": "0.16-4.fc38.ppc64le"
     },
     "json-glib": {
-      "evra": "1.6.6-3.fc37.ppc64le"
+      "evra": "1.6.6-4.fc38.ppc64le"
     },
     "kbd": {
-      "evra": "2.5.1-3.fc37.ppc64le"
+      "evra": "2.5.1-5.fc38.ppc64le"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.9-200.fc37.ppc64le"
+      "evra": "6.2.11-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.9-200.fc37.ppc64le"
+      "evra": "6.2.11-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.9-200.fc37.ppc64le"
+      "evra": "6.2.11-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.9-200.fc37.ppc64le"
+      "evra": "6.2.11-300.fc38.ppc64le"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc37.ppc64le"
+      "evra": "2.0.26-3.fc38.ppc64le"
     },
     "keyutils": {
-      "evra": "1.6.1-5.fc37.ppc64le"
+      "evra": "1.6.1-6.fc38.ppc64le"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-5.fc37.ppc64le"
+      "evra": "1.6.1-6.fc38.ppc64le"
     },
     "kmod": {
-      "evra": "30-2.fc37.ppc64le"
+      "evra": "30-4.fc38.ppc64le"
     },
     "kmod-libs": {
-      "evra": "30-2.fc37.ppc64le"
+      "evra": "30-4.fc38.ppc64le"
     },
     "kpartx": {
-      "evra": "0.9.0-4.fc37.ppc64le"
+      "evra": "0.9.4-2.fc38.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.19.2-13.fc37.ppc64le"
+      "evra": "1.20.1-8.fc38.ppc64le"
     },
     "less": {
-      "evra": "590-5.fc37.ppc64le"
+      "evra": "608-2.fc38.ppc64le"
     },
     "libacl": {
-      "evra": "2.3.1-4.fc37.ppc64le"
+      "evra": "2.3.1-6.fc38.ppc64le"
     },
     "libaio": {
-      "evra": "0.3.111-14.fc37.ppc64le"
+      "evra": "0.3.111-15.fc38.ppc64le"
     },
     "libarchive": {
-      "evra": "3.6.1-3.fc37.ppc64le"
+      "evra": "3.6.1-4.fc38.ppc64le"
     },
     "libargon2": {
-      "evra": "20190702-1.fc37.ppc64le"
+      "evra": "20190702-2.fc38.ppc64le"
     },
     "libassuan": {
-      "evra": "2.5.5-5.fc37.ppc64le"
+      "evra": "2.5.5-6.fc38.ppc64le"
+    },
+    "libatomic": {
+      "evra": "13.0.1-0.12.fc38.ppc64le"
     },
     "libattr": {
-      "evra": "2.5.1-5.fc37.ppc64le"
+      "evra": "2.5.1-6.fc38.ppc64le"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-52.fc37.ppc64le"
+      "evra": "0.1.1-53.fc38.ppc64le"
     },
     "libblkid": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libbpf": {
-      "evra": "2:0.8.0-2.fc37.ppc64le"
+      "evra": "2:1.1.0-2.fc38.ppc64le"
     },
     "libbsd": {
-      "evra": "0.11.7-2.fc37.ppc64le"
+      "evra": "0.11.7-4.fc38.ppc64le"
     },
     "libcap": {
-      "evra": "2.48-5.fc37.ppc64le"
+      "evra": "2.48-6.fc38.ppc64le"
     },
     "libcap-ng": {
-      "evra": "0.8.3-3.fc37.ppc64le"
+      "evra": "0.8.3-5.fc38.ppc64le"
     },
     "libcbor": {
-      "evra": "0.7.0-7.fc37.ppc64le"
+      "evra": "0.7.0-9.fc38.ppc64le"
     },
     "libcollection": {
-      "evra": "0.7.0-52.fc37.ppc64le"
+      "evra": "0.7.0-53.fc38.ppc64le"
     },
     "libcom_err": {
-      "evra": "1.46.5-3.fc37.ppc64le"
+      "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-8.fc37.ppc64le"
+      "evra": "7.87.0-7.fc38.ppc64le"
     },
     "libdaemon": {
-      "evra": "0.14-24.fc37.ppc64le"
+      "evra": "0.14-25.fc38.ppc64le"
     },
     "libdb": {
-      "evra": "5.3.28-53.fc37.ppc64le"
+      "evra": "5.3.28-55.fc38.ppc64le"
     },
     "libdhash": {
-      "evra": "0.5.0-52.fc37.ppc64le"
+      "evra": "0.5.0-53.fc38.ppc64le"
     },
     "libeconf": {
-      "evra": "0.4.0-4.fc37.ppc64le"
+      "evra": "0.4.0-5.fc38.ppc64le"
     },
     "libedit": {
-      "evra": "3.1-43.20221009cvs.fc37.ppc64le"
+      "evra": "3.1-45.20221030cvs.fc38.ppc64le"
     },
     "libevent": {
-      "evra": "2.1.12-7.fc37.ppc64le"
+      "evra": "2.1.12-8.fc38.ppc64le"
     },
     "libfdisk": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libffi": {
-      "evra": "3.4.4-1.fc37.ppc64le"
+      "evra": "3.4.4-2.fc38.ppc64le"
     },
     "libfido2": {
-      "evra": "1.11.0-3.fc37.ppc64le"
+      "evra": "1.12.0-3.fc38.ppc64le"
     },
     "libgcab1": {
-      "evra": "1.5-1.fc37.ppc64le"
+      "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "12.2.1-4.fc37.ppc64le"
+      "evra": "13.0.1-0.12.fc38.ppc64le"
     },
     "libgcrypt": {
-      "evra": "1.10.1-4.fc37.ppc64le"
+      "evra": "1.10.1-7.fc38.ppc64le"
     },
     "libgpg-error": {
-      "evra": "1.46-1.fc37.ppc64le"
+      "evra": "1.46-2.fc38.ppc64le"
     },
     "libgudev": {
-      "evra": "237-3.fc37.ppc64le"
+      "evra": "237-4.fc38.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc37.ppc64le"
+      "evra": "0.4.5-1.fc38.ppc64le"
     },
     "libibverbs": {
-      "evra": "41.0-1.fc37.ppc64le"
+      "evra": "44.0-3.fc38.ppc64le"
     },
     "libicu": {
-      "evra": "71.1-2.fc37.ppc64le"
+      "evra": "72.1-2.fc38.ppc64le"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc37.ppc64le"
+      "evra": "2.3.4-2.fc38.ppc64le"
     },
     "libini_config": {
-      "evra": "1.3.1-52.fc37.ppc64le"
+      "evra": "1.3.1-53.fc38.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc37.ppc64le"
+      "evra": "0.1.13-1.fc38.ppc64le"
     },
     "libjose": {
-      "evra": "11-6.fc37.ppc64le"
+      "evra": "11-7.fc38.ppc64le"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc37.ppc64le"
+      "evra": "1.4.0-5.fc38.ppc64le"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc37.ppc64le"
+      "evra": "1.4.0-5.fc38.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.3-1.fc37.ppc64le"
+      "evra": "1.6.3-2.fc38.ppc64le"
     },
     "libldb": {
-      "evra": "2.6.2-1.fc37.ppc64le"
+      "evra": "2.7.2-1.fc38.ppc64le"
     },
     "libluksmeta": {
-      "evra": "9-14.fc37.ppc64le"
+      "evra": "9-15.fc38.ppc64le"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc37.ppc64le"
+      "evra": "1.7.1-2.fc38.ppc64le"
     },
     "libmd": {
-      "evra": "1.0.4-2.fc37.ppc64le"
+      "evra": "1.0.4-3.fc38.ppc64le"
     },
     "libmnl": {
-      "evra": "1.0.5-1.fc37.ppc64le"
+      "evra": "1.0.5-2.fc38.ppc64le"
     },
     "libmodulemd": {
-      "evra": "2.14.0-4.fc37.ppc64le"
+      "evra": "2.14.0-5.fc38.ppc64le"
     },
     "libmount": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libndp": {
-      "evra": "1.8-4.fc37.ppc64le"
+      "evra": "1.8-5.fc38.ppc64le"
     },
     "libnet": {
-      "evra": "1.2-6.fc37.ppc64le"
+      "evra": "1.2-7.fc38.ppc64le"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-5.fc37.ppc64le"
+      "evra": "1.0.8-7.fc38.ppc64le"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-22.fc37.ppc64le"
+      "evra": "1.0.1-23.fc38.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc6.fc38.1.ppc64le"
     },
     "libnftnl": {
-      "evra": "1.2.2-2.fc37.ppc64le"
+      "evra": "1.2.4-2.fc38.ppc64le"
     },
     "libnghttp2": {
-      "evra": "1.51.0-1.fc37.ppc64le"
+      "evra": "1.52.0-1.fc38.ppc64le"
     },
     "libnl3": {
-      "evra": "3.7.0-2.fc37.ppc64le"
+      "evra": "3.7.0-3.fc38.ppc64le"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-2.fc37.ppc64le"
+      "evra": "3.7.0-3.fc38.ppc64le"
     },
     "libnsl2": {
-      "evra": "2.0.0-4.fc37.ppc64le"
+      "evra": "2.0.0-5.fc38.ppc64le"
     },
     "libnvme": {
-      "evra": "1.2-1.fc37.ppc64le"
+      "evra": "1.4-1.fc38.ppc64le"
     },
     "libpath_utils": {
-      "evra": "0.2.1-52.fc37.ppc64le"
+      "evra": "0.2.1-53.fc38.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.3-1.fc37.ppc64le"
+      "evra": "14:1.10.3-2.fc38.ppc64le"
     },
     "libpkgconf": {
-      "evra": "1.8.0-3.fc37.ppc64le"
+      "evra": "1.8.0-6.fc38.ppc64le"
     },
     "libpsl": {
-      "evra": "0.21.1-6.fc37.ppc64le"
+      "evra": "0.21.2-2.fc38.ppc64le"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc37.ppc64le"
+      "evra": "1.4.5-3.fc38.ppc64le"
     },
     "libref_array": {
-      "evra": "0.1.5-52.fc37.ppc64le"
+      "evra": "0.1.5-53.fc38.ppc64le"
     },
     "librepo": {
-      "evra": "1.15.1-1.fc37.ppc64le"
+      "evra": "1.15.1-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc37.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "librtas": {
-      "evra": "2.0.2-13.fc37.ppc64le"
+      "evra": "2.0.4-1.fc38.ppc64le"
     },
     "libseccomp": {
-      "evra": "2.5.3-3.fc37.ppc64le"
+      "evra": "2.5.3-4.fc38.ppc64le"
     },
     "libselinux": {
-      "evra": "3.5-1.fc37.ppc64le"
+      "evra": "3.5-1.fc38.ppc64le"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc37.ppc64le"
+      "evra": "3.5-1.fc38.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc37.ppc64le"
+      "evra": "3.5-2.fc38.ppc64le"
     },
     "libsepol": {
-      "evra": "3.5-1.fc37.ppc64le"
+      "evra": "3.5-1.fc38.ppc64le"
     },
     "libservicelog": {
-      "evra": "1.1.19-4.fc37.ppc64le"
+      "evra": "1.1.19-5.fc38.ppc64le"
     },
     "libsigsegv": {
-      "evra": "2.14-3.fc37.ppc64le"
+      "evra": "2.14-4.fc38.ppc64le"
     },
     "libslirp": {
-      "evra": "4.7.0-2.fc37.ppc64le"
+      "evra": "4.7.0-3.fc38.ppc64le"
     },
     "libsmartcols": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.17.7-0.fc37.ppc64le"
+      "evra": "2:4.18.1-0.fc38.ppc64le"
     },
     "libsolv": {
-      "evra": "0.7.22-3.fc37.ppc64le"
+      "evra": "0.7.22-4.fc38.ppc64le"
     },
     "libss": {
-      "evra": "1.46.5-3.fc37.ppc64le"
+      "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "12.2.1-4.fc37.ppc64le"
+      "evra": "13.0.1-0.12.fc38.ppc64le"
     },
     "libtalloc": {
-      "evra": "2.3.4-3.fc37.ppc64le"
+      "evra": "2.4.0-2.fc38.ppc64le"
     },
     "libtasn1": {
-      "evra": "4.19.0-1.fc37.ppc64le"
+      "evra": "4.19.0-2.fc38.ppc64le"
     },
     "libtdb": {
-      "evra": "1.4.7-3.fc37.ppc64le"
+      "evra": "1.4.8-1.fc38.ppc64le"
     },
     "libteam": {
-      "evra": "1.31-6.fc37.ppc64le"
+      "evra": "1.31-7.fc38.ppc64le"
     },
     "libtevent": {
-      "evra": "0.13.0-1.fc37.ppc64le"
+      "evra": "0.14.1-1.fc38.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc37.ppc64le"
+      "evra": "1.3.3-1.fc38.ppc64le"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-2.fc37.ppc64le"
+      "evra": "2.4.7-6.fc38.ppc64le"
     },
     "libunistring": {
-      "evra": "1.0-2.fc37.ppc64le"
+      "evra": "1.1-3.fc38.ppc64le"
+    },
+    "libunistring1.0": {
+      "evra": "1.0-1.fc38.ppc64le"
     },
     "libusb1": {
-      "evra": "1.0.25-9.fc37.ppc64le"
+      "evra": "1.0.26-2.fc38.ppc64le"
     },
     "libuser": {
-      "evra": "0.63-13.fc37.ppc64le"
+      "evra": "0.64-2.fc38.ppc64le"
     },
     "libutempter": {
-      "evra": "1.2.1-7.fc37.ppc64le"
+      "evra": "1.2.1-8.fc38.ppc64le"
     },
     "libuuid": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libuv": {
-      "evra": "1:1.44.2-2.fc37.ppc64le"
+      "evra": "1:1.44.2-3.fc38.ppc64le"
     },
     "libverto": {
-      "evra": "0.3.2-4.fc37.ppc64le"
+      "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.17.7-0.fc37.ppc64le"
+      "evra": "2:4.18.1-0.fc38.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.33-4.fc37.ppc64le"
+      "evra": "4.4.33-7.fc38.ppc64le"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc37.ppc64le"
+      "evra": "2.10.3-3.fc38.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc37.ppc64le"
+      "evra": "0.3.11-1.fc38.ppc64le"
     },
     "libyaml": {
-      "evra": "0.2.5-8.fc37.ppc64le"
+      "evra": "0.2.5-9.fc38.ppc64le"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc37.ppc64le"
+      "evra": "1.5.5-1.fc38.ppc64le"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-33.fc37.ppc64le"
+      "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc37.ppc64le"
+      "evra": "0.9.30-1.fc38.ppc64le"
     },
     "logrotate": {
-      "evra": "3.20.1-3.fc37.ppc64le"
+      "evra": "3.21.0-2.fc38.ppc64le"
     },
     "lsof": {
-      "evra": "4.94.0-4.fc37.ppc64le"
+      "evra": "4.96.3-3.fc38.ppc64le"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc37.ppc64le"
+      "evra": "5.4.4-9.fc38.ppc64le"
     },
     "luksmeta": {
-      "evra": "9-14.fc37.ppc64le"
+      "evra": "9-15.fc38.ppc64le"
     },
     "lvm2": {
-      "evra": "2.03.11-9.fc37.ppc64le"
+      "evra": "2.03.18-2.fc38.ppc64le"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-9.fc37.ppc64le"
+      "evra": "2.03.18-2.fc38.ppc64le"
     },
     "lz4-libs": {
-      "evra": "1.9.4-1.fc37.ppc64le"
+      "evra": "1.9.4-2.fc38.ppc64le"
     },
     "lzo": {
-      "evra": "2.10-7.fc37.ppc64le"
+      "evra": "2.10-8.fc38.ppc64le"
     },
     "mdadm": {
-      "evra": "4.2-2.fc37.ppc64le"
+      "evra": "4.2-4.fc38.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc37.ppc64le"
-    },
-    "mozjs102": {
-      "evra": "102.9.0-1.fc37.ppc64le"
+      "evra": "20.10.23-1.fc38.ppc64le"
     },
     "mpfr": {
-      "evra": "4.1.0-10.fc37.ppc64le"
+      "evra": "4.1.1-3.fc38.ppc64le"
     },
     "nano": {
-      "evra": "6.4-1.fc37.ppc64le"
+      "evra": "7.2-2.fc38.ppc64le"
     },
     "nano-default-editor": {
-      "evra": "6.4-1.fc37.noarch"
+      "evra": "7.2-2.fc38.noarch"
     },
     "ncurses": {
-      "evra": "6.3-4.20220501.fc37.ppc64le"
+      "evra": "6.4-3.20230114.fc38.ppc64le"
     },
     "ncurses-base": {
-      "evra": "6.3-4.20220501.fc37.noarch"
+      "evra": "6.4-3.20230114.fc38.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-4.20220501.fc37.ppc64le"
+      "evra": "6.4-3.20230114.fc38.ppc64le"
     },
     "net-tools": {
-      "evra": "2.0-0.64.20160912git.fc37.ppc64le"
+      "evra": "2.0-0.65.20160912git.fc38.ppc64le"
     },
     "netavark": {
-      "evra": "1.5.0-4.fc37.ppc64le"
+      "evra": "1.6.0-2.fc38.ppc64le"
     },
     "nettle": {
-      "evra": "3.8-2.fc37.ppc64le"
+      "evra": "3.8-3.fc38.ppc64le"
     },
     "newt": {
-      "evra": "0.52.23-1.fc37.ppc64le"
+      "evra": "0.52.23-2.fc38.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc37.ppc64le"
+      "evra": "1:2.6.2-2.rc6.fc38.1.ppc64le"
     },
     "nftables": {
-      "evra": "1:1.0.4-3.fc37.ppc64le"
+      "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.9-2.fc37.ppc64le"
+      "evra": "2.2.9-1.fc38.ppc64le"
     },
     "npth": {
-      "evra": "1.6-9.fc37.ppc64le"
+      "evra": "1.6-12.fc38.ppc64le"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-21.fc37.ppc64le"
+      "evra": "2.18.1-22.fc38.ppc64le"
     },
     "numactl-libs": {
-      "evra": "2.0.14-6.fc37.ppc64le"
+      "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.2.1-1.fc37.ppc64le"
+      "evra": "2.4-1.fc38.ppc64le"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.ppc64le"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc37.ppc64le"
+      "evra": "2.6.4-1.fc38.ppc64le"
     },
     "openssh": {
-      "evra": "8.8p1-9.fc37.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssh-clients": {
-      "evra": "8.8p1-9.fc37.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssh-server": {
-      "evra": "8.8p1-9.fc37.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc37.ppc64le"
+      "evra": "1:3.0.8-2.fc38.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc37.ppc64le"
+      "evra": "1:3.0.8-2.fc38.ppc64le"
     },
     "os-prober": {
-      "evra": "1.81-1.fc37.ppc64le"
+      "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2022.7-2.fc37.ppc64le"
+      "evra": "2023.1-2.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2022.7-2.fc37.ppc64le"
+      "evra": "2023.1-2.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2022.7-2.fc37.ppc64le"
+      "evra": "2023.1-2.fc38.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.24.1-3.fc37.ppc64le"
+      "evra": "0.24.1-6.fc38.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-3.fc37.ppc64le"
+      "evra": "0.24.1-6.fc38.ppc64le"
     },
     "pam": {
-      "evra": "1.5.2-14.fc37.ppc64le"
+      "evra": "1.5.2-16.fc38.ppc64le"
     },
     "pam-libs": {
-      "evra": "1.5.2-14.fc37.ppc64le"
+      "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passwd": {
-      "evra": "0.80-13.fc37.ppc64le"
-    },
-    "pcre": {
-      "evra": "8.45-1.fc37.2.ppc64le"
+      "evra": "0.80-14.fc38.ppc64le"
     },
     "pcre2": {
-      "evra": "10.40-1.fc37.1.ppc64le"
+      "evra": "10.42-1.fc38.1.ppc64le"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc37.1.noarch"
+      "evra": "10.42-1.fc38.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-2.fc37.ppc64le"
+      "evra": "2.7-3.fc38.ppc64le"
     },
     "pkgconf": {
-      "evra": "1.8.0-3.fc37.ppc64le"
+      "evra": "1.8.0-6.fc38.ppc64le"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-3.fc37.noarch"
+      "evra": "1.8.0-6.fc38.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-3.fc37.ppc64le"
+      "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.4.4-3.fc37.ppc64le"
+      "evra": "5:4.5.0-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.4.4-3.fc37.ppc64le"
+      "evra": "5:4.5.0-1.fc38.ppc64le"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc37.ppc64le"
+      "evra": "3.5-1.fc38.ppc64le"
     },
     "polkit": {
-      "evra": "121-4.fc37.2.ppc64le"
+      "evra": "122-3.fc38.ppc64le"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.2.ppc64le"
+      "evra": "122-3.fc38.ppc64le"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-22.fc37.ppc64le"
+      "evra": "0.1-23.fc38.ppc64le"
     },
     "popt": {
-      "evra": "1.19-1.fc37.ppc64le"
+      "evra": "1.19-2.fc38.ppc64le"
     },
     "powerpc-utils-core": {
-      "evra": "1.3.10-4.fc37.ppc64le"
+      "evra": "1.3.11-1.fc38.ppc64le"
     },
     "ppc64-diag-rtas": {
-      "evra": "2.7.8-4.fc37.ppc64le"
+      "evra": "2.7.9-2.fc38.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-6.fc37.2.ppc64le"
+      "evra": "3.3.17-9.fc38.ppc64le"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc37.ppc64le"
+      "evra": "1.4.1-4.fc38.ppc64le"
     },
     "psmisc": {
-      "evra": "23.4-4.fc37.ppc64le"
+      "evra": "23.6-2.fc38.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc37.noarch"
+      "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-15.fc37.ppc64le"
+      "evra": "2:7.2.0-6.fc38.ppc64le"
     },
     "readline": {
-      "evra": "8.2-2.fc37.ppc64le"
+      "evra": "8.2-3.fc38.ppc64le"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.rc2.fc37.ppc64le"
+      "evra": "1.2.6-4.rc2.fc38.ppc64le"
     },
     "rpm": {
-      "evra": "4.18.0-1.fc37.ppc64le"
+      "evra": "4.18.1-1.fc38.ppc64le"
     },
     "rpm-libs": {
-      "evra": "4.18.0-1.fc37.ppc64le"
+      "evra": "4.18.1-1.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc37.ppc64le"
+      "evra": "2023.2-1.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc37.ppc64le"
+      "evra": "2023.2-1.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.0-1.fc37.ppc64le"
+      "evra": "4.18.1-1.fc38.ppc64le"
+    },
+    "rpm-sequoia": {
+      "evra": "1.3.0-1.fc38.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc37.ppc64le"
+      "evra": "3.2.7-2.fc38.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc37.ppc64le"
+      "evra": "2:1.1.4-2.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.7-0.fc37.ppc64le"
+      "evra": "2:4.18.1-0.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.17.7-0.fc37.noarch"
+      "evra": "2:4.18.1-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.7-0.fc37.ppc64le"
+      "evra": "2:4.18.1-0.fc38.ppc64le"
     },
     "sed": {
-      "evra": "4.8-11.fc37.ppc64le"
+      "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "servicelog": {
-      "evra": "1.1.16-2.fc37.ppc64le"
+      "evra": "1.1.16-3.fc38.ppc64le"
     },
     "setup": {
-      "evra": "2.14.1-2.fc37.noarch"
+      "evra": "2.14.3-2.fc38.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-4.fc37.ppc64le"
+      "evra": "1.46-5.fc38.ppc64le"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-4.fc37.ppc64le"
+      "evra": "1.46-5.fc38.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-6.fc37.ppc64le"
+      "evra": "2:4.13-6.fc38.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-6.fc37.ppc64le"
+      "evra": "2:4.13-6.fc38.ppc64le"
     },
     "shared-mime-info": {
-      "evra": "2.2-2.fc37.ppc64le"
+      "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc37.ppc64le"
+      "evra": "1:1.11.2-1.fc38.ppc64le"
     },
     "slang": {
-      "evra": "2.3.3-1.fc37.ppc64le"
+      "evra": "2.3.3-3.fc38.ppc64le"
     },
     "slirp4netns": {
-      "evra": "1.2.0-8.fc37.ppc64le"
+      "evra": "1.2.0-12.fc38.ppc64le"
     },
     "snappy": {
-      "evra": "1.1.9-5.fc37.ppc64le"
+      "evra": "1.1.9-7.fc38.ppc64le"
     },
     "socat": {
-      "evra": "1.7.4.2-3.fc37.ppc64le"
+      "evra": "1.7.4.4-2.fc38.ppc64le"
     },
     "sqlite-libs": {
-      "evra": "3.40.0-1.fc37.ppc64le"
+      "evra": "3.40.1-2.fc38.ppc64le"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-2.fc37.ppc64le"
+      "evra": "4.5.1-3.fc38.ppc64le"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc37.ppc64le"
+      "evra": "0.1.4-3.fc38.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-1.fc37.ppc64le"
+      "evra": "2.8.2-4.fc38.ppc64le"
     },
     "stalld": {
-      "evra": "1.16-2.fc37.ppc64le"
+      "evra": "1.16-3.fc38.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc37.ppc64le"
+      "evra": "1.9.13-1.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "251.14-2.fc37.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "tar": {
-      "evra": "2:1.34-6.fc37.ppc64le"
+      "evra": "2:1.34-8.fc38.ppc64le"
     },
     "teamd": {
-      "evra": "1.31-6.fc37.ppc64le"
+      "evra": "1.31-7.fc38.ppc64le"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc37.ppc64le"
+      "evra": "0.0.99.4-1.fc38.ppc64le"
     },
     "tpm2-tools": {
-      "evra": "5.4-1.fc37.ppc64le"
+      "evra": "5.5-1.fc38.ppc64le"
     },
     "tpm2-tss": {
-      "evra": "3.2.2-1.fc37.ppc64le"
+      "evra": "4.0.1-3.fc38.ppc64le"
     },
     "tzdata": {
-      "evra": "2022g-1.fc37.noarch"
+      "evra": "2023c-1.fc38.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-5.fc37.ppc64le"
+      "evra": "0.13.2-2.fc38.ppc64le"
     },
     "util-linux": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "util-linux-core": {
-      "evra": "2.38.1-1.fc37.ppc64le"
+      "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc37.ppc64le"
+      "evra": "2:9.0.1440-1.fc38.ppc64le"
     },
     "which": {
-      "evra": "2.21-39.fc37.ppc64le"
+      "evra": "2.21-39.fc38.ppc64le"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-3.fc37.ppc64le"
+      "evra": "1.0.20210914-4.fc38.ppc64le"
     },
     "xfsprogs": {
-      "evra": "6.1.0-2.fc37.ppc64le"
+      "evra": "6.1.0-3.fc38.ppc64le"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-3.fc37.ppc64le"
+      "evra": "0.8.1-4.fc38.ppc64le"
     },
     "xz": {
-      "evra": "5.4.1-1.fc37.ppc64le"
+      "evra": "5.4.1-1.fc38.ppc64le"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc37.ppc64le"
+      "evra": "5.4.1-1.fc38.ppc64le"
     },
     "yajl": {
-      "evra": "2.1.0-19.fc37.ppc64le"
+      "evra": "2.1.0-20.fc38.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc37.ppc64le"
+      "evra": "1.3.1-1.fc38.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.25-2.fc37.ppc64le"
+      "evra": "0.0.25-4.fc38.ppc64le"
     },
     "zlib": {
-      "evra": "1.2.12-5.fc37.ppc64le"
+      "evra": "1.2.13-3.fc38.ppc64le"
     },
     "zram-generator": {
-      "evra": "1.1.2-2.fc37.ppc64le"
+      "evra": "1.1.2-4.fc38.ppc64le"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc37.ppc64le"
+      "evra": "1.5.5-1.fc38.ppc64le"
     }
   },
   "metadata": {
-    "generated": "2023-04-13T00:00:00Z",
+    "generated": "2023-04-17T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-11-05T08:04:20Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2023-04-08T14:20:08Z"
+        "generated": "2023-04-17T00:29:43Z"
+      },
+      "fedora-next": {
+        "generated": "2023-04-14T09:32:11Z"
       },
-      "fedora-updates": {
-        "generated": "2023-04-13T01:45:19Z"
+      "fedora-next-updates": {
+        "generated": "2023-04-16T01:55:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index eca0c5d444..4be4c49705 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,1196 +1,1199 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.10-1.fc37.s390x"
+      "evra": "1:1.42.0-1.fc38.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.10-1.fc37.s390x"
+      "evra": "1:1.42.0-1.fc38.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.10-1.fc37.s390x"
+      "evra": "1:1.42.0-1.fc38.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.10-1.fc37.s390x"
+      "evra": "1:1.42.0-1.fc38.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.10-1.fc37.s390x"
+      "evra": "1:1.42.0-1.fc38.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-1.fc37.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.5.0-4.fc37.s390x"
+      "evra": "1.6.0-1.fc38.s390x"
     },
     "acl": {
-      "evra": "2.3.1-4.fc37.s390x"
+      "evra": "2.3.1-6.fc38.s390x"
     },
     "adcli": {
-      "evra": "0.9.1-11.fc37.s390x"
+      "evra": "0.9.2-2.fc38.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc37.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc37.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "alternatives": {
-      "evra": "1.22-1.fc37.s390x"
+      "evra": "1.22-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "attr": {
-      "evra": "2.5.1-5.fc37.s390x"
+      "evra": "2.5.1-6.fc38.s390x"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc37.s390x"
+      "evra": "3.1-2.fc38.s390x"
     },
     "authselect": {
-      "evra": "1.4.2-1.fc37.s390x"
+      "evra": "1.4.2-2.fc38.s390x"
     },
     "authselect-libs": {
-      "evra": "1.4.2-1.fc37.s390x"
+      "evra": "1.4.2-2.fc38.s390x"
     },
     "avahi-libs": {
-      "evra": "0.8-18.fc37.s390x"
+      "evra": "0.8-20.fc38.s390x"
     },
     "basesystem": {
-      "evra": "11-14.fc37.noarch"
+      "evra": "11-15.fc38.noarch"
     },
     "bash": {
-      "evra": "5.2.15-1.fc37.s390x"
+      "evra": "5.2.15-3.fc38.s390x"
     },
     "bash-completion": {
-      "evra": "1:2.11-8.fc37.noarch"
+      "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc37.s390x"
+      "evra": "32:9.18.13-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc37.s390x"
+      "evra": "32:9.18.13-1.fc38.s390x"
     },
     "bsdtar": {
-      "evra": "3.6.1-3.fc37.s390x"
+      "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc37.s390x"
+      "evra": "6.2.2-1.fc38.s390x"
     },
     "bubblewrap": {
-      "evra": "0.5.0-3.fc37.s390x"
+      "evra": "0.7.0-1.fc38.s390x"
     },
     "bzip2": {
-      "evra": "1.0.8-12.fc37.s390x"
+      "evra": "1.0.8-13.fc38.s390x"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-12.fc37.s390x"
+      "evra": "1.0.8-13.fc38.s390x"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc37.s390x"
+      "evra": "1.19.0-1.fc38.s390x"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-1.0.fc37.noarch"
+      "evra": "2023.2.60-2.fc38.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc37.s390x"
+      "evra": "0.1.7-14.fc38.s390x"
     },
     "chrony": {
-      "evra": "4.3-1.fc37.s390x"
+      "evra": "4.3-3.fc38.s390x"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc37.s390x"
+      "evra": "7.0-1.fc38.s390x"
     },
     "clevis": {
-      "evra": "19-2.fc37.s390x"
+      "evra": "19-2.fc38.s390x"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc37.s390x"
+      "evra": "19-2.fc38.s390x"
     },
     "clevis-luks": {
-      "evra": "19-2.fc37.s390x"
+      "evra": "19-2.fc38.s390x"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc37.s390x"
+      "evra": "19-2.fc38.s390x"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-11.fc37.noarch"
+      "evra": "0.31-12.fc38.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc37.s390x"
+      "evra": "2:2.1.7-2.fc38.s390x"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc38.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc37.s390x"
+      "evra": "1.6.19-1.fc38.s390x"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc37.s390x"
+      "evra": "1.1.1-16.fc38.s390x"
     },
     "containers-common": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc37.s390x"
+      "evra": "0.17.0-1.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc37.s390x"
+      "evra": "0.17.0-1.fc38.s390x"
     },
     "coreutils": {
-      "evra": "9.1-7.fc37.s390x"
+      "evra": "9.1-11.fc38.s390x"
     },
     "coreutils-common": {
-      "evra": "9.1-7.fc37.s390x"
+      "evra": "9.1-11.fc38.s390x"
     },
     "cpio": {
-      "evra": "2.13-13.fc37.s390x"
+      "evra": "2.13-14.fc38.s390x"
     },
     "cracklib": {
-      "evra": "2.9.7-30.fc37.s390x"
+      "evra": "2.9.7-31.fc38.s390x"
     },
     "criu": {
-      "evra": "3.17.1-3.fc37.s390x"
+      "evra": "3.17.1-5.fc38.s390x"
     },
     "criu-libs": {
-      "evra": "3.17.1-3.fc37.s390x"
+      "evra": "3.17.1-5.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.3-2.fc37.s390x"
+      "evra": "1.8.3-2.fc38.s390x"
     },
     "crypto-policies": {
-      "evra": "20220815-1.gite4ed860.fc37.noarch"
+      "evra": "20230301-1.gita12f7b2.fc38.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc37.s390x"
+      "evra": "2.6.1-1.fc38.s390x"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc37.s390x"
+      "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "7.85.0-8.fc37.s390x"
+      "evra": "7.87.0-7.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-8.fc37.s390x"
+      "evra": "2.1.28-9.fc38.s390x"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-8.fc37.s390x"
+      "evra": "2.1.28-9.fc38.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc37.s390x"
+      "evra": "1:1.14.6-1.fc38.s390x"
     },
     "dbus-broker": {
-      "evra": "33-1.fc37.s390x"
+      "evra": "33-1.fc38.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc37.s390x"
+      "evra": "1:1.14.6-1.fc38.s390x"
     },
     "device-mapper": {
-      "evra": "1.02.175-9.fc37.s390x"
+      "evra": "1.02.189-2.fc38.s390x"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-9.fc37.s390x"
+      "evra": "1.02.189-2.fc38.s390x"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-9.fc37.s390x"
+      "evra": "1.02.189-2.fc38.s390x"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-9.fc37.s390x"
+      "evra": "1.02.189-2.fc38.s390x"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-4.fc37.s390x"
+      "evra": "0.9.4-2.fc38.s390x"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-4.fc37.s390x"
+      "evra": "0.9.4-2.fc38.s390x"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-8.fc37.s390x"
+      "evra": "0.9.0-10.fc38.s390x"
     },
     "diffutils": {
-      "evra": "3.8-3.fc37.s390x"
+      "evra": "3.9-1.fc38.s390x"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc37.s390x"
+      "evra": "2.89-1.fc38.s390x"
     },
     "dosfstools": {
-      "evra": "4.2-4.fc37.s390x"
+      "evra": "4.2-6.fc38.s390x"
     },
     "dracut": {
-      "evra": "059-1.fc37.s390x"
+      "evra": "059-2.fc38.s390x"
     },
     "dracut-network": {
-      "evra": "059-1.fc37.s390x"
+      "evra": "059-2.fc38.s390x"
     },
     "dracut-squash": {
-      "evra": "059-1.fc37.s390x"
+      "evra": "059-2.fc38.s390x"
+    },
+    "duktape": {
+      "evra": "2.7.0-2.fc38.s390x"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-3.fc37.s390x"
+      "evra": "1.46.5-4.fc38.s390x"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-3.fc37.s390x"
+      "evra": "1.46.5-4.fc38.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc37.noarch"
+      "evra": "0.189-1.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc37.s390x"
+      "evra": "0.189-1.fc38.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc37.s390x"
+      "evra": "0.189-1.fc38.s390x"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc37.s390x"
+      "evra": "2:6.2-1.fc38.s390x"
     },
     "expat": {
-      "evra": "2.5.0-1.fc37.s390x"
+      "evra": "2.5.0-2.fc38.s390x"
     },
     "fedora-gpg-keys": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-repos": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "file": {
-      "evra": "5.42-4.fc37.s390x"
+      "evra": "5.44-3.fc38.s390x"
     },
     "file-libs": {
-      "evra": "5.42-4.fc37.s390x"
+      "evra": "5.44-3.fc38.s390x"
     },
     "filesystem": {
-      "evra": "3.18-2.fc37.s390x"
+      "evra": "3.18-3.fc38.s390x"
     },
     "findutils": {
-      "evra": "1:4.9.0-2.fc37.s390x"
+      "evra": "1:4.9.0-3.fc38.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.4-1.fc37.s390x"
+      "evra": "1.15.4-1.fc38.s390x"
     },
     "fstrm": {
-      "evra": "0.6.1-5.fc37.s390x"
+      "evra": "0.6.1-6.fc38.s390x"
     },
     "fuse": {
-      "evra": "2.9.9-15.fc37.s390x"
+      "evra": "2.9.9-16.fc38.s390x"
     },
     "fuse-common": {
-      "evra": "3.10.5-5.fc37.s390x"
+      "evra": "3.13.1-2.fc38.s390x"
     },
     "fuse-libs": {
-      "evra": "2.9.9-15.fc37.s390x"
+      "evra": "2.9.9-16.fc38.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc37.s390x"
+      "evra": "1.10-3.fc38.s390x"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-2.fc37.s390x"
+      "evra": "3.7.3-3.fc38.s390x"
     },
     "fuse3": {
-      "evra": "3.10.5-5.fc37.s390x"
+      "evra": "3.13.1-2.fc38.s390x"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-5.fc37.s390x"
+      "evra": "3.13.1-2.fc38.s390x"
     },
     "gawk": {
-      "evra": "5.1.1-4.fc37.s390x"
+      "evra": "5.1.1-5.fc38.s390x"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-2.fc37.s390x"
+      "evra": "1:1.23-3.fc38.s390x"
     },
     "gdisk": {
-      "evra": "1.0.9-4.fc37.s390x"
+      "evra": "1.0.9-5.fc38.s390x"
     },
     "git-core": {
-      "evra": "2.39.2-1.fc37.s390x"
+      "evra": "2.40.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.74.6-1.fc37.s390x"
+      "evra": "2.76.1-1.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.36-9.fc37.s390x"
+      "evra": "2.37-1.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.36-9.fc37.s390x"
+      "evra": "2.37-1.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.36-9.fc37.s390x"
+      "evra": "2.37-1.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-9.fc37.s390x"
+      "evra": "2.37-1.fc38.s390x"
     },
     "gmp": {
-      "evra": "1:6.2.1-3.fc37.s390x"
+      "evra": "1:6.2.1-4.fc38.s390x"
     },
     "gnupg2": {
-      "evra": "2.3.8-1.fc37.s390x"
+      "evra": "2.4.0-3.fc38.s390x"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc37.s390x"
+      "evra": "3.8.0-2.fc38.s390x"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc37.s390x"
+      "evra": "1.17.1-3.fc38.s390x"
     },
     "grep": {
-      "evra": "3.7-4.fc37.s390x"
+      "evra": "3.8-3.fc38.s390x"
     },
     "gzip": {
-      "evra": "1.12-2.fc37.s390x"
+      "evra": "1.12-3.fc38.s390x"
     },
     "hostname": {
-      "evra": "3.23-7.fc37.s390x"
+      "evra": "3.23-8.fc38.s390x"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc37.s390x"
+      "evra": "2.15.0-3.fc38.s390x"
     },
     "inih": {
-      "evra": "56-2.fc37.s390x"
+      "evra": "56-3.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "iproute": {
-      "evra": "5.18.0-2.fc37.s390x"
+      "evra": "6.1.0-1.fc38.s390x"
     },
     "iproute-tc": {
-      "evra": "5.18.0-2.fc37.s390x"
+      "evra": "6.1.0-1.fc38.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-4.fc37.s390x"
+      "evra": "1.8.9-2.fc38.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-4.fc37.s390x"
+      "evra": "1.8.9-2.fc38.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.8-4.fc37.s390x"
+      "evra": "1.8.9-2.fc38.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.8-4.fc37.s390x"
+      "evra": "1.8.9-2.fc38.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.8-4.fc37.noarch"
+      "evra": "1.8.9-2.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-4.fc37.s390x"
+      "evra": "1.8.9-2.fc38.s390x"
     },
     "iputils": {
-      "evra": "20221126-1.fc37.s390x"
+      "evra": "20221126-2.fc38.s390x"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.s390x"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.s390x"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.s390x"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.s390x"
     },
     "isns-utils-libs": {
-      "evra": "0.101-5.fc37.s390x"
+      "evra": "0.101-6.fc38.s390x"
     },
     "jansson": {
-      "evra": "2.13.1-5.fc37.s390x"
+      "evra": "2.13.1-6.fc38.s390x"
     },
     "jemalloc": {
-      "evra": "5.3.0-2.fc37.s390x"
+      "evra": "5.3.0-3.fc38.s390x"
     },
     "jose": {
-      "evra": "11-6.fc37.s390x"
+      "evra": "11-7.fc38.s390x"
     },
     "jq": {
-      "evra": "1.6-14.fc37.s390x"
+      "evra": "1.6-15.fc38.s390x"
     },
     "json-c": {
-      "evra": "0.16-3.fc37.s390x"
+      "evra": "0.16-4.fc38.s390x"
     },
     "json-glib": {
-      "evra": "1.6.6-3.fc37.s390x"
+      "evra": "1.6.6-4.fc38.s390x"
     },
     "kbd": {
-      "evra": "2.5.1-3.fc37.s390x"
+      "evra": "2.5.1-5.fc38.s390x"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.9-200.fc37.s390x"
+      "evra": "6.2.11-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.9-200.fc37.s390x"
+      "evra": "6.2.11-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.9-200.fc37.s390x"
+      "evra": "6.2.11-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.9-200.fc37.s390x"
+      "evra": "6.2.11-300.fc38.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc37.s390x"
+      "evra": "2.0.26-3.fc38.s390x"
     },
     "keyutils": {
-      "evra": "1.6.1-5.fc37.s390x"
+      "evra": "1.6.1-6.fc38.s390x"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-5.fc37.s390x"
+      "evra": "1.6.1-6.fc38.s390x"
     },
     "kmod": {
-      "evra": "30-2.fc37.s390x"
+      "evra": "30-4.fc38.s390x"
     },
     "kmod-libs": {
-      "evra": "30-2.fc37.s390x"
+      "evra": "30-4.fc38.s390x"
     },
     "kpartx": {
-      "evra": "0.9.0-4.fc37.s390x"
+      "evra": "0.9.4-2.fc38.s390x"
     },
     "krb5-libs": {
-      "evra": "1.19.2-13.fc37.s390x"
+      "evra": "1.20.1-8.fc38.s390x"
     },
     "less": {
-      "evra": "590-5.fc37.s390x"
+      "evra": "608-2.fc38.s390x"
     },
     "libacl": {
-      "evra": "2.3.1-4.fc37.s390x"
+      "evra": "2.3.1-6.fc38.s390x"
     },
     "libaio": {
-      "evra": "0.3.111-14.fc37.s390x"
+      "evra": "0.3.111-15.fc38.s390x"
     },
     "libarchive": {
-      "evra": "3.6.1-3.fc37.s390x"
+      "evra": "3.6.1-4.fc38.s390x"
     },
     "libargon2": {
-      "evra": "20190702-1.fc37.s390x"
+      "evra": "20190702-2.fc38.s390x"
     },
     "libassuan": {
-      "evra": "2.5.5-5.fc37.s390x"
+      "evra": "2.5.5-6.fc38.s390x"
     },
     "libattr": {
-      "evra": "2.5.1-5.fc37.s390x"
+      "evra": "2.5.1-6.fc38.s390x"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-52.fc37.s390x"
+      "evra": "0.1.1-53.fc38.s390x"
     },
     "libblkid": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "libbpf": {
-      "evra": "2:0.8.0-2.fc37.s390x"
+      "evra": "2:1.1.0-2.fc38.s390x"
     },
     "libbsd": {
-      "evra": "0.11.7-2.fc37.s390x"
+      "evra": "0.11.7-4.fc38.s390x"
     },
     "libcap": {
-      "evra": "2.48-5.fc37.s390x"
+      "evra": "2.48-6.fc38.s390x"
     },
     "libcap-ng": {
-      "evra": "0.8.3-3.fc37.s390x"
+      "evra": "0.8.3-5.fc38.s390x"
     },
     "libcbor": {
-      "evra": "0.7.0-7.fc37.s390x"
+      "evra": "0.7.0-9.fc38.s390x"
     },
     "libcollection": {
-      "evra": "0.7.0-52.fc37.s390x"
+      "evra": "0.7.0-53.fc38.s390x"
     },
     "libcom_err": {
-      "evra": "1.46.5-3.fc37.s390x"
+      "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-8.fc37.s390x"
+      "evra": "7.87.0-7.fc38.s390x"
     },
     "libdaemon": {
-      "evra": "0.14-24.fc37.s390x"
+      "evra": "0.14-25.fc38.s390x"
     },
     "libdb": {
-      "evra": "5.3.28-53.fc37.s390x"
+      "evra": "5.3.28-55.fc38.s390x"
     },
     "libdhash": {
-      "evra": "0.5.0-52.fc37.s390x"
+      "evra": "0.5.0-53.fc38.s390x"
     },
     "libeconf": {
-      "evra": "0.4.0-4.fc37.s390x"
+      "evra": "0.4.0-5.fc38.s390x"
     },
     "libedit": {
-      "evra": "3.1-43.20221009cvs.fc37.s390x"
+      "evra": "3.1-45.20221030cvs.fc38.s390x"
     },
     "libevent": {
-      "evra": "2.1.12-7.fc37.s390x"
+      "evra": "2.1.12-8.fc38.s390x"
     },
     "libfdisk": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "libffi": {
-      "evra": "3.4.4-1.fc37.s390x"
+      "evra": "3.4.4-2.fc38.s390x"
     },
     "libfido2": {
-      "evra": "1.11.0-3.fc37.s390x"
+      "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "12.2.1-4.fc37.s390x"
+      "evra": "13.0.1-0.12.fc38.s390x"
     },
     "libgcrypt": {
-      "evra": "1.10.1-4.fc37.s390x"
+      "evra": "1.10.1-7.fc38.s390x"
     },
     "libgpg-error": {
-      "evra": "1.46-1.fc37.s390x"
+      "evra": "1.46-2.fc38.s390x"
     },
     "libibverbs": {
-      "evra": "41.0-1.fc37.s390x"
+      "evra": "44.0-3.fc38.s390x"
     },
     "libicu": {
-      "evra": "71.1-2.fc37.s390x"
+      "evra": "72.1-2.fc38.s390x"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc37.s390x"
+      "evra": "2.3.4-2.fc38.s390x"
     },
     "libini_config": {
-      "evra": "1.3.1-52.fc37.s390x"
+      "evra": "1.3.1-53.fc38.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "libjose": {
-      "evra": "11-6.fc37.s390x"
+      "evra": "11-7.fc38.s390x"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc37.s390x"
+      "evra": "1.4.0-5.fc38.s390x"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc37.s390x"
+      "evra": "1.4.0-5.fc38.s390x"
     },
     "libksba": {
-      "evra": "1.6.3-1.fc37.s390x"
+      "evra": "1.6.3-2.fc38.s390x"
     },
     "libldb": {
-      "evra": "2.6.2-1.fc37.s390x"
+      "evra": "2.7.2-1.fc38.s390x"
     },
     "libluksmeta": {
-      "evra": "9-14.fc37.s390x"
+      "evra": "9-15.fc38.s390x"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc37.s390x"
+      "evra": "1.7.1-2.fc38.s390x"
     },
     "libmd": {
-      "evra": "1.0.4-2.fc37.s390x"
+      "evra": "1.0.4-3.fc38.s390x"
     },
     "libmnl": {
-      "evra": "1.0.5-1.fc37.s390x"
+      "evra": "1.0.5-2.fc38.s390x"
     },
     "libmodulemd": {
-      "evra": "2.14.0-4.fc37.s390x"
+      "evra": "2.14.0-5.fc38.s390x"
     },
     "libmount": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "libndp": {
-      "evra": "1.8-4.fc37.s390x"
+      "evra": "1.8-5.fc38.s390x"
     },
     "libnet": {
-      "evra": "1.2-6.fc37.s390x"
+      "evra": "1.2-7.fc38.s390x"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-5.fc37.s390x"
+      "evra": "1.0.8-7.fc38.s390x"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-22.fc37.s390x"
+      "evra": "1.0.1-23.fc38.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc37.s390x"
+      "evra": "1:2.6.2-2.rc6.fc38.1.s390x"
     },
     "libnftnl": {
-      "evra": "1.2.2-2.fc37.s390x"
+      "evra": "1.2.4-2.fc38.s390x"
     },
     "libnghttp2": {
-      "evra": "1.51.0-1.fc37.s390x"
+      "evra": "1.52.0-1.fc38.s390x"
     },
     "libnl3": {
-      "evra": "3.7.0-2.fc37.s390x"
+      "evra": "3.7.0-3.fc38.s390x"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-2.fc37.s390x"
+      "evra": "3.7.0-3.fc38.s390x"
     },
     "libnsl2": {
-      "evra": "2.0.0-4.fc37.s390x"
+      "evra": "2.0.0-5.fc38.s390x"
     },
     "libnvme": {
-      "evra": "1.2-1.fc37.s390x"
+      "evra": "1.4-1.fc38.s390x"
     },
     "libpath_utils": {
-      "evra": "0.2.1-52.fc37.s390x"
+      "evra": "0.2.1-53.fc38.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.3-1.fc37.s390x"
+      "evra": "14:1.10.3-2.fc38.s390x"
     },
     "libpkgconf": {
-      "evra": "1.8.0-3.fc37.s390x"
+      "evra": "1.8.0-6.fc38.s390x"
     },
     "libpsl": {
-      "evra": "0.21.1-6.fc37.s390x"
+      "evra": "0.21.2-2.fc38.s390x"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc37.s390x"
+      "evra": "1.4.5-3.fc38.s390x"
     },
     "libref_array": {
-      "evra": "0.1.5-52.fc37.s390x"
+      "evra": "0.1.5-53.fc38.s390x"
     },
     "librepo": {
-      "evra": "1.15.1-1.fc37.s390x"
+      "evra": "1.15.1-2.fc38.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc37.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-3.fc37.s390x"
+      "evra": "2.5.3-4.fc38.s390x"
     },
     "libselinux": {
-      "evra": "3.5-1.fc37.s390x"
+      "evra": "3.5-1.fc38.s390x"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc37.s390x"
+      "evra": "3.5-1.fc38.s390x"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc37.s390x"
+      "evra": "3.5-2.fc38.s390x"
     },
     "libsepol": {
-      "evra": "3.5-1.fc37.s390x"
+      "evra": "3.5-1.fc38.s390x"
     },
     "libsigsegv": {
-      "evra": "2.14-3.fc37.s390x"
+      "evra": "2.14-4.fc38.s390x"
     },
     "libslirp": {
-      "evra": "4.7.0-2.fc37.s390x"
+      "evra": "4.7.0-3.fc38.s390x"
     },
     "libsmartcols": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.17.7-0.fc37.s390x"
+      "evra": "2:4.18.1-0.fc38.s390x"
     },
     "libsolv": {
-      "evra": "0.7.22-3.fc37.s390x"
+      "evra": "0.7.22-4.fc38.s390x"
     },
     "libss": {
-      "evra": "1.46.5-3.fc37.s390x"
+      "evra": "1.46.5-4.fc38.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "12.2.1-4.fc37.s390x"
+      "evra": "13.0.1-0.12.fc38.s390x"
     },
     "libtalloc": {
-      "evra": "2.3.4-3.fc37.s390x"
+      "evra": "2.4.0-2.fc38.s390x"
     },
     "libtasn1": {
-      "evra": "4.19.0-1.fc37.s390x"
+      "evra": "4.19.0-2.fc38.s390x"
     },
     "libtdb": {
-      "evra": "1.4.7-3.fc37.s390x"
+      "evra": "1.4.8-1.fc38.s390x"
     },
     "libteam": {
-      "evra": "1.31-6.fc37.s390x"
+      "evra": "1.31-7.fc38.s390x"
     },
     "libtevent": {
-      "evra": "0.13.0-1.fc37.s390x"
+      "evra": "0.14.1-1.fc38.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc37.s390x"
+      "evra": "1.3.3-1.fc38.s390x"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-2.fc37.s390x"
+      "evra": "2.4.7-6.fc38.s390x"
     },
     "libunistring": {
-      "evra": "1.0-2.fc37.s390x"
+      "evra": "1.1-3.fc38.s390x"
+    },
+    "libunistring1.0": {
+      "evra": "1.0-1.fc38.s390x"
     },
     "libuser": {
-      "evra": "0.63-13.fc37.s390x"
+      "evra": "0.64-2.fc38.s390x"
     },
     "libutempter": {
-      "evra": "1.2.1-7.fc37.s390x"
+      "evra": "1.2.1-8.fc38.s390x"
     },
     "libuuid": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "libuv": {
-      "evra": "1:1.44.2-2.fc37.s390x"
+      "evra": "1:1.44.2-3.fc38.s390x"
     },
     "libverto": {
-      "evra": "0.3.2-4.fc37.s390x"
+      "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.17.7-0.fc37.s390x"
+      "evra": "2:4.18.1-0.fc38.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.33-4.fc37.s390x"
+      "evra": "4.4.33-7.fc38.s390x"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc37.s390x"
+      "evra": "2.10.3-3.fc38.s390x"
     },
     "libyaml": {
-      "evra": "0.2.5-8.fc37.s390x"
+      "evra": "0.2.5-9.fc38.s390x"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc37.s390x"
+      "evra": "1.5.5-1.fc38.s390x"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-33.fc37.s390x"
+      "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc37.s390x"
+      "evra": "0.9.30-1.fc38.s390x"
     },
     "logrotate": {
-      "evra": "3.20.1-3.fc37.s390x"
+      "evra": "3.21.0-2.fc38.s390x"
     },
     "lsof": {
-      "evra": "4.94.0-4.fc37.s390x"
+      "evra": "4.96.3-3.fc38.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc37.s390x"
+      "evra": "5.4.4-9.fc38.s390x"
     },
     "luksmeta": {
-      "evra": "9-14.fc37.s390x"
+      "evra": "9-15.fc38.s390x"
     },
     "lvm2": {
-      "evra": "2.03.11-9.fc37.s390x"
+      "evra": "2.03.18-2.fc38.s390x"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-9.fc37.s390x"
+      "evra": "2.03.18-2.fc38.s390x"
     },
     "lz4-libs": {
-      "evra": "1.9.4-1.fc37.s390x"
+      "evra": "1.9.4-2.fc38.s390x"
     },
     "lzo": {
-      "evra": "2.10-7.fc37.s390x"
+      "evra": "2.10-8.fc38.s390x"
     },
     "mdadm": {
-      "evra": "4.2-2.fc37.s390x"
+      "evra": "4.2-4.fc38.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc37.s390x"
-    },
-    "mozjs102": {
-      "evra": "102.9.0-1.fc37.s390x"
+      "evra": "20.10.23-1.fc38.s390x"
     },
     "mpfr": {
-      "evra": "4.1.0-10.fc37.s390x"
+      "evra": "4.1.1-3.fc38.s390x"
     },
     "nano": {
-      "evra": "6.4-1.fc37.s390x"
+      "evra": "7.2-2.fc38.s390x"
     },
     "nano-default-editor": {
-      "evra": "6.4-1.fc37.noarch"
+      "evra": "7.2-2.fc38.noarch"
     },
     "ncurses": {
-      "evra": "6.3-4.20220501.fc37.s390x"
+      "evra": "6.4-3.20230114.fc38.s390x"
     },
     "ncurses-base": {
-      "evra": "6.3-4.20220501.fc37.noarch"
+      "evra": "6.4-3.20230114.fc38.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-4.20220501.fc37.s390x"
+      "evra": "6.4-3.20230114.fc38.s390x"
     },
     "net-tools": {
-      "evra": "2.0-0.64.20160912git.fc37.s390x"
+      "evra": "2.0-0.65.20160912git.fc38.s390x"
     },
     "netavark": {
-      "evra": "1.5.0-4.fc37.s390x"
+      "evra": "1.6.0-2.fc38.s390x"
     },
     "nettle": {
-      "evra": "3.8-2.fc37.s390x"
+      "evra": "3.8-3.fc38.s390x"
     },
     "newt": {
-      "evra": "0.52.23-1.fc37.s390x"
+      "evra": "0.52.23-2.fc38.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc37.s390x"
+      "evra": "1:2.6.2-2.rc6.fc38.1.s390x"
     },
     "nftables": {
-      "evra": "1:1.0.4-3.fc37.s390x"
+      "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.9-2.fc37.s390x"
+      "evra": "2.2.9-1.fc38.s390x"
     },
     "npth": {
-      "evra": "1.6-9.fc37.s390x"
+      "evra": "1.6-12.fc38.s390x"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-21.fc37.s390x"
+      "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.2.1-1.fc37.s390x"
+      "evra": "2.4-1.fc38.s390x"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.s390x"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc37.s390x"
+      "evra": "2.6.4-1.fc38.s390x"
     },
     "openssh": {
-      "evra": "8.8p1-9.fc37.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssh-clients": {
-      "evra": "8.8p1-9.fc37.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssh-server": {
-      "evra": "8.8p1-9.fc37.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc37.s390x"
+      "evra": "1:3.0.8-2.fc38.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc37.s390x"
+      "evra": "1:3.0.8-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2022.7-2.fc37.s390x"
+      "evra": "2023.1-2.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2022.7-2.fc37.s390x"
+      "evra": "2023.1-2.fc38.s390x"
     },
     "p11-kit": {
-      "evra": "0.24.1-3.fc37.s390x"
+      "evra": "0.24.1-6.fc38.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-3.fc37.s390x"
+      "evra": "0.24.1-6.fc38.s390x"
     },
     "pam": {
-      "evra": "1.5.2-14.fc37.s390x"
+      "evra": "1.5.2-16.fc38.s390x"
     },
     "pam-libs": {
-      "evra": "1.5.2-14.fc37.s390x"
+      "evra": "1.5.2-16.fc38.s390x"
     },
     "passwd": {
-      "evra": "0.80-13.fc37.s390x"
-    },
-    "pcre": {
-      "evra": "8.45-1.fc37.2.s390x"
+      "evra": "0.80-14.fc38.s390x"
     },
     "pcre2": {
-      "evra": "10.40-1.fc37.1.s390x"
+      "evra": "10.42-1.fc38.1.s390x"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc37.1.noarch"
+      "evra": "10.42-1.fc38.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-2.fc37.s390x"
+      "evra": "2.7-3.fc38.s390x"
     },
     "pkgconf": {
-      "evra": "1.8.0-3.fc37.s390x"
+      "evra": "1.8.0-6.fc38.s390x"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-3.fc37.noarch"
+      "evra": "1.8.0-6.fc38.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-3.fc37.s390x"
+      "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.4.4-3.fc37.s390x"
+      "evra": "5:4.5.0-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.4.4-3.fc37.s390x"
+      "evra": "5:4.5.0-1.fc38.s390x"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc37.s390x"
+      "evra": "3.5-1.fc38.s390x"
     },
     "polkit": {
-      "evra": "121-4.fc37.2.s390x"
+      "evra": "122-3.fc38.s390x"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.2.s390x"
+      "evra": "122-3.fc38.s390x"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-22.fc37.s390x"
+      "evra": "0.1-23.fc38.s390x"
     },
     "popt": {
-      "evra": "1.19-1.fc37.s390x"
+      "evra": "1.19-2.fc38.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-6.fc37.2.s390x"
+      "evra": "3.3.17-9.fc38.s390x"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc37.s390x"
+      "evra": "1.4.1-4.fc38.s390x"
     },
     "psmisc": {
-      "evra": "23.4-4.fc37.s390x"
+      "evra": "23.6-2.fc38.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc37.noarch"
+      "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.0.0-15.fc37.s390x"
+      "evra": "2:7.2.0-6.fc38.s390x"
     },
     "readline": {
-      "evra": "8.2-2.fc37.s390x"
+      "evra": "8.2-3.fc38.s390x"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.rc2.fc37.s390x"
+      "evra": "1.2.6-4.rc2.fc38.s390x"
     },
     "rpm": {
-      "evra": "4.18.0-1.fc37.s390x"
+      "evra": "4.18.1-1.fc38.s390x"
     },
     "rpm-libs": {
-      "evra": "4.18.0-1.fc37.s390x"
+      "evra": "4.18.1-1.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc37.s390x"
+      "evra": "2023.2-1.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc37.s390x"
+      "evra": "2023.2-1.fc38.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.0-1.fc37.s390x"
+      "evra": "4.18.1-1.fc38.s390x"
+    },
+    "rpm-sequoia": {
+      "evra": "1.3.0-1.fc38.s390x"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc37.s390x"
+      "evra": "3.2.7-2.fc38.s390x"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc37.s390x"
+      "evra": "2:1.1.4-2.fc38.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.25.0-4.fc37.s390x"
+      "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.7-0.fc37.s390x"
+      "evra": "2:4.18.1-0.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.17.7-0.fc37.noarch"
+      "evra": "2:4.18.1-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.7-0.fc37.s390x"
+      "evra": "2:4.18.1-0.fc38.s390x"
     },
     "sed": {
-      "evra": "4.8-11.fc37.s390x"
+      "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "setup": {
-      "evra": "2.14.1-2.fc37.noarch"
+      "evra": "2.14.3-2.fc38.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-4.fc37.s390x"
+      "evra": "1.46-5.fc38.s390x"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-4.fc37.s390x"
+      "evra": "1.46-5.fc38.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-6.fc37.s390x"
+      "evra": "2:4.13-6.fc38.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-6.fc37.s390x"
+      "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc37.s390x"
+      "evra": "1:1.11.2-1.fc38.s390x"
     },
     "slang": {
-      "evra": "2.3.3-1.fc37.s390x"
+      "evra": "2.3.3-3.fc38.s390x"
     },
     "slirp4netns": {
-      "evra": "1.2.0-8.fc37.s390x"
+      "evra": "1.2.0-12.fc38.s390x"
     },
     "snappy": {
-      "evra": "1.1.9-5.fc37.s390x"
+      "evra": "1.1.9-7.fc38.s390x"
     },
     "socat": {
-      "evra": "1.7.4.2-3.fc37.s390x"
+      "evra": "1.7.4.4-2.fc38.s390x"
     },
     "sqlite-libs": {
-      "evra": "3.40.0-1.fc37.s390x"
+      "evra": "3.40.1-2.fc38.s390x"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-2.fc37.s390x"
+      "evra": "4.5.1-3.fc38.s390x"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc37.s390x"
+      "evra": "0.1.4-3.fc38.s390x"
     },
     "sssd-ad": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-client": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-common": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-1.fc37.s390x"
+      "evra": "2.8.2-4.fc38.s390x"
     },
     "stalld": {
-      "evra": "1.16-2.fc37.s390x"
+      "evra": "1.16-3.fc38.s390x"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc37.s390x"
+      "evra": "1.9.13-1.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "251.14-2.fc37.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "tar": {
-      "evra": "2:1.34-6.fc37.s390x"
+      "evra": "2:1.34-8.fc38.s390x"
     },
     "teamd": {
-      "evra": "1.31-6.fc37.s390x"
+      "evra": "1.31-7.fc38.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc37.s390x"
+      "evra": "0.0.99.4-1.fc38.s390x"
     },
     "tpm2-tools": {
-      "evra": "5.4-1.fc37.s390x"
+      "evra": "5.5-1.fc38.s390x"
     },
     "tpm2-tss": {
-      "evra": "3.2.2-1.fc37.s390x"
+      "evra": "4.0.1-3.fc38.s390x"
     },
     "tzdata": {
-      "evra": "2022g-1.fc37.noarch"
+      "evra": "2023c-1.fc38.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-5.fc37.s390x"
+      "evra": "0.13.2-2.fc38.s390x"
     },
     "util-linux": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "util-linux-core": {
-      "evra": "2.38.1-1.fc37.s390x"
+      "evra": "2.38.1-4.fc38.s390x"
     },
     "veritysetup": {
-      "evra": "2.6.1-1.fc37.s390x"
+      "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc37.s390x"
+      "evra": "2:9.0.1440-1.fc38.s390x"
     },
     "which": {
-      "evra": "2.21-39.fc37.s390x"
+      "evra": "2.21-39.fc38.s390x"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-3.fc37.s390x"
+      "evra": "1.0.20210914-4.fc38.s390x"
     },
     "xfsprogs": {
-      "evra": "6.1.0-2.fc37.s390x"
+      "evra": "6.1.0-3.fc38.s390x"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-3.fc37.s390x"
+      "evra": "0.8.1-4.fc38.s390x"
     },
     "xz": {
-      "evra": "5.4.1-1.fc37.s390x"
+      "evra": "5.4.1-1.fc38.s390x"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc37.s390x"
+      "evra": "5.4.1-1.fc38.s390x"
     },
     "yajl": {
-      "evra": "2.1.0-19.fc37.s390x"
+      "evra": "2.1.0-20.fc38.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc37.s390x"
+      "evra": "1.3.1-1.fc38.s390x"
     },
     "zincati": {
-      "evra": "0.0.25-2.fc37.s390x"
+      "evra": "0.0.25-4.fc38.s390x"
     },
     "zlib": {
-      "evra": "1.2.12-5.fc37.s390x"
+      "evra": "1.2.13-3.fc38.s390x"
     },
     "zram-generator": {
-      "evra": "1.1.2-2.fc37.s390x"
+      "evra": "1.1.2-4.fc38.s390x"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc37.s390x"
+      "evra": "1.5.5-1.fc38.s390x"
     }
   },
   "metadata": {
-    "generated": "2023-04-13T00:00:00Z",
+    "generated": "2023-04-17T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-11-05T08:04:18Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2023-04-08T14:18:50Z"
+        "generated": "2023-04-17T00:29:21Z"
+      },
+      "fedora-next": {
+        "generated": "2023-04-14T09:32:06Z"
       },
-      "fedora-updates": {
-        "generated": "2023-04-13T01:45:26Z"
+      "fedora-next-updates": {
+        "generated": "2023-04-16T01:55:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2608869f98..66deaf7fe5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1274 +1,1271 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.40.10-1.fc37.x86_64"
+      "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.40.10-1.fc37.x86_64"
+      "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.40.10-1.fc37.x86_64"
+      "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.40.10-1.fc37.x86_64"
+      "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.40.10-1.fc37.x86_64"
+      "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-1.fc37.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.5.0-4.fc37.x86_64"
+      "evra": "1.6.0-1.fc38.x86_64"
     },
     "acl": {
-      "evra": "2.3.1-4.fc37.x86_64"
+      "evra": "2.3.1-6.fc38.x86_64"
     },
     "adcli": {
-      "evra": "0.9.1-11.fc37.x86_64"
+      "evra": "0.9.2-2.fc38.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc37.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc37.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "alternatives": {
-      "evra": "1.22-1.fc37.x86_64"
+      "evra": "1.22-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "attr": {
-      "evra": "2.5.1-5.fc37.x86_64"
+      "evra": "2.5.1-6.fc38.x86_64"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc37.x86_64"
+      "evra": "3.1-2.fc38.x86_64"
     },
     "authselect": {
-      "evra": "1.4.2-1.fc37.x86_64"
+      "evra": "1.4.2-2.fc38.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.4.2-1.fc37.x86_64"
+      "evra": "1.4.2-2.fc38.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-18.fc37.x86_64"
+      "evra": "0.8-20.fc38.x86_64"
     },
     "basesystem": {
-      "evra": "11-14.fc37.noarch"
+      "evra": "11-15.fc38.noarch"
     },
     "bash": {
-      "evra": "5.2.15-1.fc37.x86_64"
+      "evra": "5.2.15-3.fc38.x86_64"
     },
     "bash-completion": {
-      "evra": "1:2.11-8.fc37.noarch"
+      "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc37.x86_64"
+      "evra": "32:9.18.13-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc37.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc37.x86_64"
+      "evra": "32:9.18.13-1.fc38.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.8-3.fc37.x86_64"
+      "evra": "0.2.9-1.fc38.x86_64"
     },
     "bsdtar": {
-      "evra": "3.6.1-3.fc37.x86_64"
+      "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc37.x86_64"
+      "evra": "6.2.2-1.fc38.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.5.0-3.fc37.x86_64"
+      "evra": "0.7.0-1.fc38.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-12.fc37.x86_64"
+      "evra": "1.0.8-13.fc38.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-12.fc37.x86_64"
+      "evra": "1.0.8-13.fc38.x86_64"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc37.x86_64"
+      "evra": "1.19.0-1.fc38.x86_64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-1.0.fc37.noarch"
+      "evra": "2023.2.60-2.fc38.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-10.fc37.x86_64"
+      "evra": "0.1.7-14.fc38.x86_64"
     },
     "chrony": {
-      "evra": "4.3-1.fc37.x86_64"
+      "evra": "4.3-3.fc38.x86_64"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc37.x86_64"
+      "evra": "7.0-1.fc38.x86_64"
     },
     "clevis": {
-      "evra": "19-2.fc37.x86_64"
+      "evra": "19-2.fc38.x86_64"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc37.x86_64"
+      "evra": "19-2.fc38.x86_64"
     },
     "clevis-luks": {
-      "evra": "19-2.fc37.x86_64"
+      "evra": "19-2.fc38.x86_64"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc37.x86_64"
+      "evra": "19-2.fc38.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-11.fc37.noarch"
+      "evra": "0.31-12.fc38.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc37.x86_64"
+      "evra": "2:2.1.7-2.fc38.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-3.fc37.noarch"
+      "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc37.noarch"
+      "evra": "2:2.209.0-1.fc38.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc37.x86_64"
+      "evra": "1.6.19-1.fc38.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc37.x86_64"
+      "evra": "1.1.1-16.fc38.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-80.fc37.noarch"
+      "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc37.x86_64"
+      "evra": "0.17.0-1.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc37.x86_64"
+      "evra": "0.17.0-1.fc38.x86_64"
     },
     "coreutils": {
-      "evra": "9.1-7.fc37.x86_64"
+      "evra": "9.1-11.fc38.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.1-7.fc37.x86_64"
+      "evra": "9.1-11.fc38.x86_64"
     },
     "cpio": {
-      "evra": "2.13-13.fc37.x86_64"
+      "evra": "2.13-14.fc38.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.7-30.fc37.x86_64"
+      "evra": "2.9.7-31.fc38.x86_64"
     },
     "criu": {
-      "evra": "3.17.1-3.fc37.x86_64"
+      "evra": "3.17.1-5.fc38.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17.1-3.fc37.x86_64"
+      "evra": "3.17.1-5.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.3-2.fc37.x86_64"
+      "evra": "1.8.3-2.fc38.x86_64"
     },
     "crypto-policies": {
-      "evra": "20220815-1.gite4ed860.fc37.noarch"
+      "evra": "20230301-1.gita12f7b2.fc38.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc37.x86_64"
+      "evra": "2.6.1-1.fc38.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc37.x86_64"
+      "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "7.85.0-8.fc37.x86_64"
+      "evra": "7.87.0-7.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-8.fc37.x86_64"
+      "evra": "2.1.28-9.fc38.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-8.fc37.x86_64"
+      "evra": "2.1.28-9.fc38.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc37.x86_64"
+      "evra": "1:1.14.6-1.fc38.x86_64"
     },
     "dbus-broker": {
-      "evra": "33-1.fc37.x86_64"
+      "evra": "33-1.fc38.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc37.noarch"
+      "evra": "1:1.14.6-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc37.x86_64"
+      "evra": "1:1.14.6-1.fc38.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.175-9.fc37.x86_64"
+      "evra": "1.02.189-2.fc38.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.175-9.fc37.x86_64"
+      "evra": "1.02.189-2.fc38.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.175-9.fc37.x86_64"
+      "evra": "1.02.189-2.fc38.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.175-9.fc37.x86_64"
+      "evra": "1.02.189-2.fc38.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.0-4.fc37.x86_64"
+      "evra": "0.9.4-2.fc38.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.0-4.fc37.x86_64"
+      "evra": "0.9.4-2.fc38.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-8.fc37.x86_64"
+      "evra": "0.9.0-10.fc38.x86_64"
     },
     "diffutils": {
-      "evra": "3.8-3.fc37.x86_64"
+      "evra": "3.9-1.fc38.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc37.x86_64"
+      "evra": "2.89-1.fc38.x86_64"
     },
     "dosfstools": {
-      "evra": "4.2-4.fc37.x86_64"
+      "evra": "4.2-6.fc38.x86_64"
     },
     "dracut": {
-      "evra": "059-1.fc37.x86_64"
+      "evra": "059-2.fc38.x86_64"
     },
     "dracut-network": {
-      "evra": "059-1.fc37.x86_64"
+      "evra": "059-2.fc38.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-1.fc37.x86_64"
+      "evra": "059-2.fc38.x86_64"
+    },
+    "duktape": {
+      "evra": "2.7.0-2.fc38.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-3.fc37.x86_64"
+      "evra": "1.46.5-4.fc38.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-3.fc37.x86_64"
+      "evra": "1.46.5-4.fc38.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-6.fc37.noarch"
+      "evra": "5-7.fc38.noarch"
     },
     "efibootmgr": {
-      "evra": "18-2.fc37.x86_64"
+      "evra": "18-3.fc38.x86_64"
     },
     "efivar-libs": {
-      "evra": "38-6.fc37.x86_64"
+      "evra": "38-7.fc38.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc37.noarch"
+      "evra": "0.189-1.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc37.x86_64"
+      "evra": "0.189-1.fc38.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc37.x86_64"
+      "evra": "0.189-1.fc38.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc37.x86_64"
+      "evra": "2:6.2-1.fc38.x86_64"
     },
     "expat": {
-      "evra": "2.5.0-1.fc37.x86_64"
+      "evra": "2.5.0-2.fc38.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "37-16.noarch"
+      "evra": "38-34.noarch"
     },
     "fedora-repos": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-modular": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "37-2.noarch"
+      "evra": "38-1.noarch"
     },
     "file": {
-      "evra": "5.42-4.fc37.x86_64"
+      "evra": "5.44-3.fc38.x86_64"
     },
     "file-libs": {
-      "evra": "5.42-4.fc37.x86_64"
+      "evra": "5.44-3.fc38.x86_64"
     },
     "filesystem": {
-      "evra": "3.18-2.fc37.x86_64"
+      "evra": "3.18-3.fc38.x86_64"
     },
     "findutils": {
-      "evra": "1:4.9.0-2.fc37.x86_64"
+      "evra": "1:4.9.0-3.fc38.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.14.4-1.fc37.x86_64"
+      "evra": "1.15.4-1.fc38.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-5.fc37.x86_64"
+      "evra": "0.6.1-6.fc38.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-15.fc37.x86_64"
+      "evra": "2.9.9-16.fc38.x86_64"
     },
     "fuse-common": {
-      "evra": "3.10.5-5.fc37.x86_64"
+      "evra": "3.13.1-2.fc38.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-15.fc37.x86_64"
+      "evra": "2.9.9-16.fc38.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.9-6.fc37.x86_64"
+      "evra": "1.10-3.fc38.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-2.fc37.x86_64"
+      "evra": "3.7.3-3.fc38.x86_64"
     },
     "fuse3": {
-      "evra": "3.10.5-5.fc37.x86_64"
+      "evra": "3.13.1-2.fc38.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.10.5-5.fc37.x86_64"
+      "evra": "3.13.1-2.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc37.x86_64"
+      "evra": "1.8.14-1.fc38.x86_64"
     },
     "gawk": {
-      "evra": "5.1.1-4.fc37.x86_64"
+      "evra": "5.1.1-5.fc38.x86_64"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-2.fc37.x86_64"
+      "evra": "1:1.23-3.fc38.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.9-4.fc37.x86_64"
+      "evra": "1.0.9-5.fc38.x86_64"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-1.fc37.x86_64"
+      "evra": "0.21.1-2.fc38.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21.1-1.fc37.x86_64"
+      "evra": "0.21.1-2.fc38.x86_64"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-1.fc37.x86_64"
+      "evra": "0.21.1-2.fc38.x86_64"
     },
     "git-core": {
-      "evra": "2.39.2-1.fc37.x86_64"
+      "evra": "2.40.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.74.6-1.fc37.x86_64"
+      "evra": "2.76.1-1.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.36-9.fc37.x86_64"
+      "evra": "2.37-1.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.36-9.fc37.x86_64"
+      "evra": "2.37-1.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.36-9.fc37.x86_64"
+      "evra": "2.37-1.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.36-9.fc37.x86_64"
+      "evra": "2.37-1.fc38.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.1-3.fc37.x86_64"
+      "evra": "1:6.2.1-4.fc38.x86_64"
     },
     "gnupg2": {
-      "evra": "2.3.8-1.fc37.x86_64"
+      "evra": "2.4.0-3.fc38.x86_64"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc37.x86_64"
+      "evra": "3.8.0-2.fc38.x86_64"
     },
     "gpgme": {
-      "evra": "1.17.0-4.fc37.x86_64"
+      "evra": "1.17.1-3.fc38.x86_64"
     },
     "grep": {
-      "evra": "3.7-4.fc37.x86_64"
+      "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-94.fc37.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-94.fc37.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-94.fc37.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-94.fc37.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-94.fc37.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-94.fc37.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "gzip": {
-      "evra": "1.12-2.fc37.x86_64"
+      "evra": "1.12-3.fc38.x86_64"
     },
     "hostname": {
-      "evra": "3.23-7.fc37.x86_64"
+      "evra": "3.23-8.fc38.x86_64"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc37.x86_64"
+      "evra": "2.15.0-3.fc38.x86_64"
     },
     "inih": {
-      "evra": "56-2.fc37.x86_64"
+      "evra": "56-3.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "iproute": {
-      "evra": "5.18.0-2.fc37.x86_64"
+      "evra": "6.1.0-1.fc38.x86_64"
     },
     "iproute-tc": {
-      "evra": "5.18.0-2.fc37.x86_64"
+      "evra": "6.1.0-1.fc38.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.8-4.fc37.x86_64"
+      "evra": "1.8.9-2.fc38.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.8-4.fc37.x86_64"
+      "evra": "1.8.9-2.fc38.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.8-4.fc37.x86_64"
+      "evra": "1.8.9-2.fc38.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.8-4.fc37.x86_64"
+      "evra": "1.8.9-2.fc38.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.8-4.fc37.noarch"
+      "evra": "1.8.9-2.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.8-4.fc37.x86_64"
+      "evra": "1.8.9-2.fc38.x86_64"
     },
     "iputils": {
-      "evra": "20221126-1.fc37.x86_64"
+      "evra": "20221126-2.fc38.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-1.fc37.x86_64"
+      "evra": "2:1.9.1-2.fc38.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.x86_64"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-6.git2a8f9d8.fc37.x86_64"
+      "evra": "6.2.1.4-10.git2a8f9d8.fc38.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-5.fc37.x86_64"
+      "evra": "0.101-6.fc38.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-5.fc37.x86_64"
+      "evra": "2.13.1-6.fc38.x86_64"
     },
     "jemalloc": {
-      "evra": "5.3.0-2.fc37.x86_64"
+      "evra": "5.3.0-3.fc38.x86_64"
     },
     "jose": {
-      "evra": "11-6.fc37.x86_64"
+      "evra": "11-7.fc38.x86_64"
     },
     "jq": {
-      "evra": "1.6-14.fc37.x86_64"
+      "evra": "1.6-15.fc38.x86_64"
     },
     "json-c": {
-      "evra": "0.16-3.fc37.x86_64"
+      "evra": "0.16-4.fc38.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.6-3.fc37.x86_64"
+      "evra": "1.6.6-4.fc38.x86_64"
     },
     "kbd": {
-      "evra": "2.5.1-3.fc37.x86_64"
+      "evra": "2.5.1-5.fc38.x86_64"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-3.fc37.noarch"
+      "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.9-200.fc37.x86_64"
+      "evra": "6.2.11-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.9-200.fc37.x86_64"
+      "evra": "6.2.11-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.9-200.fc37.x86_64"
+      "evra": "6.2.11-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.9-200.fc37.x86_64"
+      "evra": "6.2.11-300.fc38.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.25-1.fc37.x86_64"
+      "evra": "2.0.26-3.fc38.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-5.fc37.x86_64"
+      "evra": "1.6.1-6.fc38.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-5.fc37.x86_64"
+      "evra": "1.6.1-6.fc38.x86_64"
     },
     "kmod": {
-      "evra": "30-2.fc37.x86_64"
+      "evra": "30-4.fc38.x86_64"
     },
     "kmod-libs": {
-      "evra": "30-2.fc37.x86_64"
+      "evra": "30-4.fc38.x86_64"
     },
     "kpartx": {
-      "evra": "0.9.0-4.fc37.x86_64"
+      "evra": "0.9.4-2.fc38.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.19.2-13.fc37.x86_64"
+      "evra": "1.20.1-8.fc38.x86_64"
     },
     "less": {
-      "evra": "590-5.fc37.x86_64"
+      "evra": "608-2.fc38.x86_64"
     },
     "libacl": {
-      "evra": "2.3.1-4.fc37.x86_64"
+      "evra": "2.3.1-6.fc38.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-14.fc37.x86_64"
+      "evra": "0.3.111-15.fc38.x86_64"
     },
     "libarchive": {
-      "evra": "3.6.1-3.fc37.x86_64"
+      "evra": "3.6.1-4.fc38.x86_64"
     },
     "libargon2": {
-      "evra": "20190702-1.fc37.x86_64"
+      "evra": "20190702-2.fc38.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.5-5.fc37.x86_64"
+      "evra": "2.5.5-6.fc38.x86_64"
     },
     "libattr": {
-      "evra": "2.5.1-5.fc37.x86_64"
+      "evra": "2.5.1-6.fc38.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-52.fc37.x86_64"
+      "evra": "0.1.1-53.fc38.x86_64"
     },
     "libblkid": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "libbpf": {
-      "evra": "2:0.8.0-2.fc37.x86_64"
+      "evra": "2:1.1.0-2.fc38.x86_64"
     },
     "libbsd": {
-      "evra": "0.11.7-2.fc37.x86_64"
+      "evra": "0.11.7-4.fc38.x86_64"
     },
     "libcap": {
-      "evra": "2.48-5.fc37.x86_64"
+      "evra": "2.48-6.fc38.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-3.fc37.x86_64"
+      "evra": "0.8.3-5.fc38.x86_64"
     },
     "libcbor": {
-      "evra": "0.7.0-7.fc37.x86_64"
+      "evra": "0.7.0-9.fc38.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-52.fc37.x86_64"
+      "evra": "0.7.0-53.fc38.x86_64"
     },
     "libcom_err": {
-      "evra": "1.46.5-3.fc37.x86_64"
+      "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.85.0-8.fc37.x86_64"
+      "evra": "7.87.0-7.fc38.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-24.fc37.x86_64"
+      "evra": "0.14-25.fc38.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-53.fc37.x86_64"
+      "evra": "5.3.28-55.fc38.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-52.fc37.x86_64"
+      "evra": "0.5.0-53.fc38.x86_64"
     },
     "libeconf": {
-      "evra": "0.4.0-4.fc37.x86_64"
+      "evra": "0.4.0-5.fc38.x86_64"
     },
     "libedit": {
-      "evra": "3.1-43.20221009cvs.fc37.x86_64"
+      "evra": "3.1-45.20221030cvs.fc38.x86_64"
     },
     "libevent": {
-      "evra": "2.1.12-7.fc37.x86_64"
+      "evra": "2.1.12-8.fc38.x86_64"
     },
     "libfdisk": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "libffi": {
-      "evra": "3.4.4-1.fc37.x86_64"
+      "evra": "3.4.4-2.fc38.x86_64"
     },
     "libfido2": {
-      "evra": "1.11.0-3.fc37.x86_64"
+      "evra": "1.12.0-3.fc38.x86_64"
     },
     "libgcab1": {
-      "evra": "1.5-1.fc37.x86_64"
+      "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "12.2.1-4.fc37.x86_64"
+      "evra": "13.0.1-0.12.fc38.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-4.fc37.x86_64"
+      "evra": "1.10.1-7.fc38.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.46-1.fc37.x86_64"
+      "evra": "1.46-2.fc38.x86_64"
     },
     "libgudev": {
-      "evra": "237-3.fc37.x86_64"
+      "evra": "237-4.fc38.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc37.x86_64"
+      "evra": "0.4.5-1.fc38.x86_64"
     },
     "libibverbs": {
-      "evra": "41.0-1.fc37.x86_64"
+      "evra": "44.0-3.fc38.x86_64"
     },
     "libicu": {
-      "evra": "71.1-2.fc37.x86_64"
+      "evra": "72.1-2.fc38.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.4-1.fc37.x86_64"
+      "evra": "2.3.4-2.fc38.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-52.fc37.x86_64"
+      "evra": "1.3.1-53.fc38.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc37.x86_64"
+      "evra": "0.1.13-1.fc38.x86_64"
     },
     "libjose": {
-      "evra": "11-6.fc37.x86_64"
+      "evra": "11-7.fc38.x86_64"
     },
     "libkcapi": {
-      "evra": "1.4.0-2.fc37.x86_64"
+      "evra": "1.4.0-5.fc38.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-2.fc37.x86_64"
+      "evra": "1.4.0-5.fc38.x86_64"
     },
     "libksba": {
-      "evra": "1.6.3-1.fc37.x86_64"
+      "evra": "1.6.3-2.fc38.x86_64"
     },
     "libldb": {
-      "evra": "2.6.2-1.fc37.x86_64"
+      "evra": "2.7.2-1.fc38.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-14.fc37.x86_64"
+      "evra": "9-15.fc38.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-1.fc37.x86_64"
+      "evra": "1.7.1-2.fc38.x86_64"
     },
     "libmd": {
-      "evra": "1.0.4-2.fc37.x86_64"
+      "evra": "1.0.4-3.fc38.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.5-1.fc37.x86_64"
+      "evra": "1.0.5-2.fc38.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-4.fc37.x86_64"
+      "evra": "2.14.0-5.fc38.x86_64"
     },
     "libmount": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "libndp": {
-      "evra": "1.8-4.fc37.x86_64"
+      "evra": "1.8-5.fc38.x86_64"
     },
     "libnet": {
-      "evra": "1.2-6.fc37.x86_64"
+      "evra": "1.2-7.fc38.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-5.fc37.x86_64"
+      "evra": "1.0.8-7.fc38.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-22.fc37.x86_64"
+      "evra": "1.0.1-23.fc38.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc6.fc38.1.x86_64"
     },
     "libnftnl": {
-      "evra": "1.2.2-2.fc37.x86_64"
+      "evra": "1.2.4-2.fc38.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.51.0-1.fc37.x86_64"
+      "evra": "1.52.0-1.fc38.x86_64"
     },
     "libnl3": {
-      "evra": "3.7.0-2.fc37.x86_64"
+      "evra": "3.7.0-3.fc38.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-2.fc37.x86_64"
+      "evra": "3.7.0-3.fc38.x86_64"
     },
     "libnsl2": {
-      "evra": "2.0.0-4.fc37.x86_64"
+      "evra": "2.0.0-5.fc38.x86_64"
     },
     "libnvme": {
-      "evra": "1.2-1.fc37.x86_64"
+      "evra": "1.4-1.fc38.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-52.fc37.x86_64"
+      "evra": "0.2.1-53.fc38.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.3-1.fc37.x86_64"
+      "evra": "14:1.10.3-2.fc38.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-3.fc37.x86_64"
+      "evra": "1.8.0-6.fc38.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.1-6.fc37.x86_64"
+      "evra": "0.21.2-2.fc38.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc37.x86_64"
+      "evra": "1.4.5-3.fc38.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-52.fc37.x86_64"
+      "evra": "0.1.5-53.fc38.x86_64"
     },
     "librepo": {
-      "evra": "1.15.1-1.fc37.x86_64"
+      "evra": "1.15.1-2.fc38.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.4-1.fc37.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-3.fc37.x86_64"
+      "evra": "2.5.3-4.fc38.x86_64"
     },
     "libselinux": {
-      "evra": "3.5-1.fc37.x86_64"
+      "evra": "3.5-1.fc38.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc37.x86_64"
+      "evra": "3.5-1.fc38.x86_64"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc37.x86_64"
+      "evra": "3.5-2.fc38.x86_64"
     },
     "libsepol": {
-      "evra": "3.5-1.fc37.x86_64"
+      "evra": "3.5-1.fc38.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.14-3.fc37.x86_64"
+      "evra": "2.14-4.fc38.x86_64"
     },
     "libslirp": {
-      "evra": "4.7.0-2.fc37.x86_64"
+      "evra": "4.7.0-3.fc38.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.17.7-0.fc37.x86_64"
-    },
-    "libsmbios": {
-      "evra": "2.4.3-7.fc37.x86_64"
+      "evra": "2:4.18.1-0.fc38.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.22-3.fc37.x86_64"
+      "evra": "0.7.22-4.fc38.x86_64"
     },
     "libss": {
-      "evra": "1.46.5-3.fc37.x86_64"
+      "evra": "1.46.5-4.fc38.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "12.2.1-4.fc37.x86_64"
+      "evra": "13.0.1-0.12.fc38.x86_64"
     },
     "libtalloc": {
-      "evra": "2.3.4-3.fc37.x86_64"
+      "evra": "2.4.0-2.fc38.x86_64"
     },
     "libtasn1": {
-      "evra": "4.19.0-1.fc37.x86_64"
+      "evra": "4.19.0-2.fc38.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.7-3.fc37.x86_64"
+      "evra": "1.4.8-1.fc38.x86_64"
     },
     "libteam": {
-      "evra": "1.31-6.fc37.x86_64"
+      "evra": "1.31-7.fc38.x86_64"
     },
     "libtevent": {
-      "evra": "0.13.0-1.fc37.x86_64"
+      "evra": "0.14.1-1.fc38.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.3-0.fc37.x86_64"
+      "evra": "1.3.3-1.fc38.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-2.fc37.x86_64"
+      "evra": "2.4.7-6.fc38.x86_64"
     },
     "libunistring": {
-      "evra": "1.0-2.fc37.x86_64"
+      "evra": "1.1-3.fc38.x86_64"
+    },
+    "libunistring1.0": {
+      "evra": "1.0-1.fc38.x86_64"
     },
     "libusb1": {
-      "evra": "1.0.25-9.fc37.x86_64"
+      "evra": "1.0.26-2.fc38.x86_64"
     },
     "libuser": {
-      "evra": "0.63-13.fc37.x86_64"
+      "evra": "0.64-2.fc38.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-7.fc37.x86_64"
+      "evra": "1.2.1-8.fc38.x86_64"
     },
     "libuuid": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "libuv": {
-      "evra": "1:1.44.2-2.fc37.x86_64"
+      "evra": "1:1.44.2-3.fc38.x86_64"
     },
     "libverto": {
-      "evra": "0.3.2-4.fc37.x86_64"
+      "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.17.7-0.fc37.x86_64"
+      "evra": "2:4.18.1-0.fc38.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-4.fc37.x86_64"
+      "evra": "4.4.33-7.fc38.x86_64"
     },
     "libxml2": {
-      "evra": "2.10.3-2.fc37.x86_64"
+      "evra": "2.10.3-3.fc38.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc37.x86_64"
+      "evra": "0.3.11-1.fc38.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-8.fc37.x86_64"
+      "evra": "0.2.5-9.fc38.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc37.x86_64"
+      "evra": "1.5.5-1.fc38.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-33.fc37.x86_64"
+      "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc37.x86_64"
+      "evra": "0.9.30-1.fc38.x86_64"
     },
     "logrotate": {
-      "evra": "3.20.1-3.fc37.x86_64"
+      "evra": "3.21.0-2.fc38.x86_64"
     },
     "lsof": {
-      "evra": "4.94.0-4.fc37.x86_64"
+      "evra": "4.96.3-3.fc38.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc37.x86_64"
+      "evra": "5.4.4-9.fc38.x86_64"
     },
     "luksmeta": {
-      "evra": "9-14.fc37.x86_64"
+      "evra": "9-15.fc38.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.11-9.fc37.x86_64"
+      "evra": "2.03.18-2.fc38.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.11-9.fc37.x86_64"
+      "evra": "2.03.18-2.fc38.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.4-1.fc37.x86_64"
+      "evra": "1.9.4-2.fc38.x86_64"
     },
     "lzo": {
-      "evra": "2.10-7.fc37.x86_64"
+      "evra": "2.10-8.fc38.x86_64"
     },
     "mdadm": {
-      "evra": "4.2-2.fc37.x86_64"
+      "evra": "4.2-4.fc38.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-53.fc37.x86_64"
+      "evra": "2:2.1-54.fc38.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc37.x86_64"
+      "evra": "20.10.23-1.fc38.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-5.fc37.x86_64"
-    },
-    "mozjs102": {
-      "evra": "102.9.0-1.fc37.x86_64"
+      "evra": "2:0.6.0-6.fc38.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.0-10.fc37.x86_64"
+      "evra": "4.1.1-3.fc38.x86_64"
     },
     "nano": {
-      "evra": "6.4-1.fc37.x86_64"
+      "evra": "7.2-2.fc38.x86_64"
     },
     "nano-default-editor": {
-      "evra": "6.4-1.fc37.noarch"
+      "evra": "7.2-2.fc38.noarch"
     },
     "ncurses": {
-      "evra": "6.3-4.20220501.fc37.x86_64"
+      "evra": "6.4-3.20230114.fc38.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.3-4.20220501.fc37.noarch"
+      "evra": "6.4-3.20230114.fc38.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.3-4.20220501.fc37.x86_64"
+      "evra": "6.4-3.20230114.fc38.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.64.20160912git.fc37.x86_64"
+      "evra": "2.0-0.65.20160912git.fc38.x86_64"
     },
     "netavark": {
-      "evra": "1.5.0-4.fc37.x86_64"
+      "evra": "1.6.0-2.fc38.x86_64"
     },
     "nettle": {
-      "evra": "3.8-2.fc37.x86_64"
+      "evra": "3.8-3.fc38.x86_64"
     },
     "newt": {
-      "evra": "0.52.23-1.fc37.x86_64"
+      "evra": "0.52.23-2.fc38.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc37.x86_64"
+      "evra": "1:2.6.2-2.rc6.fc38.1.x86_64"
     },
     "nftables": {
-      "evra": "1:1.0.4-3.fc37.x86_64"
+      "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.9-2.fc37.x86_64"
+      "evra": "2.2.9-1.fc38.x86_64"
     },
     "npth": {
-      "evra": "1.6-9.fc37.x86_64"
+      "evra": "1.6-12.fc38.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-21.fc37.x86_64"
+      "evra": "2.18.1-22.fc38.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.14-6.fc37.x86_64"
+      "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc37.noarch"
+      "evra": "20230310-148.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.2.1-1.fc37.x86_64"
+      "evra": "2.4-1.fc38.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc37.x86_64"
+      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc37.x86_64"
+      "evra": "2.6.4-1.fc38.x86_64"
     },
     "openssh": {
-      "evra": "8.8p1-9.fc37.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssh-clients": {
-      "evra": "8.8p1-9.fc37.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssh-server": {
-      "evra": "8.8p1-9.fc37.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc37.x86_64"
+      "evra": "1:3.0.8-2.fc38.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc37.x86_64"
+      "evra": "1:3.0.8-2.fc38.x86_64"
     },
     "os-prober": {
-      "evra": "1.81-1.fc37.x86_64"
+      "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2022.7-2.fc37.x86_64"
+      "evra": "2023.1-2.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2022.7-2.fc37.x86_64"
+      "evra": "2023.1-2.fc38.x86_64"
     },
     "p11-kit": {
-      "evra": "0.24.1-3.fc37.x86_64"
+      "evra": "0.24.1-6.fc38.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-3.fc37.x86_64"
+      "evra": "0.24.1-6.fc38.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-14.fc37.x86_64"
+      "evra": "1.5.2-16.fc38.x86_64"
     },
     "pam-libs": {
-      "evra": "1.5.2-14.fc37.x86_64"
+      "evra": "1.5.2-16.fc38.x86_64"
     },
     "passwd": {
-      "evra": "0.80-13.fc37.x86_64"
-    },
-    "pcre": {
-      "evra": "8.45-1.fc37.2.x86_64"
+      "evra": "0.80-14.fc38.x86_64"
     },
     "pcre2": {
-      "evra": "10.40-1.fc37.1.x86_64"
+      "evra": "10.42-1.fc38.1.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.40-1.fc37.1.noarch"
+      "evra": "10.42-1.fc38.1.noarch"
     },
     "pigz": {
-      "evra": "2.7-2.fc37.x86_64"
+      "evra": "2.7-3.fc38.x86_64"
     },
     "pkgconf": {
-      "evra": "1.8.0-3.fc37.x86_64"
+      "evra": "1.8.0-6.fc38.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-3.fc37.noarch"
+      "evra": "1.8.0-6.fc38.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-3.fc37.x86_64"
+      "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.4.4-3.fc37.x86_64"
+      "evra": "5:4.5.0-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.4.4-3.fc37.x86_64"
+      "evra": "5:4.5.0-1.fc38.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc37.x86_64"
+      "evra": "3.5-1.fc38.x86_64"
     },
     "polkit": {
-      "evra": "121-4.fc37.2.x86_64"
+      "evra": "122-3.fc38.x86_64"
     },
     "polkit-libs": {
-      "evra": "121-4.fc37.2.x86_64"
+      "evra": "122-3.fc38.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-22.fc37.x86_64"
+      "evra": "0.1-23.fc38.x86_64"
     },
     "popt": {
-      "evra": "1.19-1.fc37.x86_64"
+      "evra": "1.19-2.fc38.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-6.fc37.2.x86_64"
+      "evra": "3.3.17-9.fc38.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-2.fc37.x86_64"
+      "evra": "1.4.1-4.fc38.x86_64"
     },
     "psmisc": {
-      "evra": "23.4-4.fc37.x86_64"
+      "evra": "23.6-2.fc38.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc37.noarch"
+      "evra": "20230318-1.fc38.noarch"
     },
     "readline": {
-      "evra": "8.2-2.fc37.x86_64"
+      "evra": "8.2-3.fc38.x86_64"
     },
     "rpcbind": {
-      "evra": "1.2.6-3.rc2.fc37.x86_64"
+      "evra": "1.2.6-4.rc2.fc38.x86_64"
     },
     "rpm": {
-      "evra": "4.18.0-1.fc37.x86_64"
+      "evra": "4.18.1-1.fc38.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.18.0-1.fc37.x86_64"
+      "evra": "4.18.1-1.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc37.x86_64"
+      "evra": "2023.2-1.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc37.x86_64"
+      "evra": "2023.2-1.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.0-1.fc37.x86_64"
+      "evra": "4.18.1-1.fc38.x86_64"
+    },
+    "rpm-sequoia": {
+      "evra": "1.3.0-1.fc38.x86_64"
     },
     "rsync": {
-      "evra": "3.2.7-1.fc37.x86_64"
+      "evra": "3.2.7-2.fc38.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.4-1.fc37.x86_64"
+      "evra": "2:1.1.4-2.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.17.7-0.fc37.x86_64"
+      "evra": "2:4.18.1-0.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.17.7-0.fc37.noarch"
+      "evra": "2:4.18.1-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.17.7-0.fc37.x86_64"
+      "evra": "2:4.18.1-0.fc38.x86_64"
     },
     "sed": {
-      "evra": "4.8-11.fc37.x86_64"
+      "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "37.19-1.fc37.noarch"
+      "evra": "38.10-1.fc38.noarch"
     },
     "setup": {
-      "evra": "2.14.1-2.fc37.noarch"
+      "evra": "2.14.3-2.fc38.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-4.fc37.x86_64"
+      "evra": "1.46-5.fc38.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-4.fc37.x86_64"
+      "evra": "1.46-5.fc38.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.12.3-6.fc37.x86_64"
+      "evra": "2:4.13-6.fc38.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.12.3-6.fc37.x86_64"
+      "evra": "2:4.13-6.fc38.x86_64"
     },
     "shared-mime-info": {
-      "evra": "2.2-2.fc37.x86_64"
+      "evra": "2.2-3.fc38.x86_64"
     },
     "shim-x64": {
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc37.x86_64"
+      "evra": "1:1.11.2-1.fc38.x86_64"
     },
     "slang": {
-      "evra": "2.3.3-1.fc37.x86_64"
+      "evra": "2.3.3-3.fc38.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-8.fc37.x86_64"
+      "evra": "1.2.0-12.fc38.x86_64"
     },
     "snappy": {
-      "evra": "1.1.9-5.fc37.x86_64"
+      "evra": "1.1.9-7.fc38.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.2-3.fc37.x86_64"
+      "evra": "1.7.4.4-2.fc38.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.40.0-1.fc37.x86_64"
+      "evra": "3.40.1-2.fc38.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-2.fc37.x86_64"
+      "evra": "4.5.1-3.fc38.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-1.fc37.x86_64"
+      "evra": "0.1.4-3.fc38.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-client": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-common": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-1.fc37.x86_64"
+      "evra": "2.8.2-4.fc38.x86_64"
     },
     "stalld": {
-      "evra": "1.16-2.fc37.x86_64"
+      "evra": "1.16-3.fc38.x86_64"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc37.x86_64"
+      "evra": "1.9.13-1.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "251.14-2.fc37.x86_64"
-    },
-    "systemd-boot-unsigned": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "251.14-2.fc37.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-6.fc37.x86_64"
+      "evra": "2:1.34-8.fc38.x86_64"
     },
     "teamd": {
-      "evra": "1.31-6.fc37.x86_64"
+      "evra": "1.31-7.fc38.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc37.x86_64"
+      "evra": "0.0.99.4-1.fc38.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.4-1.fc37.x86_64"
+      "evra": "5.5-1.fc38.x86_64"
     },
     "tpm2-tss": {
-      "evra": "3.2.2-1.fc37.x86_64"
+      "evra": "4.0.1-3.fc38.x86_64"
     },
     "tzdata": {
-      "evra": "2022g-1.fc37.noarch"
+      "evra": "2023c-1.fc38.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.0-5.fc37.x86_64"
+      "evra": "0.13.2-2.fc38.x86_64"
     },
     "util-linux": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.38.1-1.fc37.x86_64"
+      "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc37.noarch"
+      "evra": "2:9.0.1440-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc37.x86_64"
+      "evra": "2:9.0.1440-1.fc38.x86_64"
     },
     "which": {
-      "evra": "2.21-39.fc37.x86_64"
+      "evra": "2.21-39.fc38.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-3.fc37.x86_64"
+      "evra": "1.0.20210914-4.fc38.x86_64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-2.fc37.x86_64"
+      "evra": "6.1.0-3.fc38.x86_64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-3.fc37.x86_64"
+      "evra": "0.8.1-4.fc38.x86_64"
     },
     "xz": {
-      "evra": "5.4.1-1.fc37.x86_64"
+      "evra": "5.4.1-1.fc38.x86_64"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc37.x86_64"
+      "evra": "5.4.1-1.fc38.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-19.fc37.x86_64"
+      "evra": "2.1.0-20.fc38.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc37.x86_64"
+      "evra": "1.3.1-1.fc38.x86_64"
     },
     "zincati": {
-      "evra": "0.0.25-2.fc37.x86_64"
+      "evra": "0.0.25-4.fc38.x86_64"
     },
     "zlib": {
-      "evra": "1.2.12-5.fc37.x86_64"
+      "evra": "1.2.13-3.fc38.x86_64"
     },
     "zram-generator": {
-      "evra": "1.1.2-2.fc37.x86_64"
+      "evra": "1.1.2-4.fc38.x86_64"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc37.x86_64"
+      "evra": "1.5.5-1.fc38.x86_64"
     }
   },
   "metadata": {
-    "generated": "2023-04-13T00:00:00Z",
+    "generated": "2023-04-17T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2022-11-05T08:04:38Z"
-      },
       "fedora-coreos-pool": {
-        "generated": "2023-04-08T14:19:57Z"
+        "generated": "2023-04-17T00:31:40Z"
+      },
+      "fedora-next": {
+        "generated": "2023-04-14T09:32:40Z"
       },
-      "fedora-updates": {
-        "generated": "2023-04-13T01:45:33Z"
+      "fedora-next-updates": {
+        "generated": "2023-04-16T01:55:16Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index c2e29317e0..c3f59ab5dd 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -2,7 +2,7 @@ variables:
   stream: testing-devel
   prod: false
 
-releasever: 37
+releasever: 38
 
 repos:
   # These repos are there to make it easier to add new packages to the OS and to

From 64fc77dd34ae07e22292bbd2135c180383e39c0d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 18 Apr 2023 19:21:24 +0000
Subject: [PATCH 1578/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/531/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 63 insertions(+), 63 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 59419779ef..21b58ef071 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -52,7 +52,7 @@
       "evra": "1.4.2-2.fc38.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-20.fc38.aarch64"
+      "evra": "0.8-22.fc38.aarch64"
     },
     "basesystem": {
       "evra": "11-15.fc38.noarch"
@@ -232,7 +232,7 @@
       "evra": "3.9-1.fc38.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc38.aarch64"
+      "evra": "2.89-2.fc38.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.aarch64"
@@ -397,16 +397,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc38.noarch"
+      "evra": "1:2.06-95.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-89.fc38.aarch64"
+      "evra": "1:2.06-95.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc38.aarch64"
+      "evra": "1:2.06-95.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc38.aarch64"
+      "evra": "1:2.06-95.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -829,7 +829,7 @@
       "evra": "4.4.33-7.fc38.aarch64"
     },
     "libxml2": {
-      "evra": "2.10.3-3.fc38.aarch64"
+      "evra": "2.10.4-1.fc38.aarch64"
     },
     "libxmlb": {
       "evra": "0.3.11-1.fc38.aarch64"
@@ -1012,10 +1012,10 @@
       "evra": "3.5-1.fc38.aarch64"
     },
     "polkit": {
-      "evra": "122-3.fc38.aarch64"
+      "evra": "122-3.fc38.1.aarch64"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.aarch64"
+      "evra": "122-3.fc38.1.aarch64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-23.fc38.aarch64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-17T00:00:00Z",
+    "generated": "2023-04-18T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2023-04-17T00:31:04Z"
+      "fedora": {
+        "generated": "2023-04-13T20:36:48Z"
       },
-      "fedora-next": {
-        "generated": "2023-04-14T09:32:18Z"
+      "fedora-coreos-pool": {
+        "generated": "2023-04-17T02:47:55Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-04-16T01:55:02Z"
+      "fedora-updates": {
+        "generated": "2023-04-18T01:31:52Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 689c3fd165..92c8d4f850 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -52,7 +52,7 @@
       "evra": "1.4.2-2.fc38.ppc64le"
     },
     "avahi-libs": {
-      "evra": "0.8-20.fc38.ppc64le"
+      "evra": "0.8-22.fc38.ppc64le"
     },
     "basesystem": {
       "evra": "11-15.fc38.noarch"
@@ -232,7 +232,7 @@
       "evra": "3.9-1.fc38.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc38.ppc64le"
+      "evra": "2.89-2.fc38.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.ppc64le"
@@ -388,19 +388,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc38.noarch"
+      "evra": "1:2.06-95.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-89.fc38.ppc64le"
+      "evra": "1:2.06-95.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-89.fc38.noarch"
+      "evra": "1:2.06-95.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc38.ppc64le"
+      "evra": "1:2.06-95.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc38.ppc64le"
+      "evra": "1:2.06-95.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -829,7 +829,7 @@
       "evra": "4.4.33-7.fc38.ppc64le"
     },
     "libxml2": {
-      "evra": "2.10.3-3.fc38.ppc64le"
+      "evra": "2.10.4-1.fc38.ppc64le"
     },
     "libxmlb": {
       "evra": "0.3.11-1.fc38.ppc64le"
@@ -1012,10 +1012,10 @@
       "evra": "3.5-1.fc38.ppc64le"
     },
     "polkit": {
-      "evra": "122-3.fc38.ppc64le"
+      "evra": "122-3.fc38.1.ppc64le"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.ppc64le"
+      "evra": "122-3.fc38.1.ppc64le"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-23.fc38.ppc64le"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-17T00:00:00Z",
+    "generated": "2023-04-18T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2023-04-17T00:29:43Z"
+      "fedora": {
+        "generated": "2023-04-13T20:36:47Z"
       },
-      "fedora-next": {
-        "generated": "2023-04-14T09:32:11Z"
+      "fedora-coreos-pool": {
+        "generated": "2023-04-17T02:46:02Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-04-16T01:55:15Z"
+      "fedora-updates": {
+        "generated": "2023-04-18T01:31:53Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4be4c49705..e6fb97d112 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -52,7 +52,7 @@
       "evra": "1.4.2-2.fc38.s390x"
     },
     "avahi-libs": {
-      "evra": "0.8-20.fc38.s390x"
+      "evra": "0.8-22.fc38.s390x"
     },
     "basesystem": {
       "evra": "11-15.fc38.noarch"
@@ -229,7 +229,7 @@
       "evra": "3.9-1.fc38.s390x"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc38.s390x"
+      "evra": "2.89-2.fc38.s390x"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.s390x"
@@ -772,7 +772,7 @@
       "evra": "4.4.33-7.fc38.s390x"
     },
     "libxml2": {
-      "evra": "2.10.3-3.fc38.s390x"
+      "evra": "2.10.4-1.fc38.s390x"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.s390x"
@@ -943,10 +943,10 @@
       "evra": "3.5-1.fc38.s390x"
     },
     "polkit": {
-      "evra": "122-3.fc38.s390x"
+      "evra": "122-3.fc38.1.s390x"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.s390x"
+      "evra": "122-3.fc38.1.s390x"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-23.fc38.s390x"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-17T00:00:00Z",
+    "generated": "2023-04-18T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2023-04-17T00:29:21Z"
+      "fedora": {
+        "generated": "2023-04-13T20:36:40Z"
       },
-      "fedora-next": {
-        "generated": "2023-04-14T09:32:06Z"
+      "fedora-coreos-pool": {
+        "generated": "2023-04-17T02:46:43Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-04-16T01:55:15Z"
+      "fedora-updates": {
+        "generated": "2023-04-18T01:31:54Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 66deaf7fe5..c1be16496d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -52,7 +52,7 @@
       "evra": "1.4.2-2.fc38.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-20.fc38.x86_64"
+      "evra": "0.8-22.fc38.x86_64"
     },
     "basesystem": {
       "evra": "11-15.fc38.noarch"
@@ -232,7 +232,7 @@
       "evra": "3.9-1.fc38.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.89-1.fc38.x86_64"
+      "evra": "2.89-2.fc38.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.x86_64"
@@ -397,22 +397,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-89.fc38.noarch"
+      "evra": "1:2.06-95.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-89.fc38.x86_64"
+      "evra": "1:2.06-95.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-89.fc38.x86_64"
+      "evra": "1:2.06-95.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-89.fc38.noarch"
+      "evra": "1:2.06-95.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-89.fc38.x86_64"
+      "evra": "1:2.06-95.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-89.fc38.x86_64"
+      "evra": "1:2.06-95.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -832,7 +832,7 @@
       "evra": "4.4.33-7.fc38.x86_64"
     },
     "libxml2": {
-      "evra": "2.10.3-3.fc38.x86_64"
+      "evra": "2.10.4-1.fc38.x86_64"
     },
     "libxmlb": {
       "evra": "0.3.11-1.fc38.x86_64"
@@ -1018,10 +1018,10 @@
       "evra": "3.5-1.fc38.x86_64"
     },
     "polkit": {
-      "evra": "122-3.fc38.x86_64"
+      "evra": "122-3.fc38.1.x86_64"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.x86_64"
+      "evra": "122-3.fc38.1.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-23.fc38.x86_64"
@@ -1256,16 +1256,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-17T00:00:00Z",
+    "generated": "2023-04-18T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-coreos-pool": {
-        "generated": "2023-04-17T00:31:40Z"
+      "fedora": {
+        "generated": "2023-04-13T20:37:10Z"
       },
-      "fedora-next": {
-        "generated": "2023-04-14T09:32:40Z"
+      "fedora-coreos-pool": {
+        "generated": "2023-04-17T02:50:43Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-04-16T01:55:16Z"
+      "fedora-updates": {
+        "generated": "2023-04-18T01:31:55Z"
       }
     }
   }

From 0f9059d5157a9eaa9ae26ff357ac1f0e5d73f054 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 18 Apr 2023 14:49:32 -0400
Subject: [PATCH 1579/2157] tests/kola/ntp/chrony: use `chrony -n sources`

By default, chrony tries to resolve source IP hostnames, which makes the
test take longer. This has caused a timeout flake at least once:

```
--- FAIL: non-exclusive-test-bucket-0/ext.config.ntp.chrony.coreos-platform-chrony-config (60.48s)
        harness.go:103: TIMEOUT[1m0s]: ssh: sudo ./kolet run-test-unit --deny-reboots kola-runext-49.service
        harness.go:103: TIMEOUT[1m0s]: ssh: journalctl -t kola-runext-coreos-platform-chrony-config
```

We could bump the timeout but we don't actually need hostnames for this
test so just use `-n` to disable it.
---
 tests/kola/ntp/chrony/coreos-platform-chrony-config | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-config b/tests/kola/ntp/chrony/coreos-platform-chrony-config
index 97ade69025..eb380c8601 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-config
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-config
@@ -11,14 +11,14 @@ set -xeuo pipefail
 
 platform=$(cmdline_arg ignition.platform.id)
 case "${platform}" in
-    aws) chronyc sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
-    azure) chronyc sources |grep 'PHC'; echo "ok chrony azure" ;;
-    gcp) chronyc sources | grep '169.254.169.254'; echo "ok chrony gcp" ;;
+    aws) chronyc -n sources |grep '169.254.169.123'; echo "ok chrony aws" ;;
+    azure) chronyc -n sources |grep 'PHC'; echo "ok chrony azure" ;;
+    gcp) chronyc -n sources | grep '169.254.169.254'; echo "ok chrony gcp" ;;
     qemu)
         # ptp_kvm isn't available on all arches nor all hosts, so don't assume it's always there; see
         # https://github.com/coreos/fedora-coreos-config/pull/2263#discussion_r1157694192
         if lsmod | grep -q ptp_kvm; then
-            chronyc sources | grep 'PHC0'; echo "ok chrony qemu"
+            chronyc -n sources | grep 'PHC0'; echo "ok chrony qemu"
         fi ;;
     *) echo "unhandled platform ${platform} ?"; exit 1 ;;
 esac

From 41901c7dc5e604e0ee27ffcf60f87b1b6d7a723b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 18 Apr 2023 17:41:16 -0400
Subject: [PATCH 1580/2157] tests/kola/networking: add new `tls` test

This is migrated from cosa's `coreos.tls.fetch-urls` but does a few
additional changes in the process.

`example.com` is currently down. Let's remove that and Wikipedia and
replace them with more websites that host cloud-related services, since
that seems more realistic (and likely to have better uptime).

Use `-I` since we're just exercising the TLS stack and don't actually
need the page contents.

While we're here, bump retries to 5 since it's much cheaper to retry
here than at the kola level.
---
 tests/kola/networking/tls | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100755 tests/kola/networking/tls

diff --git a/tests/kola/networking/tls b/tests/kola/networking/tls
new file mode 100755
index 0000000000..b40a48fe2b
--- /dev/null
+++ b/tests/kola/networking/tls
@@ -0,0 +1,21 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   tags: "platform-independent needs-internet"
+##   description: Verify we can fetch from various popular hosts over TLS.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+urls_to_fetch=(
+    "https://cloud.google.com"
+    "https://aws.amazon.com/"
+    "https://azure.microsoft.com"
+    "https://start.fedoraproject.org/"
+)
+
+for url in "${urls_to_fetch[@]}"; do
+    curl -I -s -S -m 30 --retry 5 "$url"
+done
+ok "tls"

From e57d16bb552963a0501cb12cfb80fea8effad22a Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Tue, 18 Apr 2023 15:04:30 -0300
Subject: [PATCH 1581/2157] kola: Add files to be verified in initrd test

 - Validate gcp udev rules in initrd

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 tests/kola/files/initrd/expected-contents | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index 12ea672fdd..23a365dc8f 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -13,8 +13,13 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 required_initrd_files=(
+    # Files from the 25azure-udev-rules overlay
     "/usr/lib/udev/rules.d/66-azure-storage.rules"
     "/usr/lib/udev/rules.d/99-azure-product-uuid.rules"
+    # Files from the 30gcp-udev-rules overlay
+    "/usr/lib/udev/rules.d/64-gce-disk-removal.rules"
+    "/usr/lib/udev/rules.d/65-gce-disk-naming.rules"
+    "/usr/lib/udev/google_nvme_id"
 )
 
 tmpd=$(mktemp -d)

From 9f6a655deb0e9238f340cc714451c4c2fad73343 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Tue, 18 Apr 2023 15:43:39 +0200
Subject: [PATCH 1582/2157] 40ignition-ostree/ignition-ostree-growfs: Fix
 Secure Execution firstboot error

Do not try to mount disk when running in Secure Execution mode.

Fixes: https://github.com/openshift/os/issues/1264

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 .../40ignition-ostree/ignition-ostree-growfs.sh      | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
index 862cace7d5..2bda69befe 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.sh
@@ -5,6 +5,12 @@ set -euo pipefail
 # partition, unless it determines that either the rootfs was moved or the
 # partition was already resized (e.g. via Ignition).
 
+# In the IBM Secure Execution case we use Ignition to grow and reencrypt rootfs
+# see overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+if [[ -f /run/coreos/secure-execution ]]; then
+    exit 0
+fi
+
 # This is copied from ignition-ostree-transposefs.sh.
 # Sometimes, for some reason the by-label symlinks aren't updated. Detect these
 # cases, and explicitly `udevadm trigger`.
@@ -42,12 +48,6 @@ path=/sysroot
 src=/dev/disk/by-label/root
 mount "${src}" "${path}"
 
-# In the IBM Secure Execution case we use Ignition to grow and reencrypt rootfs
-# see overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
-if [[ -f /run/coreos/secure-execution ]]; then
-    exit 0
-fi
-
 if [ ! -f "${saved_partstate}" ]; then
     partition=$(realpath /dev/disk/by-label/root)
 else

From 1efd1066c7271bae09ebd192aee57278595bf96a Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Wed, 8 Mar 2023 16:37:03 +0100
Subject: [PATCH 1583/2157] tests: add "ext.config.secex.reboot" test

This test requires valid hostkey to succeed:
```
export COREOS_ASSEMBLER_CONTAINER_RUNTIME_ARGS="-v $(realpath /path/to/HKD-*.crt):/secex-hostkey"
cosa kola run --qemu-secex --tag secex --qemu-secex-hostkey /secex-hostkey
```

Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
---
 tests/kola/secex/reboot/test.sh | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100755 tests/kola/secex/reboot/test.sh

diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
new file mode 100755
index 0000000000..3763eff2b7
--- /dev/null
+++ b/tests/kola/secex/reboot/test.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+## kola:
+##   # This test verifies the qemu-secex image reboots with SE enabled. It also
+##   # implicitly tests Ignition config decryption. We don't run it by default
+##   # because it requires running with `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
+##   architectures: s390x
+##   platforms: qemu
+##   requiredTag: secex
+##   timeoutMin: 3
+
+set -xeuo pipefail
+
+grep -q 1 /sys/firmware/uv/prot_virt_guest
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+"")
+    rpm-ostree kargs --append secex_test
+    /tmp/autopkgtest-reboot rebooted
+    ;;
+rebooted)
+    grep -q rd.luks.name=$(cryptsetup luksUUID /dev/disk/by-label/crypt_rootfs)=root /proc/cmdline
+    grep -q secex_test /proc/cmdline
+    ;;
+*)
+    echo "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";
+    exit 1
+    ;;
+esac

From 5e1efaedb108f0c3ecd4e50aa8022846189d7a58 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 19 Apr 2023 16:36:34 -0400
Subject: [PATCH 1584/2157] manifests/fedora-coreos-base: add systemd override
 for ssh host key migration

In this case we'll override the ConditionPathExists from
ssh-host-keys-migration.service [1] to force it to run every boot.
We want to do this to handle the case where someone could do an
upgrade->rollback->upgrade and end up locked out of their system [2].

[1] https://src.fedoraproject.org/rpms/openssh/blob/6f7c765ed4cf0e8eef664fb93b26f4ea2a14d955/f/ssh-host-keys-migration.service
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1473
---
 manifests/fedora-coreos-base.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 8a85d93554..f96b47f216 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -108,6 +108,22 @@ postprocess:
     set -xeuo pipefail
     rm -vrf /usr/lib/modules/*aarch64/dtb/qcom/
 
+  # Force the ssh-host-keys-migration to happen on every boot
+  # to handle cases where someone did a upgrade->rollback->upgrade
+  # See https://github.com/coreos/fedora-coreos-tracker/issues/1473
+  # We should remove this after the next barrier release.
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    mkdir -p /usr/lib/systemd/system/ssh-host-keys-migration.service.d
+    cat <<'EOF' > /usr/lib/systemd/system/ssh-host-keys-migration.service.d/coreos-force-migration-on-every-boot.conf
+    # Force the ssh-host-keys-migration to happen on every boot
+    # to handle cases where someone did a upgrade->rollback->upgrade
+    # See https://github.com/coreos/fedora-coreos-tracker/issues/1473
+    [Unit]
+    ConditionPathExists=
+    EOF
+
 # Packages listed here should be specific to Fedore CoreOS (as in not yet
 # available in RHCOS or not desired in RHCOS). All other packages should go
 # into one of the sub-manifests listed at the top.

From a6a2ed446be39d2e5af855f15069cdbf41a4fdc2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Apr 2023 13:19:55 +0000
Subject: [PATCH 1585/2157] overrides: fast-track curl-7.87.0-8.fc38

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 9cf68f6631..d2dbf99d72 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -27,6 +27,18 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
       type: fast-track
+  curl:
+    evr: 7.87.0-8.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
+      type: fast-track
+  libcurl-minimal:
+    evr: 7.87.0-8.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
+      type: fast-track
   netavark:
     evr: 1.6.0-2.fc38
     metadata:

From ecfe838e517d71cb01dba5c2103f103c07a67028 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Apr 2023 15:10:38 +0000
Subject: [PATCH 1586/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 36 ------------------------------------
 1 file changed, 36 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d2dbf99d72..60516270c9 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,24 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  aardvark-dns:
-    evr: 1.6.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track
-  containers-common:
-    evra: 4:1-89.fc38.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track
-  containers-common-extra:
-    evra: 4:1-89.fc38.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track
   curl:
     evr: 7.87.0-8.fc38
     metadata:
@@ -39,21 +21,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
       type: fast-track
-  netavark:
-    evr: 1.6.0-2.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track
-  podman:
-    evr: 5:4.5.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track
-  podman-plugins:
-    evr: 5:4.5.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-92b7759c3e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1471
-      type: fast-track

From 1efef38bfbb8bb5472492c11b9e7a4e017a9ae61 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Apr 2023 15:14:21 +0000
Subject: [PATCH 1587/2157] overrides: pin moby-engine-20.10.23-1.fc38

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 60516270c9..1745a8f579 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -21,3 +21,8 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
       type: fast-track
+  moby-engine:
+    evr: 20.10.23-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
+      type: pin

From ce886ef32b974f9b3419e0efdb9a7c9e415ee9e9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Apr 2023 22:11:32 +0000
Subject: [PATCH 1588/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/539/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 21b58ef071..abdd69b76c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "7.87.0-7.fc38.aarch64"
+      "evra": "7.87.0-8.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -574,7 +574,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-7.fc38.aarch64"
+      "evra": "7.87.0-8.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -610,10 +610,10 @@
       "evra": "13.0.1-0.12.fc38.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-7.fc38.aarch64"
+      "evra": "1.10.2-1.fc38.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.46-2.fc38.aarch64"
+      "evra": "1.47-1.fc38.aarch64"
     },
     "libgudev": {
       "evra": "237-4.fc38.aarch64"
@@ -685,7 +685,7 @@
       "evra": "1.0.1-23.fc38.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.aarch64"
+      "evra": "1:2.6.2-2.rc8.fc38.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.aarch64"
@@ -709,7 +709,7 @@
       "evra": "0.2.1-53.fc38.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.3-2.fc38.aarch64"
+      "evra": "14:1.10.4-1.fc38.aarch64"
     },
     "libpkgconf": {
       "evra": "1.8.0-6.fc38.aarch64"
@@ -916,7 +916,7 @@
       "evra": "0.52.23-2.fc38.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.aarch64"
+      "evra": "1:2.6.2-2.rc8.fc38.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.aarch64"
@@ -946,13 +946,13 @@
       "evra": "2.6.4-1.fc38.aarch64"
     },
     "openssh": {
-      "evra": "9.0p1-14.fc38.1.aarch64"
+      "evra": "9.0p1-15.fc38.aarch64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-14.fc38.1.aarch64"
+      "evra": "9.0p1-15.fc38.aarch64"
     },
     "openssh-server": {
-      "evra": "9.0p1-14.fc38.1.aarch64"
+      "evra": "9.0p1-15.fc38.aarch64"
     },
     "openssl": {
       "evra": "1:3.0.8-2.fc38.aarch64"
@@ -1066,7 +1066,7 @@
       "evra": "3.2.7-2.fc38.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.4-2.fc38.aarch64"
+      "evra": "2:1.1.6-1.fc38.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.1-0.fc38.aarch64"
@@ -1253,16 +1253,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-18T00:00:00Z",
+    "generated": "2023-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-17T02:47:55Z"
+        "generated": "2023-04-21T16:56:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-18T01:31:52Z"
+        "generated": "2023-04-21T02:01:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 92c8d4f850..388265f7dc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "7.87.0-7.fc38.ppc64le"
+      "evra": "7.87.0-8.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-7.fc38.ppc64le"
+      "evra": "7.87.0-8.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -604,10 +604,10 @@
       "evra": "13.0.1-0.12.fc38.ppc64le"
     },
     "libgcrypt": {
-      "evra": "1.10.1-7.fc38.ppc64le"
+      "evra": "1.10.2-1.fc38.ppc64le"
     },
     "libgpg-error": {
-      "evra": "1.46-2.fc38.ppc64le"
+      "evra": "1.47-1.fc38.ppc64le"
     },
     "libgudev": {
       "evra": "237-4.fc38.ppc64le"
@@ -679,7 +679,7 @@
       "evra": "1.0.1-23.fc38.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.ppc64le"
+      "evra": "1:2.6.2-2.rc8.fc38.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.ppc64le"
@@ -703,7 +703,7 @@
       "evra": "0.2.1-53.fc38.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.3-2.fc38.ppc64le"
+      "evra": "14:1.10.4-1.fc38.ppc64le"
     },
     "libpkgconf": {
       "evra": "1.8.0-6.fc38.ppc64le"
@@ -913,7 +913,7 @@
       "evra": "0.52.23-2.fc38.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.ppc64le"
+      "evra": "1:2.6.2-2.rc8.fc38.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.ppc64le"
@@ -943,13 +943,13 @@
       "evra": "2.6.4-1.fc38.ppc64le"
     },
     "openssh": {
-      "evra": "9.0p1-14.fc38.1.ppc64le"
+      "evra": "9.0p1-15.fc38.ppc64le"
     },
     "openssh-clients": {
-      "evra": "9.0p1-14.fc38.1.ppc64le"
+      "evra": "9.0p1-15.fc38.ppc64le"
     },
     "openssh-server": {
-      "evra": "9.0p1-14.fc38.1.ppc64le"
+      "evra": "9.0p1-15.fc38.ppc64le"
     },
     "openssl": {
       "evra": "1:3.0.8-2.fc38.ppc64le"
@@ -1072,7 +1072,7 @@
       "evra": "3.2.7-2.fc38.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.4-2.fc38.ppc64le"
+      "evra": "2:1.1.6-1.fc38.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.18.1-0.fc38.ppc64le"
@@ -1259,16 +1259,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-18T00:00:00Z",
+    "generated": "2023-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-17T02:46:02Z"
+        "generated": "2023-04-21T16:56:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-18T01:31:53Z"
+        "generated": "2023-04-21T02:01:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e6fb97d112..73d6e382e8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -184,7 +184,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "7.87.0-7.fc38.s390x"
+      "evra": "7.87.0-8.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -532,7 +532,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-7.fc38.s390x"
+      "evra": "7.87.0-8.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -565,10 +565,10 @@
       "evra": "13.0.1-0.12.fc38.s390x"
     },
     "libgcrypt": {
-      "evra": "1.10.1-7.fc38.s390x"
+      "evra": "1.10.2-1.fc38.s390x"
     },
     "libgpg-error": {
-      "evra": "1.46-2.fc38.s390x"
+      "evra": "1.47-1.fc38.s390x"
     },
     "libibverbs": {
       "evra": "44.0-3.fc38.s390x"
@@ -631,7 +631,7 @@
       "evra": "1.0.1-23.fc38.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.s390x"
+      "evra": "1:2.6.2-2.rc8.fc38.s390x"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.s390x"
@@ -655,7 +655,7 @@
       "evra": "0.2.1-53.fc38.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.3-2.fc38.s390x"
+      "evra": "14:1.10.4-1.fc38.s390x"
     },
     "libpkgconf": {
       "evra": "1.8.0-6.fc38.s390x"
@@ -853,7 +853,7 @@
       "evra": "0.52.23-2.fc38.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.s390x"
+      "evra": "1:2.6.2-2.rc8.fc38.s390x"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.s390x"
@@ -880,13 +880,13 @@
       "evra": "2.6.4-1.fc38.s390x"
     },
     "openssh": {
-      "evra": "9.0p1-14.fc38.1.s390x"
+      "evra": "9.0p1-15.fc38.s390x"
     },
     "openssh-clients": {
-      "evra": "9.0p1-14.fc38.1.s390x"
+      "evra": "9.0p1-15.fc38.s390x"
     },
     "openssh-server": {
-      "evra": "9.0p1-14.fc38.1.s390x"
+      "evra": "9.0p1-15.fc38.s390x"
     },
     "openssl": {
       "evra": "1:3.0.8-2.fc38.s390x"
@@ -997,7 +997,7 @@
       "evra": "3.2.7-2.fc38.s390x"
     },
     "runc": {
-      "evra": "2:1.1.4-2.fc38.s390x"
+      "evra": "2:1.1.6-1.fc38.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.25.0-4.fc38.s390x"
@@ -1184,16 +1184,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-18T00:00:00Z",
+    "generated": "2023-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-17T02:46:43Z"
+        "generated": "2023-04-21T16:55:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-18T01:31:54Z"
+        "generated": "2023-04-21T02:01:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c1be16496d..9268a790d5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "7.87.0-7.fc38.x86_64"
+      "evra": "7.87.0-8.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -577,7 +577,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-7.fc38.x86_64"
+      "evra": "7.87.0-8.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -613,10 +613,10 @@
       "evra": "13.0.1-0.12.fc38.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.10.1-7.fc38.x86_64"
+      "evra": "1.10.2-1.fc38.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.46-2.fc38.x86_64"
+      "evra": "1.47-1.fc38.x86_64"
     },
     "libgudev": {
       "evra": "237-4.fc38.x86_64"
@@ -688,7 +688,7 @@
       "evra": "1.0.1-23.fc38.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.x86_64"
+      "evra": "1:2.6.2-2.rc8.fc38.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.x86_64"
@@ -712,7 +712,7 @@
       "evra": "0.2.1-53.fc38.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.3-2.fc38.x86_64"
+      "evra": "14:1.10.4-1.fc38.x86_64"
     },
     "libpkgconf": {
       "evra": "1.8.0-6.fc38.x86_64"
@@ -922,7 +922,7 @@
       "evra": "0.52.23-2.fc38.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc6.fc38.1.x86_64"
+      "evra": "1:2.6.2-2.rc8.fc38.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.x86_64"
@@ -952,13 +952,13 @@
       "evra": "2.6.4-1.fc38.x86_64"
     },
     "openssh": {
-      "evra": "9.0p1-14.fc38.1.x86_64"
+      "evra": "9.0p1-15.fc38.x86_64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-14.fc38.1.x86_64"
+      "evra": "9.0p1-15.fc38.x86_64"
     },
     "openssh-server": {
-      "evra": "9.0p1-14.fc38.1.x86_64"
+      "evra": "9.0p1-15.fc38.x86_64"
     },
     "openssl": {
       "evra": "1:3.0.8-2.fc38.x86_64"
@@ -1069,7 +1069,7 @@
       "evra": "3.2.7-2.fc38.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.4-2.fc38.x86_64"
+      "evra": "2:1.1.6-1.fc38.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.1-0.fc38.x86_64"
@@ -1256,16 +1256,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-18T00:00:00Z",
+    "generated": "2023-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-17T02:50:43Z"
+        "generated": "2023-04-21T16:59:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-18T01:31:55Z"
+        "generated": "2023-04-21T02:01:27Z"
       }
     }
   }

From 65e33b208b5d23164fa675ae851c1fa348e92dde Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 23 Apr 2023 22:25:10 +0000
Subject: [PATCH 1589/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/542/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 54 +++++++++++++++++++++++---------------
 manifest-lock.ppc64le.json | 54 +++++++++++++++++++++++---------------
 manifest-lock.s390x.json   | 54 +++++++++++++++++++++++---------------
 manifest-lock.x86_64.json  | 52 ++++++++++++++++++++++--------------
 4 files changed, 131 insertions(+), 83 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index abdd69b76c..59ba6b10ea 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.0-1.fc38.aarch64"
+      "evra": "1:1.42.6-1.fc38.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.0-1.fc38.aarch64"
+      "evra": "1:1.42.6-1.fc38.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.0-1.fc38.aarch64"
+      "evra": "1:1.42.6-1.fc38.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.0-1.fc38.aarch64"
+      "evra": "1:1.42.6-1.fc38.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.0-1.fc38.aarch64"
+      "evra": "1:1.42.6-1.fc38.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -37,7 +37,10 @@
       "evra": "1.22-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
+    },
+    "atheros-firmware": {
+      "evra": "20230404-149.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -75,6 +78,9 @@
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
     },
+    "brcmfmac-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
     },
@@ -151,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc38.aarch64"
+      "evra": "0.17.0-2.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc38.aarch64"
+      "evra": "0.17.0-2.fc38.aarch64"
     },
     "coreutils": {
       "evra": "9.1-11.fc38.aarch64"
@@ -421,7 +427,7 @@
       "evra": "56-3.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.aarch64"
@@ -685,7 +691,7 @@
       "evra": "1.0.1-23.fc38.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc8.fc38.aarch64"
+      "evra": "1:2.6.3-0.fc38.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.aarch64"
@@ -844,10 +850,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.aarch64"
@@ -888,6 +894,9 @@
     "mpfr": {
       "evra": "4.1.1-3.fc38.aarch64"
     },
+    "mt7xxx-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
     },
@@ -916,7 +925,7 @@
       "evra": "0.52.23-2.fc38.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc8.fc38.aarch64"
+      "evra": "1:2.6.3-0.fc38.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.aarch64"
@@ -934,7 +943,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-1.fc38.aarch64"
@@ -1036,11 +1045,14 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.0-6.fc38.aarch64"
+      "evra": "2:7.2.1-1.fc38.aarch64"
     },
     "readline": {
       "evra": "8.2-3.fc38.aarch64"
     },
+    "realtek-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
     },
@@ -1060,7 +1072,7 @@
       "evra": "4.18.1-1.fc38.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.3.0-1.fc38.aarch64"
+      "evra": "1.4.0-1.fc38.aarch64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.aarch64"
@@ -1081,10 +1093,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1192,7 +1204,7 @@
       "evra": "0.0.99.4-1.fc38.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.5-1.fc38.aarch64"
+      "evra": "5.5-3.fc38.aarch64"
     },
     "tpm2-tss": {
       "evra": "4.0.1-3.fc38.aarch64"
@@ -1253,7 +1265,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-21T00:00:00Z",
+    "generated": "2023-04-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1262,7 +1274,7 @@
         "generated": "2023-04-21T16:56:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-21T02:01:24Z"
+        "generated": "2023-04-23T01:01:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 388265f7dc..7e09d45e76 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.0-1.fc38.ppc64le"
+      "evra": "1:1.42.6-1.fc38.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.0-1.fc38.ppc64le"
+      "evra": "1:1.42.6-1.fc38.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.0-1.fc38.ppc64le"
+      "evra": "1:1.42.6-1.fc38.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.0-1.fc38.ppc64le"
+      "evra": "1:1.42.6-1.fc38.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.0-1.fc38.ppc64le"
+      "evra": "1:1.42.6-1.fc38.ppc64le"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -37,7 +37,10 @@
       "evra": "1.22-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
+    },
+    "atheros-firmware": {
+      "evra": "20230404-149.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -75,6 +78,9 @@
     "bind-utils": {
       "evra": "32:9.18.13-1.fc38.ppc64le"
     },
+    "brcmfmac-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
     },
@@ -151,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc38.ppc64le"
+      "evra": "0.17.0-2.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc38.ppc64le"
+      "evra": "0.17.0-2.fc38.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-11.fc38.ppc64le"
@@ -415,7 +421,7 @@
       "evra": "56-3.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.ppc64le"
@@ -679,7 +685,7 @@
       "evra": "1.0.1-23.fc38.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc8.fc38.ppc64le"
+      "evra": "1:2.6.3-0.fc38.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.ppc64le"
@@ -844,10 +850,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.ppc64le"
@@ -885,6 +891,9 @@
     "mpfr": {
       "evra": "4.1.1-3.fc38.ppc64le"
     },
+    "mt7xxx-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
     },
@@ -913,7 +922,7 @@
       "evra": "0.52.23-2.fc38.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc8.fc38.ppc64le"
+      "evra": "1:2.6.3-0.fc38.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.ppc64le"
@@ -931,7 +940,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-1.fc38.ppc64le"
@@ -1042,11 +1051,14 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.0-6.fc38.ppc64le"
+      "evra": "2:7.2.1-1.fc38.ppc64le"
     },
     "readline": {
       "evra": "8.2-3.fc38.ppc64le"
     },
+    "realtek-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
     },
@@ -1066,7 +1078,7 @@
       "evra": "4.18.1-1.fc38.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.3.0-1.fc38.ppc64le"
+      "evra": "1.4.0-1.fc38.ppc64le"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.ppc64le"
@@ -1087,10 +1099,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1198,7 +1210,7 @@
       "evra": "0.0.99.4-1.fc38.ppc64le"
     },
     "tpm2-tools": {
-      "evra": "5.5-1.fc38.ppc64le"
+      "evra": "5.5-3.fc38.ppc64le"
     },
     "tpm2-tss": {
       "evra": "4.0.1-3.fc38.ppc64le"
@@ -1259,7 +1271,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-21T00:00:00Z",
+    "generated": "2023-04-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1268,7 +1280,7 @@
         "generated": "2023-04-21T16:56:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-21T02:01:25Z"
+        "generated": "2023-04-23T01:01:38Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 73d6e382e8..995a832c60 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.0-1.fc38.s390x"
+      "evra": "1:1.42.6-1.fc38.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.0-1.fc38.s390x"
+      "evra": "1:1.42.6-1.fc38.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.0-1.fc38.s390x"
+      "evra": "1:1.42.6-1.fc38.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.0-1.fc38.s390x"
+      "evra": "1:1.42.6-1.fc38.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.0-1.fc38.s390x"
+      "evra": "1:1.42.6-1.fc38.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -37,7 +37,10 @@
       "evra": "1.22-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
+    },
+    "atheros-firmware": {
+      "evra": "20230404-149.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -72,6 +75,9 @@
     "bind-utils": {
       "evra": "32:9.18.13-1.fc38.s390x"
     },
+    "brcmfmac-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
     },
@@ -148,10 +154,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc38.s390x"
+      "evra": "0.17.0-2.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc38.s390x"
+      "evra": "0.17.0-2.fc38.s390x"
     },
     "coreutils": {
       "evra": "9.1-11.fc38.s390x"
@@ -385,7 +391,7 @@
       "evra": "56-3.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.s390x"
@@ -631,7 +637,7 @@
       "evra": "1.0.1-23.fc38.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc8.fc38.s390x"
+      "evra": "1:2.6.3-0.fc38.s390x"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.s390x"
@@ -784,10 +790,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.s390x"
@@ -825,6 +831,9 @@
     "mpfr": {
       "evra": "4.1.1-3.fc38.s390x"
     },
+    "mt7xxx-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
     },
@@ -853,7 +862,7 @@
       "evra": "0.52.23-2.fc38.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc8.fc38.s390x"
+      "evra": "1:2.6.3-0.fc38.s390x"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.s390x"
@@ -868,7 +877,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-1.fc38.s390x"
@@ -967,11 +976,14 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.0-6.fc38.s390x"
+      "evra": "2:7.2.1-1.fc38.s390x"
     },
     "readline": {
       "evra": "8.2-3.fc38.s390x"
     },
+    "realtek-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
     },
@@ -991,7 +1003,7 @@
       "evra": "4.18.1-1.fc38.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.3.0-1.fc38.s390x"
+      "evra": "1.4.0-1.fc38.s390x"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.s390x"
@@ -1015,10 +1027,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1120,7 +1132,7 @@
       "evra": "0.0.99.4-1.fc38.s390x"
     },
     "tpm2-tools": {
-      "evra": "5.5-1.fc38.s390x"
+      "evra": "5.5-3.fc38.s390x"
     },
     "tpm2-tss": {
       "evra": "4.0.1-3.fc38.s390x"
@@ -1184,7 +1196,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-21T00:00:00Z",
+    "generated": "2023-04-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1193,7 +1205,7 @@
         "generated": "2023-04-21T16:55:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-21T02:01:26Z"
+        "generated": "2023-04-23T01:01:39Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9268a790d5..bc4d66948b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.0-1.fc38.x86_64"
+      "evra": "1:1.42.6-1.fc38.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.0-1.fc38.x86_64"
+      "evra": "1:1.42.6-1.fc38.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.0-1.fc38.x86_64"
+      "evra": "1:1.42.6-1.fc38.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.0-1.fc38.x86_64"
+      "evra": "1:1.42.6-1.fc38.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.0-1.fc38.x86_64"
+      "evra": "1:1.42.6-1.fc38.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -37,7 +37,10 @@
       "evra": "1.22-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
+    },
+    "atheros-firmware": {
+      "evra": "20230404-149.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -75,6 +78,9 @@
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
     },
+    "brcmfmac-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
     },
@@ -151,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-1.fc38.x86_64"
+      "evra": "0.17.0-2.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-1.fc38.x86_64"
+      "evra": "0.17.0-2.fc38.x86_64"
     },
     "coreutils": {
       "evra": "9.1-11.fc38.x86_64"
@@ -427,7 +433,7 @@
       "evra": "56-3.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.x86_64"
@@ -688,7 +694,7 @@
       "evra": "1.0.1-23.fc38.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.2-2.rc8.fc38.x86_64"
+      "evra": "1:2.6.3-0.fc38.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.x86_64"
@@ -847,10 +853,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.x86_64"
@@ -894,6 +900,9 @@
     "mpfr": {
       "evra": "4.1.1-3.fc38.x86_64"
     },
+    "mt7xxx-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
     },
@@ -922,7 +931,7 @@
       "evra": "0.52.23-2.fc38.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.2-2.rc8.fc38.x86_64"
+      "evra": "1:2.6.3-0.fc38.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.x86_64"
@@ -940,7 +949,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230310-148.fc38.noarch"
+      "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-1.fc38.x86_64"
@@ -1044,6 +1053,9 @@
     "readline": {
       "evra": "8.2-3.fc38.x86_64"
     },
+    "realtek-firmware": {
+      "evra": "20230404-149.fc38.noarch"
+    },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
     },
@@ -1063,7 +1075,7 @@
       "evra": "4.18.1-1.fc38.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.3.0-1.fc38.x86_64"
+      "evra": "1.4.0-1.fc38.x86_64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.x86_64"
@@ -1084,10 +1096,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.10-1.fc38.noarch"
+      "evra": "38.11-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1195,7 +1207,7 @@
       "evra": "0.0.99.4-1.fc38.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.5-1.fc38.x86_64"
+      "evra": "5.5-3.fc38.x86_64"
     },
     "tpm2-tss": {
       "evra": "4.0.1-3.fc38.x86_64"
@@ -1256,7 +1268,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-21T00:00:00Z",
+    "generated": "2023-04-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1265,7 +1277,7 @@
         "generated": "2023-04-21T16:59:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-21T02:01:27Z"
+        "generated": "2023-04-23T01:01:40Z"
       }
     }
   }

From fc7979b4a61764aa5bdced1ee04c63010e0557f3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 25 Apr 2023 04:15:57 +0000
Subject: [PATCH 1590/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/544/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 59ba6b10ea..c848348e66 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -331,7 +331,7 @@
       "evra": "2.9.9-16.fc38.aarch64"
     },
     "fuse-common": {
-      "evra": "3.13.1-2.fc38.aarch64"
+      "evra": "3.14.1-1.fc38.aarch64"
     },
     "fuse-libs": {
       "evra": "2.9.9-16.fc38.aarch64"
@@ -343,10 +343,10 @@
       "evra": "3.7.3-3.fc38.aarch64"
     },
     "fuse3": {
-      "evra": "3.13.1-2.fc38.aarch64"
+      "evra": "3.14.1-1.fc38.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.13.1-2.fc38.aarch64"
+      "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
       "evra": "1.8.14-1.fc38.aarch64"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.11-300.fc38.aarch64"
+      "evra": "6.2.12-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.11-300.fc38.aarch64"
+      "evra": "6.2.12-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.11-300.fc38.aarch64"
+      "evra": "6.2.12-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.11-300.fc38.aarch64"
+      "evra": "6.2.12-300.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -760,7 +760,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.1-0.fc38.aarch64"
+      "evra": "2:4.18.2-0.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -799,7 +799,7 @@
       "evra": "0.14.1-1.fc38.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.fc38.aarch64"
+      "evra": "1.3.3-1.rc1.fc38.aarch64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.aarch64"
@@ -829,7 +829,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.1-0.fc38.aarch64"
+      "evra": "2:4.18.2-0.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.aarch64"
@@ -1081,13 +1081,13 @@
       "evra": "2:1.1.6-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.1-0.fc38.aarch64"
+      "evra": "2:4.18.2-0.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.1-0.fc38.noarch"
+      "evra": "2:4.18.2-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.1-0.fc38.aarch64"
+      "evra": "2:4.18.2-0.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1222,10 +1222,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc38.noarch"
+      "evra": "2:9.0.1472-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc38.aarch64"
+      "evra": "2:9.0.1472-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-23T00:00:00Z",
+    "generated": "2023-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-21T16:56:24Z"
+        "generated": "2023-04-23T22:33:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-23T01:01:36Z"
+        "generated": "2023-04-25T01:42:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7e09d45e76..edd0da8999 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -322,7 +322,7 @@
       "evra": "2.9.9-16.fc38.ppc64le"
     },
     "fuse-common": {
-      "evra": "3.13.1-2.fc38.ppc64le"
+      "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fuse-libs": {
       "evra": "2.9.9-16.fc38.ppc64le"
@@ -334,10 +334,10 @@
       "evra": "3.7.3-3.fc38.ppc64le"
     },
     "fuse3": {
-      "evra": "3.13.1-2.fc38.ppc64le"
+      "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fuse3-libs": {
-      "evra": "3.13.1-2.fc38.ppc64le"
+      "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
       "evra": "1.8.14-1.fc38.ppc64le"
@@ -490,16 +490,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.11-300.fc38.ppc64le"
+      "evra": "6.2.12-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.11-300.fc38.ppc64le"
+      "evra": "6.2.12-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.11-300.fc38.ppc64le"
+      "evra": "6.2.12-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.11-300.fc38.ppc64le"
+      "evra": "6.2.12-300.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -760,7 +760,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.1-0.fc38.ppc64le"
+      "evra": "2:4.18.2-0.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -799,7 +799,7 @@
       "evra": "0.14.1-1.fc38.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.fc38.ppc64le"
+      "evra": "1.3.3-1.rc1.fc38.ppc64le"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.ppc64le"
@@ -829,7 +829,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.1-0.fc38.ppc64le"
+      "evra": "2:4.18.2-0.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.ppc64le"
@@ -1087,13 +1087,13 @@
       "evra": "2:1.1.6-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.1-0.fc38.ppc64le"
+      "evra": "2:4.18.2-0.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.1-0.fc38.noarch"
+      "evra": "2:4.18.2-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.1-0.fc38.ppc64le"
+      "evra": "2:4.18.2-0.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1228,10 +1228,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc38.noarch"
+      "evra": "2:9.0.1472-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc38.ppc64le"
+      "evra": "2:9.0.1472-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-23T00:00:00Z",
+    "generated": "2023-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-21T16:56:05Z"
+        "generated": "2023-04-23T22:31:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-23T01:01:38Z"
+        "generated": "2023-04-25T01:42:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 995a832c60..bec4e52c3f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -319,7 +319,7 @@
       "evra": "2.9.9-16.fc38.s390x"
     },
     "fuse-common": {
-      "evra": "3.13.1-2.fc38.s390x"
+      "evra": "3.14.1-1.fc38.s390x"
     },
     "fuse-libs": {
       "evra": "2.9.9-16.fc38.s390x"
@@ -331,10 +331,10 @@
       "evra": "3.7.3-3.fc38.s390x"
     },
     "fuse3": {
-      "evra": "3.13.1-2.fc38.s390x"
+      "evra": "3.14.1-1.fc38.s390x"
     },
     "fuse3-libs": {
-      "evra": "3.13.1-2.fc38.s390x"
+      "evra": "3.14.1-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -457,16 +457,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.11-300.fc38.s390x"
+      "evra": "6.2.12-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.11-300.fc38.s390x"
+      "evra": "6.2.12-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.11-300.fc38.s390x"
+      "evra": "6.2.12-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.11-300.fc38.s390x"
+      "evra": "6.2.12-300.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -706,7 +706,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.1-0.fc38.s390x"
+      "evra": "2:4.18.2-0.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -745,7 +745,7 @@
       "evra": "0.14.1-1.fc38.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.fc38.s390x"
+      "evra": "1.3.3-1.rc1.fc38.s390x"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.s390x"
@@ -772,7 +772,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.1-0.fc38.s390x"
+      "evra": "2:4.18.2-0.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.s390x"
@@ -1015,13 +1015,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.1-0.fc38.s390x"
+      "evra": "2:4.18.2-0.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.1-0.fc38.noarch"
+      "evra": "2:4.18.2-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.1-0.fc38.s390x"
+      "evra": "2:4.18.2-0.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1153,10 +1153,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc38.noarch"
+      "evra": "2:9.0.1472-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc38.s390x"
+      "evra": "2:9.0.1472-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-23T00:00:00Z",
+    "generated": "2023-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-21T16:55:41Z"
+        "generated": "2023-04-23T22:30:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-23T01:01:39Z"
+        "generated": "2023-04-25T01:42:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bc4d66948b..93281612a0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -331,7 +331,7 @@
       "evra": "2.9.9-16.fc38.x86_64"
     },
     "fuse-common": {
-      "evra": "3.13.1-2.fc38.x86_64"
+      "evra": "3.14.1-1.fc38.x86_64"
     },
     "fuse-libs": {
       "evra": "2.9.9-16.fc38.x86_64"
@@ -343,10 +343,10 @@
       "evra": "3.7.3-3.fc38.x86_64"
     },
     "fuse3": {
-      "evra": "3.13.1-2.fc38.x86_64"
+      "evra": "3.14.1-1.fc38.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.13.1-2.fc38.x86_64"
+      "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
       "evra": "1.8.14-1.fc38.x86_64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.11-300.fc38.x86_64"
+      "evra": "6.2.12-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.11-300.fc38.x86_64"
+      "evra": "6.2.12-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.11-300.fc38.x86_64"
+      "evra": "6.2.12-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.11-300.fc38.x86_64"
+      "evra": "6.2.12-300.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.1-0.fc38.x86_64"
+      "evra": "2:4.18.2-0.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -802,7 +802,7 @@
       "evra": "0.14.1-1.fc38.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.fc38.x86_64"
+      "evra": "1.3.3-1.rc1.fc38.x86_64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.x86_64"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.1-0.fc38.x86_64"
+      "evra": "2:4.18.2-0.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.x86_64"
@@ -1084,13 +1084,13 @@
       "evra": "2:1.1.6-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.1-0.fc38.x86_64"
+      "evra": "2:4.18.2-0.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.1-0.fc38.noarch"
+      "evra": "2:4.18.2-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.1-0.fc38.x86_64"
+      "evra": "2:4.18.2-0.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1225,10 +1225,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1440-1.fc38.noarch"
+      "evra": "2:9.0.1472-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1440-1.fc38.x86_64"
+      "evra": "2:9.0.1472-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-23T00:00:00Z",
+    "generated": "2023-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-21T16:59:19Z"
+        "generated": "2023-04-23T22:35:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-23T01:01:40Z"
+        "generated": "2023-04-25T01:42:46Z"
       }
     }
   }

From 650d2c926f0c2a9fb7efa1848411d93c79673ee5 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 26 Apr 2023 10:53:55 +0800
Subject: [PATCH 1591/2157] Revert partially for
 `ext.config.shared.ntp.chrony.dhcp-propagation`

This is to revert partially for https://github.com/coreos/fedora-coreos-config/pull/1952/commits/089a8f37a2d7a07a84c8f71871a6b61a217f68cd,
as https://bugzilla.redhat.com/show_bug.cgi?id=2123251 is fixed.
The fixed version is `podman-4.3.1`.
---
 tests/kola/ntp/data/ntplib.sh | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index 0e815c0920..49a847ea3e 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -27,14 +27,7 @@ RUN echo -e 'dhcp-range=172.16.0.10,172.16.0.20,12h\nbind-interfaces\ninterface=
 CMD [ "/sbin/init" ]
 EOF
 
-    if is_fcos || is_rhcos8; then
-        podman build -t dnsmasq .
-    else
-        # only workaround for scos and rhel9
-        # https://github.com/openshift/os/issues/964
-        # https://bugzilla.redhat.com/show_bug.cgi?id=2123246 (revert PR when bug is fixed)
-        podman build --security-opt seccomp=/usr/share/containers/seccomp.json -t dnsmasq .
-    fi
+    podman build -t dnsmasq .
     popd
     podman run -d --rm --name dnsmasq --privileged --network ns:/var/run/netns/container dnsmasq
 

From 855b45d081d276fb3287f264b9b4865cca520fea Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 26 Apr 2023 09:49:46 -0400
Subject: [PATCH 1592/2157] kola/validate-symlinks: skip `/usr/lib/firmware`
 symlinks

The sym links in `/usr/lib/firmware` are often broken and are
typically not an issue. Let's skip validating the links in this
location altogether.
See: https://github.com/coreos/fedora-coreos-tracker/issues/1479
---
 tests/kola/files/validate-symlinks | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index e070653fae..1bf0e1aeca 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -11,14 +11,16 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# List of known broken symlinks that require further investigation:
+# List of known broken symlinks that require further investigation.
+# The sym links in /usr/lib/firmware are often broken and are
+# typically not an issue, so let's skip this location altogether.
 list_broken_symlinks_skip=(
     '/etc/mtab'
     '/etc/ssl/'
     '/etc/swid/swidtags.d/fedoraproject.org'
     '/etc/xdg/systemd/user'
     '/usr/lib/.build-id/'
-    '/usr/lib/firmware/qcom/LENOVO/21BX.xz'
+    '/usr/lib/firmware'
     '/usr/lib/modules/'
     '/usr/share/rhel/secrets/etc-pki-entitlement'
     '/usr/share/rhel/secrets/redhat.repo'

From 73d50164ed97befb1a908310cb3fc9ce5900db0c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 Apr 2023 05:23:06 +0000
Subject: [PATCH 1593/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/547/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c848348e66..c7bd9b52b3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc38.aarch64"
+      "evra": "32:9.18.14-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc38.noarch"
+      "evra": "32:9.18.14-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc38.aarch64"
+      "evra": "32:9.18.14-1.fc38.aarch64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
@@ -373,7 +373,7 @@
       "evra": "2.40.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.1-1.fc38.aarch64"
+      "evra": "2.76.2-1.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-1.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-25T00:00:00Z",
+    "generated": "2023-04-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-23T22:33:36Z"
+        "generated": "2023-04-25T04:24:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-25T01:42:41Z"
+        "generated": "2023-04-27T01:17:26Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index edd0da8999..e156f5674f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -70,13 +70,13 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc38.ppc64le"
+      "evra": "32:9.18.14-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc38.noarch"
+      "evra": "32:9.18.14-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc38.ppc64le"
+      "evra": "32:9.18.14-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -364,7 +364,7 @@
       "evra": "2.40.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.1-1.fc38.ppc64le"
+      "evra": "2.76.2-1.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-1.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-25T00:00:00Z",
+    "generated": "2023-04-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-23T22:31:12Z"
+        "generated": "2023-04-25T04:21:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-25T01:42:43Z"
+        "generated": "2023-04-27T01:17:27Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bec4e52c3f..8820891563 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc38.s390x"
+      "evra": "32:9.18.14-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc38.noarch"
+      "evra": "32:9.18.14-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc38.s390x"
+      "evra": "32:9.18.14-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -349,7 +349,7 @@
       "evra": "2.40.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.1-1.fc38.s390x"
+      "evra": "2.76.2-1.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-1.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-25T00:00:00Z",
+    "generated": "2023-04-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-23T22:30:52Z"
+        "generated": "2023-04-25T04:21:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-25T01:42:45Z"
+        "generated": "2023-04-27T01:17:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 93281612a0..17927eae0d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.13-1.fc38.x86_64"
+      "evra": "32:9.18.14-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.13-1.fc38.noarch"
+      "evra": "32:9.18.14-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.13-1.fc38.x86_64"
+      "evra": "32:9.18.14-1.fc38.x86_64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
@@ -373,7 +373,7 @@
       "evra": "2.40.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.1-1.fc38.x86_64"
+      "evra": "2.76.2-1.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-1.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-25T00:00:00Z",
+    "generated": "2023-04-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-23T22:35:46Z"
+        "generated": "2023-04-25T04:26:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-25T01:42:46Z"
+        "generated": "2023-04-27T01:17:31Z"
       }
     }
   }

From fae9e53813f54c0fc24c37189c2bbf7593f46e87 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 28 Apr 2023 22:37:07 +0000
Subject: [PATCH 1594/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/549/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c7bd9b52b3..4e2ef95178 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.3-2.fc38.aarch64"
+      "evra": "1.8.4-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -370,7 +370,7 @@
       "evra": "0.21.1-2.fc38.aarch64"
     },
     "git-core": {
-      "evra": "2.40.0-1.fc38.aarch64"
+      "evra": "2.40.1-1.fc38.aarch64"
     },
     "glib2": {
       "evra": "2.76.2-1.fc38.aarch64"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.12-300.fc38.aarch64"
+      "evra": "6.2.13-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.12-300.fc38.aarch64"
+      "evra": "6.2.13-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.12-300.fc38.aarch64"
+      "evra": "6.2.13-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.12-300.fc38.aarch64"
+      "evra": "6.2.13-300.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1093,10 +1093,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1222,10 +1222,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1472-1.fc38.noarch"
+      "evra": "2:9.0.1486-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1472-1.fc38.aarch64"
+      "evra": "2:9.0.1486-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-27T00:00:00Z",
+    "generated": "2023-04-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-25T04:24:30Z"
+        "generated": "2023-04-27T05:29:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-27T01:17:26Z"
+        "generated": "2023-04-28T02:28:04Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e156f5674f..835bbbe680 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.3-2.fc38.ppc64le"
+      "evra": "1.8.4-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -361,7 +361,7 @@
       "evra": "0.21.1-2.fc38.ppc64le"
     },
     "git-core": {
-      "evra": "2.40.0-1.fc38.ppc64le"
+      "evra": "2.40.1-1.fc38.ppc64le"
     },
     "glib2": {
       "evra": "2.76.2-1.fc38.ppc64le"
@@ -490,16 +490,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.12-300.fc38.ppc64le"
+      "evra": "6.2.13-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.12-300.fc38.ppc64le"
+      "evra": "6.2.13-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.12-300.fc38.ppc64le"
+      "evra": "6.2.13-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.12-300.fc38.ppc64le"
+      "evra": "6.2.13-300.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1099,10 +1099,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1228,10 +1228,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1472-1.fc38.noarch"
+      "evra": "2:9.0.1486-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1472-1.fc38.ppc64le"
+      "evra": "2:9.0.1486-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-27T00:00:00Z",
+    "generated": "2023-04-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-25T04:21:49Z"
+        "generated": "2023-04-27T05:28:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-27T01:17:27Z"
+        "generated": "2023-04-28T02:28:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8820891563..96d73776d5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -178,7 +178,7 @@
       "evra": "3.17.1-5.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.3-2.fc38.s390x"
+      "evra": "1.8.4-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -346,7 +346,7 @@
       "evra": "1.0.9-5.fc38.s390x"
     },
     "git-core": {
-      "evra": "2.40.0-1.fc38.s390x"
+      "evra": "2.40.1-1.fc38.s390x"
     },
     "glib2": {
       "evra": "2.76.2-1.fc38.s390x"
@@ -457,16 +457,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.12-300.fc38.s390x"
+      "evra": "6.2.13-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.12-300.fc38.s390x"
+      "evra": "6.2.13-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.12-300.fc38.s390x"
+      "evra": "6.2.13-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.12-300.fc38.s390x"
+      "evra": "6.2.13-300.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1027,10 +1027,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1153,10 +1153,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1472-1.fc38.noarch"
+      "evra": "2:9.0.1486-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1472-1.fc38.s390x"
+      "evra": "2:9.0.1486-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-27T00:00:00Z",
+    "generated": "2023-04-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-25T04:21:38Z"
+        "generated": "2023-04-27T05:28:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-27T01:17:29Z"
+        "generated": "2023-04-28T02:28:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 17927eae0d..211ae4e28c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.3-2.fc38.x86_64"
+      "evra": "1.8.4-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -370,7 +370,7 @@
       "evra": "0.21.1-2.fc38.x86_64"
     },
     "git-core": {
-      "evra": "2.40.0-1.fc38.x86_64"
+      "evra": "2.40.1-1.fc38.x86_64"
     },
     "glib2": {
       "evra": "2.76.2-1.fc38.x86_64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.12-300.fc38.x86_64"
+      "evra": "6.2.13-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.12-300.fc38.x86_64"
+      "evra": "6.2.13-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.12-300.fc38.x86_64"
+      "evra": "6.2.13-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.12-300.fc38.x86_64"
+      "evra": "6.2.13-300.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1096,10 +1096,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.11-1.fc38.noarch"
+      "evra": "38.12-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1225,10 +1225,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1472-1.fc38.noarch"
+      "evra": "2:9.0.1486-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1472-1.fc38.x86_64"
+      "evra": "2:9.0.1486-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-27T00:00:00Z",
+    "generated": "2023-04-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-25T04:26:17Z"
+        "generated": "2023-04-27T05:29:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-27T01:17:31Z"
+        "generated": "2023-04-28T02:28:10Z"
       }
     }
   }

From 589fcb47fbc753154c3c0df8f86ba9b7d08e8312 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Apr 2023 00:14:20 +0000
Subject: [PATCH 1595/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1745a8f579..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,18 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  curl:
-    evr: 7.87.0-8.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
-      type: fast-track
-  libcurl-minimal:
-    evr: 7.87.0-8.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-eec1379708
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1477
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From f3344d1f6c24da6363407dbff42764a60212c8f9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Apr 2023 22:24:00 +0000
Subject: [PATCH 1596/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/550/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4e2ef95178..6d43f6bb26 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.aarch64"
     },
     "dracut": {
-      "evra": "059-2.fc38.aarch64"
+      "evra": "059-3.fc38.aarch64"
     },
     "dracut-network": {
-      "evra": "059-2.fc38.aarch64"
+      "evra": "059-3.fc38.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-2.fc38.aarch64"
+      "evra": "059-3.fc38.aarch64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.aarch64"
@@ -547,7 +547,7 @@
       "evra": "2.5.5-6.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.0.1-0.12.fc38.aarch64"
+      "evra": "13.1.1-1.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -613,7 +613,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.0.1-0.12.fc38.aarch64"
+      "evra": "13.1.1-1.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -709,7 +709,7 @@
       "evra": "2.0.0-5.fc38.aarch64"
     },
     "libnvme": {
-      "evra": "1.4-1.fc38.aarch64"
+      "evra": "1.4-2.fc38.aarch64"
     },
     "libpath_utils": {
       "evra": "0.2.1-53.fc38.aarch64"
@@ -781,7 +781,7 @@
       "evra": "2.8.2-4.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.12.fc38.aarch64"
+      "evra": "13.1.1-1.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -946,7 +946,7 @@
       "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-1.fc38.aarch64"
+      "evra": "2.4-2.fc38.aarch64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-28T00:00:00Z",
+    "generated": "2023-04-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-27T05:29:28Z"
+        "generated": "2023-04-28T22:41:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-28T02:28:04Z"
+        "generated": "2023-04-29T02:45:10Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 835bbbe680..ca2ed12db7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.ppc64le"
     },
     "dracut": {
-      "evra": "059-2.fc38.ppc64le"
+      "evra": "059-3.fc38.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-2.fc38.ppc64le"
+      "evra": "059-3.fc38.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-2.fc38.ppc64le"
+      "evra": "059-3.fc38.ppc64le"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.ppc64le"
@@ -541,7 +541,7 @@
       "evra": "2.5.5-6.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.0.1-0.12.fc38.ppc64le"
+      "evra": "13.1.1-1.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -607,7 +607,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.0.1-0.12.fc38.ppc64le"
+      "evra": "13.1.1-1.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -703,7 +703,7 @@
       "evra": "2.0.0-5.fc38.ppc64le"
     },
     "libnvme": {
-      "evra": "1.4-1.fc38.ppc64le"
+      "evra": "1.4-2.fc38.ppc64le"
     },
     "libpath_utils": {
       "evra": "0.2.1-53.fc38.ppc64le"
@@ -781,7 +781,7 @@
       "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.12.fc38.ppc64le"
+      "evra": "13.1.1-1.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -943,7 +943,7 @@
       "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-1.fc38.ppc64le"
+      "evra": "2.4-2.fc38.ppc64le"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-28T00:00:00Z",
+    "generated": "2023-04-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-27T05:28:55Z"
+        "generated": "2023-04-28T22:41:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-28T02:28:06Z"
+        "generated": "2023-04-29T02:45:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 96d73776d5..09994fc103 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -241,13 +241,13 @@
       "evra": "4.2-6.fc38.s390x"
     },
     "dracut": {
-      "evra": "059-2.fc38.s390x"
+      "evra": "059-3.fc38.s390x"
     },
     "dracut-network": {
-      "evra": "059-2.fc38.s390x"
+      "evra": "059-3.fc38.s390x"
     },
     "dracut-squash": {
-      "evra": "059-2.fc38.s390x"
+      "evra": "059-3.fc38.s390x"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.s390x"
@@ -568,7 +568,7 @@
       "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.0.1-0.12.fc38.s390x"
+      "evra": "13.1.1-1.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -655,7 +655,7 @@
       "evra": "2.0.0-5.fc38.s390x"
     },
     "libnvme": {
-      "evra": "1.4-1.fc38.s390x"
+      "evra": "1.4-2.fc38.s390x"
     },
     "libpath_utils": {
       "evra": "0.2.1-53.fc38.s390x"
@@ -727,7 +727,7 @@
       "evra": "2.8.2-4.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.12.fc38.s390x"
+      "evra": "13.1.1-1.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -880,7 +880,7 @@
       "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-1.fc38.s390x"
+      "evra": "2.4-2.fc38.s390x"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-28T00:00:00Z",
+    "generated": "2023-04-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-27T05:28:24Z"
+        "generated": "2023-04-28T22:42:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-28T02:28:08Z"
+        "generated": "2023-04-29T02:45:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 211ae4e28c..919f13a7ed 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.x86_64"
     },
     "dracut": {
-      "evra": "059-2.fc38.x86_64"
+      "evra": "059-3.fc38.x86_64"
     },
     "dracut-network": {
-      "evra": "059-2.fc38.x86_64"
+      "evra": "059-3.fc38.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-2.fc38.x86_64"
+      "evra": "059-3.fc38.x86_64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.x86_64"
@@ -616,7 +616,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.0.1-0.12.fc38.x86_64"
+      "evra": "13.1.1-1.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -712,7 +712,7 @@
       "evra": "2.0.0-5.fc38.x86_64"
     },
     "libnvme": {
-      "evra": "1.4-1.fc38.x86_64"
+      "evra": "1.4-2.fc38.x86_64"
     },
     "libpath_utils": {
       "evra": "0.2.1-53.fc38.x86_64"
@@ -784,7 +784,7 @@
       "evra": "2.8.2-4.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.12.fc38.x86_64"
+      "evra": "13.1.1-1.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -952,7 +952,7 @@
       "evra": "20230404-149.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-1.fc38.x86_64"
+      "evra": "2.4-2.fc38.x86_64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-28T00:00:00Z",
+    "generated": "2023-04-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-27T05:29:58Z"
+        "generated": "2023-04-28T22:42:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-28T02:28:10Z"
+        "generated": "2023-04-29T02:45:17Z"
       }
     }
   }

From 574b6677a235ecd37f6269799be1a42b6561006c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 30 Apr 2023 22:35:57 +0000
Subject: [PATCH 1597/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/551/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6d43f6bb26..710dc6a19a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -376,16 +376,16 @@
       "evra": "2.76.2-1.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-1.fc38.aarch64"
+      "evra": "2.37-4.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-1.fc38.aarch64"
+      "evra": "2.37-4.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-1.fc38.aarch64"
+      "evra": "2.37-4.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-1.fc38.aarch64"
+      "evra": "2.37-4.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-29T00:00:00Z",
+    "generated": "2023-04-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-28T22:41:39Z"
+        "generated": "2023-04-29T22:29:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-29T02:45:10Z"
+        "generated": "2023-04-30T01:24:33Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ca2ed12db7..bc6a8e519f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -367,16 +367,16 @@
       "evra": "2.76.2-1.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-1.fc38.ppc64le"
+      "evra": "2.37-4.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-1.fc38.ppc64le"
+      "evra": "2.37-4.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-1.fc38.ppc64le"
+      "evra": "2.37-4.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-1.fc38.ppc64le"
+      "evra": "2.37-4.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-29T00:00:00Z",
+    "generated": "2023-04-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-28T22:41:13Z"
+        "generated": "2023-04-29T22:29:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-29T02:45:12Z"
+        "generated": "2023-04-30T01:24:35Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 09994fc103..fd30578d98 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -352,16 +352,16 @@
       "evra": "2.76.2-1.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-1.fc38.s390x"
+      "evra": "2.37-4.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-1.fc38.s390x"
+      "evra": "2.37-4.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-1.fc38.s390x"
+      "evra": "2.37-4.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-1.fc38.s390x"
+      "evra": "2.37-4.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-29T00:00:00Z",
+    "generated": "2023-04-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-28T22:42:22Z"
+        "generated": "2023-04-29T22:28:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-29T02:45:14Z"
+        "generated": "2023-04-30T01:24:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 919f13a7ed..b0a93aca5c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -376,16 +376,16 @@
       "evra": "2.76.2-1.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-1.fc38.x86_64"
+      "evra": "2.37-4.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-1.fc38.x86_64"
+      "evra": "2.37-4.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-1.fc38.x86_64"
+      "evra": "2.37-4.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-1.fc38.x86_64"
+      "evra": "2.37-4.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-29T00:00:00Z",
+    "generated": "2023-04-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-28T22:42:10Z"
+        "generated": "2023-04-29T22:31:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-29T02:45:17Z"
+        "generated": "2023-04-30T01:24:40Z"
       }
     }
   }

From 527d93cf7138750848e903204f8aa549e24486d9 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 26 Apr 2023 15:11:38 +0800
Subject: [PATCH 1598/2157] tests: enable
 `ext.config.shared.root-reprovision.swap-before-root` on rhcos

As https://bugzilla.redhat.com/show_bug.cgi?id=1952686 is fixed,
and fixed version is `systemd-239-48.el8`.
See https://github.com/openshift/os/issues/665
---
 tests/kola/root-reprovision/swap-before-root/test.sh | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index 8550c16c7a..e425180759 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -2,9 +2,6 @@
 ## kola:
 ##   # This test's config manually references /dev/vda and is thus QEMU only
 ##   platforms: qemu
-##   # This test only runs on FCOS due to a problem enabling a swap partition on
-##   # RHCOS. See: https://github.com/openshift/os/issues/665
-##   distros: fcos
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher

From b8607dabb5e1a5a0795fe11b5089889038c150f6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 10 Apr 2023 10:49:29 -0400
Subject: [PATCH 1599/2157] coreos-teardown-initramfs: use NetworkManager to
 teardown networking

Now that NetworkManager is running as a systemd service in the
initramfs (in both Fedora and RHEL9+) we can use NetworkManager
itself to take down networking in the initramfs. Let's do that
to simplify our life a bit.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1459
---
 .../coreos-teardown-initramfs.service         | 14 ++---
 .../coreos-teardown-initramfs.sh              | 61 ++++---------------
 2 files changed, 19 insertions(+), 56 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
index b08c827bc5..9703eec33a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
@@ -18,13 +18,13 @@ DefaultDependencies=false
 Before=ignition-mount.service
 Before=ignition-complete.target
 
-# Since we are tearing down networking we need to make sure
-# NetworkManager has been stopped, otherwise it'll be trying
-# to react to our delete/down operations. Since the ordering
-# for ExecStop is the opposite of ExecStart we need to use
-# `Before=nm-initrd.service`.
-# https://issues.redhat.com/browse/OCPBUGS-11052
-Before=nm-initrd.service
+# Since we are tearing down networking using NetworkManager itself
+# we need to make sure NetworkManager is running. Similarly
+# dbus-broker since nmcli talks to the daemon via DBUS. Since the
+# ordering for ExecStop is the opposite of ExecStart we need to use
+# `After=` here.
+After=nm-initrd.service
+After=dbus-broker.service
 
 # Make sure ExecStop= runs before we switch root
 Conflicts=initrd-switch-root.target umount.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 12e8821f39..7f52ff85d6 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -168,55 +168,15 @@ propagate_initramfs_hostname() {
     fi
 }
 
-down_interface() {
-    echo "info: taking down network device: $1"
-    # On recommendation from the NM team let's try to delete the device
-    # first and if that doesn't work then set it to down and flush any
-    # associated addresses. Deleting virtual devices (bonds, teams, bridges,
-    # ip-tunnels, etc) will clean up any associated kernel resources. A real
-    # device can't be deleted so that will fail and we'll fallback to setting
-    # it down and flushing addresses.
-    if ! ip link delete $1; then
-        ip link set $1 down
-        ip addr flush dev $1
-    fi
-}
-
-# Iterate through the interfaces in the machine and take them down.
-# Note that in the future we would like to possibly use `nmcli` networking off`
-# for this. See the following two comments for details:
-# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
-# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599746049
-down_interfaces() {
-    if ! [ -z "$(ls /sys/class/net)" ]; then
-        for f in /sys/class/net/*; do
-            interface=$(basename "$f")
-            # The `bonding_masters` entry is not a true interface and thus
-            # cannot be taken down. Also skip local loopback
-            case "$interface" in
-                "lo" | "bonding_masters")
-                    continue
-                    ;;
-            esac
-            # When we start taking down devices some other devices can
-            # start to disappear (for example vlan on top of interface).
-            # If the device we're about to take down has disappeared
-            # since the start of this loop then skip taking it down.
-            if [ ! -e "$f" ]; then
-                echo "info: skipping teardown of ${interface}; no longer exists."
-                continue
-            fi
-            down_interface $interface
-        done
-    fi
-}
-
 main() {
     # Load libraries from dracut
     load_dracut_libs
 
-    # Take down all interfaces set up in the initramfs
-    down_interfaces
+    # Take down all networking set up in the initramfs
+    if systemctl is-active --quiet nm-initrd.service; then
+        echo "info: taking down initramfs networking"
+        nmcli networking off
+    fi
 
     # Clean up all routing
     echo "info: flushing all routing"
@@ -234,10 +194,13 @@ main() {
         propagate_initramfs_networking
     fi
 
-    # Now that the configuration has been propagated (or not)
-    # clean it up so that no information from outside of the
-    # real root is passed on to NetworkManager in the real root
-    rm -rf /run/NetworkManager/
+    # Configuration has been propagated, but we can't clean up
+    # /run/NetworkManager because NM is still running. Let's drop
+    # down a tmpfiles.d snippet so that it's cleaned up first thing
+    # in the real root. Doing it this way prevents us having to write
+    # another unit to do the cleanup after this service has finished.
+    echo "R! /run/NetworkManager - - - - -" > \
+        /run/tmpfiles.d/15-teardown-initramfs-networkmanager.conf
 
     rm -f /run/udev/rules.d/80-coreos-boot-disk.rules
     rm -f /dev/disk/by-id/coreos-boot-disk

From e5704ec71acfbef380940e071fd32adb24c721f7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 May 2023 22:27:29 +0000
Subject: [PATCH 1600/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/553/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 710dc6a19a..401b5b2b67 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.aarch64"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc38.aarch64"
+      "evra": "3.1.1-1.fc38.aarch64"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.aarch64"
@@ -289,13 +289,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-30T00:00:00Z",
+    "generated": "2023-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-29T22:29:39Z"
+        "generated": "2023-04-30T22:40:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-30T01:24:33Z"
+        "generated": "2023-05-02T00:52:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bc6a8e519f..fb972afc03 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc38.ppc64le"
+      "evra": "3.1.1-1.fc38.ppc64le"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.ppc64le"
@@ -280,13 +280,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-30T00:00:00Z",
+    "generated": "2023-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-29T22:29:12Z"
+        "generated": "2023-04-30T22:40:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-30T01:24:35Z"
+        "generated": "2023-05-02T00:52:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index fd30578d98..f765cab001 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.s390x"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc38.s390x"
+      "evra": "3.1.1-1.fc38.s390x"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.s390x"
@@ -277,13 +277,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-30T00:00:00Z",
+    "generated": "2023-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-29T22:28:41Z"
+        "generated": "2023-04-30T22:39:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-30T01:24:38Z"
+        "generated": "2023-05-02T00:52:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b0a93aca5c..9a0e64a0e9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.x86_64"
     },
     "audit-libs": {
-      "evra": "3.1-2.fc38.x86_64"
+      "evra": "3.1.1-1.fc38.x86_64"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.x86_64"
@@ -289,13 +289,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-34.noarch"
+      "evra": "38-35.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-04-30T00:00:00Z",
+    "generated": "2023-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-29T22:31:27Z"
+        "generated": "2023-04-30T22:41:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-04-30T01:24:40Z"
+        "generated": "2023-05-02T00:52:30Z"
       }
     }
   }

From 57b39fbeb42918da653e35877a5ed4ccf883db7b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 3 May 2023 21:22:36 -0400
Subject: [PATCH 1601/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64

Still not fixed yet, but is being worked on.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 257627e634..df0204f29b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,6 +15,6 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-05-03
+  snooze: 2023-05-23
   arches:
     - aarch64

From 6130b45f4464f09e354070652119a6cf7bb309f2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 4 May 2023 02:39:34 +0000
Subject: [PATCH 1602/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/556/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 401b5b2b67..ebb15caf2f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -271,13 +271,13 @@
       "evra": "38-7.fc38.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc38.noarch"
+      "evra": "0.189-2.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc38.aarch64"
+      "evra": "0.189-2.fc38.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc38.aarch64"
+      "evra": "0.189-2.fc38.aarch64"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc38.aarch64"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.13-300.fc38.aarch64"
+      "evra": "6.2.14-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.13-300.fc38.aarch64"
+      "evra": "6.2.14-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.13-300.fc38.aarch64"
+      "evra": "6.2.14-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.13-300.fc38.aarch64"
+      "evra": "6.2.14-300.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1057,19 +1057,19 @@
       "evra": "1.2.6-4.rc2.fc38.aarch64"
     },
     "rpm": {
-      "evra": "4.18.1-1.fc38.aarch64"
+      "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.18.1-1.fc38.aarch64"
+      "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc38.aarch64"
+      "evra": "2023.3-1.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc38.aarch64"
+      "evra": "2023.3-1.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-1.fc38.aarch64"
+      "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-sequoia": {
       "evra": "1.4.0-1.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-02T00:00:00Z",
+    "generated": "2023-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-30T22:40:33Z"
+        "generated": "2023-05-02T22:31:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-02T00:52:23Z"
+        "generated": "2023-05-03T02:20:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fb972afc03..25871c6d71 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -262,13 +262,13 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc38.noarch"
+      "evra": "0.189-2.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc38.ppc64le"
+      "evra": "0.189-2.fc38.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc38.ppc64le"
+      "evra": "0.189-2.fc38.ppc64le"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc38.ppc64le"
@@ -490,16 +490,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.13-300.fc38.ppc64le"
+      "evra": "6.2.14-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.13-300.fc38.ppc64le"
+      "evra": "6.2.14-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.13-300.fc38.ppc64le"
+      "evra": "6.2.14-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.13-300.fc38.ppc64le"
+      "evra": "6.2.14-300.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1063,19 +1063,19 @@
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
     },
     "rpm": {
-      "evra": "4.18.1-1.fc38.ppc64le"
+      "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-libs": {
-      "evra": "4.18.1-1.fc38.ppc64le"
+      "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc38.ppc64le"
+      "evra": "2023.3-1.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc38.ppc64le"
+      "evra": "2023.3-1.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-1.fc38.ppc64le"
+      "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-sequoia": {
       "evra": "1.4.0-1.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-02T00:00:00Z",
+    "generated": "2023-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-30T22:40:07Z"
+        "generated": "2023-05-02T22:30:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-02T00:52:25Z"
+        "generated": "2023-05-03T02:20:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f765cab001..97f2928368 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -259,13 +259,13 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc38.noarch"
+      "evra": "0.189-2.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc38.s390x"
+      "evra": "0.189-2.fc38.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc38.s390x"
+      "evra": "0.189-2.fc38.s390x"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc38.s390x"
@@ -457,16 +457,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.13-300.fc38.s390x"
+      "evra": "6.2.14-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.13-300.fc38.s390x"
+      "evra": "6.2.14-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.13-300.fc38.s390x"
+      "evra": "6.2.14-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.13-300.fc38.s390x"
+      "evra": "6.2.14-300.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -988,19 +988,19 @@
       "evra": "1.2.6-4.rc2.fc38.s390x"
     },
     "rpm": {
-      "evra": "4.18.1-1.fc38.s390x"
+      "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-libs": {
-      "evra": "4.18.1-1.fc38.s390x"
+      "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc38.s390x"
+      "evra": "2023.3-1.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc38.s390x"
+      "evra": "2023.3-1.fc38.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-1.fc38.s390x"
+      "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-sequoia": {
       "evra": "1.4.0-1.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-02T00:00:00Z",
+    "generated": "2023-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-30T22:39:51Z"
+        "generated": "2023-05-02T22:30:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-02T00:52:28Z"
+        "generated": "2023-05-03T02:21:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9a0e64a0e9..887a85ebb0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -271,13 +271,13 @@
       "evra": "38-7.fc38.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-1.fc38.noarch"
+      "evra": "0.189-2.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-1.fc38.x86_64"
+      "evra": "0.189-2.fc38.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.189-1.fc38.x86_64"
+      "evra": "0.189-2.fc38.x86_64"
     },
     "ethtool": {
       "evra": "2:6.2-1.fc38.x86_64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.13-300.fc38.x86_64"
+      "evra": "6.2.14-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.13-300.fc38.x86_64"
+      "evra": "6.2.14-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.13-300.fc38.x86_64"
+      "evra": "6.2.14-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.13-300.fc38.x86_64"
+      "evra": "6.2.14-300.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1060,19 +1060,19 @@
       "evra": "1.2.6-4.rc2.fc38.x86_64"
     },
     "rpm": {
-      "evra": "4.18.1-1.fc38.x86_64"
+      "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.18.1-1.fc38.x86_64"
+      "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.2-1.fc38.x86_64"
+      "evra": "2023.3-1.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.2-1.fc38.x86_64"
+      "evra": "2023.3-1.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-1.fc38.x86_64"
+      "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-sequoia": {
       "evra": "1.4.0-1.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-02T00:00:00Z",
+    "generated": "2023-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-04-30T22:41:08Z"
+        "generated": "2023-05-02T22:31:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-02T00:52:30Z"
+        "generated": "2023-05-03T02:21:04Z"
       }
     }
   }

From 7f10fbfd8ddea2d7f60343ff19d608eda2c5e3cf Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 May 2023 03:03:10 +0000
Subject: [PATCH 1603/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/558/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ebb15caf2f..ccf3bfec55 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "7.87.0-8.fc38.aarch64"
+      "evra": "8.0.1-1.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -580,7 +580,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-8.fc38.aarch64"
+      "evra": "8.0.1-1.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -931,7 +931,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.9-1.fc38.aarch64"
+      "evra": "2.2.10-3.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-04T00:00:00Z",
+    "generated": "2023-05-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-02T22:31:03Z"
+        "generated": "2023-05-04T02:45:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-03T02:20:57Z"
+        "generated": "2023-05-05T01:18:06Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 25871c6d71..848fc995a7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "7.87.0-8.fc38.ppc64le"
+      "evra": "8.0.1-1.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -574,7 +574,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-8.fc38.ppc64le"
+      "evra": "8.0.1-1.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -928,7 +928,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.9-1.fc38.ppc64le"
+      "evra": "2.2.10-3.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-04T00:00:00Z",
+    "generated": "2023-05-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-02T22:30:39Z"
+        "generated": "2023-05-04T02:44:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-03T02:20:59Z"
+        "generated": "2023-05-05T01:18:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 97f2928368..c234220993 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "7.87.0-8.fc38.s390x"
+      "evra": "8.0.1-1.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -538,7 +538,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-8.fc38.s390x"
+      "evra": "8.0.1-1.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -868,7 +868,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.9-1.fc38.s390x"
+      "evra": "2.2.10-3.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-04T00:00:00Z",
+    "generated": "2023-05-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-02T22:30:20Z"
+        "generated": "2023-05-04T02:46:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-03T02:21:02Z"
+        "generated": "2023-05-05T01:18:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 887a85ebb0..e52b233454 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "7.87.0-8.fc38.x86_64"
+      "evra": "8.0.1-1.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -583,7 +583,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-8.fc38.x86_64"
+      "evra": "8.0.1-1.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -937,7 +937,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.9-1.fc38.x86_64"
+      "evra": "2.2.10-3.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-04T00:00:00Z",
+    "generated": "2023-05-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-02T22:31:59Z"
+        "generated": "2023-05-04T02:48:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-03T02:21:04Z"
+        "generated": "2023-05-05T01:18:14Z"
       }
     }
   }

From c26fcb5b9437f3df128be7f8bec0c26efd110909 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 5 May 2023 12:35:35 -0400
Subject: [PATCH 1604/2157] tests: fix inaccurate comment in bootif test

The link was to testiso code, which isn't the code being excercised
here. Let's just update the comment to say it's the default one QEMU
assigns.
---
 .../networking/no-default-initramfs-net-propagation/bootif    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index 58d263f696..24c1bfb70f 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -3,8 +3,8 @@
 ##   # appendFirstbootKernelArgs is only supported on qemu
 ##   platforms: qemu
 ##   # Append BOOTIF kernel argument so we can test how nm-initrd-generator
-##   # and the coreos-teardown-initramfs interact. The MAC address is from:
-##   # https://github.com/coreos/coreos-assembler/blob/d5f1623aad6d133b2c7c00e784c04ab6828450c1/mantle/platform/metal.go#L468
+##   # and the coreos-teardown-initramfs interact. The MAC address is the
+##   # default one QEMU assigns.
 ##   # Add rd.neednet=1 so we can force networking to be brought up on
 ##   # qemu to test that doing so doesn't materially change things.
 ##   appendFirstbootKernelArgs: "BOOTIF=52:54:00:12:34:56 rd.neednet=1"

From d7c211be5ff14bd21b8a912123710c50348e7bd4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 4 May 2023 15:58:53 -0400
Subject: [PATCH 1605/2157] overlay.d/05core: add ifname= karg udev rule
 propagation

This adds to coreos-teardown-initramfs.{service,sh} the ability to
propagate udev rules that were generated by ifname-genrules.sh [1]
to the real root of the machine to allow for an ephemeral ifname=
karg on the first boot to have persistent configuration effect (similar
to our other networking kernel arguments).

This also adds tests for both the firstboot and everyboot case for
the ifname= karg.

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/553

[1] https://github.com/dracutdevs/dracut/blob/5c3d0a96473ac339fa2d1b25213b8f301c1cfd0d/modules.d/40network/ifname-genrules.sh
---
 .../coreos-teardown-initramfs.sh              | 15 ++++++
 .../networking/ifname-karg/data/commonlib.sh  |  1 +
 .../ifname-karg/data/ifname-karg-lib.sh       | 36 ++++++++++++++
 .../everyboot-systemd-link-file/config.bu     |  7 +++
 .../data/commonlib.sh                         |  1 +
 .../data/ifname-karg-lib.sh                   |  1 +
 .../everyboot-systemd-link-file/test.sh       | 43 +++++++++++++++++
 .../udev-rule-firstboot-propagation           | 47 +++++++++++++++++++
 8 files changed, 151 insertions(+)
 create mode 120000 tests/kola/networking/ifname-karg/data/commonlib.sh
 create mode 100644 tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
 create mode 100644 tests/kola/networking/ifname-karg/everyboot-systemd-link-file/config.bu
 create mode 120000 tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/commonlib.sh
 create mode 120000 tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/ifname-karg-lib.sh
 create mode 100755 tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
 create mode 100755 tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 7f52ff85d6..afe69a99b4 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -168,6 +168,20 @@ propagate_initramfs_hostname() {
     fi
 }
 
+# Propagate the ifname= karg udev rules. The policy here is:
+#
+#     - IF ifname karg udev rule file exists
+#     - THEN copy it to the real root
+#
+propagate_ifname_udev_rules() {
+    local udev_file='/etc/udev/rules.d/80-ifname.rules'
+    if [ -e "${udev_file}" ]; then
+        echo "info: propagating ifname karg udev rules to the real root"
+        cp -v "${udev_file}" "/sysroot/${udev_file}"
+        coreos-relabel "${udev_file}"
+    fi
+}
+
 main() {
     # Load libraries from dracut
     load_dracut_libs
@@ -192,6 +206,7 @@ main() {
     else
         propagate_initramfs_hostname
         propagate_initramfs_networking
+        propagate_ifname_udev_rules
     fi
 
     # Configuration has been propagated, but we can't clean up
diff --git a/tests/kola/networking/ifname-karg/data/commonlib.sh b/tests/kola/networking/ifname-karg/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh b/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
new file mode 100644
index 0000000000..8b6dd2f8dc
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
@@ -0,0 +1,36 @@
+# This is a library created for our ifname-karg tests
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# check IP for given NIC name
+check_ip() {
+    # User provides the NIC name.
+    local nic_name=$1
+    # The expected IP is the first one in the range given out by QEMU
+    # user mode networking: https://www.qemu.org/docs/master/system/devices/net.html#using-the-user-mode-network-stack
+    local expected_ip="10.0.2.15"
+    # Verify the given nic name has the expected IP.
+    local nic_ip=$(get_ipv4_for_nic ${nic_name})
+    if [ "${nic_ip}" != "${expected_ip}" ]; then
+        fatal "Error: get ${nic_name} ip = ${nic_ip}, expected is ${expected_ip}"
+    fi
+    ok "get ${nic_name} ip is ${expected_ip}"
+}
+
+# simple file existence check
+check_file_exists() {
+    local file=$1
+    if [ ! -f $file ]; then
+        fatal "expected file ${file} doesn't exist on disk"
+    fi
+    ok "expected file ${file} exists on disk"
+}
+
+# simple file non-existence check
+check_file_not_exists() {
+    local file=$1
+    if [ -f $file ]; then
+        fatal "expected file ${file} to not exist on disk"
+    fi
+    ok "file ${file} does not exist on disk"
+}
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/config.bu b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/config.bu
new file mode 100644
index 0000000000..c79d3aa60e
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/config.bu
@@ -0,0 +1,7 @@
+variant: fcos
+version: 1.4.0
+kernel_arguments:
+  should_exist:
+    # Persistently set the ifname kernel argument to set the given MAC to the
+    # NIC named `kolatest`. The MAC address is the default one QEMU assigns.
+    - ifname=kolatest:52:54:00:12:34:56
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/commonlib.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/commonlib.sh
new file mode 120000
index 0000000000..7028449b11
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/commonlib.sh
@@ -0,0 +1 @@
+../../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/ifname-karg-lib.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/ifname-karg-lib.sh
new file mode 120000
index 0000000000..d50acc0fb4
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/data/ifname-karg-lib.sh
@@ -0,0 +1 @@
+../../data/ifname-karg-lib.sh
\ No newline at end of file
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
new file mode 100755
index 0000000000..afc715f3f4
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
@@ -0,0 +1,43 @@
+#!/bin/bash
+## kola:
+##   description: Verify persistent ifname= karg works via systemd-network-generator.
+##   # appendFirstbootKernelArgs is only supported on QEMU
+##   platforms: qemu
+##   # Don't run the propagate code. With this test we want to
+##   # validate that the systemd.link file gets created by
+##   # systemd-network-generator.
+##   appendFirstbootKernelArgs: "coreos.no_persist_ip"
+##   # appendFirstbootKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+. $KOLA_EXT_DATA/ifname-karg-lib.sh
+
+nicname='kolatest'
+
+run_tests() {
+    # Make sure nothing was persisted from the initramfs
+    check_file_not_exists '/etc/udev/rules.d/80-ifname.rules' 
+    # Make sure systemd-network-generator ran (from the real root)
+    check_file_exists "/run/systemd/network/90-${nicname}.link"
+    # Make sure the NIC is in use and got the expected IP address
+    check_ip "${nicname}"
+}
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+    "")
+        ok "first boot"
+        run_tests
+        /tmp/autopkgtest-reboot rebooted
+      ;;
+
+    rebooted)
+        ok "second boot"
+        run_tests
+      ;;
+
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac
diff --git a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
new file mode 100755
index 0000000000..0d11c01691
--- /dev/null
+++ b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
@@ -0,0 +1,47 @@
+#!/bin/bash
+## kola:
+##   description: Verify firstboot ifname= karg udev rule propoagation works.
+##   # appendFirstbootKernelArgs is only supported on QEMU
+##   platforms: qemu
+##   # Append ifname kernel argument to set the given MAC address to the NIC
+##   # named `kolatest`. The MAC address is the default one QEMU assigns.
+##   appendFirstbootKernelArgs: "ifname=kolatest:52:54:00:12:34:56"
+##   # appendFirstbootKernelArgs doesn't work on s390x
+##   # https://github.com/coreos/coreos-assembler/issues/2776
+##   architectures: "!s390x"
+
+# Part of https://github.com/coreos/fedora-coreos-tracker/issues/553
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+. $KOLA_EXT_DATA/ifname-karg-lib.sh
+
+nicname='kolatest'
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+    "")
+        ok "first boot"
+        # Make sure the rules were persisted from the initramfs
+        check_file_exists '/etc/udev/rules.d/80-ifname.rules' 
+        # On first boot we expect systemd-network-generator to run too
+        # because the ifname= karg was present, but only for first boot
+        check_file_exists "/run/systemd/network/90-${nicname}.link"
+        # Make sure the NIC is in use and got the expected IP address
+        check_ip "${nicname}"
+        /tmp/autopkgtest-reboot rebooted
+      ;;
+
+    rebooted)
+        ok "second boot"
+        # Make sure the rules are still there
+        check_file_exists '/etc/udev/rules.d/80-ifname.rules' 
+        # On second boot the ifname= karg isn't there so the file
+        # created by systemd-network-generator shouldn't exist.
+        check_file_not_exists "/run/systemd/network/90-${nicname}.link"
+        # Make sure the NIC is in use and got the expected IP address
+        check_ip "${nicname}"
+      ;;
+
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From c73560cb7773f801b03616b979b9931e01476bfa Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 May 2023 01:00:12 +0000
Subject: [PATCH 1606/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/560/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ccf3bfec55..90f65f1e89 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc38.noarch"
+      "evra": "2:2.211.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -1271,10 +1271,10 @@
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-04T02:45:09Z"
+        "generated": "2023-05-05T03:07:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T01:18:06Z"
+        "generated": "2023-05-05T14:13:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 848fc995a7..2e4cf4fd19 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc38.noarch"
+      "evra": "2:2.211.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -1277,10 +1277,10 @@
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-04T02:44:39Z"
+        "generated": "2023-05-05T03:06:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T01:18:09Z"
+        "generated": "2023-05-05T14:13:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c234220993..822b365a9c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc38.noarch"
+      "evra": "2:2.211.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -1202,10 +1202,10 @@
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-04T02:46:25Z"
+        "generated": "2023-05-05T03:06:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T01:18:11Z"
+        "generated": "2023-05-05T14:13:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e52b233454..965dd80707 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.209.0-1.fc38.noarch"
+      "evra": "2:2.211.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -1274,10 +1274,10 @@
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-04T02:48:06Z"
+        "generated": "2023-05-05T03:08:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T01:18:14Z"
+        "generated": "2023-05-05T14:13:31Z"
       }
     }
   }

From 84b75f7136ae5a83b593d7956e3f6234cb709605 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 May 2023 22:38:37 +0000
Subject: [PATCH 1607/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/561/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 90f65f1e89..7e13f49b82 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,10 +163,10 @@
       "evra": "0.17.0-2.fc38.aarch64"
     },
     "coreutils": {
-      "evra": "9.1-11.fc38.aarch64"
+      "evra": "9.1-12.fc38.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.1-11.fc38.aarch64"
+      "evra": "9.1-12.fc38.aarch64"
     },
     "cpio": {
       "evra": "2.13-14.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-05T00:00:00Z",
+    "generated": "2023-05-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-05T03:07:26Z"
+        "generated": "2023-05-06T01:10:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T14:13:23Z"
+        "generated": "2023-05-06T02:53:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2e4cf4fd19..5346e10d19 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -163,10 +163,10 @@
       "evra": "0.17.0-2.fc38.ppc64le"
     },
     "coreutils": {
-      "evra": "9.1-11.fc38.ppc64le"
+      "evra": "9.1-12.fc38.ppc64le"
     },
     "coreutils-common": {
-      "evra": "9.1-11.fc38.ppc64le"
+      "evra": "9.1-12.fc38.ppc64le"
     },
     "cpio": {
       "evra": "2.13-14.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-05T00:00:00Z",
+    "generated": "2023-05-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-05T03:06:56Z"
+        "generated": "2023-05-06T01:09:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T14:13:25Z"
+        "generated": "2023-05-06T02:53:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 822b365a9c..1c36b32374 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -160,10 +160,10 @@
       "evra": "0.17.0-2.fc38.s390x"
     },
     "coreutils": {
-      "evra": "9.1-11.fc38.s390x"
+      "evra": "9.1-12.fc38.s390x"
     },
     "coreutils-common": {
-      "evra": "9.1-11.fc38.s390x"
+      "evra": "9.1-12.fc38.s390x"
     },
     "cpio": {
       "evra": "2.13-14.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-05T00:00:00Z",
+    "generated": "2023-05-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-05T03:06:37Z"
+        "generated": "2023-05-06T01:08:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T14:13:28Z"
+        "generated": "2023-05-06T02:53:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 965dd80707..7d5b8e4728 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -163,10 +163,10 @@
       "evra": "0.17.0-2.fc38.x86_64"
     },
     "coreutils": {
-      "evra": "9.1-11.fc38.x86_64"
+      "evra": "9.1-12.fc38.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.1-11.fc38.x86_64"
+      "evra": "9.1-12.fc38.x86_64"
     },
     "cpio": {
       "evra": "2.13-14.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-05T00:00:00Z",
+    "generated": "2023-05-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-05T03:08:07Z"
+        "generated": "2023-05-06T01:10:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-05T14:13:31Z"
+        "generated": "2023-05-06T02:53:31Z"
       }
     }
   }

From 0c916cd5450293ae5e539c3b9362e4429b7ff5a9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 7 May 2023 22:39:08 +0000
Subject: [PATCH 1608/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/562/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7e13f49b82..9073d5b421 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.aarch64"
+      "evra": "5.4.0-3.fc38.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.aarch64"
+      "evra": "5.4.0-3.fc38.aarch64"
     },
     "alternatives": {
-      "evra": "1.22-1.fc38.aarch64"
+      "evra": "1.24-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-2.fc38.aarch64"
+      "evra": "0.17.0-3.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-2.fc38.aarch64"
+      "evra": "0.17.0-3.fc38.aarch64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.aarch64"
@@ -931,7 +931,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.10-3.fc38.aarch64"
+      "evra": "2.2.10-4.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -1072,13 +1072,13 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-1.fc38.aarch64"
+      "evra": "1.4.0-2.fc38.aarch64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.6-1.fc38.aarch64"
+      "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.2-0.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-06T00:00:00Z",
+    "generated": "2023-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T01:10:20Z"
+        "generated": "2023-05-06T22:45:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-06T02:53:23Z"
+        "generated": "2023-05-07T01:16:06Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5346e10d19..c592b26db5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.ppc64le"
+      "evra": "5.4.0-3.fc38.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.ppc64le"
+      "evra": "5.4.0-3.fc38.ppc64le"
     },
     "alternatives": {
-      "evra": "1.22-1.fc38.ppc64le"
+      "evra": "1.24-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-2.fc38.ppc64le"
+      "evra": "0.17.0-3.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-2.fc38.ppc64le"
+      "evra": "0.17.0-3.fc38.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.ppc64le"
@@ -928,7 +928,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.10-3.fc38.ppc64le"
+      "evra": "2.2.10-4.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -1078,13 +1078,13 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-1.fc38.ppc64le"
+      "evra": "1.4.0-2.fc38.ppc64le"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.6-1.fc38.ppc64le"
+      "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.18.2-0.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-06T00:00:00Z",
+    "generated": "2023-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T01:09:04Z"
+        "generated": "2023-05-06T22:41:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-06T02:53:25Z"
+        "generated": "2023-05-07T01:16:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1c36b32374..50291c3800 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.s390x"
+      "evra": "5.4.0-3.fc38.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.s390x"
+      "evra": "5.4.0-3.fc38.s390x"
     },
     "alternatives": {
-      "evra": "1.22-1.fc38.s390x"
+      "evra": "1.24-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -154,10 +154,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-2.fc38.s390x"
+      "evra": "0.17.0-3.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-2.fc38.s390x"
+      "evra": "0.17.0-3.fc38.s390x"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.s390x"
@@ -868,7 +868,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.10-3.fc38.s390x"
+      "evra": "2.2.10-4.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -1003,13 +1003,13 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-1.fc38.s390x"
+      "evra": "1.4.0-2.fc38.s390x"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.s390x"
     },
     "runc": {
-      "evra": "2:1.1.6-1.fc38.s390x"
+      "evra": "2:1.1.7-1.fc38.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.25.0-4.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-06T00:00:00Z",
+    "generated": "2023-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T01:08:39Z"
+        "generated": "2023-05-06T22:41:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-06T02:53:28Z"
+        "generated": "2023-05-07T01:16:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7d5b8e4728..c394c7f26a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.x86_64"
+      "evra": "5.4.0-3.fc38.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.x86_64"
+      "evra": "5.4.0-3.fc38.x86_64"
     },
     "alternatives": {
-      "evra": "1.22-1.fc38.x86_64"
+      "evra": "1.24-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-2.fc38.x86_64"
+      "evra": "0.17.0-3.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-2.fc38.x86_64"
+      "evra": "0.17.0-3.fc38.x86_64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.x86_64"
@@ -937,7 +937,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.10-3.fc38.x86_64"
+      "evra": "2.2.10-4.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1075,13 +1075,13 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-1.fc38.x86_64"
+      "evra": "1.4.0-2.fc38.x86_64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.6-1.fc38.x86_64"
+      "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.2-0.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-06T00:00:00Z",
+    "generated": "2023-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T01:10:09Z"
+        "generated": "2023-05-06T22:42:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-06T02:53:31Z"
+        "generated": "2023-05-07T01:16:14Z"
       }
     }
   }

From ddc3d28925c0294e618ad41e940b918601fd0385 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 24 Apr 2023 22:43:56 +0800
Subject: [PATCH 1609/2157] Add `description` for ignition tests

---
 tests/kola/ignition/delete-config/test.sh       | 17 +++++++++++++++--
 tests/kola/ignition/journald-log                |  9 +++++----
 tests/kola/ignition/kargs/test.sh               |  3 +++
 tests/kola/ignition/remote/test.sh              |  9 +++++----
 .../ignition/resource/authenticated-gs/test.sh  |  2 +-
 .../ignition/resource/authenticated-s3/test.sh  |  2 +-
 tests/kola/ignition/resource/remote/test.sh     |  6 +++---
 tests/kola/ignition/stable-boot/test.sh         |  4 ++--
 tests/kola/ignition/systemd-disable/test.sh     |  5 ++---
 .../kola/ignition/systemd-enable-units/test.sh  |  9 ++++-----
 tests/kola/ignition/systemd-unmasking/test.sh   |  4 +---
 11 files changed, 42 insertions(+), 28 deletions(-)

diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 04c3c2d233..8448a8fc60 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -1,8 +1,21 @@
 #!/bin/bash
 ## kola:
-##   # Ideally we'd test on virtualbox and vmware, but we don't have tests
-##   # there, so we mock specifically for ignition.platform.id=qemu
 ##   platforms: qemu
+##   description: >
+##     There are 2 services: 
+##     1)ignition-delete-config.service, which deletes Ignition 
+##     configs from VMware and VirtualBox on first boot.
+##     2)coreos-ignition-delete-config.service, do the same thing 
+##     on existing machines on upgrade, using a stamp file in /var/lib 
+##     to avoid multiple runs.
+##     Ideally we'd test on virtualbox and vmware, but we don't have tests
+##     there, so we mock specifically for ignition.platform.id=qemu.
+##     Test scenarios:
+##     On first boot, verify that both 2 services ran. 
+##     On upgrade boot, verify that 1) should not run, 2) should run.
+##     On normal boot, verify that both 2 services should not run.
+##     On upgrade boot with 2) masked, verify that both 2 services 
+##     should not run.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/journald-log b/tests/kola/ignition/journald-log
index 9d84b2e2bf..dbb875ddf4 100755
--- a/tests/kola/ignition/journald-log
+++ b/tests/kola/ignition/journald-log
@@ -1,16 +1,17 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that we send the journald log entry 
+##     for a user-provided config.
+##     See https://github.com/coreos/ignition/pull/958 
+##     for the MESSAGE_ID source.
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
 ignitionJournalMsgId="57124006b5c94805b77ce473e92a8aeb"
 
-# See https://github.com/coreos/ignition/pull/958
-# for the MESSAGE_ID source. It will track the
-# journal messages related to an ignition config
-# provided by the user.
 num=$(journalctl -o json-pretty MESSAGE_ID=$ignitionJournalMsgId | jq -s ".[] | select(.IGNITION_CONFIG_TYPE == \"user\")" | wc -l)
 
 if [ "$num" -eq 0 ]; then
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
index 1601fd71f8..c5b19f9237 100755
--- a/tests/kola/ignition/kargs/test.sh
+++ b/tests/kola/ignition/kargs/test.sh
@@ -1,5 +1,8 @@
 #!/bin/bash
 # TODO: Doc
+## kola:
+##   platforms: qemu
+##   description: Verify ignition supports kernel arguments.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index d30b07127e..ed6264de90 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -1,10 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   tags: needs-internet
-#
-# To test https://bugzilla.redhat.com/show_bug.cgi?id=1980679
-# remote.ign on github: inject kernelArguments and write something to /etc/testfile
-# config.ign to include remote kargsfile.ign
+##   description: Verify ignition supports remote config.
+##     remote.ign on github: inject kernelArguments and write 
+##     something to /etc/testfile.
+##     config.ign to include remote kargsfile.ign.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/authenticated-gs/test.sh b/tests/kola/ignition/resource/authenticated-gs/test.sh
index d0455185cf..058cc59f5f 100755
--- a/tests/kola/ignition/resource/authenticated-gs/test.sh
+++ b/tests/kola/ignition/resource/authenticated-gs/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
 ## kola:
-##   # We fetch resources from GCS.
 ##   tags: needs-internet
 ##   # We authenticate to GCS with the GCP instance's credentials.
 ##   platforms: gcp
+##   description: Verify that we can fetch resources from GCS.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
index ccf499b922..e79dd6ef64 100755
--- a/tests/kola/ignition/resource/authenticated-s3/test.sh
+++ b/tests/kola/ignition/resource/authenticated-s3/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
 ## kola:
-##   # We fetch resources from S3.
 ##   tags: needs-internet
 ##   # We authenticate to S3 with the EC2 instance's IAM role.
 ##   platforms: aws
+##   description: Verify that we can fetch resources from S3.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 76faea9d52..79b4929957 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
-##   # We fetch resources from S3 and GCS
 ##   tags: needs-internet
 ##   # Don't pass AWS or GCP credentials to instance
-##   # This test verifies that Ignition can fetch anonymous resources within
-##   # a cloud platform (S3 -> EC2, GCS -> GCE) when no credentials are supplied
 ##   noInstanceCreds: true
+##   description: Verify that Ignition can fetch anonymous resources 
+##     within a cloud platform (S3 -> AWS, GCS -> GCP) when no 
+##     credentials are supplied.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index 8232dbfb4b..f56da6a815 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,8 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-#
-# This test makes sure that ignition is able to use `coreos-boot-disk` symlink.
+##   description: Verify that ignition is able to use 
+##     `coreos-boot-disk` symlink.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 42f07fbe98..f3ba280c2e 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -5,9 +5,8 @@
 ##   # on FCOS.
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
 ##   distros: fcos
-#
-# This test makes sure that ignition is able to disable units
-# https://github.com/coreos/fedora-coreos-tracker/issues/392
+##   description: Verify that ignition supports to disable units.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/392
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index c8e8adad81..be2b9e5781 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,11 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-#
-# This test makes sure that ignition is able to enable systemd units of
-# different types.
-# https://github.com/coreos/ignition/issues/586
-# https://github.com/systemd/systemd/pull/9901
+##   description: Verify that ignition supports to enable systemd units 
+##     of different types.
+##     See https://github.com/coreos/ignition/issues/586
+##     https://github.com/systemd/systemd/pull/9901
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index ddbb92c233..4e20e12d2d 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -5,9 +5,7 @@
 ##   # RHCOS.
 ##   # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
 ##   distros: fcos
-#
-# This test makes sure that ignition is able to unmask units It just so happens
-# we have masked dnsmasq in FCOS so we can test this by unmasking it.
+##   description: Verify that ignition supports to unmask units.
 
 set -xeuo pipefail
 

From 6c4094308f64f47245d0d41f9500c1f139f85512 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 24 Apr 2023 22:47:54 +0800
Subject: [PATCH 1610/2157] Add `description` for tests under files dir

---
 tests/kola/files/aleph-version                |  3 ++-
 tests/kola/files/check-symlink                |  8 +++-----
 tests/kola/files/console-config               | 11 ++++++-----
 tests/kola/files/etc-passwd-group-permissions |  1 +
 tests/kola/files/fcos_groups                  | 10 +++++-----
 tests/kola/files/fcos_users                   | 10 +++++-----
 tests/kola/files/file-directory-permissions   |  2 ++
 tests/kola/files/initrd/compression           |  1 +
 tests/kola/files/initrd/executables           |  4 +---
 tests/kola/files/initrd/expected-contents     |  1 +
 tests/kola/files/kernel-headers               |  9 ++++-----
 tests/kola/files/license                      |  2 ++
 tests/kola/files/logrotate-service            |  4 ++--
 tests/kola/files/remove-manifest-files        |  5 +----
 tests/kola/files/root-immutable-bit           |  1 +
 tests/kola/files/rpmdb-sqlite                 |  5 +++--
 tests/kola/files/setgid                       |  2 ++
 tests/kola/files/setuid                       |  2 ++
 tests/kola/files/sudoers                      |  7 ++++---
 tests/kola/files/system-generators            |  3 ++-
 tests/kola/files/unlabeled-contexts           |  2 ++
 tests/kola/files/validate-symlinks            |  7 ++++---
 tests/kola/files/yum-repo-dir                 |  1 +
 23 files changed, 57 insertions(+), 44 deletions(-)

diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index b5a521e4b8..9b9f38fc50 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -1,11 +1,12 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /sysroot/.coreos-aleph-version.json exists.
+##     Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
 jq . < /sysroot/.coreos-aleph-version.json >/dev/null
 ok aleph
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index b4f570b8cc..22958a5d4b 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -1,11 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Verify /etc release symlinks are valid
-# See:
-# - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
-# - https://github.com/openshift/os/pull/815
+##   description: Verify /etc release symlinks are valid.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=2068148
+##     https://github.com/openshift/os/pull/815
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index 426228837c..be1968b767 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -5,11 +5,12 @@
 ##   # s390x doesn't have any configuration in platforms.yaml, so
 ##   # platforms.json is not included in the image
 ##   architectures: "!s390x"
-#
-# Verify that the kargs and grub.cfg commands specified in platforms.json
-# have been properly applied to the image.  Also check that cosa correctly
-# translated platforms.yaml to platforms.json, by spot-checking certain
-# expected platforms.json values.
+##   description: >
+##     Verify that the kargs and grub.cfg commands specified in 
+##     platforms.json have been properly applied to the image. 
+##     Also check cosa correctly translated platforms.yaml to  
+##     platforms.json, by spot-checking certain expected values
+##     in platforms.json.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
index 7c6e10c3f4..6b2918ffbe 100755
--- a/tests/kola/files/etc-passwd-group-permissions
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /etc/passwd and /etc/group have correct permissions.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
index 8bf3b4b2ad..05890cd54f 100755
--- a/tests/kola/files/fcos_groups
+++ b/tests/kola/files/fcos_groups
@@ -2,11 +2,11 @@
 ## kola:
 ##   distros: fcos
 ##   exclusive: false
-#
-# This performs a sanity check on system groups that are shipped
-# as part of the base OS. Those groups come in different shapes
-# (with static or dynamic GIDs, from plain files or from scriptlets)
-# and each case is covered by a corresponding check here below.
+##   description: >
+##     This performs a sanity check on system groups that are shipped
+##     as part of the base OS. Those groups come in different shapes
+##     (with static or dynamic GIDs, from plain files or from scriptlets)
+##     and each case is covered by a corresponding check here below.
 
 set -euo pipefail
 
diff --git a/tests/kola/files/fcos_users b/tests/kola/files/fcos_users
index b097823a8d..23108f32e8 100755
--- a/tests/kola/files/fcos_users
+++ b/tests/kola/files/fcos_users
@@ -2,11 +2,11 @@
 ## kola:
 ##   distros: fcos
 ##   exclusive: false
-#
-# This performs a sanity check on system users that are shipped
-# as part of the base OS. Those users come in different shapes
-# (with static or dynamic IDs, from plain files or from scriptlets)
-# and each case is covered by a corresponding check here below.
+##   description: >
+##     This performs a sanity check on system users that are shipped
+##     as part of the base OS. Those users come in different shapes
+##     (with static or dynamic IDs, from plain files or from scriptlets)
+##     and each case is covered by a corresponding check here below.
 
 set -euo pipefail
 
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index c9f541b1c8..e985c48a6c 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that there are no files and directories 
+##     with 'g+w' or 'o+w' permission in /etc, except the known lists.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/initrd/compression b/tests/kola/files/initrd/compression
index 5944a3b216..37821ecc6f 100755
--- a/tests/kola/files/initrd/compression
+++ b/tests/kola/files/initrd/compression
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify initrd is compressed with zstd.
 #
 # If dracut can't find the configured compressor, it warns and falls back to
 # gzip (!).  Fail if the initrd isn't compressed with zstd.
diff --git a/tests/kola/files/initrd/executables b/tests/kola/files/initrd/executables
index b8535c9c4e..29954b00df 100755
--- a/tests/kola/files/initrd/executables
+++ b/tests/kola/files/initrd/executables
@@ -1,9 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# It's easy for dracut modules to accidentally ship scripts without +x set.
-# Check for those.
+##   description: Verify all initrd scripts are executable.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index 23a365dc8f..74f6ea6fea 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Check the initrd includes some specific files.
 
 # This test runs on both FCOS & RHCOS. The initrd includes specific files which,
 # if omitted from the image, will cause some failures with certain Ignition
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index 6302a13e81..2cd55b1ea7 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -1,11 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Check that we are not including the kernel headers on the host.
-# See:
-# - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
-# - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
+##   description: Verify that we are not including the kernel 
+##     headers on the host.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1814719
+##     https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/license b/tests/kola/files/license
index 28eafc764b..b0d39dd2c5 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /usr/share/licenses/fedora-coreos-config/LICENSE
+##     exists.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index 8086f251a2..c45f7a231e 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -1,8 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Test some services are enabled or disabled appropriately
+##   description: Verify that logrotate and logrotate.timer 
+##     services are enabled as expected.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index 69f3b32848..ee2cd69310 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -1,10 +1,7 @@
 #!/bin/bash
 ## kola:
-##   # This test only runs on FCOS bceause RHCOS does ship `info` which is a
-##   # Requires on a number of RHCOS packages.
-##   # TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
-##   distros: fcos
 ##   exclusive: false
+##   description: Verify remove-files works in the manifest.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index 627e878800..7b24cdd22a 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify / has the immutable bit.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 8d61fc5430..1a42c3e1a9 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -2,6 +2,9 @@
 ## kola:
 ##   # Read only test thus safe to run in parallel
 ##   exclusive: false
+##   description: Verify that we're using the sqlite rpmdb backend
+##     for RHCOS 9+ and FCOS 33+.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/623
 
 set -xeuo pipefail
 
@@ -12,8 +15,6 @@ if is_rhcos8; then
     exit 0
 fi
 
-# make sure we're using the sqlite rpmdb backend
-# https://github.com/coreos/fedora-coreos-tracker/issues/623
 if [ ! -f /usr/share/rpm/rpmdb.sqlite ]; then
     fatal "Didn't find file /usr/share/rpm/rpmdb.sqlite"
 fi
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index 91f117c742..beb9e3f20a 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that there are no file/directory with 
+##     SetGID bit set, except the known files and directories.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index d173ec769b..c002e4a3cc 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that there are no file/directory with 
+##     SetUID bit set, except the known files and directories.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/sudoers b/tests/kola/files/sudoers
index e8cecd57f7..16817ba407 100755
--- a/tests/kola/files/sudoers
+++ b/tests/kola/files/sudoers
@@ -1,13 +1,14 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify the permissions and syntax of /etc/sudoers 
+##     and /etc/sudoers.d/* are readable only for root, instead of 
+##     world-readable for security concern.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1981979
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Security scanners complain about world-readable files in /etc/sudoers.d.
-# Check file permissions and syntax of /etc/sudoers and /etc/sudoers.d/*.
-# https://bugzilla.redhat.com/show_bug.cgi?id=1981979
 visudo -c
 ok "sudoers files are valid"
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index b30aa790be..8d38d82fc2 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -1,12 +1,13 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify files in /usr/lib/systemd/system-generators 
+##     are executable.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Make sure files in /usr/lib/systemd/system-generators have exec mode
 find /usr/lib/systemd/system-generators -type f | while read -r f; do
     mode=$(stat -c '%a' "${f}")
     if [[ "${mode}" != 555 ]] && [[ "${mode}" != 755 ]]; then
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index be6fe589e9..5ba1bba9dc 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify no files under /var and /etc 
+##     have unlabeled_t SELinux label.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 1bf0e1aeca..2797a153b2 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -3,9 +3,10 @@
 ##   tags: "platform-independent"
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
-#
-# Check if there are broken symlinks in /etc/ and /usr/.
-# See: https://github.com/coreos/fedora-coreos-config/issues/1782
+##   description: Verify that there are no broken symlinks in 
+##     /etc/ and /usr/, except the known files which require 
+##     further investigation.
+##     See https://github.com/coreos/fedora-coreos-config/issues/1782
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
index c9c079b78d..56080d668c 100755
--- a/tests/kola/files/yum-repo-dir
+++ b/tests/kola/files/yum-repo-dir
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /etc/yum.repos.d exists.
 
 set -xeuo pipefail
 

From 9cabffe3e3d394fb4cd549a110f6588592802acd Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 24 Apr 2023 22:49:41 +0800
Subject: [PATCH 1611/2157] Add `description` for tests under disks dir

---
 tests/kola/disks/growfs                 | 6 +++---
 tests/kola/disks/root-boot-ro           | 1 +
 tests/kola/disks/root-prjquota          | 1 +
 tests/kola/disks/systemd-repart-service | 4 ++--
 tests/kola/disks/tmpfs                  | 2 +-
 5 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
index a423837112..9e09b5c7ca 100755
--- a/tests/kola/disks/growfs
+++ b/tests/kola/disks/growfs
@@ -1,9 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-
-# This test verifies that the rootfs is automatically grown on first boot in the
-# default case and that the autosave-xfs logic didn't kick in.
+##   description: Verify that the rootfs is automatically grown 
+##     on first boot in the default case and that the autosave-xfs 
+##     logic didn't kick in.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
index 9857ceccdb..1f85d77aae 100755
--- a/tests/kola/disks/root-boot-ro
+++ b/tests/kola/disks/root-boot-ro
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /sysroot and /boot are read-only partitions.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
index 2a2eb03a01..f197b5e77a 100755
--- a/tests/kola/disks/root-prjquota
+++ b/tests/kola/disks/root-prjquota
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /sysroot is mounted with prjquota.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index b12b6e3afb..c40a3f1874 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -6,13 +6,13 @@
 ##   # starts to include `systemd-repart`
 ##   distros: fcos
 ##   exclusive: false
+##   description: Verify systemd-repart.service is masked.
+##     See https://github.com/coreos/fedora-coreos-config/pull/744
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# make sure systemd-repart is masked
-# https://github.com/coreos/fedora-coreos-config/pull/744
 if [ "$(systemctl is-enabled systemd-repart.service)" != 'masked' ]; then
     fatal "systemd-repart.service systemd unit should be masked"
 fi
diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
index e2fb240fb3..bf1669db6f 100755
--- a/tests/kola/disks/tmpfs
+++ b/tests/kola/disks/tmpfs
@@ -1,12 +1,12 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that we have tmpfs on /tmp.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Ensure we have tmpfs on /tmp
 tmpfs=$(findmnt -n -o FSTYPE /tmp)
 if [ "${tmpfs}" != "tmpfs" ]; then
     fatal "Error: Expected tmpfs on /tmp, found: ${tmpfs}"

From 221189f9cb24a31f5500a2f44b9e61612eba6797 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 25 Apr 2023 11:41:46 +0800
Subject: [PATCH 1612/2157] Add `description` for networking tests

---
 tests/kola/networking/bridge-static-via-kargs  |  3 +--
 .../default-network-behavior-change/test.sh    |  2 ++
 tests/kola/networking/dnsmasq-service          |  4 ++--
 tests/kola/networking/force-persist-ip/test.sh | 17 ++++++++---------
 .../hostname/fallback-hostname/test.sh         | 14 +++++++-------
 tests/kola/networking/kargs-rd-net             | 18 +++++++++---------
 .../networking/mtu-on-bond-ignition/test.sh    |  2 ++
 tests/kola/networking/mtu-on-bond-kargs        | 12 ++++++------
 tests/kola/networking/nameserver               | 10 +++++-----
 tests/kola/networking/network-online-service   |  5 +++--
 tests/kola/networking/nic-naming               | 17 +++++++++--------
 tests/kola/networking/nm-dhcp-client           |  2 +-
 tests/kola/networking/nm-ifcfg-rh-plugin       | 11 +++++------
 tests/kola/networking/nm-start                 |  4 ++++
 tests/kola/networking/nmstate/policy/test.sh   |  5 +++--
 tests/kola/networking/nmstate/state/test.sh    |  5 +++--
 .../default                                    |  1 +
 tests/kola/networking/no-persist-ip            | 11 ++++++-----
 .../prefer-ignition-networking/test.sh         | 17 ++++++++---------
 .../networking/rd-net-timeout-carrier/test.sh  | 14 +++++++-------
 tests/kola/networking/resolv/systemd-resolved  |  4 +++-
 .../networking/team-dhcp-via-ignition/test.sh  |  7 +++----
 22 files changed, 98 insertions(+), 87 deletions(-)

diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index 60f1dc4e0d..e44ef2ea92 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -12,8 +12,7 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Verify bridge networks works via kernel arguments.
+##   description: Verify bridge networks works via kernel arguments.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 359ddda708..bc0329dd5f 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -2,6 +2,8 @@
 ## kola:
 ##   tags: "platform-independent"
 ##   exclusive: false
+##   description: Verify the default networking configurations
+##     match expected results.
 #
 # Since we depend so much on the default networking configurations let's
 # alert ourselves when any default networking configuration changes in
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index e25a34ea7c..d5445fb972 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -5,13 +5,13 @@
 ##   # TODO-RHCOS: adapt test to check that `dnsmasq` is in the proper state on RHCOS
 ##   distros: fcos
 ##   exclusive: false
+##   description: Verify dnsmasq service is masked.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# make sure dnsmasq is masked
-# https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
 if [ "$(systemctl is-enabled dnsmasq.service)" != 'masked' ]; then
     fatal "dnsmasq.service systemd unit should be masked"
 fi
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index fc45906845..341ea6e0c0 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -12,15 +12,14 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Setup configuration for a single NIC with two different ways:
-# - kargs provide static network config for eth1 and also coreos.force_persist_ip
-# - ignition provides dhcp network config for eth1
-# Expected result:
-# - with coreos.force_persist_ip ip=kargs win, verify that
-#   eth1 has the static IP address via kargs
-#
-# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+##   description: >
+##     Setup configuration for a single NIC with two different ways:
+##     - kargs provide static network config for eth1 and also coreos.force_persist_ip
+##     - ignition provides dhcp network config for eth1
+##     Expected result:
+##     - with coreos.force_persist_ip ip=kargs win, verify that
+##       eth1 has the static IP address via kargs
+##     https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 6add6525b0..0f66dcf55a 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,13 +1,13 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-#
-# Test that the fallback hostname is `localhost`. This test
-# validates that the fallback hostname is set to `localhost`
-# by first disabling NetworkManager from setting the hostname
-# via DHCP or DNS (see config.bu) and then verifying that the
-# hostname is set from the fallback hostname and is `localhost`.
-# https://github.com/coreos/fedora-coreos-tracker/issues/902
+##   description: >
+##     Test that the fallback hostname is `localhost`. This test
+##     validates that the fallback hostname is set to `localhost`
+##     by first disabling NetworkManager from setting the hostname
+##     via DHCP or DNS (see config.bu) and then verifying that the
+##     hostname is set from the fallback hostname and is `localhost`.
+##     https://github.com/coreos/fedora-coreos-tracker/issues/902
 #
 # Use the output of hostnamectl to gather information about how
 # the hostname is/was set. We're expecting something like this:
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 967208983f..4776c713a4 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -7,15 +7,15 @@
 ##   # appendFirstbootKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Verify rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
-# by NetworkManager. Append them to kernel parameter when boot,
-# get total timeout is `timeout * retry`, 30*8(240) seconds
-# in this test scenario
-# See:
-# - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
-# - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
-# - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
+##   description: >
+##     Verify rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
+##     by NetworkManager. Append them to kernel parameter when boot,
+##     get total timeout is `timeout * retry`, 30*8(240) seconds
+##     in this test scenario.
+##     See:
+##     - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
+##     - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
+##     - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index f13a37250a..d752f085af 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -11,6 +11,8 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
+##   description: Verify that configure MTU on a VLAN subinterface for 
+##     the bond via ignition works.
 #
 # Set MTU on a VLAN subinterface for the bond using ignition config and check
 # - verify MTU on the bond matches config
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index b923d4a6c7..92a9527625 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -12,12 +12,12 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Configuring MTU on a VLAN subinterface for the bond,
-# - verify MTU on the bond matches config
-# - verify MTU on the VLAN subinterface for the bond matches config
-# - verify ip address on the VLAN subinterface for the bond matches config
-# See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
+##   description: >
+##     Configuring MTU on a VLAN subinterface for the bond,
+##     - verify MTU on the bond matches config.
+##     - verify MTU on the VLAN subinterface for the bond matches config.
+##     - verify ip address on the VLAN subinterface for the bond matches config.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 285881ce90..518aad82f4 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -6,11 +6,11 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Verify multiple nameservers config via kernel arguments work well
-# RHCOS: need to check /etc/resolv.conf and nmconnection
-# FCOS:  using systemd-resolved which needs to run resolvectl to check
-# See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
+##   description: >
+##     Verify multiple nameservers config via kernel arguments work well.
+##     RHCOS: need to check /etc/resolv.conf and nmconnection.
+##     FCOS:  using systemd-resolved which needs to run resolvectl to check.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index 80a14d72c7..2f9152aada 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -1,13 +1,14 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify network-online.target is inactive by default.
+##     See https://github.com/coreos/fedora-coreos-config/pull/1088
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# We shouldn't pull this into the transaction by default. See
-# https://github.com/coreos/fedora-coreos-config/pull/1088
+# We shouldn't pull this into the transaction by default.
 # https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
 if ! systemctl show -p ActiveState network-online.target | grep -q ActiveState=inactive; then
     fatal "Unit network-online.target shouldn't be active"
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 79c24121de..69e95c3e31 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -1,20 +1,21 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   # Disable on azure because of a limitation of the hv_netvsc driver
-##   # there. According to [1] and [2] the driver does not provide sufficient
-##   # information to systemd-udev for systemd's naming to work. It falls
-##   # back to basic ethX naming.
 ##   platforms: "!azure"
-#
-# [1] https://access.redhat.com/solutions/3204751
-# [2] https://github.com/Azure/WALinuxAgent/issues/1877
+##   description: Verify that we detected eth* NIC naming after booted.
+##     Disable on azure because of a limitation of the hv_netvsc driver
+##     there. According to [1] and [2] the driver does not provide sufficient
+##     information to systemd-udev for systemd's naming to work. It falls
+##     back to basic ethX naming.
+##     See:
+##     - https://access.redhat.com/solutions/3204751
+##     - https://github.com/Azure/WALinuxAgent/issues/1877
+##     - https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 if ip link | grep -o -e " eth[0-9]:"; then
     fatal "detected eth* NIC naming on node"
 fi
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
index f58ee57168..13126c605e 100755
--- a/tests/kola/networking/nm-dhcp-client
+++ b/tests/kola/networking/nm-dhcp-client
@@ -1,12 +1,12 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify NM's internal DHCP client runs by default.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Ensure NM's internal DHCP client runs by default
 if ! journalctl -b 0 -u NetworkManager --grep=dhcp | grep -q "Using DHCP client 'internal'"; then
   fatal "Error: NetworkManager's internal DHCP client is not running"
 fi
diff --git a/tests/kola/networking/nm-ifcfg-rh-plugin b/tests/kola/networking/nm-ifcfg-rh-plugin
index 4de79087c6..5637544100 100755
--- a/tests/kola/networking/nm-ifcfg-rh-plugin
+++ b/tests/kola/networking/nm-ifcfg-rh-plugin
@@ -1,15 +1,14 @@
 #!/bin/bash
-#
-# We want to do a check here to make sure the ifcfg-rh plugin
-# is not loaded on FCOS (it can't be because it should never
-# even be included in the filesystem). We also want to make
-# sure that at least for RHCOS8 it is included.
-#
 ## kola:
 ##   # This test should behave the same on every platform.
 ##   tags: "platform-independent"
 ##   # This is a read-only, nondestructive test.
 ##   exclusive: false
+##   description: >
+##     Verify that the ifcfg-rh plugin is not loaded on FCOS (it 
+##     can't be because it should never even be included in the 
+##     filesystem). We also want to make sure that at least for 
+##     RHCOS8 it is included.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index 683d871af4..b1933b76ba 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -1,6 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify kola on QEMU shouldn't need to bring 
+##     up networking in the initrd by default, and on AWS we 
+##     did bring up networking in the initrd.
+##     See https://github.com/coreos/fedora-coreos-config/pull/426
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nmstate/policy/test.sh b/tests/kola/networking/nmstate/policy/test.sh
index 0a932495b0..f1d4a0afd2 100755
--- a/tests/kola/networking/nmstate/policy/test.sh
+++ b/tests/kola/networking/nmstate/policy/test.sh
@@ -1,8 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent needs-internet"
-#
-# Configure a DHCP linux bridge using butane and nmstate service with policy
+##   description: Verify that configure a DHCP linux bridge using 
+##     butane and nmstate service with policy works.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1175
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nmstate/state/test.sh b/tests/kola/networking/nmstate/state/test.sh
index 9693a4cdbf..90cc9695aa 100755
--- a/tests/kola/networking/nmstate/state/test.sh
+++ b/tests/kola/networking/nmstate/state/test.sh
@@ -1,8 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent needs-internet"
-#
-# Configure a DHCP linux bridge using butane and nmstate service with state
+##   description: Verify that configure a DHCP linux bridge using 
+##     butane and nmstate service with state works.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1175
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/default b/tests/kola/networking/no-default-initramfs-net-propagation/default
index a5e1d11222..99ede4e4f6 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/default
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/default
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify no initramfs network propagation by default.
 #
 # With pure network defaults no networking should have been propagated
 # from the initramfs. This test tries to verify that is the case.
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 3410841923..5eceb87467 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -11,11 +11,12 @@
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
 ##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# This test verifies that the coreos.no_persist_ip kernel argument will
-# prevent propagating kernel argument based networking configuration into
-# the real root. It does this by providing karg static networking config
-# for eth1 and then verifying that DHCP is used in the real root.
+##   description: >
+##     Verify that the coreos.no_persist_ip kernel argument will
+##     prevent propagating kernel argument based networking 
+##     configuration into the real root. It does this by providing 
+##     karg static networking config for eth1 and then verifying 
+##     that DHCP is used in the real root.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 9ddcbadd61..56578152f8 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -12,15 +12,14 @@
 ##   # appendKernelArgs doesn't work on s390x so skip there
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Setup configuration for a single NIC with two different ways:
-# - kargs provide static network config for eth1 without coreos.force_persist_ip
-# - ignition provides dhcp network config for eth1
-# Expected result:
-# - without coreos.force_persist_ip Ignition networking
-#   configuration wins, verify that eth1 gets ip via dhcp
-#
-# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+##   description: >
+##     Setup configuration for a single NIC with two different ways:
+##     - kargs provide static network config for eth1 without coreos.force_persist_ip
+##     - ignition provides dhcp network config for eth1
+##     Expected result:
+##     - without coreos.force_persist_ip Ignition networking
+##       configuration wins, verify that eth1 gets ip via dhcp
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index f997485703..1f9f0193af 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,13 +1,13 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-#
-# This test verifies that NetworkManager supports configuring the
-# carrier timeout via the `rd.net.timeout.carrier=` karg. Without
-# recreating an environment that requires this setting to be set
-# (which would be hard to do), we'll test this by just making sure
-# that setting the kernel argument ensures the runtime configuration
-# file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
+##   description: >
+##     This test verifies that NetworkManager supports configuring the
+##     carrier timeout via the `rd.net.timeout.carrier=` karg. Without
+##     recreating an environment that requires this setting to be set
+##     (which would be hard to do), we'll test this by just making sure
+##     that setting the kernel argument ensures the runtime configuration
+##     file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
 #
 # Checking that this file gets created is also tricky because we
 # `rm -rf /run/NetworkManager` in coreos-teardown-initramfs on first boot,
diff --git a/tests/kola/networking/resolv/systemd-resolved b/tests/kola/networking/resolv/systemd-resolved
index 9507789cd9..c4556f2f1d 100755
--- a/tests/kola/networking/resolv/systemd-resolved
+++ b/tests/kola/networking/resolv/systemd-resolved
@@ -4,11 +4,13 @@
 ##  # RHCOS
 ##   distros:  fcos
 ##   exclusive: false
+##   description: Verify systemd-resolved and the stub listener 
+##     should be enabled by default.
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# systemd-resolved should be enabled
 if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
     fatal "Unit systemd-resolved should be enabled"
 fi
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 7b47c46a45..ead55a7407 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -11,10 +11,9 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-#
-# Verify team networking using ignition config works.
-# The ignition config refers to
-# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
+##   description: Verify team networking works via ignition config.
+##     The ignition config refers to
+##     https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 
 set -xeuo pipefail
 

From d567a6b8926dcea00a51c7ecab588a5793c1c4b4 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 26 Apr 2023 10:44:45 +0800
Subject: [PATCH 1613/2157] Add `description` for misc tests

---
 tests/kola/binfmt/qemu                        |  6 ++--
 tests/kola/boot/bootupd                       | 10 +++---
 tests/kola/boot/grub2-install                 | 11 +++----
 tests/kola/butane/grub-users/test.sh          | 15 ++++-----
 tests/kola/clhm/ignition-warnings/test.sh     |  4 +--
 tests/kola/clhm/network-device-info           |  5 ++-
 tests/kola/containers/cgroups-v2              |  1 +
 tests/kola/containers/quadlet/test.sh         |  3 +-
 tests/kola/content-origins/test.sh            |  4 +--
 tests/kola/extensions/module                  |  3 +-
 tests/kola/extensions/package                 |  3 +-
 tests/kola/files/check-symlink                |  5 +--
 tests/kola/files/kernel-headers               |  5 +--
 tests/kola/files/remove-manifest-files        |  4 +++
 tests/kola/firewall/iptables-legacy/test.sh   |  5 +--
 tests/kola/firewall/iptables/test.sh          |  5 ++-
 tests/kola/gshadow                            |  8 ++---
 tests/kola/ignition/delete-config/test.sh     | 33 ++++++++++---------
 tests/kola/ignition/kargs/test.sh             |  3 +-
 tests/kola/ignition/remote/test.sh            | 10 +++---
 tests/kola/ignition/stable-boot/test.sh       |  2 +-
 tests/kola/ignition/systemd-disable/test.sh   |  2 +-
 .../ignition/systemd-enable-units/test.sh     |  7 ++--
 tests/kola/ignition/systemd-unmasking/test.sh |  2 +-
 tests/kola/k8s/node-e2e/master                |  2 ++
 tests/kola/kdump/crash/test.sh                |  4 +--
 tests/kola/kdump/service                      |  6 ++--
 tests/kola/kubernetes/kube-watch/test.sh      | 10 +++---
 .../kola/kubernetes/systemd-env-read/test.sh  |  9 ++---
 tests/kola/logging/printk                     |  4 +--
 .../kola/networking/force-persist-ip/test.sh  | 19 ++++++-----
 tests/kola/networking/kargs-rd-net            | 13 ++++----
 .../networking/mtu-on-bond-ignition/test.sh   |  6 ++--
 tests/kola/networking/mtu-on-bond-kargs       | 14 ++++----
 tests/kola/networking/nic-naming              |  2 +-
 .../prefer-ignition-networking/test.sh        | 18 +++++-----
 .../networking/team-dhcp-via-ignition/test.sh |  4 +--
 .../ntp/chrony/coreos-platform-chrony-config  |  4 +--
 tests/kola/ntp/chrony/dhcp-propagation        |  1 +
 .../ntp/timesyncd/dhcp-propagation/test.sh    |  1 +
 tests/kola/platforms/aws/assert-xen           |  4 +--
 tests/kola/platforms/aws/nvme                 |  6 ++--
 tests/kola/podman/dns/test.sh                 |  6 ++--
 tests/kola/podman/rootless-systemd            |  4 +--
 tests/kola/reboot/test.sh                     |  6 ++--
 .../root-reprovision/autosave-xfs/test.sh     |  2 ++
 .../root-reprovision/filesystem-only/test.sh  |  2 ++
 tests/kola/root-reprovision/linear/test.sh    |  1 +
 .../luks/autosave-xfs/test.sh                 |  2 ++
 tests/kola/root-reprovision/luks/test.sh      |  2 ++
 tests/kola/root-reprovision/raid1/test.sh     |  1 +
 .../root-reprovision/swap-before-root/test.sh |  1 +
 tests/kola/rpm-ostree-countme/test.sh         |  1 +
 tests/kola/rpm-ostree/container-deps          |  3 +-
 tests/kola/rpm-ostree/kernel-replace          |  4 +--
 tests/kola/secex/ensure/test.sh               |  6 ++--
 tests/kola/secex/reboot/test.sh               |  6 ++--
 .../security/coreos-update-ca-trust/test.sh   |  1 +
 tests/kola/security/passwd/test.sh            |  2 +-
 tests/kola/selinux/default                    |  5 ++-
 tests/kola/selinux/enforcing                  |  2 ++
 tests/kola/selinux/podman-tmpfs-context       |  5 +--
 tests/kola/selinux/stub-resolve-context       |  8 +++--
 tests/kola/selinux/usrlocal-context           |  2 ++
 .../ssh/custom-host-key-permissions/test.sh   | 10 +++---
 tests/kola/swap/zram-default                  |  7 ++--
 tests/kola/swap/zram-generator/test.sh        |  7 ++--
 tests/kola/systemd/default-unit-timeouts      |  6 ++--
 tests/kola/toolbox/test.sh                    | 10 +++---
 tests/kola/upgrade/extended/test.sh           |  1 +
 tests/kola/var-mount/luks/test.sh             |  1 +
 tests/kola/var-mount/scsi-id/test.sh          |  7 ++--
 tests/kola/var-mount/simple/test.sh           |  1 +
 73 files changed, 221 insertions(+), 184 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 9aa72c41e2..811fb2c790 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -9,9 +9,9 @@
 ##   distros: fcos
 ##   # We ship the x86_64 on all non-x86_64 arches.
 ##   architectures: "! x86_64"
-#
-# Test the x86_64 emulator on non-x86_64 instances.
-# https://github.com/coreos/fedora-coreos-tracker/issues/1237
+##   description: Verify the x86_64 qemu emulator works on non-x86_64 
+##     instances.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1237
 
 set -xeuo pipefail
 
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 4df5b503b6..1c8aee58cb 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# This is just a basic sanity check; at some point we
-# will implement "project-owned tests run in the pipeline"
-# and be able to run the existing bootupd tests:
-# https://github.com/coreos/fedora-coreos-config/pull/677
+##   description: Verify that bootupd works.
+
+# We generally implement project-owned tests run in the pipeline
+# and be able to run the existing bootupd tests.
+# See https://github.com/coreos/fedora-coreos-config/pull/677
 
 set -xeuo pipefail
 
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 1f25388364..fc1c22f863 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -4,12 +4,11 @@
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"
-#
-# Verify to install BIOS/PReP bootloader using grub2-install from
-# the target system.
-# See:
-#  - https://github.com/coreos/coreos-assembler/pull/3190
-#  - https://github.com/coreos/coreos-assembler/issues/3148
+##   description: Verify that we install BIOS/PReP bootloader 
+##     using grub2-install from the target system.
+##     See
+##     - https://github.com/coreos/coreos-assembler/pull/3190
+##     - https://github.com/coreos/coreos-assembler/issues/3148
 
 set -xeuo pipefail
 
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index 05729f9222..551764fc58 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -1,13 +1,12 @@
 #!/bin/bash
 ## kola:
-##  tags: "platform-independent"
-##  # GRUB sugar currently only exists in FCOS
-##  distros: fcos
-##  # coreos-post-ignition-checks.service forbids GRUB passwords on
-##  # ppc64le and s390x
-##  architectures: "!ppc64le s390x"
-#
-# Check Butane GRUB sugar as best we can from inside the OS.
+##   tags: "platform-independent"
+##   # GRUB sugar currently only exists in FCOS
+##   distros: fcos
+##   # coreos-post-ignition-checks.service forbids GRUB passwords on
+##   # ppc64le and s390x
+##   architectures: "!ppc64le s390x"
+##   description: Verify that setting GRUB password works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index 0e30ba5360..c274518397 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -4,8 +4,8 @@
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
 ##   allowConfigWarnings: true
-#
-# This test ensures that Ignition warnings are displayed on the console.
+##   description: Verify the Ignition warnings are displayed on 
+##     the console.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
index 171ae3db7d..3dedf9c231 100755
--- a/tests/kola/clhm/network-device-info
+++ b/tests/kola/clhm/network-device-info
@@ -2,9 +2,8 @@
 ## kola:
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
-#
-# This test makes sure CLHM wrote a snippet for the NIC IP info.
-# See - https://github.com/coreos/fedora-coreos-tracker/issues/1153
+##   description: Verify that CLHM wrote a snippet for the NIC IP info.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1153
 
 set -xeuo pipefail
 
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index 5f95258548..cbb34a212f 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -5,6 +5,7 @@
 ##   # TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
 ##   distros: fcos
 ##   exclusive: false
+##   description: Verify the system supports cgroupsv2.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index 2803ead6b2..50ad787fe3 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -2,8 +2,7 @@
 ## kola:
 ##   # We're pulling a container image from Quay.io
 ##   tags: "platform-independent needs-internet"
-#
-# Ensure that basic quadlet functionality works
+##   description: Verify that basic quadlet functionality works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index 5fd8d85980..3a3a117d56 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -5,8 +5,8 @@
 ##   exclusive: false
 ##   # May support e.g. centos in the future
 ##   distros: "fcos rhcos"
-#
-# Verify the RPM %{vendor} flag for everything installed matches what we expect.
+##   description: Verify the RPM %{vendor} flag for everything 
+##     installed matches what we expect.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index eda28892ae..d992bdf8e0 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -7,8 +7,7 @@
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
 ##   minMemory: 1536
-#
-# This test ensures that we can install some common tools as OS extensions.
+##   description: Verify that we can install some common tools as OS extensions.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 16b43dbccc..3d2f709580 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -7,8 +7,7 @@
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
 ##   minMemory: 1536
-#
-# This test ensures that we can install some common tools as OS extensions.
+##   description: Verify that we can install some common tools as OS extensions.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index 22958a5d4b..e36a440a5c 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -2,8 +2,9 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify /etc release symlinks are valid.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=2068148
-##     https://github.com/openshift/os/pull/815
+##     See
+##     - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
+##     - https://github.com/openshift/os/pull/815
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index 2cd55b1ea7..70340cda4f 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -3,8 +3,9 @@
 ##   exclusive: false
 ##   description: Verify that we are not including the kernel 
 ##     headers on the host.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1814719
-##     https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
+##     See
+##     - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
+##     - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index ee2cd69310..4e64921b39 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -1,5 +1,9 @@
 #!/bin/bash
 ## kola:
+##   # This test only runs on FCOS bceause RHCOS does ship `info` which is a
+##   # Requires on a number of RHCOS packages.
+##   # TODO-RHCOS: modify test to check for RHCOS-specific `remove-files` entry
+##   distros: fcos
 ##   exclusive: false
 ##   description: Verify remove-files works in the manifest.
 
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index eae1f08fb0..0611609815 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -1,9 +1,10 @@
 #!/bin/bash
 ## kola:
-##   # This test verifies that one can configure a node to use the legacy iptables
-##   # backend. It is scoped to only FCOS because RHCOS only supports nft.
 ##   distros: fcos
 ##   exclusive: true
+##   description: Verify that one can configure a node to use the legacy 
+##     iptables backend. It is scoped to only FCOS because RHCOS only 
+##     supports nft.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index 16b0e22d07..af530cbd72 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Verifies that the expected iptables backend is configured.
-# https://github.com/coreos/fedora-coreos-tracker/issues/676
+##   description: Verifies that the expected iptables backend is configured.
+##     https://github.com/coreos/fedora-coreos-tracker/issues/676
 
 set -xeuo pipefail
 
diff --git a/tests/kola/gshadow b/tests/kola/gshadow
index f84c89a8b0..8fff82a8d0 100755
--- a/tests/kola/gshadow
+++ b/tests/kola/gshadow
@@ -1,6 +1,8 @@
 #!/bin/bash
-# Verify that glibc's parsing of /etc/gshadow does not cause systemd-sysusers
-# to segfault on specially constructed lines.
+## kola:
+##   description: Verify that glibc's parsing of /etc/gshadow does 
+##     not cause systemd-sysusers to segfault on specially constructed lines.
+##     See https://github.com/coreos/bugs/issues/1394
 #
 # One line must fit into the character buffer (1024 bytes, unless a previous
 # line was longer) but have enough group members such that
@@ -10,8 +12,6 @@
 # The parser would return early to avoid overflow, leaving the static result
 # struct pointing to pointers from the previous line which are now invalid,
 # causing segfaults when those pointers are dereferenced.
-#
-# Tests: https://github.com/coreos/bugs/issues/1394
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 8448a8fc60..691f610dd8 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -1,21 +1,24 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-##   description: >
-##     There are 2 services: 
-##     1)ignition-delete-config.service, which deletes Ignition 
-##     configs from VMware and VirtualBox on first boot.
-##     2)coreos-ignition-delete-config.service, do the same thing 
-##     on existing machines on upgrade, using a stamp file in /var/lib 
-##     to avoid multiple runs.
-##     Ideally we'd test on virtualbox and vmware, but we don't have tests
-##     there, so we mock specifically for ignition.platform.id=qemu.
-##     Test scenarios:
-##     On first boot, verify that both 2 services ran. 
-##     On upgrade boot, verify that 1) should not run, 2) should run.
-##     On normal boot, verify that both 2 services should not run.
-##     On upgrade boot with 2) masked, verify that both 2 services 
-##     should not run.
+##   description: Verify that we delete userdata from provider 
+##     after Ignition completes.
+##     See https://github.com/coreos/ignition/issues/1315
+
+# There are 2 services: 
+# 1)ignition-delete-config.service, which deletes Ignition 
+# configs from VMware and VirtualBox on first boot.
+# 2)coreos-ignition-delete-config.service, do the same thing 
+# on existing machines on upgrade, using a stamp file in /var/lib 
+# to avoid multiple runs.
+# Ideally we'd test on virtualbox and vmware, but we don't have tests
+# there, so we mock specifically for ignition.platform.id=qemu.
+# Test scenarios:
+# On first boot, verify that both 2 services ran. 
+# On upgrade boot, verify that 1) should not run, 2) should run.
+# On normal boot, verify that both 2 services should not run.
+# On upgrade boot with 2) masked, verify that both 2 services 
+# should not run.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
index c5b19f9237..669c556ad4 100755
--- a/tests/kola/ignition/kargs/test.sh
+++ b/tests/kola/ignition/kargs/test.sh
@@ -1,8 +1,7 @@
 #!/bin/bash
-# TODO: Doc
 ## kola:
 ##   platforms: qemu
-##   description: Verify ignition supports kernel arguments.
+##   description: Verify Ignition supports kernel arguments.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index ed6264de90..4b7cc4482a 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -1,12 +1,14 @@
 #!/bin/bash
 ## kola:
 ##   tags: needs-internet
-##   description: Verify ignition supports remote config.
-##     remote.ign on github: inject kernelArguments and write 
-##     something to /etc/testfile.
-##     config.ign to include remote kargsfile.ign.
+##   description: Verify Ignition supports remote config.
 ##     See https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 
+# remote.ign is on github, inject kernelArguments and write 
+# something to /etc/testfile.
+# config.ign is to include remote kargsfile.ign.
+
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index f56da6a815..bcc2e762df 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: Verify that ignition is able to use 
+##   description: Verify that Ignition is able to use 
 ##     `coreos-boot-disk` symlink.
 
 set -xeuo pipefail
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index f3ba280c2e..9e27e417c6 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -5,7 +5,7 @@
 ##   # on FCOS.
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
 ##   distros: fcos
-##   description: Verify that ignition supports to disable units.
+##   description: Verify that Ignition supports to disable units.
 ##     See https://github.com/coreos/fedora-coreos-tracker/issues/392
 
 set -xeuo pipefail
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index be2b9e5781..e1cdc3ae41 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,10 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: Verify that ignition supports to enable systemd units 
+##   description: Verify that Ignition supports to enable systemd units 
 ##     of different types.
-##     See https://github.com/coreos/ignition/issues/586
-##     https://github.com/systemd/systemd/pull/9901
+##     See
+##     - https://github.com/coreos/ignition/issues/586
+##     - https://github.com/systemd/systemd/pull/9901
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index 4e20e12d2d..d16fae7ee1 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -5,7 +5,7 @@
 ##   # RHCOS.
 ##   # TODO-RHCOS: determine if any services on RHCOS are masked and adapt test
 ##   distros: fcos
-##   description: Verify that ignition supports to unmask units.
+##   description: Verify that Ignition supports to unmask units.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index 80cb9bb583..feeb393102 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -7,6 +7,8 @@
 ##   architectures: x86_64
 ##   requiredTag: k8s
 ##   tags: needs-internet
+##   description: Verify the Kubernetes e2e node tests work, and 
+##     ensure that we don't inadvertedly break Kubernetes.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 05470d78eb..55a388328f 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -8,8 +8,8 @@
 ##   # This test includes a few reboots and the generation of a vmcore,
 ##   # which can take longer than the default 10 minute timeout.
 ##   timeoutMin: 15
-#
-# https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
+##   description: Verify that the crashkernel reserved memory is large enough.
+##     See https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 591317648f..ff832e9c37 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -1,9 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Make sure that kdump didn't start (it's either disabled, or enabled but
-# conditional on crashkernel= karg, which we don't bake).
+##   description: Verify that kdump didn't start (it's either 
+##     disabled, or enabled but conditional on crashkernel= karg, 
+##     which we don't bake).
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index 905a46e37e..3a63e89351 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# This is for verifying that `kubernetes_file_t` labeled files can be
-# watched by systemd
-# See: https://github.com/coreos/fedora-coreos-tracker/issues/861
-# See: https://github.com/containers/container-selinux/issues/135
+##   description: Verify that `kubernetes_file_t` labeled files can be
+##     watched by systemd.
+##     See
+##     - https://github.com/coreos/fedora-coreos-tracker/issues/861
+##     - https://github.com/containers/container-selinux/issues/135
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index 9880981d5e..eb0dcff3b7 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -1,15 +1,16 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that `kubernetes_file_t` labeled 
+##     files can be read by systemd, also check if the `kube-env` 
+##     service started successfully and the service wrote to the 
+##     journal successfully.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1973418
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# In order to verify that `kubernetes_file_t` labeled files can be read by
-# systemd, we check to see if the `kube-env` service started successfully
-# and that the service wrote to the journal successfully.
-# See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
 if [ "$( stat -c %C /etc/kubernetes/envfile)" != "system_u:object_r:kubernetes_file_t:s0" ]; then
     fatal "/etc/kubernetes/envfile is labeled incorrectly"
 fi
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
index 0ae53956e1..5c9a55addd 100755
--- a/tests/kola/logging/printk
+++ b/tests/kola/logging/printk
@@ -1,8 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Verify default console log level; xref https://github.com/coreos/fedora-coreos-tracker/issues/1244
+##   description: Verify default console log level is 4. 
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1244
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 341ea6e0c0..f7d22cc1a2 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -12,14 +12,17 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Setup configuration for a single NIC with two different ways:
-##     - kargs provide static network config for eth1 and also coreos.force_persist_ip
-##     - ignition provides dhcp network config for eth1
-##     Expected result:
-##     - with coreos.force_persist_ip ip=kargs win, verify that
-##       eth1 has the static IP address via kargs
-##     https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+##   description: Verify that coreos.force_persist_ip will force 
+##     propagating kernel argument based networking configuration 
+##     into the real root.
+
+# Setup configuration for a single NIC with two different ways:
+# - kargs provide static network config for eth1 and also coreos.force_persist_ip
+# - Ignition provides dhcp network config for eth1
+# Expected result:
+# - with coreos.force_persist_ip ip=kargs win, verify that
+#   eth1 has the static IP address via kargs
+# https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 4776c713a4..4fe7974e9b 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -7,16 +7,17 @@
 ##   # appendFirstbootKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Verify rd.net.timeout.dhcp and rd.net.dhcp.retry are supported
-##     by NetworkManager. Append them to kernel parameter when boot,
-##     get total timeout is `timeout * retry`, 30*8(240) seconds
-##     in this test scenario.
-##     See:
+##   description: Verify rd.net.timeout.dhcp and rd.net.dhcp.retry 
+##     are supported by NetworkManager.
+##     See
 ##     - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
 ##     - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
 ##     - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
 
+# Append "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8" to kernel parameter 
+# when boot, get total timeout is `timeout * retry`, 30*8(240) seconds
+# in this test scenario.
+
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index d752f085af..d18557a5dd 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -12,14 +12,14 @@
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
 ##   description: Verify that configure MTU on a VLAN subinterface for 
-##     the bond via ignition works.
+##     the bond via Ignition works.
 #
-# Set MTU on a VLAN subinterface for the bond using ignition config and check
+# Set MTU on a VLAN subinterface for the bond using Ignition config and check
 # - verify MTU on the bond matches config
 # - verify MTU on the VLAN subinterface for the bond matches config
 # - verify ip address on the VLAN subinterface for the bond matches config
 #
-# The ignition config is generated using nm-initrd-generator according to
+# The Ignition config is generated using nm-initrd-generator according to
 # https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 # kargs="bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 \
 #        ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000: \
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 92a9527625..418e012573 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -12,12 +12,14 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Configuring MTU on a VLAN subinterface for the bond,
-##     - verify MTU on the bond matches config.
-##     - verify MTU on the VLAN subinterface for the bond matches config.
-##     - verify ip address on the VLAN subinterface for the bond matches config.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
+##   description: Verify that configuring MTU on a VLAN subinterface 
+##     for the bond via kernel arguements works.
+
+# Configuring MTU on a VLAN subinterface for the bond,
+# - verify MTU on the bond matches config.
+# - verify MTU on the VLAN subinterface for the bond matches config.
+# - verify ip address on the VLAN subinterface for the bond matches config.
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1932502#c9
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index 69e95c3e31..ee7d100b52 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -7,7 +7,7 @@
 ##     there. According to [1] and [2] the driver does not provide sufficient
 ##     information to systemd-udev for systemd's naming to work. It falls
 ##     back to basic ethX naming.
-##     See:
+##     See
 ##     - https://access.redhat.com/solutions/3204751
 ##     - https://github.com/Azure/WALinuxAgent/issues/1877
 ##     - https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index 56578152f8..db157233fb 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -12,14 +12,16 @@
 ##   # appendKernelArgs doesn't work on s390x so skip there
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Setup configuration for a single NIC with two different ways:
-##     - kargs provide static network config for eth1 without coreos.force_persist_ip
-##     - ignition provides dhcp network config for eth1
-##     Expected result:
-##     - without coreos.force_persist_ip Ignition networking
-##       configuration wins, verify that eth1 gets ip via dhcp
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
+##   description: Verify that networking configuration is propagated 
+##     via Ignition by default.
+
+# Setup configuration for a single NIC with two different ways:
+# - kargs provide static network config for eth1 without coreos.force_persist_ip
+# - Ignition provides dhcp network config for eth1
+# Expected result:
+# - without coreos.force_persist_ip Ignition networking
+#   configuration wins, verify that eth1 gets ip via dhcp
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1958930#c29
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index ead55a7407..318c6841c7 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -11,8 +11,8 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: Verify team networking works via ignition config.
-##     The ignition config refers to
+##   description: Verify team networking works via Ignition config.
+##     The Ignition config refers to
 ##     https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 
 set -xeuo pipefail
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-config b/tests/kola/ntp/chrony/coreos-platform-chrony-config
index eb380c8601..d301ddc2cc 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-config
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-config
@@ -2,8 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   platforms: "aws azure gcp qemu"
-#
-# Test the coreos-platform-chrony generator.
+##   description: Verify the coreos-platform-chrony generator works
+##     on cloud.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 753a402af7..434df712be 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -13,6 +13,7 @@
 ##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
+##   description: Verify that chronyd service got ntp servers from DHCP.
 #
 # This script creates two veth interfaces i.e. one for the host machine
 # and other for the container(dnsmasq server). This setup will be helpful
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index 7ab04ade2b..6324453149 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -15,6 +15,7 @@
 ##   minMemory: 1536
 ##   # We only care about timesyncd in Fedora. It's not available elsewhere.
 ##   distros: fcos
+##   description: Verify that timesyncd service got ntp servers from DHCP.
 #
 # This script creates two veth interfaces i.e. one for the host machine
 # and other for the container(dnsmasq server). This setup will be helpful
diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index 8a665891a0..af2fe146ea 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -9,8 +9,8 @@
 ##   # should only run on Xen instances and the caller should request
 ##   # the test.
 ##   requiredTag: aws-xen-test
-#
-# Test to make sure the booted AWS instance is XEN based
+##   description: Verify that we can create an AWS instance with 
+##     XEN based.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/platforms/aws/nvme b/tests/kola/platforms/aws/nvme
index 3468f6e717..c397d06488 100755
--- a/tests/kola/platforms/aws/nvme
+++ b/tests/kola/platforms/aws/nvme
@@ -4,9 +4,9 @@
 ##   exclusive: false
 ##   # This test is targeted at AWS
 ##   platforms: aws
-#
-# Test to make sure AWS instances with nvme storage get a device
-# properly created for it. See https://github.com/coreos/fedora-coreos-tracker/issues/1306
+##   description: Verify that we crate an AWS instances with nvme 
+##     storage.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1306
 #
 # We'll check to see if anything is listed in `nvme list-subsys`
 # and then run the test based on that. Example output:
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index dce787866a..e6185f2c28 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -8,9 +8,9 @@
 ##   # This test reaches out to the internet and it could take more
 ##   # time to pull down the container.
 ##   timeoutMin: 3
-#
-# Tests that rootless podman containers can DNS resolve external domains.
-# https://github.com/coreos/fedora-coreos-tracker/issues/923
+##   description: Verify that DNS in rootless podman containers can 
+##     resolve external domains.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/923
 
 set -xeuo pipefail
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index d6b0b8051d..30bf4fe3b3 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -10,11 +10,11 @@
 ##   # https://bugzilla.redhat.com/show_bug.cgi?id=1907030
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
+##   description: Verify that rootless+systemd works.
+##     See https://github.com/containers/podman/issues/7441
 #
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
-# It tests that rootless+systemd works. See issue:
-# https://github.com/containers/podman/issues/7441
 #
 # If it gets easy to change the kargs in the future we should try this
 # both on cgroups v1 and cgroups v2.
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 6001033566..0b16cb0ff6 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,9 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-#
-# These are read-only not-necessarily-related checks that verify default system
-# configuration both on first and subsequent boots.
+##   description: These are read-only not-necessarily-related checks 
+##     that verify default system configuration both on first and 
+##     subsequent boots.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
index e4c5b3405c..a7760e5818 100755
--- a/tests/kola/root-reprovision/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -9,6 +9,8 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
+##   description: Verify the root reprovision with XFS 
+##     on large disk triggers autosaved.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 92750c950d..6a8d6bbc05 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -7,6 +7,8 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
+##   description: Verify the root reprovisioning with specified file 
+##     system works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index 83bad0d232..a225261965 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -11,6 +11,7 @@
 ##   timeoutMin: 15
 ##   # This test reprovisions the rootfs.
 ##   tags: reprovision
+##   description: Verify the root reprovision with linear RAID works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index ab4e7a9528..a24426b941 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -11,6 +11,8 @@
 ##   timeoutMin: 15
 ##   # Trigger automatic XFS reprovisioning
 ##   minDisk: 100
+##   description: Verify the root reprovision with XFS and TPM 
+##     on large disk triggers autosaved.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 58fd00ba7d..2cdabacb7b 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -9,6 +9,8 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
+##   description: Verify the root reprovision with XFS and TPM 
+##     does not trigger autosaved.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 607c9877b0..6bf0e3c5cb 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -11,6 +11,7 @@
 ##   timeoutMin: 15
 ##   # This test reprovisions the rootfs.
 ##   tags: reprovision
+##   description: Verify the root reprovision with RAID 1 works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index e425180759..e09819de00 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -12,6 +12,7 @@
 ##   allowConfigWarnings: true
 ##   # This test reprovisions the rootfs.
 ##   tags: reprovision
+##   description: Verify the root reprovision and swap enabled are supported.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index 6deb244466..b87f973098 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -3,6 +3,7 @@
 ##   tags: "platform-independent needs-internet"
 ##   # This test only runs on FCOS because countme support is not available in RHCOS
 ##   distros: fcos
+##   description: Verify rpm-ostree-countme service works well.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/container-deps b/tests/kola/rpm-ostree/container-deps
index 75d86d2942..154ef68f23 100755
--- a/tests/kola/rpm-ostree/container-deps
+++ b/tests/kola/rpm-ostree/container-deps
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-#
-# Verify some dependencies of the rpm-ostree container stack.
+##   description: Verify some dependencies of the rpm-ostree container stack.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index a4e8ec8130..cd9bed0a7e 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -7,8 +7,8 @@
 ##   distros: fcos
 ##   # Needs internet access as we fetch files from koji
 ##   tags: "needs-internet platform-independent"
-#
-# Build container image with a new kernel and reboot into the new image.
+##   description: Verify that build container image with a new kernel 
+##     and can reboot into the new image.
 #
 # Copyright (C) 2023 Red Hat, Inc.
 #
diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
index 7c9a427b4a..1a4d36da4a 100755
--- a/tests/kola/secex/ensure/test.sh
+++ b/tests/kola/secex/ensure/test.sh
@@ -1,12 +1,12 @@
 #!/bin/bash
 ## kola:
-##   # This test verifies the s390x Secure Execution QEMU image works. It also
-##   # implicitly tests Ignition config decryption. We don't run it by default
-##   # because it requires running with `--qemu-secex`.
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
 ##   timeoutMin: 3
+##   description: Verify the s390x Secure Execution QEMU image works. It also
+##     implicitly tests Ignition config decryption. We don't run it by default
+##     because it requires running with `--qemu-secex`.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
index 3763eff2b7..cc1d4769df 100755
--- a/tests/kola/secex/reboot/test.sh
+++ b/tests/kola/secex/reboot/test.sh
@@ -1,12 +1,12 @@
 #!/bin/bash
 ## kola:
-##   # This test verifies the qemu-secex image reboots with SE enabled. It also
-##   # implicitly tests Ignition config decryption. We don't run it by default
-##   # because it requires running with `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
 ##   timeoutMin: 3
+##   description: Verify the qemu-secex image reboots with SE enabled. It also
+##     implicitly tests Ignition config decryption. We don't run it by default
+##     because it requires running with `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
index 1eb8fcda44..5dfa0a2bec 100755
--- a/tests/kola/security/coreos-update-ca-trust/test.sh
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that coreos-update-ca-trust service works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index 3602bd1cc8..5856993160 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -4,12 +4,12 @@
 ##   # TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
 ##   distros:  fcos
 ##   exclusive: false
+##   description: Verify that a user password provisioned by Ignition works.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-#Testing that a user password provisioned by ignition works
 OUTPUT=$(echo 'foobar' | setsid su - tester -c id)
 
 if [[ $OUTPUT != "uid=1001(tester) gid=1001(tester) groups=1001(tester) context=system_u:system_r:unconfined_service_t:s0" ]]; then
diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
index cc67b7fb21..b82c3fda09 100755
--- a/tests/kola/selinux/default
+++ b/tests/kola/selinux/default
@@ -2,9 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   tags: "platform-independent"
-#
-# Verify that the SELinux policy isn't marked as modified.
-# See: https://github.com/openshift/os/issues/1036.
+##   description: Verify that the SELinux policy isn't marked as modified.
+##     See https://github.com/openshift/os/issues/1036
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index 86bc4da654..41502c8de2 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: true
+##   description: Verify selinux should be Enforcing by default.
+##     Also can switch to Permissive mode and switch back.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 950d4c7d69..f39276f303 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -5,13 +5,14 @@
 ##   exclusive: false
 ##   # This test pulls a container image from the network.
 ##   tags: "needs-internet platform-independent"
+##   description: Verify that tmpfs mounts inside a container 
+##     have the `container_file_t` label.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1366
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Make sure that tmpfs mounts inside a container have the `container_file_t` label.
-# https://github.com/coreos/fedora-coreos-tracker/issues/1366
 context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:37 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
diff --git a/tests/kola/selinux/stub-resolve-context b/tests/kola/selinux/stub-resolve-context
index da75375891..7482b936f0 100755
--- a/tests/kola/selinux/stub-resolve-context
+++ b/tests/kola/selinux/stub-resolve-context
@@ -4,14 +4,16 @@
 ##   # RHCOS
 ##   distros:  fcos
 ##   exclusive: false
+##   description: Verify that the stub-resolv.conf file has the correct 
+##     selinux context.
+##     See
+##     - https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
+##     - https://github.com/systemd/systemd/pull/17976
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# Make sure that the stub-resolv.conf file has the correct selinux context.
-# https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
-# https://github.com/systemd/systemd/pull/17976
 context=$(stat --format "%C" /run/systemd/resolve/stub-resolv.conf)
 if [ "$context" != "system_u:object_r:net_conf_t:s0" ]; then
     fatal "SELinux context on stub-resolv.conf is wrong"
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index 8cfe357f04..3e31b9cc63 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -1,6 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify /usr/sbin and /var/usrlocal/sbin have 
+##     the same SELinux security context.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ssh/custom-host-key-permissions/test.sh b/tests/kola/ssh/custom-host-key-permissions/test.sh
index b6f2360df1..7156af403c 100755
--- a/tests/kola/ssh/custom-host-key-permissions/test.sh
+++ b/tests/kola/ssh/custom-host-key-permissions/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   tags: platform-independent
-#
-# Check that sshd still works with a custom host key with mode 640 and
-# group ssh_keys
-# https://github.com/coreos/fedora-coreos-tracker/issues/1394
-# https://src.fedoraproject.org/rpms/openssh/pull-request/37
+##   description: Verify that sshd still works with a custom 
+##     host key with mode 640 and group ssh_keys.
+##     See
+##     - https://github.com/coreos/fedora-coreos-tracker/issues/1394
+##     - https://src.fedoraproject.org/rpms/openssh/pull-request/37
 
 set -xeuo pipefail
 
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 8cc0f85000..3180c0cf6b 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -1,6 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
+##   description: Verify that we don't have swap on zram by default.
+##     See
+##     https://github.com/coreos/fedora-coreos-tracker/issues/509
+##     https://github.com/coreos/fedora-coreos-config/pull/687
 #
 # We can run this on both FCOS and RHCOS as neither should have a zram device
 # enabled by default. (In RHCOS, there is no zram support at all)
@@ -9,9 +13,6 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# make sure we don't default to having swap on zram
-# https://github.com/coreos/fedora-coreos-tracker/issues/509
-# https://github.com/coreos/fedora-coreos-config/pull/687
 if [ -e /dev/zram0 ]; then
     fatal "zram0 swap device set up on default install"
 fi
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index 5fcd5abfb3..ead88795e4 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -4,15 +4,14 @@
 ##   distros: fcos
 ##   # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
 ##   exclusive: true
+##   description: Verify that swap on zram devices can be set up
+##     using the zram-generator as defined in the docs at
+##     https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-# This test makes sure that swap on zram devices can be set up
-# using the zram-generator as defined in the docs at
-# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
-
 if ! grep -q 'zram0' /proc/swaps; then
     fatal "expected zram0 to be set up"
 fi
diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index c04dc17ab6..fd308332b7 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -2,10 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   tags: "platform-independent"
-#
-# Checks if default shutdown time is 1m 30s
-#
-# See: https://github.com/coreos/fedora-coreos-tracker/issues/1404
+##   description: Verify systemd default shutdown time is 1m 30s.
+##     See https://github.com/coreos/fedora-coreos-tracker/issues/1404
 
 set -xeuo pipefail
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 294d4e7b3b..f0e6131c50 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -8,11 +8,11 @@
 ##   distros: fcos
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
-#
-# Make sure that basic toolbox functionnality is working:
-# - Creating a toolbox
-# - Running a command in a toolbox
-# - Removing all toolbox containers
+##   description: >
+##     Make sure that basic toolbox functionnality is working:
+##     - Creating a toolbox
+##     - Running a command in a toolbox
+##     - Removing all toolbox containers
 #
 # Important note: Commands are run indirectly via calls to `machinectl shell`
 # to re-create the user environment needed for unprivileged podman
diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 796e33d9f6..672fce2e65 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -6,6 +6,7 @@
 ##   timeoutMin: 45
 ##   # Only run this test when specifically requested.
 ##   requiredTag: extended-upgrade
+##   description: Verify upgrade works.
 
 set -eux -o pipefail
 
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index e27b263175..25a9dc7fe0 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -3,6 +3,7 @@
 ##   # Restrict to qemu for now because the primary disk path is platform-dependent
 ##   platforms: qemu
 ##   architectures: "!s390x"
+##   description: Verify that reprovision disk with luks works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index 2ddde3420d..c767d1d4fb 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -3,10 +3,9 @@
 ##   # additionalDisks is only supported on QEMU
 ##   platforms: qemu
 ##   additionalDisks: ["5G:mpath"]
-#
-# This is to verify udev rules /dev/disk/by-id/scsi-*
-# symlinks present in initramfs
-# https://bugzilla.redhat.com/show_bug.cgi?id=1990506
+##   description: Verify udev rules /dev/disk/by-id/scsi-*
+##     symlinks present in initramfs.
+##     See https://bugzilla.redhat.com/show_bug.cgi?id=1990506
 
 set -xeuo pipefail
 
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index c12e19c67c..20b36af04b 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
+##   description: Verify that provision disk with guid works.
 #
 # Restrict to qemu for now because the primary disk path is platform-dependent
 

From 91258f4418f02518689ec4bc88130ba4bbddf5c9 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Sat, 6 May 2023 10:14:19 +0800
Subject: [PATCH 1614/2157] tests: update `description:` sections

- Remove `description: >`
- Replace related links into comments
---
 tests/kola/binfmt/qemu                           |  6 +++---
 tests/kola/boot/grub2-install                    |  7 ++++---
 tests/kola/clhm/ignition-warnings/test.sh        |  3 +--
 tests/kola/clhm/network-device-info              |  3 ++-
 tests/kola/containers/cgroups-v2                 |  2 +-
 tests/kola/content-origins/test.sh               |  4 ++--
 tests/kola/disks/growfs                          |  5 ++---
 tests/kola/disks/systemd-repart-service          |  3 ++-
 tests/kola/extensions/module                     |  3 ++-
 tests/kola/files/aleph-version                   |  3 ++-
 tests/kola/files/check-symlink                   |  7 ++++---
 tests/kola/files/console-config                  |  9 ++++-----
 tests/kola/files/fcos_groups                     | 10 +++++-----
 tests/kola/files/fcos_users                      | 10 +++++-----
 tests/kola/files/initrd/expected-contents        |  2 +-
 tests/kola/files/kernel-headers                  | 10 +++++-----
 tests/kola/files/license                         |  3 +--
 tests/kola/files/logrotate-service               |  3 +--
 tests/kola/files/rpmdb-sqlite                    |  3 ++-
 tests/kola/files/sudoers                         |  6 +++---
 tests/kola/files/system-generators               |  3 +--
 tests/kola/files/unlabeled-contexts              |  3 +--
 tests/kola/files/validate-symlinks               |  8 ++++----
 tests/kola/firewall/iptables-legacy/test.sh      |  5 +++--
 tests/kola/firewall/iptables/test.sh             |  5 +++--
 tests/kola/gshadow                               |  3 ++-
 tests/kola/ignition/delete-config/test.sh        |  6 +++---
 tests/kola/ignition/journald-log                 |  8 ++++----
 tests/kola/ignition/remote/test.sh               |  2 +-
 tests/kola/ignition/resource/remote/test.sh      |  5 ++---
 tests/kola/ignition/stable-boot/test.sh          |  3 +--
 tests/kola/ignition/systemd-disable/test.sh      |  3 ++-
 tests/kola/ignition/systemd-enable-units/test.sh |  7 ++++---
 tests/kola/kdump/crash/test.sh                   |  3 ++-
 tests/kola/kdump/service                         |  7 ++++---
 tests/kola/kubernetes/kube-watch/test.sh         |  7 ++++---
 tests/kola/kubernetes/systemd-env-read/test.sh   | 10 +++++-----
 tests/kola/logging/printk                        |  5 +++--
 .../default-network-behavior-change/test.sh      |  4 ++--
 tests/kola/networking/dnsmasq-service            |  3 ++-
 tests/kola/networking/force-persist-ip/test.sh   |  5 ++---
 .../hostname/fallback-hostname/test.sh           | 14 +++++++-------
 tests/kola/networking/kargs-rd-net               |  9 +++++----
 tests/kola/networking/nameserver                 | 11 ++++++-----
 tests/kola/networking/network-online-service     |  3 ++-
 tests/kola/networking/nic-naming                 | 16 ++++++++--------
 tests/kola/networking/nm-ifcfg-rh-plugin         |  8 ++------
 tests/kola/networking/nm-start                   |  8 ++++----
 tests/kola/networking/nmstate/policy/test.sh     |  3 ++-
 tests/kola/networking/nmstate/state/test.sh      |  3 ++-
 tests/kola/networking/no-persist-ip              | 12 ++++++------
 .../networking/rd-net-timeout-carrier/test.sh    | 14 +++++++-------
 .../networking/team-dhcp-via-ignition/test.sh    |  5 +++--
 .../ntp/chrony/coreos-platform-chrony-config     |  3 +--
 tests/kola/platforms/aws/assert-xen              |  3 +--
 tests/kola/platforms/aws/nvme                    |  6 +++---
 tests/kola/podman/dns/test.sh                    |  3 ++-
 tests/kola/podman/rootless-systemd               |  3 ++-
 tests/kola/reboot/test.sh                        |  3 +--
 .../root-reprovision/filesystem-only/test.sh     |  3 +--
 tests/kola/rpm-ostree/kernel-replace             |  5 +++--
 tests/kola/secex/ensure/test.sh                  |  5 +++--
 tests/kola/secex/reboot/test.sh                  |  6 ++++--
 tests/kola/selinux/default                       |  3 ++-
 tests/kola/selinux/podman-tmpfs-context          |  3 ++-
 tests/kola/selinux/stub-resolve-context          |  7 ++++---
 .../kola/ssh/custom-host-key-permissions/test.sh |  7 ++++---
 tests/kola/swap/zram-default                     |  6 +++---
 tests/kola/swap/zram-generator/test.sh           |  7 ++++---
 tests/kola/systemd/default-unit-timeouts         |  3 ++-
 tests/kola/toolbox/test.sh                       |  9 +++------
 tests/kola/var-mount/scsi-id/test.sh             |  7 ++++---
 72 files changed, 210 insertions(+), 195 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 811fb2c790..1876e49c7c 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -9,9 +9,9 @@
 ##   distros: fcos
 ##   # We ship the x86_64 on all non-x86_64 arches.
 ##   architectures: "! x86_64"
-##   description: Verify the x86_64 qemu emulator works on non-x86_64 
-##     instances.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1237
+##   description: Verify the x86_64 qemu emulator works on non-x86_64 instances.
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1237
 
 set -xeuo pipefail
 
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index fc1c22f863..2ed05a042e 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -6,9 +6,10 @@
 ##   architectures: "!aarch64 s390x"
 ##   description: Verify that we install BIOS/PReP bootloader 
 ##     using grub2-install from the target system.
-##     See
-##     - https://github.com/coreos/coreos-assembler/pull/3190
-##     - https://github.com/coreos/coreos-assembler/issues/3148
+
+# See
+# - https://github.com/coreos/coreos-assembler/pull/3190
+# - https://github.com/coreos/coreos-assembler/issues/3148
 
 set -xeuo pipefail
 
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index c274518397..761ec2df4b 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -4,8 +4,7 @@
 ##   # We intentionally exclude the Install section from a systemd unit.
 ##   # This is valid but not ideal, so Butane warns about it.
 ##   allowConfigWarnings: true
-##   description: Verify the Ignition warnings are displayed on 
-##     the console.
+##   description: Verify the Ignition warnings are displayed on the console.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
index 3dedf9c231..2e6e03450e 100755
--- a/tests/kola/clhm/network-device-info
+++ b/tests/kola/clhm/network-device-info
@@ -3,7 +3,8 @@
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
 ##   description: Verify that CLHM wrote a snippet for the NIC IP info.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1153
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1153
 
 set -xeuo pipefail
 
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index cbb34a212f..a1b1490dba 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -5,7 +5,7 @@
 ##   # TODO-RHCOS: drop "fcos" tag when cgroupsv2 lands in RHCOS
 ##   distros: fcos
 ##   exclusive: false
-##   description: Verify the system supports cgroupsv2.
+##   description: Verify the system supports cgroupsv2 on FCOS.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index 3a3a117d56..43246eb4a4 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -5,8 +5,8 @@
 ##   exclusive: false
 ##   # May support e.g. centos in the future
 ##   distros: "fcos rhcos"
-##   description: Verify the RPM %{vendor} flag for everything 
-##     installed matches what we expect.
+##   description: Verify the RPM %{vendor} flag for everything installed 
+##     matches what we expect.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
index 9e09b5c7ca..875cc5d462 100755
--- a/tests/kola/disks/growfs
+++ b/tests/kola/disks/growfs
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that the rootfs is automatically grown 
-##     on first boot in the default case and that the autosave-xfs 
-##     logic didn't kick in.
+##   description: Verify that the rootfs is automatically grown on first 
+##     boot by default and that the autosave-xfs logic didn't kick in.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index c40a3f1874..d88338307e 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -7,7 +7,8 @@
 ##   distros: fcos
 ##   exclusive: false
 ##   description: Verify systemd-repart.service is masked.
-##     See https://github.com/coreos/fedora-coreos-config/pull/744
+
+# See https://github.com/coreos/fedora-coreos-config/pull/744
 
 set -xeuo pipefail
 
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
index d992bdf8e0..acdab024c5 100755
--- a/tests/kola/extensions/module
+++ b/tests/kola/extensions/module
@@ -7,7 +7,8 @@
 ##   # test take longer than 10 minutes in our aarch64 qemu tests.
 ##   timeoutMin: 15
 ##   minMemory: 1536
-##   description: Verify that we can install some common tools as OS extensions.
+##   description: Verify that we can install some common tools via module 
+##     as OS extensions.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index 9b9f38fc50..de44b7f2fc 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -2,7 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify /sysroot/.coreos-aleph-version.json exists.
-##     Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
+
+# Defined in https://github.com/coreos/fedora-coreos-tracker/blob/master/internals/README-internals.md#aleph-version
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index e36a440a5c..32959af1a3 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -2,9 +2,10 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify /etc release symlinks are valid.
-##     See
-##     - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
-##     - https://github.com/openshift/os/pull/815
+
+# See
+# - https://bugzilla.redhat.com/show_bug.cgi?id=2068148
+# - https://github.com/openshift/os/pull/815
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index be1968b767..af69ce368b 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -5,12 +5,11 @@
 ##   # s390x doesn't have any configuration in platforms.yaml, so
 ##   # platforms.json is not included in the image
 ##   architectures: "!s390x"
-##   description: >
-##     Verify that the kargs and grub.cfg commands specified in 
+##   description: Verify that the kargs and grub.cfg commands specified in 
 ##     platforms.json have been properly applied to the image. 
-##     Also check cosa correctly translated platforms.yaml to  
-##     platforms.json, by spot-checking certain expected values
-##     in platforms.json.
+
+# Also check cosa correctly translated platforms.yaml to platforms.json, by 
+# spot-checking certain expected values in platforms.json.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/fcos_groups b/tests/kola/files/fcos_groups
index 05890cd54f..860c8a8ef1 100755
--- a/tests/kola/files/fcos_groups
+++ b/tests/kola/files/fcos_groups
@@ -2,11 +2,11 @@
 ## kola:
 ##   distros: fcos
 ##   exclusive: false
-##   description: >
-##     This performs a sanity check on system groups that are shipped
-##     as part of the base OS. Those groups come in different shapes
-##     (with static or dynamic GIDs, from plain files or from scriptlets)
-##     and each case is covered by a corresponding check here below.
+##   description: Verify system groups that are shipped as part of the base OS.
+
+# Those groups come in different shapes (with static or dynamic GIDs, from
+# plain files or from scriptlets) and each case is covered by a corresponding
+# check here below.
 
 set -euo pipefail
 
diff --git a/tests/kola/files/fcos_users b/tests/kola/files/fcos_users
index 23108f32e8..68dcec38ff 100755
--- a/tests/kola/files/fcos_users
+++ b/tests/kola/files/fcos_users
@@ -2,11 +2,11 @@
 ## kola:
 ##   distros: fcos
 ##   exclusive: false
-##   description: >
-##     This performs a sanity check on system users that are shipped
-##     as part of the base OS. Those users come in different shapes
-##     (with static or dynamic IDs, from plain files or from scriptlets)
-##     and each case is covered by a corresponding check here below.
+##   description: Verify system users that are shipped as part of the base OS.
+
+# Those users come in different shapes (with static or dynamic IDs, from
+# plain files or from scriptlets) and each case is covered by a corresponding
+# check here below.
 
 set -euo pipefail
 
diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index 74f6ea6fea..73642a92c2 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Check the initrd includes some specific files.
+##   description: Verify that the initrd includes some specific files.
 
 # This test runs on both FCOS & RHCOS. The initrd includes specific files which,
 # if omitted from the image, will cause some failures with certain Ignition
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index 70340cda4f..c6396eafb4 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that we are not including the kernel 
-##     headers on the host.
-##     See
-##     - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
-##     - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
+##   description: Verify that we are not including the kernel headers on the host.
+
+# See
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1814719
+# - https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1116
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/license b/tests/kola/files/license
index b0d39dd2c5..1b438ad275 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify /usr/share/licenses/fedora-coreos-config/LICENSE
-##     exists.
+##   description: Verify /usr/share/licenses/fedora-coreos-config/LICENSE exists.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index c45f7a231e..ce1b7f694d 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that logrotate and logrotate.timer 
-##     services are enabled as expected.
+##   description: Verify logrotate and logrotate.timer services are enabled.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 1a42c3e1a9..39cb9a91bb 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -4,7 +4,8 @@
 ##   exclusive: false
 ##   description: Verify that we're using the sqlite rpmdb backend
 ##     for RHCOS 9+ and FCOS 33+.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/623
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/623
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/sudoers b/tests/kola/files/sudoers
index 16817ba407..edab075b45 100755
--- a/tests/kola/files/sudoers
+++ b/tests/kola/files/sudoers
@@ -2,9 +2,9 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify the permissions and syntax of /etc/sudoers 
-##     and /etc/sudoers.d/* are readable only for root, instead of 
-##     world-readable for security concern.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1981979
+##     and /etc/sudoers.d/* are readable only for root.
+
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1981979
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index 8d38d82fc2..a1fc4a78ed 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify files in /usr/lib/systemd/system-generators 
-##     are executable.
+##   description: Verify files in /usr/lib/systemd/system-generators are executable.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index 5ba1bba9dc..12eb2f2c03 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify no files under /var and /etc 
-##     have unlabeled_t SELinux label.
+##   description: Verify no files under /var and /etc have unlabeled_t SELinux label.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 2797a153b2..6476372963 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -3,10 +3,10 @@
 ##   tags: "platform-independent"
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
-##   description: Verify that there are no broken symlinks in 
-##     /etc/ and /usr/, except the known files which require 
-##     further investigation.
-##     See https://github.com/coreos/fedora-coreos-config/issues/1782
+##   description: Verify that there are no broken symlinks in /etc/ and /usr/, 
+##     except the known files which require further investigation.
+
+# See https://github.com/coreos/fedora-coreos-config/issues/1782
 
 set -xeuo pipefail
 
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index 0611609815..2df6974d20 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -3,8 +3,9 @@
 ##   distros: fcos
 ##   exclusive: true
 ##   description: Verify that one can configure a node to use the legacy 
-##     iptables backend. It is scoped to only FCOS because RHCOS only 
-##     supports nft.
+##     iptables backend. 
+
+# It is scoped to only FCOS because RHCOS only supports nft.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index af530cbd72..3c6838bfc8 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -1,8 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verifies that the expected iptables backend is configured.
-##     https://github.com/coreos/fedora-coreos-tracker/issues/676
+##   description: Verify that the expected iptables backend is configured.
+
+# https://github.com/coreos/fedora-coreos-tracker/issues/676
 
 set -xeuo pipefail
 
diff --git a/tests/kola/gshadow b/tests/kola/gshadow
index 8fff82a8d0..aa9e613055 100755
--- a/tests/kola/gshadow
+++ b/tests/kola/gshadow
@@ -2,7 +2,8 @@
 ## kola:
 ##   description: Verify that glibc's parsing of /etc/gshadow does 
 ##     not cause systemd-sysusers to segfault on specially constructed lines.
-##     See https://github.com/coreos/bugs/issues/1394
+
+# See https://github.com/coreos/bugs/issues/1394
 #
 # One line must fit into the character buffer (1024 bytes, unless a previous
 # line was longer) but have enough group members such that
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 691f610dd8..3a0d575186 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -1,10 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-##   description: Verify that we delete userdata from provider 
-##     after Ignition completes.
-##     See https://github.com/coreos/ignition/issues/1315
+##   description: Verify that we delete userdata from provider after Ignition 
+##     completes.
 
+# See https://github.com/coreos/ignition/issues/1315
 # There are 2 services: 
 # 1)ignition-delete-config.service, which deletes Ignition 
 # configs from VMware and VirtualBox on first boot.
diff --git a/tests/kola/ignition/journald-log b/tests/kola/ignition/journald-log
index dbb875ddf4..5dde2d88e9 100755
--- a/tests/kola/ignition/journald-log
+++ b/tests/kola/ignition/journald-log
@@ -1,10 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that we send the journald log entry 
-##     for a user-provided config.
-##     See https://github.com/coreos/ignition/pull/958 
-##     for the MESSAGE_ID source.
+##   description: Verify that we send the journald log entry for a 
+##     user-provided config.
+
+# See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 4b7cc4482a..0985684ed9 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -2,8 +2,8 @@
 ## kola:
 ##   tags: needs-internet
 ##   description: Verify Ignition supports remote config.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1980679
 # remote.ign is on github, inject kernelArguments and write 
 # something to /etc/testfile.
 # config.ign is to include remote kargsfile.ign.
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 79b4929957..b720aac145 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -3,9 +3,8 @@
 ##   tags: needs-internet
 ##   # Don't pass AWS or GCP credentials to instance
 ##   noInstanceCreds: true
-##   description: Verify that Ignition can fetch anonymous resources 
-##     within a cloud platform (S3 -> AWS, GCS -> GCP) when no 
-##     credentials are supplied.
+##   description: Verify that Ignition can fetch anonymous resources within a 
+##     cloud platform (S3 -> AWS, GCS -> GCP) when no credentials are supplied.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index bcc2e762df..c9aeba1ca4 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: Verify that Ignition is able to use 
-##     `coreos-boot-disk` symlink.
+##   description: Verify that Ignition is able to use `coreos-boot-disk` symlink.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index 9e27e417c6..ad79d94892 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -6,7 +6,8 @@
 ##   # TODO-RHCOS: Determine if any services on RHCOS may be disabled and adapt test
 ##   distros: fcos
 ##   description: Verify that Ignition supports to disable units.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/392
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/392
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index e1cdc3ae41..c8757f070f 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -3,9 +3,10 @@
 ##   tags: "platform-independent"
 ##   description: Verify that Ignition supports to enable systemd units 
 ##     of different types.
-##     See
-##     - https://github.com/coreos/ignition/issues/586
-##     - https://github.com/systemd/systemd/pull/9901
+
+# See
+# - https://github.com/coreos/ignition/issues/586
+# - https://github.com/systemd/systemd/pull/9901
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 55a388328f..b33b2b68cf 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -9,7 +9,8 @@
 ##   # which can take longer than the default 10 minute timeout.
 ##   timeoutMin: 15
 ##   description: Verify that the crashkernel reserved memory is large enough.
-##     See https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
+
+# See https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index ff832e9c37..fdffe9fc04 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -1,9 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that kdump didn't start (it's either 
-##     disabled, or enabled but conditional on crashkernel= karg, 
-##     which we don't bake).
+##   description: Verify that kdump didn't start by default.
+
+# It's either disabled, or enabled but conditional on crashkernel= karg, 
+# which we don't bake.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index 3a63e89351..bfefa7f3b5 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -3,9 +3,10 @@
 ##   exclusive: false
 ##   description: Verify that `kubernetes_file_t` labeled files can be
 ##     watched by systemd.
-##     See
-##     - https://github.com/coreos/fedora-coreos-tracker/issues/861
-##     - https://github.com/containers/container-selinux/issues/135
+
+# See
+# - https://github.com/coreos/fedora-coreos-tracker/issues/861
+# - https://github.com/containers/container-selinux/issues/135
 
 set -xeuo pipefail
 
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index eb0dcff3b7..0658064b5c 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -1,11 +1,11 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that `kubernetes_file_t` labeled 
-##     files can be read by systemd, also check if the `kube-env` 
-##     service started successfully and the service wrote to the 
-##     journal successfully.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1973418
+##   description: Verify that `kubernetes_file_t` labeled files can be read 
+##     by systemd, also verify the `kube-env` service started successfully  
+##     and the service wrote to the journal successfully.
+
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1973418
 
 set -xeuo pipefail
 
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
index 5c9a55addd..4e6098a5c7 100755
--- a/tests/kola/logging/printk
+++ b/tests/kola/logging/printk
@@ -1,8 +1,9 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify default console log level is 4. 
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1244
+##   description: Verify default console log level is 4.
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1244
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index bc0329dd5f..27a55f9577 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -2,8 +2,8 @@
 ## kola:
 ##   tags: "platform-independent"
 ##   exclusive: false
-##   description: Verify the default networking configurations
-##     match expected results.
+##   description: Verify the default networking configurations match expected 
+##     results.
 #
 # Since we depend so much on the default networking configurations let's
 # alert ourselves when any default networking configuration changes in
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index d5445fb972..eb0369fd38 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -6,7 +6,8 @@
 ##   distros: fcos
 ##   exclusive: false
 ##   description: Verify dnsmasq service is masked.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/519#issuecomment-705140528
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index f7d22cc1a2..5f2b37c0e9 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -12,9 +12,8 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: Verify that coreos.force_persist_ip will force 
-##     propagating kernel argument based networking configuration 
-##     into the real root.
+##   description: Verify that coreos.force_persist_ip will force propagating 
+##     kernel argument based networking configuration into the real root.
 
 # Setup configuration for a single NIC with two different ways:
 # - kargs provide static network config for eth1 and also coreos.force_persist_ip
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 0f66dcf55a..563c40ed13 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -1,13 +1,13 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: >
-##     Test that the fallback hostname is `localhost`. This test
-##     validates that the fallback hostname is set to `localhost`
-##     by first disabling NetworkManager from setting the hostname
-##     via DHCP or DNS (see config.bu) and then verifying that the
-##     hostname is set from the fallback hostname and is `localhost`.
-##     https://github.com/coreos/fedora-coreos-tracker/issues/902
+##   description: Verify that the fallback hostname is `localhost`.
+
+# This test validates that the fallback hostname is set to `localhost`
+# by first disabling NetworkManager from setting the hostname
+# via DHCP or DNS (see config.bu), also verify that the
+# hostname is set from the fallback hostname and is `localhost`.
+# See https://github.com/coreos/fedora-coreos-tracker/issues/902
 #
 # Use the output of hostnamectl to gather information about how
 # the hostname is/was set. We're expecting something like this:
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 4fe7974e9b..25013b4964 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -9,10 +9,11 @@
 ##   architectures: "!s390x"
 ##   description: Verify rd.net.timeout.dhcp and rd.net.dhcp.retry 
 ##     are supported by NetworkManager.
-##     See
-##     - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
-##     - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
-##     - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
+
+# See
+# - https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/559
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
+# - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
 
 # Append "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8" to kernel parameter 
 # when boot, get total timeout is `timeout * retry`, 30*8(240) seconds
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 518aad82f4..9ddabb4cb3 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -6,11 +6,12 @@
 ##   # appendKernelArgs doesn't work on s390x
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Verify multiple nameservers config via kernel arguments work well.
-##     RHCOS: need to check /etc/resolv.conf and nmconnection.
-##     FCOS:  using systemd-resolved which needs to run resolvectl to check.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
+##   description: Verify that we config multiple nameservers via kernel 
+##     arguments work well.
+
+# RHCOS: need to check /etc/resolv.conf and nmconnection.
+# FCOS:  using systemd-resolved which needs to run resolvectl to check.
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1763341
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index 2f9152aada..a81d7504e3 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -2,7 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify network-online.target is inactive by default.
-##     See https://github.com/coreos/fedora-coreos-config/pull/1088
+
+# See https://github.com/coreos/fedora-coreos-config/pull/1088
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index ee7d100b52..b9aad3bbb5 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -3,15 +3,15 @@
 ##   exclusive: false
 ##   platforms: "!azure"
 ##   description: Verify that we detected eth* NIC naming after booted.
-##     Disable on azure because of a limitation of the hv_netvsc driver
-##     there. According to [1] and [2] the driver does not provide sufficient
-##     information to systemd-udev for systemd's naming to work. It falls
-##     back to basic ethX naming.
-##     See
-##     - https://access.redhat.com/solutions/3204751
-##     - https://github.com/Azure/WALinuxAgent/issues/1877
-##     - https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 
+# Disable on azure because of a limitation of the hv_netvsc driver
+# there. According to [1] and [2] the driver does not provide sufficient
+# information to systemd-udev for systemd's naming to work. It falls
+# back to basic ethX naming.
+# See
+# - https://access.redhat.com/solutions/3204751
+# - https://github.com/Azure/WALinuxAgent/issues/1877
+# - https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
diff --git a/tests/kola/networking/nm-ifcfg-rh-plugin b/tests/kola/networking/nm-ifcfg-rh-plugin
index 5637544100..93409f25b6 100755
--- a/tests/kola/networking/nm-ifcfg-rh-plugin
+++ b/tests/kola/networking/nm-ifcfg-rh-plugin
@@ -4,17 +4,13 @@
 ##   tags: "platform-independent"
 ##   # This is a read-only, nondestructive test.
 ##   exclusive: false
-##   description: >
-##     Verify that the ifcfg-rh plugin is not loaded on FCOS (it 
-##     can't be because it should never even be included in the 
-##     filesystem). We also want to make sure that at least for 
-##     RHCOS8 it is included.
+##   description: Verify that the ifcfg-rh plugin is not loaded on FCOS,
+##     and make sure that at least for RHCOS8 it is included.
 
 set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-
 # Check if it exists or not. The plugin provides a dbus interface
 # so if it is loaded there will be something listening at that name
 exists=0
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index b1933b76ba..32131b2003 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -1,10 +1,10 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify kola on QEMU shouldn't need to bring 
-##     up networking in the initrd by default, and on AWS we 
-##     did bring up networking in the initrd.
-##     See https://github.com/coreos/fedora-coreos-config/pull/426
+##   description: Verify kola on QEMU shouldn't bring up networking in the 
+##     initrd by default, and on AWS we did bring up networking in the initrd.
+
+# See https://github.com/coreos/fedora-coreos-config/pull/426
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nmstate/policy/test.sh b/tests/kola/networking/nmstate/policy/test.sh
index f1d4a0afd2..e31fba28b7 100755
--- a/tests/kola/networking/nmstate/policy/test.sh
+++ b/tests/kola/networking/nmstate/policy/test.sh
@@ -3,7 +3,8 @@
 ##   tags: "platform-independent needs-internet"
 ##   description: Verify that configure a DHCP linux bridge using 
 ##     butane and nmstate service with policy works.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1175
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1175
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/nmstate/state/test.sh b/tests/kola/networking/nmstate/state/test.sh
index 90cc9695aa..8a690b509f 100755
--- a/tests/kola/networking/nmstate/state/test.sh
+++ b/tests/kola/networking/nmstate/state/test.sh
@@ -3,7 +3,8 @@
 ##   tags: "platform-independent needs-internet"
 ##   description: Verify that configure a DHCP linux bridge using 
 ##     butane and nmstate service with state works.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1175
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1175
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 5eceb87467..18c8d3fbbd 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -11,12 +11,12 @@
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
 ##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
-##   description: >
-##     Verify that the coreos.no_persist_ip kernel argument will
-##     prevent propagating kernel argument based networking 
-##     configuration into the real root. It does this by providing 
-##     karg static networking config for eth1 and then verifying 
-##     that DHCP is used in the real root.
+##   description: Verify that the coreos.no_persist_ip kernel argument will 
+##     prevent propagating kernel argument based networking configuration 
+##     into the real root. 
+
+# It does this by providing karg static networking config for eth1 and 
+# then verifying that DHCP is used in the real root.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index 1f9f0193af..cd5f4e3003 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -1,13 +1,13 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: >
-##     This test verifies that NetworkManager supports configuring the
-##     carrier timeout via the `rd.net.timeout.carrier=` karg. Without
-##     recreating an environment that requires this setting to be set
-##     (which would be hard to do), we'll test this by just making sure
-##     that setting the kernel argument ensures the runtime configuration
-##     file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
+##   description: Verify that NetworkManager supports configuring the
+##     carrier timeout via the `rd.net.timeout.carrier=` karg.
+
+# Without recreating an environment that requires this setting to be set
+# (which would be hard to do), we'll test this by just making sure
+# that setting the kernel argument ensures the runtime configuration
+# file /run/NetworkManager/conf.d/15-carrier-timeout.conf gets created.
 #
 # Checking that this file gets created is also tricky because we
 # `rm -rf /run/NetworkManager` in coreos-teardown-initramfs on first boot,
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 318c6841c7..b9085af585 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -12,8 +12,9 @@
 ##   # https://github.com/coreos/coreos-assembler/issues/2776
 ##   architectures: "!s390x"
 ##   description: Verify team networking works via Ignition config.
-##     The Ignition config refers to
-##     https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
+
+# The Ignition config refers to
+# https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-network-configuration/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-config b/tests/kola/ntp/chrony/coreos-platform-chrony-config
index d301ddc2cc..36230c9ef7 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-config
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-config
@@ -2,8 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   platforms: "aws azure gcp qemu"
-##   description: Verify the coreos-platform-chrony generator works
-##     on cloud.
+##   description: Verify the coreos-platform-chrony generator works on cloud.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index af2fe146ea..8120944808 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -9,8 +9,7 @@
 ##   # should only run on Xen instances and the caller should request
 ##   # the test.
 ##   requiredTag: aws-xen-test
-##   description: Verify that we can create an AWS instance with 
-##     XEN based.
+##   description: Verify that the booted AWS instance is XEN based.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/platforms/aws/nvme b/tests/kola/platforms/aws/nvme
index c397d06488..7a2253ba94 100755
--- a/tests/kola/platforms/aws/nvme
+++ b/tests/kola/platforms/aws/nvme
@@ -4,9 +4,9 @@
 ##   exclusive: false
 ##   # This test is targeted at AWS
 ##   platforms: aws
-##   description: Verify that we crate an AWS instances with nvme 
-##     storage.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1306
+##   description: Verify that we crate an AWS instances with nvme storage.
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1306
 #
 # We'll check to see if anything is listed in `nvme list-subsys`
 # and then run the test based on that. Example output:
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index e6185f2c28..c11064161f 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -10,7 +10,8 @@
 ##   timeoutMin: 3
 ##   description: Verify that DNS in rootless podman containers can 
 ##     resolve external domains.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/923
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/923
 
 set -xeuo pipefail
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 30bf4fe3b3..b6b61f4cc5 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -11,7 +11,8 @@
 ##   # https://pagure.io/releng/issue/10935#comment-808601
 ##   minMemory: 1536
 ##   description: Verify that rootless+systemd works.
-##     See https://github.com/containers/podman/issues/7441
+
+# See https://github.com/containers/podman/issues/7441
 #
 # This script runs a rootless podman container (rootless because it's
 # run as the `core` user) with systemd inside that brings up httpd.
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 0b16cb0ff6..a09bcbc731 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,8 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-##   description: These are read-only not-necessarily-related checks 
-##     that verify default system configuration both on first and 
+##   description: Verify default system configuration are both on first and 
 ##     subsequent boots.
 
 set -xeuo pipefail
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 6a8d6bbc05..6003d8c126 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -7,8 +7,7 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
-##   description: Verify the root reprovisioning with specified file 
-##     system works.
+##   description: Verify the root reprovisioning with specified file system works.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index cd9bed0a7e..7f4fe1c870 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -7,8 +7,9 @@
 ##   distros: fcos
 ##   # Needs internet access as we fetch files from koji
 ##   tags: "needs-internet platform-independent"
-##   description: Verify that build container image with a new kernel 
-##     and can reboot into the new image.
+##   description: Verify that build of a container image with a new kernel 
+##     and reboot into it succeeds.
+
 #
 # Copyright (C) 2023 Red Hat, Inc.
 #
diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
index 1a4d36da4a..567363405c 100755
--- a/tests/kola/secex/ensure/test.sh
+++ b/tests/kola/secex/ensure/test.sh
@@ -5,8 +5,9 @@
 ##   requiredTag: secex
 ##   timeoutMin: 3
 ##   description: Verify the s390x Secure Execution QEMU image works. It also
-##     implicitly tests Ignition config decryption. We don't run it by default
-##     because it requires running with `--qemu-secex`.
+##     implicitly tests Ignition config decryption. 
+
+# We don't run it by default because it requires running with `--qemu-secex`.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
index cc1d4769df..1624f268c6 100755
--- a/tests/kola/secex/reboot/test.sh
+++ b/tests/kola/secex/reboot/test.sh
@@ -5,8 +5,10 @@
 ##   requiredTag: secex
 ##   timeoutMin: 3
 ##   description: Verify the qemu-secex image reboots with SE enabled. It also
-##     implicitly tests Ignition config decryption. We don't run it by default
-##     because it requires running with `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
+##     implicitly tests Ignition config decryption.
+
+# We don't run it by default because it requires running with 
+# `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
index b82c3fda09..096f34631a 100755
--- a/tests/kola/selinux/default
+++ b/tests/kola/selinux/default
@@ -3,7 +3,8 @@
 ##   exclusive: false
 ##   tags: "platform-independent"
 ##   description: Verify that the SELinux policy isn't marked as modified.
-##     See https://github.com/openshift/os/issues/1036
+
+# See https://github.com/openshift/os/issues/1036
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index f39276f303..2311635549 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -7,7 +7,8 @@
 ##   tags: "needs-internet platform-independent"
 ##   description: Verify that tmpfs mounts inside a container 
 ##     have the `container_file_t` label.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1366
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1366
 
 set -xeuo pipefail
 
diff --git a/tests/kola/selinux/stub-resolve-context b/tests/kola/selinux/stub-resolve-context
index 7482b936f0..f7e0541387 100755
--- a/tests/kola/selinux/stub-resolve-context
+++ b/tests/kola/selinux/stub-resolve-context
@@ -6,9 +6,10 @@
 ##   exclusive: false
 ##   description: Verify that the stub-resolv.conf file has the correct 
 ##     selinux context.
-##     See
-##     - https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
-##     - https://github.com/systemd/systemd/pull/17976
+
+# See
+# - https://github.com/fedora-selinux/selinux-policy/pull/509#issuecomment-744540382
+# - https://github.com/systemd/systemd/pull/17976
 
 set -xeuo pipefail
 
diff --git a/tests/kola/ssh/custom-host-key-permissions/test.sh b/tests/kola/ssh/custom-host-key-permissions/test.sh
index 7156af403c..4599658301 100755
--- a/tests/kola/ssh/custom-host-key-permissions/test.sh
+++ b/tests/kola/ssh/custom-host-key-permissions/test.sh
@@ -3,9 +3,10 @@
 ##   tags: platform-independent
 ##   description: Verify that sshd still works with a custom 
 ##     host key with mode 640 and group ssh_keys.
-##     See
-##     - https://github.com/coreos/fedora-coreos-tracker/issues/1394
-##     - https://src.fedoraproject.org/rpms/openssh/pull-request/37
+
+# See
+# - https://github.com/coreos/fedora-coreos-tracker/issues/1394
+# - https://src.fedoraproject.org/rpms/openssh/pull-request/37
 
 set -xeuo pipefail
 
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 3180c0cf6b..3b2323daa3 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -2,9 +2,9 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify that we don't have swap on zram by default.
-##     See
-##     https://github.com/coreos/fedora-coreos-tracker/issues/509
-##     https://github.com/coreos/fedora-coreos-config/pull/687
+
+# https://github.com/coreos/fedora-coreos-tracker/issues/509
+# https://github.com/coreos/fedora-coreos-config/pull/687
 #
 # We can run this on both FCOS and RHCOS as neither should have a zram device
 # enabled by default. (In RHCOS, there is no zram support at all)
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index ead88795e4..cb47cbfbe2 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -4,9 +4,10 @@
 ##   distros: fcos
 ##   # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
 ##   exclusive: true
-##   description: Verify that swap on zram devices can be set up
-##     using the zram-generator as defined in the docs at
-##     https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
+##   description: Verify that swap on zram devices can be set up using the 
+##     zram-generator as defined.
+
+# See docs at https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
 
 set -xeuo pipefail
 
diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index fd308332b7..08d279dd7a 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -3,7 +3,8 @@
 ##   exclusive: false
 ##   tags: "platform-independent"
 ##   description: Verify systemd default shutdown time is 1m 30s.
-##     See https://github.com/coreos/fedora-coreos-tracker/issues/1404
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1404
 
 set -xeuo pipefail
 
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index f0e6131c50..5844837cfb 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -8,12 +8,9 @@
 ##   distros: fcos
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
-##   description: >
-##     Make sure that basic toolbox functionnality is working:
-##     - Creating a toolbox
-##     - Running a command in a toolbox
-##     - Removing all toolbox containers
-#
+##   description: Make sure that basic toolbox functionality works (creating, 
+##     running commands, and removing).
+
 # Important note: Commands are run indirectly via calls to `machinectl shell`
 # to re-create the user environment needed for unprivileged podman
 # functionality. However, machinectl shell does not propagate the exit
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index c767d1d4fb..591fd2bf04 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -3,9 +3,10 @@
 ##   # additionalDisks is only supported on QEMU
 ##   platforms: qemu
 ##   additionalDisks: ["5G:mpath"]
-##   description: Verify udev rules /dev/disk/by-id/scsi-*
-##     symlinks present in initramfs.
-##     See https://bugzilla.redhat.com/show_bug.cgi?id=1990506
+##   description: Verify udev rules /dev/disk/by-id/scsi-* symlinks exist 
+##     in initramfs.
+
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1990506
 
 set -xeuo pipefail
 

From 52b1d1adfc7668bba1cc28bc14bd03a35de2ced4 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Sat, 22 Apr 2023 23:28:58 -0400
Subject: [PATCH 1615/2157] overlay.d/20platform-chrony: accept ec2 and gce
 platform IDs

RHCOS 4.1 and 4.2 bootimages are still in use, and they produce systems
that claim to be ec2/gce instead of aws/gcp.  Detect those and handle
appropriately.
---
 .../lib/systemd/system/coreos-platform-chrony-config.service  | 4 ++++
 .../usr/libexec/coreos-platform-chrony-config                 | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
index 6a1bce8823..53c208c58c 100644
--- a/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
+++ b/overlay.d/20platform-chrony/usr/lib/systemd/system/coreos-platform-chrony-config.service
@@ -3,6 +3,10 @@ Description=CoreOS Configure Chrony Based On The Platform
 ConditionKernelCommandLine=|ignition.platform.id=azurestack
 ConditionKernelCommandLine=|ignition.platform.id=azure
 ConditionKernelCommandLine=|ignition.platform.id=aws
+# RHCOS 4.1/4.2 bootimages
+ConditionKernelCommandLine=|ignition.platform.id=ec2
+# RHCOS 4.1/4.2 bootimages
+ConditionKernelCommandLine=|ignition.platform.id=gce
 ConditionKernelCommandLine=|ignition.platform.id=gcp
 ConditionKernelCommandLine=|ignition.platform.id=qemu
 Before=NetworkManager.service
diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index b91f880bac..e25cbb528d 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -83,11 +83,11 @@ case "${platform}" in
          echo 'refclock PHC /dev/ptp_hyperv poll 3 dpoll -2 offset 0'
          echo 'leapsectz right/UTC'
         ) >> "${confpath}" ;;
-    aws)
+    aws | ec2)
         (echo '# See also https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html'
          echo 'server 169.254.169.123 prefer iburst minpoll 4 maxpoll 4'
         ) >> "${confpath}" ;;
-    gcp)
+    gcp | gce)
         (echo '# See also https://cloud.google.com/compute/docs/instances/managing-instances#configure-ntp'
          echo '# and https://cloud.google.com/compute/docs/images/configuring-imported-images'
          echo 'server metadata.google.internal prefer iburst'

From be455d9de03df401c25e270d5ccc319bb751cef5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 May 2023 17:00:25 -0400
Subject: [PATCH 1616/2157] manifests/system-configuration: drop kdump
 ignition.firstboot workaround

This has made it upstream and is in Fedora and RHEL9.
---
 manifests/system-configuration.yaml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index e8f48d0d93..eceb626b0f 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -37,14 +37,3 @@ packages:
   # Boost starving threads
   # https://github.com/coreos/fedora-coreos-tracker/issues/753
   - stalld
-
-postprocess:
-  # Make kdump work on firstboot
-  - |
-    #!/usr/bin/env bash
-    # Make kdump ignore `ignition.firstboot` when copying kargs from
-    # the running kernel to the kdump kernel when passing to be kexec.
-    # This makes it so kdump can be set up on the very first boot.
-    # Upstream request to have this upstream so we can stop carrying it here:
-    # https://lists.fedoraproject.org/archives/list/kexec@lists.fedoraproject.org/thread/5P4WIJLW2TSGF4PZGRZGOXYML4RXZU23/
-    sed -i -e 's/KDUMP_COMMANDLINE_REMOVE="/KDUMP_COMMANDLINE_REMOVE="ignition.firstboot /' /etc/sysconfig/kdump

From 13966c81208040d2b210bccbf7779c0fb9332c65 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 May 2023 17:11:26 -0400
Subject: [PATCH 1617/2157] drop fallback hostname handling

This is dead code that hasn't been included since F36.
---
 manifests/fallback-hostname.yaml  | 11 -----------
 manifests/fedora-coreos-base.yaml |  4 ----
 2 files changed, 15 deletions(-)
 delete mode 100644 manifests/fallback-hostname.yaml

diff --git a/manifests/fallback-hostname.yaml b/manifests/fallback-hostname.yaml
deleted file mode 100644
index f3bc6b409b..0000000000
--- a/manifests/fallback-hostname.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-postprocess:
-  # Set the fallback hostname to `localhost`. This can be removed
-  # once we are based on Fedora 37+.
-  # See https://github.com/coreos/fedora-coreos-tracker/issues/902
-  - |
-    #!/usr/bin/env bash
-    set -euxo pipefail
-    source /etc/os-release
-    if [ -z "${DEFAULT_HOSTNAME:-}" ]; then
-      echo 'DEFAULT_HOSTNAME=localhost' >> /usr/lib/os-release
-    fi
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index f96b47f216..5d6d84fc66 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -11,10 +11,6 @@ include:
   - shared-workarounds.yaml
   - shared-el9.yaml
 
-conditional-include:
-  - if: releasever <= 36
-    include: fallback-hostname.yaml
-
 ostree-layers:
   - overlay/05core
   - overlay/08nouveau

From 82f9c9326bc405a45b544b9f7de2af4f601b5742 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 May 2023 17:18:18 -0400
Subject: [PATCH 1618/2157] tests: use Fedora 38 container images

---
 tests/kola/binfmt/qemu                  | 2 +-
 tests/kola/ntp/data/ntplib.sh           | 2 +-
 tests/kola/podman/dns/test.sh           | 2 +-
 tests/kola/podman/rootless-systemd      | 2 +-
 tests/kola/selinux/podman-tmpfs-context | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 1876e49c7c..3b736e3921 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -19,7 +19,7 @@ set -xeuo pipefail
 
 case "$(arch)" in
     aarch64|ppc64le|s390x)
-        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:37 arch)
+        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:38 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index 49a847ea3e..a8dd540831 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -19,7 +19,7 @@ ntp_test_setup() {
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:37
+FROM registry.fedoraproject.org/fedora:38
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index c11064161f..260ff24f1e 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -22,7 +22,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:37 getent hosts google.com
+podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:38 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index b6b61f4cc5..a6b8ee75be 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -33,7 +33,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:37
+FROM registry.fedoraproject.org/fedora:38
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 2311635549..3d4d6bc527 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -14,7 +14,7 @@ set -xeuo pipefail
 
 . $KOLA_EXT_DATA/commonlib.sh
 
-context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:37 \
+context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:38 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"

From 402055a46001a9d272e129febbb0fd06da9430a9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 May 2023 17:21:00 -0400
Subject: [PATCH 1619/2157] manifests: move systemd-repart to shared manifest

sytemd-repart is in RHEL9 so let's start masking it and testing
it in RHCOS like we do in FCOS.

As part of this I had to move the system-configuration.yaml before
the ignition-and-ostree.yaml in the includes list because the
postprocess in the latter deletes everything in /etc/systemd/system/.
---
 manifests/fedora-coreos-base.yaml       | 8 +-------
 manifests/system-configuration.yaml     | 8 ++++++++
 tests/kola/disks/systemd-repart-service | 5 -----
 3 files changed, 9 insertions(+), 12 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 5d6d84fc66..33038d9286 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -3,10 +3,10 @@
 # core functionality.
 
 include:
+  - system-configuration.yaml
   - ignition-and-ostree.yaml
   - file-transfer.yaml
   - networking-tools.yaml
-  - system-configuration.yaml
   - user-experience.yaml
   - shared-workarounds.yaml
   - shared-el9.yaml
@@ -62,12 +62,6 @@ postprocess:
   - |
     #!/usr/bin/env bash
     systemctl mask dnsmasq.service
-  # Mask systemd-repart. Ignition is responsible for partition setup on first
-  # boot and does not use systemd-repart currently. See also
-  # https://github.com/coreos/fedora-coreos-tracker/issues/570
-  - |
-    #!/usr/bin/env bash
-    systemctl mask systemd-repart.service
 
   # Fedora 37 adds the nvmf dracut module to the initrd, causing
   # ext.config.files.dracut-executable to notice that the module puts a
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index eceb626b0f..8977f5c98a 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -37,3 +37,11 @@ packages:
   # Boost starving threads
   # https://github.com/coreos/fedora-coreos-tracker/issues/753
   - stalld
+
+postprocess:
+  # Mask systemd-repart. Ignition is responsible for partition setup on first
+  # boot and does not use systemd-repart currently. See also
+  # https://github.com/coreos/fedora-coreos-tracker/issues/570
+  - |
+    #!/usr/bin/env bash
+    systemctl mask systemd-repart.service
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index d88338307e..4ac5dab6dd 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -1,10 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test only runs on FCOS because the version of `systemd-udev` in RHCOS does
-##   # not include `systemd-repart`
-##   # TODO-RHCOS: consider dropping the "fcos" tag if/when `systemd-udev` in RHEL
-##   # starts to include `systemd-repart`
-##   distros: fcos
 ##   exclusive: false
 ##   description: Verify systemd-repart.service is masked.
 

From e983073e791073ae3e4fb5f4fc28f3d0e1e41ebb Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 May 2023 17:28:44 -0400
Subject: [PATCH 1620/2157] denylist: deny reprovision tests on ppc64le/rawhide

They are failing right now. See
https://github.com/coreos/fedora-coreos-tracker/issues/1489

Note that we can't really deny these tests without hitting a bug
(feature?) in that if all tests in a kola run are denylisted kola
will exit with an error. Therefore we add the reprovision label to
a random test (`ext.config.boot.grub2-install`) so we'll have at
least one test run.
---
 kola-denylist.yaml            | 11 +++++++++++
 tests/kola/boot/grub2-install |  8 ++++++--
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index df0204f29b..3faba087c1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,3 +18,14 @@
   snooze: 2023-05-23
   arches:
     - aarch64
+# This snooze won't fully work because we run our reprovision tests in
+# the pipeline in a separate step and there is an issue if all tests in
+# a kola run are denylisted: https://github.com/coreos/coreos-assembler/issues/3464
+# To workaround we've added the reprovision label to the `boot.grub2-install` test.
+- pattern: ext.config.root-reprovision.*
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+  snooze: 2023-05-23
+  arches:
+    - ppc64le
+  streams:
+    - rawhide
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 2ed05a042e..6f23c32191 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,10 +1,14 @@
 #!/bin/bash
 ## kola:
-##   tags: "platform-independent"
+##   # add the reprovision tag here to temporarily to workaround
+##   # https://github.com/coreos/coreos-assembler/issues/3464. We can
+##   # remove the tag when https://github.com/coreos/fedora-coreos-tracker/issues/1489
+##   # is fixed.
+##   tags: "platform-independent reprovision"
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"
-##   description: Verify that we install BIOS/PReP bootloader 
+##   description: Verify that we install BIOS/PReP bootloader
 ##     using grub2-install from the target system.
 
 # See

From bc84b70de4a80a3188068b73b7d9152acf9d2b18 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 May 2023 16:40:03 +0000
Subject: [PATCH 1621/2157] overrides: pin rust-afterburn-5.4.0-2.fc38

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..fbe47455f0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,16 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  afterburn:
+    evr: 5.4.0-2.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1492
+      type: pin
+  afterburn-dracut:
+    evr: 5.4.0-2.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1492
+      type: pin
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 7842a19a65825ed2faa14090aafd767d4e46460f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 11 May 2023 04:36:14 +0000
Subject: [PATCH 1622/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/567/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9073d5b421..b8a3460622 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-3.fc38.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-3.fc38.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-07T00:00:00Z",
+    "generated": "2023-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T22:45:07Z"
+        "generated": "2023-05-10T19:34:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-07T01:16:06Z"
+        "generated": "2023-05-11T01:44:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c592b26db5..54f2174520 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-3.fc38.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-3.fc38.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-07T00:00:00Z",
+    "generated": "2023-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T22:41:35Z"
+        "generated": "2023-05-10T19:34:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-07T01:16:08Z"
+        "generated": "2023-05-11T01:44:22Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 50291c3800..ff3064eeed 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-3.fc38.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-3.fc38.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-07T00:00:00Z",
+    "generated": "2023-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T22:41:16Z"
+        "generated": "2023-05-10T19:33:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-07T01:16:11Z"
+        "generated": "2023-05-11T01:44:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c394c7f26a..b55bf2ab02 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-3.fc38.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-3.fc38.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-07T00:00:00Z",
+    "generated": "2023-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-06T22:42:23Z"
+        "generated": "2023-05-10T19:35:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-07T01:16:14Z"
+        "generated": "2023-05-11T01:44:43Z"
       }
     }
   }

From 3612e9f742eb0c9c2d6b09e5b79bc88fbab13dd6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 12 May 2023 22:20:59 +0000
Subject: [PATCH 1623/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/569/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b8a3460622..9ff3851e0a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1120,7 +1120,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc38.aarch64"
+      "evra": "1:1.12.0-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1265,7 +1265,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-11T00:00:00Z",
+    "generated": "2023-05-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1274,7 +1274,7 @@
         "generated": "2023-05-10T19:34:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-11T01:44:15Z"
+        "generated": "2023-05-12T04:03:48Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 54f2174520..3642c93a8d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1126,7 +1126,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc38.ppc64le"
+      "evra": "1:1.12.0-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1271,7 +1271,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-11T00:00:00Z",
+    "generated": "2023-05-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1280,7 +1280,7 @@
         "generated": "2023-05-10T19:34:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-11T01:44:22Z"
+        "generated": "2023-05-12T04:03:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ff3064eeed..8e5d11ecb3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1048,7 +1048,7 @@
       "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc38.s390x"
+      "evra": "1:1.12.0-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1196,7 +1196,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-11T00:00:00Z",
+    "generated": "2023-05-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1205,7 +1205,7 @@
         "generated": "2023-05-10T19:33:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-11T01:44:33Z"
+        "generated": "2023-05-12T04:03:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b55bf2ab02..75464ffe4d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1123,7 +1123,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.11.2-1.fc38.x86_64"
+      "evra": "1:1.12.0-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1268,7 +1268,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-11T00:00:00Z",
+    "generated": "2023-05-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1277,7 +1277,7 @@
         "generated": "2023-05-10T19:35:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-11T01:44:43Z"
+        "generated": "2023-05-12T04:04:00Z"
       }
     }
   }

From 591bac70d6155ea0457df6956e07696037fffae1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 May 2023 22:30:39 +0000
Subject: [PATCH 1624/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/571/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 63 insertions(+), 63 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9ff3851e0a..89bf164cbe 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc38.aarch64"
+      "evra": "1.8.15-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.14-300.fc38.aarch64"
+      "evra": "6.2.15-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.14-300.fc38.aarch64"
+      "evra": "6.2.15-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.14-300.fc38.aarch64"
+      "evra": "6.2.15-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.14-300.fc38.aarch64"
+      "evra": "6.2.15-300.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -529,7 +529,7 @@
       "evra": "1.20.1-8.fc38.aarch64"
     },
     "less": {
-      "evra": "608-2.fc38.aarch64"
+      "evra": "633-1.fc38.aarch64"
     },
     "libacl": {
       "evra": "2.3.1-6.fc38.aarch64"
@@ -733,7 +733,7 @@
       "evra": "1.15.1-2.fc38.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.9-1.fc38.noarch"
+      "evra": "2.17.10-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.aarch64"
@@ -1177,22 +1177,22 @@
       "evra": "1.9.13-1.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.2-1.fc38.aarch64"
+      "evra": "253.4-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1265,16 +1265,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-12T00:00:00Z",
+    "generated": "2023-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-10T19:34:27Z"
+        "generated": "2023-05-13T22:05:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-12T04:03:48Z"
+        "generated": "2023-05-14T01:26:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3642c93a8d..7ce4adab38 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc38.ppc64le"
+      "evra": "1.8.15-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -490,16 +490,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.14-300.fc38.ppc64le"
+      "evra": "6.2.15-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.14-300.fc38.ppc64le"
+      "evra": "6.2.15-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.14-300.fc38.ppc64le"
+      "evra": "6.2.15-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.14-300.fc38.ppc64le"
+      "evra": "6.2.15-300.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -523,7 +523,7 @@
       "evra": "1.20.1-8.fc38.ppc64le"
     },
     "less": {
-      "evra": "608-2.fc38.ppc64le"
+      "evra": "633-1.fc38.ppc64le"
     },
     "libacl": {
       "evra": "2.3.1-6.fc38.ppc64le"
@@ -727,7 +727,7 @@
       "evra": "1.15.1-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.9-1.fc38.noarch"
+      "evra": "2.17.10-1.fc38.noarch"
     },
     "librtas": {
       "evra": "2.0.4-1.fc38.ppc64le"
@@ -1183,22 +1183,22 @@
       "evra": "1.9.13-1.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.2-1.fc38.ppc64le"
+      "evra": "253.4-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-12T00:00:00Z",
+    "generated": "2023-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-10T19:34:01Z"
+        "generated": "2023-05-12T22:24:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-12T04:03:52Z"
+        "generated": "2023-05-14T01:27:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8e5d11ecb3..1f99df331c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -457,16 +457,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.14-300.fc38.s390x"
+      "evra": "6.2.15-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.14-300.fc38.s390x"
+      "evra": "6.2.15-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.14-300.fc38.s390x"
+      "evra": "6.2.15-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.14-300.fc38.s390x"
+      "evra": "6.2.15-300.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -490,7 +490,7 @@
       "evra": "1.20.1-8.fc38.s390x"
     },
     "less": {
-      "evra": "608-2.fc38.s390x"
+      "evra": "633-1.fc38.s390x"
     },
     "libacl": {
       "evra": "2.3.1-6.fc38.s390x"
@@ -679,7 +679,7 @@
       "evra": "1.15.1-2.fc38.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.9-1.fc38.noarch"
+      "evra": "2.17.10-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.s390x"
@@ -1105,22 +1105,22 @@
       "evra": "1.9.13-1.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.2-1.fc38.s390x"
+      "evra": "253.4-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1196,16 +1196,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-12T00:00:00Z",
+    "generated": "2023-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-10T19:33:49Z"
+        "generated": "2023-05-12T22:23:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-12T04:03:56Z"
+        "generated": "2023-05-14T01:27:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 75464ffe4d..75bfcc0b40 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.14-1.fc38.x86_64"
+      "evra": "1.8.15-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.14-300.fc38.x86_64"
+      "evra": "6.2.15-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.14-300.fc38.x86_64"
+      "evra": "6.2.15-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.14-300.fc38.x86_64"
+      "evra": "6.2.15-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.14-300.fc38.x86_64"
+      "evra": "6.2.15-300.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -535,7 +535,7 @@
       "evra": "1.20.1-8.fc38.x86_64"
     },
     "less": {
-      "evra": "608-2.fc38.x86_64"
+      "evra": "633-1.fc38.x86_64"
     },
     "libacl": {
       "evra": "2.3.1-6.fc38.x86_64"
@@ -736,7 +736,7 @@
       "evra": "1.15.1-2.fc38.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.9-1.fc38.noarch"
+      "evra": "2.17.10-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.x86_64"
@@ -1180,22 +1180,22 @@
       "evra": "1.9.13-1.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.2-1.fc38.x86_64"
+      "evra": "253.4-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1268,16 +1268,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-12T00:00:00Z",
+    "generated": "2023-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-10T19:35:23Z"
+        "generated": "2023-05-13T22:03:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-12T04:04:00Z"
+        "generated": "2023-05-14T01:27:09Z"
       }
     }
   }

From cb2a57b6d3427f7dcbb0fb5272facc3fc456a750 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 27 Apr 2023 16:00:28 +0200
Subject: [PATCH 1625/2157] kola: enable tests with 'appendKernelArgs' on s390x

---
 tests/kola/networking/bridge-static-via-kargs                  | 3 ---
 tests/kola/networking/force-persist-ip/test.sh                 | 3 ---
 .../networking/ifname-karg/everyboot-systemd-link-file/test.sh | 3 ---
 .../networking/ifname-karg/udev-rule-firstboot-propagation     | 3 ---
 tests/kola/networking/kargs-rd-net                             | 3 ---
 tests/kola/networking/mtu-on-bond-ignition/test.sh             | 3 ---
 tests/kola/networking/mtu-on-bond-kargs                        | 3 ---
 tests/kola/networking/nameserver                               | 3 ---
 tests/kola/networking/no-persist-ip                            | 2 --
 tests/kola/networking/prefer-ignition-networking/test.sh       | 3 ---
 tests/kola/networking/team-dhcp-via-ignition/test.sh           | 3 ---
 11 files changed, 32 deletions(-)

diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index e44ef2ea92..75de9d04b5 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -9,9 +9,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:mybridge:br0:none bridge=br0:eth1,eth2 net.ifnames=0"
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify bridge networks works via kernel arguments.
 
 set -xeuo pipefail
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index 5f2b37c0e9..c8501d40cd 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -9,9 +9,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip"
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that coreos.force_persist_ip will force propagating 
 ##     kernel argument based networking configuration into the real root.
 
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
index afc715f3f4..0017eef53c 100755
--- a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
@@ -7,9 +7,6 @@
 ##   # validate that the systemd.link file gets created by
 ##   # systemd-network-generator.
 ##   appendFirstbootKernelArgs: "coreos.no_persist_ip"
-##   # appendFirstbootKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 
 set -xeuo pipefail
 
diff --git a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
index 0d11c01691..4a2d755ab2 100755
--- a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
+++ b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
@@ -6,9 +6,6 @@
 ##   # Append ifname kernel argument to set the given MAC address to the NIC
 ##   # named `kolatest`. The MAC address is the default one QEMU assigns.
 ##   appendFirstbootKernelArgs: "ifname=kolatest:52:54:00:12:34:56"
-##   # appendFirstbootKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 
 # Part of https://github.com/coreos/fedora-coreos-tracker/issues/553
 
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index 25013b4964..f055650726 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -4,9 +4,6 @@
 ##   platforms: qemu
 ##   # The functionality we're testing here.
 ##   appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
-##   # appendFirstbootKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify rd.net.timeout.dhcp and rd.net.dhcp.retry 
 ##     are supported by NetworkManager.
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index d18557a5dd..6ea2654962 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -8,9 +8,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: net.ifnames=0
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that configure MTU on a VLAN subinterface for 
 ##     the bond via Ignition works.
 #
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 418e012573..86004be670 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -9,9 +9,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that configuring MTU on a VLAN subinterface 
 ##     for the bond via kernel arguements works.
 
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 9ddabb4cb3..8eabbebb5a 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -3,9 +3,6 @@
 ##   # appendKernelArgs is only supported on QEMU
 ##   platforms: qemu
 ##   appendKernelArgs: "nameserver=8.8.8.8 nameserver=1.1.1.1"
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that we config multiple nameservers via kernel 
 ##     arguments work well.
 
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 18c8d3fbbd..14766624bf 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -9,8 +9,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
-##   # appendKernelArgs doesn't work on s390x, see https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that the coreos.no_persist_ip kernel argument will 
 ##     prevent propagating kernel argument based networking configuration 
 ##     into the real root. 
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index db157233fb..a7acec06eb 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -9,9 +9,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0"
-##   # appendKernelArgs doesn't work on s390x so skip there
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify that networking configuration is propagated 
 ##     via Ignition by default.
 
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index b9085af585..4f50f6f111 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -8,9 +8,6 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "net.ifnames=0"
-##   # appendKernelArgs doesn't work on s390x
-##   # https://github.com/coreos/coreos-assembler/issues/2776
-##   architectures: "!s390x"
 ##   description: Verify team networking works via Ignition config.
 
 # The Ignition config refers to

From 55922743639f803f80c05f80ca36c7df7f41bfd6 Mon Sep 17 00:00:00 2001
From: Daniel Rudolf <github.com@daniel-rudolf.de>
Date: Sat, 13 May 2023 15:21:47 +0200
Subject: [PATCH 1626/2157] manifests: add passt

See: https://github.com/coreos/fedora-coreos-tracker/issues/1436
---
 manifest-lock.aarch64.json     | 6 ++++++
 manifest-lock.ppc64le.json     | 6 ++++++
 manifest-lock.s390x.json       | 6 ++++++
 manifest-lock.x86_64.json      | 6 ++++++
 manifests/user-experience.yaml | 2 ++
 5 files changed, 26 insertions(+)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 89bf164cbe..812b85e82e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -990,6 +990,12 @@
     "pam-libs": {
       "evra": "1.5.2-16.fc38.aarch64"
     },
+    "passt": {
+      "evra": "0^20230509.g96f8d55-1.fc38.aarch64"
+    },
+    "passt-selinux": {
+      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+    },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
     },
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7ce4adab38..a5feb36ff2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -990,6 +990,12 @@
     "pam-libs": {
       "evra": "1.5.2-16.fc38.ppc64le"
     },
+    "passt": {
+      "evra": "0^20230509.g96f8d55-1.fc38.ppc64le"
+    },
+    "passt-selinux": {
+      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+    },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
     },
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1f99df331c..bd94b970b8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -921,6 +921,12 @@
     "pam-libs": {
       "evra": "1.5.2-16.fc38.s390x"
     },
+    "passt": {
+      "evra": "0^20230509.g96f8d55-1.fc38.s390x"
+    },
+    "passt-selinux": {
+      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+    },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 75bfcc0b40..5dc91e6da1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -996,6 +996,12 @@
     "pam-libs": {
       "evra": "1.5.2-16.fc38.x86_64"
     },
+    "passt": {
+      "evra": "0^20230509.g96f8d55-1.fc38.x86_64"
+    },
+    "passt-selinux": {
+      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+    },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
     },
diff --git a/manifests/user-experience.yaml b/manifests/user-experience.yaml
index ed80c3c79c..ee848357cf 100644
--- a/manifests/user-experience.yaml
+++ b/manifests/user-experience.yaml
@@ -44,6 +44,8 @@ packages:
   - runc
   - skopeo
   - toolbox
+  # passt provides user-mode networking daemons for namespaces
+  - passt
   # nvme-cli for managing nvme disks
   - nvme-cli
   # Used by admins interactively

From 1553518214088a89d6a2360a6fcdddbd3915628a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 14 May 2023 22:50:49 -0400
Subject: [PATCH 1627/2157] tests/kola: add podman.rootless-pasta-networking
 test

See: https://github.com/coreos/fedora-coreos-tracker/issues/1436
---
 tests/kola/podman/rootless-pasta-networking | 53 +++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100755 tests/kola/podman/rootless-pasta-networking

diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
new file mode 100755
index 0000000000..1cc72c5fc3
--- /dev/null
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -0,0 +1,53 @@
+#!/bin/bash
+## kola:
+##   description: Verify that rootless pasta networking passt works.
+##   # This test downloads containers and curls from the net.
+##   tags: "platform-independent needs-internet"
+##   # This test doesn't make meaningful changes to the system and
+##   # should be able to be combined with other tests.
+##   exclusive: false
+##   # This test reaches out to the internet and it could take more
+##   # time to pull down the container.
+##   timeoutMin: 3
+
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1436
+
+set -xeuo pipefail
+. $KOLA_EXT_DATA/commonlib.sh
+
+runascoreuserscript='#!/bin/bash
+set -euxo pipefail
+# Just a basic test that uses pasta network and sets the gateway
+podman run -i --net=pasta:-g,8.8.8.8 registry.fedoraproject.org/fedora:38 bash <<"EOF"
+set -euxo pipefail
+# Verify the 8.8.8.8 got set as the gateway. No /sbin/ip so just use /proc/net/route
+cat /proc/net/route | grep 08080808
+# Download something from the internet. Here we use one of the test
+# fixtures from the ignition.resource.remote test.
+result=$(curl https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous)
+[ "$result" == "kola-anonymous" ] || exit 1
+EOF
+'
+
+runascoreuser() {
+    # NOTE: If we don't use `| cat` the output won't get copied
+    # to our unit and won't show up in the `systemctl status` output
+    # of the ext test.
+    sudo -u core "$@" | cat
+}
+
+main() {
+
+    # Execute script as the core user to exercise rootless podman
+    runascoreuserscriptpath=$(mktemp --suffix=runascoreuser)
+    echo "$runascoreuserscript" > $runascoreuserscriptpath
+    chmod +x $runascoreuserscriptpath
+    chown core $runascoreuserscriptpath
+    if runascoreuser $runascoreuserscriptpath; then
+        ok "Podman with pasta networking succeeded!"
+    else
+        fatal "Podman with pasta networking failed"
+    fi
+}
+
+main

From f3404c602c644a584c3a46cbaf2a4b1dee8ea065 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 15 May 2023 10:20:04 -0400
Subject: [PATCH 1628/2157] tests/kola: cancel any pending rpm-ostree
 transaction in upgrade test

We've seen it where zincati gets restarted but a previous rpm-ostree
deploy (that had been scheduled by Zincati) was still running. Let's
cancel anything that's pending before restarting Zincati.
---
 tests/kola/upgrade/extended/test.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 672fce2e65..596c47666b 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -186,7 +186,10 @@ if vereq $version $last_release; then
 fi
 
 # Restart Zincati if configuration was changed
-[ "${need_zincati_restart}" == "true" ] && systemctl restart zincati
+if [ "${need_zincati_restart}" == "true" ]; then
+    rpm-ostree cancel # in case anything was already in progress
+    systemctl restart zincati
+fi
 
 # Watch the Zincati logs to see if it got a lead on a new update.
 # Timeout after some time if no update. Unset pipefail since the

From 8bde09cf11eeceefaf7fb2769e7318ade86ec5c0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 17 May 2023 03:38:31 +0000
Subject: [PATCH 1629/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/574/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 812b85e82e..2e27f114c5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,7 +457,7 @@
       "evra": "20221126-2.fc38.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-2.fc38.aarch64"
+      "evra": "2:1.9.2-1.fc38.aarch64"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-10.git2a8f9d8.fc38.aarch64"
@@ -547,7 +547,7 @@
       "evra": "2.5.5-6.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.1.1-1.fc38.aarch64"
+      "evra": "13.1.1-2.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -613,7 +613,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.1.1-1.fc38.aarch64"
+      "evra": "13.1.1-2.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -673,7 +673,7 @@
       "evra": "1.0.5-2.fc38.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-5.fc38.aarch64"
+      "evra": "2.15.0-2.fc38.aarch64"
     },
     "libmount": {
       "evra": "2.38.1-4.fc38.aarch64"
@@ -781,7 +781,7 @@
       "evra": "2.8.2-4.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.1.1-1.fc38.aarch64"
+      "evra": "13.1.1-2.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -1051,7 +1051,7 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-1.fc38.aarch64"
+      "evra": "2:7.2.1-2.fc38.aarch64"
     },
     "readline": {
       "evra": "8.2-3.fc38.aarch64"
@@ -1271,16 +1271,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-14T00:00:00Z",
+    "generated": "2023-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-13T22:05:26Z"
+        "generated": "2023-05-14T22:35:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-14T01:26:58Z"
+        "generated": "2023-05-17T01:26:10Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a5feb36ff2..c5b8930c68 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -451,7 +451,7 @@
       "evra": "20221126-2.fc38.ppc64le"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-2.fc38.ppc64le"
+      "evra": "2:1.9.2-1.fc38.ppc64le"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-10.git2a8f9d8.fc38.ppc64le"
@@ -541,7 +541,7 @@
       "evra": "2.5.5-6.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.1.1-1.fc38.ppc64le"
+      "evra": "13.1.1-2.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -607,7 +607,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.1.1-1.fc38.ppc64le"
+      "evra": "13.1.1-2.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -667,7 +667,7 @@
       "evra": "1.0.5-2.fc38.ppc64le"
     },
     "libmodulemd": {
-      "evra": "2.14.0-5.fc38.ppc64le"
+      "evra": "2.15.0-2.fc38.ppc64le"
     },
     "libmount": {
       "evra": "2.38.1-4.fc38.ppc64le"
@@ -781,7 +781,7 @@
       "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.1.1-1.fc38.ppc64le"
+      "evra": "13.1.1-2.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -1057,7 +1057,7 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-1.fc38.ppc64le"
+      "evra": "2:7.2.1-2.fc38.ppc64le"
     },
     "readline": {
       "evra": "8.2-3.fc38.ppc64le"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-14T00:00:00Z",
+    "generated": "2023-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-12T22:24:51Z"
+        "generated": "2023-05-14T22:34:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-14T01:27:02Z"
+        "generated": "2023-05-17T01:26:14Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bd94b970b8..518093b974 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -568,7 +568,7 @@
       "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.1.1-1.fc38.s390x"
+      "evra": "13.1.1-2.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -619,7 +619,7 @@
       "evra": "1.0.5-2.fc38.s390x"
     },
     "libmodulemd": {
-      "evra": "2.14.0-5.fc38.s390x"
+      "evra": "2.15.0-2.fc38.s390x"
     },
     "libmount": {
       "evra": "2.38.1-4.fc38.s390x"
@@ -727,7 +727,7 @@
       "evra": "2.8.2-4.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.1.1-1.fc38.s390x"
+      "evra": "13.1.1-2.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -982,7 +982,7 @@
       "evra": "20230318-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-1.fc38.s390x"
+      "evra": "2:7.2.1-2.fc38.s390x"
     },
     "readline": {
       "evra": "8.2-3.fc38.s390x"
@@ -1202,16 +1202,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-14T00:00:00Z",
+    "generated": "2023-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-12T22:23:14Z"
+        "generated": "2023-05-14T22:35:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-14T01:27:05Z"
+        "generated": "2023-05-17T01:26:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5dc91e6da1..d81b4d655e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -463,7 +463,7 @@
       "evra": "20221126-2.fc38.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.9.1-2.fc38.x86_64"
+      "evra": "2:1.9.2-1.fc38.x86_64"
     },
     "iscsi-initiator-utils": {
       "evra": "6.2.1.4-10.git2a8f9d8.fc38.x86_64"
@@ -616,7 +616,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.1.1-1.fc38.x86_64"
+      "evra": "13.1.1-2.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -676,7 +676,7 @@
       "evra": "1.0.5-2.fc38.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.14.0-5.fc38.x86_64"
+      "evra": "2.15.0-2.fc38.x86_64"
     },
     "libmount": {
       "evra": "2.38.1-4.fc38.x86_64"
@@ -784,7 +784,7 @@
       "evra": "2.8.2-4.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.1.1-1.fc38.x86_64"
+      "evra": "13.1.1-2.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-14T00:00:00Z",
+    "generated": "2023-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-13T22:03:16Z"
+        "generated": "2023-05-14T22:35:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-14T01:27:09Z"
+        "generated": "2023-05-17T01:26:21Z"
       }
     }
   }

From 1e1adac7b5bd71383a0827b23571507af4e4331a Mon Sep 17 00:00:00 2001
From: c4rt0 <c4rt0gr4ph3r@gmail.com>
Date: Wed, 17 May 2023 18:50:50 +0100
Subject: [PATCH 1630/2157] manifests: add ipcalc

See: https://github.com/coreos/fedora-coreos-tracker/issues/1460
---
 manifest-lock.aarch64.json      | 3 +++
 manifest-lock.ppc64le.json      | 3 +++
 manifest-lock.s390x.json        | 3 +++
 manifest-lock.x86_64.json       | 3 +++
 manifests/networking-tools.yaml | 3 +++
 5 files changed, 15 insertions(+)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2e27f114c5..7fe365bcf8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -429,6 +429,9 @@
     "intel-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
     },
+    "ipcalc": {
+      "evra": "1.0.2-2.fc38.aarch64"
+    },
     "iproute": {
       "evra": "6.1.0-1.fc38.aarch64"
     },
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c5b8930c68..61f3a6fd66 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -423,6 +423,9 @@
     "intel-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
     },
+    "ipcalc": {
+      "evra": "1.0.2-2.fc38.ppc64le"
+    },
     "iproute": {
       "evra": "6.1.0-1.fc38.ppc64le"
     },
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 518093b974..2e21a52ce9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -393,6 +393,9 @@
     "intel-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
     },
+    "ipcalc": {
+      "evra": "1.0.2-2.fc38.s390x"
+    },
     "iproute": {
       "evra": "6.1.0-1.fc38.s390x"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d81b4d655e..812404463e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -435,6 +435,9 @@
     "intel-gpu-firmware": {
       "evra": "20230404-149.fc38.noarch"
     },
+    "ipcalc": {
+      "evra": "1.0.2-2.fc38.x86_64"
+    },
     "iproute": {
       "evra": "6.1.0-1.fc38.x86_64"
     },
diff --git a/manifests/networking-tools.yaml b/manifests/networking-tools.yaml
index c5c66336e2..cbbf77caf8 100644
--- a/manifests/networking-tools.yaml
+++ b/manifests/networking-tools.yaml
@@ -22,3 +22,6 @@ packages:
   # Declarative network configuration
   # https://github.com/coreos/fedora-coreos-tracker/issues/1175
   - nmstate
+  # Advanced custom networking calculations
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1460
+  - ipcalc

From 84db368db8740f0023a2eab41a332a23cccc2dc0 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 18 May 2023 00:58:46 -0700
Subject: [PATCH 1631/2157] Denylist validate-symlinks test due to a broken
 symlink

we are seeing that the symlink to /usr/lib/debug/usr/lib64/bfd-plugins/libdep.so-2.40-7.fc39.x86_64.debug
is broken so denylisting this test till there's a fix for that.
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3faba087c1..937a749809 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -29,3 +29,8 @@
     - ppc64le
   streams:
     - rawhide
+- pattern: ext.config.files.validate-symlinks
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1496
+  snooze: 2023-06-01
+  streams:
+    - rawhide

From 38159d496d722045aa1e97ce3ab19440d4c49501 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 18 May 2023 22:33:08 +0000
Subject: [PATCH 1632/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/576/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7fe365bcf8..37035bebf5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -280,7 +280,7 @@
       "evra": "0.189-2.fc38.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc38.aarch64"
+      "evra": "2:6.3-1.fc38.aarch64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.aarch64"
@@ -643,7 +643,7 @@
       "evra": "1.3.1-53.fc38.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.aarch64"
@@ -772,16 +772,16 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "libstdc++": {
       "evra": "13.1.1-2.fc38.aarch64"
@@ -1153,31 +1153,31 @@
       "evra": "0.1.4-3.fc38.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-client": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-common": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-4.fc38.aarch64"
+      "evra": "2.9.0-1.fc38.aarch64"
     },
     "stalld": {
       "evra": "1.16-3.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-17T00:00:00Z",
+    "generated": "2023-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-14T22:35:10Z"
+        "generated": "2023-05-18T13:11:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-17T01:26:10Z"
+        "generated": "2023-05-18T01:52:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 61f3a6fd66..66555353ab 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -271,7 +271,7 @@
       "evra": "0.189-2.fc38.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc38.ppc64le"
+      "evra": "2:6.3-1.fc38.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.ppc64le"
@@ -637,7 +637,7 @@
       "evra": "1.3.1-53.fc38.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.ppc64le"
@@ -772,16 +772,16 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libstdc++": {
       "evra": "13.1.1-2.fc38.ppc64le"
@@ -1159,31 +1159,31 @@
       "evra": "0.1.4-3.fc38.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-4.fc38.ppc64le"
+      "evra": "2.9.0-1.fc38.ppc64le"
     },
     "stalld": {
       "evra": "1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-17T00:00:00Z",
+    "generated": "2023-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-14T22:34:27Z"
+        "generated": "2023-05-18T13:10:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-17T01:26:14Z"
+        "generated": "2023-05-18T01:52:40Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2e21a52ce9..83b49106de 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -268,7 +268,7 @@
       "evra": "0.189-2.fc38.s390x"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc38.s390x"
+      "evra": "2:6.3-1.fc38.s390x"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.s390x"
@@ -592,7 +592,7 @@
       "evra": "1.3.1-53.fc38.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "libjose": {
       "evra": "11-7.fc38.s390x"
@@ -718,16 +718,16 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "libstdc++": {
       "evra": "13.1.1-2.fc38.s390x"
@@ -1081,31 +1081,31 @@
       "evra": "0.1.4-3.fc38.s390x"
     },
     "sssd-ad": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-client": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-common": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-4.fc38.s390x"
+      "evra": "2.9.0-1.fc38.s390x"
     },
     "stalld": {
       "evra": "1.16-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-17T00:00:00Z",
+    "generated": "2023-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-14T22:35:24Z"
+        "generated": "2023-05-18T13:10:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-17T01:26:17Z"
+        "generated": "2023-05-18T01:52:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 812404463e..75600233c0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -280,7 +280,7 @@
       "evra": "0.189-2.fc38.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.2-1.fc38.x86_64"
+      "evra": "2:6.3-1.fc38.x86_64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.x86_64"
@@ -646,7 +646,7 @@
       "evra": "1.3.1-53.fc38.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.x86_64"
@@ -775,16 +775,16 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "libstdc++": {
       "evra": "13.1.1-2.fc38.x86_64"
@@ -1156,31 +1156,31 @@
       "evra": "0.1.4-3.fc38.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-client": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-common": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.8.2-4.fc38.x86_64"
+      "evra": "2.9.0-1.fc38.x86_64"
     },
     "stalld": {
       "evra": "1.16-3.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-17T00:00:00Z",
+    "generated": "2023-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-14T22:35:09Z"
+        "generated": "2023-05-18T13:11:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-17T01:26:21Z"
+        "generated": "2023-05-18T01:52:46Z"
       }
     }
   }

From 6d83d72c91ac26eb5bf7f22b37c71afca8028697 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 19 May 2023 10:30:44 -0400
Subject: [PATCH 1633/2157] tests/kola: add two files to files.setuid test

The util-linux-user subpackage was folded back in to the util-linux
main package [1]. This means we now have two new setuid files that we didn't
have before.

[1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/HENKGZ22XTSVJWHZKP6YSMFZCOQR3HZN/
---
 tests/kola/files/setuid | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index c002e4a3cc..d30d367446 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -11,6 +11,8 @@ set -xeuo pipefail
 # List of known files and directories with SetUID bit set
 list_setuid_files=(
     '/usr/bin/chage'
+    '/usr/bin/chfn'
+    '/usr/bin/chsh'
     '/usr/bin/fusermount'
     '/usr/bin/fusermount3'
     '/usr/bin/gpasswd'

From fbb25fb6ae03635bafe3a7a880ae3679efc98e66 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 19 May 2023 22:23:01 +0000
Subject: [PATCH 1634/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/577/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 37035bebf5..a19f4394f7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.211.1-1.fc38.noarch"
+      "evra": "2:2.213.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-18T00:00:00Z",
+    "generated": "2023-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T13:11:13Z"
+        "generated": "2023-05-18T22:36:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-18T01:52:36Z"
+        "generated": "2023-05-19T01:07:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 66555353ab..3a3bbff476 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.211.1-1.fc38.noarch"
+      "evra": "2:2.213.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-18T00:00:00Z",
+    "generated": "2023-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T13:10:14Z"
+        "generated": "2023-05-18T22:34:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-18T01:52:40Z"
+        "generated": "2023-05-19T01:07:26Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 83b49106de..0306860054 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.211.1-1.fc38.noarch"
+      "evra": "2:2.213.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-18T00:00:00Z",
+    "generated": "2023-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T13:10:49Z"
+        "generated": "2023-05-18T22:34:43Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-18T01:52:43Z"
+        "generated": "2023-05-19T01:07:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 75600233c0..1640e7eddf 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.211.1-1.fc38.noarch"
+      "evra": "2:2.213.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-18T00:00:00Z",
+    "generated": "2023-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T13:11:46Z"
+        "generated": "2023-05-18T22:35:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-18T01:52:46Z"
+        "generated": "2023-05-19T01:07:34Z"
       }
     }
   }

From 15f9c461896522b557e55d28ed5a3880a52d8439 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 20 May 2023 22:34:16 +0000
Subject: [PATCH 1635/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/578/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a19f4394f7..63ff0d6d5f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -67,19 +67,19 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.14-1.fc38.aarch64"
+      "evra": "32:9.18.15-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.14-1.fc38.noarch"
+      "evra": "32:9.18.15-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.14-1.fc38.aarch64"
+      "evra": "32:9.18.15-1.fc38.aarch64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -427,7 +427,7 @@
       "evra": "56-3.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.2-2.fc38.aarch64"
@@ -853,10 +853,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.aarch64"
@@ -898,7 +898,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -946,7 +946,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.aarch64"
@@ -1060,7 +1060,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1081,7 +1081,7 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-2.fc38.aarch64"
+      "evra": "1.4.0-3.fc38.aarch64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.aarch64"
@@ -1231,10 +1231,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1486-1.fc38.noarch"
+      "evra": "2:9.0.1562-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1486-1.fc38.aarch64"
+      "evra": "2:9.0.1562-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-19T00:00:00Z",
+    "generated": "2023-05-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T22:36:14Z"
+        "generated": "2023-05-19T22:27:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-19T01:07:21Z"
+        "generated": "2023-05-20T01:16:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3a3bbff476..4bee03b8e8 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -70,16 +70,16 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.14-1.fc38.ppc64le"
+      "evra": "32:9.18.15-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.14-1.fc38.noarch"
+      "evra": "32:9.18.15-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.14-1.fc38.ppc64le"
+      "evra": "32:9.18.15-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -421,7 +421,7 @@
       "evra": "56-3.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.2-2.fc38.ppc64le"
@@ -853,10 +853,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.ppc64le"
@@ -895,7 +895,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -943,7 +943,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.ppc64le"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1087,7 +1087,7 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-2.fc38.ppc64le"
+      "evra": "1.4.0-3.fc38.ppc64le"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1486-1.fc38.noarch"
+      "evra": "2:9.0.1562-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1486-1.fc38.ppc64le"
+      "evra": "2:9.0.1562-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-19T00:00:00Z",
+    "generated": "2023-05-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T22:34:52Z"
+        "generated": "2023-05-19T22:26:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-19T01:07:26Z"
+        "generated": "2023-05-20T01:16:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0306860054..784a02683d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -67,16 +67,16 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.14-1.fc38.s390x"
+      "evra": "32:9.18.15-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.14-1.fc38.noarch"
+      "evra": "32:9.18.15-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.14-1.fc38.s390x"
+      "evra": "32:9.18.15-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -391,7 +391,7 @@
       "evra": "56-3.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.2-2.fc38.s390x"
@@ -793,10 +793,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.s390x"
@@ -835,7 +835,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -880,7 +880,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.s390x"
@@ -991,7 +991,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1012,7 +1012,7 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-2.fc38.s390x"
+      "evra": "1.4.0-3.fc38.s390x"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1486-1.fc38.noarch"
+      "evra": "2:9.0.1562-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1486-1.fc38.s390x"
+      "evra": "2:9.0.1562-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-19T00:00:00Z",
+    "generated": "2023-05-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T22:34:43Z"
+        "generated": "2023-05-19T22:26:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-19T01:07:30Z"
+        "generated": "2023-05-20T01:16:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1640e7eddf..5767afe5e7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -67,19 +67,19 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.14-1.fc38.x86_64"
+      "evra": "32:9.18.15-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.14-1.fc38.noarch"
+      "evra": "32:9.18.15-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.14-1.fc38.x86_64"
+      "evra": "32:9.18.15-1.fc38.x86_64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -433,7 +433,7 @@
       "evra": "56-3.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.2-2.fc38.x86_64"
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.x86_64"
@@ -904,7 +904,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -952,7 +952,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.x86_64"
@@ -1063,7 +1063,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230404-149.fc38.noarch"
+      "evra": "20230515-150.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1084,7 +1084,7 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-2.fc38.x86_64"
+      "evra": "1.4.0-3.fc38.x86_64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.x86_64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1486-1.fc38.noarch"
+      "evra": "2:9.0.1562-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1486-1.fc38.x86_64"
+      "evra": "2:9.0.1562-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-19T00:00:00Z",
+    "generated": "2023-05-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-18T22:35:25Z"
+        "generated": "2023-05-19T22:27:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-19T01:07:34Z"
+        "generated": "2023-05-20T01:16:53Z"
       }
     }
   }

From 45d80a7ff7b30ee3015ebc001c1ae3149988047f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 23 May 2023 15:50:45 +0000
Subject: [PATCH 1636/2157] overrides: fast-track rust-afterburn-5.4.2-1.fc38

---
 manifest-lock.overrides.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fbe47455f0..ab12d568b9 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,15 +10,15 @@
 
 packages:
   afterburn:
-    evr: 5.4.0-2.fc38
+    evr: 5.4.2-1.fc38
     metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1492
-      type: pin
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a3adea94d9
+      type: fast-track
   afterburn-dracut:
-    evr: 5.4.0-2.fc38
+    evr: 5.4.2-1.fc38
     metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1492
-      type: pin
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a3adea94d9
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From c422b17f73ccc78e98f38b9952ee8625c74f25bd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 23 May 2023 13:38:22 -0400
Subject: [PATCH 1637/2157] denylist: extend snoozes for recently un-snoozed
 tests

These both still fail. I added a comment to the issues.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 937a749809..20b49cc942 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-05-23
+  snooze: 2023-06-01
   arches:
     - aarch64
 # This snooze won't fully work because we run our reprovision tests in
@@ -24,7 +24,7 @@
 # To workaround we've added the reprovision label to the `boot.grub2-install` test.
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-05-23
+  snooze: 2023-06-01
   arches:
     - ppc64le
   streams:

From 9c370b1566000133a6824a399ce893b04aa09dde Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 23 May 2023 18:56:11 +0000
Subject: [PATCH 1638/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/582/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 33 insertions(+), 33 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 63ff0d6d5f..30df6c05bf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.aarch64"
+      "evra": "5.4.2-1.fc38.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.aarch64"
+      "evra": "5.4.2-1.fc38.aarch64"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.aarch64"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.4-1.fc38.aarch64"
+      "evra": "1.8.5-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -976,10 +976,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.1-2.fc38.aarch64"
+      "evra": "2023.3-1.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.1-2.fc38.aarch64"
+      "evra": "2023.3-1.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-20T00:00:00Z",
+    "generated": "2023-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-19T22:27:42Z"
+        "generated": "2023-05-23T17:08:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-20T01:16:41Z"
+        "generated": "2023-05-22T01:31:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4bee03b8e8..6f23fefa8c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.ppc64le"
+      "evra": "5.4.2-1.fc38.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.ppc64le"
+      "evra": "5.4.2-1.fc38.ppc64le"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.ppc64le"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.4-1.fc38.ppc64le"
+      "evra": "1.8.5-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -973,13 +973,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.1-2.fc38.ppc64le"
+      "evra": "2023.3-1.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.1-2.fc38.ppc64le"
+      "evra": "2023.3-1.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.1-2.fc38.ppc64le"
+      "evra": "2023.3-1.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-20T00:00:00Z",
+    "generated": "2023-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-19T22:26:16Z"
+        "generated": "2023-05-23T17:07:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-20T01:16:45Z"
+        "generated": "2023-05-22T01:31:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 784a02683d..6194b1840b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.s390x"
+      "evra": "5.4.2-1.fc38.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.s390x"
+      "evra": "5.4.2-1.fc38.s390x"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.s390x"
@@ -178,7 +178,7 @@
       "evra": "3.17.1-5.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.4-1.fc38.s390x"
+      "evra": "1.8.5-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -907,10 +907,10 @@
       "evra": "1:3.0.8-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.1-2.fc38.s390x"
+      "evra": "2023.3-1.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.1-2.fc38.s390x"
+      "evra": "2023.3-1.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-20T00:00:00Z",
+    "generated": "2023-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-19T22:26:30Z"
+        "generated": "2023-05-23T17:07:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-20T01:16:49Z"
+        "generated": "2023-05-22T01:31:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5767afe5e7..4d1fd32442 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -28,10 +28,10 @@
       "evra": "0.9.2-2.fc38.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-2.fc38.x86_64"
+      "evra": "5.4.2-1.fc38.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-2.fc38.x86_64"
+      "evra": "5.4.2-1.fc38.x86_64"
     },
     "alternatives": {
       "evra": "1.24-1.fc38.x86_64"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.4-1.fc38.x86_64"
+      "evra": "1.8.5-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -982,10 +982,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.1-2.fc38.x86_64"
+      "evra": "2023.3-1.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.1-2.fc38.x86_64"
+      "evra": "2023.3-1.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-20T00:00:00Z",
+    "generated": "2023-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-19T22:27:55Z"
+        "generated": "2023-05-23T17:08:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-20T01:16:53Z"
+        "generated": "2023-05-22T01:31:24Z"
       }
     }
   }

From f7aaeb3d6c6b2d7b67dfa7267c6ef308a29f70a4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 24 May 2023 15:17:48 -0400
Subject: [PATCH 1639/2157] manifests/fedora-coreos: drop removal of
 sysusers.d/dbus.conf

Originally introduced as part of d3a0cf9, the bug [1] was fixed
by a PR to the RPM [2] a while back so we shouldn't need to carry
this any longer.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2105177
[2] https://src.fedoraproject.org/rpms/dbus/pull-request/16#
---
 manifests/fedora-coreos.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index c06e642b41..0af4eb6bf2 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -131,11 +131,6 @@ postprocess:
     done
 
 
-remove-from-packages:
-  # Drop some buggy sysusers fragments which do not match static IDs allocation:
-  # https://bugzilla.redhat.com/show_bug.cgi?id=2105177
-  - [dbus-common, /usr/lib/sysusers.d/dbus.conf]
-
 remove-files:
   # We don't ship man(1) or info(1)
   - usr/share/info

From 3952477046cf36833fde603241eb9a9008a32763 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 26 May 2023 16:11:51 -0400
Subject: [PATCH 1640/2157] tests/kola: wait longer in commonlib.sh
 is_service_active

In https://github.com/coreos/coreos-assembler/pull/3487 we are
changing the `sshChecker` in `CheckMachine()` to return earlier
in the `starting` and `initializing` states. This means the kola
test code might start to run earlier and we may need to wait longer
here.
---
 tests/kola/data/commonlib.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 35482770ec..006bbfdc98 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -76,10 +76,10 @@ cmdline_arg() {
     echo "${value}"
 }
 
-# wait for 20s when in activating status
+# wait for ~60s when in activating status
 is_service_active() {
     local service="$1"
-    for x in {0..20}; do
+    for x in {0..60}; do
         [ $(systemctl is-active "${service}") != "activating" ] && break
         sleep 1
     done

From 5f322cbc8bd5dcd0b992f883d38079abd5d16c3d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 26 May 2023 10:14:44 -0400
Subject: [PATCH 1641/2157] tests/kola: upstream network-online login test from
 RHCOS

This test was originally added in RHCOS[[1]], but it's equally valid to
run in FCOS. That would have caught the original issue when it was still
present in Fedora.

[1]: https://github.com/openshift/os/pull/1294
---
 tests/kola/systemd/network-online/config.bu   | 19 +++++++++
 .../systemd/network-online/data/commonlib.sh  |  1 +
 tests/kola/systemd/network-online/test.sh     | 41 +++++++++++++++++++
 3 files changed, 61 insertions(+)
 create mode 100644 tests/kola/systemd/network-online/config.bu
 create mode 120000 tests/kola/systemd/network-online/data/commonlib.sh
 create mode 100755 tests/kola/systemd/network-online/test.sh

diff --git a/tests/kola/systemd/network-online/config.bu b/tests/kola/systemd/network-online/config.bu
new file mode 100644
index 0000000000..09246d1f1f
--- /dev/null
+++ b/tests/kola/systemd/network-online/config.bu
@@ -0,0 +1,19 @@
+variant: fcos
+version: 1.4.0
+systemd:
+  units:
+    - name: block-network-online.service
+      enabled: true
+      contents: |
+        [Unit]
+        After=NetworkManager-wait-online.service
+        Before=network-online.target
+        Wants=network-online.target
+
+        [Service]
+        Type=oneshot
+        RemainAfterExit=yes
+        ExecStart=sleep infinity
+
+        [Install]
+        WantedBy=multi-user.target
diff --git a/tests/kola/systemd/network-online/data/commonlib.sh b/tests/kola/systemd/network-online/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/systemd/network-online/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/systemd/network-online/test.sh b/tests/kola/systemd/network-online/test.sh
new file mode 100755
index 0000000000..1512503541
--- /dev/null
+++ b/tests/kola/systemd/network-online/test.sh
@@ -0,0 +1,41 @@
+#!/bin/bash
+## kola:
+##   description: Verify that network-online.target doesn't block login
+##   tags: platform-independent
+##   # this really shouldn't take long; if it does, it's that we're hitting the
+##   # very issue we're testing for
+##   timeoutMin: 3
+
+# If the user provides a systemd unit which pulls in `network-online.target`,
+# we want to make sure that logins don't block on `network-online.target` being
+# reached. `block-network-online.service` verifies this by pulling in `network-
+# online.target` and preventing it from being reached by running `Before=` it
+# and sleeping forever.
+
+# We hit this in RHCOS with iscsi.service causing network-online.target to block
+# remote-fs-pre.target and hence systemd-user-sessions.service from running:
+#
+# https://github.com/openshift/os/pull/1279
+# https://issues.redhat.com/browse/OCPBUGS-11124
+
+set -euo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# The fact that we're here means that `systemd-user-sessions.service` was
+# reached and logins work since kola was able to SSH to start us. But let's do
+# some sanity-checks to verify that the test was valid.
+
+# verify that block-network-online.service is still activating since it's stuck sleeping
+if [[ $(systemctl show block-network-online -p ActiveState) != "ActiveState=activating" ]]; then
+  systemctl status block-network-online.service
+  fatal "block-network-online.service isn't activating"
+fi
+
+# verify that network-online.target is not yet active since it's still blocked on block-network-online.service
+if [[ $(systemctl show network-online.target -p ActiveState) != "ActiveState=inactive" ]]; then
+  systemctl status network-online.target
+  fatal "network-online.target isn't inactive"
+fi
+
+echo "ok network-online.target does not block login"

From 74522b08f46a875934c701b453a2c226aacaf541 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 28 May 2023 00:00:20 +0000
Subject: [PATCH 1642/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/589/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 69 insertions(+), 69 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 30df6c05bf..27fcb1b13f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -97,7 +97,7 @@
       "evra": "1.0.8-13.fc38.aarch64"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc38.aarch64"
+      "evra": "1.19.1-1.fc38.aarch64"
     },
     "ca-certificates": {
       "evra": "2023.2.60-2.fc38.noarch"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.213.0-1.fc38.noarch"
+      "evra": "2:2.215.0-2.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -337,7 +337,7 @@
       "evra": "2.9.9-16.fc38.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.10-3.fc38.aarch64"
+      "evra": "1.12-1.fc38.aarch64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-3.fc38.aarch64"
@@ -373,7 +373,7 @@
       "evra": "2.40.1-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.2-1.fc38.aarch64"
+      "evra": "2.76.3-1.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.aarch64"
@@ -439,22 +439,22 @@
       "evra": "6.1.0-1.fc38.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-2.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-2.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-2.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-2.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.9-2.fc38.noarch"
+      "evra": "1.8.9-4.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-2.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.aarch64"
     },
     "iputils": {
       "evra": "20221126-2.fc38.aarch64"
@@ -1072,10 +1072,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.3-1.fc38.aarch64"
+      "evra": "2023.4-2.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.3-1.fc38.aarch64"
+      "evra": "2023.4-2.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1231,10 +1231,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1562-1.fc38.noarch"
+      "evra": "2:9.0.1575-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1562-1.fc38.aarch64"
+      "evra": "2:9.0.1575-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-23T00:00:00Z",
+    "generated": "2023-05-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-23T17:08:58Z"
+        "generated": "2023-05-26T15:35:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-22T01:31:11Z"
+        "generated": "2023-05-27T01:13:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6f23fefa8c..0b07d71d82 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -97,7 +97,7 @@
       "evra": "1.0.8-13.fc38.ppc64le"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc38.ppc64le"
+      "evra": "1.19.1-1.fc38.ppc64le"
     },
     "ca-certificates": {
       "evra": "2023.2.60-2.fc38.noarch"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.213.0-1.fc38.noarch"
+      "evra": "2:2.215.0-2.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -328,7 +328,7 @@
       "evra": "2.9.9-16.fc38.ppc64le"
     },
     "fuse-overlayfs": {
-      "evra": "1.10-3.fc38.ppc64le"
+      "evra": "1.12-1.fc38.ppc64le"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-3.fc38.ppc64le"
@@ -364,7 +364,7 @@
       "evra": "2.40.1-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.2-1.fc38.ppc64le"
+      "evra": "2.76.3-1.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-4.fc38.ppc64le"
@@ -433,22 +433,22 @@
       "evra": "6.1.0-1.fc38.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-2.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-2.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.9-2.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.9-2.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.9-2.fc38.noarch"
+      "evra": "1.8.9-4.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-2.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.ppc64le"
     },
     "iputils": {
       "evra": "20221126-2.fc38.ppc64le"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.3-1.fc38.ppc64le"
+      "evra": "2023.4-2.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.3-1.fc38.ppc64le"
+      "evra": "2023.4-2.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1562-1.fc38.noarch"
+      "evra": "2:9.0.1575-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1562-1.fc38.ppc64le"
+      "evra": "2:9.0.1575-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-23T00:00:00Z",
+    "generated": "2023-05-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-23T17:07:57Z"
+        "generated": "2023-05-26T15:34:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-22T01:31:15Z"
+        "generated": "2023-05-27T01:13:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6194b1840b..118610ea1e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -94,7 +94,7 @@
       "evra": "1.0.8-13.fc38.s390x"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc38.s390x"
+      "evra": "1.19.1-1.fc38.s390x"
     },
     "ca-certificates": {
       "evra": "2023.2.60-2.fc38.noarch"
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.213.0-1.fc38.noarch"
+      "evra": "2:2.215.0-2.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -325,7 +325,7 @@
       "evra": "2.9.9-16.fc38.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.10-3.fc38.s390x"
+      "evra": "1.12-1.fc38.s390x"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-3.fc38.s390x"
@@ -349,7 +349,7 @@
       "evra": "2.40.1-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.2-1.fc38.s390x"
+      "evra": "2.76.3-1.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-4.fc38.s390x"
@@ -403,22 +403,22 @@
       "evra": "6.1.0-1.fc38.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-2.fc38.s390x"
+      "evra": "1.8.9-4.fc38.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-2.fc38.s390x"
+      "evra": "1.8.9-4.fc38.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.9-2.fc38.s390x"
+      "evra": "1.8.9-4.fc38.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.9-2.fc38.s390x"
+      "evra": "1.8.9-4.fc38.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.9-2.fc38.noarch"
+      "evra": "1.8.9-4.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-2.fc38.s390x"
+      "evra": "1.8.9-4.fc38.s390x"
     },
     "iputils": {
       "evra": "20221126-2.fc38.s390x"
@@ -1003,10 +1003,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.3-1.fc38.s390x"
+      "evra": "2023.4-2.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.3-1.fc38.s390x"
+      "evra": "2023.4-2.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1562-1.fc38.noarch"
+      "evra": "2:9.0.1575-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1562-1.fc38.s390x"
+      "evra": "2:9.0.1575-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-23T00:00:00Z",
+    "generated": "2023-05-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-23T17:07:44Z"
+        "generated": "2023-05-26T15:34:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-22T01:31:19Z"
+        "generated": "2023-05-27T01:13:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4d1fd32442..aa19da8d73 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,7 +97,7 @@
       "evra": "1.0.8-13.fc38.x86_64"
     },
     "c-ares": {
-      "evra": "1.19.0-1.fc38.x86_64"
+      "evra": "1.19.1-1.fc38.x86_64"
     },
     "ca-certificates": {
       "evra": "2023.2.60-2.fc38.noarch"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.213.0-1.fc38.noarch"
+      "evra": "2:2.215.0-2.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -337,7 +337,7 @@
       "evra": "2.9.9-16.fc38.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.10-3.fc38.x86_64"
+      "evra": "1.12-1.fc38.x86_64"
     },
     "fuse-sshfs": {
       "evra": "3.7.3-3.fc38.x86_64"
@@ -373,7 +373,7 @@
       "evra": "2.40.1-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.2-1.fc38.x86_64"
+      "evra": "2.76.3-1.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.x86_64"
@@ -445,22 +445,22 @@
       "evra": "6.1.0-1.fc38.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-2.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-2.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-2.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-2.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.9-2.fc38.noarch"
+      "evra": "1.8.9-4.fc38.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-2.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.x86_64"
     },
     "iputils": {
       "evra": "20221126-2.fc38.x86_64"
@@ -892,7 +892,7 @@
       "evra": "4.2-4.fc38.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-54.fc38.x86_64"
+      "evra": "2:2.1-55.fc38.x86_64"
     },
     "moby-engine": {
       "evra": "20.10.23-1.fc38.x86_64"
@@ -1075,10 +1075,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.3-1.fc38.x86_64"
+      "evra": "2023.4-2.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.3-1.fc38.x86_64"
+      "evra": "2023.4-2.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1562-1.fc38.noarch"
+      "evra": "2:9.0.1575-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1562-1.fc38.x86_64"
+      "evra": "2:9.0.1575-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-23T00:00:00Z",
+    "generated": "2023-05-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-23T17:08:24Z"
+        "generated": "2023-05-26T15:35:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-22T01:31:24Z"
+        "generated": "2023-05-27T01:13:16Z"
       }
     }
   }

From e3166dfdfe1a8a688424a3e01a9d1e599a6ad76f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 30 May 2023 19:12:04 +0000
Subject: [PATCH 1643/2157] =?UTF-8?q?Sync=20repo=20templates=20=E2=9A=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Sync with coreos/repo-templates@07ee22be5c5196a03622b6df77e19b95cd28720d.
---
 .github/workflows/shellcheck.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 39bf30138f..4e0497acc7 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
-      - name: Checkout repository
+      - name: Check out repository
         uses: actions/checkout@v3
       # https://github.com/actions/checkout/issues/760
       - name: Mark git checkout as safe

From 05669c9398cd4d4e8d846344d6bda93df0a3295c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 30 May 2023 20:54:44 +0000
Subject: [PATCH 1644/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/592/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 27fcb1b13f..0e6b88c55b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-27T00:00:00Z",
+    "generated": "2023-05-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-26T15:35:17Z"
+        "generated": "2023-05-28T00:02:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-27T01:13:03Z"
+        "generated": "2023-05-30T01:55:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0b07d71d82..446734827d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-27T00:00:00Z",
+    "generated": "2023-05-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-26T15:34:54Z"
+        "generated": "2023-05-28T00:02:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-27T01:13:08Z"
+        "generated": "2023-05-30T01:55:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 118610ea1e..8001747065 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-27T00:00:00Z",
+    "generated": "2023-05-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-26T15:34:45Z"
+        "generated": "2023-05-28T00:02:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-27T01:13:12Z"
+        "generated": "2023-05-30T01:55:45Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index aa19da8d73..daf2d6ad94 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-27T00:00:00Z",
+    "generated": "2023-05-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-26T15:35:25Z"
+        "generated": "2023-05-28T00:02:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-27T01:13:16Z"
+        "generated": "2023-05-30T01:55:50Z"
       }
     }
   }

From 6f748e082f68433e7d008f550fb73e37b4ad754b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 25 May 2023 11:34:29 -0400
Subject: [PATCH 1645/2157] overlay.d/05core: drop nmstate.service in preset
 file

The service is now in the 90-default.preset file shipped in the
fedora-release-common RPM. The PR [1] merged and we're fast-tracking
the fedora-release* rpms here.

[1] https://src.fedoraproject.org/rpms/fedora-release/pull-request/255
---
 manifest-lock.overrides.yaml                   | 18 ++++++++++++++++++
 .../lib/systemd/system-preset/40-coreos.preset |  3 ---
 2 files changed, 18 insertions(+), 3 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ab12d568b9..2310dda407 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -19,6 +19,24 @@ packages:
     metadata:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a3adea94d9
       type: fast-track
+  fedora-release-common:
+    evra: 38-36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
+      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
+      type: fast-track
+  fedora-release-coreos:
+    evra: 38-36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
+      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
+      type: fast-track
+  fedora-release-identity-coreos:
+    evra: 38-36.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
+      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:
diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
index 17c9d4051f..f4577d8fe9 100644
--- a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
+++ b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -32,6 +32,3 @@ enable rtas_errd.service
 enable clevis-luks-askpass.path
 # Provide status information about the Ignition run
 enable coreos-ignition-write-issues.service
-# Apply network configuration from /etc/nmstate/*.yml
-# We can drop this after merging https://src.fedoraproject.org/rpms/fedora-release/pull-request/255
-enable nmstate.service

From da06c053d9e23b12e717e27ea1f4450b7dad7433 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 24 May 2023 23:20:00 -0400
Subject: [PATCH 1646/2157] manifests/fedora-coreos-base: drop dracut nvmf
 workaround

Mostly a revert of e49baba. This was fixed in dracut some time ago [1]
and this is now dead code since we are on F38.

[1] https://github.com/dracutdevs/dracut/pull/1777
---
 manifests/fedora-coreos-base.yaml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 33038d9286..495439f49c 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -63,20 +63,6 @@ postprocess:
     #!/usr/bin/env bash
     systemctl mask dnsmasq.service
 
-  # Fedora 37 adds the nvmf dracut module to the initrd, causing
-  # ext.config.files.dracut-executable to notice that the module puts a
-  # non-executable file in /usr/sbin.  Dracut has been updated to fix the
-  # missing permission, and hopefully this can be removed for Fedora 38.
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1155
-  # https://github.com/dracutdevs/dracut/pull/1777
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    source /etc/os-release
-    if [ ${VERSION_ID} -le 37 ]; then
-        chmod +x /usr/lib/dracut/modules.d/95nvmf/nvmf-autoconnect.sh
-    fi
-
   # Default to iptables-nft. Otherwise, legacy wins. We can drop this once/if we
   # remove iptables-legacy. This is needed because alternatives don't work
   # https://github.com/coreos/fedora-coreos-tracker/issues/677

From 3db5dbca3660a3e0e93291c60e734ea1a2e0df39 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 24 May 2023 23:11:35 -0400
Subject: [PATCH 1647/2157] manifests: enable OSTree autopruning for ppc64le

The ppc64le arch has been blocked [1] from being fully released because
of size limitations in /boot not being able to hold 3 copies of
kernel+initramfs because the kernel on ppc64le isn't compressed [2].
Now that OSTree Autopruning [3] has landed let's enable it on ppc64le
to unblock ourselves.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/987#issuecomment-1281123396
[2] https://github.com/coreos/fedora-coreos-tracker/issues/1247#issuecomment-1355314761
[3] https://github.com/coreos/fedora-coreos-tracker/issues/1495
---
 manifests/fedora-coreos.yaml    |  6 ++++++
 manifests/ostree-autoprune.yaml | 11 +++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 manifests/ostree-autoprune.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 0af4eb6bf2..40c8e0ea91 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -23,6 +23,12 @@ conditional-include:
   - if: basearch != "s390x"
     # And remove some cruft from grub2
     include: grub2-removals.yaml
+  - if: basearch == "ppc64le"
+    # Need OSTree autopruning on ppc64le (because kernels aren't compressed)
+    # until we increase the size of /boot.
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1247#issuecomment-1355314761
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1495#issuecomment-1561765705
+    include: ostree-autoprune.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/ostree-autoprune.yaml b/manifests/ostree-autoprune.yaml
new file mode 100644
index 0000000000..44f3b4d370
--- /dev/null
+++ b/manifests/ostree-autoprune.yaml
@@ -0,0 +1,11 @@
+# Enable OSTree autopruning to help with /boot size constraints
+# https://github.com/coreos/fedora-coreos-tracker/issues/1495
+postprocess:
+  - |
+    #!/usr/bin/env bash
+    mkdir -p /usr/lib/systemd/system/ostree-finalize-staged.service.d
+    cat <<'EOF' > /usr/lib/systemd/system/ostree-finalize-staged.service.d/ostree-autoprune.conf
+    [Service]
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1495
+    Environment=OSTREE_SYSROOT_OPTS=early-prune
+    EOF

From 4d79d16fbb85b11e5563cfc2795af8e74925a529 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 24 May 2023 23:16:13 -0400
Subject: [PATCH 1648/2157] manifests: enable autoprune, re-add qcom dtbs on
 aarch64 in F39+

Now that we have autopruning ability we can re-add the qcom dtbs
on aarch64 that were dropped in
https://github.com/coreos/fedora-coreos-tracker/issues/1464

Fixes https://github.com/coreos/fedora-coreos-tracker/issues/1467
---
 manifests/aarch64-drop-qcom-dtb-files.yaml |  8 ++++++++
 manifests/fedora-coreos-base.yaml          |  7 -------
 manifests/fedora-coreos.yaml               | 12 ++++++++++++
 3 files changed, 20 insertions(+), 7 deletions(-)
 create mode 100644 manifests/aarch64-drop-qcom-dtb-files.yaml

diff --git a/manifests/aarch64-drop-qcom-dtb-files.yaml b/manifests/aarch64-drop-qcom-dtb-files.yaml
new file mode 100644
index 0000000000..0b21df21ed
--- /dev/null
+++ b/manifests/aarch64-drop-qcom-dtb-files.yaml
@@ -0,0 +1,8 @@
+# Short term hack to avoid running out of space on aarch64. This should
+# save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1464
+# This can be removed once we are on F39+.
+postprocess:
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    rm -vrf /usr/lib/modules/*aarch64/dtb/qcom/
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 495439f49c..bf917f0d14 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -77,13 +77,6 @@ postprocess:
     ln -sf /usr/sbin/iptables-nft-restore  /etc/alternatives/iptables-restore
     ln -sf /usr/sbin/iptables-nft-save     /etc/alternatives/iptables-save
 
-  # Short term hack to avoid running out of space on aarch64. This should
-  # save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1464
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    rm -vrf /usr/lib/modules/*aarch64/dtb/qcom/
-
   # Force the ssh-host-keys-migration to happen on every boot
   # to handle cases where someone did a upgrade->rollback->upgrade
   # See https://github.com/coreos/fedora-coreos-tracker/issues/1473
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 40c8e0ea91..a6c8971999 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -29,6 +29,18 @@ conditional-include:
     # https://github.com/coreos/fedora-coreos-tracker/issues/1247#issuecomment-1355314761
     # https://github.com/coreos/fedora-coreos-tracker/issues/1495#issuecomment-1561765705
     include: ostree-autoprune.yaml
+  - if:
+      - basearch == "aarch64"
+      - releasever >= 39
+    # In F39+ we will stop removing the qcom dtb files and thus we'll leverage OSTree autopruning
+    # so that we don't run into https://github.com/coreos/fedora-coreos-tracker/issues/1464
+    # again. OSTree autopruning is new so we're selectively enabling it before making it the default.
+    include: ostree-autoprune.yaml
+  - if:
+      - basearch == "aarch64"
+      - releasever == 38
+    # Remove qcom dtb on F38 files since autopruning isn't in place yet
+    include: aarch64-drop-qcom-dtb-files.yaml
 
 ostree-layers:
   - overlay/15fcos

From 628981c6ac47c537b23d2ed9092c5b33ec731d14 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 31 May 2023 11:39:30 -0400
Subject: [PATCH 1649/2157] overrides: fast-track ostree-2023.3-2.fc38

It has a fix for an autopruning corner case.
https://github.com/ostreedev/ostree/pull/2866
---
 manifest-lock.overrides.aarch64.yaml | 23 ++++++++++++++++++++++
 manifest-lock.overrides.ppc64le.yaml | 29 ++++++++++++++++++++++++++++
 manifest-lock.overrides.s390x.yaml   | 23 ++++++++++++++++++++++
 manifest-lock.overrides.x86_64.yaml  | 23 ++++++++++++++++++++++
 4 files changed, 98 insertions(+)
 create mode 100644 manifest-lock.overrides.aarch64.yaml
 create mode 100644 manifest-lock.overrides.ppc64le.yaml
 create mode 100644 manifest-lock.overrides.s390x.yaml
 create mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
new file mode 100644
index 0000000000..416aacdaf7
--- /dev/null
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.3-2.fc38.aarch64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
+  ostree-libs:
+    evra: 2023.3-2.fc38.aarch64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
new file mode 100644
index 0000000000..ae383bd297
--- /dev/null
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -0,0 +1,29 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.3-2.fc38.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
+  ostree-libs:
+    evra: 2023.3-2.fc38.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
+  ostree-grub2:
+    evra: 2023.3-2.fc38.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
new file mode 100644
index 0000000000..c3c2b6b59e
--- /dev/null
+++ b/manifest-lock.overrides.s390x.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.3-2.fc38.s390x
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
+  ostree-libs:
+    evra: 2023.3-2.fc38.s390x
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
new file mode 100644
index 0000000000..d660c104ca
--- /dev/null
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.3-2.fc38.x86_64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track
+  ostree-libs:
+    evra: 2023.3-2.fc38.x86_64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
+      reason: https://github.com/ostreedev/ostree/pull/2866
+      type: fast-track

From 075a403f4a23739c5a85b9993caf370f7f322f27 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Wed, 24 May 2023 09:49:43 +0800
Subject: [PATCH 1650/2157] tests: add test `nvme-symlink` to verify GCP udev
 rules

Force this test to not run by default unless named specifically
or `--tag confidential` is passed to `kola run`, also requires
`--gcp-machinetype n2d-standard-2 --gcp-confidential-vm`

It will create confidential instance on GCP with 1 nvme persistent disk
and 1 local ssd disk, then check the new udev rules make effect.

Based on https://github.com/coreos/coreos-assembler/pull/3474
and https://github.com/coreos/coreos-assembler/pull/3477.

Fix https://github.com/coreos/fedora-coreos-tracker/issues/1457
---
 tests/kola/platforms/gcp/data/commonlib.sh |  1 +
 tests/kola/platforms/gcp/nvme-symlink      | 79 ++++++++++++++++++++++
 2 files changed, 80 insertions(+)
 create mode 120000 tests/kola/platforms/gcp/data/commonlib.sh
 create mode 100755 tests/kola/platforms/gcp/nvme-symlink

diff --git a/tests/kola/platforms/gcp/data/commonlib.sh b/tests/kola/platforms/gcp/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/platforms/gcp/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/platforms/gcp/nvme-symlink b/tests/kola/platforms/gcp/nvme-symlink
new file mode 100755
index 0000000000..a3f3103942
--- /dev/null
+++ b/tests/kola/platforms/gcp/nvme-symlink
@@ -0,0 +1,79 @@
+#!/bin/bash
+## kola:
+##   description: Verify new GCP udev rules work well on confidential instance.
+##   # Note: each local SSD is 375 GB in size, refer to https://cloud.google.com/compute/docs/disks/local-ssd
+##   additionalDisks: ["375G:channel=nvme"]
+##   platforms: gcp
+##   requiredTag: confidential
+
+# See https://issues.redhat.com/browse/OCPBUGS-7582
+# https://github.com/coreos/fedora-coreos-tracker/issues/1457
+#
+# Force this test to not run by default unless named specifically
+# or `--tag confidential` is passed to `kola run`, also requires
+# `--gcp-machinetype n2d-standard-2 --gcp-confidential-vm`
+#
+# It will create confidential instance on GCP with 1 nvme persistent disk 
+# and 1 local ssd disk, then check the new udev rules make effect.
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# Set global variable with NVME json info
+NVME_INFO=$(nvme list-subsys -o json)
+
+# verify the instance is Confidential VM
+assert_confidential_vm() {
+    local sevlog=$(dmesg | grep SEV | head)
+    if [ -n "${sevlog}" ] && echo "${sevlog}" | grep "Memory Encryption Features active: AMD SEV"; then
+        ok "instance is Confidential VM"
+    else
+        fatal "instance should be Confidential VM"
+    fi
+}
+
+# check instance has 2 disks
+assert_two_nvme_disks() {
+    local nvme_count=$(jq -r ".[].Subsystems | length" <<< "${NVME_INFO}")
+    if [ $nvme_count -ne 2 ]; then
+        fatal "instance does not have 2 disks"
+    fi
+}
+
+# check nvme device
+assert_nvme_disk_accessible() {
+    local disk=$1
+    local nvme_disk=$(jq -r ".[].Subsystems[].Paths[] | select(.Name == \"${disk}\").Name" <<< "${NVME_INFO}")
+    if [ -n "${nvme_disk}" ]; then
+        if [ ! -e "/dev/${disk}n1" ]; then
+            fatal "instance has nvme device but no ${disk} accessible"
+        fi
+    else
+        fatal "can not find ${disk} on the instance"
+    fi
+}
+
+# check symlink
+assert_expected_symlink_exists() {
+    local device=$1
+    # Run google_nvme_id to populate ID_SERIAL_SHORT env var
+    eval $(/usr/lib/udev/google_nvme_id -d "${device}")
+    if [ ! -n "${ID_SERIAL_SHORT:-}" ]; then
+        fatal "can not get nvme ${device} ID_SERIAL_SHORT"
+    fi
+
+    local link="/dev/disk/by-id/google-${ID_SERIAL_SHORT}"
+    if ! ls -l "${link}"; then
+        fatal "can not find ${device} symlink ${link}"
+    fi
+}
+
+assert_confidential_vm
+assert_two_nvme_disks
+
+for disk in nvme0 nvme1; do
+    assert_nvme_disk_accessible $disk
+    assert_expected_symlink_exists "/dev/${disk}n1"
+    ok "Found /dev/${disk}n1 symlink"
+done

From 0d68aa7033db58e2fb4a0d8d5a1bd05abbed3091 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 1 Jun 2023 17:32:57 -0400
Subject: [PATCH 1651/2157] denylist: drop files.validate-symlinks denial

The binutils package was fixed to not include files in
/usr/lib/debug. See https://bugzilla.redhat.com/show_bug.cgi?id=2208360#c2

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1496
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 20b49cc942..80fbd51e2d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -29,8 +29,3 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: ext.config.files.validate-symlinks
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1496
-  snooze: 2023-06-01
-  streams:
-    - rawhide

From 48562ee13bbfe73b64b0ce055591fc0d3e9e8a50 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 1 Jun 2023 17:34:49 -0400
Subject: [PATCH 1652/2157] denylist: bump kdump.crash and root-reprovision
 denials

The kdump.crash one is being worked on in kexec-tools upstream.
The root reprovision one is still under investigation.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 80fbd51e2d..4608f2e59d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-06-01
+  snooze: 2023-06-21
   arches:
     - aarch64
 # This snooze won't fully work because we run our reprovision tests in
@@ -24,7 +24,7 @@
 # To workaround we've added the reprovision label to the `boot.grub2-install` test.
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-06-01
+  snooze: 2023-06-21
   arches:
     - ppc64le
   streams:

From 0673c819ae2dcc0c75e603fa4d8add3aa7f611b9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 2 Jun 2023 11:16:28 -0400
Subject: [PATCH 1653/2157] overrides: fast-track ostree-2023.3-3.fc38

It has a fix for an autopruning corner case.
https://github.com/ostreedev/ostree/pull/2871
---
 manifest-lock.overrides.aarch64.yaml | 12 ++++++------
 manifest-lock.overrides.ppc64le.yaml | 18 +++++++++---------
 manifest-lock.overrides.s390x.yaml   | 12 ++++++------
 manifest-lock.overrides.x86_64.yaml  | 12 ++++++------
 4 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
index 416aacdaf7..27430b9d56 100644
--- a/manifest-lock.overrides.aarch64.yaml
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -10,14 +10,14 @@
 
 packages:
   ostree:
-    evra: 2023.3-2.fc38.aarch64
+    evra: 2023.3-3.fc38.aarch64
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
   ostree-libs:
-    evra: 2023.3-2.fc38.aarch64
+    evra: 2023.3-3.fc38.aarch64
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
index ae383bd297..9cdd85a831 100644
--- a/manifest-lock.overrides.ppc64le.yaml
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -10,20 +10,20 @@
 
 packages:
   ostree:
-    evra: 2023.3-2.fc38.ppc64le
+    evra: 2023.3-3.fc38.ppc64le
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
   ostree-libs:
-    evra: 2023.3-2.fc38.ppc64le
+    evra: 2023.3-3.fc38.ppc64le
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
   ostree-grub2:
-    evra: 2023.3-2.fc38.ppc64le
+    evra: 2023.3-3.fc38.ppc64le
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
index c3c2b6b59e..7e12abbbbf 100644
--- a/manifest-lock.overrides.s390x.yaml
+++ b/manifest-lock.overrides.s390x.yaml
@@ -10,14 +10,14 @@
 
 packages:
   ostree:
-    evra: 2023.3-2.fc38.s390x
+    evra: 2023.3-3.fc38.s390x
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
   ostree-libs:
-    evra: 2023.3-2.fc38.s390x
+    evra: 2023.3-3.fc38.s390x
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
index d660c104ca..68d11d7d7e 100644
--- a/manifest-lock.overrides.x86_64.yaml
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -10,14 +10,14 @@
 
 packages:
   ostree:
-    evra: 2023.3-2.fc38.x86_64
+    evra: 2023.3-3.fc38.x86_64
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track
   ostree-libs:
-    evra: 2023.3-2.fc38.x86_64
+    evra: 2023.3-3.fc38.x86_64
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-971df1fe12
-      reason: https://github.com/ostreedev/ostree/pull/2866
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
+      reason: https://github.com/ostreedev/ostree/pull/2871
       type: fast-track

From bc289de94648821928f12cb3316db11057f62d4b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 3 Jun 2023 00:13:13 -0400
Subject: [PATCH 1654/2157] tests/kola: bump minMemory for kernel-replace test

We've seen some OOMs recently [1]. Let's bump the memory requirements
for the test for now.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1506
---
 tests/kola/rpm-ostree/kernel-replace | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 7f4fe1c870..a4412a7748 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -2,6 +2,9 @@
 ## kola:
 ##   # Increase timeout since this test has a lot of I/O and involves rebasing
 ##   timeoutMin: 15
+##   # We've seen some OOM when 1024M is used:
+##   # https://github.com/coreos/fedora-coreos-tracker/issues/1506
+##   minMemory: 2048
 ##   # This test only runs on FCOS due to a problem with skopeo copy on
 ##   # RHCOS. See: https://github.com/containers/skopeo/issues/1846
 ##   distros: fcos

From f20442545c32f9fd8bc7fdbac09e310d6b19fea2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Jun 2023 14:17:45 +0000
Subject: [PATCH 1655/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/600/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 42 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 44 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 42 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 42 ++++++++++++++++++------------------
 4 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0e6b88c55b..376f7a2c76 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc38.aarch64"
+      "evra": "6.3.1-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.215.0-2.fc38.noarch"
+      "evra": "2:2.216.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -289,13 +289,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -499,16 +499,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.15-300.fc38.aarch64"
+      "evra": "6.3.5-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.15-300.fc38.aarch64"
+      "evra": "6.3.5-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.15-300.fc38.aarch64"
+      "evra": "6.3.5-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.15-300.fc38.aarch64"
+      "evra": "6.3.5-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "2:4.18.2-0.fc38.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-7.fc38.aarch64"
+      "evra": "4.4.34-1.fc38.aarch64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.aarch64"
@@ -967,19 +967,19 @@
       "evra": "9.0p1-15.fc38.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.8-2.fc38.aarch64"
+      "evra": "1:3.0.9-1.fc38.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-2.fc38.aarch64"
+      "evra": "1:3.0.9-1.fc38.aarch64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.3-1.fc38.aarch64"
+      "evra": "2023.3-3.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.3-1.fc38.aarch64"
+      "evra": "2023.3-3.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.aarch64"
@@ -1102,10 +1102,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1231,10 +1231,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1575-1.fc38.noarch"
+      "evra": "2:9.0.1592-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1575-1.fc38.aarch64"
+      "evra": "2:9.0.1592-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1274,16 +1274,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-30T00:00:00Z",
+    "generated": "2023-06-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-28T00:02:44Z"
+        "generated": "2023-06-02T20:22:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-30T01:55:36Z"
+        "generated": "2023-06-05T01:12:13Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 446734827d..b3a28041f5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc38.ppc64le"
+      "evra": "6.3.1-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.215.0-2.fc38.noarch"
+      "evra": "2:2.216.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -280,13 +280,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.15-300.fc38.ppc64le"
+      "evra": "6.3.5-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.15-300.fc38.ppc64le"
+      "evra": "6.3.5-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.15-300.fc38.ppc64le"
+      "evra": "6.3.5-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.15-300.fc38.ppc64le"
+      "evra": "6.3.5-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -835,7 +835,7 @@
       "evra": "2:4.18.2-0.fc38.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.33-7.fc38.ppc64le"
+      "evra": "4.4.34-1.fc38.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.ppc64le"
@@ -964,22 +964,22 @@
       "evra": "9.0p1-15.fc38.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.8-2.fc38.ppc64le"
+      "evra": "1:3.0.9-1.fc38.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-2.fc38.ppc64le"
+      "evra": "1:3.0.9-1.fc38.ppc64le"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.3-1.fc38.ppc64le"
+      "evra": "2023.3-3.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.3-1.fc38.ppc64le"
+      "evra": "2023.3-3.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.3-1.fc38.ppc64le"
+      "evra": "2023.3-3.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1575-1.fc38.noarch"
+      "evra": "2:9.0.1592-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1575-1.fc38.ppc64le"
+      "evra": "2:9.0.1592-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-30T00:00:00Z",
+    "generated": "2023-06-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-28T00:02:22Z"
+        "generated": "2023-06-02T20:21:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-30T01:55:41Z"
+        "generated": "2023-06-05T01:12:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8001747065..e243117acb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -82,7 +82,7 @@
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc38.s390x"
+      "evra": "6.3.1-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.215.0-2.fc38.noarch"
+      "evra": "2:2.216.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -277,13 +277,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.15-300.fc38.s390x"
+      "evra": "6.3.5-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.15-300.fc38.s390x"
+      "evra": "6.3.5-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.15-300.fc38.s390x"
+      "evra": "6.3.5-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.15-300.fc38.s390x"
+      "evra": "6.3.5-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -778,7 +778,7 @@
       "evra": "2:4.18.2-0.fc38.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.33-7.fc38.s390x"
+      "evra": "4.4.34-1.fc38.s390x"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.s390x"
@@ -901,16 +901,16 @@
       "evra": "9.0p1-15.fc38.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.8-2.fc38.s390x"
+      "evra": "1:3.0.9-1.fc38.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-2.fc38.s390x"
+      "evra": "1:3.0.9-1.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.3-1.fc38.s390x"
+      "evra": "2023.3-3.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.3-1.fc38.s390x"
+      "evra": "2023.3-3.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.s390x"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1575-1.fc38.noarch"
+      "evra": "2:9.0.1592-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1575-1.fc38.s390x"
+      "evra": "2:9.0.1592-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-30T00:00:00Z",
+    "generated": "2023-06-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-28T00:02:11Z"
+        "generated": "2023-06-02T20:21:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-30T01:55:45Z"
+        "generated": "2023-06-05T01:12:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index daf2d6ad94..ef192fe116 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.2.2-1.fc38.x86_64"
+      "evra": "6.3.1-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.215.0-2.fc38.noarch"
+      "evra": "2:2.216.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -289,13 +289,13 @@
       "evra": "38-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-35.noarch"
+      "evra": "38-36.noarch"
     },
     "fedora-repos": {
       "evra": "38-1.noarch"
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.15-300.fc38.x86_64"
+      "evra": "6.3.5-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.15-300.fc38.x86_64"
+      "evra": "6.3.5-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.15-300.fc38.x86_64"
+      "evra": "6.3.5-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.15-300.fc38.x86_64"
+      "evra": "6.3.5-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "2:4.18.2-0.fc38.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.33-7.fc38.x86_64"
+      "evra": "4.4.34-1.fc38.x86_64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.x86_64"
@@ -973,19 +973,19 @@
       "evra": "9.0p1-15.fc38.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.8-2.fc38.x86_64"
+      "evra": "1:3.0.9-1.fc38.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-2.fc38.x86_64"
+      "evra": "1:3.0.9-1.fc38.x86_64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.3-1.fc38.x86_64"
+      "evra": "2023.3-3.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.3-1.fc38.x86_64"
+      "evra": "2023.3-3.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.x86_64"
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.12-1.fc38.noarch"
+      "evra": "38.15-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1575-1.fc38.noarch"
+      "evra": "2:9.0.1592-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1575-1.fc38.x86_64"
+      "evra": "2:9.0.1592-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-05-30T00:00:00Z",
+    "generated": "2023-06-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-05-28T00:02:52Z"
+        "generated": "2023-06-02T20:21:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-05-30T01:55:50Z"
+        "generated": "2023-06-05T01:12:27Z"
       }
     }
   }

From 0dd1104a28bd13cb58e4c33d93ec9224cb75863e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 12 Apr 2023 19:11:17 +0200
Subject: [PATCH 1656/2157] manifests: Merge EL9 manifests and overlays

Now that we only have RHCOS based on RHEL 9 and SCOS based on C9S, we
can merge the manifests again.
---
 manifests/fedora-coreos-base.yaml                        | 1 -
 manifests/shared-el9.yaml                                | 9 ---------
 manifests/system-configuration.yaml                      | 2 ++
 .../usr/lib/dracut/dracut.conf.d/coreos-zstd.conf        | 4 ----
 overlay.d/06el9/statoverride                             | 2 --
 overlay.d/README.md                                      | 6 +-----
 6 files changed, 3 insertions(+), 21 deletions(-)
 delete mode 100644 manifests/shared-el9.yaml
 rename overlay.d/{06el9 => 05core}/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf (70%)
 delete mode 100644 overlay.d/06el9/statoverride

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index bf917f0d14..f81156c211 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -9,7 +9,6 @@ include:
   - networking-tools.yaml
   - user-experience.yaml
   - shared-workarounds.yaml
-  - shared-el9.yaml
 
 ostree-layers:
   - overlay/05core
diff --git a/manifests/shared-el9.yaml b/manifests/shared-el9.yaml
deleted file mode 100644
index 0c9e884b53..0000000000
--- a/manifests/shared-el9.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-# These are packages that are shared between FCOS and
-# RHCOS/SCOS 9+
-
-packages:
-  # SSH
-  - ssh-key-dir
-
-ostree-layers:
-  - overlay/06el9
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index 8977f5c98a..77bdb5d2c4 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -37,6 +37,8 @@ packages:
   # Boost starving threads
   # https://github.com/coreos/fedora-coreos-tracker/issues/753
   - stalld
+  # Ignition aware SSH key management
+  - ssh-key-dir
 
 postprocess:
   # Mask systemd-repart. Ignition is responsible for partition setup on first
diff --git a/overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
similarity index 70%
rename from overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
rename to overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
index 9a9c0678d8..5ff266c9a7 100644
--- a/overlay.d/06el9/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-zstd.conf
@@ -1,8 +1,4 @@
 # Compress initrd with zstd.  dracut defaults to -15, but we want the
 # maximum reasonable compression, so override the command line to use
 # dracut's defaults along with -19.
-#
-# We can't use this in RHCOS 8 because the kernel doesn't enable
-# CONFIG_RD_ZSTD.
-
 compress="zstd -19 -q -T0"
diff --git a/overlay.d/06el9/statoverride b/overlay.d/06el9/statoverride
deleted file mode 100644
index 27a95affe2..0000000000
--- a/overlay.d/06el9/statoverride
+++ /dev/null
@@ -1,2 +0,0 @@
-# Config file for overriding permission bits on overlay files/dirs
-# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/README.md b/overlay.d/README.md
index cb19b091be..6c50f86cc3 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -8,11 +8,7 @@ longer the case).
 
 This overlay matches `fedora-coreos-base.yaml`; core Ignition+ostree bits.
 
-06el9
------
-
-This overlay includes content shared between FCOS and RHCOS/SCOS 9, but not
-RHCOS 8.
+This overlay is shared with RHCOS/SCOS 9.
 
 08nouveau
 ---------

From 08ed756778955309f3403a9ef46458fc92830180 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Jun 2023 14:56:04 +0000
Subject: [PATCH 1657/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 28 ----------------------------
 1 file changed, 28 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2310dda407..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,34 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  afterburn:
-    evr: 5.4.2-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a3adea94d9
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.4.2-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a3adea94d9
-      type: fast-track
-  fedora-release-common:
-    evra: 38-36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
-      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
-      type: fast-track
-  fedora-release-coreos:
-    evra: 38-36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
-      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
-      type: fast-track
-  fedora-release-identity-coreos:
-    evra: 38-36.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-0504b1f717
-      reason: https://github.com/coreos/fedora-coreos-config/pull/2439
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 167bf65eeef838dbba6c10fb0681bd1408d7f687 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 5 Jun 2023 11:07:49 -0400
Subject: [PATCH 1658/2157] manifests/fedora-coreos-base: re-organize arch
 includes package list comments

This makes it a little more clear what comment is related to what
packages in the list.
---
 manifests/fedora-coreos-base.yaml | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index f81156c211..09e785f14d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -160,16 +160,17 @@ packages:
   - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
 
 
-# This thing is crying out to be pulled into systemd, but that hasn't happened
-# yet.  Also we may want to add to rpm-ostree something like arch negation;
-# basically right now it doesn't exist on s390x.
-# Anyways, it was requested by the Red Hat perf team for RHCOS, so we have it here.
-# https://serverfault.com/questions/513807/is-there-still-a-use-for-irqbalance-on-modern-hardware
-# https://access.redhat.com/solutions/41535
-#
-# Include the qemu-user-static-x86 package on non-x86_64 FCOS images to allow
-# access to the large inventory of containers only built for x86_64.
-# https://github.com/coreos/fedora-coreos-tracker/issues/1237
+# - irqbalance
+#   - This thing is crying out to be pulled into systemd, but that hasn't happened
+#     yet.  Also we may want to add to rpm-ostree something like arch negation;
+#     basically right now it doesn't exist on s390x.
+#     Anyways, it was requested by the Red Hat perf team for RHCOS, so we have it here.
+#     https://serverfault.com/questions/513807/is-there-still-a-use-for-irqbalance-on-modern-hardware
+#     https://access.redhat.com/solutions/41535
+# - qemu-user-static-x86
+#   - Include this on non-x86_64 FCOS images to allow access to the large
+#     inventory of containers only built for x86_64.
+#     https://github.com/coreos/fedora-coreos-tracker/issues/1237
 packages-x86_64:
   - irqbalance
 packages-ppc64le:

From 805c66c08a17ed57a781714d13e1a84f2890f55e Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Wed, 31 May 2023 17:32:52 -0300
Subject: [PATCH 1659/2157] Add google-compute-engine-guest-configs-udev
 package; drop 30gcp-udev-rules overlay

The udev rules and dracut module are now offered by the package.
See: https://github.com/coreos/fedora-coreos-tracker/issues/1494

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 manifest-lock.overrides.yaml                  |   6 +
 manifest-lock.s390x.json                      |   3 +
 manifest-lock.x86_64.json                     |   3 +
 manifests/fedora-coreos-base.yaml             |   8 +-
 overlay.d/30gcp-udev-rules/statoverride       |   2 -
 .../30gcp-udev-rules/module-setup.sh          |  11 -
 .../usr/lib/udev/google_nvme_id               | 308 ------------------
 .../udev/rules.d/64-gce-disk-removal.rules    |  19 --
 .../lib/udev/rules.d/65-gce-disk-naming.rules |  41 ---
 overlay.d/README.md                           |  18 -
 tests/kola/files/initrd/expected-contents     |   7 +-
 11 files changed, 24 insertions(+), 402 deletions(-)
 delete mode 100644 overlay.d/30gcp-udev-rules/statoverride
 delete mode 100644 overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh
 delete mode 100644 overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
 delete mode 100644 overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules
 delete mode 100644 overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..79bc7b1b5d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,12 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  google-compute-engine-guest-configs-udev:
+    evra: 20230526.00-3.fc38.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-67a6c1b831
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1494
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e243117acb..ac12999885 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -378,6 +378,9 @@
     "grep": {
       "evra": "3.8-3.fc38.s390x"
     },
+    "google-compute-engine-guest-configs-udev": {
+      "evra": "20230526.00-3.fc38.noarch"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef192fe116..e4163c8169 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -420,6 +420,9 @@
     "grub2-tools-minimal": {
       "evra": "1:2.06-95.fc38.x86_64"
     },
+    "google-compute-engine-guest-configs-udev": {
+      "evra": "20230526.00-3.fc38.noarch"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
     },
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 09e785f14d..4ad1554b5f 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -16,7 +16,6 @@ ostree-layers:
   - overlay/09misc
   - overlay/20platform-chrony
   - overlay/25azure-udev-rules
-  - overlay/30gcp-udev-rules
 
 # Be minimal
 recommends: false
@@ -171,8 +170,14 @@ packages:
 #   - Include this on non-x86_64 FCOS images to allow access to the large
 #     inventory of containers only built for x86_64.
 #     https://github.com/coreos/fedora-coreos-tracker/issues/1237
+#
+# - google-compute-engine-guest-configs-udev
+#   - Add this package on x86_64 and aarch64 (the two architectures
+#     GCP supports. https://github.com/coreos/fedora-coreos-tracker/issues/1494
+#     This should be moved to a shared manifest when RHEL has this package.
 packages-x86_64:
   - irqbalance
+  - google-compute-engine-guest-configs-udev
 packages-ppc64le:
   - irqbalance
   - librtas
@@ -182,6 +187,7 @@ packages-ppc64le:
 packages-aarch64:
   - irqbalance
   - qemu-user-static-x86
+  - google-compute-engine-guest-configs-udev
 packages-s390x:
   - qemu-user-static-x86
 
diff --git a/overlay.d/30gcp-udev-rules/statoverride b/overlay.d/30gcp-udev-rules/statoverride
deleted file mode 100644
index 27a95affe2..0000000000
--- a/overlay.d/30gcp-udev-rules/statoverride
+++ /dev/null
@@ -1,2 +0,0 @@
-# Config file for overriding permission bits on overlay files/dirs
-# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh b/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh
deleted file mode 100644
index 9a3a622eec..0000000000
--- a/overlay.d/30gcp-udev-rules/usr/lib/dracut/modules.d/30gcp-udev-rules/module-setup.sh
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/usr/bin/bash
-# Install 64-gce-disk-removal.rules, 65-gce-disk-naming.rules and
-# google_nvme_id into the initramfs
-
-# called by dracut
-install() {
-    inst_simple /usr/lib/udev/google_nvme_id
-    inst_multiple \
-        /usr/lib/udev/rules.d/64-gce-disk-removal.rules \
-        /usr/lib/udev/rules.d/65-gce-disk-naming.rules
-}
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id b/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
deleted file mode 100644
index a41cd340e3..0000000000
--- a/overlay.d/30gcp-udev-rules/usr/lib/udev/google_nvme_id
+++ /dev/null
@@ -1,308 +0,0 @@
-#!/bin/bash
-# ATTENTION: This is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/google_nvme_id
-
-# Copyright 2020 Google Inc. All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Used to generate symlinks for NVMe devices (both local SSD and
-# persistent disk) using the disk names reported by the metadata server.
-
-
-
-# Locations of the script's dependencies
-readonly nvme_cli_bin=/usr/sbin/nvme
-
-# Bash regex to parse device paths and controller identification
-readonly PD_CONTROLLER_REGEX="nvme_card-pd"
-readonly SSD_CONTROLLER_REGEX="nvme_card[0-9]*"
-readonly CONTROLLER_NUMBER_REGEX="nvme_card([[:digit:]]+)"
-readonly NAMESPACE_NUMBER_REGEX="/dev/nvme[[:digit:]]+n([[:digit:]]+).*"
-readonly PARTITION_NUMBER_REGEX="/dev/nvme[[:digit:]]+n[[:digit:]]+p([[:digit:]]+)"
-readonly PD_NVME_REGEX="sn[[:space:]]+:[[:space]]+nvme_card-pd"
-
-# Globals used to generate the symlinks for a NVMe disk.  These are populated
-# by the identify_pd_disk function and exported for consumption by udev rules.
-ID_SERIAL=''
-ID_SERIAL_SHORT=''
-
-#######################################
-# Helper function to log an error message to stderr.
-# Globals:
-#   None
-# Arguments:
-#   String to print as the log message
-# Outputs:
-#   Writes error to STDERR
-#######################################
-function err() {
-  echo "[$(date +'%Y-%m-%dT%H:%M:%S%z')]: $*" >&2
-}
-
-#######################################
-# Retrieves the device name for an NVMe namespace using nvme-cli.
-# Globals:
-#   Uses nvme_cli_bin
-# Arguments:
-#   The path to the nvme namespace (/dev/nvme0n?)
-# Outputs:
-#   The device name parsed from the JSON in the vendor ext of the ns-id command.
-# Returns:
-#   0 if the device name for the namespace could be retrieved, 1 otherwise
-#######################################
-function get_namespace_device_name() {
-  local nvme_json
-  nvme_json="$("$nvme_cli_bin" id-ns -b "$1" | xxd -p -seek 384 | xxd -p -r)"
-  if [[ $? -ne 0 ]]; then
-    return 1
-  fi
-
-  if [[ -z "$nvme_json" ]]; then
-    err "NVMe Vendor Extension disk information not present"
-    return 1
-  fi
-
-  local device_name
-  device_name="$(echo "$nvme_json" | grep device_name | sed -e 's/.*"device_name":[  \t]*"\([a-zA-Z0-9_-]\+\)".*/\1/')"
-
-  # Error if our device name is empty
-  if [[ -z "$device_name" ]]; then
-    err "Empty name"
-    return 1
-  fi
-
-  echo "$device_name"
-  return 0
-}
-
-#######################################
-# Retrieves the nsid for an NVMe namespace
-# Globals:
-#   None
-# Arguments:
-#   The path to the nvme namespace (/dev/nvme0n*)
-# Outputs:
-#   The namespace number/id
-# Returns:
-#   0 if the namespace id could be retrieved, 1 otherwise
-#######################################
-function get_namespace_number() {
-  local dev_path="$1"
-  local namespace_number
-  if [[ "$dev_path" =~ $NAMESPACE_NUMBER_REGEX ]]; then
-    namespace_number="${BASH_REMATCH[1]}"
-  else
-    return 1
-  fi
-
-  echo "$namespace_number"
-  return 0
-}
-
-#######################################
-# Retrieves the partition number for a device path if it exists
-# Globals:
-#   None
-# Arguments:
-#   The path to the device partition (/dev/nvme0n*p*)
-# Outputs:
-#   The value after 'p' in the device path, or an empty string if the path has
-#   no partition.
-#######################################
-function get_partition_number() {
-  local dev_path="$1"
-  local partition_number
-  if [[ "$dev_path" =~ $PARTITION_NUMBER_REGEX ]]; then
-    partition_number="${BASH_REMATCH[1]}"
-    echo "$partition_number"
-  else
-    echo ''
-  fi
-  return 0
-}
-
-#######################################
-# Retrieves the controller number from the device model if it exists
-# Globals:
-#   None
-# Arguments:
-#   The NVMe device model (nvme_card or nvme_card1/2/3/...)
-# Outputs:
-#   The controller id/number
-#######################################
-function get_controller_number() {
-  local dev_model="$1"
-  local controller_number
-  if [[ "$dev_model" =~ $CONTROLLER_NUMBER_REGEX ]]; then
-    controller_number="${BASH_REMATCH[1]}"
-    echo "$controller_number"
-  else
-    # if it's 'nvme_card', echo 0. This is for backward compatibility.
-    echo '0'
-  fi
-  return 0
-}
-
-#######################################
-# Generates a symlink for a PD-NVMe device using the metadata's disk name.
-# Primarily used for testing but can be used if the script is directly invoked.
-# Globals:
-#   Uses ID_SERIAL_SHORT (can be populated by identify_pd_disk)
-# Arguments:
-#   The device path for the disk
-#######################################
-function gen_symlink() {
-  local dev_path="$1"
-  local partition_number="$(get_partition_number "$dev_path")"
-
-  if [[ -n "$partition_number" ]]; then
-    ln -s "$dev_path" /dev/disk/by-id/google-"$ID_SERIAL_SHORT"-part"$partition_number" > /dev/null 2>&1
-  else
-    ln -s "$dev_path" /dev/disk/by-id/google-"$ID_SERIAL_SHORT" > /dev/null 2>&1
-  fi
-
-  return 0
-}
-
-#######################################
-# Populates the ID_* global variables with a disk's device name and namespace
-# Globals:
-#   Populates ID_SERIAL_SHORT, and ID_SERIAL
-# Arguments:
-#   The device path for the disk
-# Returns:
-#   0 on success and 1 if an error occurs
-#######################################
-function identify_pd_disk() {
-  local dev_path="$1"
-  local dev_name
-  dev_name="$(get_namespace_device_name "$dev_path")"
-  if [[ $? -ne 0 ]]; then
-    return 1
-  fi
-
-  ID_SERIAL_SHORT="$dev_name"
-  ID_SERIAL="Google_PersistentDisk_${ID_SERIAL_SHORT}"
-  return 0
-}
-
-#######################################
-# Populates the ID_* global variables with a disk's device name and namespace
-# Globals:
-#   Populates ID_SERIAL_SHORT, and ID_SERIAL
-# Arguments:
-#   The device path for the disk
-# Returns:
-#   0 on success and 1 if an error occurs
-#######################################
-function identify_local_ssd_disk() {
-  local dev_model="$1"
-  local dev_path="$2"
-  local controller_number
-  controller_number="$(get_controller_number "$dev_model")"
-  if [[ $? -ne 0 ]]; then
-    return 1
-  fi
-
-  local namespace_number
-  namespace_number="$(get_namespace_number "$dev_path")"
-  if [[ $? -ne 0 ]]; then
-    return 1
-  fi
-
-  ID_SERIAL_SHORT="local-nvme-ssd-$(($controller_number+$namespace_number-1))"
-  ID_SERIAL="Google_EphemeralDisk_${ID_SERIAL_SHORT}"
-  return 0
-}
-
-function print_help_message() {
-  echo "Usage: google_nvme_id [-s] [-h] -d device_path"
-  echo "  -d <device_path> (Required): Specifies the path to generate a name"
-  echo "        for.  This needs to be a path to an nvme device or namespace"
-  echo "  -s: Create symbolic link for the disk under /dev/disk/by-id."
-  echo "        Otherwise, the disk name will be printed to STDOUT"
-  echo "  -h: Print this help message"
-}
-
-function main() {
-  local opt_gen_symlink='false'
-  local device_path=''
-
-  while getopts :d:sh flag; do
-    case "$flag" in
-      d) device_path="$OPTARG";;
-      s) opt_gen_symlink='true';;
-      h) print_help_message
-         return 0
-         ;;
-      :) echo "Invalid option: ${OPTARG} requires an argument" 1>&2
-         return 1
-         ;;
-      *) return 1
-    esac
-  done
-
-  if [[ -z "$device_path" ]]; then
-    echo "Device path (-d) argument required. Use -h for full usage." 1>&2
-    exit 1
-  fi
-
-  # Ensure the nvme-cli command is installed
-  command -v "$nvme_cli_bin" > /dev/null 2>&1
-  if [[ $? -ne 0 ]]; then
-    err "The nvme utility (/usr/sbin/nvme) was not found. You may need to run \
-with sudo or install nvme-cli."
-    return 1
-  fi
-
-  # Ensure the passed device is actually an NVMe device
-  "$nvme_cli_bin" id-ctrl "$device_path" &>/dev/null
-  if [[ $? -ne 0 ]]; then
-    err "Passed device was not an NVMe device.  (You may need to run this \
-script as root/with sudo)."
-    return 1
-  fi
-
-  # Detect the type of attached nvme device
-  local controller_id
-  controller_id=$("$nvme_cli_bin" id-ctrl "$device_path")
-  if [[ "$controller_id" =~ $PD_CONTROLLER_REGEX ]] ; then
-    # Fill the global variables for the id command for the given disk type
-    # Error messages will be printed closer to error, no need to reprint here
-    identify_pd_disk "$device_path"
-    if [[ $? -ne 0 ]]; then
-      return $?
-    fi
-  elif [[ "$controller_id" =~ $SSD_CONTROLLER_REGEX ]] ; then
-    identify_local_ssd_disk "$controller_id" "$device_path"
-    if [[ $? -ne 0 ]]; then
-      return $?
-    fi
-  else
-    err "Device is not a NVMe device"
-    return 1
-  fi
-
-  # Gen symlinks or print out the globals set by the identify command
-  if [[ "$opt_gen_symlink" == 'true' ]]; then
-    gen_symlink "$device_path"
-  else
-    # These will be consumed by udev
-    echo "ID_SERIAL_SHORT=${ID_SERIAL_SHORT}"
-    echo "ID_SERIAL=${ID_SERIAL}"
-  fi
-
-  return $?
-
-}
-main "$@"
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules
deleted file mode 100644
index 052d636b21..0000000000
--- a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/64-gce-disk-removal.rules
+++ /dev/null
@@ -1,19 +0,0 @@
-# ATTENTION: It is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/rules.d/64-gce-disk-removal.rules
-# Copyright 2016 Google Inc. All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-#     distributed under the License is distributed on an "AS IS" BASIS,
-#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-# When a disk is removed, unmount any remaining attached volumes.
-
-ACTION=="remove", SUBSYSTEM=="block", KERNEL=="sd*|vd*|nvme*", RUN+="/bin/sh -c '/bin/umount -fl /dev/$name && /usr/bin/logger -p daemon.warn -s WARNING: hot-removed /dev/$name that was still mounted, data may have been corrupted'"
diff --git a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules b/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
deleted file mode 100644
index 5c62b7564d..0000000000
--- a/overlay.d/30gcp-udev-rules/usr/lib/udev/rules.d/65-gce-disk-naming.rules
+++ /dev/null
@@ -1,41 +0,0 @@
-# ATTENTION: It is a copy from https://github.com/GoogleCloudPlatform/guest-configs/blob/18fbc050b135461879e631a5ec2dd2cd7259d8e2/src/lib/udev/rules.d/65-gce-disk-naming.rules
-# Copyright 2016 Google Inc. All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-#     distributed under the License is distributed on an "AS IS" BASIS,
-#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-# Name the attached disks as the specified by deviceName.
-
-ACTION!="add|change", GOTO="gce_disk_naming_end"
-SUBSYSTEM!="block", GOTO="gce_disk_naming_end"
-
-# SCSI naming
-KERNEL=="sd*|vd*", IMPORT{program}="scsi_id --export --whitelisted -d $tempnode"
-
-# NVME Local SSD naming
-KERNEL=="nvme*n*", ATTRS{model}=="nvme_card", PROGRAM="/bin/sh -c 'nsid=$$(echo %k|sed -re s/nvme[0-9]+n\([0-9]+\).\*/\\1/); echo $$((nsid-1))'", ENV{ID_SERIAL_SHORT}="local-nvme-ssd-%c"
-KERNEL=="nvme*", ATTRS{model}=="nvme_card", ENV{ID_SERIAL}="Google_EphemeralDisk_$env{ID_SERIAL_SHORT}"
-# Support for local SSD multi-controller
-KERNEL=="nvme*n*", ATTRS{model}=="nvme_card[0-9]*", IMPORT{program}="google_nvme_id -d $tempnode"
-
-# NVME Persistent Disk IO Timeout
-KERNEL=="nvme*n*", ENV{DEVTYPE}=="disk", ATTRS{model}=="nvme_card-pd", ATTR{queue/io_timeout}="4294967295"
-
-# NVME Persistent Disk Naming
-KERNEL=="nvme*n*", ATTRS{model}=="nvme_card-pd", IMPORT{program}="google_nvme_id -d $tempnode"
-
-# Symlinks
-KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="disk", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}"
-KERNEL=="sd*|vd*|nvme*", ENV{DEVTYPE}=="partition", SYMLINK+="disk/by-id/google-$env{ID_SERIAL_SHORT}-part%n"
-
-LABEL="gce_disk_naming_end"
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 6c50f86cc3..ec51984b46 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -62,21 +62,3 @@ bits to include the rules in the initramfs too.
 [1] https://github.com/coreos/fedora-coreos-tracker/issues/1383
 [2] https://github.com/Azure/WALinuxAgent/pull/1622
 [3] https://src.fedoraproject.org/rpms/WALinuxAgent/pull-request/4
-
-
-30gcp-udev-rules
--------------------
-
-Add udev rules and scripts needed from google-guest-configs [1] for disk
-configuration in GCP, such as local SSD controllers (nvme and scsi).
-
-The udev rules are also needed in the initramfs [2] and are delivered here via a dracut
-module.
-
-There is an opened BZ [3] requesting a subpackage of google-compute-engine-guest-configs
-containing only what we need. Once we get it, we can include this rpm in the
-OS (Fedora/RHEL) and drop this module entirely.
-
-[1] https://github.com/GoogleCloudPlatform/guest-configs/tree/master/src/lib/udev
-[2] https://issues.redhat.com/browse/OCPBUGS-10942
-[3] https://bugzilla.redhat.com/show_bug.cgi?id=2182865
diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index 73642a92c2..f45bec7b6a 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -2,6 +2,8 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify that the initrd includes some specific files.
+##   # Currently the files we check only need to be available on x86_64 and aarch64
+##   architectures: x86_64 aarch64
 
 # This test runs on both FCOS & RHCOS. The initrd includes specific files which,
 # if omitted from the image, will cause some failures with certain Ignition
@@ -17,8 +19,9 @@ required_initrd_files=(
     # Files from the 25azure-udev-rules overlay
     "/usr/lib/udev/rules.d/66-azure-storage.rules"
     "/usr/lib/udev/rules.d/99-azure-product-uuid.rules"
-    # Files from the 30gcp-udev-rules overlay
-    "/usr/lib/udev/rules.d/64-gce-disk-removal.rules"
+    # Files from the google-compute-engine-guest-configs-udev RPM (FCOS)
+    # or 30gcp-udev-rules overlay (RHCOS). We can probably remove these
+    # checks once RHCOS is using the RPM too.
     "/usr/lib/udev/rules.d/65-gce-disk-naming.rules"
     "/usr/lib/udev/google_nvme_id"
 )

From 5bdca77cde21da361e04d1002714ad817b069e7e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 7 Jun 2023 15:27:49 +0000
Subject: [PATCH 1660/2157] overrides: pin passt-0^20230509.g96f8d55-1.fc38

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 79bc7b1b5d..bb8e64d571 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -20,3 +20,13 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
+  passt:
+    evr: 0^20230509.g96f8d55-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
+      type: pin
+  passt-selinux:
+    evra: 0^20230509.g96f8d55-1.fc38.noarch
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
+      type: pin

From 397cf33f1744419819193c91b1e1ff3a1c7497c6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 31 May 2023 14:54:47 -0400
Subject: [PATCH 1661/2157] tests/kola: remove reprovision tag from
 grub2-install test

We were doing this as a workaround for [1]. Now that that issue
has been fixed we can remove the reprovision tag from the grub2-install
test again.

[1] https://github.com/coreos/coreos-assembler/issues/3464
---
 kola-denylist.yaml            | 4 ----
 tests/kola/boot/grub2-install | 6 +-----
 2 files changed, 1 insertion(+), 9 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 4608f2e59d..00fc3c681e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,10 +18,6 @@
   snooze: 2023-06-21
   arches:
     - aarch64
-# This snooze won't fully work because we run our reprovision tests in
-# the pipeline in a separate step and there is an issue if all tests in
-# a kola run are denylisted: https://github.com/coreos/coreos-assembler/issues/3464
-# To workaround we've added the reprovision label to the `boot.grub2-install` test.
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
   snooze: 2023-06-21
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 6f23c32191..06831c0f28 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -1,10 +1,6 @@
 #!/bin/bash
 ## kola:
-##   # add the reprovision tag here to temporarily to workaround
-##   # https://github.com/coreos/coreos-assembler/issues/3464. We can
-##   # remove the tag when https://github.com/coreos/fedora-coreos-tracker/issues/1489
-##   # is fixed.
-##   tags: "platform-independent reprovision"
+##   tags: "platform-independent"
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
 ##   architectures: "!aarch64 s390x"

From 5049df59f7a02ac50f9cfe790f0b3f1495d96488 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 8 Jun 2023 00:04:06 +0000
Subject: [PATCH 1662/2157] overrides: pin systemd-253.4-1.fc38

---
 manifest-lock.overrides.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index bb8e64d571..68722ee62a 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -30,3 +30,33 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
       type: pin
+  systemd:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin
+  systemd-container:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin
+  systemd-libs:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin
+  systemd-pam:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin
+  systemd-resolved:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin
+  systemd-udev:
+    evr: 253.4-1.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+      type: pin

From 067b7aec1128561441480d3777ecb9cc87703dde Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 6 Jun 2023 17:40:41 -0400
Subject: [PATCH 1663/2157] Drop graduated ostree-2023.3-3.fc38 override

---
 manifest-lock.overrides.aarch64.yaml | 23 ----------------------
 manifest-lock.overrides.ppc64le.yaml | 29 ----------------------------
 manifest-lock.overrides.s390x.yaml   | 23 ----------------------
 manifest-lock.overrides.x86_64.yaml  | 23 ----------------------
 4 files changed, 98 deletions(-)
 delete mode 100644 manifest-lock.overrides.aarch64.yaml
 delete mode 100644 manifest-lock.overrides.ppc64le.yaml
 delete mode 100644 manifest-lock.overrides.s390x.yaml
 delete mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
deleted file mode 100644
index 27430b9d56..0000000000
--- a/manifest-lock.overrides.aarch64.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.3-3.fc38.aarch64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
-  ostree-libs:
-    evra: 2023.3-3.fc38.aarch64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
deleted file mode 100644
index 9cdd85a831..0000000000
--- a/manifest-lock.overrides.ppc64le.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.3-3.fc38.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
-  ostree-libs:
-    evra: 2023.3-3.fc38.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
-  ostree-grub2:
-    evra: 2023.3-3.fc38.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
deleted file mode 100644
index 7e12abbbbf..0000000000
--- a/manifest-lock.overrides.s390x.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.3-3.fc38.s390x
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
-  ostree-libs:
-    evra: 2023.3-3.fc38.s390x
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
deleted file mode 100644
index 68d11d7d7e..0000000000
--- a/manifest-lock.overrides.x86_64.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.3-3.fc38.x86_64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track
-  ostree-libs:
-    evra: 2023.3-3.fc38.x86_64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cab8a89753
-      reason: https://github.com/ostreedev/ostree/pull/2871
-      type: fast-track

From 2d0e9f480f80aa38c5cb3ba068e79b95661bba61 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 8 Jun 2023 16:37:35 +0000
Subject: [PATCH 1664/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/606/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 41 +++++++++++++++++++----------------
 manifest-lock.ppc64le.json | 38 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 41 ++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 4 files changed, 82 insertions(+), 82 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 376f7a2c76..1dce70acc6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.216.0-1.fc38.noarch"
+      "evra": "2:2.218.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-1.fc38.aarch64"
+      "evra": "8.0.1-2.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc38.aarch64"
+      "evra": "1:1.14.8-1.fc38.aarch64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc38.noarch"
+      "evra": "1:1.14.8-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc38.aarch64"
+      "evra": "1:1.14.8-1.fc38.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.aarch64"
@@ -396,6 +396,9 @@
     "gnutls": {
       "evra": "3.8.0-2.fc38.aarch64"
     },
+    "google-compute-engine-guest-configs-udev": {
+      "evra": "20230526.00-3.fc38.noarch"
+    },
     "gpgme": {
       "evra": "1.17.1-3.fc38.aarch64"
     },
@@ -583,7 +586,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-1.fc38.aarch64"
+      "evra": "8.0.1-2.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -763,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.2-0.fc38.aarch64"
+      "evra": "2:4.18.3-0.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -832,10 +835,10 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.2-0.fc38.aarch64"
+      "evra": "2:4.18.3-0.fc38.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.34-1.fc38.aarch64"
+      "evra": "4.4.35-1.fc38.aarch64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.aarch64"
@@ -1021,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.5.0-1.fc38.aarch64"
+      "evra": "5:4.5.1-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.5.0-1.fc38.aarch64"
+      "evra": "5:4.5.1-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1090,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.2-0.fc38.aarch64"
+      "evra": "2:4.18.3-0.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.2-0.fc38.noarch"
+      "evra": "2:4.18.3-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.2-0.fc38.aarch64"
+      "evra": "2:4.18.3-0.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1231,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1592-1.fc38.noarch"
+      "evra": "2:9.0.1607-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1592-1.fc38.aarch64"
+      "evra": "2:9.0.1607-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1274,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-05T00:00:00Z",
+    "generated": "2023-06-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-02T20:22:03Z"
+        "generated": "2023-06-07T14:50:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-05T01:12:13Z"
+        "generated": "2023-06-08T01:57:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b3a28041f5..280df929bc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.216.0-1.fc38.noarch"
+      "evra": "2:2.218.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-1.fc38.ppc64le"
+      "evra": "8.0.1-2.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc38.ppc64le"
+      "evra": "1:1.14.8-1.fc38.ppc64le"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc38.noarch"
+      "evra": "1:1.14.8-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc38.ppc64le"
+      "evra": "1:1.14.8-1.fc38.ppc64le"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.ppc64le"
@@ -577,7 +577,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-1.fc38.ppc64le"
+      "evra": "8.0.1-2.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.2-0.fc38.ppc64le"
+      "evra": "2:4.18.3-0.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,10 +832,10 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.2-0.fc38.ppc64le"
+      "evra": "2:4.18.3-0.fc38.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.34-1.fc38.ppc64le"
+      "evra": "4.4.35-1.fc38.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.ppc64le"
@@ -1021,10 +1021,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.5.0-1.fc38.ppc64le"
+      "evra": "5:4.5.1-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.5.0-1.fc38.ppc64le"
+      "evra": "5:4.5.1-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.2-0.fc38.ppc64le"
+      "evra": "2:4.18.3-0.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.2-0.fc38.noarch"
+      "evra": "2:4.18.3-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.2-0.fc38.ppc64le"
+      "evra": "2:4.18.3-0.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1592-1.fc38.noarch"
+      "evra": "2:9.0.1607-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1592-1.fc38.ppc64le"
+      "evra": "2:9.0.1607-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-05T00:00:00Z",
+    "generated": "2023-06-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-02T20:21:09Z"
+        "generated": "2023-06-07T14:50:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-05T01:12:18Z"
+        "generated": "2023-06-08T01:57:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ac12999885..6017e22f16 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.216.0-1.fc38.noarch"
+      "evra": "2:2.218.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-1.fc38.s390x"
+      "evra": "8.0.1-2.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -199,16 +199,16 @@
       "evra": "2.1.28-9.fc38.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc38.s390x"
+      "evra": "1:1.14.8-1.fc38.s390x"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc38.noarch"
+      "evra": "1:1.14.8-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc38.s390x"
+      "evra": "1:1.14.8-1.fc38.s390x"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.s390x"
@@ -378,9 +378,6 @@
     "grep": {
       "evra": "3.8-3.fc38.s390x"
     },
-    "google-compute-engine-guest-configs-udev": {
-      "evra": "20230526.00-3.fc38.noarch"
-    },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
     },
@@ -544,7 +541,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-1.fc38.s390x"
+      "evra": "8.0.1-2.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -712,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.2-0.fc38.s390x"
+      "evra": "2:4.18.3-0.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -778,10 +775,10 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.2-0.fc38.s390x"
+      "evra": "2:4.18.3-0.fc38.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.34-1.fc38.s390x"
+      "evra": "4.4.35-1.fc38.s390x"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.s390x"
@@ -955,10 +952,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.5.0-1.fc38.s390x"
+      "evra": "5:4.5.1-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.5.0-1.fc38.s390x"
+      "evra": "5:4.5.1-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1027,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.2-0.fc38.s390x"
+      "evra": "2:4.18.3-0.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.2-0.fc38.noarch"
+      "evra": "2:4.18.3-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.2-0.fc38.s390x"
+      "evra": "2:4.18.3-0.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1165,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1592-1.fc38.noarch"
+      "evra": "2:9.0.1607-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1592-1.fc38.s390x"
+      "evra": "2:9.0.1607-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1208,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-05T00:00:00Z",
+    "generated": "2023-06-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-02T20:21:00Z"
+        "generated": "2023-06-07T14:49:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-05T01:12:23Z"
+        "generated": "2023-06-08T01:57:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e4163c8169..931a11e6b7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.216.0-1.fc38.noarch"
+      "evra": "2:2.218.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-1.fc38.x86_64"
+      "evra": "8.0.1-2.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.6-1.fc38.x86_64"
+      "evra": "1:1.14.8-1.fc38.x86_64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.6-1.fc38.noarch"
+      "evra": "1:1.14.8-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.6-1.fc38.x86_64"
+      "evra": "1:1.14.8-1.fc38.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.x86_64"
@@ -396,6 +396,9 @@
     "gnutls": {
       "evra": "3.8.0-2.fc38.x86_64"
     },
+    "google-compute-engine-guest-configs-udev": {
+      "evra": "20230526.00-3.fc38.noarch"
+    },
     "gpgme": {
       "evra": "1.17.1-3.fc38.x86_64"
     },
@@ -420,9 +423,6 @@
     "grub2-tools-minimal": {
       "evra": "1:2.06-95.fc38.x86_64"
     },
-    "google-compute-engine-guest-configs-udev": {
-      "evra": "20230526.00-3.fc38.noarch"
-    },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
     },
@@ -589,7 +589,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-1.fc38.x86_64"
+      "evra": "8.0.1-2.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.2-0.fc38.x86_64"
+      "evra": "2:4.18.3-0.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,10 +838,10 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.2-0.fc38.x86_64"
+      "evra": "2:4.18.3-0.fc38.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.34-1.fc38.x86_64"
+      "evra": "4.4.35-1.fc38.x86_64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.5.0-1.fc38.x86_64"
+      "evra": "5:4.5.1-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.5.0-1.fc38.x86_64"
+      "evra": "5:4.5.1-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.2-0.fc38.x86_64"
+      "evra": "2:4.18.3-0.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.2-0.fc38.noarch"
+      "evra": "2:4.18.3-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.2-0.fc38.x86_64"
+      "evra": "2:4.18.3-0.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1592-1.fc38.noarch"
+      "evra": "2:9.0.1607-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1592-1.fc38.x86_64"
+      "evra": "2:9.0.1607-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-05T00:00:00Z",
+    "generated": "2023-06-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-02T20:21:46Z"
+        "generated": "2023-06-07T14:50:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-05T01:12:27Z"
+        "generated": "2023-06-08T01:58:01Z"
       }
     }
   }

From 8807c8d9b3be1a6958bdb7016c70e5bdcf15bec6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Jun 2023 22:41:51 +0000
Subject: [PATCH 1665/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/608/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1dce70acc6..75a1ac6010 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -238,7 +238,7 @@
       "evra": "3.9-1.fc38.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc38.aarch64"
+      "evra": "2.89-5.fc38.aarch64"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.aarch64"
@@ -433,7 +433,7 @@
       "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.2-2.fc38.aarch64"
+      "evra": "1.0.3-1.fc38.aarch64"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.5-200.fc38.aarch64"
+      "evra": "6.3.6-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.5-200.fc38.aarch64"
+      "evra": "6.3.6-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.5-200.fc38.aarch64"
+      "evra": "6.3.6-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.5-200.fc38.aarch64"
+      "evra": "6.3.6-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-08T00:00:00Z",
+    "generated": "2023-06-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-07T14:50:28Z"
+        "generated": "2023-06-08T16:41:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-08T01:57:46Z"
+        "generated": "2023-06-09T01:51:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 280df929bc..5c62a85a7a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -238,7 +238,7 @@
       "evra": "3.9-1.fc38.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc38.ppc64le"
+      "evra": "2.89-5.fc38.ppc64le"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.ppc64le"
@@ -424,7 +424,7 @@
       "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.2-2.fc38.ppc64le"
+      "evra": "1.0.3-1.fc38.ppc64le"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.5-200.fc38.ppc64le"
+      "evra": "6.3.6-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.5-200.fc38.ppc64le"
+      "evra": "6.3.6-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.5-200.fc38.ppc64le"
+      "evra": "6.3.6-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.5-200.fc38.ppc64le"
+      "evra": "6.3.6-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-08T00:00:00Z",
+    "generated": "2023-06-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-07T14:50:11Z"
+        "generated": "2023-06-08T16:40:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-08T01:57:51Z"
+        "generated": "2023-06-09T01:52:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6017e22f16..a7786ef26e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -235,7 +235,7 @@
       "evra": "3.9-1.fc38.s390x"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc38.s390x"
+      "evra": "2.89-5.fc38.s390x"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.s390x"
@@ -394,7 +394,7 @@
       "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.2-2.fc38.s390x"
+      "evra": "1.0.3-1.fc38.s390x"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.s390x"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.5-200.fc38.s390x"
+      "evra": "6.3.6-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.5-200.fc38.s390x"
+      "evra": "6.3.6-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.5-200.fc38.s390x"
+      "evra": "6.3.6-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.5-200.fc38.s390x"
+      "evra": "6.3.6-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-08T00:00:00Z",
+    "generated": "2023-06-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-07T14:49:57Z"
+        "generated": "2023-06-08T16:40:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-08T01:57:56Z"
+        "generated": "2023-06-09T01:52:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 931a11e6b7..c9246ec1d2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -238,7 +238,7 @@
       "evra": "3.9-1.fc38.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.89-2.fc38.x86_64"
+      "evra": "2.89-5.fc38.x86_64"
     },
     "dosfstools": {
       "evra": "4.2-6.fc38.x86_64"
@@ -439,7 +439,7 @@
       "evra": "20230515-150.fc38.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.2-2.fc38.x86_64"
+      "evra": "1.0.3-1.fc38.x86_64"
     },
     "iproute": {
       "evra": "6.1.0-1.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.5-200.fc38.x86_64"
+      "evra": "6.3.6-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.5-200.fc38.x86_64"
+      "evra": "6.3.6-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.5-200.fc38.x86_64"
+      "evra": "6.3.6-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.5-200.fc38.x86_64"
+      "evra": "6.3.6-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-08T00:00:00Z",
+    "generated": "2023-06-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-07T14:50:50Z"
+        "generated": "2023-06-08T16:41:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-08T01:58:01Z"
+        "generated": "2023-06-09T01:52:13Z"
       }
     }
   }

From e041ca4c3de6f7250c714b768ee1bdaba2793d3b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 12 Jun 2023 20:55:36 +0000
Subject: [PATCH 1666/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/611/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 75a1ac6010..ee8df58e9a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-09T00:00:00Z",
+    "generated": "2023-06-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-08T16:41:01Z"
+        "generated": "2023-06-09T22:48:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-09T01:51:58Z"
+        "generated": "2023-06-12T01:50:04Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5c62a85a7a..36ffb959ba 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-09T00:00:00Z",
+    "generated": "2023-06-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-08T16:40:37Z"
+        "generated": "2023-06-09T22:44:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-09T01:52:03Z"
+        "generated": "2023-06-12T01:50:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a7786ef26e..89139d973e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-09T00:00:00Z",
+    "generated": "2023-06-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-08T16:40:16Z"
+        "generated": "2023-06-09T22:44:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-09T01:52:08Z"
+        "generated": "2023-06-12T01:50:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c9246ec1d2..3fbda02b25 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-09T00:00:00Z",
+    "generated": "2023-06-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-08T16:41:07Z"
+        "generated": "2023-06-09T22:45:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-09T01:52:13Z"
+        "generated": "2023-06-12T01:50:20Z"
       }
     }
   }

From 7f360def09518259c9dc50b26948dad7c2aba26e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 14 Jun 2023 00:30:25 +0000
Subject: [PATCH 1667/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/614/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ee8df58e9a..21dd0bb44e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.6-200.fc38.aarch64"
+      "evra": "6.3.7-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.6-200.fc38.aarch64"
+      "evra": "6.3.7-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.6-200.fc38.aarch64"
+      "evra": "6.3.7-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.6-200.fc38.aarch64"
+      "evra": "6.3.7-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1277,7 +1277,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-12T00:00:00Z",
+    "generated": "2023-06-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1286,7 +1286,7 @@
         "generated": "2023-06-09T22:48:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-12T01:50:04Z"
+        "generated": "2023-06-13T01:24:52Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 36ffb959ba..6560a630a7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.6-200.fc38.ppc64le"
+      "evra": "6.3.7-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.6-200.fc38.ppc64le"
+      "evra": "6.3.7-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.6-200.fc38.ppc64le"
+      "evra": "6.3.7-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.6-200.fc38.ppc64le"
+      "evra": "6.3.7-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-12T00:00:00Z",
+    "generated": "2023-06-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-06-09T22:44:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-12T01:50:10Z"
+        "generated": "2023-06-13T01:24:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 89139d973e..48ec6c8a58 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.6-200.fc38.s390x"
+      "evra": "6.3.7-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.6-200.fc38.s390x"
+      "evra": "6.3.7-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.6-200.fc38.s390x"
+      "evra": "6.3.7-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.6-200.fc38.s390x"
+      "evra": "6.3.7-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,7 +1205,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-12T00:00:00Z",
+    "generated": "2023-06-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1214,7 +1214,7 @@
         "generated": "2023-06-09T22:44:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-12T01:50:15Z"
+        "generated": "2023-06-13T01:25:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3fbda02b25..746dd89607 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.6-200.fc38.x86_64"
+      "evra": "6.3.7-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.6-200.fc38.x86_64"
+      "evra": "6.3.7-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.6-200.fc38.x86_64"
+      "evra": "6.3.7-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.6-200.fc38.x86_64"
+      "evra": "6.3.7-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-12T00:00:00Z",
+    "generated": "2023-06-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-06-09T22:45:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-12T01:50:20Z"
+        "generated": "2023-06-13T01:25:14Z"
       }
     }
   }

From 47852dddc0a0a3eca61e9f98b38885ef2abb1843 Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Wed, 14 Jun 2023 14:53:39 +0100
Subject: [PATCH 1668/2157] .cci.jenkinsfile: change path for
 download-overrides.py

PR's requesting the move

See: https://github.com/coreos/coreos-assembler/pull/3510
See: https://github.com/coreos/fedora-coreos-releng-automation/pull/176

Issue:

See: https://github.com/coreos/fedora-coreos-tracker/issues/1185
---
 .cci.jenkinsfile | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 5b560f5de4..3c9eb47a70 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -12,8 +12,7 @@ cosaPod(cpus: 4, memory: "9Gi") {
     shwrap("""
         mkdir -p /srv/coreos && cd /srv/coreos
         cosa init ${env.WORKSPACE}/config
-        curl -LO https://raw.githubusercontent.com/coreos/fedora-coreos-releng-automation/main/scripts/download-overrides.py
-        python3 download-overrides.py
+        python3 ${env.WORKSPACE}/usr/lib/coreos-assembler/download-overrides.py
         # prep from the latest builds so that we generate a diff on PRs that add packages
         cosa buildfetch --stream=${env.CHANGE_TARGET}
     """)

From 1c859a4a9ef6ed08efdd29bc1048954b9c272f04 Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Wed, 14 Jun 2023 14:59:05 +0100
Subject: [PATCH 1669/2157] Veryfying file location

---
 .cci.jenkinsfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 3c9eb47a70..4ce3f3d23b 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -12,6 +12,8 @@ cosaPod(cpus: 4, memory: "9Gi") {
     shwrap("""
         mkdir -p /srv/coreos && cd /srv/coreos
         cosa init ${env.WORKSPACE}/config
+        pwd
+        ls -al ${env.WORKSPACE}
         python3 ${env.WORKSPACE}/usr/lib/coreos-assembler/download-overrides.py
         # prep from the latest builds so that we generate a diff on PRs that add packages
         cosa buildfetch --stream=${env.CHANGE_TARGET}

From 7980158ca9fa77125e28703f5f49a1db8dcc9fc4 Mon Sep 17 00:00:00 2001
From: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Date: Wed, 14 Jun 2023 15:03:03 +0100
Subject: [PATCH 1670/2157] Update .cci.jenkinsfile

Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
---
 .cci.jenkinsfile | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 4ce3f3d23b..c5e5f34ba8 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -12,9 +12,7 @@ cosaPod(cpus: 4, memory: "9Gi") {
     shwrap("""
         mkdir -p /srv/coreos && cd /srv/coreos
         cosa init ${env.WORKSPACE}/config
-        pwd
-        ls -al ${env.WORKSPACE}
-        python3 ${env.WORKSPACE}/usr/lib/coreos-assembler/download-overrides.py
+        python3 /usr/lib/coreos-assembler/download-overrides.py
         # prep from the latest builds so that we generate a diff on PRs that add packages
         cosa buildfetch --stream=${env.CHANGE_TARGET}
     """)

From ae45b6c90c51320e5335e95208ae912a899b8fcb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 15 Jun 2023 00:15:49 +0000
Subject: [PATCH 1671/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 68722ee62a..74a882bd75 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,12 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  google-compute-engine-guest-configs-udev:
-    evra: 20230526.00-3.fc38.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-67a6c1b831
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1494
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From b3bfcfac55e65735bbf91367bf9ad5b4647a61e1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 15 Jun 2023 22:25:58 +0000
Subject: [PATCH 1672/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/616/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 21dd0bb44e..c511eee0c8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.8.15-1.fc38.aarch64"
+      "evra": "1.9.2-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -937,7 +937,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.10-4.fc38.aarch64"
+      "evra": "2.2.12-3.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -1277,7 +1277,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-13T00:00:00Z",
+    "generated": "2023-06-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1286,7 +1286,7 @@
         "generated": "2023-06-09T22:48:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-13T01:24:52Z"
+        "generated": "2023-06-15T01:18:52Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6560a630a7..382d44c6c3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.8.15-1.fc38.ppc64le"
+      "evra": "1.9.2-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -931,7 +931,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.10-4.fc38.ppc64le"
+      "evra": "2.2.12-3.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-13T00:00:00Z",
+    "generated": "2023-06-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-06-09T22:44:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-13T01:24:58Z"
+        "generated": "2023-06-15T01:18:57Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 48ec6c8a58..ad304e3010 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -871,7 +871,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.10-4.fc38.s390x"
+      "evra": "2.2.12-3.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -1205,7 +1205,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-13T00:00:00Z",
+    "generated": "2023-06-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1214,7 +1214,7 @@
         "generated": "2023-06-09T22:44:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-13T01:25:03Z"
+        "generated": "2023-06-15T01:19:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 746dd89607..35aae20777 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.8.15-1.fc38.x86_64"
+      "evra": "1.9.2-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -943,7 +943,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.10-4.fc38.x86_64"
+      "evra": "2.2.12-3.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-13T00:00:00Z",
+    "generated": "2023-06-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-06-09T22:45:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-13T01:25:14Z"
+        "generated": "2023-06-15T01:19:09Z"
       }
     }
   }

From 6adc2cc6ba02a306f7de50aa42dcf00c9b67cdd8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 15 Jun 2023 20:54:56 +0000
Subject: [PATCH 1673/2157] overrides: fast-track selinux-policy-38.17-1.fc38

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 74a882bd75..d7dac8a667 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,6 +24,18 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
       type: pin
+  selinux-policy:
+    evra: 38.17-1.fc38.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1447
+      type: fast-track
+  selinux-policy-targeted:
+    evra: 38.17-1.fc38.noarch
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1447
+      type: fast-track
   systemd:
     evr: 253.4-1.fc38
     metadata:

From e5abf37b0c747833640df3c3b0cba071b0ca4319 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Jun 2023 22:37:05 +0000
Subject: [PATCH 1674/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/618/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c511eee0c8..8630c6130e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -370,7 +370,7 @@
       "evra": "0.21.1-2.fc38.aarch64"
     },
     "git-core": {
-      "evra": "2.40.1-1.fc38.aarch64"
+      "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
       "evra": "2.76.3-1.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.7-200.fc38.aarch64"
+      "evra": "6.3.8-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.7-200.fc38.aarch64"
+      "evra": "6.3.8-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.7-200.fc38.aarch64"
+      "evra": "6.3.8-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.7-200.fc38.aarch64"
+      "evra": "6.3.8-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -673,7 +673,7 @@
       "evra": "1.7.1-2.fc38.aarch64"
     },
     "libmd": {
-      "evra": "1.0.4-3.fc38.aarch64"
+      "evra": "1.1.0-1.fc38.aarch64"
     },
     "libmnl": {
       "evra": "1.0.5-2.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-0.fc38.aarch64"
+      "evra": "2:4.18.3-1.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-0.fc38.aarch64"
+      "evra": "2:4.18.3-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.aarch64"
@@ -1093,22 +1093,22 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-0.fc38.aarch64"
+      "evra": "2:4.18.3-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-0.fc38.noarch"
+      "evra": "2:4.18.3-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-0.fc38.aarch64"
+      "evra": "2:4.18.3-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1607-1.fc38.noarch"
+      "evra": "2:9.0.1627-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1607-1.fc38.aarch64"
+      "evra": "2:9.0.1627-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-15T00:00:00Z",
+    "generated": "2023-06-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-09T22:48:15Z"
+        "generated": "2023-06-16T18:55:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-15T01:18:52Z"
+        "generated": "2023-06-17T01:14:27Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 382d44c6c3..e7184c5318 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -361,7 +361,7 @@
       "evra": "0.21.1-2.fc38.ppc64le"
     },
     "git-core": {
-      "evra": "2.40.1-1.fc38.ppc64le"
+      "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
       "evra": "2.76.3-1.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.7-200.fc38.ppc64le"
+      "evra": "6.3.8-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.7-200.fc38.ppc64le"
+      "evra": "6.3.8-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.7-200.fc38.ppc64le"
+      "evra": "6.3.8-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.7-200.fc38.ppc64le"
+      "evra": "6.3.8-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -664,7 +664,7 @@
       "evra": "1.7.1-2.fc38.ppc64le"
     },
     "libmd": {
-      "evra": "1.0.4-3.fc38.ppc64le"
+      "evra": "1.1.0-1.fc38.ppc64le"
     },
     "libmnl": {
       "evra": "1.0.5-2.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-0.fc38.ppc64le"
+      "evra": "2:4.18.3-1.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-0.fc38.ppc64le"
+      "evra": "2:4.18.3-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.ppc64le"
@@ -1096,22 +1096,22 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-0.fc38.ppc64le"
+      "evra": "2:4.18.3-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.3-0.fc38.noarch"
+      "evra": "2:4.18.3-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-0.fc38.ppc64le"
+      "evra": "2:4.18.3-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1607-1.fc38.noarch"
+      "evra": "2:9.0.1627-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1607-1.fc38.ppc64le"
+      "evra": "2:9.0.1627-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-15T00:00:00Z",
+    "generated": "2023-06-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-09T22:44:37Z"
+        "generated": "2023-06-16T18:54:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-15T01:18:57Z"
+        "generated": "2023-06-17T01:14:32Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ad304e3010..dc3ff1298b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -346,7 +346,7 @@
       "evra": "1.0.9-5.fc38.s390x"
     },
     "git-core": {
-      "evra": "2.40.1-1.fc38.s390x"
+      "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
       "evra": "2.76.3-1.fc38.s390x"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.7-200.fc38.s390x"
+      "evra": "6.3.8-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.7-200.fc38.s390x"
+      "evra": "6.3.8-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.7-200.fc38.s390x"
+      "evra": "6.3.8-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.7-200.fc38.s390x"
+      "evra": "6.3.8-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -616,7 +616,7 @@
       "evra": "1.7.1-2.fc38.s390x"
     },
     "libmd": {
-      "evra": "1.0.4-3.fc38.s390x"
+      "evra": "1.1.0-1.fc38.s390x"
     },
     "libmnl": {
       "evra": "1.0.5-2.fc38.s390x"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-0.fc38.s390x"
+      "evra": "2:4.18.3-1.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-0.fc38.s390x"
+      "evra": "2:4.18.3-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.s390x"
@@ -1024,22 +1024,22 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-0.fc38.s390x"
+      "evra": "2:4.18.3-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.3-0.fc38.noarch"
+      "evra": "2:4.18.3-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-0.fc38.s390x"
+      "evra": "2:4.18.3-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1607-1.fc38.noarch"
+      "evra": "2:9.0.1627-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1607-1.fc38.s390x"
+      "evra": "2:9.0.1627-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-15T00:00:00Z",
+    "generated": "2023-06-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-09T22:44:33Z"
+        "generated": "2023-06-16T18:54:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-15T01:19:03Z"
+        "generated": "2023-06-17T01:14:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 35aae20777..5a183fed28 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -370,7 +370,7 @@
       "evra": "0.21.1-2.fc38.x86_64"
     },
     "git-core": {
-      "evra": "2.40.1-1.fc38.x86_64"
+      "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
       "evra": "2.76.3-1.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.7-200.fc38.x86_64"
+      "evra": "6.3.8-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.7-200.fc38.x86_64"
+      "evra": "6.3.8-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.7-200.fc38.x86_64"
+      "evra": "6.3.8-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.7-200.fc38.x86_64"
+      "evra": "6.3.8-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -676,7 +676,7 @@
       "evra": "1.7.1-2.fc38.x86_64"
     },
     "libmd": {
-      "evra": "1.0.4-3.fc38.x86_64"
+      "evra": "1.1.0-1.fc38.x86_64"
     },
     "libmnl": {
       "evra": "1.0.5-2.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-0.fc38.x86_64"
+      "evra": "2:4.18.3-1.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-0.fc38.x86_64"
+      "evra": "2:4.18.3-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.x86_64"
@@ -1096,22 +1096,22 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-0.fc38.x86_64"
+      "evra": "2:4.18.3-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-0.fc38.noarch"
+      "evra": "2:4.18.3-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-0.fc38.x86_64"
+      "evra": "2:4.18.3-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.15-1.fc38.noarch"
+      "evra": "38.17-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1607-1.fc38.noarch"
+      "evra": "2:9.0.1627-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1607-1.fc38.x86_64"
+      "evra": "2:9.0.1627-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-15T00:00:00Z",
+    "generated": "2023-06-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-09T22:45:29Z"
+        "generated": "2023-06-16T18:55:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-15T01:19:09Z"
+        "generated": "2023-06-17T01:14:43Z"
       }
     }
   }

From 617ac1799140a3099d8ca6672659722523de7fc1 Mon Sep 17 00:00:00 2001
From: Alexander Larsson <alexl@redhat.com>
Date: Thu, 27 Apr 2023 14:49:27 +0200
Subject: [PATCH 1675/2157] overlay: Ignition tweaks to work with composefs

This is to enable ostree+composefs:
https://github.com/ostreedev/ostree/issues/2867

When we care about the *physical* backing filesystem, we need to
look at /sysroot/sysroot (which in the real root is `/sysroot`)
because now `/sysroot` (aka `/` in the real root) is a composefs
(really an `overlayfs` with a transient loop-mounted erofs), which
is distinct from the physical root.

Co-authored-by: Colin Walters <walters@verbum.org>
---
 .../lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh | 1 +
 .../modules.d/40ignition-ostree/coreos-check-rootfs-size       | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index cf2e9c3c3e..ecd758a675 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -32,6 +32,7 @@ rm -vrf ${initramfs_firstboot_network_dir}
 root=$(karg root)
 if [ -z "${root}" ]; then
     rdcore rootmap /sysroot --boot-mount ${bootmnt}
+    echo "Prepared rootmap"
 fi
 
 # This does a few things:
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
index 2c320bed93..d0b38d9bfd 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-check-rootfs-size
@@ -4,7 +4,8 @@ set -euo pipefail
 # See also ignition-ostree-check-rootfs-size.service
 # https://github.com/coreos/fedora-coreos-tracker/issues/586#issuecomment-777220000
 
-srcdev=$(findmnt -nvr -o SOURCE /sysroot | tail -n1)
+# /sysroot is the mounted deploy root, /sysroot/sysroot is the physical root filesystem
+srcdev=$(findmnt -nvr -o SOURCE /sysroot/sysroot | tail -n1)
 size=$(lsblk --nodeps --noheadings --bytes -o SIZE "${srcdev}")
 
 MINIMUM_GB=8

From 39e851062356910c33a8c903716415e769d60f92 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Jun 2023 18:07:51 +0000
Subject: [PATCH 1676/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d7dac8a667..74a882bd75 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,18 +24,6 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
       type: pin
-  selinux-policy:
-    evra: 38.17-1.fc38.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1447
-      type: fast-track
-  selinux-policy-targeted:
-    evra: 38.17-1.fc38.noarch
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1447
-      type: fast-track
   systemd:
     evr: 253.4-1.fc38
     metadata:

From 6525619a264f5d61a66bef2bfb9916be820ace89 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Jun 2023 22:25:57 +0000
Subject: [PATCH 1677/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/619/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8630c6130e..88e2ed02a3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -553,7 +553,7 @@
       "evra": "2.5.5-6.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.1.1-2.fc38.aarch64"
+      "evra": "13.1.1-4.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -619,7 +619,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.1.1-2.fc38.aarch64"
+      "evra": "13.1.1-4.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -787,7 +787,7 @@
       "evra": "2.9.0-1.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.1.1-2.fc38.aarch64"
+      "evra": "13.1.1-4.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -1054,7 +1054,7 @@
       "evra": "23.6-2.fc38.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc38.noarch"
+      "evra": "20230614-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.2.1-2.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-17T00:00:00Z",
+    "generated": "2023-06-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-16T18:55:56Z"
+        "generated": "2023-06-17T22:41:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-17T01:14:27Z"
+        "generated": "2023-06-18T01:21:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e7184c5318..0bd204d93c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -544,7 +544,7 @@
       "evra": "2.5.5-6.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.1.1-2.fc38.ppc64le"
+      "evra": "13.1.1-4.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -610,7 +610,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.1.1-2.fc38.ppc64le"
+      "evra": "13.1.1-4.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -784,7 +784,7 @@
       "evra": "2.9.0-1.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.1.1-2.fc38.ppc64le"
+      "evra": "13.1.1-4.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -1057,7 +1057,7 @@
       "evra": "23.6-2.fc38.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc38.noarch"
+      "evra": "20230614-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.2.1-2.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-17T00:00:00Z",
+    "generated": "2023-06-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-16T18:54:51Z"
+        "generated": "2023-06-17T22:40:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-17T01:14:32Z"
+        "generated": "2023-06-18T01:21:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dc3ff1298b..c1ccacbc8b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -571,7 +571,7 @@
       "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.1.1-2.fc38.s390x"
+      "evra": "13.1.1-4.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -730,7 +730,7 @@
       "evra": "2.9.0-1.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.1.1-2.fc38.s390x"
+      "evra": "13.1.1-4.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -982,7 +982,7 @@
       "evra": "23.6-2.fc38.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc38.noarch"
+      "evra": "20230614-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
       "evra": "2:7.2.1-2.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-17T00:00:00Z",
+    "generated": "2023-06-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-16T18:54:45Z"
+        "generated": "2023-06-17T22:40:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-17T01:14:38Z"
+        "generated": "2023-06-18T01:21:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5a183fed28..f72beace03 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -622,7 +622,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.1.1-2.fc38.x86_64"
+      "evra": "13.1.1-4.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -790,7 +790,7 @@
       "evra": "2.9.0-1.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.1.1-2.fc38.x86_64"
+      "evra": "13.1.1-4.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -1060,7 +1060,7 @@
       "evra": "23.6-2.fc38.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230318-1.fc38.noarch"
+      "evra": "20230614-1.fc38.noarch"
     },
     "readline": {
       "evra": "8.2-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-17T00:00:00Z",
+    "generated": "2023-06-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-16T18:55:46Z"
+        "generated": "2023-06-17T22:41:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-17T01:14:43Z"
+        "generated": "2023-06-18T01:21:45Z"
       }
     }
   }

From be374defb28f083ce343b84ed0ed979a158a58be Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 21 Jun 2023 10:59:28 -0400
Subject: [PATCH 1678/2157] denylist: bump snooze for
 ext.config.root-reprovision.*

These tests are still failing in rawhide `ppc64le` builds.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 00fc3c681e..57bae61e6a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -20,7 +20,7 @@
     - aarch64
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-06-21
+  snooze: 2023-07-12
   arches:
     - ppc64le
   streams:

From 203ee5295239d2f9e61b0a960dceb3ef010dec7c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 21 Jun 2023 20:56:29 +0000
Subject: [PATCH 1679/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/622/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 88e2ed02a3..03efe796fd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-18T00:00:00Z",
+    "generated": "2023-06-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-17T22:41:16Z"
+        "generated": "2023-06-18T22:30:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-18T01:21:28Z"
+        "generated": "2023-06-20T00:27:48Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0bd204d93c..2bd37c8a79 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-18T00:00:00Z",
+    "generated": "2023-06-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-17T22:40:31Z"
+        "generated": "2023-06-18T22:29:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-18T01:21:34Z"
+        "generated": "2023-06-20T00:27:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c1ccacbc8b..9b74cad73f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-18T00:00:00Z",
+    "generated": "2023-06-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-17T22:40:13Z"
+        "generated": "2023-06-18T22:28:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-18T01:21:40Z"
+        "generated": "2023-06-20T00:28:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f72beace03..943aa4edd9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-18T00:00:00Z",
+    "generated": "2023-06-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-17T22:41:30Z"
+        "generated": "2023-06-18T22:29:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-18T01:21:45Z"
+        "generated": "2023-06-20T00:28:06Z"
       }
     }
   }

From 896f3b9d33d0ece09fb295947ec91f6bf2c4abf2 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 21 Jun 2023 16:04:47 -0400
Subject: [PATCH 1680/2157] denylist: snooze rpmostree and ostree tests

These three tests started failing in rawhide on Azure.
See: https://github.com/coreos/fedora-coreos-tracker/issues/1515
---
 kola-denylist.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 57bae61e6a..83092e3cb8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,3 +25,24 @@
     - ppc64le
   streams:
     - rawhide
+- pattern: rpmostree.install-uninstall
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
+  snooze: 2023-07-12
+  platforms:
+    - azure
+  streams:
+    - rawhide
+- pattern: rpmostree.upgrade-rollback
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
+  snooze: 2023-07-12
+  platforms:
+    - azure
+  streams:
+    - rawhide
+- pattern: ostree.hotfix
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
+  snooze: 2023-07-12
+  platforms:
+    - azure
+  streams:
+    - rawhide
\ No newline at end of file

From 1d8d124f2ac751116fcbd3fc757e1201174f61cd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 21 Jun 2023 23:06:56 -0400
Subject: [PATCH 1681/2157] denylist: extend snooze for ext.config.kdump.crash
 on aarch64

This still isn't fixed upstream.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 83092e3cb8..45e5c867e6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-06-21
+  snooze: 2023-07-12
   arches:
     - aarch64
 - pattern: ext.config.root-reprovision.*
@@ -45,4 +45,4 @@
   platforms:
     - azure
   streams:
-    - rawhide
\ No newline at end of file
+    - rawhide

From 47e338a9b3c82f5fa405216cb010521eb6c22fa4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Jun 2023 22:40:36 +0000
Subject: [PATCH 1682/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/625/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 03efe796fd..3e4fc51a4b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.3.1-1.fc38.aarch64"
+      "evra": "6.3.2-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -979,10 +979,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.3-3.fc38.aarch64"
+      "evra": "2023.4-1.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.3-3.fc38.aarch64"
+      "evra": "2023.4-1.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.aarch64"
@@ -1186,7 +1186,7 @@
       "evra": "1.16-3.fc38.aarch64"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc38.aarch64"
+      "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
       "evra": "253.4-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-21T00:00:00Z",
+    "generated": "2023-06-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-18T22:30:48Z"
+        "generated": "2023-06-21T23:00:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-20T00:27:48Z"
+        "generated": "2023-06-23T00:52:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2bd37c8a79..7f0c59351e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.3.1-1.fc38.ppc64le"
+      "evra": "6.3.2-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -973,13 +973,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.3-3.fc38.ppc64le"
+      "evra": "2023.4-1.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.3-3.fc38.ppc64le"
+      "evra": "2023.4-1.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.3-3.fc38.ppc64le"
+      "evra": "2023.4-1.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.ppc64le"
@@ -1189,7 +1189,7 @@
       "evra": "1.16-3.fc38.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc38.ppc64le"
+      "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
       "evra": "253.4-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-21T00:00:00Z",
+    "generated": "2023-06-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-18T22:29:38Z"
+        "generated": "2023-06-21T23:00:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-20T00:27:54Z"
+        "generated": "2023-06-23T00:53:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9b74cad73f..d091150918 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -82,7 +82,7 @@
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.3.1-1.fc38.s390x"
+      "evra": "6.3.2-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -907,10 +907,10 @@
       "evra": "1:3.0.9-1.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.3-3.fc38.s390x"
+      "evra": "2023.4-1.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.3-3.fc38.s390x"
+      "evra": "2023.4-1.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.s390x"
@@ -1111,7 +1111,7 @@
       "evra": "1.16-3.fc38.s390x"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc38.s390x"
+      "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
       "evra": "253.4-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-21T00:00:00Z",
+    "generated": "2023-06-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-18T22:28:49Z"
+        "generated": "2023-06-21T22:59:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-20T00:28:00Z"
+        "generated": "2023-06-23T00:53:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 943aa4edd9..b86ac8165c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.3.1-1.fc38.x86_64"
+      "evra": "6.3.2-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -985,10 +985,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.3-3.fc38.x86_64"
+      "evra": "2023.4-1.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.3-3.fc38.x86_64"
+      "evra": "2023.4-1.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.x86_64"
@@ -1189,7 +1189,7 @@
       "evra": "1.16-3.fc38.x86_64"
     },
     "sudo": {
-      "evra": "1.9.13-1.p2.fc38.x86_64"
+      "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
       "evra": "253.4-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-21T00:00:00Z",
+    "generated": "2023-06-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-18T22:29:40Z"
+        "generated": "2023-06-21T23:00:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-20T00:28:06Z"
+        "generated": "2023-06-23T00:53:15Z"
       }
     }
   }

From 3df83e212d5289212511066c16e98bc457d6b63c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 25 Jun 2023 22:35:33 +0000
Subject: [PATCH 1683/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/627/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3e4fc51a4b..a4bd5bbda3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.15-1.fc38.aarch64"
+      "evra": "32:9.18.16-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.15-1.fc38.noarch"
+      "evra": "32:9.18.16-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.15-1.fc38.aarch64"
+      "evra": "32:9.18.16-1.fc38.aarch64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-1.fc38.aarch64"
+      "evra": "2:4.18.3-3.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-1.fc38.aarch64"
+      "evra": "2:4.18.3-3.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.aarch64"
@@ -1093,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-1.fc38.aarch64"
+      "evra": "2:4.18.3-3.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-1.fc38.noarch"
+      "evra": "2:4.18.3-3.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-1.fc38.aarch64"
+      "evra": "2:4.18.3-3.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1627-1.fc38.noarch"
+      "evra": "2:9.0.1649-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1627-1.fc38.aarch64"
+      "evra": "2:9.0.1649-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-23T00:00:00Z",
+    "generated": "2023-06-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-21T23:00:23Z"
+        "generated": "2023-06-23T22:43:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-23T00:52:57Z"
+        "generated": "2023-06-25T00:45:31Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7f0c59351e..a5707a77bd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -70,13 +70,13 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.15-1.fc38.ppc64le"
+      "evra": "32:9.18.16-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.15-1.fc38.noarch"
+      "evra": "32:9.18.16-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.15-1.fc38.ppc64le"
+      "evra": "32:9.18.16-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
       "evra": "20230515-150.fc38.noarch"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-1.fc38.ppc64le"
+      "evra": "2:4.18.3-3.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-1.fc38.ppc64le"
+      "evra": "2:4.18.3-3.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-1.fc38.ppc64le"
+      "evra": "2:4.18.3-3.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.3-1.fc38.noarch"
+      "evra": "2:4.18.3-3.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-1.fc38.ppc64le"
+      "evra": "2:4.18.3-3.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1627-1.fc38.noarch"
+      "evra": "2:9.0.1649-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1627-1.fc38.ppc64le"
+      "evra": "2:9.0.1649-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-23T00:00:00Z",
+    "generated": "2023-06-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-21T23:00:24Z"
+        "generated": "2023-06-23T22:43:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-23T00:53:03Z"
+        "generated": "2023-06-25T00:45:37Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d091150918..6ff6fe4a66 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.15-1.fc38.s390x"
+      "evra": "32:9.18.16-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.15-1.fc38.noarch"
+      "evra": "32:9.18.16-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.15-1.fc38.s390x"
+      "evra": "32:9.18.16-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
       "evra": "20230515-150.fc38.noarch"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-1.fc38.s390x"
+      "evra": "2:4.18.3-3.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-1.fc38.s390x"
+      "evra": "2:4.18.3-3.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.s390x"
@@ -1024,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-1.fc38.s390x"
+      "evra": "2:4.18.3-3.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.3-1.fc38.noarch"
+      "evra": "2:4.18.3-3.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-1.fc38.s390x"
+      "evra": "2:4.18.3-3.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1627-1.fc38.noarch"
+      "evra": "2:9.0.1649-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1627-1.fc38.s390x"
+      "evra": "2:9.0.1649-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-23T00:00:00Z",
+    "generated": "2023-06-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-21T22:59:48Z"
+        "generated": "2023-06-23T22:42:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-23T00:53:09Z"
+        "generated": "2023-06-25T00:45:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b86ac8165c..fad46b9f9f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.15-1.fc38.x86_64"
+      "evra": "32:9.18.16-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.15-1.fc38.noarch"
+      "evra": "32:9.18.16-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.15-1.fc38.x86_64"
+      "evra": "32:9.18.16-1.fc38.x86_64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-1.fc38.x86_64"
+      "evra": "2:4.18.3-3.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-1.fc38.x86_64"
+      "evra": "2:4.18.3-3.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-1.fc38.x86_64"
+      "evra": "2:4.18.3-3.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-1.fc38.noarch"
+      "evra": "2:4.18.3-3.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-1.fc38.x86_64"
+      "evra": "2:4.18.3-3.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1627-1.fc38.noarch"
+      "evra": "2:9.0.1649-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1627-1.fc38.x86_64"
+      "evra": "2:9.0.1649-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-23T00:00:00Z",
+    "generated": "2023-06-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-21T23:00:37Z"
+        "generated": "2023-06-23T22:44:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-23T00:53:15Z"
+        "generated": "2023-06-25T00:45:49Z"
       }
     }
   }

From b01165105a13026affe3ec489e25e8acf748cf7c Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 26 Jun 2023 14:30:39 -0400
Subject: [PATCH 1684/2157] denylist: remove rpmostree and ostree tests

https://github.com/coreos/fedora-coreos-pipeline/pull/881
will snooze the entire kola-azure cloud test on rawhide for a
month. These tests wont run during that time, they can be removed
---
 kola-denylist.yaml | 21 ---------------------
 1 file changed, 21 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 45e5c867e6..338919f850 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,24 +25,3 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: rpmostree.install-uninstall
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
-  snooze: 2023-07-12
-  platforms:
-    - azure
-  streams:
-    - rawhide
-- pattern: rpmostree.upgrade-rollback
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
-  snooze: 2023-07-12
-  platforms:
-    - azure
-  streams:
-    - rawhide
-- pattern: ostree.hotfix
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1515
-  snooze: 2023-07-12
-  platforms:
-    - azure
-  streams:
-    - rawhide

From d6cafcef57405647623b57792a5824e9bf34ccbe Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Fri, 16 Jun 2023 15:12:12 +0800
Subject: [PATCH 1685/2157] tests: check that we should not find
 `/dev/disk/by-id/google*` device links on non GCP

See https://issues.redhat.com/browse/OCPBUGS-13754
https://github.com/coreos/fedora-coreos-tracker/issues/1475#issuecomment-1551857322
---
 tests/kola/disks/no-google-device-links | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100755 tests/kola/disks/no-google-device-links

diff --git a/tests/kola/disks/no-google-device-links b/tests/kola/disks/no-google-device-links
new file mode 100755
index 0000000000..26538f089d
--- /dev/null
+++ b/tests/kola/disks/no-google-device-links
@@ -0,0 +1,17 @@
+#!/bin/bash
+## kola:
+##   platforms: !gcp
+##   exclusive: false
+##   description: Verify no /dev/disk/by-id/*google* device links are found on non GCP.
+
+# See https://issues.redhat.com/browse/OCPBUGS-13754
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+links=$(find /dev/disk/by-id/ -iname "*google*")
+if [[ -n "${links:-}" ]]; then
+    fatal "Error: should not find /dev/disk/by-id/*google* device links on non GCP"
+fi
+ok "No /dev/disk/by-id/*google* device links are found on non GCP"

From a97b58772a41cbee866b743aaeaaf5a4e75ae316 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 27 Jun 2023 19:15:01 +0000
Subject: [PATCH 1686/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/631/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a4bd5bbda3..2b2cd8149e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -979,10 +979,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.4-1.fc38.aarch64"
+      "evra": "2023.4-2.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.4-1.fc38.aarch64"
+      "evra": "2023.4-2.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-25T00:00:00Z",
+    "generated": "2023-06-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-23T22:43:11Z"
+        "generated": "2023-06-25T22:38:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-25T00:45:31Z"
+        "generated": "2023-06-27T10:33:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a5707a77bd..4acd14ba45 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -973,13 +973,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.4-1.fc38.ppc64le"
+      "evra": "2023.4-2.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.4-1.fc38.ppc64le"
+      "evra": "2023.4-2.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.4-1.fc38.ppc64le"
+      "evra": "2023.4-2.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-25T00:00:00Z",
+    "generated": "2023-06-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-23T22:43:06Z"
+        "generated": "2023-06-25T22:38:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-25T00:45:37Z"
+        "generated": "2023-06-27T10:33:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6ff6fe4a66..f9cb26978e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -907,10 +907,10 @@
       "evra": "1:3.0.9-1.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.4-1.fc38.s390x"
+      "evra": "2023.4-2.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.4-1.fc38.s390x"
+      "evra": "2023.4-2.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-25T00:00:00Z",
+    "generated": "2023-06-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-23T22:42:27Z"
+        "generated": "2023-06-25T22:38:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-25T00:45:43Z"
+        "generated": "2023-06-27T10:33:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fad46b9f9f..8c8173c7ec 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -985,10 +985,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.4-1.fc38.x86_64"
+      "evra": "2023.4-2.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.4-1.fc38.x86_64"
+      "evra": "2023.4-2.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.24.1-6.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-25T00:00:00Z",
+    "generated": "2023-06-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-23T22:44:05Z"
+        "generated": "2023-06-25T22:39:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-25T00:45:49Z"
+        "generated": "2023-06-27T10:33:34Z"
       }
     }
   }

From aeb9855de31da9a610e40fef3da0f2702689cb3d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 27 Jun 2023 21:29:02 -0400
Subject: [PATCH 1687/2157] tests/kola: fix exclusion for gcp platform on
 no-google-device-links test

A "!" at the beginning of an element has a special meaning in YAML [1]
so we need to put it in quotes. While we are here also insert a space
to comply with the future work that will happen as part of [2].

[1] https://stackoverflow.com/questions/9664113/what-does-a-single-exclamation-mark-do-in-yaml
[2] https://github.com/coreos/fedora-coreos-config/issues/2157
---
 tests/kola/disks/no-google-device-links | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/disks/no-google-device-links b/tests/kola/disks/no-google-device-links
index 26538f089d..f31e5f299d 100755
--- a/tests/kola/disks/no-google-device-links
+++ b/tests/kola/disks/no-google-device-links
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   platforms: !gcp
+##   platforms: "! gcp"
 ##   exclusive: false
 ##   description: Verify no /dev/disk/by-id/*google* device links are found on non GCP.
 

From 67bd0f21d2ff9b89955a94d9c1b683d19c03532b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Jun 2023 13:14:39 +0000
Subject: [PATCH 1688/2157] overrides: fast-track kernel-6.3.10-200.fc38

---
 manifest-lock.overrides.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 74a882bd75..98b9180f42 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,30 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 6.3.10-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
+      type: fast-track
+  kernel-core:
+    evr: 6.3.10-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
+      type: fast-track
+  kernel-modules:
+    evr: 6.3.10-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
+      type: fast-track
+  kernel-modules-core:
+    evr: 6.3.10-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 6055d589074bc14efc59d584a83f8925a6ce2602 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Jun 2023 20:45:06 +0000
Subject: [PATCH 1689/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/635/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 54 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 54 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 54 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 54 +++++++++++++++++++-------------------
 4 files changed, 108 insertions(+), 108 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2b2cd8149e..60d28a85de 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.8-200.fc38.aarch64"
+      "evra": "6.3.10-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.8-200.fc38.aarch64"
+      "evra": "6.3.10-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.8-200.fc38.aarch64"
+      "evra": "6.3.10-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.8-200.fc38.aarch64"
+      "evra": "6.3.10-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -646,7 +646,7 @@
       "evra": "1.3.1-53.fc38.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-3.fc38.aarch64"
+      "evra": "2:4.18.3-4.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -775,16 +775,16 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "libstdc++": {
       "evra": "13.1.1-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-3.fc38.aarch64"
+      "evra": "2:4.18.3-4.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-3.fc38.aarch64"
+      "evra": "1.4.1-1.fc38.aarch64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.aarch64"
@@ -1093,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-3.fc38.aarch64"
+      "evra": "2:4.18.3-4.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-3.fc38.noarch"
+      "evra": "2:4.18.3-4.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-3.fc38.aarch64"
+      "evra": "2:4.18.3-4.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1156,31 +1156,31 @@
       "evra": "0.1.4-3.fc38.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-client": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-common": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.0-1.fc38.aarch64"
+      "evra": "2.9.1-1.fc38.aarch64"
     },
     "stalld": {
       "evra": "1.16-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-27T00:00:00Z",
+    "generated": "2023-06-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-25T22:38:50Z"
+        "generated": "2023-06-29T14:40:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-27T10:33:15Z"
+        "generated": "2023-06-29T01:20:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4acd14ba45..8f8f9de81c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.8-200.fc38.ppc64le"
+      "evra": "6.3.10-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.8-200.fc38.ppc64le"
+      "evra": "6.3.10-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.8-200.fc38.ppc64le"
+      "evra": "6.3.10-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.8-200.fc38.ppc64le"
+      "evra": "6.3.10-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -637,7 +637,7 @@
       "evra": "1.3.1-53.fc38.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-3.fc38.ppc64le"
+      "evra": "2:4.18.3-4.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -772,16 +772,16 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libstdc++": {
       "evra": "13.1.1-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-3.fc38.ppc64le"
+      "evra": "2:4.18.3-4.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.ppc64le"
@@ -1087,7 +1087,7 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-3.fc38.ppc64le"
+      "evra": "1.4.1-1.fc38.ppc64le"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-3.fc38.ppc64le"
+      "evra": "2:4.18.3-4.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.3-3.fc38.noarch"
+      "evra": "2:4.18.3-4.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-3.fc38.ppc64le"
+      "evra": "2:4.18.3-4.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1159,31 +1159,31 @@
       "evra": "0.1.4-3.fc38.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.0-1.fc38.ppc64le"
+      "evra": "2.9.1-1.fc38.ppc64le"
     },
     "stalld": {
       "evra": "1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-27T00:00:00Z",
+    "generated": "2023-06-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-25T22:38:21Z"
+        "generated": "2023-06-29T14:38:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-27T10:33:21Z"
+        "generated": "2023-06-29T01:20:53Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f9cb26978e..b3a92cc34b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.8-200.fc38.s390x"
+      "evra": "6.3.10-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.8-200.fc38.s390x"
+      "evra": "6.3.10-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.8-200.fc38.s390x"
+      "evra": "6.3.10-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.8-200.fc38.s390x"
+      "evra": "6.3.10-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -592,7 +592,7 @@
       "evra": "1.3.1-53.fc38.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "libjose": {
       "evra": "11-7.fc38.s390x"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-3.fc38.s390x"
+      "evra": "2:4.18.3-4.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -718,16 +718,16 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "libstdc++": {
       "evra": "13.1.1-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-3.fc38.s390x"
+      "evra": "2:4.18.3-4.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.s390x"
@@ -1012,7 +1012,7 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-3.fc38.s390x"
+      "evra": "1.4.1-1.fc38.s390x"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.s390x"
@@ -1024,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-3.fc38.s390x"
+      "evra": "2:4.18.3-4.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.3-3.fc38.noarch"
+      "evra": "2:4.18.3-4.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-3.fc38.s390x"
+      "evra": "2:4.18.3-4.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1081,31 +1081,31 @@
       "evra": "0.1.4-3.fc38.s390x"
     },
     "sssd-ad": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-client": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-common": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.0-1.fc38.s390x"
+      "evra": "2.9.1-1.fc38.s390x"
     },
     "stalld": {
       "evra": "1.16-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-27T00:00:00Z",
+    "generated": "2023-06-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-25T22:38:09Z"
+        "generated": "2023-06-29T14:38:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-27T10:33:27Z"
+        "generated": "2023-06-29T01:20:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8c8173c7ec..841e7326e2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.8-200.fc38.x86_64"
+      "evra": "6.3.10-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.8-200.fc38.x86_64"
+      "evra": "6.3.10-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.8-200.fc38.x86_64"
+      "evra": "6.3.10-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.8-200.fc38.x86_64"
+      "evra": "6.3.10-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -649,7 +649,7 @@
       "evra": "1.3.1-53.fc38.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "libjcat": {
       "evra": "0.1.13-1.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-3.fc38.x86_64"
+      "evra": "2:4.18.3-4.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -778,16 +778,16 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "libstdc++": {
       "evra": "13.1.1-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-3.fc38.x86_64"
+      "evra": "2:4.18.3-4.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.35-1.fc38.x86_64"
@@ -1087,7 +1087,7 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.0-3.fc38.x86_64"
+      "evra": "1.4.1-1.fc38.x86_64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-3.fc38.x86_64"
+      "evra": "2:4.18.3-4.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-3.fc38.noarch"
+      "evra": "2:4.18.3-4.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-3.fc38.x86_64"
+      "evra": "2:4.18.3-4.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1159,31 +1159,31 @@
       "evra": "0.1.4-3.fc38.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-client": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-common": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.0-1.fc38.x86_64"
+      "evra": "2.9.1-1.fc38.x86_64"
     },
     "stalld": {
       "evra": "1.16-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-27T00:00:00Z",
+    "generated": "2023-06-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-25T22:39:55Z"
+        "generated": "2023-06-29T14:39:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-27T10:33:34Z"
+        "generated": "2023-06-29T01:21:05Z"
       }
     }
   }

From 180bf654bee27ea09769be3eaaa91a13b26672e9 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 29 Jun 2023 12:08:09 -0700
Subject: [PATCH 1690/2157] rootless-pasta-networking: Verify that mtu got set

Change the way we were testing the setting we were making
on the command line did make it into the networking of
the container we created. Now we verify the mtu got set to 1500.
Earlier we assigned 8.8.8.8 as default gateway in container but
no matching address on the same subnet was configured.
Ref: https://github.com/coreos/fedora-coreos-tracker/issues/1509#issuecomment-1608831096
Also, unpinned the passt package since the test should pass against
any version of the package
---
 manifest-lock.overrides.yaml                | 10 ----------
 tests/kola/podman/rootless-pasta-networking |  6 +++---
 2 files changed, 3 insertions(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 98b9180f42..251261128f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -38,16 +38,6 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
-  passt:
-    evr: 0^20230509.g96f8d55-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
-      type: pin
-  passt-selinux:
-    evra: 0^20230509.g96f8d55-1.fc38.noarch
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1509
-      type: pin
   systemd:
     evr: 253.4-1.fc38
     metadata:
diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
index 1cc72c5fc3..25e46495f5 100755
--- a/tests/kola/podman/rootless-pasta-networking
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -18,10 +18,10 @@ set -xeuo pipefail
 runascoreuserscript='#!/bin/bash
 set -euxo pipefail
 # Just a basic test that uses pasta network and sets the gateway
-podman run -i --net=pasta:-g,8.8.8.8 registry.fedoraproject.org/fedora:38 bash <<"EOF"
+podman run -i --net=pasta:--mtu,1500 registry.fedoraproject.org/fedora:38 bash <<"EOF"
 set -euxo pipefail
-# Verify the 8.8.8.8 got set as the gateway. No /sbin/ip so just use /proc/net/route
-cat /proc/net/route | grep 08080808
+# Verify the mtu got set to 1500. No /sbin/ip so just use /sys/class/net/<nic>/mtu
+cat /sys/class/net/e*/mtu | grep 1500
 # Download something from the internet. Here we use one of the test
 # fixtures from the ignition.resource.remote test.
 result=$(curl https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous)

From 76850b6c6ea2d6fc860fb0afb304d19273599416 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Thu, 29 Jun 2023 17:56:38 -0400
Subject: [PATCH 1691/2157] denylist: snooze ext.config.ntp.* tests

ext.config.ntp.chrony.dhcp-propagation &
ext.config.ntp.timesyncd.dhcp-propagation gets times out in rawhide build
see: https://github.com/coreos/fedora-coreos-tracker/issues/1508
---
 kola-denylist.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 338919f850..854880c50a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,3 +25,13 @@
     - ppc64le
   streams:
     - rawhide
+- pattern: ext.config.ntp.chrony.dhcp-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+  snooze: 2023-07-20
+  streams:
+    - rawhide
+- pattern: ext.config.ntp.timesyncd.dhcp-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
+  snooze: 2023-07-20
+  streams:
+    - rawhide

From ccd647bb5a0e0c1da31728ec1240b4c1fca3a385 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 30 Jun 2023 22:27:41 +0000
Subject: [PATCH 1692/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/637/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 60d28a85de..ae553a57e7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.6-1.fc38.aarch64"
+      "evra": "1:1.42.8-1.fc38.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.6-1.fc38.aarch64"
+      "evra": "1:1.42.8-1.fc38.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.6-1.fc38.aarch64"
+      "evra": "1:1.42.8-1.fc38.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.6-1.fc38.aarch64"
+      "evra": "1:1.42.8-1.fc38.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.6-1.fc38.aarch64"
+      "evra": "1:1.42.8-1.fc38.aarch64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230509.g96f8d55-1.fc38.aarch64"
+      "evra": "0^20230625.g32660ce-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+      "evra": "0^20230625.g32660ce-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1075,10 +1075,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.4-2.fc38.aarch64"
+      "evra": "2023.5-1.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.4-2.fc38.aarch64"
+      "evra": "2023.5-1.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-29T00:00:00Z",
+    "generated": "2023-06-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T14:40:03Z"
+        "generated": "2023-06-29T20:47:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-29T01:20:47Z"
+        "generated": "2023-06-30T01:13:56Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8f8f9de81c..873ad3a6bd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.6-1.fc38.ppc64le"
+      "evra": "1:1.42.8-1.fc38.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.6-1.fc38.ppc64le"
+      "evra": "1:1.42.8-1.fc38.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.6-1.fc38.ppc64le"
+      "evra": "1:1.42.8-1.fc38.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.6-1.fc38.ppc64le"
+      "evra": "1:1.42.8-1.fc38.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.6-1.fc38.ppc64le"
+      "evra": "1:1.42.8-1.fc38.ppc64le"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -994,10 +994,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230509.g96f8d55-1.fc38.ppc64le"
+      "evra": "0^20230625.g32660ce-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+      "evra": "0^20230625.g32660ce-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.4-2.fc38.ppc64le"
+      "evra": "2023.5-1.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.4-2.fc38.ppc64le"
+      "evra": "2023.5-1.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-29T00:00:00Z",
+    "generated": "2023-06-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T14:38:34Z"
+        "generated": "2023-06-29T20:48:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-29T01:20:53Z"
+        "generated": "2023-06-30T01:14:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b3a92cc34b..b6576df467 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.6-1.fc38.s390x"
+      "evra": "1:1.42.8-1.fc38.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.6-1.fc38.s390x"
+      "evra": "1:1.42.8-1.fc38.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.6-1.fc38.s390x"
+      "evra": "1:1.42.8-1.fc38.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.6-1.fc38.s390x"
+      "evra": "1:1.42.8-1.fc38.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.6-1.fc38.s390x"
+      "evra": "1:1.42.8-1.fc38.s390x"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -925,10 +925,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230509.g96f8d55-1.fc38.s390x"
+      "evra": "0^20230625.g32660ce-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+      "evra": "0^20230625.g32660ce-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -1003,10 +1003,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.4-2.fc38.s390x"
+      "evra": "2023.5-1.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.4-2.fc38.s390x"
+      "evra": "2023.5-1.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-29T00:00:00Z",
+    "generated": "2023-06-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T14:38:15Z"
+        "generated": "2023-06-29T20:48:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-29T01:20:59Z"
+        "generated": "2023-06-30T01:14:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 841e7326e2..55f6d12f3d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,19 +1,19 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.6-1.fc38.x86_64"
+      "evra": "1:1.42.8-1.fc38.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.6-1.fc38.x86_64"
+      "evra": "1:1.42.8-1.fc38.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.6-1.fc38.x86_64"
+      "evra": "1:1.42.8-1.fc38.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.6-1.fc38.x86_64"
+      "evra": "1:1.42.8-1.fc38.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.6-1.fc38.x86_64"
+      "evra": "1:1.42.8-1.fc38.x86_64"
     },
     "WALinuxAgent-udev": {
       "evra": "2.9.0.4-1.fc38.noarch"
@@ -1003,10 +1003,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230509.g96f8d55-1.fc38.x86_64"
+      "evra": "0^20230625.g32660ce-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230509.g96f8d55-1.fc38.noarch"
+      "evra": "0^20230625.g32660ce-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.4-2.fc38.x86_64"
+      "evra": "2023.5-1.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.4-2.fc38.x86_64"
+      "evra": "2023.5-1.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-29T00:00:00Z",
+    "generated": "2023-06-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T14:39:24Z"
+        "generated": "2023-06-29T20:49:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-29T01:21:05Z"
+        "generated": "2023-06-30T01:14:14Z"
       }
     }
   }

From 7aa09cc08a94970d4d2554f41c4d150634174f39 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 1 Jul 2023 22:36:14 +0000
Subject: [PATCH 1693/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/638/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ae553a57e7..5a750b480c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -235,7 +235,7 @@
       "evra": "0.9.0-10.fc38.aarch64"
     },
     "diffutils": {
-      "evra": "3.9-1.fc38.aarch64"
+      "evra": "3.10-1.fc38.aarch64"
     },
     "dnsmasq": {
       "evra": "2.89-5.fc38.aarch64"
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-30T00:00:00Z",
+    "generated": "2023-07-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T20:47:59Z"
+        "generated": "2023-06-30T22:30:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-30T01:13:56Z"
+        "generated": "2023-07-01T01:36:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 873ad3a6bd..54e7d17cd5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -235,7 +235,7 @@
       "evra": "0.9.0-10.fc38.ppc64le"
     },
     "diffutils": {
-      "evra": "3.9-1.fc38.ppc64le"
+      "evra": "3.10-1.fc38.ppc64le"
     },
     "dnsmasq": {
       "evra": "2.89-5.fc38.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-30T00:00:00Z",
+    "generated": "2023-07-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T20:48:19Z"
+        "generated": "2023-06-30T22:30:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-30T01:14:02Z"
+        "generated": "2023-07-01T01:36:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b6576df467..ffa90fe5ef 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -232,7 +232,7 @@
       "evra": "0.9.0-10.fc38.s390x"
     },
     "diffutils": {
-      "evra": "3.9-1.fc38.s390x"
+      "evra": "3.10-1.fc38.s390x"
     },
     "dnsmasq": {
       "evra": "2.89-5.fc38.s390x"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-30T00:00:00Z",
+    "generated": "2023-07-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T20:48:03Z"
+        "generated": "2023-06-30T22:30:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-30T01:14:08Z"
+        "generated": "2023-07-01T01:37:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 55f6d12f3d..0351ceaab3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -235,7 +235,7 @@
       "evra": "0.9.0-10.fc38.x86_64"
     },
     "diffutils": {
-      "evra": "3.9-1.fc38.x86_64"
+      "evra": "3.10-1.fc38.x86_64"
     },
     "dnsmasq": {
       "evra": "2.89-5.fc38.x86_64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.17-1.fc38.noarch"
+      "evra": "38.20-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-06-30T00:00:00Z",
+    "generated": "2023-07-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-29T20:49:18Z"
+        "generated": "2023-06-30T22:30:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-06-30T01:14:14Z"
+        "generated": "2023-07-01T01:37:08Z"
       }
     }
   }

From 315df4d8d5c2e2e5c4a1a9af0d9f982ab4b2aab0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 2 Jul 2023 22:29:54 +0000
Subject: [PATCH 1694/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/639/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5a750b480c..84c6bae9dc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -661,7 +661,7 @@
       "evra": "1.4.0-5.fc38.aarch64"
     },
     "libksba": {
-      "evra": "1.6.3-2.fc38.aarch64"
+      "evra": "1.6.4-1.fc38.aarch64"
     },
     "libldb": {
       "evra": "2.7.2-1.fc38.aarch64"
@@ -739,7 +739,7 @@
       "evra": "1.15.1-2.fc38.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.10-1.fc38.noarch"
+      "evra": "2.17.11-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.aarch64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1649-1.fc38.noarch"
+      "evra": "2:9.0.1671-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1649-1.fc38.aarch64"
+      "evra": "2:9.0.1671-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-01T00:00:00Z",
+    "generated": "2023-07-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-30T22:30:03Z"
+        "generated": "2023-07-01T22:38:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-01T01:36:47Z"
+        "generated": "2023-07-02T00:59:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 54e7d17cd5..a9f421cbc9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -652,7 +652,7 @@
       "evra": "1.4.0-5.fc38.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.3-2.fc38.ppc64le"
+      "evra": "1.6.4-1.fc38.ppc64le"
     },
     "libldb": {
       "evra": "2.7.2-1.fc38.ppc64le"
@@ -730,7 +730,7 @@
       "evra": "1.15.1-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.10-1.fc38.noarch"
+      "evra": "2.17.11-1.fc38.noarch"
     },
     "librtas": {
       "evra": "2.0.4-1.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1649-1.fc38.noarch"
+      "evra": "2:9.0.1671-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1649-1.fc38.ppc64le"
+      "evra": "2:9.0.1671-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-01T00:00:00Z",
+    "generated": "2023-07-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-30T22:30:18Z"
+        "generated": "2023-07-01T22:38:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-01T01:36:56Z"
+        "generated": "2023-07-02T01:00:00Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ffa90fe5ef..808a9288e0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -604,7 +604,7 @@
       "evra": "1.4.0-5.fc38.s390x"
     },
     "libksba": {
-      "evra": "1.6.3-2.fc38.s390x"
+      "evra": "1.6.4-1.fc38.s390x"
     },
     "libldb": {
       "evra": "2.7.2-1.fc38.s390x"
@@ -682,7 +682,7 @@
       "evra": "1.15.1-2.fc38.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.10-1.fc38.noarch"
+      "evra": "2.17.11-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1649-1.fc38.noarch"
+      "evra": "2:9.0.1671-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1649-1.fc38.s390x"
+      "evra": "2:9.0.1671-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-01T00:00:00Z",
+    "generated": "2023-07-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-30T22:30:21Z"
+        "generated": "2023-07-01T22:38:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-01T01:37:02Z"
+        "generated": "2023-07-02T01:00:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0351ceaab3..8054f4c190 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -664,7 +664,7 @@
       "evra": "1.4.0-5.fc38.x86_64"
     },
     "libksba": {
-      "evra": "1.6.3-2.fc38.x86_64"
+      "evra": "1.6.4-1.fc38.x86_64"
     },
     "libldb": {
       "evra": "2.7.2-1.fc38.x86_64"
@@ -742,7 +742,7 @@
       "evra": "1.15.1-2.fc38.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.10-1.fc38.noarch"
+      "evra": "2.17.11-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1649-1.fc38.noarch"
+      "evra": "2:9.0.1671-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1649-1.fc38.x86_64"
+      "evra": "2:9.0.1671-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-01T00:00:00Z",
+    "generated": "2023-07-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-06-30T22:30:18Z"
+        "generated": "2023-07-01T22:39:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-01T01:37:08Z"
+        "generated": "2023-07-02T01:00:12Z"
       }
     }
   }

From a6bf9a0cd98718f37d4428944ac92f1a3a1daf0b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 3 Jul 2023 22:37:35 +0000
Subject: [PATCH 1695/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/640/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 84c6bae9dc..fb8b8d7510 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -550,7 +550,7 @@
       "evra": "20190702-2.fc38.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.5-6.fc38.aarch64"
+      "evra": "2.5.6-1.fc38.aarch64"
     },
     "libatomic": {
       "evra": "13.1.1-4.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-02T00:00:00Z",
+    "generated": "2023-07-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-01T22:38:54Z"
+        "generated": "2023-07-02T22:32:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-02T00:59:54Z"
+        "generated": "2023-07-03T01:20:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a9f421cbc9..c4b6e2ebc9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -541,7 +541,7 @@
       "evra": "20190702-2.fc38.ppc64le"
     },
     "libassuan": {
-      "evra": "2.5.5-6.fc38.ppc64le"
+      "evra": "2.5.6-1.fc38.ppc64le"
     },
     "libatomic": {
       "evra": "13.1.1-4.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-02T00:00:00Z",
+    "generated": "2023-07-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-01T22:38:37Z"
+        "generated": "2023-07-02T22:31:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-02T01:00:00Z"
+        "generated": "2023-07-03T01:20:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 808a9288e0..deee30b376 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -508,7 +508,7 @@
       "evra": "20190702-2.fc38.s390x"
     },
     "libassuan": {
-      "evra": "2.5.5-6.fc38.s390x"
+      "evra": "2.5.6-1.fc38.s390x"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-02T00:00:00Z",
+    "generated": "2023-07-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-01T22:38:16Z"
+        "generated": "2023-07-02T22:32:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-02T01:00:06Z"
+        "generated": "2023-07-03T01:21:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8054f4c190..a46ff9372b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -556,7 +556,7 @@
       "evra": "20190702-2.fc38.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.5-6.fc38.x86_64"
+      "evra": "2.5.6-1.fc38.x86_64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-02T00:00:00Z",
+    "generated": "2023-07-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-01T22:39:07Z"
+        "generated": "2023-07-02T22:32:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-02T01:00:12Z"
+        "generated": "2023-07-03T01:21:11Z"
       }
     }
   }

From ef51c986b96c623ac31abe64f910b4a2c885e241 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 4 Jul 2023 22:40:12 +0000
Subject: [PATCH 1696/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/641/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fb8b8d7510..4629c89ad4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -280,7 +280,7 @@
       "evra": "0.189-2.fc38.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.3-1.fc38.aarch64"
+      "evra": "2:6.4-1.fc38.aarch64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-03T00:00:00Z",
+    "generated": "2023-07-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-02T22:32:17Z"
+        "generated": "2023-07-03T22:40:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-03T01:20:53Z"
+        "generated": "2023-07-04T01:25:22Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c4b6e2ebc9..e0e7695065 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -271,7 +271,7 @@
       "evra": "0.189-2.fc38.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.3-1.fc38.ppc64le"
+      "evra": "2:6.4-1.fc38.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-03T00:00:00Z",
+    "generated": "2023-07-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-02T22:31:56Z"
+        "generated": "2023-07-03T22:40:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-03T01:20:59Z"
+        "generated": "2023-07-04T01:25:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index deee30b376..6f2c6a0f82 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -268,7 +268,7 @@
       "evra": "0.189-2.fc38.s390x"
     },
     "ethtool": {
-      "evra": "2:6.3-1.fc38.s390x"
+      "evra": "2:6.4-1.fc38.s390x"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-03T00:00:00Z",
+    "generated": "2023-07-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-02T22:32:11Z"
+        "generated": "2023-07-03T22:40:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-03T01:21:05Z"
+        "generated": "2023-07-04T01:25:35Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a46ff9372b..07483f9509 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -280,7 +280,7 @@
       "evra": "0.189-2.fc38.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.3-1.fc38.x86_64"
+      "evra": "2:6.4-1.fc38.x86_64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-03T00:00:00Z",
+    "generated": "2023-07-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-02T22:32:30Z"
+        "generated": "2023-07-03T22:41:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-03T01:21:11Z"
+        "generated": "2023-07-04T01:25:41Z"
       }
     }
   }

From 2a02765f5a888ee604fb93086e926a7e2f941e7f Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 5 Jul 2023 11:02:03 -0700
Subject: [PATCH 1697/2157] denylist: Snooze kdump.crash in ppc64le for rawhide

Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1523
---
 kola-denylist.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 854880c50a..bb9ddcc0ff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,6 +18,13 @@
   snooze: 2023-07-12
   arches:
     - aarch64
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1523
+  snooze: 2023-07-20
+  arches:
+    - ppc64le
+  streams:
+    - rawhide
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
   snooze: 2023-07-12

From 106c6cfb2efd221dc61a6153b97bf3058457f6cb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 6 Jul 2023 22:33:43 +0000
Subject: [PATCH 1698/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/643/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4629c89ad4..86ef65ec6d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -430,7 +430,7 @@
       "evra": "56-3.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.aarch64"
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.aarch64"
@@ -901,7 +901,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -949,7 +949,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.aarch64"
@@ -1063,7 +1063,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-04T00:00:00Z",
+    "generated": "2023-07-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-03T22:40:31Z"
+        "generated": "2023-07-04T22:42:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-04T01:25:22Z"
+        "generated": "2023-07-06T02:10:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e0e7695065..bbc552ed0c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -79,7 +79,7 @@
       "evra": "32:9.18.16-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -421,7 +421,7 @@
       "evra": "56-3.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.ppc64le"
@@ -853,10 +853,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.ppc64le"
@@ -895,7 +895,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -943,7 +943,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.ppc64le"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-04T00:00:00Z",
+    "generated": "2023-07-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-03T22:40:27Z"
+        "generated": "2023-07-04T22:42:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-04T01:25:28Z"
+        "generated": "2023-07-06T02:10:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6f2c6a0f82..12c5f7bffa 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -76,7 +76,7 @@
       "evra": "32:9.18.16-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -391,7 +391,7 @@
       "evra": "56-3.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.s390x"
@@ -793,10 +793,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.s390x"
@@ -835,7 +835,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -880,7 +880,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.s390x"
@@ -991,7 +991,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-04T00:00:00Z",
+    "generated": "2023-07-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-03T22:40:37Z"
+        "generated": "2023-07-04T22:42:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-04T01:25:35Z"
+        "generated": "2023-07-06T02:10:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 07483f9509..364f9864d4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,10 @@
       "evra": "1.24-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -436,7 +436,7 @@
       "evra": "56-3.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.x86_64"
@@ -859,10 +859,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.30-1.fc38.x86_64"
@@ -907,7 +907,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -955,7 +955,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230515-150.fc38.noarch"
+      "evra": "20230625-151.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-04T00:00:00Z",
+    "generated": "2023-07-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-03T22:41:13Z"
+        "generated": "2023-07-04T22:43:02Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-04T01:25:41Z"
+        "generated": "2023-07-06T02:10:46Z"
       }
     }
   }

From ce1b9980988caaa393b6e8ed05d39db622df3404 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 7 Jul 2023 00:18:33 +0000
Subject: [PATCH 1699/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 24 ------------------------
 1 file changed, 24 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 251261128f..fae8596b9b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,30 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.3.10-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
-      type: fast-track
-  kernel-core:
-    evr: 6.3.10-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
-      type: fast-track
-  kernel-modules:
-    evr: 6.3.10-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
-      type: fast-track
-  kernel-modules-core:
-    evr: 6.3.10-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5fdf0dd9fe
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1511
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From bab9f9e65ee0f6295a52fc844d4bab7dde90ca75 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 7 Jul 2023 22:33:27 +0000
Subject: [PATCH 1700/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/644/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 86ef65ec6d..c1697f8956 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -271,13 +271,13 @@
       "evra": "38-7.fc38.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-2.fc38.noarch"
+      "evra": "0.189-3.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-2.fc38.aarch64"
+      "evra": "0.189-3.fc38.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.189-2.fc38.aarch64"
+      "evra": "0.189-3.fc38.aarch64"
     },
     "ethtool": {
       "evra": "2:6.4-1.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.10-200.fc38.aarch64"
+      "evra": "6.3.11-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.10-200.fc38.aarch64"
+      "evra": "6.3.11-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.10-200.fc38.aarch64"
+      "evra": "6.3.11-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.10-200.fc38.aarch64"
+      "evra": "6.3.11-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-4.fc38.aarch64"
+      "evra": "2:4.18.4-0.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,10 +835,10 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-4.fc38.aarch64"
+      "evra": "2:4.18.4-0.fc38.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.35-1.fc38.aarch64"
+      "evra": "4.4.36-1.fc38.aarch64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.aarch64"
@@ -1093,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-4.fc38.aarch64"
+      "evra": "2:4.18.4-0.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-4.fc38.noarch"
+      "evra": "2:4.18.4-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-4.fc38.aarch64"
+      "evra": "2:4.18.4-0.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-06T00:00:00Z",
+    "generated": "2023-07-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-04T22:42:52Z"
+        "generated": "2023-07-06T22:38:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-06T02:10:28Z"
+        "generated": "2023-07-07T01:20:55Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bbc552ed0c..f758d35f63 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -262,13 +262,13 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-2.fc38.noarch"
+      "evra": "0.189-3.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-2.fc38.ppc64le"
+      "evra": "0.189-3.fc38.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.189-2.fc38.ppc64le"
+      "evra": "0.189-3.fc38.ppc64le"
     },
     "ethtool": {
       "evra": "2:6.4-1.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.10-200.fc38.ppc64le"
+      "evra": "6.3.11-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.10-200.fc38.ppc64le"
+      "evra": "6.3.11-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.10-200.fc38.ppc64le"
+      "evra": "6.3.11-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.10-200.fc38.ppc64le"
+      "evra": "6.3.11-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-4.fc38.ppc64le"
+      "evra": "2:4.18.4-0.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,10 +832,10 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-4.fc38.ppc64le"
+      "evra": "2:4.18.4-0.fc38.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.35-1.fc38.ppc64le"
+      "evra": "4.4.36-1.fc38.ppc64le"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-4.fc38.ppc64le"
+      "evra": "2:4.18.4-0.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.3-4.fc38.noarch"
+      "evra": "2:4.18.4-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-4.fc38.ppc64le"
+      "evra": "2:4.18.4-0.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-06T00:00:00Z",
+    "generated": "2023-07-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-04T22:42:11Z"
+        "generated": "2023-07-06T22:37:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-06T02:10:34Z"
+        "generated": "2023-07-07T01:21:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 12c5f7bffa..6af6badf27 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -259,13 +259,13 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-2.fc38.noarch"
+      "evra": "0.189-3.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-2.fc38.s390x"
+      "evra": "0.189-3.fc38.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.189-2.fc38.s390x"
+      "evra": "0.189-3.fc38.s390x"
     },
     "ethtool": {
       "evra": "2:6.4-1.fc38.s390x"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.10-200.fc38.s390x"
+      "evra": "6.3.11-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.10-200.fc38.s390x"
+      "evra": "6.3.11-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.10-200.fc38.s390x"
+      "evra": "6.3.11-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.10-200.fc38.s390x"
+      "evra": "6.3.11-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-4.fc38.s390x"
+      "evra": "2:4.18.4-0.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,10 +775,10 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-4.fc38.s390x"
+      "evra": "2:4.18.4-0.fc38.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.35-1.fc38.s390x"
+      "evra": "4.4.36-1.fc38.s390x"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.s390x"
@@ -1024,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-4.fc38.s390x"
+      "evra": "2:4.18.4-0.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.3-4.fc38.noarch"
+      "evra": "2:4.18.4-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-4.fc38.s390x"
+      "evra": "2:4.18.4-0.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-06T00:00:00Z",
+    "generated": "2023-07-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-04T22:42:32Z"
+        "generated": "2023-07-06T22:37:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-06T02:10:40Z"
+        "generated": "2023-07-07T01:21:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 364f9864d4..4328f4935b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -271,13 +271,13 @@
       "evra": "38-7.fc38.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-2.fc38.noarch"
+      "evra": "0.189-3.fc38.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-2.fc38.x86_64"
+      "evra": "0.189-3.fc38.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.189-2.fc38.x86_64"
+      "evra": "0.189-3.fc38.x86_64"
     },
     "ethtool": {
       "evra": "2:6.4-1.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.10-200.fc38.x86_64"
+      "evra": "6.3.11-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.10-200.fc38.x86_64"
+      "evra": "6.3.11-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.10-200.fc38.x86_64"
+      "evra": "6.3.11-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.10-200.fc38.x86_64"
+      "evra": "6.3.11-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.3-4.fc38.x86_64"
+      "evra": "2:4.18.4-0.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,10 +838,10 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.3-4.fc38.x86_64"
+      "evra": "2:4.18.4-0.fc38.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.35-1.fc38.x86_64"
+      "evra": "4.4.36-1.fc38.x86_64"
     },
     "libxml2": {
       "evra": "2.10.4-1.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.3-4.fc38.x86_64"
+      "evra": "2:4.18.4-0.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.3-4.fc38.noarch"
+      "evra": "2:4.18.4-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.3-4.fc38.x86_64"
+      "evra": "2:4.18.4-0.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-06T00:00:00Z",
+    "generated": "2023-07-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-04T22:43:02Z"
+        "generated": "2023-07-06T22:38:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-06T02:10:46Z"
+        "generated": "2023-07-07T01:21:13Z"
       }
     }
   }

From 4445923b87dd3e0d7ca324661742fb4c4ae7fb6c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 9 Jul 2023 08:00:20 +0000
Subject: [PATCH 1701/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/646/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c1697f8956..e50210e593 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.6.0-1.fc38.aarch64"
+      "evra": "1.7.0-1.fc38.aarch64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.aarch64"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.218.0-1.fc38.noarch"
+      "evra": "2:2.219.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -691,7 +691,7 @@
       "evra": "1.2-7.fc38.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-7.fc38.aarch64"
+      "evra": "1.0.9-1.fc38.aarch64"
     },
     "libnfnetlink": {
       "evra": "1.0.1-23.fc38.aarch64"
@@ -922,7 +922,7 @@
       "evra": "2.0-0.65.20160912git.fc38.aarch64"
     },
     "netavark": {
-      "evra": "1.6.0-2.fc38.aarch64"
+      "evra": "1.7.0-1.fc38.aarch64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-07T00:00:00Z",
+    "generated": "2023-07-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-06T22:38:21Z"
+        "generated": "2023-07-07T22:37:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-07T01:20:55Z"
+        "generated": "2023-07-09T02:13:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f758d35f63..1c7f0c69d2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.6.0-1.fc38.ppc64le"
+      "evra": "1.7.0-1.fc38.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.ppc64le"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.218.0-1.fc38.noarch"
+      "evra": "2:2.219.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -682,7 +682,7 @@
       "evra": "1.2-7.fc38.ppc64le"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-7.fc38.ppc64le"
+      "evra": "1.0.9-1.fc38.ppc64le"
     },
     "libnfnetlink": {
       "evra": "1.0.1-23.fc38.ppc64le"
@@ -916,7 +916,7 @@
       "evra": "2.0-0.65.20160912git.fc38.ppc64le"
     },
     "netavark": {
-      "evra": "1.6.0-2.fc38.ppc64le"
+      "evra": "1.7.0-1.fc38.ppc64le"
     },
     "nettle": {
       "evra": "3.8-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-07T00:00:00Z",
+    "generated": "2023-07-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-06T22:37:59Z"
+        "generated": "2023-07-07T22:36:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-07T01:21:01Z"
+        "generated": "2023-07-09T02:13:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6af6badf27..a5853949e9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.6.0-1.fc38.s390x"
+      "evra": "1.7.0-1.fc38.s390x"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.s390x"
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.218.0-1.fc38.noarch"
+      "evra": "2:2.219.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -634,7 +634,7 @@
       "evra": "1.2-7.fc38.s390x"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-7.fc38.s390x"
+      "evra": "1.0.9-1.fc38.s390x"
     },
     "libnfnetlink": {
       "evra": "1.0.1-23.fc38.s390x"
@@ -856,7 +856,7 @@
       "evra": "2.0-0.65.20160912git.fc38.s390x"
     },
     "netavark": {
-      "evra": "1.6.0-2.fc38.s390x"
+      "evra": "1.7.0-1.fc38.s390x"
     },
     "nettle": {
       "evra": "3.8-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-07T00:00:00Z",
+    "generated": "2023-07-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-06T22:37:49Z"
+        "generated": "2023-07-07T22:36:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-07T01:21:07Z"
+        "generated": "2023-07-09T02:13:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4328f4935b..c4d2c49113 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.6.0-1.fc38.x86_64"
+      "evra": "1.7.0-1.fc38.x86_64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.x86_64"
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.218.0-1.fc38.noarch"
+      "evra": "2:2.219.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -694,7 +694,7 @@
       "evra": "1.2-7.fc38.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.8-7.fc38.x86_64"
+      "evra": "1.0.9-1.fc38.x86_64"
     },
     "libnfnetlink": {
       "evra": "1.0.1-23.fc38.x86_64"
@@ -928,7 +928,7 @@
       "evra": "2.0-0.65.20160912git.fc38.x86_64"
     },
     "netavark": {
-      "evra": "1.6.0-2.fc38.x86_64"
+      "evra": "1.7.0-1.fc38.x86_64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-07T00:00:00Z",
+    "generated": "2023-07-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-06T22:38:44Z"
+        "generated": "2023-07-07T22:38:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-07T01:21:13Z"
+        "generated": "2023-07-09T02:13:58Z"
       }
     }
   }

From 2b94925311d67b4cc5dc80b3855ae05ae3b7e4c1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 10 Jul 2023 23:42:28 +0000
Subject: [PATCH 1702/2157] overrides: fast-track ignition-2.16.1-1.fc38

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fae8596b9b..5fdbe2a8a5 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,11 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  ignition:
+    evr: 2.16.1-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-da6c2bd4c5
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 44da178f7d67a6091861b1069bb01f4f8642a62a Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Wed, 12 Jul 2023 13:50:40 -0400
Subject: [PATCH 1703/2157] Revert "overrides: fast-track
 ignition-2.16.1-1.fc38"

It breaks the build on ppc64le and s390x.

This reverts commit 2b94925311d67b4cc5dc80b3855ae05ae3b7e4c1.
---
 manifest-lock.overrides.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5fdbe2a8a5..fae8596b9b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,11 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  ignition:
-    evr: 2.16.1-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-da6c2bd4c5
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 469f63f52bda2a28cdd7f2b0724a289db840d80c Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 12 Jul 2023 11:39:47 -0700
Subject: [PATCH 1704/2157] denylist: extend snooze for ext.config.kdump.crash
 on aarch64 This still isn't fixed upstream.

---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index bb9ddcc0ff..f82815ec8f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-07-12
+  snooze: 2023-08-02
   arches:
     - aarch64
 - pattern: ext.config.kdump.crash

From 7d55f00b9546c404fad1d26c867206da203d85b6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 12 Jul 2023 22:19:36 +0000
Subject: [PATCH 1705/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/650/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e50210e593..8547c1d200 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.3-1.fc38.aarch64"
+      "evra": "2.76.4-1.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.aarch64"
@@ -427,7 +427,7 @@
       "evra": "2.15.0-3.fc38.aarch64"
     },
     "inih": {
-      "evra": "56-3.fc38.aarch64"
+      "evra": "57-1.fc38.aarch64"
     },
     "intel-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.11-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.11-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.11-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.11-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -532,7 +532,7 @@
       "evra": "0.9.4-2.fc38.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.20.1-8.fc38.aarch64"
+      "evra": "1.21-2.fc38.aarch64"
     },
     "less": {
       "evra": "633-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-09T00:00:00Z",
+    "generated": "2023-07-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-07T22:37:07Z"
+        "generated": "2023-07-09T08:05:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-09T02:13:40Z"
+        "generated": "2023-07-12T01:14:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1c7f0c69d2..1c8c6f6d57 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -364,7 +364,7 @@
       "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.3-1.fc38.ppc64le"
+      "evra": "2.76.4-1.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-4.fc38.ppc64le"
@@ -418,7 +418,7 @@
       "evra": "2.15.0-3.fc38.ppc64le"
     },
     "inih": {
-      "evra": "56-3.fc38.ppc64le"
+      "evra": "57-1.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.11-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.11-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.11-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.11-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -523,7 +523,7 @@
       "evra": "0.9.4-2.fc38.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.20.1-8.fc38.ppc64le"
+      "evra": "1.21-2.fc38.ppc64le"
     },
     "less": {
       "evra": "633-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-09T00:00:00Z",
+    "generated": "2023-07-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-07T22:36:40Z"
+        "generated": "2023-07-09T08:04:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-09T02:13:46Z"
+        "generated": "2023-07-12T01:14:50Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a5853949e9..eb1ed916c1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -349,7 +349,7 @@
       "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.3-1.fc38.s390x"
+      "evra": "2.76.4-1.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-4.fc38.s390x"
@@ -388,7 +388,7 @@
       "evra": "2.15.0-3.fc38.s390x"
     },
     "inih": {
-      "evra": "56-3.fc38.s390x"
+      "evra": "57-1.fc38.s390x"
     },
     "intel-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.11-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.11-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.11-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.11-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -490,7 +490,7 @@
       "evra": "0.9.4-2.fc38.s390x"
     },
     "krb5-libs": {
-      "evra": "1.20.1-8.fc38.s390x"
+      "evra": "1.21-2.fc38.s390x"
     },
     "less": {
       "evra": "633-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-09T00:00:00Z",
+    "generated": "2023-07-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-07T22:36:27Z"
+        "generated": "2023-07-09T08:04:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-09T02:13:52Z"
+        "generated": "2023-07-12T01:14:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c4d2c49113..380be79427 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.3-1.fc38.x86_64"
+      "evra": "2.76.4-1.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.x86_64"
@@ -433,7 +433,7 @@
       "evra": "2.15.0-3.fc38.x86_64"
     },
     "inih": {
-      "evra": "56-3.fc38.x86_64"
+      "evra": "57-1.fc38.x86_64"
     },
     "intel-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.11-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.11-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.11-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.11-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -538,7 +538,7 @@
       "evra": "0.9.4-2.fc38.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.20.1-8.fc38.x86_64"
+      "evra": "1.21-2.fc38.x86_64"
     },
     "less": {
       "evra": "633-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-09T00:00:00Z",
+    "generated": "2023-07-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-07T22:38:23Z"
+        "generated": "2023-07-09T08:04:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-09T02:13:58Z"
+        "generated": "2023-07-12T01:15:02Z"
       }
     }
   }

From 1798f8cf366272827dd0a59ecd37fd4fc7278f9c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 12 Jul 2023 22:21:10 +0000
Subject: [PATCH 1706/2157] overrides: fast-track ignition-2.16.2-1.fc38

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fae8596b9b..d17f6d7740 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,11 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  ignition:
+    evr: 2.16.2-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-890581292c
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From cb05c2f3a527c787045fe728d7a1005136f293bd Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 13 Jul 2023 22:36:03 +0000
Subject: [PATCH 1707/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/651/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8547c1d200..ffec4782e8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -424,7 +424,7 @@
       "evra": "3.23-8.fc38.aarch64"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc38.aarch64"
+      "evra": "2.16.2-1.fc38.aarch64"
     },
     "inih": {
       "evra": "57-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-12T00:00:00Z",
+    "generated": "2023-07-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-09T08:05:16Z"
+        "generated": "2023-07-13T16:52:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-12T01:14:43Z"
+        "generated": "2023-07-13T01:17:26Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1c8c6f6d57..004c604df2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -415,7 +415,7 @@
       "evra": "3.23-8.fc38.ppc64le"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc38.ppc64le"
+      "evra": "2.16.2-1.fc38.ppc64le"
     },
     "inih": {
       "evra": "57-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-12T00:00:00Z",
+    "generated": "2023-07-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-09T08:04:29Z"
+        "generated": "2023-07-13T16:52:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-12T01:14:50Z"
+        "generated": "2023-07-13T01:17:32Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index eb1ed916c1..3a5047bd77 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -385,7 +385,7 @@
       "evra": "3.23-8.fc38.s390x"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc38.s390x"
+      "evra": "2.16.2-1.fc38.s390x"
     },
     "inih": {
       "evra": "57-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-12T00:00:00Z",
+    "generated": "2023-07-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-09T08:04:25Z"
+        "generated": "2023-07-13T16:52:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-12T01:14:56Z"
+        "generated": "2023-07-13T01:17:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 380be79427..e705848e57 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -430,7 +430,7 @@
       "evra": "3.23-8.fc38.x86_64"
     },
     "ignition": {
-      "evra": "2.15.0-3.fc38.x86_64"
+      "evra": "2.16.2-1.fc38.x86_64"
     },
     "inih": {
       "evra": "57-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-12T00:00:00Z",
+    "generated": "2023-07-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-09T08:04:53Z"
+        "generated": "2023-07-13T16:53:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-12T01:15:02Z"
+        "generated": "2023-07-13T01:17:44Z"
       }
     }
   }

From 50c2a6f1b710ebaf5b4d39e4a421b332b37dcee3 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 13 Jul 2023 15:44:12 -0700
Subject: [PATCH 1708/2157] denylist: Snooze ext.config.extensions.module in
 rawhide

Ref issue: https://github.com/coreos/fedora-coreos-tracker/issues/1526
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f82815ec8f..d1aa92b354 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -42,3 +42,8 @@
   snooze: 2023-07-20
   streams:
     - rawhide
+- pattern: ext.config.extensions.module
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1526
+  snooze: 2023-08-02
+  streams:
+    - rawhide

From faeb110ded0ab2cf38dd17d320698ef9f96bff5b Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 14 Jul 2023 12:01:54 -0400
Subject: [PATCH 1709/2157] denylist: bump snooze for
 ext.config.root-reprovision.*

These tests are still failing in rawhide `ppc64le` builds.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1489
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d1aa92b354..9b40aec367 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -27,7 +27,7 @@
     - rawhide
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-07-12
+  snooze: 2023-08-04
   arches:
     - ppc64le
   streams:

From 8559fe9628057039977512b0b0eb875f093e5ec0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 14 Jul 2023 22:32:43 +0000
Subject: [PATCH 1710/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/652/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ffec4782e8..45be373390 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -862,7 +862,7 @@
       "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc38.aarch64"
+      "evra": "0.9.31-1.fc38.aarch64"
     },
     "logrotate": {
       "evra": "3.21.0-2.fc38.aarch64"
@@ -1277,7 +1277,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-13T00:00:00Z",
+    "generated": "2023-07-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1286,7 +1286,7 @@
         "generated": "2023-07-13T16:52:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-13T01:17:26Z"
+        "generated": "2023-07-14T02:31:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 004c604df2..3f88ce67c0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -859,7 +859,7 @@
       "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc38.ppc64le"
+      "evra": "0.9.31-1.fc38.ppc64le"
     },
     "logrotate": {
       "evra": "3.21.0-2.fc38.ppc64le"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-13T00:00:00Z",
+    "generated": "2023-07-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-07-13T16:52:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-13T01:17:32Z"
+        "generated": "2023-07-14T02:31:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3a5047bd77..8b857ac553 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -799,7 +799,7 @@
       "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc38.s390x"
+      "evra": "0.9.31-1.fc38.s390x"
     },
     "logrotate": {
       "evra": "3.21.0-2.fc38.s390x"
@@ -1205,7 +1205,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-13T00:00:00Z",
+    "generated": "2023-07-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1214,7 +1214,7 @@
         "generated": "2023-07-13T16:52:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-13T01:17:38Z"
+        "generated": "2023-07-14T02:31:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e705848e57..568e3ca085 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -865,7 +865,7 @@
       "evra": "20230625-151.fc38.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.30-1.fc38.x86_64"
+      "evra": "0.9.31-1.fc38.x86_64"
     },
     "logrotate": {
       "evra": "3.21.0-2.fc38.x86_64"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-13T00:00:00Z",
+    "generated": "2023-07-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-07-13T16:53:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-13T01:17:44Z"
+        "generated": "2023-07-14T02:31:37Z"
       }
     }
   }

From ff1a0472ccb3a16141b4638b799092c1210c72d0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 14 Jul 2023 16:22:08 -0400
Subject: [PATCH 1711/2157] Drop modularity support/tests

In Fedora 39 modularity is going away [1]. Let's drop the repos for F39+
and also drop the test that we have. We do still want to test installing
crio works so let's add crio to the ext.config.extensions.package test.

We also drop the repos as input to the build here. They were never used
for actual RPM content anyway.

[1] https://fedoraproject.org/wiki/Changes/RetireModularity
---
 fedora-next.repo                    | 37 --------------------------
 fedora.repo                         | 37 --------------------------
 manifests/fedora-coreos.yaml        |  8 +++---
 manifests/fedora-repos-modular.yaml |  4 +++
 tests/kola/extensions/module        | 40 -----------------------------
 tests/kola/extensions/package       |  1 +
 6 files changed, 10 insertions(+), 117 deletions(-)
 create mode 100644 manifests/fedora-repos-modular.yaml
 delete mode 100755 tests/kola/extensions/module

diff --git a/fedora-next.repo b/fedora-next.repo
index a7bb4a23d5..b7cc9bc78d 100644
--- a/fedora-next.repo
+++ b/fedora-next.repo
@@ -37,40 +37,3 @@ gpgcheck=1
 metadata_expire=6h
 gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
 skip_if_unavailable=False
-
-[fedora-next-modular]
-name=Fedora Modular $releasever - $basearch
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/development/$releasever/Modular/$basearch/os/
-        https://dl.fedoraproject.org/pub/fedora-secondary/development/$releasever/Modular/$basearch/os/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-$releasever&arch=$basearch
-enabled=1
-#metadata_expire=7d
-repo_gpgcheck=0
-type=rpm
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-
-[fedora-next-updates-modular]
-name=Fedora Modular $releasever - $basearch - Updates
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Modular/$basearch/
-        https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Modular/$basearch/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-modular-f$releasever&arch=$basearch
-enabled=1
-repo_gpgcheck=0
-type=rpm
-gpgcheck=1
-metadata_expire=6h
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-
-[fedora-next-updates-testing-modular]
-name=Fedora Modular $releasever - $basearch - Test Updates
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Modular/$basearch/
-        https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Modular/$basearch/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
-enabled=1
-gpgcheck=1
-metadata_expire=6h
-gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
-skip_if_unavailable=False
diff --git a/fedora.repo b/fedora.repo
index c4bc1c81bd..4b1fdd7f99 100644
--- a/fedora.repo
+++ b/fedora.repo
@@ -37,40 +37,3 @@ gpgcheck=1
 metadata_expire=6h
 gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
 skip_if_unavailable=False
-
-[fedora-modular]
-name=Fedora Modular $releasever - $basearch
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/$releasever/Modular/$basearch/os/
-        https://dl.fedoraproject.org/pub/fedora-secondary/releases/$releasever/Modular/$basearch/os/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-$releasever&arch=$basearch
-enabled=1
-#metadata_expire=7d
-repo_gpgcheck=0
-type=rpm
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-
-[fedora-updates-modular]
-name=Fedora Modular $releasever - $basearch - Updates
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Modular/$basearch/
-        https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Modular/$basearch/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-modular-f$releasever&arch=$basearch
-enabled=1
-repo_gpgcheck=0
-type=rpm
-gpgcheck=1
-metadata_expire=6h
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-
-[fedora-updates-testing-modular]
-name=Fedora Modular $releasever - $basearch - Test Updates
-baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Modular/$basearch/
-        https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Modular/$basearch/
-#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
-enabled=1
-gpgcheck=1
-metadata_expire=6h
-gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
-skip_if_unavailable=False
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index a6c8971999..f079abec26 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -41,6 +41,11 @@ conditional-include:
       - releasever == 38
     # Remove qcom dtb on F38 files since autopruning isn't in place yet
     include: aarch64-drop-qcom-dtb-files.yaml
+  - if:
+      - releasever == 38
+    # Modularity is going away in F39+ so we'll only include
+    # the fedora-repos-modular package in <39.
+    include: fedora-repos-modular.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -55,9 +60,6 @@ lockfile-repos:
 packages:
   - fedora-release-coreos
   - fedora-repos-ostree
-  # fedora-repos-modular was converted into its own subpackage in f33
-  # Continue to include it in case users want to use it.
-  - fedora-repos-modular
   # the archive repo for more reliable package layering
   # https://github.com/coreos/fedora-coreos-tracker/issues/400
   - fedora-repos-archive
diff --git a/manifests/fedora-repos-modular.yaml b/manifests/fedora-repos-modular.yaml
new file mode 100644
index 0000000000..ac2ed6cdff
--- /dev/null
+++ b/manifests/fedora-repos-modular.yaml
@@ -0,0 +1,4 @@
+# Modularity is going away in F39+ so we'll only include
+# the fedora-repos-modular package in <39.
+packages:
+  - fedora-repos-modular
diff --git a/tests/kola/extensions/module b/tests/kola/extensions/module
deleted file mode 100755
index acdab024c5..0000000000
--- a/tests/kola/extensions/module
+++ /dev/null
@@ -1,40 +0,0 @@
-#!/bin/bash
-## kola:
-##   tags: "platform-independent needs-internet"
-##   # This test only runs on FCOS as OS extensions are implemented differently on RHCOS.
-##   distros: fcos
-##   # This is dependent on network and disk speed but we've seen the
-##   # test take longer than 10 minutes in our aarch64 qemu tests.
-##   timeoutMin: 15
-##   minMemory: 1536
-##   description: Verify that we can install some common tools via module 
-##     as OS extensions.
-
-set -xeuo pipefail
-
-. $KOLA_EXT_DATA/commonlib.sh
-
-# Note: This version must be kept up to date for now, since there currently is no 'latest' (or similar) stream
-CRIO_VERSION=1.24
-
-declare -A commands=(
-  ["cri-o:${CRIO_VERSION}/default"]="crio"
-  ["nginx:mainline"]="nginx"
-)
-
-rpm-ostree ex module install "${!commands[@]}"
-rpm-ostree ex apply-live
-
-failed=""
-
-for m in "${!commands[@]}"; do
-  if [[ -z "$(command -v "${commands[$m]}")" ]]; then
-    echo "Could not find: ${commands[$m]}"
-    failed+=" ${1}"
-  fi
-done
-
-if [[ -n "${failed}" ]]; then
-  fatal "could not install: ${failed}"
-fi
-ok "successfully installed os rpm module extensions"
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 3d2f709580..48cc995fbb 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -19,6 +19,7 @@ commands=(
   'strace'
   'tcpdump'
   'tree'
+  'crio'
 )
 
 # Also try some OS extensions which have host bindings. These can only

From f8fe6b77af75ebc46c00afa6e286e840dc9a85cc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 15 Jul 2023 22:34:34 +0000
Subject: [PATCH 1712/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/654/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 45be373390..26509faf74 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1132,7 +1132,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.12.0-1.fc38.aarch64"
+      "evra": "1:1.13.0-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-14T00:00:00Z",
+    "generated": "2023-07-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-13T16:52:52Z"
+        "generated": "2023-07-14T22:36:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-14T02:31:19Z"
+        "generated": "2023-07-15T02:20:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3f88ce67c0..7a968ed919 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1135,7 +1135,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.12.0-1.fc38.ppc64le"
+      "evra": "1:1.13.0-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-14T00:00:00Z",
+    "generated": "2023-07-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-13T16:52:38Z"
+        "generated": "2023-07-14T22:34:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-14T02:31:25Z"
+        "generated": "2023-07-15T02:20:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8b857ac553..a3ae869a6b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1057,7 +1057,7 @@
       "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.12.0-1.fc38.s390x"
+      "evra": "1:1.13.0-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-14T00:00:00Z",
+    "generated": "2023-07-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-13T16:52:26Z"
+        "generated": "2023-07-14T22:34:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-14T02:31:31Z"
+        "generated": "2023-07-15T02:20:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 568e3ca085..5c370a0e4d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1135,7 +1135,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.12.0-1.fc38.x86_64"
+      "evra": "1:1.13.0-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-14T00:00:00Z",
+    "generated": "2023-07-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-13T16:53:28Z"
+        "generated": "2023-07-14T22:35:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-14T02:31:37Z"
+        "generated": "2023-07-15T02:20:38Z"
       }
     }
   }

From 16b27b7c9b3aa0adaeb236953db3955acd7b7e08 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 15 Jul 2023 10:01:57 -0400
Subject: [PATCH 1713/2157] denylist: drop ext.config.extensions.module denial

We deleted the test in https://github.com/coreos/fedora-coreos-config/pull/2508
so we have no need for the denial any longer.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1526
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9b40aec367..f2e5525c2c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -42,8 +42,3 @@
   snooze: 2023-07-20
   streams:
     - rawhide
-- pattern: ext.config.extensions.module
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1526
-  snooze: 2023-08-02
-  streams:
-    - rawhide

From c7e35d0e66792560f55e1c299c25fa182bbb3171 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 16 Jul 2023 22:31:15 +0000
Subject: [PATCH 1714/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/655/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 26509faf74..9eb2576d81 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -172,7 +172,7 @@
       "evra": "2.13-14.fc38.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.7-31.fc38.aarch64"
+      "evra": "2.9.11-1.fc38.aarch64"
     },
     "criu": {
       "evra": "3.17.1-5.fc38.aarch64"
@@ -829,7 +829,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libuv": {
-      "evra": "1:1.44.2-3.fc38.aarch64"
+      "evra": "1:1.46.0-1.fc38.aarch64"
     },
     "libverto": {
       "evra": "0.3.2-5.fc38.aarch64"
@@ -1258,7 +1258,7 @@
       "evra": "5.4.1-1.fc38.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-20.fc38.aarch64"
+      "evra": "2.1.0-21.fc38.aarch64"
     },
     "zchunk-libs": {
       "evra": "1.3.1-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-15T00:00:00Z",
+    "generated": "2023-07-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-14T22:36:00Z"
+        "generated": "2023-07-15T22:36:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-15T02:20:19Z"
+        "generated": "2023-07-16T01:20:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7a968ed919..949fef233e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -172,7 +172,7 @@
       "evra": "2.13-14.fc38.ppc64le"
     },
     "cracklib": {
-      "evra": "2.9.7-31.fc38.ppc64le"
+      "evra": "2.9.11-1.fc38.ppc64le"
     },
     "criu": {
       "evra": "3.17.1-5.fc38.ppc64le"
@@ -826,7 +826,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libuv": {
-      "evra": "1:1.44.2-3.fc38.ppc64le"
+      "evra": "1:1.46.0-1.fc38.ppc64le"
     },
     "libverto": {
       "evra": "0.3.2-5.fc38.ppc64le"
@@ -1261,7 +1261,7 @@
       "evra": "5.4.1-1.fc38.ppc64le"
     },
     "yajl": {
-      "evra": "2.1.0-20.fc38.ppc64le"
+      "evra": "2.1.0-21.fc38.ppc64le"
     },
     "zchunk-libs": {
       "evra": "1.3.1-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-15T00:00:00Z",
+    "generated": "2023-07-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-14T22:34:33Z"
+        "generated": "2023-07-15T22:36:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-15T02:20:25Z"
+        "generated": "2023-07-16T01:20:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a3ae869a6b..27ef7b9af1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -169,7 +169,7 @@
       "evra": "2.13-14.fc38.s390x"
     },
     "cracklib": {
-      "evra": "2.9.7-31.fc38.s390x"
+      "evra": "2.9.11-1.fc38.s390x"
     },
     "criu": {
       "evra": "3.17.1-5.fc38.s390x"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libuv": {
-      "evra": "1:1.44.2-3.fc38.s390x"
+      "evra": "1:1.46.0-1.fc38.s390x"
     },
     "libverto": {
       "evra": "0.3.2-5.fc38.s390x"
@@ -1186,7 +1186,7 @@
       "evra": "5.4.1-1.fc38.s390x"
     },
     "yajl": {
-      "evra": "2.1.0-20.fc38.s390x"
+      "evra": "2.1.0-21.fc38.s390x"
     },
     "zchunk-libs": {
       "evra": "1.3.1-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-15T00:00:00Z",
+    "generated": "2023-07-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-14T22:34:27Z"
+        "generated": "2023-07-15T22:36:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-15T02:20:31Z"
+        "generated": "2023-07-16T01:20:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5c370a0e4d..5812c6d1e0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -172,7 +172,7 @@
       "evra": "2.13-14.fc38.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.7-31.fc38.x86_64"
+      "evra": "2.9.11-1.fc38.x86_64"
     },
     "criu": {
       "evra": "3.17.1-5.fc38.x86_64"
@@ -832,7 +832,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libuv": {
-      "evra": "1:1.44.2-3.fc38.x86_64"
+      "evra": "1:1.46.0-1.fc38.x86_64"
     },
     "libverto": {
       "evra": "0.3.2-5.fc38.x86_64"
@@ -1261,7 +1261,7 @@
       "evra": "5.4.1-1.fc38.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-20.fc38.x86_64"
+      "evra": "2.1.0-21.fc38.x86_64"
     },
     "zchunk-libs": {
       "evra": "1.3.1-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-15T00:00:00Z",
+    "generated": "2023-07-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-14T22:35:27Z"
+        "generated": "2023-07-15T22:36:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-15T02:20:38Z"
+        "generated": "2023-07-16T01:20:41Z"
       }
     }
   }

From 0c05ecdf8c66aee52faa2b8022361fea4e810ec0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 18 Jul 2023 22:30:04 +0000
Subject: [PATCH 1715/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/657/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9eb2576d81..5d36df1ac7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-16T00:00:00Z",
+    "generated": "2023-07-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-15T22:36:45Z"
+        "generated": "2023-07-18T19:22:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-16T01:20:21Z"
+        "generated": "2023-07-18T01:15:56Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 949fef233e..cf76454d07 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-16T00:00:00Z",
+    "generated": "2023-07-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-15T22:36:15Z"
+        "generated": "2023-07-18T19:22:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-16T01:20:28Z"
+        "generated": "2023-07-18T01:16:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 27ef7b9af1..0c8ddf4586 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1036,10 +1036,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-16T00:00:00Z",
+    "generated": "2023-07-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-15T22:36:07Z"
+        "generated": "2023-07-18T19:22:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-16T01:20:34Z"
+        "generated": "2023-07-18T01:16:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5812c6d1e0..064527015e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.20-1.fc38.noarch"
+      "evra": "38.21-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-16T00:00:00Z",
+    "generated": "2023-07-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-15T22:36:49Z"
+        "generated": "2023-07-18T19:23:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-16T01:20:41Z"
+        "generated": "2023-07-18T01:16:16Z"
       }
     }
   }

From 62eb778edc5f60d6aa2c1a794e2f173967add7cb Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 16 Jul 2023 23:17:58 -0400
Subject: [PATCH 1716/2157] add CLHM helper to warn about modularity on F39
 systems

See https://github.com/coreos/fedora-coreos-tracker/issues/1513
---
 manifests/fedora-coreos.yaml                  |  2 +-
 ...os-modular.yaml => fedora-modularity.yaml} |  3 ++
 .../46-fcos-fedora-modularity.preset          |  1 +
 .../system/coreos-check-modularity.service    | 10 +++++++
 .../usr/libexec/coreos-check-modularity       | 29 +++++++++++++++++++
 5 files changed, 44 insertions(+), 1 deletion(-)
 rename manifests/{fedora-repos-modular.yaml => fedora-modularity.yaml} (56%)
 create mode 100644 overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
 create mode 100644 overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
 create mode 100755 overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index f079abec26..a30e010858 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -45,7 +45,7 @@ conditional-include:
       - releasever == 38
     # Modularity is going away in F39+ so we'll only include
     # the fedora-repos-modular package in <39.
-    include: fedora-repos-modular.yaml
+    include: fedora-modularity.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/fedora-repos-modular.yaml b/manifests/fedora-modularity.yaml
similarity index 56%
rename from manifests/fedora-repos-modular.yaml
rename to manifests/fedora-modularity.yaml
index ac2ed6cdff..208d5696d8 100644
--- a/manifests/fedora-repos-modular.yaml
+++ b/manifests/fedora-modularity.yaml
@@ -2,3 +2,6 @@
 # the fedora-repos-modular package in <39.
 packages:
   - fedora-repos-modular
+# And we'll warn users who have layered modular packages
+ostree-layers:
+  - overlay/17fedora-modularity
diff --git a/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset b/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
new file mode 100644
index 0000000000..7744a39307
--- /dev/null
+++ b/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
@@ -0,0 +1 @@
+enable coreos-check-modularity.service
diff --git a/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service b/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
new file mode 100644
index 0000000000..915cfbe7c4
--- /dev/null
+++ b/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
@@ -0,0 +1,10 @@
+# This service is used for printing a message if
+# modular RPMs are being used
+[Unit]
+Description=Check if modular packages are layered
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-check-modularity
+RemainAfterExit=yes
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity b/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
new file mode 100755
index 0000000000..fc862d244c
--- /dev/null
+++ b/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
@@ -0,0 +1,29 @@
+#!/usr/bin/bash
+# This script checks if the system has layered modular packages and
+# prints a message to the serial console.
+
+# Change the output color to yellow
+warn=$(echo -e '\033[0;33m')
+# No color
+nc=$(echo -e '\033[0m')
+
+# Find the number of installed modules
+num_modules=$(rpm-ostree status --json | jq '.deployments[0].modules | length')
+
+# If there are no modules then nothing to do here
+[ "$num_modules" == "0" ] && exit 0
+
+motd_path=/run/motd.d/35_modularity_warning.motd
+cat << EOF > "${motd_path}"
+${warn}
+############################################################################
+WARNING: This system has layered modularity RPMs. In Fedora 39 modularity
+has been retired. The system will most likely stop updating successfully
+when Fedora CoreOS transitions to Fedora 39. See this tracker for more info: 
+https://github.com/coreos/fedora-coreos-tracker/issues/1513
+
+To disable this warning, use:
+sudo systemctl disable coreos-check-modularity.service
+############################################################################
+${nc}
+EOF

From 8b09c1ba17f774f2eac33a117883e8723b052336 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 20 Jul 2023 16:13:35 +0000
Subject: [PATCH 1717/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/659/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5d36df1ac7..b67e08fb02 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.2-1.fc38.aarch64"
+      "evra": "1.9.3-2.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-0.fc38.aarch64"
+      "evra": "2:4.18.4-1.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-0.fc38.aarch64"
+      "evra": "2:4.18.4-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -1093,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-0.fc38.aarch64"
+      "evra": "2:4.18.4-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.4-0.fc38.noarch"
+      "evra": "2:4.18.4-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-0.fc38.aarch64"
+      "evra": "2:4.18.4-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-18T00:00:00Z",
+    "generated": "2023-07-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T19:22:59Z"
+        "generated": "2023-07-18T22:38:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-18T01:15:56Z"
+        "generated": "2023-07-20T05:06:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index cf76454d07..c2627e56ad 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.2-1.fc38.ppc64le"
+      "evra": "1.9.3-2.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-0.fc38.ppc64le"
+      "evra": "2:4.18.4-1.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-0.fc38.ppc64le"
+      "evra": "2:4.18.4-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-0.fc38.ppc64le"
+      "evra": "2:4.18.4-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.4-0.fc38.noarch"
+      "evra": "2:4.18.4-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-0.fc38.ppc64le"
+      "evra": "2:4.18.4-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-18T00:00:00Z",
+    "generated": "2023-07-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T19:22:34Z"
+        "generated": "2023-07-18T22:37:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-18T01:16:03Z"
+        "generated": "2023-07-20T05:06:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0c8ddf4586..e90412bd07 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-0.fc38.s390x"
+      "evra": "2:4.18.4-1.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-0.fc38.s390x"
+      "evra": "2:4.18.4-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -1024,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-0.fc38.s390x"
+      "evra": "2:4.18.4-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.4-0.fc38.noarch"
+      "evra": "2:4.18.4-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-0.fc38.s390x"
+      "evra": "2:4.18.4-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-18T00:00:00Z",
+    "generated": "2023-07-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T19:22:17Z"
+        "generated": "2023-07-18T22:37:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-18T01:16:09Z"
+        "generated": "2023-07-20T05:06:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 064527015e..c0f2494e91 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.2-1.fc38.x86_64"
+      "evra": "1.9.3-2.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-0.fc38.x86_64"
+      "evra": "2:4.18.4-1.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-0.fc38.x86_64"
+      "evra": "2:4.18.4-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-0.fc38.x86_64"
+      "evra": "2:4.18.4-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.4-0.fc38.noarch"
+      "evra": "2:4.18.4-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-0.fc38.x86_64"
+      "evra": "2:4.18.4-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-18T00:00:00Z",
+    "generated": "2023-07-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T19:23:04Z"
+        "generated": "2023-07-18T22:39:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-18T01:16:16Z"
+        "generated": "2023-07-20T05:06:32Z"
       }
     }
   }

From 2aa59bf58e6a1c8e6c4b3a5f19067de3c52e9ad0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 21 Jul 2023 06:06:02 +0000
Subject: [PATCH 1718/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d17f6d7740..fae8596b9b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,11 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  ignition:
-    evr: 2.16.2-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-890581292c
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 781c3a2d65c875ef6f7cddd486b48d7dfa799431 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Fri, 21 Jul 2023 09:51:34 -0400
Subject: [PATCH 1719/2157] denylist: extend snooze for ext.config.ntp.* tests

ext.config.ntp.chrony.dhcp-propagation &
ext.config.ntp.timesyncd.dhcp-propagation gets times out in rawhide build.
It is not fixed in the upstream.
see: coreos/fedora-coreos-tracker#1508
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f2e5525c2c..26af24076d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,11 +34,11 @@
     - rawhide
 - pattern: ext.config.ntp.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-  snooze: 2023-07-20
+  snooze: 2023-08-20
   streams:
     - rawhide
 - pattern: ext.config.ntp.timesyncd.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-  snooze: 2023-07-20
+  snooze: 2023-08-20
   streams:
     - rawhide

From 24aa9ff6070d4219270baee1fa46d3b9e52f6f95 Mon Sep 17 00:00:00 2001
From: Benjamin Gilbert <bgilbert@redhat.com>
Date: Tue, 18 Jul 2023 21:59:12 -0400
Subject: [PATCH 1720/2157] tests/manual: add script to launch a Hyper-V runner
 in AWS

Most of the script is EC2 boilerplate to get a publicly routable IP
address.  Unfortunately our test accounts have a pruner that deletes the
default VPC, so we can't just use that.  For simplicity, create all our
own infrastructure, and don't clean it up because the pruner will get it.

Most of the rest of the script is boilerplate for connecting to a Windows
instance.  The only things that are Hyper-V specific are running on a
bare-metal instance and installing Hyper-V.
---
 tests/manual/create-hyperv-environment.sh | 131 ++++++++++++++++++++++
 1 file changed, 131 insertions(+)
 create mode 100755 tests/manual/create-hyperv-environment.sh

diff --git a/tests/manual/create-hyperv-environment.sh b/tests/manual/create-hyperv-environment.sh
new file mode 100755
index 0000000000..25ddfff32b
--- /dev/null
+++ b/tests/manual/create-hyperv-environment.sh
@@ -0,0 +1,131 @@
+#!/bin/bash
+# This script launches an AWS Windows instance suitable for running Hyper-V.
+# Ideally kola would support running automated Hyper-V tests by launching
+# such an instance and driving it over SSH.
+
+set -euo pipefail
+
+REGION="us-east-2"
+AZ="us-east-2a"
+AMI_DESC="Windows_Server-2022-English-Full-Base"
+# least expensive Windows metal option
+INSTANCE_TYPE="m5zn.metal"
+VPC="coreos-hyperv"
+SG="coreos-hyperv"
+INSTANCE="coreos-hyperv"
+KEY_PREFIX="coreos-hyperv"
+DISK_GB=100
+DISP_W=1280
+DISP_H=950
+
+if [ $# != 1 ]; then
+    echo "Usage: $0 <workdir>"
+    exit 1
+fi
+
+dir="$1"
+mkdir -p "$dir"
+
+export AWS_DEFAULT_REGION="$REGION"
+export AWS_DEFAULT_OUTPUT="json"
+
+for req in aws jq python3 xfreerdp ; do
+    if ! which "$req" &>/dev/null; then
+        echo "No $req command. Can't continue." >&2
+        exit 1
+    fi
+done
+
+set -x
+
+# find AMI
+ami=$(aws ssm get-parameters --names "/aws/service/ami-windows-latest/$AMI_DESC" | jq -r ".Parameters[].Value")
+
+# get or create VPC
+vpc=$(aws ec2 describe-vpcs --filters "Name=tag:Name,Values=$VPC" | jq -r ".Vpcs[].VpcId")
+if [ -z "$vpc" ]; then
+    vpc=$(aws ec2 create-vpc --cidr-block 10.0.0.0/16 --tag-specifications "ResourceType=vpc,Tags=[{Key=Name,Value=$VPC}]" | jq -r ".Vpc.VpcId")
+fi
+
+# get or create Internet gateway
+igw=$(aws ec2 describe-internet-gateways --filters "Name=attachment.vpc-id,Values=$vpc" | jq -r ".InternetGateways[].InternetGatewayId")
+if [ -z "$igw" ]; then
+    igw=$(aws ec2 create-internet-gateway | jq -r .InternetGateway.InternetGatewayId)
+    aws ec2 attach-internet-gateway --internet-gateway-id "$igw" --vpc-id "$vpc"
+fi
+
+# get or create subnet
+subnet=$(aws ec2 describe-subnets --filters "Name=vpc-id,Values=$vpc" "Name=availability-zone,Values=$AZ" | jq -r ".Subnets[].SubnetId")
+if [ -z "$subnet" ]; then
+    octet=$(python3 -c "print(ord(\"$AZ\"[-1]) - ord('a'))")
+    subnet=$(aws ec2 create-subnet --vpc-id "$vpc" --availability-zone "$AZ" --cidr-block "10.0.$octet.0/24" | jq -r ".Subnet.SubnetId")
+    aws ec2 modify-subnet-attribute --subnet-id "$subnet" --map-public-ip-on-launch
+fi
+
+# get or create route table
+rt=$(aws ec2 describe-route-tables --filters "Name=association.subnet-id,Values=$subnet" | jq -r ".RouteTables[].RouteTableId")
+if [ -z "$rt" ]; then
+    rt=$(aws ec2 create-route-table --vpc-id "$vpc" | jq -r ".RouteTable.RouteTableId")
+    aws ec2 associate-route-table --route-table-id "$rt" --subnet-id "$subnet"
+    aws ec2 create-route --route-table-id "$rt" --destination-cidr-block 0.0.0.0/0 --gateway-id "$igw"
+fi
+
+# get or create security group
+sg=$(aws ec2 describe-security-groups --filters "Name=vpc-id,Values=$vpc" "Name=tag:Name,Values=$SG" | jq -r ".SecurityGroups[].GroupId")
+if [ -z "$sg" ]; then
+    sg=$(aws ec2 create-security-group --group-name "$SG" --tag-specifications "ResourceType=security-group,Tags=[{Key=Name,Value=$SG}]" --vpc-id "$vpc" --description "Hyper-V" | jq -r ".GroupId")
+    aws ec2 authorize-security-group-ingress --group-id "$sg" --protocol tcp --cidr 0.0.0.0/0 --port 3389
+fi
+
+# create temporary key pair
+key_name="$KEY_PREFIX-$RANDOM"
+ret=$(aws ec2 create-key-pair --key-name "$key_name")
+key_id=$(jq -r ".KeyPairId" <<< $ret)
+trap "aws ec2 delete-key-pair --key-pair-id $key_id" EXIT
+jq -r ".KeyMaterial" <<< $ret > "$dir/key.pem"
+
+# create userdata
+cat > "$dir/userdata" <<EOF
+<powershell>
+Install-WindowsFeature -Name Hyper-V -IncludeManagementTools -Restart
+</powershell>
+EOF
+
+# start instance
+instance=$(aws ec2 run-instances --instance-type "$INSTANCE_TYPE" --image-id "$ami" --subnet-id "$subnet" --security-group-ids "$sg" --key-name "$key_name" --tag-specifications --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=$INSTANCE}]" --block-device-mappings '[{"DeviceName": "/dev/sda1", "Ebs": {"VolumeSize": '$DISK_GB'}}]' --user-data "file://$dir/userdata" | jq -r ".Instances[].InstanceId")
+
+# get Windows password
+while true; do
+    passwd=$(aws ec2 get-password-data --instance-id "$instance" --priv-launch-key "$dir/key.pem"  | jq -r .PasswordData)
+    if [ -n "$passwd" ]; then
+        break
+    fi
+    sleep 15
+done
+rm "$dir/key.pem"
+
+# get IP
+instance_ip=$(aws ec2 describe-instances --instance-id "$instance" | jq -r ".Reservations[].Instances[].NetworkInterfaces[].Association.PublicIp")
+
+# generate output
+set +x
+echo "$instance" > "$dir/instance-id"
+echo "$instance_ip" > "$dir/ip"
+mkdir -p "$dir/shared"
+cat > "$dir/connect.sh" <<EOF
+#!/bin/bash
+exec xfreerdp /cert:tofu /v:$instance_ip /u:Administrator /p:'$passwd' /w:$DISP_W /h:$DISP_H /drive:shared,"\$(dirname \$0)/shared"
+EOF
+cat > "$dir/terminate.sh" <<EOF
+#!/bin/bash
+set -xeuo pipefail
+aws --region=$REGION ec2 terminate-instances --instance-id $instance
+EOF
+chmod +x "$dir/connect.sh" "$dir/terminate.sh"
+
+# explain
+cat <<EOF
+
+Wait ~20 minutes for the machine to reboot, then use $dir/connect.sh to connect.
+Files in $dir/shared will be accessible via the "shared" drive under "This PC".
+EOF

From 269b63b4cb68e03a9ba7978335360887f2e7821d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 22 Jul 2023 22:38:18 +0000
Subject: [PATCH 1721/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/662/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b67e08fb02..b76b15cf56 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.16-1.fc38.aarch64"
+      "evra": "32:9.18.17-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.16-1.fc38.noarch"
+      "evra": "32:9.18.17-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.16-1.fc38.aarch64"
+      "evra": "32:9.18.17-1.fc38.aarch64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-2.fc38.aarch64"
+      "evra": "8.0.1-3.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.4-1.fc38.aarch64"
+      "evra": "2.76.4-3.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.aarch64"
@@ -586,7 +586,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-2.fc38.aarch64"
+      "evra": "8.0.1-3.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-1.fc38.aarch64"
+      "evra": "2:4.18.5-0.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-1.fc38.aarch64"
+      "evra": "2:4.18.5-0.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -1093,13 +1093,13 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-1.fc38.aarch64"
+      "evra": "2:4.18.5-0.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.4-1.fc38.noarch"
+      "evra": "2:4.18.5-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-1.fc38.aarch64"
+      "evra": "2:4.18.5-0.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-20T00:00:00Z",
+    "generated": "2023-07-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T22:38:49Z"
+        "generated": "2023-07-20T16:18:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-20T05:06:12Z"
+        "generated": "2023-07-22T01:10:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c2627e56ad..4b3e596822 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -70,13 +70,13 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.16-1.fc38.ppc64le"
+      "evra": "32:9.18.17-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.16-1.fc38.noarch"
+      "evra": "32:9.18.17-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.16-1.fc38.ppc64le"
+      "evra": "32:9.18.17-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-2.fc38.ppc64le"
+      "evra": "8.0.1-3.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -364,7 +364,7 @@
       "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.4-1.fc38.ppc64le"
+      "evra": "2.76.4-3.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-4.fc38.ppc64le"
@@ -577,7 +577,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-2.fc38.ppc64le"
+      "evra": "8.0.1-3.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-1.fc38.ppc64le"
+      "evra": "2:4.18.5-0.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-1.fc38.ppc64le"
+      "evra": "2:4.18.5-0.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-1.fc38.ppc64le"
+      "evra": "2:4.18.5-0.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.4-1.fc38.noarch"
+      "evra": "2:4.18.5-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-1.fc38.ppc64le"
+      "evra": "2:4.18.5-0.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-20T00:00:00Z",
+    "generated": "2023-07-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T22:37:44Z"
+        "generated": "2023-07-20T16:18:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-20T05:06:19Z"
+        "generated": "2023-07-22T01:10:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e90412bd07..c5374dc8c4 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.16-1.fc38.s390x"
+      "evra": "32:9.18.17-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.16-1.fc38.noarch"
+      "evra": "32:9.18.17-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.16-1.fc38.s390x"
+      "evra": "32:9.18.17-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-2.fc38.s390x"
+      "evra": "8.0.1-3.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -349,7 +349,7 @@
       "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.4-1.fc38.s390x"
+      "evra": "2.76.4-3.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-4.fc38.s390x"
@@ -541,7 +541,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-2.fc38.s390x"
+      "evra": "8.0.1-3.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-1.fc38.s390x"
+      "evra": "2:4.18.5-0.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-1.fc38.s390x"
+      "evra": "2:4.18.5-0.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -1024,13 +1024,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-1.fc38.s390x"
+      "evra": "2:4.18.5-0.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.4-1.fc38.noarch"
+      "evra": "2:4.18.5-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-1.fc38.s390x"
+      "evra": "2:4.18.5-0.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-20T00:00:00Z",
+    "generated": "2023-07-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T22:37:29Z"
+        "generated": "2023-07-20T16:18:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-20T05:06:25Z"
+        "generated": "2023-07-22T01:10:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c0f2494e91..86fb949ad0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.16-1.fc38.x86_64"
+      "evra": "32:9.18.17-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.16-1.fc38.noarch"
+      "evra": "32:9.18.17-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.16-1.fc38.x86_64"
+      "evra": "32:9.18.17-1.fc38.x86_64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-2.fc38.x86_64"
+      "evra": "8.0.1-3.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.4-1.fc38.x86_64"
+      "evra": "2.76.4-3.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.x86_64"
@@ -589,7 +589,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-2.fc38.x86_64"
+      "evra": "8.0.1-3.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.4-1.fc38.x86_64"
+      "evra": "2:4.18.5-0.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.4-1.fc38.x86_64"
+      "evra": "2:4.18.5-0.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.4-1.fc38.x86_64"
+      "evra": "2:4.18.5-0.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.4-1.fc38.noarch"
+      "evra": "2:4.18.5-0.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.4-1.fc38.x86_64"
+      "evra": "2:4.18.5-0.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-20T00:00:00Z",
+    "generated": "2023-07-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-18T22:39:14Z"
+        "generated": "2023-07-20T16:19:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-20T05:06:32Z"
+        "generated": "2023-07-22T01:10:31Z"
       }
     }
   }

From 9d0d92fb8ba6024879e62b107733a448841cf55d Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Sun, 23 Jul 2023 23:49:24 -0400
Subject: [PATCH 1722/2157] denylist: bump snooze for kdump.crash on ppc64le

This test is still failing. waiting on a fix for:
https://github.com/coreos/fedora-coreos-tracker/issues/1523
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 26af24076d..45fce63a9a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -20,7 +20,7 @@
     - aarch64
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1523
-  snooze: 2023-07-20
+  snooze: 2023-08-07
   arches:
     - ppc64le
   streams:

From 17ec963ed7b581e8ae461e48a8b37d7ec64c5fa2 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 24 Jul 2023 00:48:02 -0400
Subject: [PATCH 1723/2157] denylist: snooze root-reprovision on testing-devel

These tests are now failing on testing-devel. Remove the
rawhide field to snooze these tests on testing-devel as well.
---
 kola-denylist.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 45fce63a9a..2fba9f97b6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,8 +30,6 @@
   snooze: 2023-08-04
   arches:
     - ppc64le
-  streams:
-    - rawhide
 - pattern: ext.config.ntp.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
   snooze: 2023-08-20

From a3980a05419eefaac9b7895ddfcc4db6234ff8c7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 25 Jul 2023 01:23:23 +0000
Subject: [PATCH 1724/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/665/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b76b15cf56..f09e804f53 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.4-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.4-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.4-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.4-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -961,13 +961,13 @@
       "evra": "2.6.4-1.fc38.aarch64"
     },
     "openssh": {
-      "evra": "9.0p1-15.fc38.aarch64"
+      "evra": "9.0p1-16.fc38.aarch64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-15.fc38.aarch64"
+      "evra": "9.0p1-16.fc38.aarch64"
     },
     "openssh-server": {
-      "evra": "9.0p1-15.fc38.aarch64"
+      "evra": "9.0p1-16.fc38.aarch64"
     },
     "openssl": {
       "evra": "1:3.0.9-1.fc38.aarch64"
@@ -1249,7 +1249,7 @@
       "evra": "6.1.0-3.fc38.aarch64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-4.fc38.aarch64"
+      "evra": "0.8.2-1.fc38.aarch64"
     },
     "xz": {
       "evra": "5.4.1-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-22T00:00:00Z",
+    "generated": "2023-07-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-20T16:18:46Z"
+        "generated": "2023-07-22T22:41:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-22T01:10:11Z"
+        "generated": "2023-07-24T01:21:38Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4b3e596822..450457058b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.4-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.4-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.4-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.4-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -955,13 +955,13 @@
       "evra": "2.6.4-1.fc38.ppc64le"
     },
     "openssh": {
-      "evra": "9.0p1-15.fc38.ppc64le"
+      "evra": "9.0p1-16.fc38.ppc64le"
     },
     "openssh-clients": {
-      "evra": "9.0p1-15.fc38.ppc64le"
+      "evra": "9.0p1-16.fc38.ppc64le"
     },
     "openssh-server": {
-      "evra": "9.0p1-15.fc38.ppc64le"
+      "evra": "9.0p1-16.fc38.ppc64le"
     },
     "openssl": {
       "evra": "1:3.0.9-1.fc38.ppc64le"
@@ -1252,7 +1252,7 @@
       "evra": "6.1.0-3.fc38.ppc64le"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-4.fc38.ppc64le"
+      "evra": "0.8.2-1.fc38.ppc64le"
     },
     "xz": {
       "evra": "5.4.1-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-22T00:00:00Z",
+    "generated": "2023-07-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-20T16:18:20Z"
+        "generated": "2023-07-22T22:41:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-22T01:10:18Z"
+        "generated": "2023-07-24T01:21:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c5374dc8c4..28ed26c14c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.4-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.4-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.4-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.4-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -892,13 +892,13 @@
       "evra": "2.6.4-1.fc38.s390x"
     },
     "openssh": {
-      "evra": "9.0p1-15.fc38.s390x"
+      "evra": "9.0p1-16.fc38.s390x"
     },
     "openssh-clients": {
-      "evra": "9.0p1-15.fc38.s390x"
+      "evra": "9.0p1-16.fc38.s390x"
     },
     "openssh-server": {
-      "evra": "9.0p1-15.fc38.s390x"
+      "evra": "9.0p1-16.fc38.s390x"
     },
     "openssl": {
       "evra": "1:3.0.9-1.fc38.s390x"
@@ -1177,7 +1177,7 @@
       "evra": "6.1.0-3.fc38.s390x"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-4.fc38.s390x"
+      "evra": "0.8.2-1.fc38.s390x"
     },
     "xz": {
       "evra": "5.4.1-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-22T00:00:00Z",
+    "generated": "2023-07-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-20T16:18:01Z"
+        "generated": "2023-07-22T22:41:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-22T01:10:24Z"
+        "generated": "2023-07-24T01:21:51Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 86fb949ad0..ecb3978fc7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.4-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.4-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.4-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.4-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -967,13 +967,13 @@
       "evra": "2.6.4-1.fc38.x86_64"
     },
     "openssh": {
-      "evra": "9.0p1-15.fc38.x86_64"
+      "evra": "9.0p1-16.fc38.x86_64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-15.fc38.x86_64"
+      "evra": "9.0p1-16.fc38.x86_64"
     },
     "openssh-server": {
-      "evra": "9.0p1-15.fc38.x86_64"
+      "evra": "9.0p1-16.fc38.x86_64"
     },
     "openssl": {
       "evra": "1:3.0.9-1.fc38.x86_64"
@@ -1252,7 +1252,7 @@
       "evra": "6.1.0-3.fc38.x86_64"
     },
     "xxhash-libs": {
-      "evra": "0.8.1-4.fc38.x86_64"
+      "evra": "0.8.2-1.fc38.x86_64"
     },
     "xz": {
       "evra": "5.4.1-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-22T00:00:00Z",
+    "generated": "2023-07-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-20T16:19:11Z"
+        "generated": "2023-07-22T22:42:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-22T01:10:31Z"
+        "generated": "2023-07-24T01:21:58Z"
       }
     }
   }

From 208630a8622046ecbbc6f9f20b1a2967e07c9081 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 26 Jul 2023 17:49:27 +0200
Subject: [PATCH 1725/2157] tests/validate-symlinks: Skip '/etc/pki/tls/'

```
Error: /etc/pki/tls/fips_local.cnf symlink to /etc/crypto-policies/back-ends/openssl_fips.config which does not exist
```

```
$ rpm -qf /etc/pki/tls/fips_local.cnf
openssl-libs-3.0.7-24.el9.x86_64
```

Comes from: https://gitlab.com/redhat/centos-stream/rpms/openssl/-/commit/d30c497ed1125a1e780be4cf1c713041353bc88a

See: https://github.com/openshift/os/pull/1328
---
 tests/kola/files/validate-symlinks | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 6476372963..319c994a19 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -32,8 +32,9 @@ list_broken_symlinks_skip=(
 if is_scos || is_rhcos; then
     rhcos_list=(
         '/etc/grub2-efi.cfg'
-        '/etc/rhsm-host'
         '/etc/pki/entitlement-host'
+        '/etc/pki/tls/'
+        '/etc/rhsm-host'
         '/etc/sysconfig/grub'
     )
     list_broken_symlinks_skip+=("${rhcos_list[@]}")

From edffcf08d73875c3721fb203df522e5082277665 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 27 Jul 2023 22:19:40 +0000
Subject: [PATCH 1726/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/668/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f09e804f53..6f7f3d7e78 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -985,10 +985,10 @@
       "evra": "2023.4-2.fc38.aarch64"
     },
     "p11-kit": {
-      "evra": "0.24.1-6.fc38.aarch64"
+      "evra": "0.25.0-1.fc38.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-6.fc38.aarch64"
+      "evra": "0.25.0-1.fc38.aarch64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-25T00:00:00Z",
+    "generated": "2023-07-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-22T22:41:42Z"
+        "generated": "2023-07-25T01:28:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-24T01:21:38Z"
+        "generated": "2023-07-27T01:13:38Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 450457058b..160e127f55 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -982,10 +982,10 @@
       "evra": "2023.4-2.fc38.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.24.1-6.fc38.ppc64le"
+      "evra": "0.25.0-1.fc38.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-6.fc38.ppc64le"
+      "evra": "0.25.0-1.fc38.ppc64le"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-25T00:00:00Z",
+    "generated": "2023-07-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-22T22:41:21Z"
+        "generated": "2023-07-25T01:28:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-24T01:21:45Z"
+        "generated": "2023-07-27T01:13:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 28ed26c14c..3f903c49ad 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -913,10 +913,10 @@
       "evra": "2023.4-2.fc38.s390x"
     },
     "p11-kit": {
-      "evra": "0.24.1-6.fc38.s390x"
+      "evra": "0.25.0-1.fc38.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-6.fc38.s390x"
+      "evra": "0.25.0-1.fc38.s390x"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-25T00:00:00Z",
+    "generated": "2023-07-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-22T22:41:15Z"
+        "generated": "2023-07-25T01:28:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-24T01:21:51Z"
+        "generated": "2023-07-27T01:13:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ecb3978fc7..5fda0714f1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -991,10 +991,10 @@
       "evra": "2023.4-2.fc38.x86_64"
     },
     "p11-kit": {
-      "evra": "0.24.1-6.fc38.x86_64"
+      "evra": "0.25.0-1.fc38.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.24.1-6.fc38.x86_64"
+      "evra": "0.25.0-1.fc38.x86_64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-25T00:00:00Z",
+    "generated": "2023-07-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-22T22:42:27Z"
+        "generated": "2023-07-25T01:29:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-24T01:21:58Z"
+        "generated": "2023-07-27T01:13:59Z"
       }
     }
   }

From c3bcac93fc0ebdcb9cf2a38a66ac58ea81aef332 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 28 Jul 2023 12:43:58 -0400
Subject: [PATCH 1727/2157] tests/kola: ignore newlines in default network
 behavior change test

Recently an updated glib2 caused failures here because of a whitespace
change [1]. Let's ignore empty lines when comparing configurations.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1530
---
 .../default-network-behavior-change/test.sh   | 32 ++-----------------
 1 file changed, 2 insertions(+), 30 deletions(-)

diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index 27a55f9577..db29662f2b 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -24,22 +24,18 @@ type=ethernet
 autoconnect-retries=1
 multi-connect=3
 permissions=
-
 [ethernet]
 mac-address-blacklist=
-
 [ipv4]
 dhcp-timeout=90
 dns-search=
 method=auto
 required-timeout=20000
-
 [ipv6]
 addr-gen-mode=eui64
 dhcp-timeout=90
 dns-search=
 method=auto
-
 [proxy]"
 # EXPECTED_INITRD_NETWORK_CFG3
 #   - used on Fedora 36+ and RHEL8.6+
@@ -49,27 +45,21 @@ uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
 type=ethernet
 autoconnect-retries=1
 multi-connect=3
-
 [ethernet]
-
 [ipv4]
 dhcp-timeout=90
 method=auto
 required-timeout=20000
-
 [ipv6]
 addr-gen-mode=eui64
 dhcp-timeout=90
 method=auto
-
 [proxy]
-
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 # EXPECTED_INITRD_NETWORK_CFG5
 #   - used on Fedora 37+, scos and RHEL 9.2
 EXPECTED_INITRD_NETWORK_CFG5="# Created by nm-initrd-generator
-
 [connection]
 id=Wired Connection
 uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
@@ -77,20 +67,15 @@ type=ethernet
 autoconnect-priority=-100
 autoconnect-retries=1
 multi-connect=3
-
 [ethernet]
-
 [ipv4]
 dhcp-timeout=90
 method=auto
 required-timeout=20000
-
 [ipv6]
 dhcp-timeout=90
 method=auto
-
 [proxy]
-
 [user]
 org.freedesktop.NetworkManager.origin=nm-initrd-generator"
 
@@ -104,21 +89,16 @@ autoconnect-priority=-999
 interface-name=xxxx
 permissions=
 timestamp=xxxxxxxxxx
-
 [ethernet]
 mac-address-blacklist=
-
 [ipv4]
 dns-search=
 method=auto
-
 [ipv6]
 addr-gen-mode=stable-privacy
 dns-search=
 method=auto
-
 [proxy]
-
 [.nmmeta]
 nm-generated=true"
 # EXPECTED_REALROOT_NETWORK_CFG2:
@@ -130,18 +110,13 @@ type=ethernet
 autoconnect-priority=-999
 interface-name=xxxx
 timestamp=xxxxxxxxxx
-
 [ethernet]
-
 [ipv4]
 method=auto
-
 [ipv6]
 addr-gen-mode=stable-privacy
 method=auto
-
 [proxy]
-
 [.nmmeta]
 nm-generated=true"
 # EXPECTED_REALROOT_NETWORK_CFG3:
@@ -153,26 +128,23 @@ type=ethernet
 autoconnect-priority=-999
 interface-name=xxxx
 timestamp=xxxxxxxxxx
-
 [ethernet]
-
 [ipv4]
 method=auto
-
 [ipv6]
 addr-gen-mode=default
 method=auto
-
 [proxy]
-
 [.nmmeta]
 nm-generated=true"
 
 # Function that will remove unique (per-run) data from a connection file
+# and also delete any blank lines.
 normalize_connection_file() {
     sed -e s/^uuid=.*$/uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/ \
         -e s/^timestamp=.*$/timestamp=xxxxxxxxxx/                 \
         -e s/^interface-name=.*$/interface-name=xxxx/             \
+        -e /^$/d                                                  \
         "${1}"
 }
 

From f04eea98cc60af5aa66ac1dc4c764bc40a35646c Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 28 Jul 2023 12:23:34 -0400
Subject: [PATCH 1728/2157] overrides: pin kernel-6.3.12-200.fc38

---
 manifest-lock.overrides.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fae8596b9b..f3c3219920 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,26 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 6.3.12-200.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-core:
+    evr: 6.3.12-200.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-modules:
+    evr: 6.3.12-200.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-modules-core:
+    evr: 6.3.12-200.fc38
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 358e8f8f75848206453270aec2054d98aa905ef1 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 28 Jul 2023 12:25:25 -0400
Subject: [PATCH 1729/2157] Revert "denylist: snooze root-reprovision on
 testing-devel"

We decided to pin the kernel in testing-devel instead of
snoozing the reprovision tests while we track down a
solution to the issue. xref:
https://github.com/coreos/fedora-coreos-tracker/issues/1489#issuecomment-1654472521

This reverts commit 17ec963ed7b581e8ae461e48a8b37d7ec64c5fa2.
---
 kola-denylist.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 2fba9f97b6..45fce63a9a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,6 +30,8 @@
   snooze: 2023-08-04
   arches:
     - ppc64le
+  streams:
+    - rawhide
 - pattern: ext.config.ntp.chrony.dhcp-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
   snooze: 2023-08-20

From d1e0f619ffc9296864ea37fce2a7cb678cc8b536 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 28 Jul 2023 22:30:27 +0000
Subject: [PATCH 1730/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/669/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6f7f3d7e78..085efe66d1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.4-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.4-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.4-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.4-200.fc38.aarch64"
+      "evra": "6.3.12-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1671-1.fc38.noarch"
+      "evra": "2:9.0.1677-2.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1671-1.fc38.aarch64"
+      "evra": "2:9.0.1677-2.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-27T00:00:00Z",
+    "generated": "2023-07-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-25T01:28:54Z"
+        "generated": "2023-07-27T22:25:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-27T01:13:38Z"
+        "generated": "2023-07-28T02:32:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 160e127f55..9a8b095a26 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.4-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.4-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.4-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.4-200.fc38.ppc64le"
+      "evra": "6.3.12-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1671-1.fc38.noarch"
+      "evra": "2:9.0.1677-2.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1671-1.fc38.ppc64le"
+      "evra": "2:9.0.1677-2.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-27T00:00:00Z",
+    "generated": "2023-07-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-25T01:28:17Z"
+        "generated": "2023-07-27T22:24:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-27T01:13:45Z"
+        "generated": "2023-07-28T02:33:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3f903c49ad..f721ab68d9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.4-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.4-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.4-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.4-200.fc38.s390x"
+      "evra": "6.3.12-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1671-1.fc38.noarch"
+      "evra": "2:9.0.1677-2.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1671-1.fc38.s390x"
+      "evra": "2:9.0.1677-2.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-27T00:00:00Z",
+    "generated": "2023-07-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-25T01:28:22Z"
+        "generated": "2023-07-27T22:24:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-27T01:13:52Z"
+        "generated": "2023-07-28T02:33:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5fda0714f1..d9584becba 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.4-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.4-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.4-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.4-200.fc38.x86_64"
+      "evra": "6.3.12-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1671-1.fc38.noarch"
+      "evra": "2:9.0.1677-2.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1671-1.fc38.x86_64"
+      "evra": "2:9.0.1677-2.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-27T00:00:00Z",
+    "generated": "2023-07-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-25T01:29:09Z"
+        "generated": "2023-07-27T22:25:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-27T01:13:59Z"
+        "generated": "2023-07-28T02:33:16Z"
       }
     }
   }

From 7b6e99f2b3e178092adcd288d4c01aea8a80fb40 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 29 Jul 2023 22:34:34 +0000
Subject: [PATCH 1731/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/670/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 085efe66d1..e46b123827 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -970,10 +970,10 @@
       "evra": "9.0p1-16.fc38.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.9-1.fc38.aarch64"
+      "evra": "1:3.0.9-2.fc38.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-1.fc38.aarch64"
+      "evra": "1:3.0.9-2.fc38.aarch64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.aarch64"
@@ -1132,7 +1132,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.13.0-1.fc38.aarch64"
+      "evra": "1:1.13.1-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-28T00:00:00Z",
+    "generated": "2023-07-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-27T22:25:50Z"
+        "generated": "2023-07-28T22:32:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-28T02:32:57Z"
+        "generated": "2023-07-29T01:36:04Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 9a8b095a26..7341044c4b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -964,10 +964,10 @@
       "evra": "9.0p1-16.fc38.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.9-1.fc38.ppc64le"
+      "evra": "1:3.0.9-2.fc38.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-1.fc38.ppc64le"
+      "evra": "1:3.0.9-2.fc38.ppc64le"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.ppc64le"
@@ -1135,7 +1135,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.13.0-1.fc38.ppc64le"
+      "evra": "1:1.13.1-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-28T00:00:00Z",
+    "generated": "2023-07-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-27T22:24:52Z"
+        "generated": "2023-07-28T22:32:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-28T02:33:03Z"
+        "generated": "2023-07-29T01:36:11Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f721ab68d9..84b739412b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -901,10 +901,10 @@
       "evra": "9.0p1-16.fc38.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.9-1.fc38.s390x"
+      "evra": "1:3.0.9-2.fc38.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-1.fc38.s390x"
+      "evra": "1:3.0.9-2.fc38.s390x"
     },
     "ostree": {
       "evra": "2023.4-2.fc38.s390x"
@@ -1057,7 +1057,7 @@
       "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.13.0-1.fc38.s390x"
+      "evra": "1:1.13.1-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-28T00:00:00Z",
+    "generated": "2023-07-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-27T22:24:35Z"
+        "generated": "2023-07-28T22:31:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-28T02:33:10Z"
+        "generated": "2023-07-29T01:36:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d9584becba..49023ba04c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -976,10 +976,10 @@
       "evra": "9.0p1-16.fc38.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.9-1.fc38.x86_64"
+      "evra": "1:3.0.9-2.fc38.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-1.fc38.x86_64"
+      "evra": "1:3.0.9-2.fc38.x86_64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.x86_64"
@@ -1135,7 +1135,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.13.0-1.fc38.x86_64"
+      "evra": "1:1.13.1-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-28T00:00:00Z",
+    "generated": "2023-07-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-27T22:25:39Z"
+        "generated": "2023-07-28T22:33:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-28T02:33:16Z"
+        "generated": "2023-07-29T01:36:24Z"
       }
     }
   }

From 2c99e37b19093f7118f7b55bd323869d90f8195c Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Sat, 29 Jul 2023 12:27:38 -0700
Subject: [PATCH 1732/2157] denylist: drop kdump.crash for ppc64le rawhide
 Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1523

---
 kola-denylist.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 45fce63a9a..efa098b5d4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,13 +18,6 @@
   snooze: 2023-08-02
   arches:
     - aarch64
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1523
-  snooze: 2023-08-07
-  arches:
-    - ppc64le
-  streams:
-    - rawhide
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
   snooze: 2023-08-04

From 0a979937a356c854e6f4a8228e8608af60c013f0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 30 Jul 2023 22:22:28 +0000
Subject: [PATCH 1733/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/671/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e46b123827..c9e0d20c68 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -961,13 +961,13 @@
       "evra": "2.6.4-1.fc38.aarch64"
     },
     "openssh": {
-      "evra": "9.0p1-16.fc38.aarch64"
+      "evra": "9.0p1-17.fc38.aarch64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-16.fc38.aarch64"
+      "evra": "9.0p1-17.fc38.aarch64"
     },
     "openssh-server": {
-      "evra": "9.0p1-16.fc38.aarch64"
+      "evra": "9.0p1-17.fc38.aarch64"
     },
     "openssl": {
       "evra": "1:3.0.9-2.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-29T00:00:00Z",
+    "generated": "2023-07-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-28T22:32:37Z"
+        "generated": "2023-07-29T22:36:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-29T01:36:04Z"
+        "generated": "2023-07-30T01:30:25Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7341044c4b..76151e3492 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -955,13 +955,13 @@
       "evra": "2.6.4-1.fc38.ppc64le"
     },
     "openssh": {
-      "evra": "9.0p1-16.fc38.ppc64le"
+      "evra": "9.0p1-17.fc38.ppc64le"
     },
     "openssh-clients": {
-      "evra": "9.0p1-16.fc38.ppc64le"
+      "evra": "9.0p1-17.fc38.ppc64le"
     },
     "openssh-server": {
-      "evra": "9.0p1-16.fc38.ppc64le"
+      "evra": "9.0p1-17.fc38.ppc64le"
     },
     "openssl": {
       "evra": "1:3.0.9-2.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-29T00:00:00Z",
+    "generated": "2023-07-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-28T22:32:11Z"
+        "generated": "2023-07-29T22:36:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-29T01:36:11Z"
+        "generated": "2023-07-30T01:30:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 84b739412b..20ac4bec8f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -892,13 +892,13 @@
       "evra": "2.6.4-1.fc38.s390x"
     },
     "openssh": {
-      "evra": "9.0p1-16.fc38.s390x"
+      "evra": "9.0p1-17.fc38.s390x"
     },
     "openssh-clients": {
-      "evra": "9.0p1-16.fc38.s390x"
+      "evra": "9.0p1-17.fc38.s390x"
     },
     "openssh-server": {
-      "evra": "9.0p1-16.fc38.s390x"
+      "evra": "9.0p1-17.fc38.s390x"
     },
     "openssl": {
       "evra": "1:3.0.9-2.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-29T00:00:00Z",
+    "generated": "2023-07-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-28T22:31:54Z"
+        "generated": "2023-07-29T22:36:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-29T01:36:18Z"
+        "generated": "2023-07-30T01:30:38Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 49023ba04c..af99a3a99d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -967,13 +967,13 @@
       "evra": "2.6.4-1.fc38.x86_64"
     },
     "openssh": {
-      "evra": "9.0p1-16.fc38.x86_64"
+      "evra": "9.0p1-17.fc38.x86_64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-16.fc38.x86_64"
+      "evra": "9.0p1-17.fc38.x86_64"
     },
     "openssh-server": {
-      "evra": "9.0p1-16.fc38.x86_64"
+      "evra": "9.0p1-17.fc38.x86_64"
     },
     "openssl": {
       "evra": "1:3.0.9-2.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-29T00:00:00Z",
+    "generated": "2023-07-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-28T22:33:47Z"
+        "generated": "2023-07-29T22:37:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-29T01:36:24Z"
+        "generated": "2023-07-30T01:30:45Z"
       }
     }
   }

From eff38436bf5c99e63ba3fce998914c7183b1b907 Mon Sep 17 00:00:00 2001
From: Luke Yang <luyang@redhat.com>
Date: Wed, 5 Jul 2023 14:29:43 -0400
Subject: [PATCH 1734/2157] tests/kola: add space after ! in YAML architecture
 field

The commit adds a space to all `kola` tests that use `!` to indicate the
negation semantic for architectures. This helps convey to users that the
`!` is distrubutive and not per element.
---
 tests/kola/boot/grub2-install                         | 2 +-
 tests/kola/butane/grub-users/test.sh                  | 2 +-
 tests/kola/files/console-config                       | 2 +-
 tests/kola/networking/nic-naming                      | 2 +-
 tests/kola/root-reprovision/luks/autosave-xfs/test.sh | 2 +-
 tests/kola/root-reprovision/luks/test.sh              | 2 +-
 tests/kola/var-mount/luks/test.sh                     | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 06831c0f28..b415dae14b 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -3,7 +3,7 @@
 ##   tags: "platform-independent"
 ##   # The test is not available for aarch64 and s390x,
 ##   # as aarch64 is UEFI only and s390x is not using grub2
-##   architectures: "!aarch64 s390x"
+##   architectures: "! aarch64 s390x"
 ##   description: Verify that we install BIOS/PReP bootloader
 ##     using grub2-install from the target system.
 
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index 551764fc58..4691bad8cc 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -5,7 +5,7 @@
 ##   distros: fcos
 ##   # coreos-post-ignition-checks.service forbids GRUB passwords on
 ##   # ppc64le and s390x
-##   architectures: "!ppc64le s390x"
+##   architectures: "! ppc64le s390x"
 ##   description: Verify that setting GRUB password works.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index af69ce368b..87d1fcaa67 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -4,7 +4,7 @@
 ##   exclusive: false
 ##   # s390x doesn't have any configuration in platforms.yaml, so
 ##   # platforms.json is not included in the image
-##   architectures: "!s390x"
+##   architectures: "! s390x"
 ##   description: Verify that the kargs and grub.cfg commands specified in 
 ##     platforms.json have been properly applied to the image. 
 
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index b9aad3bbb5..ccb2b83f45 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   platforms: "!azure"
+##   platforms: "! azure"
 ##   description: Verify that we detected eth* NIC naming after booted.
 
 # Disable on azure because of a limitation of the hv_netvsc driver
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index a24426b941..e15e82baeb 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -5,7 +5,7 @@
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # A TPM backend device is not available on s390x to suport TPM.
-##   architectures: "!s390x"
+##   architectures: "! s390x"
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 2cdabacb7b..3aa35a32f5 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -5,7 +5,7 @@
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # A TPM backend device is not available on s390x to suport TPM.
-##   architectures: "!s390x"
+##   architectures: "! s390x"
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index 25a9dc7fe0..a9e61ee508 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   # Restrict to qemu for now because the primary disk path is platform-dependent
 ##   platforms: qemu
-##   architectures: "!s390x"
+##   architectures: "! s390x"
 ##   description: Verify that reprovision disk with luks works.
 
 set -xeuo pipefail

From 40a28369d0ef6896522fe50e8bd5b6c04fbbb193 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 31 Jul 2023 22:33:03 +0000
Subject: [PATCH 1735/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/672/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c9e0d20c68..b0b1f2629d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -553,7 +553,7 @@
       "evra": "2.5.6-1.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.1.1-4.fc38.aarch64"
+      "evra": "13.2.1-1.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -619,7 +619,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.1.1-4.fc38.aarch64"
+      "evra": "13.2.1-1.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -787,7 +787,7 @@
       "evra": "2.9.1-1.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.1.1-4.fc38.aarch64"
+      "evra": "13.2.1-1.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-30T00:00:00Z",
+    "generated": "2023-07-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-29T22:36:59Z"
+        "generated": "2023-07-30T22:25:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-30T01:30:25Z"
+        "generated": "2023-07-31T01:23:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 76151e3492..f311960a2e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -544,7 +544,7 @@
       "evra": "2.5.6-1.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.1.1-4.fc38.ppc64le"
+      "evra": "13.2.1-1.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -610,7 +610,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.1.1-4.fc38.ppc64le"
+      "evra": "13.2.1-1.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -784,7 +784,7 @@
       "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.1.1-4.fc38.ppc64le"
+      "evra": "13.2.1-1.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-30T00:00:00Z",
+    "generated": "2023-07-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-29T22:36:30Z"
+        "generated": "2023-07-30T22:25:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-30T01:30:31Z"
+        "generated": "2023-07-31T01:24:04Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 20ac4bec8f..bfe4ed4b82 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -571,7 +571,7 @@
       "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.1.1-4.fc38.s390x"
+      "evra": "13.2.1-1.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -730,7 +730,7 @@
       "evra": "2.9.1-1.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.1.1-4.fc38.s390x"
+      "evra": "13.2.1-1.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-30T00:00:00Z",
+    "generated": "2023-07-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-29T22:36:21Z"
+        "generated": "2023-07-30T22:24:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-30T01:30:38Z"
+        "generated": "2023-07-31T01:24:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index af99a3a99d..d510765f3d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -622,7 +622,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.1.1-4.fc38.x86_64"
+      "evra": "13.2.1-1.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -790,7 +790,7 @@
       "evra": "2.9.1-1.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.1.1-4.fc38.x86_64"
+      "evra": "13.2.1-1.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-30T00:00:00Z",
+    "generated": "2023-07-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-29T22:37:58Z"
+        "generated": "2023-07-30T22:25:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-30T01:30:45Z"
+        "generated": "2023-07-31T01:24:18Z"
       }
     }
   }

From d0c79569f5764b2e023d1472285049bd80a272bb Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Wed, 26 Jul 2023 16:31:36 -0400
Subject: [PATCH 1736/2157] ignition-ostree: make sure we don't mount /sysroot
 before transposefs

When enabling multipath the ignition-ostree-mount-firstboot-sysroot
service loses to the systemd's generator, which causes /sysroot to
be mounted before we finish transposing the fs. This change makes
sure we wait to mount the /sysroot until we are done.
This was reported via: https://issues.redhat.com/browse/OCPBUGS-16157
---
 .../ignition-ostree-transposefs-autosave-xfs.service         | 5 +++++
 .../ignition-ostree-transposefs-restore.service              | 5 +++++
 .../ignition-ostree-transposefs-save.service                 | 5 +++++
 3 files changed, 15 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
index b914e98c72..3e0262bfe1 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
@@ -5,6 +5,11 @@ After=ignition-disks.service
 # Avoid racing with UUID regeneration
 After=ignition-ostree-uuid-root.service
 After=ignition-ostree-growfs.service
+Before=initrd-root-fs.target
+# https://issues.redhat.com/browse/OCPBUGS-16157
+# On multipath systems mounting the /sysroot before
+# the ignition-ostree services causes the transpose to fai.
+Before=sysroot.mount
 Before=ignition-ostree-transposefs-restore.service
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
index b64858ffd7..ccf383f69c 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
@@ -6,6 +6,11 @@ After=ignition-disks.service
 After=ignition-ostree-uuid-root.service
 After=ignition-ostree-growfs.service
 Before=ignition-ostree-mount-firstboot-sysroot.service
+# https://issues.redhat.com/browse/OCPBUGS-16157
+# On multipath systems mounting the /sysroot before
+# the ignition-ostree services causes the transpose to fai.
+Before=initrd-root-fs.target
+Before=sysroot.mount
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
index bc03499ecb..64b97c1c6f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
@@ -7,6 +7,11 @@ ConditionKernelCommandLine=ostree
 ConditionPathIsDirectory=/run/ignition-ostree-transposefs
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
+# https://issues.redhat.com/browse/OCPBUGS-16157
+# On multipath systems mounting the /sysroot before
+# the ignition-ostree services causes the transpose to fai.
+Before=initrd-root-fs.target
+Before=sysroot.mount
 After=coreos-gpt-setup.service
 OnFailure=emergency.target
 OnFailureJobMode=isolate

From 0c702cf5a366e0356c5240c397f4e26689be42f7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 1 Aug 2023 23:57:13 +0000
Subject: [PATCH 1737/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/674/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b0b1f2629d..01a6b2ae74 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.5.1-1.fc38.aarch64"
+      "evra": "5:4.6.0-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.5.1-1.fc38.aarch64"
+      "evra": "5:4.6.0-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-31T00:00:00Z",
+    "generated": "2023-08-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-30T22:25:59Z"
+        "generated": "2023-07-31T22:36:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-31T01:23:58Z"
+        "generated": "2023-08-01T02:41:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f311960a2e..2bb83a9833 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1021,10 +1021,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.5.1-1.fc38.ppc64le"
+      "evra": "5:4.6.0-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.5.1-1.fc38.ppc64le"
+      "evra": "5:4.6.0-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-31T00:00:00Z",
+    "generated": "2023-08-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-30T22:25:15Z"
+        "generated": "2023-07-31T22:36:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-31T01:24:04Z"
+        "generated": "2023-08-01T02:41:14Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bfe4ed4b82..3f09029c76 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -952,10 +952,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.5.1-1.fc38.s390x"
+      "evra": "5:4.6.0-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.5.1-1.fc38.s390x"
+      "evra": "5:4.6.0-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-31T00:00:00Z",
+    "generated": "2023-08-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-30T22:24:58Z"
+        "generated": "2023-07-31T22:35:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-31T01:24:11Z"
+        "generated": "2023-08-01T02:41:21Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d510765f3d..00cb438ba6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1030,10 +1030,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.5.1-1.fc38.x86_64"
+      "evra": "5:4.6.0-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.5.1-1.fc38.x86_64"
+      "evra": "5:4.6.0-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.21-1.fc38.noarch"
+      "evra": "38.22-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-07-31T00:00:00Z",
+    "generated": "2023-08-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-30T22:25:20Z"
+        "generated": "2023-07-31T22:37:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-07-31T01:24:18Z"
+        "generated": "2023-08-01T02:41:27Z"
       }
     }
   }

From 656750e481d36194bb11f5fec50d001b12fd8a21 Mon Sep 17 00:00:00 2001
From: Joseph Marrero <jmarrero@redhat.com>
Date: Tue, 1 Aug 2023 21:55:18 -0400
Subject: [PATCH 1738/2157] ignition-ostree: remove not needed Before= checks

---
 .../ignition-ostree-transposefs-autosave-xfs.service         | 3 +--
 .../ignition-ostree-transposefs-restore.service              | 3 +--
 .../ignition-ostree-transposefs-save.service                 | 5 -----
 3 files changed, 2 insertions(+), 9 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
index 3e0262bfe1..e955c4a69a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-autosave-xfs.service
@@ -5,10 +5,9 @@ After=ignition-disks.service
 # Avoid racing with UUID regeneration
 After=ignition-ostree-uuid-root.service
 After=ignition-ostree-growfs.service
-Before=initrd-root-fs.target
 # https://issues.redhat.com/browse/OCPBUGS-16157
 # On multipath systems mounting the /sysroot before
-# the ignition-ostree services causes the transpose to fai.
+# the ignition-ostree services causes the transpose to fail.
 Before=sysroot.mount
 Before=ignition-ostree-transposefs-restore.service
 OnFailure=emergency.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
index ccf383f69c..3a294dd705 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
@@ -8,8 +8,7 @@ After=ignition-ostree-growfs.service
 Before=ignition-ostree-mount-firstboot-sysroot.service
 # https://issues.redhat.com/browse/OCPBUGS-16157
 # On multipath systems mounting the /sysroot before
-# the ignition-ostree services causes the transpose to fai.
-Before=initrd-root-fs.target
+# the ignition-ostree services causes the transpose to fail.
 Before=sysroot.mount
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
index 64b97c1c6f..bc03499ecb 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-save.service
@@ -7,11 +7,6 @@ ConditionKernelCommandLine=ostree
 ConditionPathIsDirectory=/run/ignition-ostree-transposefs
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
-# https://issues.redhat.com/browse/OCPBUGS-16157
-# On multipath systems mounting the /sysroot before
-# the ignition-ostree services causes the transpose to fai.
-Before=initrd-root-fs.target
-Before=sysroot.mount
 After=coreos-gpt-setup.service
 OnFailure=emergency.target
 OnFailureJobMode=isolate

From 1f5920ea61417031c2c8412451ac35efaeb53d79 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 2 Aug 2023 09:51:55 -0400
Subject: [PATCH 1739/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64

This test is still failing.
See: https://github.com/coreos/fedora-coreos-tracker/issues/1430
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index efa098b5d4..c0f9fb1cb6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-08-02
+  snooze: 2023-08-16
   arches:
     - aarch64
 - pattern: ext.config.root-reprovision.*

From 37e35d8a00c4a328753c54f31875869eeffb3707 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 2 Aug 2023 22:47:56 +0000
Subject: [PATCH 1740/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/675/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 01a6b2ae74..77c46b60fc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -937,7 +937,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.12-3.fc38.aarch64"
+      "evra": "2.2.13-2.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-01T00:00:00Z",
+    "generated": "2023-08-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-31T22:36:37Z"
+        "generated": "2023-08-02T00:00:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-01T02:41:08Z"
+        "generated": "2023-08-02T01:11:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2bb83a9833..85909500fb 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -931,7 +931,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.12-3.fc38.ppc64le"
+      "evra": "2.2.13-2.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-01T00:00:00Z",
+    "generated": "2023-08-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-31T22:36:08Z"
+        "generated": "2023-08-01T23:59:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-01T02:41:14Z"
+        "generated": "2023-08-02T01:11:35Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3f09029c76..1fa28a321b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -871,7 +871,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.12-3.fc38.s390x"
+      "evra": "2.2.13-2.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-01T00:00:00Z",
+    "generated": "2023-08-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-31T22:35:54Z"
+        "generated": "2023-08-01T23:59:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-01T02:41:21Z"
+        "generated": "2023-08-02T01:11:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 00cb438ba6..9a10119412 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -943,7 +943,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.12-3.fc38.x86_64"
+      "evra": "2.2.13-2.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-01T00:00:00Z",
+    "generated": "2023-08-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-07-31T22:37:01Z"
+        "generated": "2023-08-02T00:00:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-01T02:41:27Z"
+        "generated": "2023-08-02T01:11:48Z"
       }
     }
   }

From a2d1172d8ed9513cd2c7a39bc7a91d05f3de2d1f Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 3 Aug 2023 15:42:50 -0400
Subject: [PATCH 1741/2157] overrides: unpin kernel-6.3.12-200.fc38

unpin the kernel in testing-devel so we can ship our prod streams
with the latest packages in the next release cycle. In the
community meeting, we decided to pin the kernel only on
`ppc64le` for this cycle.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1489#issuecomment-1662811923
---
 manifest-lock.overrides.yaml | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f3c3219920..fae8596b9b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,26 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.3.12-200.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-core:
-    evr: 6.3.12-200.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-modules:
-    evr: 6.3.12-200.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-modules-core:
-    evr: 6.3.12-200.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From d5108e0a3306810bb31d4dd6624e00b6853c40ac Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 3 Aug 2023 15:47:25 -0400
Subject: [PATCH 1742/2157] overrides: pin kernel-6.3.12-200 on `ppc64le` only

Temporarily add `manifest-lock.overrides.ppc64le.yaml` to pin the kernel
on `ppc64le` only for the next FCOS release cycle while we wait for a
fix on the issue: https://github.com/coreos/fedora-coreos-tracker/issues/1489

See: https://github.com/coreos/fedora-coreos-tracker/issues/1489#issuecomment-1662811923
---
 manifest-lock.overrides.ppc64le.yaml | 31 ++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 manifest-lock.overrides.ppc64le.yaml

diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
new file mode 100644
index 0000000000..14163e6c2f
--- /dev/null
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -0,0 +1,31 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  kernel:
+    evra: 6.3.12-200.fc38.ppc64le
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-core:
+    evra: 6.3.12-200.fc38.ppc64le
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-modules:
+    evra: 6.3.12-200.fc38.ppc64le
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin
+  kernel-modules-core:
+    evra: 6.3.12-200.fc38.ppc64le
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: pin

From c607043d9c6986fbe992c11e76f1bfbe14f1b5e5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 4 Aug 2023 00:43:35 +0000
Subject: [PATCH 1743/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/677/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json |  6 +++---
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 77c46b60fc..5f00de00d4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.7-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.7-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.7-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.aarch64"
+      "evra": "6.4.7-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-02T00:00:00Z",
+    "generated": "2023-08-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T00:00:40Z"
+        "generated": "2023-08-02T22:50:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-02T01:11:28Z"
+        "generated": "2023-08-03T02:09:38Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 85909500fb..0417779a01 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-02T00:00:00Z",
+    "generated": "2023-08-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-01T23:59:20Z"
+        "generated": "2023-08-02T22:50:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-02T01:11:35Z"
+        "generated": "2023-08-03T02:09:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1fa28a321b..f3bd753a1c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.7-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.7-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.7-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.s390x"
+      "evra": "6.4.7-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-02T00:00:00Z",
+    "generated": "2023-08-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-01T23:59:12Z"
+        "generated": "2023-08-02T22:50:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-02T01:11:42Z"
+        "generated": "2023-08-03T02:09:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9a10119412..949ed307b9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.7-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.7-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.7-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.x86_64"
+      "evra": "6.4.7-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-02T00:00:00Z",
+    "generated": "2023-08-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T00:00:04Z"
+        "generated": "2023-08-02T22:51:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-02T01:11:48Z"
+        "generated": "2023-08-03T02:09:59Z"
       }
     }
   }

From b38255aecdbfd014e52acc6cdf04236940d65f01 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 4 Aug 2023 11:19:06 -0400
Subject: [PATCH 1744/2157] denylist: extend snooze for
 ext.config.root-reprovision.*

These tests are still failing in rawhide `ppc64le` builds.
Extend the snooze while we wait on a fix for:
https://github.com/coreos/fedora-coreos-tracker/issues/1489
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c0f9fb1cb6..b3a85275c5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -20,7 +20,7 @@
     - aarch64
 - pattern: ext.config.root-reprovision.*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-08-04
+  snooze: 2023-08-18
   arches:
     - ppc64le
   streams:

From fe972a32c6cb068caa72f1e3b2c3dac02f2e4099 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 5 Aug 2023 03:42:04 +0000
Subject: [PATCH 1745/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/679/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5f00de00d4..61117a6789 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -34,7 +34,7 @@
       "evra": "5.4.2-1.fc38.aarch64"
     },
     "alternatives": {
-      "evra": "1.24-1.fc38.aarch64"
+      "evra": "1.25-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.5-1.fc38.aarch64"
+      "evra": "1.8.6-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -736,7 +736,7 @@
       "evra": "0.1.5-53.fc38.aarch64"
     },
     "librepo": {
-      "evra": "1.15.1-2.fc38.aarch64"
+      "evra": "1.15.2-1.fc38.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-03T00:00:00Z",
+    "generated": "2023-08-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T22:50:58Z"
+        "generated": "2023-08-04T00:53:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-03T02:09:38Z"
+        "generated": "2023-08-05T01:29:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0417779a01..e939f83709 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -34,7 +34,7 @@
       "evra": "5.4.2-1.fc38.ppc64le"
     },
     "alternatives": {
-      "evra": "1.24-1.fc38.ppc64le"
+      "evra": "1.25-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.5-1.fc38.ppc64le"
+      "evra": "1.8.6-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -727,7 +727,7 @@
       "evra": "0.1.5-53.fc38.ppc64le"
     },
     "librepo": {
-      "evra": "1.15.1-2.fc38.ppc64le"
+      "evra": "1.15.2-1.fc38.ppc64le"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-03T00:00:00Z",
+    "generated": "2023-08-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T22:50:31Z"
+        "generated": "2023-08-04T00:53:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-03T02:09:46Z"
+        "generated": "2023-08-05T01:29:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f3bd753a1c..efed3ba1ce 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -34,7 +34,7 @@
       "evra": "5.4.2-1.fc38.s390x"
     },
     "alternatives": {
-      "evra": "1.24-1.fc38.s390x"
+      "evra": "1.25-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -178,7 +178,7 @@
       "evra": "3.17.1-5.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.5-1.fc38.s390x"
+      "evra": "1.8.6-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -679,7 +679,7 @@
       "evra": "0.1.5-53.fc38.s390x"
     },
     "librepo": {
-      "evra": "1.15.1-2.fc38.s390x"
+      "evra": "1.15.2-1.fc38.s390x"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-03T00:00:00Z",
+    "generated": "2023-08-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T22:50:26Z"
+        "generated": "2023-08-04T00:53:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-03T02:09:52Z"
+        "generated": "2023-08-05T01:30:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 949ed307b9..32b658b512 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -34,7 +34,7 @@
       "evra": "5.4.2-1.fc38.x86_64"
     },
     "alternatives": {
-      "evra": "1.24-1.fc38.x86_64"
+      "evra": "1.25-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
       "evra": "20230625-151.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.5-1.fc38.x86_64"
+      "evra": "1.8.6-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -739,7 +739,7 @@
       "evra": "0.1.5-53.fc38.x86_64"
     },
     "librepo": {
-      "evra": "1.15.1-2.fc38.x86_64"
+      "evra": "1.15.2-1.fc38.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-03T00:00:00Z",
+    "generated": "2023-08-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-02T22:51:32Z"
+        "generated": "2023-08-04T00:54:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-03T02:09:59Z"
+        "generated": "2023-08-05T01:30:09Z"
       }
     }
   }

From 0e2938263f3e11db4765df47d922805de2e1d79c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 6 Aug 2023 22:27:23 +0000
Subject: [PATCH 1746/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/681/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 61117a6789..c2fd31440b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1045,7 +1045,7 @@
       "evra": "1.19-2.fc38.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-9.fc38.aarch64"
+      "evra": "3.3.17-10.fc38.aarch64"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-05T00:00:00Z",
+    "generated": "2023-08-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-04T00:53:49Z"
+        "generated": "2023-08-05T03:48:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-05T01:29:50Z"
+        "generated": "2023-08-06T01:31:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e939f83709..376087f5dd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1048,7 +1048,7 @@
       "evra": "2.7.9-2.fc38.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-9.fc38.ppc64le"
+      "evra": "3.3.17-10.fc38.ppc64le"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-05T00:00:00Z",
+    "generated": "2023-08-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-04T00:53:15Z"
+        "generated": "2023-08-05T03:48:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-05T01:29:56Z"
+        "generated": "2023-08-06T01:31:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index efed3ba1ce..9979394a72 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,7 +973,7 @@
       "evra": "1.19-2.fc38.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-9.fc38.s390x"
+      "evra": "3.3.17-10.fc38.s390x"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-05T00:00:00Z",
+    "generated": "2023-08-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-04T00:53:07Z"
+        "generated": "2023-08-05T03:49:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-05T01:30:03Z"
+        "generated": "2023-08-06T01:31:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 32b658b512..7325e54a0b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1051,7 +1051,7 @@
       "evra": "1.19-2.fc38.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-9.fc38.x86_64"
+      "evra": "3.3.17-10.fc38.x86_64"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-05T00:00:00Z",
+    "generated": "2023-08-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-04T00:54:06Z"
+        "generated": "2023-08-05T03:49:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-05T01:30:09Z"
+        "generated": "2023-08-06T01:31:56Z"
       }
     }
   }

From 87acea488b73f23523481b3c75b217a309cae920 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 9 Aug 2023 22:29:10 +0000
Subject: [PATCH 1747/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/684/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c2fd31440b..1a6a480576 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.aarch64"
     },
     "audit-libs": {
-      "evra": "3.1.1-1.fc38.aarch64"
+      "evra": "3.1.2-1.fc38.aarch64"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.aarch64"
@@ -148,7 +148,7 @@
       "evra": "1.6.19-1.fc38.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc38.aarch64"
+      "evra": "1.3.0-2.fc38.aarch64"
     },
     "containers-common": {
       "evra": "4:1-89.fc38.noarch"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.7-200.fc38.aarch64"
+      "evra": "6.4.8-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.7-200.fc38.aarch64"
+      "evra": "6.4.8-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.7-200.fc38.aarch64"
+      "evra": "6.4.8-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.7-200.fc38.aarch64"
+      "evra": "6.4.8-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-06T00:00:00Z",
+    "generated": "2023-08-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-05T03:48:29Z"
+        "generated": "2023-08-06T22:30:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-06T01:31:34Z"
+        "generated": "2023-08-09T01:25:28Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 376087f5dd..6884ad9d38 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.1.1-1.fc38.ppc64le"
+      "evra": "3.1.2-1.fc38.ppc64le"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.ppc64le"
@@ -148,7 +148,7 @@
       "evra": "1.6.19-1.fc38.ppc64le"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc38.ppc64le"
+      "evra": "1.3.0-2.fc38.ppc64le"
     },
     "containers-common": {
       "evra": "4:1-89.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-06T00:00:00Z",
+    "generated": "2023-08-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-05T03:48:27Z"
+        "generated": "2023-08-06T22:29:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-06T01:31:41Z"
+        "generated": "2023-08-09T01:25:35Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9979394a72..dbfbe22164 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.s390x"
     },
     "audit-libs": {
-      "evra": "3.1.1-1.fc38.s390x"
+      "evra": "3.1.2-1.fc38.s390x"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.s390x"
@@ -145,7 +145,7 @@
       "evra": "1.6.19-1.fc38.s390x"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc38.s390x"
+      "evra": "1.3.0-2.fc38.s390x"
     },
     "containers-common": {
       "evra": "4:1-89.fc38.noarch"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.7-200.fc38.s390x"
+      "evra": "6.4.8-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.7-200.fc38.s390x"
+      "evra": "6.4.8-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.7-200.fc38.s390x"
+      "evra": "6.4.8-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.7-200.fc38.s390x"
+      "evra": "6.4.8-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-06T00:00:00Z",
+    "generated": "2023-08-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-05T03:49:01Z"
+        "generated": "2023-08-06T22:29:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-06T01:31:49Z"
+        "generated": "2023-08-09T01:25:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7325e54a0b..fc9eb4ac3a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -46,7 +46,7 @@
       "evra": "2.5.1-6.fc38.x86_64"
     },
     "audit-libs": {
-      "evra": "3.1.1-1.fc38.x86_64"
+      "evra": "3.1.2-1.fc38.x86_64"
     },
     "authselect": {
       "evra": "1.4.2-2.fc38.x86_64"
@@ -148,7 +148,7 @@
       "evra": "1.6.19-1.fc38.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.1.1-16.fc38.x86_64"
+      "evra": "1.3.0-2.fc38.x86_64"
     },
     "containers-common": {
       "evra": "4:1-89.fc38.noarch"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.7-200.fc38.x86_64"
+      "evra": "6.4.8-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.7-200.fc38.x86_64"
+      "evra": "6.4.8-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.7-200.fc38.x86_64"
+      "evra": "6.4.8-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.7-200.fc38.x86_64"
+      "evra": "6.4.8-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-06T00:00:00Z",
+    "generated": "2023-08-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-05T03:49:20Z"
+        "generated": "2023-08-06T22:30:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-06T01:31:56Z"
+        "generated": "2023-08-09T01:25:49Z"
       }
     }
   }

From c28b10ba56d6b3a4a03ee00d324878e45d47eab7 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Thu, 10 Aug 2023 16:01:22 -0400
Subject: [PATCH 1748/2157] denylist: Snooze ext.config.toolbox for rawhide

Fedora 40 has branched from Rawhide. There is no 'f40' toolbox
container. So running ext.config.toolbox on Rawhide fails now.
ext.config.toolbox is added to the kola denylist till its fixed.

Ref: coreos/fedora-coreos-tracker#1539
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b3a85275c5..f985c87e3a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -35,3 +35,8 @@
   snooze: 2023-08-20
   streams:
     - rawhide
+- pattern: ext.config.toolbox
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1539
+  snooze: 2023-09-10
+  streams:
+    - rawhide

From 148dc6621cfa3682fb74c43bad9a6074c8e9b55b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 11 Aug 2023 00:05:18 +0000
Subject: [PATCH 1749/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/686/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json |  8 ++++----
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1a6a480576..5aa2ec2ce4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.8-200.fc38.aarch64"
+      "evra": "6.4.9-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.8-200.fc38.aarch64"
+      "evra": "6.4.9-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.8-200.fc38.aarch64"
+      "evra": "6.4.9-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.8-200.fc38.aarch64"
+      "evra": "6.4.9-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -532,7 +532,7 @@
       "evra": "0.9.4-2.fc38.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.21-2.fc38.aarch64"
+      "evra": "1.21-3.fc38.aarch64"
     },
     "less": {
       "evra": "633-1.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-09T00:00:00Z",
+    "generated": "2023-08-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-06T22:30:05Z"
+        "generated": "2023-08-09T22:36:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-09T01:25:28Z"
+        "generated": "2023-08-10T00:32:27Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6884ad9d38..0bea1e8e66 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -523,7 +523,7 @@
       "evra": "0.9.4-2.fc38.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.21-2.fc38.ppc64le"
+      "evra": "1.21-3.fc38.ppc64le"
     },
     "less": {
       "evra": "633-1.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-09T00:00:00Z",
+    "generated": "2023-08-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-06T22:29:35Z"
+        "generated": "2023-08-09T22:35:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-09T01:25:35Z"
+        "generated": "2023-08-10T00:32:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dbfbe22164..5f6a3dfa46 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.8-200.fc38.s390x"
+      "evra": "6.4.9-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.8-200.fc38.s390x"
+      "evra": "6.4.9-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.8-200.fc38.s390x"
+      "evra": "6.4.9-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.8-200.fc38.s390x"
+      "evra": "6.4.9-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -490,7 +490,7 @@
       "evra": "0.9.4-2.fc38.s390x"
     },
     "krb5-libs": {
-      "evra": "1.21-2.fc38.s390x"
+      "evra": "1.21-3.fc38.s390x"
     },
     "less": {
       "evra": "633-1.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-09T00:00:00Z",
+    "generated": "2023-08-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-06T22:29:26Z"
+        "generated": "2023-08-09T22:35:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-09T01:25:42Z"
+        "generated": "2023-08-10T00:32:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fc9eb4ac3a..c1fa6ec118 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.8-200.fc38.x86_64"
+      "evra": "6.4.9-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.8-200.fc38.x86_64"
+      "evra": "6.4.9-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.8-200.fc38.x86_64"
+      "evra": "6.4.9-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.8-200.fc38.x86_64"
+      "evra": "6.4.9-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -538,7 +538,7 @@
       "evra": "0.9.4-2.fc38.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.21-2.fc38.x86_64"
+      "evra": "1.21-3.fc38.x86_64"
     },
     "less": {
       "evra": "633-1.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-09T00:00:00Z",
+    "generated": "2023-08-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-06T22:30:37Z"
+        "generated": "2023-08-09T22:35:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-09T01:25:49Z"
+        "generated": "2023-08-10T00:32:48Z"
       }
     }
   }

From 44a6fa6cb3edbfb1a5ff483152724db9250d3438 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 10 Aug 2023 23:58:03 -0400
Subject: [PATCH 1750/2157] overrides: drop systemd-253.4-1.fc38 pin

This was fixed in v253.6+. See
https://github.com/coreos/fedora-coreos-tracker/issues/1508#issuecomment-1674182241

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1508
---
 manifest-lock.overrides.yaml | 30 ------------------------------
 1 file changed, 30 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fae8596b9b..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,33 +14,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
-  systemd:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin
-  systemd-container:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin
-  systemd-libs:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin
-  systemd-pam:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin
-  systemd-resolved:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin
-  systemd-udev:
-    evr: 253.4-1.fc38
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-      type: pin

From c17b962417b3ef21edb46eb083d7525e8936a647 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 11 Aug 2023 22:30:11 +0000
Subject: [PATCH 1751/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/687/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 38 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 38 +++++++++++++++++++-------------------
 4 files changed, 74 insertions(+), 74 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5aa2ec2ce4..45948090f3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -397,7 +397,7 @@
       "evra": "3.8.0-2.fc38.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230526.00-3.fc38.noarch"
+      "evra": "20230808.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-3.fc38.aarch64"
@@ -430,7 +430,7 @@
       "evra": "57-1.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.aarch64"
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.aarch64"
@@ -901,7 +901,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -949,7 +949,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.aarch64"
@@ -1063,7 +1063,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1189,22 +1189,22 @@
       "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.4-1.fc38.aarch64"
+      "evra": "253.7-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-10T00:00:00Z",
+    "generated": "2023-08-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-09T22:36:36Z"
+        "generated": "2023-08-11T00:09:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-10T00:32:27Z"
+        "generated": "2023-08-11T00:32:48Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0bea1e8e66..01bb67721e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -79,7 +79,7 @@
       "evra": "32:9.18.17-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -421,7 +421,7 @@
       "evra": "57-1.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.ppc64le"
@@ -853,10 +853,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.ppc64le"
@@ -895,7 +895,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -943,7 +943,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.ppc64le"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.4-1.fc38.ppc64le"
+      "evra": "253.7-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-10T00:00:00Z",
+    "generated": "2023-08-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-09T22:35:11Z"
+        "generated": "2023-08-11T00:08:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-10T00:32:34Z"
+        "generated": "2023-08-11T00:32:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5f6a3dfa46..8b24997cc7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -76,7 +76,7 @@
       "evra": "32:9.18.17-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -391,7 +391,7 @@
       "evra": "57-1.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.s390x"
@@ -793,10 +793,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.s390x"
@@ -835,7 +835,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -880,7 +880,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.s390x"
@@ -991,7 +991,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1114,22 +1114,22 @@
       "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.4-1.fc38.s390x"
+      "evra": "253.7-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-10T00:00:00Z",
+    "generated": "2023-08-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-09T22:35:03Z"
+        "generated": "2023-08-11T00:08:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-10T00:32:41Z"
+        "generated": "2023-08-11T00:33:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c1fa6ec118..d3f5fb544e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -397,7 +397,7 @@
       "evra": "3.8.0-2.fc38.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230526.00-3.fc38.noarch"
+      "evra": "20230808.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-3.fc38.x86_64"
@@ -436,7 +436,7 @@
       "evra": "57-1.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.x86_64"
@@ -859,10 +859,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.x86_64"
@@ -907,7 +907,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -955,7 +955,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230625-151.fc38.noarch"
+      "evra": "20230804-152.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.4-1.fc38.x86_64"
+      "evra": "253.7-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-10T00:00:00Z",
+    "generated": "2023-08-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-09T22:35:58Z"
+        "generated": "2023-08-11T00:09:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-10T00:32:48Z"
+        "generated": "2023-08-11T00:33:09Z"
       }
     }
   }

From c902b8ade48961736a2ef85df26b7e7cd9cda5e6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 13 Aug 2023 22:37:08 +0000
Subject: [PATCH 1752/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/689/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 38 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 73 insertions(+), 73 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 45948090f3..cb6617f24f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -430,7 +430,7 @@
       "evra": "57-1.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.aarch64"
@@ -697,7 +697,7 @@
       "evra": "1.0.1-23.fc38.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-0.fc38.aarch64"
+      "evra": "1:2.6.3-1.rc3.fc38.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.aarch64"
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.aarch64"
@@ -901,7 +901,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -931,7 +931,7 @@
       "evra": "0.52.23-2.fc38.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-0.fc38.aarch64"
+      "evra": "1:2.6.3-1.rc3.fc38.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.aarch64"
@@ -949,7 +949,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.aarch64"
@@ -979,10 +979,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.4-2.fc38.aarch64"
+      "evra": "2023.5-2.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.4-2.fc38.aarch64"
+      "evra": "2023.5-2.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.aarch64"
@@ -1063,7 +1063,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-11T00:00:00Z",
+    "generated": "2023-08-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T00:09:11Z"
+        "generated": "2023-08-11T22:33:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-11T00:32:48Z"
+        "generated": "2023-08-12T18:00:49Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 01bb67721e..2e5a86b1ec 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -79,7 +79,7 @@
       "evra": "32:9.18.17-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -421,7 +421,7 @@
       "evra": "57-1.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.ppc64le"
@@ -688,7 +688,7 @@
       "evra": "1.0.1-23.fc38.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-0.fc38.ppc64le"
+      "evra": "1:2.6.3-1.rc3.fc38.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.ppc64le"
@@ -853,10 +853,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.ppc64le"
@@ -895,7 +895,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -925,7 +925,7 @@
       "evra": "0.52.23-2.fc38.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-0.fc38.ppc64le"
+      "evra": "1:2.6.3-1.rc3.fc38.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.ppc64le"
@@ -943,7 +943,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.ppc64le"
@@ -973,13 +973,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.4-2.fc38.ppc64le"
+      "evra": "2023.5-2.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.4-2.fc38.ppc64le"
+      "evra": "2023.5-2.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.4-2.fc38.ppc64le"
+      "evra": "2023.5-2.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.ppc64le"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-11T00:00:00Z",
+    "generated": "2023-08-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T00:08:26Z"
+        "generated": "2023-08-11T22:33:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-11T00:32:55Z"
+        "generated": "2023-08-12T18:00:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8b24997cc7..9884105276 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -76,7 +76,7 @@
       "evra": "32:9.18.17-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -391,7 +391,7 @@
       "evra": "57-1.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.s390x"
@@ -640,7 +640,7 @@
       "evra": "1.0.1-23.fc38.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-0.fc38.s390x"
+      "evra": "1:2.6.3-1.rc3.fc38.s390x"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.s390x"
@@ -793,10 +793,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.s390x"
@@ -835,7 +835,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -865,7 +865,7 @@
       "evra": "0.52.23-2.fc38.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-0.fc38.s390x"
+      "evra": "1:2.6.3-1.rc3.fc38.s390x"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.s390x"
@@ -880,7 +880,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.s390x"
@@ -907,10 +907,10 @@
       "evra": "1:3.0.9-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.4-2.fc38.s390x"
+      "evra": "2023.5-2.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.4-2.fc38.s390x"
+      "evra": "2023.5-2.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.s390x"
@@ -991,7 +991,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1036,10 +1036,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-11T00:00:00Z",
+    "generated": "2023-08-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T00:08:37Z"
+        "generated": "2023-08-11T22:33:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-11T00:33:02Z"
+        "generated": "2023-08-12T18:01:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d3f5fb544e..64300c8e56 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -436,7 +436,7 @@
       "evra": "57-1.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.x86_64"
@@ -700,7 +700,7 @@
       "evra": "1.0.1-23.fc38.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-0.fc38.x86_64"
+      "evra": "1:2.6.3-1.rc3.fc38.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.4-2.fc38.x86_64"
@@ -859,10 +859,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.x86_64"
@@ -907,7 +907,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -937,7 +937,7 @@
       "evra": "0.52.23-2.fc38.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-0.fc38.x86_64"
+      "evra": "1:2.6.3-1.rc3.fc38.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.5-2.fc38.x86_64"
@@ -955,7 +955,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.x86_64"
@@ -985,10 +985,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.4-2.fc38.x86_64"
+      "evra": "2023.5-2.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.4-2.fc38.x86_64"
+      "evra": "2023.5-2.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.x86_64"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230804-152.fc38.noarch"
+      "evra": "20230804-153.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.22-1.fc38.noarch"
+      "evra": "38.24-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-11T00:00:00Z",
+    "generated": "2023-08-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T00:09:37Z"
+        "generated": "2023-08-11T22:34:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-11T00:33:09Z"
+        "generated": "2023-08-12T18:01:09Z"
       }
     }
   }

From f7768d8c96a46296fcad32b4a7aff250542f977f Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 18 Jul 2023 15:15:53 -0400
Subject: [PATCH 1753/2157] initramfs: Ensure we
 `Requires=ostree-prepare-root.service`

Today if that unit doesn't start we can continue on
and continue on to `ignition-ostree-check-rootfs-size.service`
which will fail.
---
 .../05core/usr/lib/dracut/modules.d/35coreos-live/live-generator | 1 +
 .../40ignition-ostree/ignition-ostree-check-rootfs-size.service  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index 15fda8c241..c4010661cc 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -217,6 +217,7 @@ Requires=sysroot.mount
 After=sysroot.mount
 # And after OSTree has set up the chroot() equivalent
 After=ostree-prepare-root.service
+Requires=ostree-prepare-root.service
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
index 610c469474..340b4d4251 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-check-rootfs-size.service
@@ -6,6 +6,7 @@ ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 After=ignition-ostree-growfs.service
 After=ostree-prepare-root.service
+Requires=ostree-prepare-root.service
 # Allow Ignition config to blank out the warning
 Before=ignition-files.service
 

From 24a406337d4e37d0c4586f23d503e09faf8ae5b4 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 18 Jul 2023 16:52:10 -0400
Subject: [PATCH 1754/2157] initramfs: Remove manual sysroot mounting

Our dependency graph for firstboot is today kind of broken
because we only implicitly generate `sysroot.mount` as a side
effect of executing `ignition-ostree-mount-sysroot.sh`
(which is part of `ignition-ostree-mount-{firstboot,subsequent}-sysroot.service`)s.

As of relatively recently, we switched to auto-synthesizing the `root=`
karg after ignition (in `coroes-boot-edit.service`).  This means
that the systemd-fstab-generator will always win on subsequent boots,
so the systemd unit `-subsequent-sysroot.service` is dead code.

On firstboot, let's generate `sysroot.mount` out of the diskful
generator, which will ensure it always exists and fix our dependency
graph.

This should improve compatibility with newer systemd, and just
make everything saner too.
---
 .../coreos-diskful-generator                  | 17 +++++++++++++
 .../modules.d/35coreos-live/live-generator    |  5 +---
 .../ignition-ostree-growfs.service            |  2 +-
 ...ion-ostree-mount-firstboot-sysroot.service | 25 -------------------
 ...on-ostree-mount-subsequent-sysroot.service | 24 ------------------
 .../ignition-ostree-mount-sysroot.sh          | 18 -------------
 ...gnition-ostree-transposefs-restore.service |  1 -
 .../ignition-ostree-uuid-root.service         |  4 +--
 .../40ignition-ostree/module-setup.sh         |  4 ---
 9 files changed, 21 insertions(+), 79 deletions(-)
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
 delete mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
 delete mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-sysroot.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index c6cb313cea..1c400b2422 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -41,6 +41,23 @@ add_requires() {
     ln -sf "../${name}" "${requires_dir}/${name}"
 }
 
+if ! is-live-image; then
+    mkdir -p ${UNIT_DIR}
+    # We want to generate sysroot.mount on ostree systems, but we don't want
+    # to run if there's already a root= karg, where the systemd-fstab-generator
+    # should win.
+    if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)"; then
+        cat >${UNIT_DIR}/sysroot.mount << 'EOF'
+[Unit]
+Before=initrd-root-fs.target
+[Mount]
+What=/dev/disk/by-label/root
+Where=/sysroot
+EOF
+        add_requires sysroot.mount initrd-root-fs.target
+    fi
+fi
+
 if ! $(cmdline_bool 'ignition.firstboot' 0); then
     exit 0
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index c4010661cc..dabe2eeb2b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -212,10 +212,7 @@ DefaultDependencies=false
 RequiresMountsFor=/run/ephemeral
 ConditionPathExists=/usr/lib/initrd-release
 ConditionPathExists=!/run/ephemeral/var
-# Make sure /sysroot is mounted first, since we're mounting under there
-Requires=sysroot.mount
-After=sysroot.mount
-# And after OSTree has set up the chroot() equivalent
+# We want to run after ostree is set up
 After=ostree-prepare-root.service
 Requires=ostree-prepare-root.service
 
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index da47d6660c..ce25509ac6 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -4,7 +4,7 @@ DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
 Before=initrd-root-fs.target
-Before=sysroot.mount ignition-ostree-mount-firstboot-sysroot.service
+Before=sysroot.mount
 After=ignition-ostree-uuid-root.service
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
deleted file mode 100644
index 3dddf50969..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-firstboot-sysroot.service
+++ /dev/null
@@ -1,25 +0,0 @@
-[Unit]
-Description=Ignition OSTree: Mount /sysroot (First Boot)
-# These dependencies should match the "other" in
-# ignition-ostree-mount-subsequent-sysroot.service
-DefaultDependencies=false
-# If root is specified, then systemd's generator will win
-ConditionKernelCommandLine=!root
-ConditionKernelCommandLine=ostree
-# This is redundant since we're queued on -diskful.target, but eh.
-ConditionPathExists=!/run/ostree-live
-# There can be only one, Highlander style
-Conflicts=ignition-ostree-mount-subsequent-sysroot.service
-Before=initrd-root-fs.target
-After=ignition-disks.service
-# Note we don't have a Requires: /dev/disk/by-label/root here like
-# the -subsequent service does because ignition-disks may have
-# regenerated it.
-Requires=ignition-disks.service
-# These have an explicit dependency on After=sysroot.mount today
-Before=ostree-prepare-root.service ignition-remount-sysroot.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/sbin/ignition-ostree-mount-sysroot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
deleted file mode 100644
index fe08fe6aab..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-subsequent-sysroot.service
+++ /dev/null
@@ -1,24 +0,0 @@
-# Note this unit is conditionally enabled by ignition-ostree-generator
-[Unit]
-Description=CoreOS: Mount /sysroot (Subsequent Boot)
-# These dependencies should match the "other" in
-# ignition-ostree-mount-firsboot-sysroot.service
-DefaultDependencies=false
-# If root is specified, then systemd's generator will win
-ConditionKernelCommandLine=!root
-ConditionKernelCommandLine=ostree
-ConditionPathExists=!/run/ostree-live
-# There can be only one, Highlander style
-Conflicts=ignition-ostree-mount-firstboot-sysroot.service
-# And in contrast to the firstboot, we expect
-# the root device to be ready.
-Requires=dev-disk-by\x2dlabel-root.device
-After=dev-disk-by\x2dlabel-root.device
-Before=initrd-root-fs.target
-# This has an explicit dependency on After=sysroot.mount today
-Before=ostree-prepare-root.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/sbin/ignition-ostree-mount-sysroot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-sysroot.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-sysroot.sh
deleted file mode 100755
index a51c4b26fe..0000000000
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-sysroot.sh
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-# Note that on *new machines* this script is now only ever used on firstboot. On
-# subsequent boots, systemd-fstab-generator mounts /sysroot from the
-# root=UUID=... and rootflags=... kargs.
-
-# We may do a migration window at some point where older machines have these
-# kargs injected so that we can simplify the model further.
-
-rootpath=/dev/disk/by-label/root
-if ! [ -b "${rootpath}" ]; then
-  echo "ignition-ostree-mount-sysroot: Failed to find ${rootpath}" 1>&2
-  exit 1
-fi
-
-echo "Mounting ${rootpath} ($(realpath "${rootpath}")) to /sysroot"
-mount -o "$(coreos-rootflags)" "${rootpath}" /sysroot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
index 3a294dd705..eef3c064c7 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs-restore.service
@@ -5,7 +5,6 @@ After=ignition-disks.service
 # Avoid racing with UUID regeneration
 After=ignition-ostree-uuid-root.service
 After=ignition-ostree-growfs.service
-Before=ignition-ostree-mount-firstboot-sysroot.service
 # https://issues.redhat.com/browse/OCPBUGS-16157
 # On multipath systems mounting the /sysroot before
 # the ignition-ostree services causes the transpose to fail.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
index 264801192e..80ecf9d42a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-root.service
@@ -1,6 +1,6 @@
 [Unit]
 Description=Ignition OSTree: Regenerate Filesystem UUID (root)
-# These conditions match ignition-ostree-mount-firstboot-sysroot.service
+# These conditions match those generated in coreos-diskful-generator
 DefaultDependencies=false
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
@@ -18,7 +18,7 @@ Before=systemd-fsck@dev-disk-by\x2dlabel-dm-mpath-root.service
 # Note we don't have a Requires: /dev/disk/by-label/root here like
 # the -subsequent service does because ignition-disks may have
 # regenerated it.
-Before=ignition-ostree-mount-firstboot-sysroot.service
+Before=sysroot.mount
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index f8450b38c0..df3784e168 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -88,15 +88,11 @@ install() {
     done
 
     # Disk support
-    install_ignition_unit ignition-ostree-mount-firstboot-sysroot.service diskful
     for p in boot root; do
         install_ignition_unit ignition-ostree-uuid-${p}.service diskful
     done
     inst_script "$moddir/ignition-ostree-firstboot-uuid" \
         "/usr/sbin/ignition-ostree-firstboot-uuid"
-    install_ignition_unit ignition-ostree-mount-subsequent-sysroot.service diskful-subsequent
-    inst_script "$moddir/ignition-ostree-mount-sysroot.sh" \
-        "/usr/sbin/ignition-ostree-mount-sysroot"
     inst_script "$moddir/coreos-rootflags.sh" \
         "/usr/sbin/coreos-rootflags"
 

From de588fc5e7956e4ff6eb56ac1ba4ef11a24c2dde Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Aug 2023 16:28:37 -0400
Subject: [PATCH 1755/2157] overlay.d/05core: move coreos-rootflags to
 35coreos-ignition dracut module

Since ignition-ostree-mount-sysroot.sh was removed in 45396d8 the only
"consumer" of coreos-rootflags is coreos-boot-edit.service, which calls
rdcore, which calls coreos-rootflags. Let's move it into the
35coreos-ignition module where coreos-boot-edit lives.
---
 .../coreos-rootflags.sh                                        | 0
 .../usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh | 3 +++
 .../usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh | 2 --
 3 files changed, 3 insertions(+), 2 deletions(-)
 rename overlay.d/05core/usr/lib/dracut/modules.d/{40ignition-ostree => 35coreos-ignition}/coreos-rootflags.sh (100%)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.sh
similarity index 100%
rename from overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/coreos-rootflags.sh
rename to overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.sh
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index d39da6fa08..490f6fc29b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -87,4 +87,7 @@ install() {
     inst_script "$moddir/coreos-secex-ignition-decrypt.sh" \
         "/usr/sbin/coreos-secex-ignition-decrypt"
 
+    inst_multiple jq blkid
+    inst_script "$moddir/coreos-rootflags.sh" \
+        "/usr/sbin/coreos-rootflags"
 }
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index df3784e168..81ab59896b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -93,8 +93,6 @@ install() {
     done
     inst_script "$moddir/ignition-ostree-firstboot-uuid" \
         "/usr/sbin/ignition-ostree-firstboot-uuid"
-    inst_script "$moddir/coreos-rootflags.sh" \
-        "/usr/sbin/coreos-rootflags"
 
     install_ignition_unit ignition-ostree-growfs.service
     inst_script "$moddir/ignition-ostree-growfs.sh" \

From b7f5dabd5921f824db7bc85b8adc60d08fd52ce1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Aug 2023 16:35:40 -0400
Subject: [PATCH 1756/2157] overlay.d/05core: add coreos-rootflags back to
 diskful sysroot.mount

In 45396d8 we started creating a static sysroot.mount to appease
systemd 254+ (see [1]), but it missed the `coreos-rootflags` handling
that was present in ignition-ostree-mount-sysroot.sh.

This PR adds back in the dynamic rootflags by using an EnvironmentFile
generated by a coreos-rootflags.service to get the same behavior.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1527#issuecomment-1656786452
---
 .../coreos-diskful-generator                  | 18 +++++++++++++
 .../coreos-rootflags.service                  | 27 +++++++++++++++++++
 .../35coreos-ignition/module-setup.sh         |  1 +
 3 files changed, 46 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 1c400b2422..c2560c821e 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -41,6 +41,21 @@ add_requires() {
     ln -sf "../${name}" "${requires_dir}/${name}"
 }
 
+# Generate a sysroot.mount unit. We can't do this later by dynamically
+# doing the mount like we used to because systemd 254+ will drop units that
+# require sysroot.mount from the transaction:
+# https://github.com/coreos/fedora-coreos-tracker/issues/1527#issuecomment-1656786452
+#
+# We'll dynamically pick up what mount options to use from the OPTIONS
+# environment variable in /run/coreos-rootflags (generated by
+# coreos-rootflags.service).
+#
+# Note that for new machines this is *only* useful on first boot because
+# coreos-boot-edit.service will add the root= and rootflags= kargs to the
+# kernel command line for subsequent boots. However we haven't migrated
+# all old machines so there are still some that could exist that don't
+# have root= and rootflags= kargs. For that reason we run this bit of
+# code on EVERY diskful boot.
 if ! is-live-image; then
     mkdir -p ${UNIT_DIR}
     # We want to generate sysroot.mount on ostree systems, but we don't want
@@ -50,9 +65,12 @@ if ! is-live-image; then
         cat >${UNIT_DIR}/sysroot.mount << 'EOF'
 [Unit]
 Before=initrd-root-fs.target
+After=coreos-rootflags.service
 [Mount]
+EnvironmentFile=/run/coreos-rootflags
 What=/dev/disk/by-label/root
 Where=/sysroot
+Options=${OPTIONS}
 EOF
         add_requires sysroot.mount initrd-root-fs.target
     fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
new file mode 100644
index 0000000000..22d24e215d
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
@@ -0,0 +1,27 @@
+[Unit]
+Description=Determine root FS mount option flags
+DefaultDependencies=false
+ConditionKernelCommandLine=!root
+ConditionPathExists=!/run/ostree-live
+# Just in case. We shouldn't run twice.
+ConditionPathExists=!/run/coreos-rootflags
+# Since the sysroot.mount depends on the options generated by us
+# we must run before sysroot.mount
+Before=sysroot.mount
+# In case the disk was manipulated by Ignition and we need to pick
+# up mount options from Ignition config.
+After=ignition-disks.service
+# The script checks if the rootfs was reprovisioned so let's wait
+# until after that has completed if it was requested.
+After=ignition-ostree-transposefs-restore.service
+# Requires the root device to exist
+Requires=dev-disk-by\x2dlabel-root.device
+After=dev-disk-by\x2dlabel-root.device
+
+[Service]
+Type=oneshot
+StandardError=journal
+StandardOutput=append:/run/coreos-rootflags
+ExecStartPre=echo -n 'OPTIONS='
+ExecStart=/usr/sbin/coreos-rootflags
+RemainAfterExit=yes
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index 490f6fc29b..a381d4e980 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -90,4 +90,5 @@ install() {
     inst_multiple jq blkid
     inst_script "$moddir/coreos-rootflags.sh" \
         "/usr/sbin/coreos-rootflags"
+    install_ignition_unit coreos-rootflags.service initrd-root-fs.target
 }

From 64db71b7bac872b901b4ea4ac144584b364b21e4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Aug 2023 16:47:40 -0400
Subject: [PATCH 1757/2157] overlay.d/05core: drop RHEL8 path from
 coreos-gpt-setup.sh

No more RHEL8. Delete the dead code.
---
 .../35coreos-ignition/coreos-gpt-setup.sh         | 15 ++-------------
 1 file changed, 2 insertions(+), 13 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
index e3faab91a3..11cebd34f3 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.sh
@@ -8,23 +8,12 @@ UNINITIALIZED_GUID='00000000-0000-4000-a000-000000000001'
 
 # If it's on multipath, get the parent device from udev properties.
 DM_MPATH=$(eval $(udevadm info --query property --export "$1") && echo "${DM_MPATH:-}")
-
 if [ -n "${DM_MPATH:-}" ]; then
     PKNAME=/dev/mapper/$DM_MPATH
     PTUUID=$(eval $(udevadm info --query property --export "$PKNAME") && echo "${ID_PART_TABLE_UUID:-}")
 else
-    # On RHEL 8 the version of lsblk doesn't have PTUUID. Let's detect
-    # if lsblk supports it. In the future we can remove the 'if' and
-    # just use the 'else'.
-    if ! lsblk --help | grep -q PTUUID; then
-        # Get the PKNAME
-        eval $(lsblk --output PKNAME --pairs --paths --nodeps "$1")
-        # Get the PTUUID
-        eval $(blkid -p -o export $PKNAME)
-    else
-        # PTUUID is the disk guid, PKNAME is the parent kernel name
-        eval $(lsblk --output PTUUID,PKNAME --pairs --paths --nodeps "$1")
-    fi
+    # PTUUID is the disk guid, PKNAME is the parent kernel name
+    eval $(lsblk --output PTUUID,PKNAME --pairs --paths --nodeps "$1")
 fi
 
 # Skip in the following two cases:

From 0bbf4202aa9804b02c71d96e39d76f4dc80d2097 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Aug 2023 16:04:30 -0400
Subject: [PATCH 1758/2157] denylist: drop denials for ntp tests

The underlying issue from https://github.com/coreos/fedora-coreos-tracker/issues/1508
is now fixed and we can remove these tests from the denylist.
---
 kola-denylist.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f985c87e3a..d2a4b0200b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,16 +25,6 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: ext.config.ntp.chrony.dhcp-propagation
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-  snooze: 2023-08-20
-  streams:
-    - rawhide
-- pattern: ext.config.ntp.timesyncd.dhcp-propagation
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1508
-  snooze: 2023-08-20
-  streams:
-    - rawhide
 - pattern: ext.config.toolbox
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1539
   snooze: 2023-09-10

From b49144ba105709a38251dbae1d7d592fdddc20cd Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Aug 2023 16:12:35 -0400
Subject: [PATCH 1759/2157] denylist: snooze some networking tests in rawhide

If they use kernel arguemnts systemd-network-generator is going to fail
until we can new a fixed SELinux policy. See
https://github.com/coreos/fedora-coreos-tracker/issues/1542
---
 kola-denylist.yaml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d2a4b0200b..a2d0536d09 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,3 +30,41 @@
   snooze: 2023-09-10
   streams:
     - rawhide
+- pattern: ext.config.networking.nameserver
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.no-persist-ip
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.prefer-ignition-networking
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.force-persist-ip
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.bridge-static-via-kargs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28
+  streams:
+    - rawhide
+- pattern: ext.config.networking.mtu-on-bond-kargs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  snooze: 2023-08-28

From 6739a267291be67f61cfbdec16366e3e75a0e8ba Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Aug 2023 16:14:47 -0400
Subject: [PATCH 1760/2157] denylist: add branched, next-devel streams to
 denials for rawhide

F39 has been branched from rawhide and we'll soon be building a
branched stream again and also next-devel will soon be based on F39.
Let's add branched and next-devel to those denylist entries.

Don't apply this to the `toolbox` entry because that failure is only
because `rawhide` is now F40.
---
 kola-denylist.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a2d0536d09..e725cabacd 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -35,36 +35,54 @@
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
   streams:
     - rawhide
+    - branched
+    - next-devel
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  streams:
+    - rawhide
+    - branched
+    - next-devel

From 377823b0efd146b78153024abfdd85cc9b07eb61 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 11 Aug 2023 17:27:45 -0400
Subject: [PATCH 1761/2157] overlay.d/05core: drop Requires on root device for
 coreos-rootflags.service

We need to drop this Requires for a subtle reason.

In this unit we do have ConditionPathExists=!/run/ostree-live
so we'll never run on a "live" boot, but those Conditions won't
get evaluated until all other dependencies are satisfied. On a
live boot there won't be a /dev/disk/by-label/root device because
the root filesystem is coming from the ISO or PXE so the
coreos-rootflags.service would wait forever for that device to
exist and eventually fail.
---
 .../modules.d/35coreos-ignition/coreos-rootflags.service       | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
index 22d24e215d..3703839141 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
@@ -14,8 +14,7 @@ After=ignition-disks.service
 # The script checks if the rootfs was reprovisioned so let's wait
 # until after that has completed if it was requested.
 After=ignition-ostree-transposefs-restore.service
-# Requires the root device to exist
-Requires=dev-disk-by\x2dlabel-root.device
+# Needs to run after the root device is available
 After=dev-disk-by\x2dlabel-root.device
 
 [Service]

From 9819c5f76427a394adc5a36af604fcfa3a50def1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Aug 2023 13:04:41 -0400
Subject: [PATCH 1762/2157] overlay.d/05core: simplify logic in
 diskful-generator

The two pieces of work in this file are both only executed
if !is-live-image so let's just flip the logic and exit early
if we are on a live image.
---
 .../coreos-diskful-generator                  | 75 ++++++++++---------
 1 file changed, 38 insertions(+), 37 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index c2560c821e..6589e48997 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -41,6 +41,11 @@ add_requires() {
     ln -sf "../${name}" "${requires_dir}/${name}"
 }
 
+# If this is a live image then exit early.
+if is-live-image; then
+    exit 0
+fi
+
 # Generate a sysroot.mount unit. We can't do this later by dynamically
 # doing the mount like we used to because systemd 254+ will drop units that
 # require sysroot.mount from the transaction:
@@ -56,13 +61,12 @@ add_requires() {
 # all old machines so there are still some that could exist that don't
 # have root= and rootflags= kargs. For that reason we run this bit of
 # code on EVERY diskful boot.
-if ! is-live-image; then
-    mkdir -p ${UNIT_DIR}
-    # We want to generate sysroot.mount on ostree systems, but we don't want
-    # to run if there's already a root= karg, where the systemd-fstab-generator
-    # should win.
-    if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)"; then
-        cat >${UNIT_DIR}/sysroot.mount << 'EOF'
+mkdir -p ${UNIT_DIR}
+# We want to generate sysroot.mount on ostree systems, but we don't want
+# to run if there's already a root= karg, where the systemd-fstab-generator
+# should win.
+if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)"; then
+    cat >${UNIT_DIR}/sysroot.mount << 'EOF'
 [Unit]
 Before=initrd-root-fs.target
 After=coreos-rootflags.service
@@ -72,19 +76,17 @@ What=/dev/disk/by-label/root
 Where=/sysroot
 Options=${OPTIONS}
 EOF
-        add_requires sysroot.mount initrd-root-fs.target
-    fi
+    add_requires sysroot.mount initrd-root-fs.target
 fi
 
 if ! $(cmdline_bool 'ignition.firstboot' 0); then
     exit 0
 fi
 
-if ! is-live-image; then
-    # coreos-ignition-setup-user.service should depend on the boot device node
-    # only on diskful boots
-    mkdir -p "${UNIT_DIR}/coreos-ignition-setup-user.service.d"
-    cat > "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" <<EOF
+# coreos-ignition-setup-user.service should depend on the boot device node
+# only on diskful boots
+mkdir -p "${UNIT_DIR}/coreos-ignition-setup-user.service.d"
+cat > "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" <<EOF
 [Unit]
 Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
@@ -93,33 +95,32 @@ Requires=coreos-gpt-setup.service
 After=coreos-gpt-setup.service
 EOF
 
-    # create symlink for udev rule
-    mkdir -p /run/udev/rules.d/
-    ln -sf /usr/lib/coreos/80-coreos-boot-disk.rules \
-          /run/udev/rules.d/80-coreos-boot-disk.rules
+# create symlink for udev rule
+mkdir -p /run/udev/rules.d/
+ln -sf /usr/lib/coreos/80-coreos-boot-disk.rules \
+      /run/udev/rules.d/80-coreos-boot-disk.rules
 
-    # IBM Secure Execution case
-    # During firstboot we have to reencrypt '/boot' and '/', to do that an Ignition config
-    # is injected. 'coreos-boot-disk' is required for this
-    secure_execution=0
-    if [[ $(uname -m) == s390x ]] && [[ -e /sys/firmware/uv/prot_virt_guest ]]; then
-        secure_execution=$(cat /sys/firmware/uv/prot_virt_guest)
-    fi
-    if [[ "${secure_execution}" = "1" ]]; then
-        mkdir -p /run/coreos/
-        touch /run/coreos/secure-execution
-        cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
-        # Add dropins to disable Ignition logging for all stages
-        stages=("fetch-offline" "fetch" "kargs" "disks" "mount" "files")
-        for s in "${stages[@]}"; do
-            dropin="${UNIT_DIR}/ignition-${s}.service.d"
-            mkdir -p "${dropin}"
-            cat > "${dropin}/10-secex.conf" <<EOF
+# IBM Secure Execution case
+# During firstboot we have to reencrypt '/boot' and '/', to do that an Ignition config
+# is injected. 'coreos-boot-disk' is required for this
+secure_execution=0
+if [[ $(uname -m) == s390x ]] && [[ -e /sys/firmware/uv/prot_virt_guest ]]; then
+    secure_execution=$(cat /sys/firmware/uv/prot_virt_guest)
+fi
+if [[ "${secure_execution}" = "1" ]]; then
+    mkdir -p /run/coreos/
+    touch /run/coreos/secure-execution
+    cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign
+    # Add dropins to disable Ignition logging for all stages
+    stages=("fetch-offline" "fetch" "kargs" "disks" "mount" "files")
+    for s in "${stages[@]}"; do
+        dropin="${UNIT_DIR}/ignition-${s}.service.d"
+        mkdir -p "${dropin}"
+        cat > "${dropin}/10-secex.conf" <<EOF
 [Service]
 Environment=IGNITION_ARGS=-log-to-stdout
 StandardOutput=null
 StandardError=null
 EOF
-        done
-    fi
+    done
 fi

From b0ce10a41b20cf5e7976498658231d09062f3339 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 14 Aug 2023 13:13:19 -0400
Subject: [PATCH 1763/2157] overlay.d/05core: enable coreos-rootflags.service
 when needed

Enabling coreos-rootflags.service in the generator makes it so that
we can only enable it on boots where it is needed and we won't see
superfluous messsages about it "not starting due to a condition"
in the journal.
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator       | 1 +
 .../modules.d/35coreos-ignition/coreos-rootflags.service       | 3 +--
 .../usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 6589e48997..8414013758 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -77,6 +77,7 @@ Where=/sysroot
 Options=${OPTIONS}
 EOF
     add_requires sysroot.mount initrd-root-fs.target
+    add_requires coreos-rootflags.service initrd-root-fs.target
 fi
 
 if ! $(cmdline_bool 'ignition.firstboot' 0); then
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
index 3703839141..3981f08510 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-rootflags.service
@@ -1,8 +1,6 @@
 [Unit]
 Description=Determine root FS mount option flags
 DefaultDependencies=false
-ConditionKernelCommandLine=!root
-ConditionPathExists=!/run/ostree-live
 # Just in case. We shouldn't run twice.
 ConditionPathExists=!/run/coreos-rootflags
 # Since the sysroot.mount depends on the options generated by us
@@ -15,6 +13,7 @@ After=ignition-disks.service
 # until after that has completed if it was requested.
 After=ignition-ostree-transposefs-restore.service
 # Needs to run after the root device is available
+Requires=dev-disk-by\x2dlabel-root.device
 After=dev-disk-by\x2dlabel-root.device
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index a381d4e980..f78725fdc6 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -90,5 +90,6 @@ install() {
     inst_multiple jq blkid
     inst_script "$moddir/coreos-rootflags.sh" \
         "/usr/sbin/coreos-rootflags"
-    install_ignition_unit coreos-rootflags.service initrd-root-fs.target
+    # Install unit, but don't enable it. Will be pulled in by diskful generator.
+    inst_simple "$moddir/coreos-rootflags.service" "$systemdsystemunitdir/coreos-rootflags.service"
 }

From b2f2261fe181b791579b387de68b8ec659ede5d2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 8 Aug 2023 23:38:41 -0400
Subject: [PATCH 1764/2157] overlay.d/05core: drop RHEL8 workarounds for
 live-generator

This should be dead code now.
---
 .../coreos-liveiso-persist-osmet.service      |  2 --
 .../modules.d/35coreos-live/live-generator    | 34 +------------------
 2 files changed, 1 insertion(+), 35 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
index 3cef6adc30..2d50b3315f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
@@ -4,8 +4,6 @@ DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionKernelCommandLine=coreos.liveiso
 RequiresMountsFor=/run/media/iso
-# on el8, the ISO is mounted by our own systemd unit
-After=run-media-iso-mount.service
 Before=initrd-switch-root.target
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index dabe2eeb2b..dc761f7b30 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -54,11 +54,6 @@ ExecStartPost=/usr/sbin/ostree-cmdline stop
 EOF
 
 isoroot=$(getarg coreos.liveiso= ||:)
-is_rhcos8() {
-    # Unfortunately we can't rely on /etc/os-release since el8 doesn't seem to
-    # have https://github.com/dracutdevs/dracut/pull/655.
-    [[ "${isoroot}" == rhcos-* ]] && [[ $(uname -r) == *.el8* ]]
-}
 
 if [ -z "${isoroot}" ]; then
     # In this case, the rootfs is already unpacked into the initrd, or we need
@@ -90,32 +85,8 @@ else
 After=${isosrc_escaped}
 Requires=${isosrc_escaped}
 EOF
-    # Temporary hack for rhel8, where our mount unit can race with udev's
-    # cdrom_id using open(O_EXCL). See:
-    # https://github.com/coreos/fedora-coreos-config/pull/1986#pullrequestreview-1120840529
-    # https://issues.redhat.com/browse/OCPBUGS-1505
-    if is_rhcos8; then
-        cat >"${UNIT_DIR}/run-media-iso-mount.service" <<EOF
-# Automatically generated by live-generator
-
-[Unit]
-DefaultDependencies=false
-# Note that bootup(7) implies that initrd-root-device is After=basic.target
-# but that appears to not be the case.  We explicitly order after sysinit.target
-After=sysinit.target
-After=initrd-root-device.target
-Before=initrd-root-fs.target
 
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-# See https://issues.redhat.com/browse/OCPBUGS-1505
-# and https://github.com/coreos/fedora-coreos-config/pull/411
-ExecStart=/bin/sh -c 'for x in {0..60}; do if mount -o ro -t iso9660 /${isosrc} /run/media/iso; then break; fi; sleep 1; done'
-EOF
-        add_requires run-media-iso-mount.service initrd-root-fs.target
-    else
-        cat >"${UNIT_DIR}/run-media-iso.mount" <<EOF
+    cat >"${UNIT_DIR}/run-media-iso.mount" <<EOF
 # Automatically generated by live-generator
 
 [Unit]
@@ -134,7 +105,6 @@ Where=/run/media/iso
 Options=ro
 Type=iso9660
 EOF
-    fi
 
     cat >"${UNIT_DIR}/sysroot.mount" <<EOF
 # Automatically generated by live-generator
@@ -143,8 +113,6 @@ EOF
 DefaultDependencies=false
 Before=initrd-root-fs.target
 RequiresMountsFor=/run/media/iso
-# on el8, the ISO is mounted by our own systemd unit
-After=run-media-iso-mount.service
 
 [Mount]
 What=/run/media/iso/images/pxeboot/rootfs.img

From f01d9474cc3e0fcd50389a5d6058e4313080a76b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 9 Aug 2023 13:21:09 -0400
Subject: [PATCH 1765/2157] overlay.d/05core: support booting ISO completely
 from RAM

It has been presented to us a use case where the user wants to actually
"install" directly to the same device that was used to boot the live
ISO image (i.e. the ISO was written to a block device and then booted
from). The way the ISO boots today it mounts the ISO at /run/media/iso
and then mounts the CoreOS rootfs from a file under that mountpoint. In
this scenario /run/media/iso will be busy and can't be unmounted because
the root filesystem of the live running system depends on it.

We can adjust the strategy slightly to get a system that runs completely
from memory (similar to live PXE systems) by just copying the file out
of /run/media/iso and into memory before doing the rootfs mount, which
will allow /run/media/iso to be unmounted before the installation
commences.

This patchset adds a new coreos.liveiso.fromram option to allow
requesting this new behavior. We could consider making this new
behavior the default, but we'd need to consider the new RAM requirements.
For example, before this change on a 2G FCOS system the usage after
booting looks like:

```
[core@localhost ~]$ free -m
               total        used        free      shared  buff/cache   available
Mem:            1953         163        1286         125         503        1519
Swap:              0           0           0
```

With this change (and the coreos.liveiso.fromram kernel arguemnt
specified) the usage looks like:

```
[core@localhost ~]$ free -m
               total        used        free      shared  buff/cache   available
Mem:            1953         173         688         808        1091         824
Swap:              0           0           0
```

The usage would scale with the size of the rootfs. i.e. RHCOS is larger
so the memory requirements would be larger too.
---
 .../coreos-liveiso-persist-osmet.service      |  4 ++-
 .../modules.d/35coreos-live/live-generator    | 35 +++++++++++++++++--
 2 files changed, 36 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
index 2d50b3315f..e4cc6dba27 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/coreos-liveiso-persist-osmet.service
@@ -1,10 +1,12 @@
 [Unit]
 Description=Persist Osmet Files (ISO)
-DefaultDependencies=false
 ConditionPathExists=/run/ostree-live
 ConditionKernelCommandLine=coreos.liveiso
 RequiresMountsFor=/run/media/iso
 Before=initrd-switch-root.target
+# DefaultDependencies=true so this unit gets stopped on switchroot to
+# allow for /run/media/iso to get unmounted.
+DefaultDependencies=true
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
index dc761f7b30..add4e6dcca 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-live/live-generator
@@ -98,6 +98,9 @@ Wants=systemd-udev-settle.service
 After=sysinit.target
 After=initrd-root-device.target
 Before=initrd-root-fs.target
+# This will make /run/media/iso get unmounted when no longer needed,
+# which will aid in the coreos.liveiso.fromram case.
+StopWhenUnneeded=true
 
 [Mount]
 What=/${isosrc}
@@ -106,16 +109,44 @@ Options=ro
 Type=iso9660
 EOF
 
+    # Determine what to mount in sysroot.mount based on if we were asked to run
+    # completely from RAM via coreos.liveiso.fromram karg.
+    if getargbool 0 coreos.liveiso.fromram; then
+        sysrootrequiresmountsfor=""
+        sysrootfsimg=/rootfs.img
+        # Add service to copy the rootfs.img from the ISO to memory
+        cat >"${UNIT_DIR}/coreos-liveiso-run-media-iso-cp-rootfsimg.service" <<EOF
+# Automatically generated by live-generator
+
+[Unit]
+RequiresMountsFor=/run/media/iso
+Before=sysroot.mount
+# DefaultDependencies=true so this unit gets stopped on switchroot to
+# allow for /run/media/iso to get unmounted.
+DefaultDependencies=true
+
+[Service]
+Type=oneshot
+ExecStart=cp -v /run/media/iso/images/pxeboot/rootfs.img /rootfs.img
+RemainAfterExit=yes
+EOF
+        add_requires coreos-liveiso-run-media-iso-cp-rootfsimg.service default.target
+    else
+        sysrootrequiresmountsfor="RequiresMountsFor=/run/media/iso"
+        sysrootfsimg=/run/media/iso/images/pxeboot/rootfs.img
+    fi
+
     cat >"${UNIT_DIR}/sysroot.mount" <<EOF
 # Automatically generated by live-generator
 
 [Unit]
 DefaultDependencies=false
 Before=initrd-root-fs.target
-RequiresMountsFor=/run/media/iso
+After=coreos-liveiso-run-media-iso-cp-rootfsimg.service
+${sysrootrequiresmountsfor}
 
 [Mount]
-What=/run/media/iso/images/pxeboot/rootfs.img
+What=${sysrootfsimg}
 Where=/sysroot
 Type=squashfs
 # Offset of the squashfs within the rootfs cpio.  Assumes newc format

From 2c9ab8ccc577cd3fc9efa9b15bed773415718d81 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 15 Aug 2023 00:17:27 +0000
Subject: [PATCH 1766/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/691/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json |  8 ++++----
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cb6617f24f..5537d0cba5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.9-200.fc38.aarch64"
+      "evra": "6.4.10-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.9-200.fc38.aarch64"
+      "evra": "6.4.10-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.9-200.fc38.aarch64"
+      "evra": "6.4.10-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.9-200.fc38.aarch64"
+      "evra": "6.4.10-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -844,7 +844,7 @@
       "evra": "2.10.4-1.fc38.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc38.aarch64"
+      "evra": "0.3.12-1.fc38.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-13T00:00:00Z",
+    "generated": "2023-08-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T22:33:58Z"
+        "generated": "2023-08-13T22:40:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-12T18:00:49Z"
+        "generated": "2023-08-14T01:28:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2e5a86b1ec..0dcc96ccd5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -841,7 +841,7 @@
       "evra": "2.10.4-1.fc38.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc38.ppc64le"
+      "evra": "0.3.12-1.fc38.ppc64le"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-13T00:00:00Z",
+    "generated": "2023-08-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T22:33:16Z"
+        "generated": "2023-08-13T22:39:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-12T18:00:56Z"
+        "generated": "2023-08-14T01:28:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9884105276..b666b624a9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.9-200.fc38.s390x"
+      "evra": "6.4.10-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.9-200.fc38.s390x"
+      "evra": "6.4.10-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.9-200.fc38.s390x"
+      "evra": "6.4.10-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.9-200.fc38.s390x"
+      "evra": "6.4.10-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-13T00:00:00Z",
+    "generated": "2023-08-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T22:33:27Z"
+        "generated": "2023-08-13T22:40:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-12T18:01:02Z"
+        "generated": "2023-08-14T01:28:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 64300c8e56..203515be78 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.9-200.fc38.x86_64"
+      "evra": "6.4.10-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.9-200.fc38.x86_64"
+      "evra": "6.4.10-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.9-200.fc38.x86_64"
+      "evra": "6.4.10-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.9-200.fc38.x86_64"
+      "evra": "6.4.10-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -847,7 +847,7 @@
       "evra": "2.10.4-1.fc38.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.11-1.fc38.x86_64"
+      "evra": "0.3.12-1.fc38.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-13T00:00:00Z",
+    "generated": "2023-08-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-11T22:34:29Z"
+        "generated": "2023-08-13T22:42:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-12T18:01:09Z"
+        "generated": "2023-08-14T01:28:55Z"
       }
     }
   }

From addf76ffca769afb75d6a18fb64ed842b99bc66e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 15 Aug 2023 20:33:57 -0400
Subject: [PATCH 1767/2157] denylist: add denials for tests that layer packages
 on rawhide

See https://github.com/coreos/fedora-coreos-tracker/issues/1549
---
 kola-denylist.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e725cabacd..660eeeebd5 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -30,6 +30,16 @@
   snooze: 2023-09-10
   streams:
     - rawhide
+- pattern: ext.config.rpm-ostree.kernel-replace
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1549
+  snooze: 2023-09-10
+  streams:
+    - rawhide
+- pattern: ext.config.extensions.package
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1549
+  snooze: 2023-09-10
+  streams:
+    - rawhide
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28

From 6bb8a26ec24b361789a1fe6de94912c8903f8db5 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 15 Aug 2023 21:46:36 -0700
Subject: [PATCH 1768/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64

This test is still failing.
See: coreos/fedora-coreos-tracker#1430
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 660eeeebd5..65ad0ac7d9 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,7 +15,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-08-16
+  snooze: 2023-08-31
   arches:
     - aarch64
 - pattern: ext.config.root-reprovision.*

From d9db435388dca0257e0f69fefcd1a4eed1589446 Mon Sep 17 00:00:00 2001
From: YASMIN VALIM <ydesouza@redhat.com>
Date: Wed, 16 Aug 2023 11:19:30 -0300
Subject: [PATCH 1769/2157] manifests: name tzdata package in packages list

The tzdata package is undergoing a change [1] to allow it
to not be required by some other packages (like glibc). We
don't want the tzdata package to drop out of Fedora CoreOS
so let's name the package here in our manifest.

[1] https://fedoraproject.org/wiki/Changes/AllowRemovalOfTzdata

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1534
---
 manifests/system-configuration.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index 77bdb5d2c4..a2fad7794a 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -39,6 +39,8 @@ packages:
   - stalld
   # Ignition aware SSH key management
   - ssh-key-dir
+  # Allow for configuring different timezones
+  - tzdata
 
 postprocess:
   # Mask systemd-repart. Ignition is responsible for partition setup on first

From ee9dabae36732f01b01e7fdde1050c2bdf192a99 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 16 Aug 2023 14:35:17 -0400
Subject: [PATCH 1770/2157] denylist: drop ext.config.toolbox denial

The registry.fedoraproject.org/fedora-toolbox:40 exists now.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1539
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 65ad0ac7d9..7ffadbe5b0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,11 +25,6 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: ext.config.toolbox
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1539
-  snooze: 2023-09-10
-  streams:
-    - rawhide
 - pattern: ext.config.rpm-ostree.kernel-replace
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1549
   snooze: 2023-09-10

From 3a7b8e7a72ccdfb80dfa1dfaa31f028727acea56 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 16 Aug 2023 14:36:18 -0400
Subject: [PATCH 1771/2157] denylist: drop package layer denials

The cisco yum repo now exists for F40.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1549
---
 kola-denylist.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7ffadbe5b0..f8cad0f082 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,16 +25,6 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: ext.config.rpm-ostree.kernel-replace
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1549
-  snooze: 2023-09-10
-  streams:
-    - rawhide
-- pattern: ext.config.extensions.package
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1549
-  snooze: 2023-09-10
-  streams:
-    - rawhide
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28

From 17554f353257db8895156fc5c87e13a042179073 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 16 Aug 2023 16:46:18 -0400
Subject: [PATCH 1772/2157] overrides: fast-track kernel-6.4.11-200.fc38

This one has the fix for the zram corruption on ppc64le (64K page size).

We can also remove the rawhide denial for ext.config.root-reprovision.*
because the kernel in rawhide has the fix already too.

Closes https://github.com/coreos/fedora-coreos-tracker/issues/1489
---
 kola-denylist.yaml                   |  7 -------
 manifest-lock.overrides.ppc64le.yaml | 31 ----------------------------
 manifest-lock.overrides.yaml         | 24 +++++++++++++++++++++
 3 files changed, 24 insertions(+), 38 deletions(-)
 delete mode 100644 manifest-lock.overrides.ppc64le.yaml

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f8cad0f082..df1fdb6dff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,13 +18,6 @@
   snooze: 2023-08-31
   arches:
     - aarch64
-- pattern: ext.config.root-reprovision.*
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-  snooze: 2023-08-18
-  arches:
-    - ppc64le
-  streams:
-    - rawhide
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
deleted file mode 100644
index 14163e6c2f..0000000000
--- a/manifest-lock.overrides.ppc64le.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  kernel:
-    evra: 6.3.12-200.fc38.ppc64le
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-core:
-    evra: 6.3.12-200.fc38.ppc64le
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-modules:
-    evra: 6.3.12-200.fc38.ppc64le
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
-  kernel-modules-core:
-    evra: 6.3.12-200.fc38.ppc64le
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: pin
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..c79fc04e1c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,30 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 6.4.11-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: fast-track
+  kernel-core:
+    evr: 6.4.11-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: fast-track
+  kernel-modules:
+    evr: 6.4.11-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: fast-track
+  kernel-modules-core:
+    evr: 6.4.11-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 400faad79cca91ee92e947f6a6ddf0f0047a57a0 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Mon, 7 Aug 2023 22:24:39 +0800
Subject: [PATCH 1773/2157] overlay/sysusers: remove `10-groups-basic.conf`
 which comes from `setup` package

As `setup` shipped its own sysusers.d entries,
see https://src.fedoraproject.org/rpms/setup/c/ff8169d809a5de20864deb6bb41c4b4104a3fb61?branch=f38
and https://src.fedoraproject.org/rpms/setup/c/9174b59bde57a991c284c10dac749d061f93aaad?branch=f38,
we should remove the duplicated entries in `10-groups-basic.conf`.

Xerf to https://github.com/coreos/fedora-coreos-config/pull/1836
---
 .../usr/lib/sysusers.d/10-setup-basic.conf    | 43 -------------------
 1 file changed, 43 deletions(-)
 delete mode 100644 overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf

diff --git a/overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf b/overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf
deleted file mode 100644
index 597b8d28e7..0000000000
--- a/overlay.d/15fcos/usr/lib/sysusers.d/10-setup-basic.conf
+++ /dev/null
@@ -1,43 +0,0 @@
-# These are basic users/groups coming from the default entries
-# in the 'setup' package. They can be dropped once that package
-# starts shipping its own sysusers.d entries.
-
-g adm 4
-g audio 63
-g bin 1
-g cdrom 11
-g daemon 2
-g dialout 18
-g disk 6
-g floppy 19
-g ftp 50
-g games 20
-g kmem 9
-g lock 54
-g lp 7
-g mail 12
-g man 15
-g mem 8
-g root 0
-g sys 3
-g tape 33
-g tty 5
-g users 100
-g video 39
-g wheel 10
-
-u adm      3:4      "adm"      /var/adm        -
-u bin      1:1      "bin"      /bin            -
-u daemon   2:2      "daemon"   /sbin           -
-u ftp      14:50    "FTP User" /var/ftp        -
-# Workaround for systemd-sysusers bug, will be fixed in v252:
-# https://github.com/systemd/systemd/issues/24217
-# u games  12:100   "games"    /usr/games      -
-u games    12:users "games"    /usr/games      -
-u halt     7:0      "halt"     /sbin           /sbin/halt
-u lp       4:7      "lp"       /var/spool/lpd  -
-u mail     8:12     "mail"     /var/spool/mail -
-u operator 11:0     "operator" /root           -
-u root     0:0      "root"     /root           /bin/bash
-u shutdown 6:0      "shutdown" /sbin           /sbin/shutdown
-u sync     5:0      "sync"     /sbin           /bin/sync

From ffaa448cbdbd1c593151025883662ddfe37ed941 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 18 Aug 2023 06:24:21 +0000
Subject: [PATCH 1774/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/697/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5537d0cba5..cd62efed88 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.219.0-1.fc38.noarch"
+      "evra": "2:2.221.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -400,7 +400,7 @@
       "evra": "20230808.00-1.fc38.noarch"
     },
     "gpgme": {
-      "evra": "1.17.1-3.fc38.aarch64"
+      "evra": "1.17.1-5.fc38.aarch64"
     },
     "grep": {
       "evra": "3.8-3.fc38.aarch64"
@@ -484,10 +484,10 @@
       "evra": "11-7.fc38.aarch64"
     },
     "jq": {
-      "evra": "1.6-15.fc38.aarch64"
+      "evra": "1.6-16.fc38.aarch64"
     },
     "json-c": {
-      "evra": "0.16-4.fc38.aarch64"
+      "evra": "0.17-1.fc38.aarch64"
     },
     "json-glib": {
       "evra": "1.6.6-4.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.10-200.fc38.aarch64"
+      "evra": "6.4.11-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.10-200.fc38.aarch64"
+      "evra": "6.4.11-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.10-200.fc38.aarch64"
+      "evra": "6.4.11-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.10-200.fc38.aarch64"
+      "evra": "6.4.11-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -805,7 +805,7 @@
       "evra": "0.14.1-1.fc38.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc1.fc38.aarch64"
+      "evra": "1.3.3-1.rc2.fc38.aarch64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.aarch64"
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.6.0-1.fc38.aarch64"
+      "evra": "5:4.6.1-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.0-1.fc38.aarch64"
+      "evra": "5:4.6.1-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1054,10 +1054,10 @@
       "evra": "23.6-2.fc38.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230614-1.fc38.noarch"
+      "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-2.fc38.aarch64"
+      "evra": "2:7.2.4-2.fc38.aarch64"
     },
     "readline": {
       "evra": "8.2-3.fc38.aarch64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1677-2.fc38.noarch"
+      "evra": "2:9.0.1712-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1677-2.fc38.aarch64"
+      "evra": "2:9.0.1712-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-14T00:00:00Z",
+    "generated": "2023-08-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-13T22:40:35Z"
+        "generated": "2023-08-16T23:24:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-14T01:28:34Z"
+        "generated": "2023-08-18T01:50:55Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0dcc96ccd5..fafd19ed51 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.219.0-1.fc38.noarch"
+      "evra": "2:2.221.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -388,7 +388,7 @@
       "evra": "3.8.0-2.fc38.ppc64le"
     },
     "gpgme": {
-      "evra": "1.17.1-3.fc38.ppc64le"
+      "evra": "1.17.1-5.fc38.ppc64le"
     },
     "grep": {
       "evra": "3.8-3.fc38.ppc64le"
@@ -475,10 +475,10 @@
       "evra": "11-7.fc38.ppc64le"
     },
     "jq": {
-      "evra": "1.6-15.fc38.ppc64le"
+      "evra": "1.6-16.fc38.ppc64le"
     },
     "json-c": {
-      "evra": "0.16-4.fc38.ppc64le"
+      "evra": "0.17-1.fc38.ppc64le"
     },
     "json-glib": {
       "evra": "1.6.6-4.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.11-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.11-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.11-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.3.12-200.fc38.ppc64le"
+      "evra": "6.4.11-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -802,7 +802,7 @@
       "evra": "0.14.1-1.fc38.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc1.fc38.ppc64le"
+      "evra": "1.3.3-1.rc2.fc38.ppc64le"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.ppc64le"
@@ -1021,10 +1021,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.6.0-1.fc38.ppc64le"
+      "evra": "5:4.6.1-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.6.0-1.fc38.ppc64le"
+      "evra": "5:4.6.1-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1057,10 +1057,10 @@
       "evra": "23.6-2.fc38.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230614-1.fc38.noarch"
+      "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-2.fc38.ppc64le"
+      "evra": "2:7.2.4-2.fc38.ppc64le"
     },
     "readline": {
       "evra": "8.2-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1677-2.fc38.noarch"
+      "evra": "2:9.0.1712-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1677-2.fc38.ppc64le"
+      "evra": "2:9.0.1712-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-14T00:00:00Z",
+    "generated": "2023-08-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-13T22:39:54Z"
+        "generated": "2023-08-16T23:23:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-14T01:28:41Z"
+        "generated": "2023-08-18T01:51:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b666b624a9..fc3e827369 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.219.0-1.fc38.noarch"
+      "evra": "2:2.221.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -373,7 +373,7 @@
       "evra": "3.8.0-2.fc38.s390x"
     },
     "gpgme": {
-      "evra": "1.17.1-3.fc38.s390x"
+      "evra": "1.17.1-5.fc38.s390x"
     },
     "grep": {
       "evra": "3.8-3.fc38.s390x"
@@ -442,10 +442,10 @@
       "evra": "11-7.fc38.s390x"
     },
     "jq": {
-      "evra": "1.6-15.fc38.s390x"
+      "evra": "1.6-16.fc38.s390x"
     },
     "json-c": {
-      "evra": "0.16-4.fc38.s390x"
+      "evra": "0.17-1.fc38.s390x"
     },
     "json-glib": {
       "evra": "1.6.6-4.fc38.s390x"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.10-200.fc38.s390x"
+      "evra": "6.4.11-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.10-200.fc38.s390x"
+      "evra": "6.4.11-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.10-200.fc38.s390x"
+      "evra": "6.4.11-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.10-200.fc38.s390x"
+      "evra": "6.4.11-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -748,7 +748,7 @@
       "evra": "0.14.1-1.fc38.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc1.fc38.s390x"
+      "evra": "1.3.3-1.rc2.fc38.s390x"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.s390x"
@@ -952,10 +952,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.6.0-1.fc38.s390x"
+      "evra": "5:4.6.1-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.6.0-1.fc38.s390x"
+      "evra": "5:4.6.1-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -982,10 +982,10 @@
       "evra": "23.6-2.fc38.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230614-1.fc38.noarch"
+      "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.1-2.fc38.s390x"
+      "evra": "2:7.2.4-2.fc38.s390x"
     },
     "readline": {
       "evra": "8.2-3.fc38.s390x"
@@ -1162,10 +1162,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1677-2.fc38.noarch"
+      "evra": "2:9.0.1712-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1677-2.fc38.s390x"
+      "evra": "2:9.0.1712-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-14T00:00:00Z",
+    "generated": "2023-08-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-13T22:40:31Z"
+        "generated": "2023-08-16T23:23:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-14T01:28:48Z"
+        "generated": "2023-08-18T01:51:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 203515be78..d7ee2ab23e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.219.0-1.fc38.noarch"
+      "evra": "2:2.221.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -400,7 +400,7 @@
       "evra": "20230808.00-1.fc38.noarch"
     },
     "gpgme": {
-      "evra": "1.17.1-3.fc38.x86_64"
+      "evra": "1.17.1-5.fc38.x86_64"
     },
     "grep": {
       "evra": "3.8-3.fc38.x86_64"
@@ -490,10 +490,10 @@
       "evra": "11-7.fc38.x86_64"
     },
     "jq": {
-      "evra": "1.6-15.fc38.x86_64"
+      "evra": "1.6-16.fc38.x86_64"
     },
     "json-c": {
-      "evra": "0.16-4.fc38.x86_64"
+      "evra": "0.17-1.fc38.x86_64"
     },
     "json-glib": {
       "evra": "1.6.6-4.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.10-200.fc38.x86_64"
+      "evra": "6.4.11-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.10-200.fc38.x86_64"
+      "evra": "6.4.11-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.10-200.fc38.x86_64"
+      "evra": "6.4.11-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.10-200.fc38.x86_64"
+      "evra": "6.4.11-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -808,7 +808,7 @@
       "evra": "0.14.1-1.fc38.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc1.fc38.x86_64"
+      "evra": "1.3.3-1.rc2.fc38.x86_64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.x86_64"
@@ -895,7 +895,7 @@
       "evra": "4.2-4.fc38.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-55.fc38.x86_64"
+      "evra": "2:2.1-55.1.fc38.x86_64"
     },
     "moby-engine": {
       "evra": "20.10.23-1.fc38.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.6.0-1.fc38.x86_64"
+      "evra": "5:4.6.1-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.0-1.fc38.x86_64"
+      "evra": "5:4.6.1-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1060,7 +1060,7 @@
       "evra": "23.6-2.fc38.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230614-1.fc38.noarch"
+      "evra": "20230812-1.fc38.noarch"
     },
     "readline": {
       "evra": "8.2-3.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1677-2.fc38.noarch"
+      "evra": "2:9.0.1712-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1677-2.fc38.x86_64"
+      "evra": "2:9.0.1712-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-14T00:00:00Z",
+    "generated": "2023-08-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-13T22:42:00Z"
+        "generated": "2023-08-16T23:24:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-14T01:28:55Z"
+        "generated": "2023-08-18T01:51:15Z"
       }
     }
   }

From 4414ef15f588163e5f9b0f4b01ca981be65295e7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 19 Aug 2023 06:06:33 +0000
Subject: [PATCH 1775/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 24 ------------------------
 1 file changed, 24 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index c79fc04e1c..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,30 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.4.11-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: fast-track
-  kernel-core:
-    evr: 6.4.11-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: fast-track
-  kernel-modules:
-    evr: 6.4.11-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: fast-track
-  kernel-modules-core:
-    evr: 6.4.11-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ccaad9e2e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1489
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 7c2e67e2c59f66f218ab4cba8dc465aaeb1a6a43 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 19 Aug 2023 22:35:56 +0000
Subject: [PATCH 1776/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/699/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cd62efed88..99b97d46ae 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1132,7 +1132,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.13.1-1.fc38.aarch64"
+      "evra": "1:1.13.2-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-18T00:00:00Z",
+    "generated": "2023-08-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-16T23:24:06Z"
+        "generated": "2023-08-18T06:29:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-18T01:50:55Z"
+        "generated": "2023-08-19T01:06:38Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fafd19ed51..8dbb67bcd2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1135,7 +1135,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.13.1-1.fc38.ppc64le"
+      "evra": "1:1.13.2-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-18T00:00:00Z",
+    "generated": "2023-08-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-16T23:23:29Z"
+        "generated": "2023-08-18T06:29:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-18T01:51:02Z"
+        "generated": "2023-08-19T01:06:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index fc3e827369..f071917f12 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1057,7 +1057,7 @@
       "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.13.1-1.fc38.s390x"
+      "evra": "1:1.13.2-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-18T00:00:00Z",
+    "generated": "2023-08-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-16T23:23:32Z"
+        "generated": "2023-08-18T06:29:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-18T01:51:08Z"
+        "generated": "2023-08-19T01:06:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d7ee2ab23e..4a616f7af5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1135,7 +1135,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.13.1-1.fc38.x86_64"
+      "evra": "1:1.13.2-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-18T00:00:00Z",
+    "generated": "2023-08-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-16T23:24:30Z"
+        "generated": "2023-08-18T06:29:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-18T01:51:15Z"
+        "generated": "2023-08-19T01:06:59Z"
       }
     }
   }

From 01ef560d4ce88f85935001a9e28c4724a6a3dd1d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 22 Aug 2023 03:17:05 +0000
Subject: [PATCH 1777/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/702/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 99b97d46ae..293b60f686 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.3.2-1.fc38.aarch64"
+      "evra": "6.3.3-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -106,7 +106,7 @@
       "evra": "0.1.7-14.fc38.aarch64"
     },
     "chrony": {
-      "evra": "4.3-3.fc38.aarch64"
+      "evra": "4.4-1.fc38.aarch64"
     },
     "cifs-utils": {
       "evra": "7.0-1.fc38.aarch64"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.5-0.fc38.aarch64"
+      "evra": "2:4.18.6-1.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.5-0.fc38.aarch64"
+      "evra": "2:4.18.6-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230625.g32660ce-1.fc38.aarch64"
+      "evra": "0^20230818.g0af928e-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230625.g32660ce-1.fc38.noarch"
+      "evra": "0^20230818.g0af928e-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1045,7 +1045,7 @@
       "evra": "1.19-2.fc38.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-10.fc38.aarch64"
+      "evra": "3.3.17-11.fc38.aarch64"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.aarch64"
@@ -1093,22 +1093,22 @@
       "evra": "2:1.1.7-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.5-0.fc38.aarch64"
+      "evra": "2:4.18.6-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.5-0.fc38.noarch"
+      "evra": "2:4.18.6-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.5-0.fc38.aarch64"
+      "evra": "2:4.18.6-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-19T00:00:00Z",
+    "generated": "2023-08-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-18T06:29:41Z"
+        "generated": "2023-08-19T22:38:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-19T01:06:38Z"
+        "generated": "2023-08-22T01:12:33Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8dbb67bcd2..4400972538 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.3.2-1.fc38.ppc64le"
+      "evra": "6.3.3-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -106,7 +106,7 @@
       "evra": "0.1.7-14.fc38.ppc64le"
     },
     "chrony": {
-      "evra": "4.3-3.fc38.ppc64le"
+      "evra": "4.4-1.fc38.ppc64le"
     },
     "cifs-utils": {
       "evra": "7.0-1.fc38.ppc64le"
@@ -763,7 +763,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.5-0.fc38.ppc64le"
+      "evra": "2:4.18.6-1.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.5-0.fc38.ppc64le"
+      "evra": "2:4.18.6-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -994,10 +994,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230625.g32660ce-1.fc38.ppc64le"
+      "evra": "0^20230818.g0af928e-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230625.g32660ce-1.fc38.noarch"
+      "evra": "0^20230818.g0af928e-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1048,7 +1048,7 @@
       "evra": "2.7.9-2.fc38.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-10.fc38.ppc64le"
+      "evra": "3.3.17-11.fc38.ppc64le"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.ppc64le"
@@ -1096,22 +1096,22 @@
       "evra": "2:1.1.7-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.5-0.fc38.ppc64le"
+      "evra": "2:4.18.6-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.5-0.fc38.noarch"
+      "evra": "2:4.18.6-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.5-0.fc38.ppc64le"
+      "evra": "2:4.18.6-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-19T00:00:00Z",
+    "generated": "2023-08-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-18T06:29:13Z"
+        "generated": "2023-08-19T22:38:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-19T01:06:45Z"
+        "generated": "2023-08-22T01:12:40Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f071917f12..1372ee6adc 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -82,7 +82,7 @@
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.3.2-1.fc38.s390x"
+      "evra": "6.3.3-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -103,7 +103,7 @@
       "evra": "0.1.7-14.fc38.s390x"
     },
     "chrony": {
-      "evra": "4.3-3.fc38.s390x"
+      "evra": "4.4-1.fc38.s390x"
     },
     "cifs-utils": {
       "evra": "7.0-1.fc38.s390x"
@@ -709,7 +709,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.5-0.fc38.s390x"
+      "evra": "2:4.18.6-1.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -775,7 +775,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.5-0.fc38.s390x"
+      "evra": "2:4.18.6-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -925,10 +925,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230625.g32660ce-1.fc38.s390x"
+      "evra": "0^20230818.g0af928e-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230625.g32660ce-1.fc38.noarch"
+      "evra": "0^20230818.g0af928e-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -973,7 +973,7 @@
       "evra": "1.19-2.fc38.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-10.fc38.s390x"
+      "evra": "3.3.17-11.fc38.s390x"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.s390x"
@@ -1024,22 +1024,22 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.5-0.fc38.s390x"
+      "evra": "2:4.18.6-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.5-0.fc38.noarch"
+      "evra": "2:4.18.6-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.5-0.fc38.s390x"
+      "evra": "2:4.18.6-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-19T00:00:00Z",
+    "generated": "2023-08-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-18T06:29:07Z"
+        "generated": "2023-08-19T22:37:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-19T01:06:52Z"
+        "generated": "2023-08-22T01:12:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4a616f7af5..aa587cd548 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.3.2-1.fc38.x86_64"
+      "evra": "6.3.3-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -106,7 +106,7 @@
       "evra": "0.1.7-14.fc38.x86_64"
     },
     "chrony": {
-      "evra": "4.3-3.fc38.x86_64"
+      "evra": "4.4-1.fc38.x86_64"
     },
     "cifs-utils": {
       "evra": "7.0-1.fc38.x86_64"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.5-0.fc38.x86_64"
+      "evra": "2:4.18.6-1.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.5-0.fc38.x86_64"
+      "evra": "2:4.18.6-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -1003,10 +1003,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230625.g32660ce-1.fc38.x86_64"
+      "evra": "0^20230818.g0af928e-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230625.g32660ce-1.fc38.noarch"
+      "evra": "0^20230818.g0af928e-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1051,7 +1051,7 @@
       "evra": "1.19-2.fc38.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-10.fc38.x86_64"
+      "evra": "3.3.17-11.fc38.x86_64"
     },
     "protobuf-c": {
       "evra": "1.4.1-4.fc38.x86_64"
@@ -1096,22 +1096,22 @@
       "evra": "2:1.1.7-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.5-0.fc38.x86_64"
+      "evra": "2:4.18.6-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.5-0.fc38.noarch"
+      "evra": "2:4.18.6-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.5-0.fc38.x86_64"
+      "evra": "2:4.18.6-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.24-1.fc38.noarch"
+      "evra": "38.25-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-19T00:00:00Z",
+    "generated": "2023-08-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-18T06:29:59Z"
+        "generated": "2023-08-19T22:38:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-19T01:06:59Z"
+        "generated": "2023-08-22T01:12:55Z"
       }
     }
   }

From 1d612825e811cfd3a18ee7a9b58322c345204ea2 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 22 Aug 2023 16:36:08 -0400
Subject: [PATCH 1778/2157] denylist: mark snoozed tests as warn: true

This is a new feature that was added recently in
https://github.com/coreos/coreos-assembler/pull/3539.

Now when a snooze expires we can configure it to warn
us and continue to build rather than marking the entire
run as a failure.
---
 kola-denylist.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index df1fdb6dff..06378b67f7 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -16,11 +16,13 @@
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
   snooze: 2023-08-31
+  warn: true
   arches:
     - aarch64
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -28,6 +30,7 @@
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -35,6 +38,7 @@
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -42,6 +46,7 @@
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -49,6 +54,7 @@
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -56,6 +62,7 @@
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -63,6 +70,7 @@
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched
@@ -70,6 +78,7 @@
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-08-28
+  warn: true
   streams:
     - rawhide
     - branched

From 3537f6effb95cef0726b9001448ddeabf9909e2b Mon Sep 17 00:00:00 2001
From: Andrew Jeddeloh <ajeddelo@redhat.com>
Date: Thu, 8 Aug 2019 16:24:49 -0700
Subject: [PATCH 1779/2157] overlay: drop coreos-root in favor of tmpfiles

Instead of using a systemd unit to populate /var/roothome use tmpfiles
entries.
---
 overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf

diff --git a/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf b/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf
new file mode 100644
index 0000000000..d5a2d870c2
--- /dev/null
+++ b/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf
@@ -0,0 +1,5 @@
+# This really should be C! instead of L, but https://github.com/systemd/systemd/issues/12467 prevents that.
+# TODO: switch to C! when https://github.com/systemd/systemd/pull/12750 makes it into fcos
+L	/var/roothome/.bashrc	-	-	-	-	/usr/etc/skel/.bashrc
+L	/var/roothome/.bash_profile	-	-	-	-	/usr/etc/skel/.bash_profile
+L	/var/roothome/.bash_logout	-	-	-	-	/usr/etc/skel/.bash_logout

From a88774145d944eb3ff45c7d99ef3acf94f0e1d06 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Thu, 17 Aug 2023 22:46:42 +0800
Subject: [PATCH 1780/2157] tmpfiles: Move root bash files copy to tmpfiles.d

Fixes https://github.com/coreos/fedora-coreos-config/issues/136
---
 .../40ignition-ostree/ignition-ostree-populate-var.sh    | 8 +-------
 overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf       | 9 ++++-----
 2 files changed, 5 insertions(+), 12 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
index 01212db7d5..6f4e151c92 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
@@ -33,13 +33,7 @@ for varsubdir in lib log home roothome opt srv usrlocal mnt media; do
         mkdir -p /sysroot/var/${varsubdir}
     else
         systemd-tmpfiles --create --boot --root=/sysroot --prefix="/var/${varsubdir}"
-    fi
-
-    if [[ $varsubdir == roothome ]]; then
-        # TODO move this to tmpfiles.d once systemd-tmpfiles handles C! with --root correctly.
-        # See https://github.com/coreos/fedora-coreos-config/pull/137
-        cp /sysroot/etc/skel/.bash* /sysroot/var/${varsubdir}
-    fi
+    fi  
 
     coreos-relabel "/var/${varsubdir}"
 done
diff --git a/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf b/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf
index d5a2d870c2..d59075ba29 100644
--- a/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf
+++ b/overlay.d/05core/usr/lib/tmpfiles.d/root-bash.conf
@@ -1,5 +1,4 @@
-# This really should be C! instead of L, but https://github.com/systemd/systemd/issues/12467 prevents that.
-# TODO: switch to C! when https://github.com/systemd/systemd/pull/12750 makes it into fcos
-L	/var/roothome/.bashrc	-	-	-	-	/usr/etc/skel/.bashrc
-L	/var/roothome/.bash_profile	-	-	-	-	/usr/etc/skel/.bash_profile
-L	/var/roothome/.bash_logout	-	-	-	-	/usr/etc/skel/.bash_logout
+# Use C! according to https://github.com/coreos/fedora-coreos-config/pull/137/files#diff-4c7caeddac3f43acdf59b41ffa4e3533bb846d2e3bfa31f885a65e9598a2c4a1R1-R2
+C!	/var/roothome/.bashrc	-	-	-	-	/usr/etc/skel/.bashrc
+C!	/var/roothome/.bash_profile	-	-	-	-	/usr/etc/skel/.bash_profile
+C!	/var/roothome/.bash_logout	-	-	-	-	/usr/etc/skel/.bash_logout

From 33e40a678fab4aea91ea1a4bc11246af40223519 Mon Sep 17 00:00:00 2001
From: Huijing Hei <hhei@redhat.com>
Date: Tue, 22 Aug 2023 17:15:24 +0800
Subject: [PATCH 1781/2157] tests: add test to verify `/var/roothome/.bash*`
 files exist

---
 tests/kola/files/root-bash | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100755 tests/kola/files/root-bash

diff --git a/tests/kola/files/root-bash b/tests/kola/files/root-bash
new file mode 100755
index 0000000000..ab258349bc
--- /dev/null
+++ b/tests/kola/files/root-bash
@@ -0,0 +1,17 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify /var/roothome/.bash* files exist.
+
+# See https://bugzilla.redhat.com/show_bug.cgi?id=1193590
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+for bashfile in .bashrc .bash_profile .bash_logout
+do 
+    if ! test -f "/var/roothome/${bashfile}"; then
+        fatal "Error: could not find /var/roothome/${bashfile}"
+    fi
+done
+ok "have /var/roothome/.bash* files"

From c9a337be8c8625561b0e6ec51624fa7a4fd22e9d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 11:14:46 +0200
Subject: [PATCH 1782/2157] Enable fwupd refresh timer on Fedora 39

See: https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1512
---
 manifests/enable-fwupd-refresh-timer.yaml     |  2 ++
 manifests/fedora-coreos.yaml                  |  5 +++++
 overlay.d/18fwupd-refresh-timer/statoverride  |  2 ++
 .../50-fwupd-refresh-timer.preset             |  4 ++++
 overlay.d/README.md                           |  9 ++++++++
 tests/kola/files/fwupd-refresh-timer          | 21 +++++++++++++++++++
 6 files changed, 43 insertions(+)
 create mode 100644 manifests/enable-fwupd-refresh-timer.yaml
 create mode 100644 overlay.d/18fwupd-refresh-timer/statoverride
 create mode 100644 overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset
 create mode 100755 tests/kola/files/fwupd-refresh-timer

diff --git a/manifests/enable-fwupd-refresh-timer.yaml b/manifests/enable-fwupd-refresh-timer.yaml
new file mode 100644
index 0000000000..79cd710aa5
--- /dev/null
+++ b/manifests/enable-fwupd-refresh-timer.yaml
@@ -0,0 +1,2 @@
+ostree-layers:
+  - overlay/18fwupd-refresh-timer
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index a30e010858..59217fc705 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -46,6 +46,11 @@ conditional-include:
     # Modularity is going away in F39+ so we'll only include
     # the fedora-repos-modular package in <39.
     include: fedora-modularity.yaml
+  - if: releasever >= 39
+    # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+    # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+    # once Fedora 39 is released to all streams
+    include: enable-fwupd-refresh-timer.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/overlay.d/18fwupd-refresh-timer/statoverride b/overlay.d/18fwupd-refresh-timer/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/18fwupd-refresh-timer/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset b/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset
new file mode 100644
index 0000000000..d6f4bf900c
--- /dev/null
+++ b/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset
@@ -0,0 +1,4 @@
+# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+# As this is for FCOS only for now, once Fedora 39 is released to all streams,
+# this should be moved to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+enable fwupd-refresh.timer
diff --git a/overlay.d/README.md b/overlay.d/README.md
index ec51984b46..d13b1975a9 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -42,6 +42,15 @@ Things that are more closely "Fedora CoreOS":
 Disable Zincati on non-production streams:
 https://github.com/coreos/fedora-coreos-tracker/issues/163
 
+18fwupd-refresh-timer
+---------------------
+
+Enable fwupd-refresh.timer on Fedora 39:
+https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+
+Move to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset once
+Fedora 39 lands in all streams.
+
 20platform-chrony
 -----------------
 
diff --git a/tests/kola/files/fwupd-refresh-timer b/tests/kola/files/fwupd-refresh-timer
new file mode 100755
index 0000000000..8a1b933642
--- /dev/null
+++ b/tests/kola/files/fwupd-refresh-timer
@@ -0,0 +1,21 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify fwupd-refresh.timer is enabled.
+##   tags: "platform-independent"
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+if verlt "$(get_fedora_ver)" 39; then
+    ok "Skipping fwupd-refresh.timer test"
+    exit 0
+fi
+
+unit="fwupd-refresh.timer"
+if ! systemctl is-enabled ${unit} 1>/dev/null; then
+    fatal "Unit ${unit} should be enabled"
+fi
+ok "Unit ${unit} is enabled as expected"

From 66aed2a0e89d5fcfac58ecbc57e151b50af77b88 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 11:16:00 +0200
Subject: [PATCH 1783/2157] overlay/README: Update for 17fedora-modularity
 overlay

---
 overlay.d/README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/overlay.d/README.md b/overlay.d/README.md
index d13b1975a9..eba85e42fc 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -42,6 +42,14 @@ Things that are more closely "Fedora CoreOS":
 Disable Zincati on non-production streams:
 https://github.com/coreos/fedora-coreos-tracker/issues/163
 
+17fedora-modularity
+-------------------
+
+Check for layered modularity RPMs to warn users of the retirement in Fedora 39
+via Console Login Helper Messages.
+
+Remove once Fedora 39 lands in all streams.
+
 18fwupd-refresh-timer
 ---------------------
 

From 7668d04cd70c7b86b1010985cac3b29f692eae34 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 23 Aug 2023 14:54:42 +0200
Subject: [PATCH 1784/2157] test: Disable 'source' ShellCheck warnings

---
 tests/kola/binfmt/qemu                                    | 3 ++-
 tests/kola/boot/bootupd                                   | 3 ++-
 tests/kola/boot/grub2-install                             | 3 ++-
 tests/kola/butane/grub-users/test.sh                      | 3 ++-
 tests/kola/clhm/ignition-warnings/test.sh                 | 3 ++-
 tests/kola/clhm/network-device-info                       | 3 ++-
 tests/kola/containers/cgroups-v2                          | 3 ++-
 tests/kola/containers/quadlet/test.sh                     | 3 ++-
 tests/kola/content-origins/test.sh                        | 3 ++-
 tests/kola/disks/growfs                                   | 3 ++-
 tests/kola/disks/no-google-device-links                   | 3 ++-
 tests/kola/disks/root-boot-ro                             | 3 ++-
 tests/kola/disks/root-prjquota                            | 3 ++-
 tests/kola/disks/systemd-repart-service                   | 3 ++-
 tests/kola/disks/tmpfs                                    | 3 ++-
 tests/kola/extensions/package                             | 3 ++-
 tests/kola/files/aleph-version                            | 3 ++-
 tests/kola/files/check-symlink                            | 3 ++-
 tests/kola/files/console-config                           | 3 ++-
 tests/kola/files/etc-passwd-group-permissions             | 3 ++-
 tests/kola/files/file-directory-permissions               | 3 ++-
 tests/kola/files/initrd/compression                       | 3 ++-
 tests/kola/files/initrd/executables                       | 3 ++-
 tests/kola/files/initrd/expected-contents                 | 3 ++-
 tests/kola/files/kernel-headers                           | 3 ++-
 tests/kola/files/license                                  | 3 ++-
 tests/kola/files/logrotate-service                        | 3 ++-
 tests/kola/files/remove-manifest-files                    | 3 ++-
 tests/kola/files/root-immutable-bit                       | 3 ++-
 tests/kola/files/rpmdb-sqlite                             | 3 ++-
 tests/kola/files/setgid                                   | 3 ++-
 tests/kola/files/setuid                                   | 3 ++-
 tests/kola/files/sudoers                                  | 3 ++-
 tests/kola/files/system-generators                        | 3 ++-
 tests/kola/files/unlabeled-contexts                       | 3 ++-
 tests/kola/files/validate-symlinks                        | 3 ++-
 tests/kola/files/yum-repo-dir                             | 3 ++-
 tests/kola/firewall/iptables-legacy/test.sh               | 3 ++-
 tests/kola/firewall/iptables/test.sh                      | 3 ++-
 tests/kola/ignition/delete-config/test.sh                 | 3 ++-
 tests/kola/ignition/journald-log                          | 3 ++-
 tests/kola/ignition/kargs/test.sh                         | 3 ++-
 tests/kola/ignition/remote/test.sh                        | 3 ++-
 tests/kola/ignition/resource/authenticated-gs/test.sh     | 3 ++-
 tests/kola/ignition/resource/authenticated-s3/test.sh     | 3 ++-
 tests/kola/ignition/resource/remote/test.sh               | 3 ++-
 tests/kola/ignition/stable-boot/test.sh                   | 3 ++-
 tests/kola/ignition/systemd-disable/test.sh               | 3 ++-
 tests/kola/ignition/systemd-enable-units/test.sh          | 3 ++-
 tests/kola/ignition/systemd-unmasking/test.sh             | 3 ++-
 tests/kola/k8s/node-e2e/data/node-e2e                     | 3 ++-
 tests/kola/kdump/crash/test.sh                            | 3 ++-
 tests/kola/kdump/service                                  | 3 ++-
 tests/kola/kubernetes/kube-watch/test.sh                  | 3 ++-
 tests/kola/kubernetes/systemd-env-read/test.sh            | 3 ++-
 tests/kola/logging/printk                                 | 3 ++-
 tests/kola/networking/bridge-static-via-kargs             | 3 ++-
 .../networking/default-network-behavior-change/test.sh    | 3 ++-
 tests/kola/networking/dnsmasq-service                     | 3 ++-
 tests/kola/networking/force-persist-ip/test.sh            | 3 ++-
 tests/kola/networking/hostname/fallback-hostname/test.sh  | 3 ++-
 tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh | 3 ++-
 .../ifname-karg/everyboot-systemd-link-file/test.sh       | 3 ++-
 .../ifname-karg/udev-rule-firstboot-propagation           | 3 ++-
 tests/kola/networking/kargs-rd-net                        | 3 ++-
 tests/kola/networking/mtu-on-bond-ignition/test.sh        | 3 ++-
 tests/kola/networking/mtu-on-bond-kargs                   | 3 ++-
 tests/kola/networking/nameserver                          | 3 ++-
 tests/kola/networking/network-online-service              | 3 ++-
 tests/kola/networking/nic-naming                          | 3 ++-
 tests/kola/networking/nm-dhcp-client                      | 3 ++-
 tests/kola/networking/nm-ifcfg-rh-plugin                  | 3 ++-
 tests/kola/networking/nm-start                            | 3 ++-
 tests/kola/networking/nmstate/data/nmstate-common.sh      | 3 ++-
 .../no-default-initramfs-net-propagation/bootif           | 3 ++-
 .../no-default-initramfs-net-propagation/default          | 3 ++-
 tests/kola/networking/no-persist-ip                       | 3 ++-
 tests/kola/networking/prefer-ignition-networking/test.sh  | 3 ++-
 tests/kola/networking/rd-net-timeout-carrier/test.sh      | 3 ++-
 tests/kola/networking/resolv/systemd-resolved             | 3 ++-
 tests/kola/networking/team-dhcp-via-ignition/test.sh      | 3 ++-
 tests/kola/networking/tls                                 | 3 ++-
 tests/kola/ntp/chrony/coreos-platform-chrony-config       | 3 ++-
 tests/kola/ntp/chrony/dhcp-propagation                    | 3 ++-
 tests/kola/ntp/data/ntplib.sh                             | 3 ++-
 tests/kola/ntp/timesyncd/dhcp-propagation/test.sh         | 3 ++-
 tests/kola/platforms/aws/assert-xen                       | 3 ++-
 tests/kola/platforms/aws/nvme                             | 3 ++-
 tests/kola/platforms/gcp/nvme-symlink                     | 3 ++-
 tests/kola/podman/dns/test.sh                             | 3 ++-
 tests/kola/podman/rootless-pasta-networking               | 4 +++-
 tests/kola/podman/rootless-systemd                        | 4 +++-
 tests/kola/reboot/test.sh                                 | 3 ++-
 tests/kola/root-reprovision/autosave-xfs/test.sh          | 3 ++-
 tests/kola/root-reprovision/filesystem-only/test.sh       | 3 ++-
 tests/kola/root-reprovision/linear/test.sh                | 3 ++-
 tests/kola/root-reprovision/luks/autosave-xfs/test.sh     | 3 ++-
 tests/kola/root-reprovision/luks/data/luks-test.sh        | 3 ++-
 tests/kola/root-reprovision/luks/test.sh                  | 3 ++-
 tests/kola/root-reprovision/raid1/test.sh                 | 3 ++-
 tests/kola/root-reprovision/swap-before-root/test.sh      | 3 ++-
 tests/kola/rpm-ostree-countme/test.sh                     | 3 ++-
 tests/kola/rpm-ostree/container-deps                      | 3 ++-
 tests/kola/rpm-ostree/kernel-replace                      | 8 +++++---
 tests/kola/security/coreos-update-ca-trust/test.sh        | 3 ++-
 tests/kola/security/passwd/test.sh                        | 3 ++-
 tests/kola/selinux/default                                | 3 ++-
 tests/kola/selinux/enforcing                              | 3 ++-
 tests/kola/selinux/podman-tmpfs-context                   | 3 ++-
 tests/kola/selinux/stub-resolve-context                   | 3 ++-
 tests/kola/selinux/usrlocal-context                       | 3 ++-
 tests/kola/ssh/custom-host-key-permissions/test.sh        | 3 ++-
 tests/kola/swap/zram-default                              | 3 ++-
 tests/kola/swap/zram-generator/test.sh                    | 3 ++-
 tests/kola/systemd/default-unit-timeouts                  | 3 ++-
 tests/kola/systemd/network-online/test.sh                 | 3 ++-
 tests/kola/toolbox/test.sh                                | 3 ++-
 tests/kola/upgrade/extended/test.sh                       | 3 ++-
 tests/kola/var-mount/luks/test.sh                         | 3 ++-
 tests/kola/var-mount/scsi-id/test.sh                      | 3 ++-
 tests/kola/var-mount/simple/test.sh                       | 3 ++-
 121 files changed, 247 insertions(+), 123 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 3b736e3921..f28a2229c7 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -15,7 +15,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "$(arch)" in
     aarch64|ppc64le|s390x)
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 1c8aee58cb..ea4f948b1e 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "$(arch)" in
     x86_64|aarch64)
diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index b415dae14b..af83fa90fc 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 boot_dev=/boot
 arch=$(arch)
diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index 4691bad8cc..beb28f8de4 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 "")
diff --git a/tests/kola/clhm/ignition-warnings/test.sh b/tests/kola/clhm/ignition-warnings/test.sh
index 761ec2df4b..74b22eddd1 100755
--- a/tests/kola/clhm/ignition-warnings/test.sh
+++ b/tests/kola/clhm/ignition-warnings/test.sh
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 WARN='\e\[0;33m' # yellow
 RESET='\e\[0m' # reset
diff --git a/tests/kola/clhm/network-device-info b/tests/kola/clhm/network-device-info
index 2e6e03450e..a89ad8346f 100755
--- a/tests/kola/clhm/network-device-info
+++ b/tests/kola/clhm/network-device-info
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 for file in /etc/issue.d/22*.issue
 do
diff --git a/tests/kola/containers/cgroups-v2 b/tests/kola/containers/cgroups-v2
index a1b1490dba..292d0a038b 100755
--- a/tests/kola/containers/cgroups-v2
+++ b/tests/kola/containers/cgroups-v2
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # make sure the system is on cgroups v2
 has_cgroup_karg=1
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index 50ad787fe3..966f26bc89 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [[ "$(podman volume inspect systemd-test | jq -r '.[0].Labels."org.test.Key"')" != "quadlet-test-volume" ]]; then
     fatal "Volume not correctly created"
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index 43246eb4a4..f7a8daeb99 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 . /usr/lib/os-release
 
diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
index 875cc5d462..922fccbca4 100755
--- a/tests/kola/disks/growfs
+++ b/tests/kola/disks/growfs
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ ! -f /run/ignition-ostree-growfs.stamp ]; then
     fatal "rootfs was not grown on first boot"
diff --git a/tests/kola/disks/no-google-device-links b/tests/kola/disks/no-google-device-links
index f31e5f299d..9ed282ba11 100755
--- a/tests/kola/disks/no-google-device-links
+++ b/tests/kola/disks/no-google-device-links
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 links=$(find /dev/disk/by-id/ -iname "*google*")
 if [[ -n "${links:-}" ]]; then
diff --git a/tests/kola/disks/root-boot-ro b/tests/kola/disks/root-boot-ro
index 1f85d77aae..c197b804b9 100755
--- a/tests/kola/disks/root-boot-ro
+++ b/tests/kola/disks/root-boot-ro
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 for part in /sysroot /boot; do
     if ! findmnt -n -o options ${part} | grep -q "ro,"; then
diff --git a/tests/kola/disks/root-prjquota b/tests/kola/disks/root-prjquota
index f197b5e77a..1da66d491e 100755
--- a/tests/kola/disks/root-prjquota
+++ b/tests/kola/disks/root-prjquota
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 rootflags=$(findmnt /sysroot -no OPTIONS)
 if ! grep prjquota <<< "${rootflags}"; then
diff --git a/tests/kola/disks/systemd-repart-service b/tests/kola/disks/systemd-repart-service
index 4ac5dab6dd..527fdd2a81 100755
--- a/tests/kola/disks/systemd-repart-service
+++ b/tests/kola/disks/systemd-repart-service
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ "$(systemctl is-enabled systemd-repart.service)" != 'masked' ]; then
     fatal "systemd-repart.service systemd unit should be masked"
diff --git a/tests/kola/disks/tmpfs b/tests/kola/disks/tmpfs
index bf1669db6f..370810660c 100755
--- a/tests/kola/disks/tmpfs
+++ b/tests/kola/disks/tmpfs
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 tmpfs=$(findmnt -n -o FSTYPE /tmp)
 if [ "${tmpfs}" != "tmpfs" ]; then
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 48cc995fbb..92539d8ac5 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 commands=(
   'gdb'
diff --git a/tests/kola/files/aleph-version b/tests/kola/files/aleph-version
index de44b7f2fc..acea887355 100755
--- a/tests/kola/files/aleph-version
+++ b/tests/kola/files/aleph-version
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 jq . < /sysroot/.coreos-aleph-version.json >/dev/null
 ok aleph
diff --git a/tests/kola/files/check-symlink b/tests/kola/files/check-symlink
index 32959af1a3..abe044180f 100755
--- a/tests/kola/files/check-symlink
+++ b/tests/kola/files/check-symlink
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 for file_name in /etc/system-release-cpe /etc/system-release /etc/redhat-release /etc/os-release
 do
diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index 87d1fcaa67..dce96d5805 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 platform_json_kargs() {
     jq -r ".$1.kernel_arguments // [] | join(\" \")" < /boot/coreos/platforms.json
diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
index 6b2918ffbe..5eb98363a8 100755
--- a/tests/kola/files/etc-passwd-group-permissions
+++ b/tests/kola/files/etc-passwd-group-permissions
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 for f in '/etc/passwd' '/etc/group'; do
     if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index e985c48a6c..4997396d41 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # List of known files and directories with group write permission
 list_known=()
diff --git a/tests/kola/files/initrd/compression b/tests/kola/files/initrd/compression
index 37821ecc6f..4a46680305 100755
--- a/tests/kola/files/initrd/compression
+++ b/tests/kola/files/initrd/compression
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Check initrd for zstd magic number
 if is_rhcos8; then
diff --git a/tests/kola/files/initrd/executables b/tests/kola/files/initrd/executables
index 29954b00df..9d4a0ce317 100755
--- a/tests/kola/files/initrd/executables
+++ b/tests/kola/files/initrd/executables
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 tmpd=$(mktemp -d)
 ( cd "${tmpd}" && lsinitrd --unpack /boot/ostree/*/init* )
diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index f45bec7b6a..6db63a18a9 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 required_initrd_files=(
     # Files from the 25azure-udev-rules overlay
diff --git a/tests/kola/files/kernel-headers b/tests/kola/files/kernel-headers
index c6396eafb4..fb4114c070 100755
--- a/tests/kola/files/kernel-headers
+++ b/tests/kola/files/kernel-headers
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if test -d /usr/include/linux; then
    fatal "Error: should not have kernel headers on host"
diff --git a/tests/kola/files/license b/tests/kola/files/license
index 1b438ad275..4722f541a2 100755
--- a/tests/kola/files/license
+++ b/tests/kola/files/license
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
     fatal missing LICENSE
diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index ce1b7f694d..e1af8c7d93 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 for unit in logrotate logrotate.timer; do
     if ! systemctl is-enabled ${unit} 1>/dev/null; then
diff --git a/tests/kola/files/remove-manifest-files b/tests/kola/files/remove-manifest-files
index 4e64921b39..c4dc186814 100755
--- a/tests/kola/files/remove-manifest-files
+++ b/tests/kola/files/remove-manifest-files
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # See remove-files in the manifest
 if test -d /usr/share/info; then
diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index 7b24cdd22a..5884b9daf7 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! lsattr -d / | grep -qe '--i--'; then
     fatal "missing immutable bit on /"
diff --git a/tests/kola/files/rpmdb-sqlite b/tests/kola/files/rpmdb-sqlite
index 39cb9a91bb..dfacf784e6 100755
--- a/tests/kola/files/rpmdb-sqlite
+++ b/tests/kola/files/rpmdb-sqlite
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if is_rhcos8; then
     ok "nothing to check for RHCOS 8"
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index beb9e3f20a..7160755a4b 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # List of known files and directories with SetGID bit set
 # Drop '/usr/libexec/openssh/ssh-keysign' after
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index d30d367446..f53d6c80c0 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # List of known files and directories with SetUID bit set
 list_setuid_files=(
diff --git a/tests/kola/files/sudoers b/tests/kola/files/sudoers
index edab075b45..2396b30b8e 100755
--- a/tests/kola/files/sudoers
+++ b/tests/kola/files/sudoers
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 visudo -c
 ok "sudoers files are valid"
diff --git a/tests/kola/files/system-generators b/tests/kola/files/system-generators
index a1fc4a78ed..a24ab11ebd 100755
--- a/tests/kola/files/system-generators
+++ b/tests/kola/files/system-generators
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 find /usr/lib/systemd/system-generators -type f | while read -r f; do
     mode=$(stat -c '%a' "${f}")
diff --git a/tests/kola/files/unlabeled-contexts b/tests/kola/files/unlabeled-contexts
index 12eb2f2c03..08e7b46c70 100755
--- a/tests/kola/files/unlabeled-contexts
+++ b/tests/kola/files/unlabeled-contexts
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # check that no files are unlabeled
 unlabeled=$(find /var /etc -context '*:unlabeled_t:*')
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 319c994a19..3625fa84c6 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # List of known broken symlinks that require further investigation.
 # The sym links in /usr/lib/firmware are often broken and are
diff --git a/tests/kola/files/yum-repo-dir b/tests/kola/files/yum-repo-dir
index 56080d668c..8b8a42f187 100755
--- a/tests/kola/files/yum-repo-dir
+++ b/tests/kola/files/yum-repo-dir
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! test -d /etc/yum.repos.d; then
     fatal "Error: not find /etc/yum.repos.d"
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index 2df6974d20..b22778c933 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Make sure we're on legacy iptables
 if ! iptables --version | grep legacy; then
diff --git a/tests/kola/firewall/iptables/test.sh b/tests/kola/firewall/iptables/test.sh
index 3c6838bfc8..75ebb78551 100755
--- a/tests/kola/firewall/iptables/test.sh
+++ b/tests/kola/firewall/iptables/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! iptables --version | grep nf_tables; then
     iptables --version # output for logs
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 3a0d575186..8a6af4ab36 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -22,7 +22,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 "")
diff --git a/tests/kola/ignition/journald-log b/tests/kola/ignition/journald-log
index 5dde2d88e9..7147b2a6ce 100755
--- a/tests/kola/ignition/journald-log
+++ b/tests/kola/ignition/journald-log
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 ignitionJournalMsgId="57124006b5c94805b77ce473e92a8aeb"
 
diff --git a/tests/kola/ignition/kargs/test.sh b/tests/kola/ignition/kargs/test.sh
index 669c556ad4..c29b1f1c7e 100755
--- a/tests/kola/ignition/kargs/test.sh
+++ b/tests/kola/ignition/kargs/test.sh
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! grep foobar /proc/cmdline; then
     fatal "missing foobar in kernel cmdline"
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 0985684ed9..7d9431dd7a 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! grep -q foobar /proc/cmdline; then
     fatal "missing foobar in kernel cmdline"
diff --git a/tests/kola/ignition/resource/authenticated-gs/test.sh b/tests/kola/ignition/resource/authenticated-gs/test.sh
index 058cc59f5f..8f39c30b05 100755
--- a/tests/kola/ignition/resource/authenticated-gs/test.sh
+++ b/tests/kola/ignition/resource/authenticated-gs/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
     fatal "fetched data mismatch"
diff --git a/tests/kola/ignition/resource/authenticated-s3/test.sh b/tests/kola/ignition/resource/authenticated-s3/test.sh
index e79dd6ef64..e7ab36b9d2 100755
--- a/tests/kola/ignition/resource/authenticated-s3/test.sh
+++ b/tests/kola/ignition/resource/authenticated-s3/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
     fatal "fetched data mismatch"
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index b720aac145..136c19d1e5 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! diff -rZ $KOLA_EXT_DATA/expected /var/resource; then
     fatal "fetched data mismatch"
diff --git a/tests/kola/ignition/stable-boot/test.sh b/tests/kola/ignition/stable-boot/test.sh
index c9aeba1ca4..3916ef99d3 100755
--- a/tests/kola/ignition/stable-boot/test.sh
+++ b/tests/kola/ignition/stable-boot/test.sh
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # symlink shouldn't be propogated to real-root
 link="/dev/disk/by-id/coreos-boot-disk"
diff --git a/tests/kola/ignition/systemd-disable/test.sh b/tests/kola/ignition/systemd-disable/test.sh
index ad79d94892..7a1c2c4711 100755
--- a/tests/kola/ignition/systemd-disable/test.sh
+++ b/tests/kola/ignition/systemd-disable/test.sh
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ "$(systemctl is-enabled zincati.service)" != 'disabled' ]; then
     fatal "zincati.service systemd unit should be disabled"
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index c8757f070f..1d76f19c3a 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # make sure the presets worked and the instantiated unit is enabled
 if [ "$(systemctl is-enabled touch@foo.service)" != 'enabled' ]; then
diff --git a/tests/kola/ignition/systemd-unmasking/test.sh b/tests/kola/ignition/systemd-unmasking/test.sh
index d16fae7ee1..e600060e10 100755
--- a/tests/kola/ignition/systemd-unmasking/test.sh
+++ b/tests/kola/ignition/systemd-unmasking/test.sh
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Make sure the systemd unit (dnsmasq) is unmasked and enabled
 if [ "$(systemctl is-enabled dnsmasq.service)" != 'enabled' ]; then
diff --git a/tests/kola/k8s/node-e2e/data/node-e2e b/tests/kola/k8s/node-e2e/data/node-e2e
index ee759a7cea..580c73a57b 100755
--- a/tests/kola/k8s/node-e2e/data/node-e2e
+++ b/tests/kola/k8s/node-e2e/data/node-e2e
@@ -3,7 +3,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 SELF=$(realpath "$0")
 IMAGE=quay.io/projectquay/golang:1.17
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index b33b2b68cf..4989cc037d 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -14,7 +14,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index fdffe9fc04..43a3010848 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! systemctl show -p ActiveState kdump.service | grep -q ActiveState=inactive; then
     fatal "Unit kdump.service shouldn't be active"
diff --git a/tests/kola/kubernetes/kube-watch/test.sh b/tests/kola/kubernetes/kube-watch/test.sh
index bfefa7f3b5..eb29e3b018 100755
--- a/tests/kola/kubernetes/kube-watch/test.sh
+++ b/tests/kola/kubernetes/kube-watch/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ "$(systemctl is-active kube-watch.path)" != "active" ]; then
     fatal "kube-watch.path did not activate successfully"
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index 0658064b5c..40e28d2ddc 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ "$( stat -c %C /etc/kubernetes/envfile)" != "system_u:object_r:kubernetes_file_t:s0" ]; then
     fatal "/etc/kubernetes/envfile is labeled incorrectly"
diff --git a/tests/kola/logging/printk b/tests/kola/logging/printk
index 4e6098a5c7..cd9e126d39 100755
--- a/tests/kola/logging/printk
+++ b/tests/kola/logging/printk
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 printk=$(cat /proc/sys/kernel/printk)
 
diff --git a/tests/kola/networking/bridge-static-via-kargs b/tests/kola/networking/bridge-static-via-kargs
index 75de9d04b5..478d7639bd 100755
--- a/tests/kola/networking/bridge-static-via-kargs
+++ b/tests/kola/networking/bridge-static-via-kargs
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 bridge="br0"
 
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index db29662f2b..ed9a3ae073 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # EXPECTED_INITRD_NETWORK_CFG2
 #   - used on older RHEL 8.4 release
diff --git a/tests/kola/networking/dnsmasq-service b/tests/kola/networking/dnsmasq-service
index eb0369fd38..3700592a60 100755
--- a/tests/kola/networking/dnsmasq-service
+++ b/tests/kola/networking/dnsmasq-service
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ "$(systemctl is-enabled dnsmasq.service)" != 'masked' ]; then
     fatal "dnsmasq.service systemd unit should be masked"
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index c8501d40cd..d5c1a885cf 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -22,7 +22,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Verify eth1 gets staic ip via kargs
 nic_name="eth1"
diff --git a/tests/kola/networking/hostname/fallback-hostname/test.sh b/tests/kola/networking/hostname/fallback-hostname/test.sh
index 563c40ed13..579f32fcb7 100755
--- a/tests/kola/networking/hostname/fallback-hostname/test.sh
+++ b/tests/kola/networking/hostname/fallback-hostname/test.sh
@@ -48,7 +48,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if is_rhcos8; then
     if [ $(hostnamectl --transient) != 'localhost' ]; then
diff --git a/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh b/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
index 8b6dd2f8dc..b372b968f8 100644
--- a/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
+++ b/tests/kola/networking/ifname-karg/data/ifname-karg-lib.sh
@@ -1,6 +1,7 @@
 # This is a library created for our ifname-karg tests
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # check IP for given NIC name
 check_ip() {
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
index 0017eef53c..3144339f7a 100755
--- a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 . $KOLA_EXT_DATA/ifname-karg-lib.sh
 
 nicname='kolatest'
diff --git a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
index 4a2d755ab2..f1f5f3965d 100755
--- a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
+++ b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 . $KOLA_EXT_DATA/ifname-karg-lib.sh
 
 nicname='kolatest'
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index f055650726..ee33408f4f 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -18,7 +18,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # check kernel parameter
 cmdline="/proc/cmdline"
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 6ea2654962..7c1b5b6f84 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -28,7 +28,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 bond="bond0"
 vlan="bond0.100"
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index 86004be670..ab0b8811c1 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -20,7 +20,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 bond="bond0"
 vlan="bond0.100"
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 8eabbebb5a..1bedc22972 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -12,7 +12,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if is_fcos; then
     # run resolvectl
diff --git a/tests/kola/networking/network-online-service b/tests/kola/networking/network-online-service
index a81d7504e3..a167350993 100755
--- a/tests/kola/networking/network-online-service
+++ b/tests/kola/networking/network-online-service
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # We shouldn't pull this into the transaction by default.
 # https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
diff --git a/tests/kola/networking/nic-naming b/tests/kola/networking/nic-naming
index ccb2b83f45..e1dd12ba6e 100755
--- a/tests/kola/networking/nic-naming
+++ b/tests/kola/networking/nic-naming
@@ -14,7 +14,8 @@
 # - https://github.com/coreos/fedora-coreos-config/commit/2a5c2abc796ac645d705700bf445b50d4cda8f5f
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ip link | grep -o -e " eth[0-9]:"; then
     fatal "detected eth* NIC naming on node"
diff --git a/tests/kola/networking/nm-dhcp-client b/tests/kola/networking/nm-dhcp-client
index 13126c605e..e6b28e56c6 100755
--- a/tests/kola/networking/nm-dhcp-client
+++ b/tests/kola/networking/nm-dhcp-client
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! journalctl -b 0 -u NetworkManager --grep=dhcp | grep -q "Using DHCP client 'internal'"; then
   fatal "Error: NetworkManager's internal DHCP client is not running"
diff --git a/tests/kola/networking/nm-ifcfg-rh-plugin b/tests/kola/networking/nm-ifcfg-rh-plugin
index 93409f25b6..1f71433bd2 100755
--- a/tests/kola/networking/nm-ifcfg-rh-plugin
+++ b/tests/kola/networking/nm-ifcfg-rh-plugin
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Check if it exists or not. The plugin provides a dbus interface
 # so if it is loaded there will be something listening at that name
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index 32131b2003..9bae2b2d8a 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 get_journal_msg_timestamp() {
     journalctl -o json -b 0 --grep "$1" \
diff --git a/tests/kola/networking/nmstate/data/nmstate-common.sh b/tests/kola/networking/nmstate/data/nmstate-common.sh
index ca8293fa8d..bb720568bd 100755
--- a/tests/kola/networking/nmstate/data/nmstate-common.sh
+++ b/tests/kola/networking/nmstate/data/nmstate-common.sh
@@ -1,4 +1,5 @@
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 main() {
     nmstatectl show
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/bootif b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
index 24c1bfb70f..aee002a7c6 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/bootif
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/bootif
@@ -16,7 +16,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Run the test bits (sets the $fail var)
 . $KOLA_EXT_DATA/test-net-propagation.sh
diff --git a/tests/kola/networking/no-default-initramfs-net-propagation/default b/tests/kola/networking/no-default-initramfs-net-propagation/default
index 99ede4e4f6..85e722b24c 100755
--- a/tests/kola/networking/no-default-initramfs-net-propagation/default
+++ b/tests/kola/networking/no-default-initramfs-net-propagation/default
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Run the test bits (sets the $fail var)
 . $KOLA_EXT_DATA/test-net-propagation.sh
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 14766624bf..29acd21c44 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -18,7 +18,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Verify eth1 gets ip address via dhcp
 nic_name="eth1"
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index a7acec06eb..d4a62b5261 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -22,7 +22,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Verify eth1 gets ip address via dhcp
 nic_name="eth1"
diff --git a/tests/kola/networking/rd-net-timeout-carrier/test.sh b/tests/kola/networking/rd-net-timeout-carrier/test.sh
index cd5f4e3003..163b0c0ce7 100755
--- a/tests/kola/networking/rd-net-timeout-carrier/test.sh
+++ b/tests/kola/networking/rd-net-timeout-carrier/test.sh
@@ -20,7 +20,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
diff --git a/tests/kola/networking/resolv/systemd-resolved b/tests/kola/networking/resolv/systemd-resolved
index c4556f2f1d..c229f9d220 100755
--- a/tests/kola/networking/resolv/systemd-resolved
+++ b/tests/kola/networking/resolv/systemd-resolved
@@ -9,7 +9,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! systemctl is-enabled systemd-resolved 1>/dev/null; then
     fatal "Unit systemd-resolved should be enabled"
diff --git a/tests/kola/networking/team-dhcp-via-ignition/test.sh b/tests/kola/networking/team-dhcp-via-ignition/test.sh
index 4f50f6f111..6d506c23c9 100755
--- a/tests/kola/networking/team-dhcp-via-ignition/test.sh
+++ b/tests/kola/networking/team-dhcp-via-ignition/test.sh
@@ -15,7 +15,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 team="team0"
 
diff --git a/tests/kola/networking/tls b/tests/kola/networking/tls
index b40a48fe2b..ebaff45f1c 100755
--- a/tests/kola/networking/tls
+++ b/tests/kola/networking/tls
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 urls_to_fetch=(
     "https://cloud.google.com"
diff --git a/tests/kola/ntp/chrony/coreos-platform-chrony-config b/tests/kola/ntp/chrony/coreos-platform-chrony-config
index 36230c9ef7..d1dc0294eb 100755
--- a/tests/kola/ntp/chrony/coreos-platform-chrony-config
+++ b/tests/kola/ntp/chrony/coreos-platform-chrony-config
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 platform=$(cmdline_arg ignition.platform.id)
 case "${platform}" in
diff --git a/tests/kola/ntp/chrony/dhcp-propagation b/tests/kola/ntp/chrony/dhcp-propagation
index 434df712be..fb3d6059aa 100755
--- a/tests/kola/ntp/chrony/dhcp-propagation
+++ b/tests/kola/ntp/chrony/dhcp-propagation
@@ -23,7 +23,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 . $KOLA_EXT_DATA/ntplib.sh
 
 main() {
diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index a8dd540831..4f8e8cff2f 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -1,6 +1,7 @@
 # This is a library created for our NTP tests
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 ntp_test_setup() {
     ntp_host_ip=$1
diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
index 6324453149..f0baf6b46b 100755
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/test.sh
@@ -25,7 +25,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 . $KOLA_EXT_DATA/ntplib.sh
 
 main() {
diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index 8120944808..3fe55e1150 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 hypervisor=$(curl http://169.254.169.254/2022-09-24/meta-data/system || true)
 if [ "${hypervisor}" != "xen" ]; then
diff --git a/tests/kola/platforms/aws/nvme b/tests/kola/platforms/aws/nvme
index 7a2253ba94..3415544c63 100755
--- a/tests/kola/platforms/aws/nvme
+++ b/tests/kola/platforms/aws/nvme
@@ -35,7 +35,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 nvme_info=$(nvme list-subsys -o json || true)
 has_nvme=$(jq -r ".[].Subsystems[].Paths[] | select(.Name == \"nvme0\").Name" <<< "$nvme_info")
diff --git a/tests/kola/platforms/gcp/nvme-symlink b/tests/kola/platforms/gcp/nvme-symlink
index a3f3103942..ec2439f1a9 100755
--- a/tests/kola/platforms/gcp/nvme-symlink
+++ b/tests/kola/platforms/gcp/nvme-symlink
@@ -18,7 +18,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Set global variable with NVME json info
 NVME_INFO=$(nvme list-subsys -o json)
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 260ff24f1e..c6fa61cf0b 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -15,7 +15,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 runascoreuserscript='
 #!/bin/bash
diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
index 25e46495f5..8689162e38 100755
--- a/tests/kola/podman/rootless-pasta-networking
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -13,7 +13,9 @@
 # See https://github.com/coreos/fedora-coreos-tracker/issues/1436
 
 set -xeuo pipefail
-. $KOLA_EXT_DATA/commonlib.sh
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 runascoreuserscript='#!/bin/bash
 set -euxo pipefail
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index a6b8ee75be..c5d32976ca 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -21,7 +21,9 @@
 # both on cgroups v1 and cgroups v2.
 
 set -xeuo pipefail
-. $KOLA_EXT_DATA/commonlib.sh
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 runascoreuserscript='
 #!/bin/bash
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index a09bcbc731..9969a3c9b3 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # /var
 varsrc=$(findmnt -nvr /var -o SOURCE)
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
index a7760e5818..db1bb6b7a1 100755
--- a/tests/kola/root-reprovision/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -14,7 +14,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ ! -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
     fatal "expected autosaved XFS"
diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 6003d8c126..43cd85af1a 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 fstype=$(findmnt -nvr / -o FSTYPE)
 [[ $fstype == ext4 ]]
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index a225261965..3dce05e080 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -15,7 +15,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == $(realpath /dev/md/foobar) ]]
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index e15e82baeb..7c394e9882 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -16,7 +16,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # check that we ran automatic XFS reprovisioning
 if [ -z "${AUTOPKGTEST_REBOOT_MARK:-}" ]; then
diff --git a/tests/kola/root-reprovision/luks/data/luks-test.sh b/tests/kola/root-reprovision/luks/data/luks-test.sh
index fe4b0dc3fe..8e2f8b47be 100755
--- a/tests/kola/root-reprovision/luks/data/luks-test.sh
+++ b/tests/kola/root-reprovision/luks/data/luks-test.sh
@@ -1,7 +1,8 @@
 # This file is sourced by both `ext.config.root-reprovision.luks`
 # and `ext.config.root-reprovision.luks.autosave-xfs`.
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == /dev/mapper/myluksdev ]]
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index 3aa35a32f5..c13fc76706 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -14,7 +14,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # check that we didn't run automatic XFS reprovisioning
 if [ -z "${AUTOPKGTEST_REBOOT_MARK:-}" ]; then
diff --git a/tests/kola/root-reprovision/raid1/test.sh b/tests/kola/root-reprovision/raid1/test.sh
index 6bf0e3c5cb..226540aab1 100755
--- a/tests/kola/root-reprovision/raid1/test.sh
+++ b/tests/kola/root-reprovision/raid1/test.sh
@@ -15,7 +15,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 srcdev=$(findmnt -nvr / -o SOURCE)
 [[ ${srcdev} == $(realpath /dev/md/foobar) ]]
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index e09819de00..654e5eee5e 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -16,7 +16,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 swapstatus=$(systemctl is-active dev-disk-by\\x2dpartlabel-swap.swap)
 [[ ${swapstatus} == active ]]
diff --git a/tests/kola/rpm-ostree-countme/test.sh b/tests/kola/rpm-ostree-countme/test.sh
index b87f973098..8f41159d9c 100755
--- a/tests/kola/rpm-ostree-countme/test.sh
+++ b/tests/kola/rpm-ostree-countme/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 journal_cursor() {
     journalctl --output json --lines 1 \
diff --git a/tests/kola/rpm-ostree/container-deps b/tests/kola/rpm-ostree/container-deps
index 154ef68f23..5b8d3fce95 100755
--- a/tests/kola/rpm-ostree/container-deps
+++ b/tests/kola/rpm-ostree/container-deps
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Verify this command exists since it's a hard dependency of ostree's container bits.
 skopeo experimental-image-proxy --help
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index a4412a7748..cb1ea71315 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -31,9 +31,11 @@
 # Free Software Foundation, Inc., 59 Temple Place - Suite 330,
 # Boston, MA 02111-1307, USA.
 
-set -euo pipefail
-. $KOLA_EXT_DATA/commonlib.sh
-set -x
+set -euxo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
 cd $(mktemp -d)
 
 # TODO: It'd be much better to test this via a registry
diff --git a/tests/kola/security/coreos-update-ca-trust/test.sh b/tests/kola/security/coreos-update-ca-trust/test.sh
index 5dfa0a2bec..93f63fe86a 100755
--- a/tests/kola/security/coreos-update-ca-trust/test.sh
+++ b/tests/kola/security/coreos-update-ca-trust/test.sh
@@ -5,7 +5,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Make sure that coreos-update-ca-trust kicked in and observe the result.
 if ! systemctl show coreos-update-ca-trust.service -p ActiveState | grep ActiveState=active; then
diff --git a/tests/kola/security/passwd/test.sh b/tests/kola/security/passwd/test.sh
index 5856993160..a3c5637a21 100755
--- a/tests/kola/security/passwd/test.sh
+++ b/tests/kola/security/passwd/test.sh
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 OUTPUT=$(echo 'foobar' | setsid su - tester -c id)
 
diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
index 096f34631a..e5bc702c2d 100755
--- a/tests/kola/selinux/default
+++ b/tests/kola/selinux/default
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ostree admin config-diff | grep 'selinux/targeted/policy'; then
     fatal "SELinux policy is marked as modified"
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index 41502c8de2..8cf1294f7c 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 3d4d6bc527..1c667eba49 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -12,7 +12,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:38 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
diff --git a/tests/kola/selinux/stub-resolve-context b/tests/kola/selinux/stub-resolve-context
index f7e0541387..102c42ad1d 100755
--- a/tests/kola/selinux/stub-resolve-context
+++ b/tests/kola/selinux/stub-resolve-context
@@ -13,7 +13,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 context=$(stat --format "%C" /run/systemd/resolve/stub-resolv.conf)
 if [ "$context" != "system_u:object_r:net_conf_t:s0" ]; then
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index 3e31b9cc63..4ce67b1de2 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -6,7 +6,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 bin_ctx=$(stat -c %C /usr/sbin)
 usrlocal_sbin_ctx=$(stat -c %C /var/usrlocal/sbin)
diff --git a/tests/kola/ssh/custom-host-key-permissions/test.sh b/tests/kola/ssh/custom-host-key-permissions/test.sh
index 4599658301..38c7d9f7bf 100755
--- a/tests/kola/ssh/custom-host-key-permissions/test.sh
+++ b/tests/kola/ssh/custom-host-key-permissions/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # recent Fedora sshd binaries will fail to start if all configured host keys
 # have mode > 600 and their modes haven't automatically been fixed
diff --git a/tests/kola/swap/zram-default b/tests/kola/swap/zram-default
index 3b2323daa3..6e9a11a88f 100755
--- a/tests/kola/swap/zram-default
+++ b/tests/kola/swap/zram-default
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if [ -e /dev/zram0 ]; then
     fatal "zram0 swap device set up on default install"
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index cb47cbfbe2..ee34262daa 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -11,7 +11,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 if ! grep -q 'zram0' /proc/swaps; then
     fatal "expected zram0 to be set up"
diff --git a/tests/kola/systemd/default-unit-timeouts b/tests/kola/systemd/default-unit-timeouts
index 08d279dd7a..18570f3e70 100755
--- a/tests/kola/systemd/default-unit-timeouts
+++ b/tests/kola/systemd/default-unit-timeouts
@@ -8,7 +8,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 DefaultTimeoutStartUSec=$(systemctl show --value --property=DefaultTimeoutStartUSec)
 DefaultTimeoutStopUSec=$(systemctl show --value --property=DefaultTimeoutStopUSec)
diff --git a/tests/kola/systemd/network-online/test.sh b/tests/kola/systemd/network-online/test.sh
index 1512503541..442ef34ae0 100755
--- a/tests/kola/systemd/network-online/test.sh
+++ b/tests/kola/systemd/network-online/test.sh
@@ -20,7 +20,8 @@
 
 set -euo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # The fact that we're here means that `systemd-user-sessions.service` was
 # reached and logins work since kola was able to SSH to start us. But let's do
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 5844837cfb..73977379fb 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -19,7 +19,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # Try five times to create the toolbox to avoid Fedora registry infra flakes
 for i in $(seq 1 5); do
diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 596c47666b..c1d29b5a3a 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -10,7 +10,8 @@
 
 set -eux -o pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # This test will attempt to test an upgrade from a given starting
 # point (assumed by the caller passing in a specific
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index a9e61ee508..bb72e762c9 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # /var
 
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index 591fd2bf04..dcd565a800 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -10,7 +10,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 fstype=$(findmnt -nvr /var -o FSTYPE)
 if [ $fstype != xfs ]; then
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index 20b36af04b..9ccfed7c06 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -7,7 +7,8 @@
 
 set -xeuo pipefail
 
-. $KOLA_EXT_DATA/commonlib.sh
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
 
 # /var
 

From 182ca12ae8a15c9ac3ba6b5bd3d09fa8e704bd1e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 23 Aug 2023 14:55:10 +0200
Subject: [PATCH 1785/2157] test: Remove unneeded whitespace at EOL

---
 tests/kola/boot/grub2-install                      |  2 +-
 tests/kola/content-origins/test.sh                 |  2 +-
 tests/kola/disks/growfs                            |  2 +-
 tests/kola/files/console-config                    |  6 +++---
 tests/kola/files/file-directory-permissions        |  2 +-
 tests/kola/files/setgid                            |  2 +-
 tests/kola/files/setuid                            |  2 +-
 tests/kola/files/sudoers                           |  2 +-
 tests/kola/files/validate-symlinks                 |  2 +-
 tests/kola/firewall/iptables-legacy/test.sh        |  4 ++--
 tests/kola/gshadow                                 |  2 +-
 tests/kola/ignition/delete-config/test.sh          | 14 +++++++-------
 tests/kola/ignition/journald-log                   |  2 +-
 tests/kola/ignition/remote/test.sh                 |  2 +-
 tests/kola/ignition/resource/remote/test.sh        |  2 +-
 tests/kola/ignition/systemd-enable-units/test.sh   |  2 +-
 tests/kola/k8s/node-e2e/master                     |  2 +-
 tests/kola/kdump/service                           |  2 +-
 tests/kola/kubernetes/systemd-env-read/test.sh     |  4 ++--
 .../default-network-behavior-change/test.sh        |  2 +-
 tests/kola/networking/force-persist-ip/test.sh     |  2 +-
 .../everyboot-systemd-link-file/test.sh            |  2 +-
 .../ifname-karg/udev-rule-firstboot-propagation    |  4 ++--
 tests/kola/networking/kargs-rd-net                 |  4 ++--
 tests/kola/networking/mtu-on-bond-ignition/test.sh |  2 +-
 tests/kola/networking/mtu-on-bond-kargs            |  2 +-
 tests/kola/networking/nameserver                   |  2 +-
 tests/kola/networking/nm-start                     |  2 +-
 .../kola/networking/nmstate/data/nmstate-common.sh |  6 +++---
 tests/kola/networking/nmstate/policy/test.sh       |  2 +-
 tests/kola/networking/nmstate/state/test.sh        |  2 +-
 tests/kola/networking/no-persist-ip                |  8 ++++----
 .../networking/prefer-ignition-networking/test.sh  |  2 +-
 tests/kola/networking/resolv/systemd-resolved      |  2 +-
 tests/kola/platforms/gcp/nvme-symlink              |  2 +-
 tests/kola/podman/dns/test.sh                      |  2 +-
 tests/kola/reboot/test.sh                          |  2 +-
 tests/kola/root-reprovision/autosave-xfs/test.sh   |  2 +-
 .../root-reprovision/luks/autosave-xfs/test.sh     |  2 +-
 tests/kola/root-reprovision/luks/test.sh           |  2 +-
 tests/kola/rpm-ostree/kernel-replace               |  2 +-
 tests/kola/secex/ensure/test.sh                    |  2 +-
 tests/kola/secex/reboot/test.sh                    |  2 +-
 tests/kola/selinux/enforcing                       |  4 ++--
 tests/kola/selinux/podman-tmpfs-context            |  2 +-
 tests/kola/selinux/stub-resolve-context            |  2 +-
 tests/kola/selinux/usrlocal-context                |  2 +-
 tests/kola/ssh/custom-host-key-permissions/test.sh |  2 +-
 tests/kola/swap/zram-generator/test.sh             |  2 +-
 tests/kola/toolbox/test.sh                         |  2 +-
 tests/kola/var-mount/scsi-id/test.sh               |  2 +-
 51 files changed, 69 insertions(+), 69 deletions(-)

diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index af83fa90fc..6064c46ec5 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -35,7 +35,7 @@ case ${arch} in
     device=$(realpath /dev/disk/by-partlabel/PowerPC-PReP-boot)
     # sync grub2-install parameter according to image build script
     # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
-    grub_install_args="--no-nvram"   
+    grub_install_args="--no-nvram"
     ;;
 
   *)
diff --git a/tests/kola/content-origins/test.sh b/tests/kola/content-origins/test.sh
index f7a8daeb99..ea3dd9f3c5 100755
--- a/tests/kola/content-origins/test.sh
+++ b/tests/kola/content-origins/test.sh
@@ -5,7 +5,7 @@
 ##   exclusive: false
 ##   # May support e.g. centos in the future
 ##   distros: "fcos rhcos"
-##   description: Verify the RPM %{vendor} flag for everything installed 
+##   description: Verify the RPM %{vendor} flag for everything installed
 ##     matches what we expect.
 
 set -xeuo pipefail
diff --git a/tests/kola/disks/growfs b/tests/kola/disks/growfs
index 922fccbca4..fd88336377 100755
--- a/tests/kola/disks/growfs
+++ b/tests/kola/disks/growfs
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that the rootfs is automatically grown on first 
+##   description: Verify that the rootfs is automatically grown on first
 ##     boot by default and that the autosave-xfs logic didn't kick in.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index dce96d5805..95c66c70e4 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -5,10 +5,10 @@
 ##   # s390x doesn't have any configuration in platforms.yaml, so
 ##   # platforms.json is not included in the image
 ##   architectures: "! s390x"
-##   description: Verify that the kargs and grub.cfg commands specified in 
-##     platforms.json have been properly applied to the image. 
+##   description: Verify that the kargs and grub.cfg commands specified in
+##     platforms.json have been properly applied to the image.
 
-# Also check cosa correctly translated platforms.yaml to platforms.json, by 
+# Also check cosa correctly translated platforms.yaml to platforms.json, by
 # spot-checking certain expected values in platforms.json.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/file-directory-permissions b/tests/kola/files/file-directory-permissions
index 4997396d41..b10c8fb329 100755
--- a/tests/kola/files/file-directory-permissions
+++ b/tests/kola/files/file-directory-permissions
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that there are no files and directories 
+##   description: Verify that there are no files and directories
 ##     with 'g+w' or 'o+w' permission in /etc, except the known lists.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/setgid b/tests/kola/files/setgid
index 7160755a4b..0dd9259e1c 100755
--- a/tests/kola/files/setgid
+++ b/tests/kola/files/setgid
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that there are no file/directory with 
+##   description: Verify that there are no file/directory with
 ##     SetGID bit set, except the known files and directories.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/setuid b/tests/kola/files/setuid
index f53d6c80c0..3b4d01e6cc 100755
--- a/tests/kola/files/setuid
+++ b/tests/kola/files/setuid
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that there are no file/directory with 
+##   description: Verify that there are no file/directory with
 ##     SetUID bit set, except the known files and directories.
 
 set -xeuo pipefail
diff --git a/tests/kola/files/sudoers b/tests/kola/files/sudoers
index 2396b30b8e..ac15f14e3e 100755
--- a/tests/kola/files/sudoers
+++ b/tests/kola/files/sudoers
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify the permissions and syntax of /etc/sudoers 
+##   description: Verify the permissions and syntax of /etc/sudoers
 ##     and /etc/sudoers.d/* are readable only for root.
 
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1981979
diff --git a/tests/kola/files/validate-symlinks b/tests/kola/files/validate-symlinks
index 3625fa84c6..cb73cff08c 100755
--- a/tests/kola/files/validate-symlinks
+++ b/tests/kola/files/validate-symlinks
@@ -3,7 +3,7 @@
 ##   tags: "platform-independent"
 ##   # This is a read-only test that can be run with other tests.
 ##   exclusive: false
-##   description: Verify that there are no broken symlinks in /etc/ and /usr/, 
+##   description: Verify that there are no broken symlinks in /etc/ and /usr/,
 ##     except the known files which require further investigation.
 
 # See https://github.com/coreos/fedora-coreos-config/issues/1782
diff --git a/tests/kola/firewall/iptables-legacy/test.sh b/tests/kola/firewall/iptables-legacy/test.sh
index b22778c933..1c3055d7b8 100755
--- a/tests/kola/firewall/iptables-legacy/test.sh
+++ b/tests/kola/firewall/iptables-legacy/test.sh
@@ -2,8 +2,8 @@
 ## kola:
 ##   distros: fcos
 ##   exclusive: true
-##   description: Verify that one can configure a node to use the legacy 
-##     iptables backend. 
+##   description: Verify that one can configure a node to use the legacy
+##     iptables backend.
 
 # It is scoped to only FCOS because RHCOS only supports nft.
 
diff --git a/tests/kola/gshadow b/tests/kola/gshadow
index aa9e613055..d01a304355 100755
--- a/tests/kola/gshadow
+++ b/tests/kola/gshadow
@@ -1,6 +1,6 @@
 #!/bin/bash
 ## kola:
-##   description: Verify that glibc's parsing of /etc/gshadow does 
+##   description: Verify that glibc's parsing of /etc/gshadow does
 ##     not cause systemd-sysusers to segfault on specially constructed lines.
 
 # See https://github.com/coreos/bugs/issues/1394
diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 8a6af4ab36..0cd4c1de2b 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -1,23 +1,23 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-##   description: Verify that we delete userdata from provider after Ignition 
+##   description: Verify that we delete userdata from provider after Ignition
 ##     completes.
 
 # See https://github.com/coreos/ignition/issues/1315
-# There are 2 services: 
-# 1)ignition-delete-config.service, which deletes Ignition 
+# There are 2 services:
+# 1)ignition-delete-config.service, which deletes Ignition
 # configs from VMware and VirtualBox on first boot.
-# 2)coreos-ignition-delete-config.service, do the same thing 
-# on existing machines on upgrade, using a stamp file in /var/lib 
+# 2)coreos-ignition-delete-config.service, do the same thing
+# on existing machines on upgrade, using a stamp file in /var/lib
 # to avoid multiple runs.
 # Ideally we'd test on virtualbox and vmware, but we don't have tests
 # there, so we mock specifically for ignition.platform.id=qemu.
 # Test scenarios:
-# On first boot, verify that both 2 services ran. 
+# On first boot, verify that both 2 services ran.
 # On upgrade boot, verify that 1) should not run, 2) should run.
 # On normal boot, verify that both 2 services should not run.
-# On upgrade boot with 2) masked, verify that both 2 services 
+# On upgrade boot with 2) masked, verify that both 2 services
 # should not run.
 
 set -xeuo pipefail
diff --git a/tests/kola/ignition/journald-log b/tests/kola/ignition/journald-log
index 7147b2a6ce..0a98841229 100755
--- a/tests/kola/ignition/journald-log
+++ b/tests/kola/ignition/journald-log
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that we send the journald log entry for a 
+##   description: Verify that we send the journald log entry for a
 ##     user-provided config.
 
 # See https://github.com/coreos/ignition/pull/958 for the MESSAGE_ID source.
diff --git a/tests/kola/ignition/remote/test.sh b/tests/kola/ignition/remote/test.sh
index 7d9431dd7a..6b2fa6a07c 100755
--- a/tests/kola/ignition/remote/test.sh
+++ b/tests/kola/ignition/remote/test.sh
@@ -4,7 +4,7 @@
 ##   description: Verify Ignition supports remote config.
 
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1980679
-# remote.ign is on github, inject kernelArguments and write 
+# remote.ign is on github, inject kernelArguments and write
 # something to /etc/testfile.
 # config.ign is to include remote kargsfile.ign.
 
diff --git a/tests/kola/ignition/resource/remote/test.sh b/tests/kola/ignition/resource/remote/test.sh
index 136c19d1e5..21df7c9df4 100755
--- a/tests/kola/ignition/resource/remote/test.sh
+++ b/tests/kola/ignition/resource/remote/test.sh
@@ -3,7 +3,7 @@
 ##   tags: needs-internet
 ##   # Don't pass AWS or GCP credentials to instance
 ##   noInstanceCreds: true
-##   description: Verify that Ignition can fetch anonymous resources within a 
+##   description: Verify that Ignition can fetch anonymous resources within a
 ##     cloud platform (S3 -> AWS, GCS -> GCP) when no credentials are supplied.
 
 set -xeuo pipefail
diff --git a/tests/kola/ignition/systemd-enable-units/test.sh b/tests/kola/ignition/systemd-enable-units/test.sh
index 1d76f19c3a..31c6a63a7b 100755
--- a/tests/kola/ignition/systemd-enable-units/test.sh
+++ b/tests/kola/ignition/systemd-enable-units/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent"
-##   description: Verify that Ignition supports to enable systemd units 
+##   description: Verify that Ignition supports to enable systemd units
 ##     of different types.
 
 # See
diff --git a/tests/kola/k8s/node-e2e/master b/tests/kola/k8s/node-e2e/master
index feeb393102..ec2dd3baa2 100755
--- a/tests/kola/k8s/node-e2e/master
+++ b/tests/kola/k8s/node-e2e/master
@@ -7,7 +7,7 @@
 ##   architectures: x86_64
 ##   requiredTag: k8s
 ##   tags: needs-internet
-##   description: Verify the Kubernetes e2e node tests work, and 
+##   description: Verify the Kubernetes e2e node tests work, and
 ##     ensure that we don't inadvertedly break Kubernetes.
 
 set -xeuo pipefail
diff --git a/tests/kola/kdump/service b/tests/kola/kdump/service
index 43a3010848..f6893b06b9 100755
--- a/tests/kola/kdump/service
+++ b/tests/kola/kdump/service
@@ -3,7 +3,7 @@
 ##   exclusive: false
 ##   description: Verify that kdump didn't start by default.
 
-# It's either disabled, or enabled but conditional on crashkernel= karg, 
+# It's either disabled, or enabled but conditional on crashkernel= karg,
 # which we don't bake.
 
 set -xeuo pipefail
diff --git a/tests/kola/kubernetes/systemd-env-read/test.sh b/tests/kola/kubernetes/systemd-env-read/test.sh
index 40e28d2ddc..849177dd77 100755
--- a/tests/kola/kubernetes/systemd-env-read/test.sh
+++ b/tests/kola/kubernetes/systemd-env-read/test.sh
@@ -1,8 +1,8 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify that `kubernetes_file_t` labeled files can be read 
-##     by systemd, also verify the `kube-env` service started successfully  
+##   description: Verify that `kubernetes_file_t` labeled files can be read
+##     by systemd, also verify the `kube-env` service started successfully
 ##     and the service wrote to the journal successfully.
 
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1973418
diff --git a/tests/kola/networking/default-network-behavior-change/test.sh b/tests/kola/networking/default-network-behavior-change/test.sh
index ed9a3ae073..0ff17a645d 100755
--- a/tests/kola/networking/default-network-behavior-change/test.sh
+++ b/tests/kola/networking/default-network-behavior-change/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   tags: "platform-independent"
 ##   exclusive: false
-##   description: Verify the default networking configurations match expected 
+##   description: Verify the default networking configurations match expected
 ##     results.
 #
 # Since we depend so much on the default networking configurations let's
diff --git a/tests/kola/networking/force-persist-ip/test.sh b/tests/kola/networking/force-persist-ip/test.sh
index d5c1a885cf..bdecb10cf8 100755
--- a/tests/kola/networking/force-persist-ip/test.sh
+++ b/tests/kola/networking/force-persist-ip/test.sh
@@ -9,7 +9,7 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0 coreos.force_persist_ip"
-##   description: Verify that coreos.force_persist_ip will force propagating 
+##   description: Verify that coreos.force_persist_ip will force propagating
 ##     kernel argument based networking configuration into the real root.
 
 # Setup configuration for a single NIC with two different ways:
diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
index 3144339f7a..26b2c85e30 100755
--- a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
@@ -18,7 +18,7 @@ nicname='kolatest'
 
 run_tests() {
     # Make sure nothing was persisted from the initramfs
-    check_file_not_exists '/etc/udev/rules.d/80-ifname.rules' 
+    check_file_not_exists '/etc/udev/rules.d/80-ifname.rules'
     # Make sure systemd-network-generator ran (from the real root)
     check_file_exists "/run/systemd/network/90-${nicname}.link"
     # Make sure the NIC is in use and got the expected IP address
diff --git a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
index f1f5f3965d..52350b96f6 100755
--- a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
+++ b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
@@ -21,7 +21,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
     "")
         ok "first boot"
         # Make sure the rules were persisted from the initramfs
-        check_file_exists '/etc/udev/rules.d/80-ifname.rules' 
+        check_file_exists '/etc/udev/rules.d/80-ifname.rules'
         # On first boot we expect systemd-network-generator to run too
         # because the ifname= karg was present, but only for first boot
         check_file_exists "/run/systemd/network/90-${nicname}.link"
@@ -33,7 +33,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
     rebooted)
         ok "second boot"
         # Make sure the rules are still there
-        check_file_exists '/etc/udev/rules.d/80-ifname.rules' 
+        check_file_exists '/etc/udev/rules.d/80-ifname.rules'
         # On second boot the ifname= karg isn't there so the file
         # created by systemd-network-generator shouldn't exist.
         check_file_not_exists "/run/systemd/network/90-${nicname}.link"
diff --git a/tests/kola/networking/kargs-rd-net b/tests/kola/networking/kargs-rd-net
index ee33408f4f..557026c531 100755
--- a/tests/kola/networking/kargs-rd-net
+++ b/tests/kola/networking/kargs-rd-net
@@ -4,7 +4,7 @@
 ##   platforms: qemu
 ##   # The functionality we're testing here.
 ##   appendFirstbootKernelArgs: "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8"
-##   description: Verify rd.net.timeout.dhcp and rd.net.dhcp.retry 
+##   description: Verify rd.net.timeout.dhcp and rd.net.dhcp.retry
 ##     are supported by NetworkManager.
 
 # See
@@ -12,7 +12,7 @@
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1879094#c10
 # - https://bugzilla.redhat.com/show_bug.cgi?id=1877740
 
-# Append "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8" to kernel parameter 
+# Append "rd.net.timeout.dhcp=30 rd.net.dhcp.retry=8" to kernel parameter
 # when boot, get total timeout is `timeout * retry`, 30*8(240) seconds
 # in this test scenario.
 
diff --git a/tests/kola/networking/mtu-on-bond-ignition/test.sh b/tests/kola/networking/mtu-on-bond-ignition/test.sh
index 7c1b5b6f84..865c59ca7f 100755
--- a/tests/kola/networking/mtu-on-bond-ignition/test.sh
+++ b/tests/kola/networking/mtu-on-bond-ignition/test.sh
@@ -8,7 +8,7 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: net.ifnames=0
-##   description: Verify that configure MTU on a VLAN subinterface for 
+##   description: Verify that configure MTU on a VLAN subinterface for
 ##     the bond via Ignition works.
 #
 # Set MTU on a VLAN subinterface for the bond using Ignition config and check
diff --git a/tests/kola/networking/mtu-on-bond-kargs b/tests/kola/networking/mtu-on-bond-kargs
index ab0b8811c1..c91f6b76f7 100755
--- a/tests/kola/networking/mtu-on-bond-kargs
+++ b/tests/kola/networking/mtu-on-bond-kargs
@@ -9,7 +9,7 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "bond=bond0:eth1,eth2:mode=active-backup,miimon=100:9000 ip=10.10.10.10::10.10.10.1:255.255.255.0:staticvlanbond:bond0.100:none:9000 vlan=bond0.100:bond0 net.ifnames=0"
-##   description: Verify that configuring MTU on a VLAN subinterface 
+##   description: Verify that configuring MTU on a VLAN subinterface
 ##     for the bond via kernel arguements works.
 
 # Configuring MTU on a VLAN subinterface for the bond,
diff --git a/tests/kola/networking/nameserver b/tests/kola/networking/nameserver
index 1bedc22972..82f73eb633 100755
--- a/tests/kola/networking/nameserver
+++ b/tests/kola/networking/nameserver
@@ -3,7 +3,7 @@
 ##   # appendKernelArgs is only supported on QEMU
 ##   platforms: qemu
 ##   appendKernelArgs: "nameserver=8.8.8.8 nameserver=1.1.1.1"
-##   description: Verify that we config multiple nameservers via kernel 
+##   description: Verify that we config multiple nameservers via kernel
 ##     arguments work well.
 
 # RHCOS: need to check /etc/resolv.conf and nmconnection.
diff --git a/tests/kola/networking/nm-start b/tests/kola/networking/nm-start
index 9bae2b2d8a..f78c4489a5 100755
--- a/tests/kola/networking/nm-start
+++ b/tests/kola/networking/nm-start
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify kola on QEMU shouldn't bring up networking in the 
+##   description: Verify kola on QEMU shouldn't bring up networking in the
 ##     initrd by default, and on AWS we did bring up networking in the initrd.
 
 # See https://github.com/coreos/fedora-coreos-config/pull/426
diff --git a/tests/kola/networking/nmstate/data/nmstate-common.sh b/tests/kola/networking/nmstate/data/nmstate-common.sh
index bb720568bd..7cbf83c993 100755
--- a/tests/kola/networking/nmstate/data/nmstate-common.sh
+++ b/tests/kola/networking/nmstate/data/nmstate-common.sh
@@ -4,18 +4,18 @@
 main() {
     nmstatectl show
     journalctl -u nmstate
-    
+
     local prefix="first boot"
     if [ "${AUTOPKGTEST_REBOOT_MARK:-}" == rebooted ]; then
         prefix="second boot"
     fi
-    
+
     if ! nmcli c show br-ex; then
         fatal "${prefix}: bridge not configured"
     fi
 
     if ! ls /etc/nmstate/*applied; then
-        fatal "${prefix}: nmstate yamls files not marked as applied"    
+        fatal "${prefix}: nmstate yamls files not marked as applied"
     fi
 
     if [ "${AUTOPKGTEST_REBOOT_MARK:-}" == "" ]; then
diff --git a/tests/kola/networking/nmstate/policy/test.sh b/tests/kola/networking/nmstate/policy/test.sh
index e31fba28b7..2387a688b5 100755
--- a/tests/kola/networking/nmstate/policy/test.sh
+++ b/tests/kola/networking/nmstate/policy/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent needs-internet"
-##   description: Verify that configure a DHCP linux bridge using 
+##   description: Verify that configure a DHCP linux bridge using
 ##     butane and nmstate service with policy works.
 
 # See https://github.com/coreos/fedora-coreos-tracker/issues/1175
diff --git a/tests/kola/networking/nmstate/state/test.sh b/tests/kola/networking/nmstate/state/test.sh
index 8a690b509f..65bcafb40d 100755
--- a/tests/kola/networking/nmstate/state/test.sh
+++ b/tests/kola/networking/nmstate/state/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: "platform-independent needs-internet"
-##   description: Verify that configure a DHCP linux bridge using 
+##   description: Verify that configure a DHCP linux bridge using
 ##     butane and nmstate service with state works.
 
 # See https://github.com/coreos/fedora-coreos-tracker/issues/1175
diff --git a/tests/kola/networking/no-persist-ip b/tests/kola/networking/no-persist-ip
index 29acd21c44..96822274d4 100755
--- a/tests/kola/networking/no-persist-ip
+++ b/tests/kola/networking/no-persist-ip
@@ -9,11 +9,11 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none net.ifnames=0 coreos.no_persist_ip"
-##   description: Verify that the coreos.no_persist_ip kernel argument will 
-##     prevent propagating kernel argument based networking configuration 
-##     into the real root. 
+##   description: Verify that the coreos.no_persist_ip kernel argument will
+##     prevent propagating kernel argument based networking configuration
+##     into the real root.
 
-# It does this by providing karg static networking config for eth1 and 
+# It does this by providing karg static networking config for eth1 and
 # then verifying that DHCP is used in the real root.
 
 set -xeuo pipefail
diff --git a/tests/kola/networking/prefer-ignition-networking/test.sh b/tests/kola/networking/prefer-ignition-networking/test.sh
index d4a62b5261..025fbd1d37 100755
--- a/tests/kola/networking/prefer-ignition-networking/test.sh
+++ b/tests/kola/networking/prefer-ignition-networking/test.sh
@@ -9,7 +9,7 @@
 ##   # different firmwares (BIOS vs UEFI) the NIC names are different.
 ##   # See https://github.com/coreos/fedora-coreos-tracker/issues/1060
 ##   appendKernelArgs: "ip=10.10.10.10::10.10.10.1:255.255.255.0:myhostname:eth1:none:8.8.8.8 net.ifnames=0"
-##   description: Verify that networking configuration is propagated 
+##   description: Verify that networking configuration is propagated
 ##     via Ignition by default.
 
 # Setup configuration for a single NIC with two different ways:
diff --git a/tests/kola/networking/resolv/systemd-resolved b/tests/kola/networking/resolv/systemd-resolved
index c229f9d220..36de025c2e 100755
--- a/tests/kola/networking/resolv/systemd-resolved
+++ b/tests/kola/networking/resolv/systemd-resolved
@@ -4,7 +4,7 @@
 ##  # RHCOS
 ##   distros:  fcos
 ##   exclusive: false
-##   description: Verify systemd-resolved and the stub listener 
+##   description: Verify systemd-resolved and the stub listener
 ##     should be enabled by default.
 
 set -xeuo pipefail
diff --git a/tests/kola/platforms/gcp/nvme-symlink b/tests/kola/platforms/gcp/nvme-symlink
index ec2439f1a9..652f477b3f 100755
--- a/tests/kola/platforms/gcp/nvme-symlink
+++ b/tests/kola/platforms/gcp/nvme-symlink
@@ -13,7 +13,7 @@
 # or `--tag confidential` is passed to `kola run`, also requires
 # `--gcp-machinetype n2d-standard-2 --gcp-confidential-vm`
 #
-# It will create confidential instance on GCP with 1 nvme persistent disk 
+# It will create confidential instance on GCP with 1 nvme persistent disk
 # and 1 local ssd disk, then check the new udev rules make effect.
 
 set -xeuo pipefail
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index c6fa61cf0b..8ad98f8cad 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -8,7 +8,7 @@
 ##   # This test reaches out to the internet and it could take more
 ##   # time to pull down the container.
 ##   timeoutMin: 3
-##   description: Verify that DNS in rootless podman containers can 
+##   description: Verify that DNS in rootless podman containers can
 ##     resolve external domains.
 
 # See https://github.com/coreos/fedora-coreos-tracker/issues/923
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 9969a3c9b3..673e8ec2e3 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   platforms: qemu
-##   description: Verify default system configuration are both on first and 
+##   description: Verify default system configuration are both on first and
 ##     subsequent boots.
 
 set -xeuo pipefail
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
index db1bb6b7a1..5f88d60482 100755
--- a/tests/kola/root-reprovision/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -9,7 +9,7 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
-##   description: Verify the root reprovision with XFS 
+##   description: Verify the root reprovision with XFS
 ##     on large disk triggers autosaved.
 
 set -xeuo pipefail
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index 7c394e9882..a3cd80e497 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -11,7 +11,7 @@
 ##   timeoutMin: 15
 ##   # Trigger automatic XFS reprovisioning
 ##   minDisk: 100
-##   description: Verify the root reprovision with XFS and TPM 
+##   description: Verify the root reprovision with XFS and TPM
 ##     on large disk triggers autosaved.
 
 set -xeuo pipefail
diff --git a/tests/kola/root-reprovision/luks/test.sh b/tests/kola/root-reprovision/luks/test.sh
index c13fc76706..60b1585e02 100755
--- a/tests/kola/root-reprovision/luks/test.sh
+++ b/tests/kola/root-reprovision/luks/test.sh
@@ -9,7 +9,7 @@
 ##   # This test includes a lot of disk I/O and needs a higher
 ##   # timeout value than the default.
 ##   timeoutMin: 15
-##   description: Verify the root reprovision with XFS and TPM 
+##   description: Verify the root reprovision with XFS and TPM
 ##     does not trigger autosaved.
 
 set -xeuo pipefail
diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index cb1ea71315..0b51d570cc 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -10,7 +10,7 @@
 ##   distros: fcos
 ##   # Needs internet access as we fetch files from koji
 ##   tags: "needs-internet platform-independent"
-##   description: Verify that build of a container image with a new kernel 
+##   description: Verify that build of a container image with a new kernel
 ##     and reboot into it succeeds.
 
 #
diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
index 567363405c..54191e07b7 100755
--- a/tests/kola/secex/ensure/test.sh
+++ b/tests/kola/secex/ensure/test.sh
@@ -5,7 +5,7 @@
 ##   requiredTag: secex
 ##   timeoutMin: 3
 ##   description: Verify the s390x Secure Execution QEMU image works. It also
-##     implicitly tests Ignition config decryption. 
+##     implicitly tests Ignition config decryption.
 
 # We don't run it by default because it requires running with `--qemu-secex`.
 
diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
index 1624f268c6..c5dcb18adc 100755
--- a/tests/kola/secex/reboot/test.sh
+++ b/tests/kola/secex/reboot/test.sh
@@ -7,7 +7,7 @@
 ##   description: Verify the qemu-secex image reboots with SE enabled. It also
 ##     implicitly tests Ignition config decryption.
 
-# We don't run it by default because it requires running with 
+# We don't run it by default because it requires running with
 # `--qemu-secex --qemu-secex-hostkey HKD-<serial>.crt`.
 
 set -xeuo pipefail
diff --git a/tests/kola/selinux/enforcing b/tests/kola/selinux/enforcing
index 8cf1294f7c..2c163e3d50 100755
--- a/tests/kola/selinux/enforcing
+++ b/tests/kola/selinux/enforcing
@@ -41,14 +41,14 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
     ;;
   rebooted)
     # check SELinux is in permissive mode
-    enforce=$(getenforce)  
+    enforce=$(getenforce)
     if [ "${enforce}" != "Permissive" ]; then
       fatal "Error: Expected SELinux Permissive, found ${enforce}"
     fi
     ok "SELinux is Permissive"
     ok "Second boot"
     ;;
-  *) 
+  *)
     fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}"
     ;;
 esac
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 1c667eba49..8205aae166 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -5,7 +5,7 @@
 ##   exclusive: false
 ##   # This test pulls a container image from the network.
 ##   tags: "needs-internet platform-independent"
-##   description: Verify that tmpfs mounts inside a container 
+##   description: Verify that tmpfs mounts inside a container
 ##     have the `container_file_t` label.
 
 # See https://github.com/coreos/fedora-coreos-tracker/issues/1366
diff --git a/tests/kola/selinux/stub-resolve-context b/tests/kola/selinux/stub-resolve-context
index 102c42ad1d..9708af2c09 100755
--- a/tests/kola/selinux/stub-resolve-context
+++ b/tests/kola/selinux/stub-resolve-context
@@ -4,7 +4,7 @@
 ##   # RHCOS
 ##   distros:  fcos
 ##   exclusive: false
-##   description: Verify that the stub-resolv.conf file has the correct 
+##   description: Verify that the stub-resolv.conf file has the correct
 ##     selinux context.
 
 # See
diff --git a/tests/kola/selinux/usrlocal-context b/tests/kola/selinux/usrlocal-context
index 4ce67b1de2..2e7a61499f 100755
--- a/tests/kola/selinux/usrlocal-context
+++ b/tests/kola/selinux/usrlocal-context
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify /usr/sbin and /var/usrlocal/sbin have 
+##   description: Verify /usr/sbin and /var/usrlocal/sbin have
 ##     the same SELinux security context.
 
 set -xeuo pipefail
diff --git a/tests/kola/ssh/custom-host-key-permissions/test.sh b/tests/kola/ssh/custom-host-key-permissions/test.sh
index 38c7d9f7bf..a1abfc5f9c 100755
--- a/tests/kola/ssh/custom-host-key-permissions/test.sh
+++ b/tests/kola/ssh/custom-host-key-permissions/test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   tags: platform-independent
-##   description: Verify that sshd still works with a custom 
+##   description: Verify that sshd still works with a custom
 ##     host key with mode 640 and group ssh_keys.
 
 # See
diff --git a/tests/kola/swap/zram-generator/test.sh b/tests/kola/swap/zram-generator/test.sh
index ee34262daa..e2ad3ea6ac 100755
--- a/tests/kola/swap/zram-generator/test.sh
+++ b/tests/kola/swap/zram-generator/test.sh
@@ -4,7 +4,7 @@
 ##   distros: fcos
 ##   # This test conflicts with swap/zram-default so we cannot set this to non-exclusive
 ##   exclusive: true
-##   description: Verify that swap on zram devices can be set up using the 
+##   description: Verify that swap on zram devices can be set up using the
 ##     zram-generator as defined.
 
 # See docs at https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-configure-swaponzram/
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 73977379fb..1221b50fe6 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -8,7 +8,7 @@
 ##   distros: fcos
 ##   # Toolbox container is currently available only for x86_64 and aarch64 in Fedora
 ##   architectures: x86_64 aarch64
-##   description: Make sure that basic toolbox functionality works (creating, 
+##   description: Make sure that basic toolbox functionality works (creating,
 ##     running commands, and removing).
 
 # Important note: Commands are run indirectly via calls to `machinectl shell`
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index dcd565a800..afb834a5e3 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -3,7 +3,7 @@
 ##   # additionalDisks is only supported on QEMU
 ##   platforms: qemu
 ##   additionalDisks: ["5G:mpath"]
-##   description: Verify udev rules /dev/disk/by-id/scsi-* symlinks exist 
+##   description: Verify udev rules /dev/disk/by-id/scsi-* symlinks exist
 ##     in initramfs.
 
 # See https://bugzilla.redhat.com/show_bug.cgi?id=1990506

From 8fc0171fb91b12481ff22952a15accfb2bec8782 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 12:06:31 +0200
Subject: [PATCH 1786/2157] overlay.d/usr/libexec/coreos-check-modularity:
 Remove whitespace at EOL

---
 .../17fedora-modularity/usr/libexec/coreos-check-modularity     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity b/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
index fc862d244c..4855059cd4 100755
--- a/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
+++ b/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
@@ -19,7 +19,7 @@ ${warn}
 ############################################################################
 WARNING: This system has layered modularity RPMs. In Fedora 39 modularity
 has been retired. The system will most likely stop updating successfully
-when Fedora CoreOS transitions to Fedora 39. See this tracker for more info: 
+when Fedora CoreOS transitions to Fedora 39. See this tracker for more info:
 https://github.com/coreos/fedora-coreos-tracker/issues/1513
 
 To disable this warning, use:

From d9536858febb675f79cb415ccbb8c07dbae6609a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 12:07:03 +0200
Subject: [PATCH 1787/2157] ci: Add action to check for whitespace at EOL

While usually harmless, this can create issue in some edge cases and
creates noise when looking at the code in editors that highlight
unneeded whitespace.
---
 .github/workflows/find-whitespace.yml | 22 ++++++++++++++++++++++
 ci/find-whitespace                    | 19 +++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 .github/workflows/find-whitespace.yml
 create mode 100755 ci/find-whitespace

diff --git a/.github/workflows/find-whitespace.yml b/.github/workflows/find-whitespace.yml
new file mode 100644
index 0000000000..a8b5cf84d0
--- /dev/null
+++ b/.github/workflows/find-whitespace.yml
@@ -0,0 +1,22 @@
+name: Find whitespace
+
+on:
+  pull_request:
+    branches: [testing-devel]
+
+permissions:
+  contents: read
+
+jobs:
+  find-whitespace:
+    name: Find whitespace
+    runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v3
+      # https://github.com/actions/checkout/issues/760
+      - name: Mark git checkout as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      - name: Look for whitespace at the end of line
+        run: ci/find-whitespace
diff --git a/ci/find-whitespace b/ci/find-whitespace
new file mode 100755
index 0000000000..05817a5a08
--- /dev/null
+++ b/ci/find-whitespace
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -euo pipefail
+
+main() {
+    local files_with_whitespace
+    files_with_whitespace="$(find manifests overlay.d tests -type f -exec grep -El " +$" {} \;)"
+
+    if [[ -n "${files_with_whitespace}" ]]; then
+        echo "[+] Found files with whitespace at the end of line"
+        echo "${files_with_whitespace}"
+        exit 1
+    fi
+
+    echo "[+] No files with whitespace at the end of line"
+    exit 0
+}
+
+main "${@}"

From 46f2f64d6d14b09433fb0e8e29aa6e1b5103780d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 25 Aug 2023 22:29:12 +0000
Subject: [PATCH 1788/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/707/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 293b60f686..b701cfe147 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.3-2.fc38.aarch64"
+      "evra": "1.9.4-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230818.g0af928e-1.fc38.aarch64"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230818.g0af928e-1.fc38.noarch"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1138,7 +1138,7 @@
       "evra": "2.3.3-3.fc38.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-12.fc38.aarch64"
+      "evra": "1.2.1-1.fc38.aarch64"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-22T00:00:00Z",
+    "generated": "2023-08-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-19T22:38:15Z"
+        "generated": "2023-08-22T03:22:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-22T01:12:33Z"
+        "generated": "2023-08-25T01:20:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4400972538..1ed96f32c6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.3-2.fc38.ppc64le"
+      "evra": "1.9.4-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -994,10 +994,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230818.g0af928e-1.fc38.ppc64le"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230818.g0af928e-1.fc38.noarch"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1141,7 +1141,7 @@
       "evra": "2.3.3-3.fc38.ppc64le"
     },
     "slirp4netns": {
-      "evra": "1.2.0-12.fc38.ppc64le"
+      "evra": "1.2.1-1.fc38.ppc64le"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-22T00:00:00Z",
+    "generated": "2023-08-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-19T22:38:28Z"
+        "generated": "2023-08-22T03:22:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-22T01:12:40Z"
+        "generated": "2023-08-25T01:20:50Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1372ee6adc..f259e741c7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -925,10 +925,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230818.g0af928e-1.fc38.s390x"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230818.g0af928e-1.fc38.noarch"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -1063,7 +1063,7 @@
       "evra": "2.3.3-3.fc38.s390x"
     },
     "slirp4netns": {
-      "evra": "1.2.0-12.fc38.s390x"
+      "evra": "1.2.1-1.fc38.s390x"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-22T00:00:00Z",
+    "generated": "2023-08-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-19T22:37:25Z"
+        "generated": "2023-08-22T03:22:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-22T01:12:48Z"
+        "generated": "2023-08-25T01:20:58Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index aa587cd548..ece6572978 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.3-2.fc38.x86_64"
+      "evra": "1.9.4-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -1003,10 +1003,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230818.g0af928e-1.fc38.x86_64"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230818.g0af928e-1.fc38.noarch"
+      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1141,7 +1141,7 @@
       "evra": "2.3.3-3.fc38.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.2.0-12.fc38.x86_64"
+      "evra": "1.2.1-1.fc38.x86_64"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-22T00:00:00Z",
+    "generated": "2023-08-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-19T22:38:23Z"
+        "generated": "2023-08-22T03:23:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-22T01:12:55Z"
+        "generated": "2023-08-25T01:21:05Z"
       }
     }
   }

From c58bf428fa2116c59e1f4f253cf7e968ebba5000 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 26 Aug 2023 22:29:06 +0000
Subject: [PATCH 1789/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/708/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b701cfe147..4fe2c4b58b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-3.fc38.aarch64"
+      "evra": "0.17.0-5.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-3.fc38.aarch64"
+      "evra": "0.17.0-5.fc38.aarch64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.aarch64"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.6-1.fc38.aarch64"
+      "evra": "1.8.7-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.11-200.fc38.aarch64"
+      "evra": "6.4.12-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.11-200.fc38.aarch64"
+      "evra": "6.4.12-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.11-200.fc38.aarch64"
+      "evra": "6.4.12-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.11-200.fc38.aarch64"
+      "evra": "6.4.12-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-25T00:00:00Z",
+    "generated": "2023-08-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-22T03:22:37Z"
+        "generated": "2023-08-25T22:32:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-25T01:20:43Z"
+        "generated": "2023-08-26T01:55:29Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1ed96f32c6..0c58a7c629 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-3.fc38.ppc64le"
+      "evra": "0.17.0-5.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-3.fc38.ppc64le"
+      "evra": "0.17.0-5.fc38.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.ppc64le"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.6-1.fc38.ppc64le"
+      "evra": "1.8.7-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.11-200.fc38.ppc64le"
+      "evra": "6.4.12-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.11-200.fc38.ppc64le"
+      "evra": "6.4.12-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.11-200.fc38.ppc64le"
+      "evra": "6.4.12-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.11-200.fc38.ppc64le"
+      "evra": "6.4.12-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-25T00:00:00Z",
+    "generated": "2023-08-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-22T03:22:07Z"
+        "generated": "2023-08-25T22:31:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-25T01:20:50Z"
+        "generated": "2023-08-26T01:55:36Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f259e741c7..5d99f873d6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -154,10 +154,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-3.fc38.s390x"
+      "evra": "0.17.0-5.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-3.fc38.s390x"
+      "evra": "0.17.0-5.fc38.s390x"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.s390x"
@@ -178,7 +178,7 @@
       "evra": "3.17.1-5.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.6-1.fc38.s390x"
+      "evra": "1.8.7-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -460,16 +460,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.11-200.fc38.s390x"
+      "evra": "6.4.12-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.11-200.fc38.s390x"
+      "evra": "6.4.12-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.11-200.fc38.s390x"
+      "evra": "6.4.12-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.11-200.fc38.s390x"
+      "evra": "6.4.12-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-25T00:00:00Z",
+    "generated": "2023-08-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-22T03:22:29Z"
+        "generated": "2023-08-25T22:31:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-25T01:20:58Z"
+        "generated": "2023-08-26T01:55:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ece6572978..ff255677d6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-3.fc38.x86_64"
+      "evra": "0.17.0-5.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-3.fc38.x86_64"
+      "evra": "0.17.0-5.fc38.x86_64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.x86_64"
@@ -181,7 +181,7 @@
       "evra": "3.17.1-5.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.6-1.fc38.x86_64"
+      "evra": "1.8.7-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.11-200.fc38.x86_64"
+      "evra": "6.4.12-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.11-200.fc38.x86_64"
+      "evra": "6.4.12-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.11-200.fc38.x86_64"
+      "evra": "6.4.12-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.11-200.fc38.x86_64"
+      "evra": "6.4.12-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-25T00:00:00Z",
+    "generated": "2023-08-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-22T03:23:51Z"
+        "generated": "2023-08-25T22:32:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-25T01:21:05Z"
+        "generated": "2023-08-26T01:55:51Z"
       }
     }
   }

From ca1ea9c70c3e453c91695d3b608dd9a3d3cad354 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 28 Aug 2023 11:41:19 -0400
Subject: [PATCH 1790/2157] denylist: snooze `coreos.ignition.ssh.key` on
 kola-azure

This test is failing for all streams on kola-azure.
Snooze the test, with `warn: true`, for a week while we
investigate https://github.com/coreos/fedora-coreos-tracker/issues/1553
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 06378b67f7..362e483df4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -83,3 +83,9 @@
     - rawhide
     - branched
     - next-devel
+- pattern: coreos.ignition.ssh.key
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
+  snooze: 2023-09-04
+  warn: true
+  platforms:
+    - azure

From 69a38fd2c09e3ededddb289db3e64ba7b4b47482 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Aug 2023 16:27:57 -0400
Subject: [PATCH 1791/2157] tests/kola: delete trailing whitespace in root-bash
 test

---
 tests/kola/files/root-bash | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/files/root-bash b/tests/kola/files/root-bash
index ab258349bc..94caff2e6f 100755
--- a/tests/kola/files/root-bash
+++ b/tests/kola/files/root-bash
@@ -9,7 +9,7 @@ set -xeuo pipefail
 . $KOLA_EXT_DATA/commonlib.sh
 
 for bashfile in .bashrc .bash_profile .bash_logout
-do 
+do
     if ! test -f "/var/roothome/${bashfile}"; then
         fatal "Error: could not find /var/roothome/${bashfile}"
     fi

From 9ffeb955fd2a24601489968349c7618c7cc47c00 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Aug 2023 16:25:47 -0400
Subject: [PATCH 1792/2157] overlay.d: remove trailing whitespace in
 ignition-ostree-populate-var.sh

---
 .../modules.d/40ignition-ostree/ignition-ostree-populate-var.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
index 6f4e151c92..e630b8753d 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-populate-var.sh
@@ -33,7 +33,7 @@ for varsubdir in lib log home roothome opt srv usrlocal mnt media; do
         mkdir -p /sysroot/var/${varsubdir}
     else
         systemd-tmpfiles --create --boot --root=/sysroot --prefix="/var/${varsubdir}"
-    fi  
+    fi
 
     coreos-relabel "/var/${varsubdir}"
 done

From 9b8ca327d714764ac6a0ab6afeec3449c76bb587 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 28 Aug 2023 14:27:59 -0400
Subject: [PATCH 1793/2157] buildroot: Add clippy

For the same reason we have `rustfmt`; I plan to rework the
ostree-rs-ext build flow to use this there.
---
 ci/buildroot/buildroot-reqs.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index c52b1c49d9..bf3db9c8bd 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -25,8 +25,9 @@ util-linux
 which
 xz
 
-# For rust projects like rpm-ostree
+# For rust projects
 rustfmt
+clippy
 
 # For unit tests at least.
 ostree

From 4faba4f21ee3867e58c54ffe7aef4602613c0f64 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 24 Aug 2023 13:09:05 -0400
Subject: [PATCH 1794/2157] transposefs: Only autosave-xfs for much larger
 filesystems

The change in https://github.com/coreos/fedora-coreos-config/pull/2320
has been very problematic for OpenShift because our default node
configuration is *always* over the threshold, and that causes
significant latency on instance provisioning.

Experimentally bumping to 400 allocation groups, which is about 700GiB.
This is comfortably about the default OpenShift node root disk sizes,
and returns us to the prior status quo.

While we're here, rework the logging a bit so that we *always*
log the `agcount` for debugging purposes.

Also:

- Only log to stdout for normal conditions
- Include the name of the systemd unit in the test description
  so we can cross-reference
- tests: Hoist the expected agcount of 4 to a common variable
---
 .../ignition-ostree-transposefs.sh            | 21 ++++++++++++-------
 .../root-reprovision/autosave-xfs/test.sh     | 12 +++++++----
 .../luks/autosave-xfs/test.sh                 |  8 ++++---
 3 files changed, 27 insertions(+), 14 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 6f89c4007e..62fa977043 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -139,17 +139,24 @@ should_autosave_rootfs() {
         return
     fi
     local agcount
+    # This runs xfs_info on the unmounted filesystem, because mounting an
+    # XFS filesystem that has grown an excessive number of allocation groups
+    # can be very slow.
     eval $(xfs_info "${root_part}" | grep -o 'agcount=[0-9]*')
-    # Semi-arbitrarily chosen: this is roughly ~64G currently (based on initial
-    # ag sizing at build time) which seems like a good rootfs size at which to
-    # discriminate between "throwaway/short-lived systems" and "long-running
-    # workload systems". It's not like XFS performance is way worse at 128.
-    if [ "$agcount" -lt 128 ]; then
-        echo "Filesystem agcount is $agcount; skipping" >&2
+    # This is roughly ~700GiB currently (based on initial ag sizing at build time)
+    # which ensures we grow only on "large" root filesystems.
+    # Specifically for e.g. OpenShift, this ensures we don't reprovision on default
+    # worker node root filesystems.
+    local threshold
+    threshold=400
+    if [ "$agcount" -lt "${threshold}" ]; then
+        echo "autosave-xfs: ${root_part} agcount=$agcount is lower than threshold=${threshold}" >&2
         echo 0
         return
+    else
+        echo "autosave-xfs: ${root_part} agcount=$agcount meets threshold=${threshold}" >&2
+        echo 1
     fi
-    echo 1
 }
 
 ensure_zram_dev() {
diff --git a/tests/kola/root-reprovision/autosave-xfs/test.sh b/tests/kola/root-reprovision/autosave-xfs/test.sh
index 5f88d60482..4ac5c12afc 100755
--- a/tests/kola/root-reprovision/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/autosave-xfs/test.sh
@@ -2,8 +2,8 @@
 ## kola:
 ##   # This test reprovisions the rootfs automatically.
 ##   tags: "platform-independent reprovision"
-##   # Trigger automatic XFS reprovisioning
-##   minDisk: 100
+##   # Trigger automatic XFS reprovisioning (heuristic)
+##   minDisk: 1000
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
@@ -11,6 +11,7 @@
 ##   timeoutMin: 15
 ##   description: Verify the root reprovision with XFS
 ##     on large disk triggers autosaved.
+##     This test is meant to cover ignition-ostree-transposefs-autosave-xfs.service
 
 set -xeuo pipefail
 
@@ -20,10 +21,13 @@ set -xeuo pipefail
 if [ ! -f /run/ignition-ostree-autosaved-xfs.stamp ]; then
     fatal "expected autosaved XFS"
 fi
+# Verify we printed something about the agcount
+journalctl -u ignition-ostree-transposefs-autosave-xfs.service --grep=agcount
 ok "autosaved XFS on large disk"
 
 eval $(xfs_info / | grep -o 'agcount=[0-9]*')
-if [ "$agcount" -gt 4 ]; then
-    fatal "expected agcount of at most 4, got ${agcount}"
+expected=4
+if [ "$agcount" -gt "$expected" ]; then
+    fatal "expected agcount of at most ${expected}, got ${agcount}"
 fi
 ok "low agcount on large disk"
diff --git a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
index a3cd80e497..e238a4acd9 100755
--- a/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
+++ b/tests/kola/root-reprovision/luks/autosave-xfs/test.sh
@@ -10,9 +10,10 @@
 ##   # timeout value than the default.
 ##   timeoutMin: 15
 ##   # Trigger automatic XFS reprovisioning
-##   minDisk: 100
+##   minDisk: 1000
 ##   description: Verify the root reprovision with XFS and TPM
 ##     on large disk triggers autosaved.
+##     This test is meant to cover ignition-ostree-transposefs-autosave-xfs.service
 
 set -xeuo pipefail
 
@@ -27,8 +28,9 @@ if [ -z "${AUTOPKGTEST_REBOOT_MARK:-}" ]; then
     ok "autosaved XFS on large disk"
 
     eval $(xfs_info / | grep -o 'agcount=[0-9]*')
-    if [ "$agcount" -gt 4 ]; then
-        fatal "expected agcount of at most 4, got ${agcount}"
+    expected=4
+    if [ "$agcount" -gt "${expected}" ]; then
+        fatal "expected agcount of at most ${expected}, got ${agcount}"
     fi
     ok "low agcount on large disk"
 fi

From 384d9d2aa4040d134d8900dd67ffabf7fe30a43f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 29 Aug 2023 22:30:27 +0000
Subject: [PATCH 1795/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/711/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   |  8 ++++----
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4fe2c4b58b..3be5b9eace 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -406,16 +406,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-95.fc38.noarch"
+      "evra": "1:2.06-97.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-95.fc38.aarch64"
+      "evra": "1:2.06-97.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-95.fc38.aarch64"
+      "evra": "1:2.06-97.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-95.fc38.aarch64"
+      "evra": "1:2.06-97.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -1057,7 +1057,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.4-2.fc38.aarch64"
+      "evra": "2:7.2.5-1.fc38.aarch64"
     },
     "readline": {
       "evra": "8.2-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-26T00:00:00Z",
+    "generated": "2023-08-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-25T22:32:55Z"
+        "generated": "2023-08-26T22:33:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-26T01:55:29Z"
+        "generated": "2023-08-29T01:26:39Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0c58a7c629..4cec265137 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -394,19 +394,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-95.fc38.noarch"
+      "evra": "1:2.06-97.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-95.fc38.ppc64le"
+      "evra": "1:2.06-97.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-95.fc38.noarch"
+      "evra": "1:2.06-97.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-95.fc38.ppc64le"
+      "evra": "1:2.06-97.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-95.fc38.ppc64le"
+      "evra": "1:2.06-97.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -1060,7 +1060,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.4-2.fc38.ppc64le"
+      "evra": "2:7.2.5-1.fc38.ppc64le"
     },
     "readline": {
       "evra": "8.2-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-26T00:00:00Z",
+    "generated": "2023-08-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-25T22:31:30Z"
+        "generated": "2023-08-26T22:33:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-26T01:55:36Z"
+        "generated": "2023-08-29T01:26:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5d99f873d6..fc62b5f64a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -985,7 +985,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.4-2.fc38.s390x"
+      "evra": "2:7.2.5-1.fc38.s390x"
     },
     "readline": {
       "evra": "8.2-3.fc38.s390x"
@@ -1205,16 +1205,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-26T00:00:00Z",
+    "generated": "2023-08-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-25T22:31:20Z"
+        "generated": "2023-08-26T22:32:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-26T01:55:44Z"
+        "generated": "2023-08-29T01:26:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ff255677d6..9a1c91d0e3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,22 +406,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-95.fc38.noarch"
+      "evra": "1:2.06-97.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-95.fc38.x86_64"
+      "evra": "1:2.06-97.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-95.fc38.x86_64"
+      "evra": "1:2.06-97.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-95.fc38.noarch"
+      "evra": "1:2.06-97.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-95.fc38.x86_64"
+      "evra": "1:2.06-97.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-95.fc38.x86_64"
+      "evra": "1:2.06-97.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-26T00:00:00Z",
+    "generated": "2023-08-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-25T22:32:07Z"
+        "generated": "2023-08-26T22:33:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-26T01:55:51Z"
+        "generated": "2023-08-29T01:27:00Z"
       }
     }
   }

From 693f221ea15a3eda2495406eeb26a62e6964e92a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Aug 2023 11:55:05 -0400
Subject: [PATCH 1796/2157] overlay.d: add 30lvmdevices overlay

Populate an lvmdevices(8) file to limit LVM from autoactivating all
devices it sees in a system. By default systems will get a "blank"
configuration file with a comment in it explaining what it is used
for. There is also a one-time "populate" service that will run and
add any devices it sees into the devices file. This will serve to
import existing devices on upgrading systems or new systems with
pre-existing LVM devices attached. See the tracker issue [1] for more
information.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1517
---
 manifests/fedora-coreos-base.yaml             |  1 +
 .../etc/lvm/devices/system.devices            |  8 +++
 overlay.d/30lvmdevices/statoverride           |  2 +
 .../45-coreos-populate-lvmdevices.preset      |  1 +
 .../system/coreos-populate-lvmdevices.service | 25 +++++++
 .../usr/libexec/coreos-populate-lvmdevices    | 46 +++++++++++++
 overlay.d/README.md                           | 14 ++++
 tests/kola/disks/lvmdevices                   | 65 +++++++++++++++++++
 8 files changed, 162 insertions(+)
 create mode 100644 overlay.d/30lvmdevices/etc/lvm/devices/system.devices
 create mode 100644 overlay.d/30lvmdevices/statoverride
 create mode 100644 overlay.d/30lvmdevices/usr/lib/systemd/system-preset/45-coreos-populate-lvmdevices.preset
 create mode 100644 overlay.d/30lvmdevices/usr/lib/systemd/system/coreos-populate-lvmdevices.service
 create mode 100755 overlay.d/30lvmdevices/usr/libexec/coreos-populate-lvmdevices
 create mode 100755 tests/kola/disks/lvmdevices

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 4ad1554b5f..eec7561aef 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -16,6 +16,7 @@ ostree-layers:
   - overlay/09misc
   - overlay/20platform-chrony
   - overlay/25azure-udev-rules
+  - overlay/30lvmdevices
 
 # Be minimal
 recommends: false
diff --git a/overlay.d/30lvmdevices/etc/lvm/devices/system.devices b/overlay.d/30lvmdevices/etc/lvm/devices/system.devices
new file mode 100644
index 0000000000..94f55ea0d6
--- /dev/null
+++ b/overlay.d/30lvmdevices/etc/lvm/devices/system.devices
@@ -0,0 +1,8 @@
+# LVM uses devices listed in this file.
+#
+# This is an empty lvmdevices(8) file placed here by the CoreOS overlays.
+# The existence of the file prevents LVM from auto-activating any LVM devices
+# that aren't explicitly allowlisted by being added to this file. Any newly
+# added PV/VG devices that get created via pvcreate/vgreate will have an entry
+# added here automatically by the tools. For more information on this see
+# https://github.com/coreos/fedora-coreos-tracker/issues/1517
diff --git a/overlay.d/30lvmdevices/statoverride b/overlay.d/30lvmdevices/statoverride
new file mode 100644
index 0000000000..27a95affe2
--- /dev/null
+++ b/overlay.d/30lvmdevices/statoverride
@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/30lvmdevices/usr/lib/systemd/system-preset/45-coreos-populate-lvmdevices.preset b/overlay.d/30lvmdevices/usr/lib/systemd/system-preset/45-coreos-populate-lvmdevices.preset
new file mode 100644
index 0000000000..7a4fe5dfc8
--- /dev/null
+++ b/overlay.d/30lvmdevices/usr/lib/systemd/system-preset/45-coreos-populate-lvmdevices.preset
@@ -0,0 +1 @@
+enable coreos-populate-lvmdevices.service
diff --git a/overlay.d/30lvmdevices/usr/lib/systemd/system/coreos-populate-lvmdevices.service b/overlay.d/30lvmdevices/usr/lib/systemd/system/coreos-populate-lvmdevices.service
new file mode 100644
index 0000000000..8349d0253b
--- /dev/null
+++ b/overlay.d/30lvmdevices/usr/lib/systemd/system/coreos-populate-lvmdevices.service
@@ -0,0 +1,25 @@
+[Unit]
+Description=CoreOS Populate LVM Devices File
+Documentation=https://github.com/coreos/fedora-coreos-tracker/issues/1517
+# Only run this import once.
+ConditionPathExists=!/var/lib/coreos-populate-lvmdevices.stamp
+# Don't add default dependencies so we can run early enough to populate
+# the devices file before any LVM devices are used.
+DefaultDependencies=false
+# Since our ConditionPathExists file lives under /var/lib/ let's make
+# sure any filesystems/mounts that exist and are needed to access that
+# directory are set up.
+RequiresMountsFor=/var/lib
+# On OpenShift/Kubernetes we want to ensure we run before kubernetes
+# comes up where storage drivers may be initiated and present more LVM
+# devices to the system that we don't want to be considered.
+Before=kubelet.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/libexec/coreos-populate-lvmdevices
+ExecStartPost=touch /var/lib/coreos-populate-lvmdevices.stamp
+
+[Install]
+WantedBy=default.target
diff --git a/overlay.d/30lvmdevices/usr/libexec/coreos-populate-lvmdevices b/overlay.d/30lvmdevices/usr/libexec/coreos-populate-lvmdevices
new file mode 100755
index 0000000000..d479fcc51d
--- /dev/null
+++ b/overlay.d/30lvmdevices/usr/libexec/coreos-populate-lvmdevices
@@ -0,0 +1,46 @@
+#!/bin/bash
+set -euo pipefail
+
+# This script will detect any LVM devices and add them to the lvmdevices
+# file, which will force this host to only consider those devices in
+# the future. This script should be run once to do the population and
+# should not need to be run again. See
+# https://github.com/coreos/fedora-coreos-tracker/issues/1517
+
+LVMDEVICESFILENAME="system.devices"
+LVMDEVICESFILE="/etc/lvm/devices/${LVMDEVICESFILENAME}"
+
+# If the devices file doesn't exist that is a bit odd because we
+# shipped it in the same update this migration script runs but let's
+# just bail out. Someone could have deleted the lvmdevices file and
+# then later accidentally run the migration script again.
+if [ ! -f $LVMDEVICESFILE ]; then
+    echo "$LVMDEVICESFILE does not exist. Exiting."
+    exit 0
+fi
+
+# If the file exists and the file is different than what was shipped
+# then we exit early. In this case the system likely already had an
+# lvmdevices file defined already.
+if ! diff -u "/usr/${LVMDEVICESFILE}" "${LVMDEVICESFILE}"; then
+    echo "Detected modified $LVMDEVICESFILE file. Exiting."
+    exit 0
+fi
+
+# Detect all existing PVs using `pvs` with a blank devicesfile
+# setting, which will un-limit the search.
+PVS=$(pvs --devicesfile="" --noheadings -o pv_name)
+
+if [ -z "$PVS" ]; then
+    echo "No LVM devices detected. Exiting."
+    exit 0
+fi
+
+echo "Populating lvmdevices file with detected devices."
+for pv in $(pvs --devicesfile="" --noheadings -o pv_name); do
+    echo "Adding ${pv} to lvmdevices file $LVMDEVICESFILE"
+    lvmdevices --journal output --adddev "$pv" --devicesfile "$LVMDEVICESFILENAME"
+done
+
+echo "Activating lvmdevices after devices file population"
+pvscan --cache --activate ay
diff --git a/overlay.d/README.md b/overlay.d/README.md
index eba85e42fc..1fba2532d6 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -79,3 +79,17 @@ bits to include the rules in the initramfs too.
 [1] https://github.com/coreos/fedora-coreos-tracker/issues/1383
 [2] https://github.com/Azure/WALinuxAgent/pull/1622
 [3] https://src.fedoraproject.org/rpms/WALinuxAgent/pull-request/4
+
+30lvmdevices
+-------------------
+
+Populate an lvmdevices(8) file to limit LVM from autoactivating all
+devices it sees in a system. By default systems will get a "blank"
+configuration file with a comment in it explaining what it is used
+for. There is also a one-time "populate" service that will run and
+add any devices it sees into the devices file. This will serve to
+import existing devices on upgrading systems or new systems with
+pre-existing LVM devices attached. See the tracker issue [1] for more
+information.
+
+[1] https://github.com/coreos/fedora-coreos-tracker/issues/1517
diff --git a/tests/kola/disks/lvmdevices b/tests/kola/disks/lvmdevices
new file mode 100755
index 0000000000..b651affa87
--- /dev/null
+++ b/tests/kola/disks/lvmdevices
@@ -0,0 +1,65 @@
+#!/bin/bash
+## kola:
+##   description: Verify LVM devices file handling works as expected.
+##                This test is meant to cover coreos-populate-lvmdevices.service.
+##   # additionalDisks is only supported on qemu.
+##   platforms: qemu
+##   # A few extra disks to set up LVM on.
+##   additionalDisks: ["1G", "2G"]
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+LVMDEVICESFILENAME="system.devices"
+LVMDEVICESFILE="/etc/lvm/devices/${LVMDEVICESFILENAME}"
+
+# Check that coreos-populate-lvmdevices did run
+if [ ! -e /var/lib/coreos-populate-lvmdevices.stamp ]; then
+  fatal "coreos-populate-lvmdevices didn't run"
+fi
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+      # Verify the lvmdevices file by default matches what was shipped.
+      if ! diff -u "/usr/${LVMDEVICESFILE}" "${LVMDEVICESFILE}"; then
+          fatal "Detected modified $LVMDEVICESFILE file."
+      fi
+
+      # Set up LVM on the two disks and set up a vg/lv/fs/mount on one
+      # of them. Specify a blank devicesfile so the *create commands
+      # won't touch our devices file.
+      pvcreate --devicesfile="" /dev/vda /dev/vdb
+      vgcreate --devicesfile="" vg1 /dev/vda
+      lvcreate --devicesfile="" vg1 --name=lv1 -l 100%FREE
+      mkfs.ext4 /dev/vg1/lv1
+      echo "/dev/vg1/lv1 /srv/ ext4 defaults 0 2" >> /etc/fstab
+
+      # Remove the stamp file to force the "migration" to happen on
+      # next boot.
+      rm -f /var/lib/coreos-populate-lvmdevices.stamp
+
+      # reboot to simulate running migration for first time on a
+      # system with pre-existing LVM devices
+      /tmp/autopkgtest-reboot rebooted
+      ;;
+
+  rebooted)
+      # Check that the devices are in the devices file.
+      grep -q 'DEVNAME=/dev/vda' "$LVMDEVICESFILE" || fatal "Missing vda in devices file"
+      grep -q 'DEVNAME=/dev/vdb' "$LVMDEVICESFILE" || fatal "Missing vdb in devices file"
+
+      # Check that we can see the PVs
+      if [ "$(pvs --noheadings | wc -l)" != '2' ]; then
+        fatal "Incorrect number of LVM PVs detected"
+      fi
+
+      # Check that /srv/ is a mountpoint
+      if ! mountpoint /srv; then
+        fatal "/srv/ is not mounted, but it should be"
+      fi
+
+      ok "LVM Devices file populated correctly"
+      ;;
+  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From ae7b792c8727c9dcd76b7cc1981ee6e5ff352f62 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 25 Aug 2023 11:56:33 -0400
Subject: [PATCH 1797/2157] overlay.d/README: fix azure overlay title

It doesn't have a - between 25 and azure.
---
 overlay.d/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/README.md b/overlay.d/README.md
index 1fba2532d6..23b64bdd13 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -67,7 +67,7 @@ such as `azure`, `aws`, `gcp`. The chrony config for these NTP servers
 should override other chrony configuration (e.g. DHCP-provided)
 configuration.
 
-25-azure-udev-rules
+25azure-udev-rules
 -------------------
 
 Add udev rules for SRIOV networking on Azure. The udev rules are also

From d1b5711aa081baa89381c171b3c56e7ac8cd5da3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 23 Aug 2023 14:56:08 +0200
Subject: [PATCH 1798/2157] tests/logrotate-service: Make platform independent

This should pass on all platforms if it passes on one.
---
 tests/kola/files/logrotate-service | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/kola/files/logrotate-service b/tests/kola/files/logrotate-service
index e1af8c7d93..7f8273be8f 100755
--- a/tests/kola/files/logrotate-service
+++ b/tests/kola/files/logrotate-service
@@ -2,6 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify logrotate and logrotate.timer services are enabled.
+##   tags: "platform-independent"
 
 set -xeuo pipefail
 

From eea8dc06d6279efd6c805c39e9517ad32d4f2326 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 11:28:15 +0200
Subject: [PATCH 1799/2157] tests/kola/data/commonlib.sh: ShellCheck fixes

---
 tests/kola/data/commonlib.sh | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 006bbfdc98..79166f9977 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -1,3 +1,4 @@
+# shellcheck shell=bash
 # This is a common library created for the ok & fatal function and symlinks
 # added to the data/ in each directory
 
@@ -12,12 +13,13 @@ fatal() {
 
 get_ipv4_for_nic() {
     local nic_name=$1
-    local ip=$(ip -j addr show ${nic_name} | jq -r '.[0].addr_info | map(select(.family == "inet")) | .[0].local')
+    local ip
+    ip="$(ip -j addr show "${nic_name}" | jq -r '.[0].addr_info | map(select(.family == "inet")) | .[0].local')"
     if [ -z "$ip" ]; then
         echo "Error: can not get ip for ${nic_name}"
         exit 1
     fi
-    echo $ip
+    echo "$ip"
 }
 
 get_fcos_stream() {
@@ -65,7 +67,7 @@ is_scos() {
     [ "${ID}" == "scos" ] && [ "${VARIANT_ID}" == "coreos" ]
 }
 
-cmdline=( $(</proc/cmdline) )
+IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
     local name="$1" value=""
     for arg in "${cmdline[@]}"; do
@@ -79,8 +81,8 @@ cmdline_arg() {
 # wait for ~60s when in activating status
 is_service_active() {
     local service="$1"
-    for x in {0..60}; do
-        [ $(systemctl is-active "${service}") != "activating" ] && break
+    for _x in {0..60}; do
+        [ "$(systemctl is-active "${service}")" != "activating" ] && break
         sleep 1
     done
     # return actual result
@@ -95,22 +97,23 @@ vereq() {
 
 # Returns true iff $1 is less than $2
 verlt() {
-    vereq $1 $2 && return 1
-    local lowest="$(echo -e "$1\n$2" | sort -V | head -n 1)"
+    vereq "$1" "$2" && return 1
+    local lowest
+    lowest="$(echo -e "$1\n$2" | sort -V | head -n 1)"
     [ "$1" == "$lowest" ]
 }
 
 # Returns true iff $1 is less than or equal to $2
 verlte() {
-    vereq $1 $2 || verlt $1 $2
+    vereq "$1" "$2" || verlt "$1" "$2"
 }
 
 # Returns true iff $1 is greater than to $2
 vergt() {
-    ! verlte $1 $2
+    ! verlte "$1" "$2"
 }
 
 # Returns true iff $1 is greater than or equal to $2
 vergte() {
-    vereq $1 $2 || vergt $1 $2
+    vereq "$1" "$2" || vergt "$1" "$2"
 }

From c487b209762c0a0d7b8c805520bc8bd7e6cff006 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 24 Aug 2023 11:31:06 +0200
Subject: [PATCH 1800/2157] overlay.d/*: ShellCheck fix for /proc/cmdline
 reading

Fix ShellCheck warning:
```
In ./overlay.d/05core/usr/lib/coreos/generator-lib.sh line 11:
    local cmdline=( $(</proc/cmdline) )
                    ^---------------^ SC2207 (warning): Prefer mapfile or read -a to split command output (or quote to avoid splitting).
```
---
 overlay.d/05core/usr/lib/coreos/generator-lib.sh              | 4 ++--
 .../dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh    | 2 +-
 .../modules.d/35coreos-ignition/coreos-diskful-generator      | 2 +-
 overlay.d/05core/usr/libexec/coreos-ignition-delete-config    | 2 +-
 .../usr/libexec/coreos-platform-chrony-config                 | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/coreos/generator-lib.sh b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
index dd19ad813d..84547ce36b 100644
--- a/overlay.d/05core/usr/lib/coreos/generator-lib.sh
+++ b/overlay.d/05core/usr/lib/coreos/generator-lib.sh
@@ -8,7 +8,7 @@ UNIT_DIR="${1:-/tmp}"
 
 have_karg() {
     local arg="$1"
-    local cmdline=( $(</proc/cmdline) )
+    IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
     local i
     for i in "${cmdline[@]}"; do
         if [[ "$i" =~ "$arg=" ]]; then
@@ -20,7 +20,7 @@ have_karg() {
 
 karg() {
     local name="$1" value="${2:-}"
-    local cmdline=( $(</proc/cmdline) )
+    IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
     for arg in "${cmdline[@]}"; do
         if [[ "${arg%%=*}" == "${name}" ]]; then
             value="${arg#*=}"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
index ecd758a675..ec1ae40bc5 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-boot-edit.sh
@@ -3,7 +3,7 @@ set -euo pipefail
 
 # For a description of how this is used, see `coreos-boot-edit.service`.
 
-cmdline=( $(</proc/cmdline) )
+IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 karg() {
     local name="$1" value="${2:-}"
     for arg in "${cmdline[@]}"; do
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 8414013758..e7d1d688c3 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -14,7 +14,7 @@ exec 1>/dev/kmsg; exec 2>&1
 
 UNIT_DIR="${1:-/tmp}"
 
-cmdline=( $(</proc/cmdline) )
+IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
     local name="$1" value="$2"
     for arg in "${cmdline[@]}"; do
diff --git a/overlay.d/05core/usr/libexec/coreos-ignition-delete-config b/overlay.d/05core/usr/libexec/coreos-ignition-delete-config
index 59d4f0cf60..69d32b709e 100755
--- a/overlay.d/05core/usr/libexec/coreos-ignition-delete-config
+++ b/overlay.d/05core/usr/libexec/coreos-ignition-delete-config
@@ -2,7 +2,7 @@
 
 set -euo pipefail
 
-cmdline=( $(</proc/cmdline) )
+IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
     local name="$1" value
     for arg in "${cmdline[@]}"; do
diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index e25cbb528d..9d7076661c 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -23,7 +23,7 @@ if ! cmp {/usr,}/etc/sysconfig/chronyd >/dev/null; then
     exit 0
 fi
 
-cmdline=( $(</proc/cmdline) )
+IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
     local name="$1" value
     for arg in "${cmdline[@]}"; do

From 46f7228a663561ce60bb28d5047d68535998651e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 29 Aug 2023 23:13:46 -0400
Subject: [PATCH 1801/2157] tests/kola: don't run fwupd-refresh-timer test on
 !fcos

---
 tests/kola/files/fwupd-refresh-timer | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/kola/files/fwupd-refresh-timer b/tests/kola/files/fwupd-refresh-timer
index 8a1b933642..3624e539d8 100755
--- a/tests/kola/files/fwupd-refresh-timer
+++ b/tests/kola/files/fwupd-refresh-timer
@@ -3,6 +3,8 @@
 ##   exclusive: false
 ##   description: Verify fwupd-refresh.timer is enabled.
 ##   tags: "platform-independent"
+##   # This test only runs on FCOS as we only enable the timer there
+##   distros: fcos
 
 set -xeuo pipefail
 

From d4da764b6ee3bd06ba0153007a718be83a7221a4 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Mon, 28 Aug 2023 15:14:58 -0300
Subject: [PATCH 1802/2157] manifest: Add fwupd for all arches

 - Add fwupd package for all architecture, eliminating the exclusion for 's390x';
 - Now that we enabled/start 'fwupd' by default in #2562. We should have
   this package to all arhces.

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 manifests/bootable-rpm-ostree.yaml | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index a1f83f191b..fdb9c8b078 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -13,16 +13,14 @@ packages:
  - linux-firmware
  # rpm-ostree
  - rpm-ostree nss-altfiles
+ # firmware updates
+ - fwupd
 
 # bootloader
 packages-aarch64:
   - grub2-efi-aa64 efibootmgr shim
-  # firmware updates
-  - fwupd
 packages-ppc64le:
   - grub2 ostree-grub2
-  # firmware updates
-  - fwupd
 packages-s390x:
   # On Fedora, this is provided by s390utils-core. on RHEL, this is for now
   # provided by s390utils-base, but soon will be -core too.
@@ -32,8 +30,6 @@ packages-s390x:
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl
-  # firmware updates
-  - fwupd
 
 exclude-packages:
   # Exclude kernel-debug-core to make sure that it doesn't somehow get

From bde85ee2bebd13ab606993b6f305fe457347b69e Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 30 Aug 2023 14:26:21 -0400
Subject: [PATCH 1803/2157] denylist: extend snooze for
 `ext.config.networking.*` tests

These tests are still failing. Extend the snooze while we wait for a fix
on https://github.com/coreos/fedora-coreos-tracker/issues/1542.
---
 kola-denylist.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 362e483df4..855383cebb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,7 +21,7 @@
     - aarch64
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -29,7 +29,7 @@
     - next-devel
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -37,7 +37,7 @@
     - next-devel
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -45,7 +45,7 @@
     - next-devel
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -53,7 +53,7 @@
     - next-devel
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -61,7 +61,7 @@
     - next-devel
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -69,7 +69,7 @@
     - next-devel
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide
@@ -77,7 +77,7 @@
     - next-devel
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-08-28
+  snooze: 2023-09-13
   warn: true
   streams:
     - rawhide

From 0c63b1c3db769718f7e087bd23f9c91ec144c909 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 31 Aug 2023 00:05:34 +0000
Subject: [PATCH 1804/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/713/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json |  6 +++---
 manifest-lock.ppc64le.json |  6 +++---
 manifest-lock.s390x.json   | 33 ++++++++++++++++++++++++++++++---
 manifest-lock.x86_64.json  |  6 +++---
 4 files changed, 39 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3be5b9eace..6dbd7f4a1a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-29T00:00:00Z",
+    "generated": "2023-08-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-26T22:33:11Z"
+        "generated": "2023-08-29T22:35:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-29T01:26:39Z"
+        "generated": "2023-08-30T01:23:56Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4cec265137..a92c0b225e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-29T00:00:00Z",
+    "generated": "2023-08-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-26T22:33:06Z"
+        "generated": "2023-08-29T22:33:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-29T01:26:46Z"
+        "generated": "2023-08-30T01:24:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index fc62b5f64a..a73a07a6f3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -336,6 +336,9 @@
     "fuse3-libs": {
       "evra": "3.14.1-1.fc38.s390x"
     },
+    "fwupd": {
+      "evra": "1.9.4-1.fc38.s390x"
+    },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
     },
@@ -510,6 +513,9 @@
     "libassuan": {
       "evra": "2.5.6-1.fc38.s390x"
     },
+    "libatomic": {
+      "evra": "13.2.1-1.fc38.s390x"
+    },
     "libattr": {
       "evra": "2.5.1-6.fc38.s390x"
     },
@@ -570,6 +576,9 @@
     "libfido2": {
       "evra": "1.12.0-3.fc38.s390x"
     },
+    "libgcab1": {
+      "evra": "1.5-2.fc38.s390x"
+    },
     "libgcc": {
       "evra": "13.2.1-1.fc38.s390x"
     },
@@ -579,6 +588,12 @@
     "libgpg-error": {
       "evra": "1.47-1.fc38.s390x"
     },
+    "libgudev": {
+      "evra": "237-4.fc38.s390x"
+    },
+    "libgusb": {
+      "evra": "0.4.5-1.fc38.s390x"
+    },
     "libibverbs": {
       "evra": "44.0-3.fc38.s390x"
     },
@@ -594,6 +609,9 @@
     "libipa_hbac": {
       "evra": "2.9.1-1.fc38.s390x"
     },
+    "libjcat": {
+      "evra": "0.1.13-1.fc38.s390x"
+    },
     "libjose": {
       "evra": "11-7.fc38.s390x"
     },
@@ -759,6 +777,9 @@
     "libunistring1.0": {
       "evra": "1.0-1.fc38.s390x"
     },
+    "libusb1": {
+      "evra": "1.0.26-2.fc38.s390x"
+    },
     "libuser": {
       "evra": "0.64-2.fc38.s390x"
     },
@@ -783,6 +804,9 @@
     "libxml2": {
       "evra": "2.10.4-1.fc38.s390x"
     },
+    "libxmlb": {
+      "evra": "0.3.12-1.fc38.s390x"
+    },
     "libyaml": {
       "evra": "0.2.5-9.fc38.s390x"
     },
@@ -1056,6 +1080,9 @@
     "shadow-utils-subid": {
       "evra": "2:4.13-6.fc38.s390x"
     },
+    "shared-mime-info": {
+      "evra": "2.2-3.fc38.s390x"
+    },
     "skopeo": {
       "evra": "1:1.13.2-1.fc38.s390x"
     },
@@ -1205,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-29T00:00:00Z",
+    "generated": "2023-08-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-26T22:32:48Z"
+        "generated": "2023-08-29T22:33:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-29T01:26:53Z"
+        "generated": "2023-08-30T01:24:10Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9a1c91d0e3..58c5f97991 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-29T00:00:00Z",
+    "generated": "2023-08-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-26T22:33:20Z"
+        "generated": "2023-08-29T22:34:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-29T01:27:00Z"
+        "generated": "2023-08-30T01:24:18Z"
       }
     }
   }

From 23f1af341f979a8b2c5c1a9191da2c40c8265963 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 1 Sep 2023 22:26:55 +0000
Subject: [PATCH 1805/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/715/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6dbd7f4a1a..16fb89997e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -394,7 +394,7 @@
       "evra": "2.4.0-3.fc38.aarch64"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc38.aarch64"
+      "evra": "3.8.1-1.fc38.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
       "evra": "20230808.00-1.fc38.noarch"
@@ -598,7 +598,7 @@
       "evra": "0.5.0-53.fc38.aarch64"
     },
     "libeconf": {
-      "evra": "0.4.0-5.fc38.aarch64"
+      "evra": "0.5.2-1.fc38.aarch64"
     },
     "libedit": {
       "evra": "3.1-45.20221030cvs.fc38.aarch64"
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.6.1-1.fc38.aarch64"
+      "evra": "5:4.6.2-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.1-1.fc38.aarch64"
+      "evra": "5:4.6.2-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1084,7 +1084,7 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.1-1.fc38.aarch64"
+      "evra": "1.5.0-1.fc38.aarch64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.aarch64"
@@ -1277,7 +1277,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-30T00:00:00Z",
+    "generated": "2023-09-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
@@ -1286,7 +1286,7 @@
         "generated": "2023-08-29T22:35:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-30T01:23:56Z"
+        "generated": "2023-09-01T01:17:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a92c0b225e..f751db6c0f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -385,7 +385,7 @@
       "evra": "2.4.0-3.fc38.ppc64le"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc38.ppc64le"
+      "evra": "3.8.1-1.fc38.ppc64le"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.ppc64le"
@@ -589,7 +589,7 @@
       "evra": "0.5.0-53.fc38.ppc64le"
     },
     "libeconf": {
-      "evra": "0.4.0-5.fc38.ppc64le"
+      "evra": "0.5.2-1.fc38.ppc64le"
     },
     "libedit": {
       "evra": "3.1-45.20221030cvs.fc38.ppc64le"
@@ -1021,10 +1021,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.6.1-1.fc38.ppc64le"
+      "evra": "5:4.6.2-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.6.1-1.fc38.ppc64le"
+      "evra": "5:4.6.2-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1087,7 +1087,7 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.4.1-1.fc38.ppc64le"
+      "evra": "1.5.0-1.fc38.ppc64le"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.ppc64le"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-30T00:00:00Z",
+    "generated": "2023-09-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-08-29T22:33:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-30T01:24:03Z"
+        "generated": "2023-09-01T01:17:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a73a07a6f3..2a051f47b5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -373,7 +373,7 @@
       "evra": "2.4.0-3.fc38.s390x"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc38.s390x"
+      "evra": "3.8.1-1.fc38.s390x"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.s390x"
@@ -559,7 +559,7 @@
       "evra": "0.5.0-53.fc38.s390x"
     },
     "libeconf": {
-      "evra": "0.4.0-5.fc38.s390x"
+      "evra": "0.5.2-1.fc38.s390x"
     },
     "libedit": {
       "evra": "3.1-45.20221030cvs.fc38.s390x"
@@ -976,10 +976,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.6.1-1.fc38.s390x"
+      "evra": "5:4.6.2-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.6.1-1.fc38.s390x"
+      "evra": "5:4.6.2-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1036,7 +1036,7 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.4.1-1.fc38.s390x"
+      "evra": "1.5.0-1.fc38.s390x"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.s390x"
@@ -1232,7 +1232,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-30T00:00:00Z",
+    "generated": "2023-09-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
@@ -1241,7 +1241,7 @@
         "generated": "2023-08-29T22:33:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-30T01:24:10Z"
+        "generated": "2023-09-01T01:17:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 58c5f97991..5a2f84ed21 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -394,7 +394,7 @@
       "evra": "2.4.0-3.fc38.x86_64"
     },
     "gnutls": {
-      "evra": "3.8.0-2.fc38.x86_64"
+      "evra": "3.8.1-1.fc38.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
       "evra": "20230808.00-1.fc38.noarch"
@@ -601,7 +601,7 @@
       "evra": "0.5.0-53.fc38.x86_64"
     },
     "libeconf": {
-      "evra": "0.4.0-5.fc38.x86_64"
+      "evra": "0.5.2-1.fc38.x86_64"
     },
     "libedit": {
       "evra": "3.1-45.20221030cvs.fc38.x86_64"
@@ -1030,10 +1030,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.6.1-1.fc38.x86_64"
+      "evra": "5:4.6.2-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.1-1.fc38.x86_64"
+      "evra": "5:4.6.2-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1087,7 +1087,7 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.4.1-1.fc38.x86_64"
+      "evra": "1.5.0-1.fc38.x86_64"
     },
     "rsync": {
       "evra": "3.2.7-2.fc38.x86_64"
@@ -1280,7 +1280,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-08-30T00:00:00Z",
+    "generated": "2023-09-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
@@ -1289,7 +1289,7 @@
         "generated": "2023-08-29T22:34:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-08-30T01:24:18Z"
+        "generated": "2023-09-01T01:17:30Z"
       }
     }
   }

From dc44a23c9e9d6f69400efd074e8098e368d85942 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Fri, 1 Sep 2023 17:09:41 -0400
Subject: [PATCH 1806/2157] denylist: deny kdump.crash test on rawhide

ext.config.kdump.crash is failing right now with selinux enabled.
see https://github.com/coreos/fedora-coreos-tracker/issues/1560
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 855383cebb..f4af31674b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -89,3 +89,9 @@
   warn: true
   platforms:
     - azure
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1560
+  snooze: 2023-09-30
+  warn: true
+  platforms:
+    - rawhide

From d3d8078b04fb7450aab824443f99fbf752a23049 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Sep 2023 22:32:29 +0000
Subject: [PATCH 1807/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/716/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 16fb89997e..3a067e827e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.0-1.fc38.noarch"
+      "evra": "2:2.221.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.4-3.fc38.aarch64"
+      "evra": "2.76.5-1.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-01T00:00:00Z",
+    "generated": "2023-09-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-29T22:35:22Z"
+        "generated": "2023-09-01T22:30:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-01T01:17:08Z"
+        "generated": "2023-09-02T01:03:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f751db6c0f..a08c40167e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.0-1.fc38.noarch"
+      "evra": "2:2.221.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -364,7 +364,7 @@
       "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.4-3.fc38.ppc64le"
+      "evra": "2.76.5-1.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-4.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-01T00:00:00Z",
+    "generated": "2023-09-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-29T22:33:57Z"
+        "generated": "2023-09-01T22:29:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-01T01:17:15Z"
+        "generated": "2023-09-02T01:04:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2a051f47b5..d4a5998570 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.0-1.fc38.noarch"
+      "evra": "2:2.221.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -352,7 +352,7 @@
       "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.4-3.fc38.s390x"
+      "evra": "2.76.5-1.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-4.fc38.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-01T00:00:00Z",
+    "generated": "2023-09-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-29T22:33:44Z"
+        "generated": "2023-09-01T22:29:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-01T01:17:23Z"
+        "generated": "2023-09-02T01:04:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5a2f84ed21..6913b6f406 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.0-1.fc38.noarch"
+      "evra": "2:2.221.1-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.4-3.fc38.x86_64"
+      "evra": "2.76.5-1.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-01T00:00:00Z",
+    "generated": "2023-09-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-08-29T22:34:41Z"
+        "generated": "2023-09-01T22:30:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-01T01:17:30Z"
+        "generated": "2023-09-02T01:04:16Z"
       }
     }
   }

From 9888be38ebb9493f03492635e3552e86f6e0cc26 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 2 Sep 2023 00:02:47 -0400
Subject: [PATCH 1808/2157] denylist: extend and adjust kdump.crash aarch64
 denial

The new kexec-tools v2.0.27 is in rawhide now so the problem should
be fixed there. Let's extend the snooze some time to see if the new
version makes it into the other streams.
---
 kola-denylist.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index f4af31674b..13af1006b2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,10 +15,17 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-08-31
+  snooze: 2023-09-13
   warn: true
   arches:
     - aarch64
+  platforms:
+    - stable
+    - testing
+    - next
+    - testing-devel
+    - next-devel
+    - branched
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-13

From c352468c53fc2bdd4630ade0b7027ab4f1765ff4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 2 Sep 2023 20:10:42 -0400
Subject: [PATCH 1809/2157] denylist: fix entry for 2nd kdump.crash denial

rawhide is a stream, not a platform.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 13af1006b2..b705b2a286 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -100,5 +100,5 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1560
   snooze: 2023-09-30
   warn: true
-  platforms:
+  streams:
     - rawhide

From d74306d5de355ae613cecaa8e5f094f787e2fe7e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 4 Sep 2023 00:32:04 -0400
Subject: [PATCH 1810/2157] denylist: fix entry for 1st kdump.crash denial

rawhide is a stream, not a platform.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b705b2a286..c1d47684ba 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -19,7 +19,7 @@
   warn: true
   arches:
     - aarch64
-  platforms:
+  streams:
     - stable
     - testing
     - next

From 344f70abe6f673cd68897b0788e881f82ac7f58b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 4 Sep 2023 22:35:13 +0000
Subject: [PATCH 1811/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/718/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 55 insertions(+), 55 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3a067e827e..b9929237d7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -406,16 +406,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.13-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.13-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.13-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.13-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -937,7 +937,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.aarch64"
+      "evra": "2.2.15-1.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -1090,7 +1090,7 @@
       "evra": "3.2.7-2.fc38.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.aarch64"
+      "evra": "2:1.1.8-1.fc38.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.aarch64"
@@ -1132,7 +1132,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.aarch64"
+      "evra": "1:1.13.3-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:30:50Z"
+        "generated": "2023-09-02T22:37:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:03:54Z"
+        "generated": "2023-09-04T01:28:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a08c40167e..14652af5a3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -394,19 +394,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.13-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.13-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.13-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.13-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -931,7 +931,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.ppc64le"
+      "evra": "2.2.15-1.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -1093,7 +1093,7 @@
       "evra": "3.2.7-2.fc38.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.ppc64le"
+      "evra": "2:1.1.8-1.fc38.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.ppc64le"
@@ -1135,7 +1135,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.ppc64le"
+      "evra": "1:1.13.3-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:29:56Z"
+        "generated": "2023-09-02T22:37:18Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:01Z"
+        "generated": "2023-09-04T01:28:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d4a5998570..2204dbdaa6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -463,16 +463,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.13-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.13-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.13-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.13-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -895,7 +895,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.s390x"
+      "evra": "2.2.15-1.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -1042,7 +1042,7 @@
       "evra": "3.2.7-2.fc38.s390x"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.s390x"
+      "evra": "2:1.1.8-1.fc38.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.25.0-4.fc38.s390x"
@@ -1084,7 +1084,7 @@
       "evra": "2.2-3.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.s390x"
+      "evra": "1:1.13.3-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:29:03Z"
+        "generated": "2023-09-02T22:36:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:08Z"
+        "generated": "2023-09-04T01:28:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6913b6f406..567f340750 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,22 +406,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.13-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.13-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.13-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.13-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -943,7 +943,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.x86_64"
+      "evra": "2.2.15-1.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1093,7 +1093,7 @@
       "evra": "3.2.7-2.fc38.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.x86_64"
+      "evra": "2:1.1.8-1.fc38.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.x86_64"
@@ -1135,7 +1135,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.x86_64"
+      "evra": "1:1.13.3-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:30:01Z"
+        "generated": "2023-09-02T22:37:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:16Z"
+        "generated": "2023-09-04T01:28:58Z"
       }
     }
   }

From 9f07817256c978d1467a8f6ced718afdcb4d9240 Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Mon, 4 Sep 2023 18:29:03 -0300
Subject: [PATCH 1812/2157] workflows: update the normalize denylist in the
 promotion-diff workflow

 - In coreos/fedora-coreos-releng-automation#179
 we updated the normalization denylist. Additionally,
 we are currently excluding the `warn:` comment in the kola denylist,
 which was recently added. Let's apply the same exclusion here to prevent
 unwanted warnings."

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 .github/workflows/promotion-diff.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index c852f2b906..6be39fddbf 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -40,9 +40,9 @@ jobs:
       - name: Normalize kola-denylist.yaml
         run: |
           # When we promote to a production branch we strip out the
-          # snooze lines. Let's do the same here so we don't get warnings.
-          # See https://github.com/coreos/fedora-coreos-releng-automation/pull/165
-          sed -E -i 's/^(\s+)(snooze:\s+.*)/\1# \2 (disabled on promotion)/' origin/kola-denylist.yaml
+          # snooze and warn lines. Let's do the same here so we don't get warnings.
+          # See https://github.com/coreos/fedora-coreos-releng-automation/pull/179
+          sed -E -i 's/^(\s+)((snooze:|warn:)\s+.*)/\1# \2 (disabled on promotion)/' origin/kola-denylist.yaml
       - name: Compare trees
         uses: coreos/actions-lib/check-diff@main
         with:

From 29651c8399e90601dd7f270b968b3957142200f4 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Tue, 5 Sep 2023 13:57:59 -0400
Subject: [PATCH 1813/2157] denylist: extend snooze for coreos.ignition.ssh.key

This test is still failing. Let's snooze for another week and work
to find a fix for https://github.com/coreos/fedora-coreos-tracker/issues/1553
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c1d47684ba..d3a9ab33e0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -92,7 +92,7 @@
     - next-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-09-04
+  snooze: 2023-09-12
   warn: true
   platforms:
     - azure

From 557715b0597fce84b7eb114802017e11659c7a11 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 6 Sep 2023 22:25:34 +0000
Subject: [PATCH 1814/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/720/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b9929237d7..1cdea423de 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.aarch64"
+      "evra": "1.9.5-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -574,7 +574,7 @@
       "evra": "2.48-6.fc38.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.aarch64"
+      "evra": "0.8.3-8.fc38.aarch64"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.aarch64"
@@ -1105,10 +1105,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-04T00:00:00Z",
+    "generated": "2023-09-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-02T22:37:04Z"
+        "generated": "2023-09-04T22:39:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-04T01:28:36Z"
+        "generated": "2023-09-06T01:10:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 14652af5a3..bcc5c3872b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.ppc64le"
+      "evra": "1.9.5-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -565,7 +565,7 @@
       "evra": "2.48-6.fc38.ppc64le"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.ppc64le"
+      "evra": "0.8.3-8.fc38.ppc64le"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-04T00:00:00Z",
+    "generated": "2023-09-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-02T22:37:18Z"
+        "generated": "2023-09-04T22:38:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-04T01:28:43Z"
+        "generated": "2023-09-06T01:10:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2204dbdaa6..4a4ebe5dd2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -337,7 +337,7 @@
       "evra": "3.14.1-1.fc38.s390x"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.s390x"
+      "evra": "1.9.5-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -535,7 +535,7 @@
       "evra": "2.48-6.fc38.s390x"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.s390x"
+      "evra": "0.8.3-8.fc38.s390x"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.s390x"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-04T00:00:00Z",
+    "generated": "2023-09-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-02T22:36:22Z"
+        "generated": "2023-09-04T22:38:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-04T01:28:50Z"
+        "generated": "2023-09-06T01:11:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 567f340750..9e29de8127 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.x86_64"
+      "evra": "1.9.5-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -577,7 +577,7 @@
       "evra": "2.48-6.fc38.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.x86_64"
+      "evra": "0.8.3-8.fc38.x86_64"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.x86_64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-04T00:00:00Z",
+    "generated": "2023-09-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-02T22:37:44Z"
+        "generated": "2023-09-04T22:39:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-04T01:28:58Z"
+        "generated": "2023-09-06T01:11:10Z"
       }
     }
   }

From 81d97de70f3cdb3f9230c816ff7d33b3841dd964 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Thu, 7 Sep 2023 14:44:17 +0200
Subject: [PATCH 1815/2157] kola secex tests: Increase test timeout to 5min.

We are experiencing test timeouts in the RHCOS Pipeline. Local testing shows
that 3min. seems to be around the time needed for the test.
Thus increasing the timeout from 3min. to 5min. should prevent future trouble.
The secex.ensure test does not timeout, but is on the border with 160s.
Increase timeout for it as well to prevent potential problems later.

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/secex/ensure/test.sh | 2 +-
 tests/kola/secex/reboot/test.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
index 54191e07b7..eefd01a444 100755
--- a/tests/kola/secex/ensure/test.sh
+++ b/tests/kola/secex/ensure/test.sh
@@ -3,7 +3,7 @@
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
-##   timeoutMin: 3
+##   timeoutMin: 5
 ##   description: Verify the s390x Secure Execution QEMU image works. It also
 ##     implicitly tests Ignition config decryption.
 
diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
index c5dcb18adc..a4e64c03de 100755
--- a/tests/kola/secex/reboot/test.sh
+++ b/tests/kola/secex/reboot/test.sh
@@ -3,7 +3,7 @@
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
-##   timeoutMin: 3
+##   timeoutMin: 5
 ##   description: Verify the qemu-secex image reboots with SE enabled. It also
 ##     implicitly tests Ignition config decryption.
 

From 2fd484b127e950e24795cc69ee7e6b65fe38ee02 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Sep 2023 13:24:23 +0000
Subject: [PATCH 1816/2157] overrides: fast-track kernel-6.4.15-200.fc38

---
 manifest-lock.overrides.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..96dfc1c6ff 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,30 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  kernel:
+    evr: 6.4.15-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      type: fast-track
+  kernel-core:
+    evr: 6.4.15-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      type: fast-track
+  kernel-modules:
+    evr: 6.4.15-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      type: fast-track
+  kernel-modules-core:
+    evr: 6.4.15-200.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 1130ed54a422cea5487df0abb2a568eb4298c101 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Sep 2023 22:32:43 +0000
Subject: [PATCH 1817/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/721/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1cdea423de..b0eb0f6a10 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc38.aarch64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc38.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.aarch64"
@@ -502,16 +502,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.13-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.13-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.13-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.13-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1234,10 +1234,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.aarch64"
+      "evra": "2:9.0.1872-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-06T00:00:00Z",
+    "generated": "2023-09-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-04T22:39:11Z"
+        "generated": "2023-09-07T17:17:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-06T01:10:47Z"
+        "generated": "2023-09-07T01:19:59Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index bcc5c3872b..7952c6f86b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc38.ppc64le"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc38.ppc64le"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.ppc64le"
@@ -493,16 +493,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.13-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.13-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.13-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.13-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.ppc64le"
+      "evra": "2:9.0.1872-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-06T00:00:00Z",
+    "generated": "2023-09-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-04T22:38:30Z"
+        "generated": "2023-09-07T17:15:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-06T01:10:54Z"
+        "generated": "2023-09-07T01:20:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4a4ebe5dd2..a84b27634a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -199,16 +199,16 @@
       "evra": "2.1.28-9.fc38.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc38.s390x"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc38.s390x"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.s390x"
@@ -463,16 +463,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.13-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.13-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.13-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.13-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1189,10 +1189,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.s390x"
+      "evra": "2:9.0.1872-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-06T00:00:00Z",
+    "generated": "2023-09-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-04T22:38:40Z"
+        "generated": "2023-09-07T17:15:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-06T01:11:01Z"
+        "generated": "2023-09-07T01:20:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9e29de8127..42ea1b3341 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc38.x86_64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc38.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.x86_64"
@@ -508,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.13-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.13-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.13-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.13-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.x86_64"
+      "evra": "2:9.0.1872-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-06T00:00:00Z",
+    "generated": "2023-09-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-04T22:39:24Z"
+        "generated": "2023-09-07T17:17:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-06T01:11:10Z"
+        "generated": "2023-09-07T01:20:21Z"
       }
     }
   }

From b545c501225ef2f13153fc1379acaf023f7de255 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Sep 2023 22:33:34 +0000
Subject: [PATCH 1818/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/723/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b0eb0f6a10..985a916be7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.aarch64"
+      "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.aarch64"
@@ -1075,10 +1075,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.aarch64"
+      "evra": "2023.7-1.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.aarch64"
+      "evra": "2023.7-1.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-07T00:00:00Z",
+    "generated": "2023-09-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T17:17:04Z"
+        "generated": "2023-09-07T22:36:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-07T01:19:59Z"
+        "generated": "2023-09-09T01:26:17Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7952c6f86b..4677bce364 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -364,7 +364,7 @@
       "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.ppc64le"
+      "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-4.fc38.ppc64le"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.ppc64le"
+      "evra": "2023.7-1.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.ppc64le"
+      "evra": "2023.7-1.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-07T00:00:00Z",
+    "generated": "2023-09-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T17:15:45Z"
+        "generated": "2023-09-07T22:35:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-07T01:20:07Z"
+        "generated": "2023-09-09T01:26:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a84b27634a..c5aa06764d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -352,7 +352,7 @@
       "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.s390x"
+      "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-4.fc38.s390x"
@@ -1027,10 +1027,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.s390x"
+      "evra": "2023.7-1.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.s390x"
+      "evra": "2023.7-1.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-07T00:00:00Z",
+    "generated": "2023-09-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T17:15:25Z"
+        "generated": "2023-09-07T22:34:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-07T01:20:14Z"
+        "generated": "2023-09-09T01:26:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 42ea1b3341..3636b03c14 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -373,7 +373,7 @@
       "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.x86_64"
+      "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-4.fc38.x86_64"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.x86_64"
+      "evra": "2023.7-1.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.x86_64"
+      "evra": "2023.7-1.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-07T00:00:00Z",
+    "generated": "2023-09-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T17:17:30Z"
+        "generated": "2023-09-07T22:37:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-07T01:20:21Z"
+        "generated": "2023-09-09T01:26:40Z"
       }
     }
   }

From cab54d5fe9009b0c6fba540cb55e51a0d166b125 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 11 Sep 2023 04:36:33 +0000
Subject: [PATCH 1819/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/725/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 985a916be7..aa3f6c90a6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.aarch64"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.aarch64"
+      "evra": "3.18-1.fc38.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.aarch64"
+      "evra": "3.18-1.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.aarch64"
+      "evra": "1.9-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -844,7 +844,7 @@
       "evra": "2.10.4-1.fc38.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.aarch64"
+      "evra": "0.3.14-1.fc38.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.aarch64"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.aarch64"
+      "evra": "0^20230908.g05627dc-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1189,22 +1189,22 @@
       "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1277,16 +1277,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-09T00:00:00Z",
+    "generated": "2023-09-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T22:36:36Z"
+        "generated": "2023-09-09T22:37:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-09T01:26:17Z"
+        "generated": "2023-09-11T01:05:27Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4677bce364..830337a2dc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.ppc64le"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.ppc64le"
+      "evra": "3.18-1.fc38.ppc64le"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.ppc64le"
+      "evra": "3.18-1.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.ppc64le"
+      "evra": "1.9-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -841,7 +841,7 @@
       "evra": "2.10.4-1.fc38.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.ppc64le"
+      "evra": "0.3.14-1.fc38.ppc64le"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.ppc64le"
@@ -994,10 +994,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.ppc64le"
+      "evra": "0^20230908.g05627dc-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-09T00:00:00Z",
+    "generated": "2023-09-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T22:35:51Z"
+        "generated": "2023-09-09T22:36:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-09T01:26:25Z"
+        "generated": "2023-09-11T01:05:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c5aa06764d..dc78027fa4 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -172,13 +172,13 @@
       "evra": "2.9.11-1.fc38.s390x"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.s390x"
+      "evra": "3.18-1.fc38.s390x"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.s390x"
+      "evra": "3.18-1.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.s390x"
+      "evra": "1.9-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -805,7 +805,7 @@
       "evra": "2.10.4-1.fc38.s390x"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.s390x"
+      "evra": "0.3.14-1.fc38.s390x"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.s390x"
@@ -949,10 +949,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.s390x"
+      "evra": "0^20230908.g05627dc-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -1141,22 +1141,22 @@
       "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-09T00:00:00Z",
+    "generated": "2023-09-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T22:34:57Z"
+        "generated": "2023-09-09T22:36:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-09T01:26:32Z"
+        "generated": "2023-09-11T01:05:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3636b03c14..fa69256a44 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.x86_64"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.x86_64"
+      "evra": "3.18-1.fc38.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.x86_64"
+      "evra": "3.18-1.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.x86_64"
+      "evra": "1.9-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -847,7 +847,7 @@
       "evra": "2.10.4-1.fc38.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.x86_64"
+      "evra": "0.3.14-1.fc38.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.x86_64"
@@ -1003,10 +1003,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.x86_64"
+      "evra": "0^20230908.g05627dc-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-09T00:00:00Z",
+    "generated": "2023-09-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-07T22:37:12Z"
+        "generated": "2023-09-09T22:37:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-09T01:26:40Z"
+        "generated": "2023-09-11T01:05:49Z"
       }
     }
   }

From f28732eb33f641ab1f0f2cc9428664634cfdd9f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 11 Sep 2023 19:54:42 +0200
Subject: [PATCH 1820/2157] manifests/system-configuration: Add audit

Include audit to be able to manage and load rules in the audit subsystem
in the kernel.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1362
---
 manifests/audit.yaml         | 6 ++++++
 manifests/fedora-coreos.yaml | 5 +++++
 2 files changed, 11 insertions(+)
 create mode 100644 manifests/audit.yaml

diff --git a/manifests/audit.yaml b/manifests/audit.yaml
new file mode 100644
index 0000000000..048d846d4c
--- /dev/null
+++ b/manifests/audit.yaml
@@ -0,0 +1,6 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/1362
+# Merge with manifests/system-configuration.yaml once Fedora 39 is released to
+# all streams
+packages:
+  # Manage and load rules in the audit subsystem in the kernel
+  - audit
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 59217fc705..7153140e5d 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -51,6 +51,11 @@ conditional-include:
     # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
     # once Fedora 39 is released to all streams
     include: enable-fwupd-refresh-timer.yaml
+  - if: releasever >= 39
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1362
+    # Merge with manifests/system-configuration.yaml once Fedora 39 is released
+    # to all streams
+    include: audit.yaml
 
 ostree-layers:
   - overlay/15fcos

From bc15f5329461a75c0182f0293ceecbf6c9db2d24 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 12 Sep 2023 09:34:57 -0400
Subject: [PATCH 1821/2157] manifests/fedora-coreos: ban initscripts-service

We want to make sure we never unknowingly start shipping this package.
Relevant with the recent addition of audit which used to pull it in:

https://github.com/coreos/fedora-coreos-tracker/issues/1362
---
 manifests/fedora-coreos.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 7153140e5d..16cccb8fdb 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -186,6 +186,8 @@ exclude-packages:
   # Let's make sure initscripts doesn't get pulled back in
   # https://github.com/coreos/fedora-coreos-tracker/issues/220#issuecomment-611566254
   - initscripts
+  # nor /usr/sbin/service
+  - initscripts-service
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth

From 7c14f58eb6b7088fea65729aa93fc383152e3829 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Sep 2023 06:06:16 +0000
Subject: [PATCH 1822/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 24 ------------------------
 1 file changed, 24 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 96dfc1c6ff..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,30 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
-  kernel-core:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
-  kernel-modules:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
-  kernel-modules-core:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 8ea63023f4078830b8efb2c08643a0ba081d05a0 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 13 Sep 2023 15:03:45 -0400
Subject: [PATCH 1823/2157] denylist: extend snooze for coreos.ignition.ssh.key

This test is still failing so let's bump the snooze while we work
to find a fix for https://github.com/coreos/fedora-coreos-tracker/issues/1553
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d3a9ab33e0..3817d8027f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -92,7 +92,7 @@
     - next-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-09-12
+  snooze: 2023-09-27
   warn: true
   platforms:
     - azure

From 478b6a4319353eda6d3ad7c20ccffba20c4dfdb5 Mon Sep 17 00:00:00 2001
From: Nikita Dubrovskii <nikita@linux.ibm.com>
Date: Thu, 14 Sep 2023 09:41:34 +0200
Subject: [PATCH 1824/2157] overrides: fast-track
 rust-coreos-installer-0.18.0-1.fc38

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..9f2899f189 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,16 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  coreos-installer:
+    evr: 0.18.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
+      type: fast-track
+  coreos-installer-bootinfra:
+    evr: 0.18.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From aa78282b7782fa53fb257f880df415691a235ee6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 14 Sep 2023 12:37:47 -0400
Subject: [PATCH 1825/2157] Revert "manifests/fedora-coreos: ban
 initscripts-service"

This reverts commit bc15f5329461a75c0182f0293ceecbf6c9db2d24.
---
 manifests/fedora-coreos.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 16cccb8fdb..7153140e5d 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -186,8 +186,6 @@ exclude-packages:
   # Let's make sure initscripts doesn't get pulled back in
   # https://github.com/coreos/fedora-coreos-tracker/issues/220#issuecomment-611566254
   - initscripts
-  # nor /usr/sbin/service
-  - initscripts-service
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth

From 1ff970e7aab825bfa0eaee10603d31384bce4015 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 14 Sep 2023 17:08:07 -0400
Subject: [PATCH 1826/2157] denylist: extend snooze for
 `ext.config.networking.*` tests

Extend the snooze on these tests again while we wait for a fix
for https://github.com/coreos/fedora-coreos-tracker/issues/1542
---
 kola-denylist.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 3817d8027f..5d0969e9e1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -28,7 +28,7 @@
     - branched
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -36,7 +36,7 @@
     - next-devel
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -44,7 +44,7 @@
     - next-devel
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -52,7 +52,7 @@
     - next-devel
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -60,7 +60,7 @@
     - next-devel
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -68,7 +68,7 @@
     - next-devel
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -76,7 +76,7 @@
     - next-devel
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide
@@ -84,7 +84,7 @@
     - next-devel
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   streams:
     - rawhide

From dad0d707f8390650e31f38cc637500e52f91774f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 14 Sep 2023 19:46:48 +0000
Subject: [PATCH 1827/2157] overrides: fast-track podman-4.6.2-3.fc38,
 gvisor-tap-vsock-gvforwarder

Includes gvisor-tap-vsock-gvforwarder to fix
https://github.com/coreos/fedora-coreos-tracker/issues/1557
---
 manifest-lock.overrides.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 9f2899f189..1c3ccc1de6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,3 +24,21 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
+  podman:
+    evr: 5:4.6.2-3.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track
+  podman-plugins:
+    evr: 5:4.6.2-3.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track
+  gvisor-tap-vsock-gvforwarder:
+    evr: 6:0.7.0-6.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track

From 0ebfae50b3b553042601c816e99a3ff8c54c1f63 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 15 Sep 2023 09:44:57 -0400
Subject: [PATCH 1828/2157] Revert "Revert "manifests/fedora-coreos: ban
 initscripts-service""

This reverts commit aa78282b7782fa53fb257f880df415691a235ee6.

Now that https://src.fedoraproject.org/rpms/audit/pull-request/10 is in
next-devel and rawhide, we should be good with re-adding this now.
---
 manifests/fedora-coreos.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 7153140e5d..16cccb8fdb 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -186,6 +186,8 @@ exclude-packages:
   # Let's make sure initscripts doesn't get pulled back in
   # https://github.com/coreos/fedora-coreos-tracker/issues/220#issuecomment-611566254
   - initscripts
+  # nor /usr/sbin/service
+  - initscripts-service
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth

From 7a4c643077052294d0f4324652fa8f94c278dfdb Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 13 Sep 2023 16:38:13 -0400
Subject: [PATCH 1829/2157] denylist: drop coreos.boot-mirror tests

These should now be fixed by
https://github.com/coreos/coreos-assembler/pull/3611.
---
 kola-denylist.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 5d0969e9e1..b7cf07ed51 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,14 +5,6 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: coreos.boot-mirror.luks
-  tracker: https://github.com/coreos/coreos-assembler/issues/3360
-  arches:
-    - ppc64le
-- pattern: coreos.boot-mirror
-  tracker: https://github.com/coreos/coreos-assembler/issues/3361
-  arches:
-    - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
   snooze: 2023-09-13

From 3adb70c46a6b6d985a1eef72f7ca8a63e1119bd2 Mon Sep 17 00:00:00 2001
From: Steven Presti <spresti@redhat.com>
Date: Fri, 15 Sep 2023 17:12:37 -0400
Subject: [PATCH 1830/2157] image.yaml: aws; add old defaults for new fields
 see coreos/coreos-assembler#3607

With the above PR, cosa's image-default.yaml adds 3 configuration
fields. The defaults provided differ from before. Overide the new
configuration fields to maintain old defaults.
---
 image.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/image.yaml b/image.yaml
index 1bf800cca2..1b3c824d20 100644
--- a/image.yaml
+++ b/image.yaml
@@ -2,3 +2,9 @@
 # similarly to manifest.yaml. Unlike image-base.yaml, which is shared by all
 # streams.
 include: image-base.yaml
+
+# see https://github.com/coreos/coreos-assembler/pull/3607
+# Defaults for AWS
+aws-imdsv2-only: false
+aws-volume-type: "gp2"
+aws-x86-boot-mode: "legacy-bios"

From 1b01ba0c6fa511cb43b9b568d2aa64978a0e52c6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 15 Sep 2023 22:25:55 -0400
Subject: [PATCH 1831/2157] denylist: extend/rework kdump.crash snoozes

The kexec-tools 2.0.27 reached F39 so the #1430 entry can now
just be for streams that are based on F38. The #1560 denial now
needs to apply to F39 streams too because the selinux issue still
is in play.

Also extend the snooze for the #1430 denial.
---
 kola-denylist.yaml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b7cf07ed51..a7714258f4 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,17 +7,14 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-09-13
+  snooze: 2023-09-28
   warn: true
   arches:
     - aarch64
   streams:
     - stable
     - testing
-    - next
     - testing-devel
-    - next-devel
-    - branched
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -94,3 +91,5 @@
   warn: true
   streams:
     - rawhide
+    - next-devel
+    - next

From 0c7e43b210780e03d7a3b5b2d4d40702893d6af6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 16 Sep 2023 11:45:45 -0400
Subject: [PATCH 1832/2157] tests/kola: switch to IMDSV2 for aws.assert-xen
 test

We switched to IMDSV2 by default in COSA so let's update our call here.
https://github.com/coreos/coreos-assembler/pull/3607
---
 tests/kola/platforms/aws/assert-xen | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index 3fe55e1150..cb2bdba084 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -16,7 +16,8 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-hypervisor=$(curl http://169.254.169.254/2022-09-24/meta-data/system || true)
+token=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600")
+hypervisor=$(curl -H "X-aws-ec2-metadata-token: $token" http://169.254.169.254/2022-09-24/meta-data/system || true)
 if [ "${hypervisor}" != "xen" ]; then
     fatal "expected xen instance type"
 fi

From f891a0708f49b6797ff95bd2ffcb25d4d29980cc Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 16 Sep 2023 11:17:34 -0400
Subject: [PATCH 1833/2157] denylist: add next stream to denial for networking
 selinux issue

Now that we have moved the next stream over to F39 we'll need these
denials to apply there too.
---
 kola-denylist.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a7714258f4..2426b0bcc0 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,6 +23,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -31,6 +32,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -39,6 +41,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -47,6 +50,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -55,6 +59,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -63,6 +68,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -71,6 +77,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
   snooze: 2023-09-28
@@ -79,6 +86,7 @@
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
   snooze: 2023-09-27

From f9e55105d5ad294878ec2c65404e08e13c572266 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sun, 17 Sep 2023 11:00:58 -0400
Subject: [PATCH 1834/2157] manifests: name wifi/BT firmware files in packages
 lists

These were demoted to a recommends in F39 and we're not sure
if we want to drop them yet:
https://github.com/coreos/fedora-coreos-tracker/issues/1575
---
 manifests/fedora-coreos-base.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index eec7561aef..d48601af17 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -158,6 +158,8 @@ packages:
   - iptables-legacy
   # GPU Firmware files (not broken out into subpackage of linux-firmware in RHEL yet)
   - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
+  # Wifi/BT firmware files https://github.com/coreos/fedora-coreos-tracker/issues/1575
+  - atheros-firmware brcmfmac-firmware mt7xxx-firmware realtek-firmware
 
 
 # - irqbalance

From 5ab095b4170a3515032d074995d6673dafa75864 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 18 Sep 2023 01:58:18 +0000
Subject: [PATCH 1835/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/747/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 39 ++++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 39 ++++++++++++++++++++------------------
 manifest-lock.s390x.json   | 39 ++++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 39 ++++++++++++++++++++------------------
 4 files changed, 84 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index aa3f6c90a6..b46e4eedc4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.aarch64"
+      "evra": "6.5.1-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.aarch64"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.aarch64"
+      "evra": "0.18.0-1.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.aarch64"
+      "evra": "0.18.0-1.fc38.aarch64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.aarch64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.aarch64"
+      "evra": "8.0.1-4.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -280,7 +280,7 @@
       "evra": "0.189-3.fc38.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.aarch64"
+      "evra": "2:6.5-1.fc38.aarch64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.aarch64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -417,6 +417,9 @@
     "grub2-tools-minimal": {
       "evra": "1:2.06-98.fc38.aarch64"
     },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.aarch64"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
     },
@@ -436,10 +439,10 @@
       "evra": "1.0.3-1.fc38.aarch64"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.aarch64"
+      "evra": "6.4.0-1.fc38.aarch64"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.aarch64"
+      "evra": "6.4.0-1.fc38.aarch64"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.aarch64"
@@ -586,7 +589,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.aarch64"
+      "evra": "8.0.1-4.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -1024,10 +1027,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.aarch64"
+      "evra": "5:4.6.2-3.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.aarch64"
+      "evra": "5:4.6.2-3.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1277,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-11T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-09T22:37:47Z"
+        "generated": "2023-09-17T00:27:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-11T01:05:27Z"
+        "generated": "2023-09-18T01:16:31Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 830337a2dc..ed7ec2851a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.ppc64le"
+      "evra": "6.5.1-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.ppc64le"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.ppc64le"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.ppc64le"
+      "evra": "0.18.0-1.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.ppc64le"
+      "evra": "0.18.0-1.fc38.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.ppc64le"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.ppc64le"
+      "evra": "8.0.1-4.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -271,7 +271,7 @@
       "evra": "0.189-3.fc38.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.ppc64le"
+      "evra": "2:6.5-1.fc38.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.ppc64le"
@@ -367,16 +367,16 @@
       "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -408,6 +408,9 @@
     "grub2-tools-minimal": {
       "evra": "1:2.06-98.fc38.ppc64le"
     },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.ppc64le"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
     },
@@ -427,10 +430,10 @@
       "evra": "1.0.3-1.fc38.ppc64le"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.ppc64le"
+      "evra": "6.4.0-1.fc38.ppc64le"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.ppc64le"
+      "evra": "6.4.0-1.fc38.ppc64le"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.ppc64le"
@@ -577,7 +580,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.ppc64le"
+      "evra": "8.0.1-4.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -1021,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.ppc64le"
+      "evra": "5:4.6.2-3.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.ppc64le"
+      "evra": "5:4.6.2-3.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1280,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-11T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-09T22:36:23Z"
+        "generated": "2023-09-17T00:25:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-11T01:05:34Z"
+        "generated": "2023-09-18T01:16:39Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dc78027fa4..26ecd9e102 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -82,7 +82,7 @@
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.s390x"
+      "evra": "6.5.1-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -121,7 +121,7 @@
       "evra": "19-2.fc38.s390x"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.s390x"
@@ -154,10 +154,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.s390x"
+      "evra": "0.18.0-1.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.s390x"
+      "evra": "0.18.0-1.fc38.s390x"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.s390x"
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.s390x"
+      "evra": "8.0.1-4.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -268,7 +268,7 @@
       "evra": "0.189-3.fc38.s390x"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.s390x"
+      "evra": "2:6.5-1.fc38.s390x"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.s390x"
@@ -355,16 +355,16 @@
       "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -381,6 +381,9 @@
     "grep": {
       "evra": "3.8-3.fc38.s390x"
     },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.s390x"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
     },
@@ -400,10 +403,10 @@
       "evra": "1.0.3-1.fc38.s390x"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.s390x"
+      "evra": "6.4.0-1.fc38.s390x"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.s390x"
+      "evra": "6.4.0-1.fc38.s390x"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.s390x"
@@ -547,7 +550,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.s390x"
+      "evra": "8.0.1-4.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -976,10 +979,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.s390x"
+      "evra": "5:4.6.2-3.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.s390x"
+      "evra": "5:4.6.2-3.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1232,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-11T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-09T22:36:06Z"
+        "generated": "2023-09-17T00:26:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-11T01:05:42Z"
+        "generated": "2023-09-18T01:16:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fa69256a44..dbc582b760 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.x86_64"
+      "evra": "6.5.1-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.x86_64"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.x86_64"
+      "evra": "0.18.0-1.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.x86_64"
+      "evra": "0.18.0-1.fc38.x86_64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.x86_64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.x86_64"
+      "evra": "8.0.1-4.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -280,7 +280,7 @@
       "evra": "0.189-3.fc38.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.x86_64"
+      "evra": "2:6.5-1.fc38.x86_64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.x86_64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -423,6 +423,9 @@
     "grub2-tools-minimal": {
       "evra": "1:2.06-98.fc38.x86_64"
     },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.x86_64"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
     },
@@ -442,10 +445,10 @@
       "evra": "1.0.3-1.fc38.x86_64"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.x86_64"
+      "evra": "6.4.0-1.fc38.x86_64"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.x86_64"
+      "evra": "6.4.0-1.fc38.x86_64"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.x86_64"
@@ -589,7 +592,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.x86_64"
+      "evra": "8.0.1-4.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -1030,10 +1033,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.x86_64"
+      "evra": "5:4.6.2-3.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.x86_64"
+      "evra": "5:4.6.2-3.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1280,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-11T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-09T22:37:04Z"
+        "generated": "2023-09-17T00:26:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-11T01:05:49Z"
+        "generated": "2023-09-18T01:16:55Z"
       }
     }
   }

From 6666751dd41907eb2afbbd24fb0ab3500ac6242e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 18 Sep 2023 18:06:15 +0000
Subject: [PATCH 1836/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1c3ccc1de6..9f2899f189 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,21 +24,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
-  podman:
-    evr: 5:4.6.2-3.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
-      type: fast-track
-  podman-plugins:
-    evr: 5:4.6.2-3.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
-      type: fast-track
-  gvisor-tap-vsock-gvforwarder:
-    evr: 6:0.7.0-6.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
-      type: fast-track

From 9e61ed51ce9ef046b3bd41d2d106095b9b4ca987 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 18 Sep 2023 14:44:41 -0400
Subject: [PATCH 1837/2157] denylist: drop networking test denials

The selinux update that was needed in order to prevent
systemd-network-generator.service from triggering a denial has landed.

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1542
---
 kola-denylist.yaml | 72 ----------------------------------------------
 1 file changed, 72 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 2426b0bcc0..48bd40880d 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,78 +15,6 @@
     - stable
     - testing
     - testing-devel
-- pattern: ext.config.networking.nameserver
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.no-persist-ip
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.prefer-ignition-networking
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.force-persist-ip
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.bridge-static-via-kargs
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
-- pattern: ext.config.networking.mtu-on-bond-kargs
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  snooze: 2023-09-28
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
   snooze: 2023-09-27

From aa4373201f415baff85701f7f96ab0583931af6c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 20 Sep 2023 18:02:59 +0200
Subject: [PATCH 1838/2157] tests/kola/docker: Add a basic docker run test

See: https://github.com/coreos/fedora-coreos-tracker/issues/1578
---
 tests/kola/docker/basic             | 16 ++++++++++++++++
 tests/kola/docker/data/commonlib.sh |  1 +
 2 files changed, 17 insertions(+)
 create mode 100755 tests/kola/docker/basic
 create mode 120000 tests/kola/docker/data/commonlib.sh

diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
new file mode 100755
index 0000000000..133703a682
--- /dev/null
+++ b/tests/kola/docker/basic
@@ -0,0 +1,16 @@
+#!/bin/bash
+## kola:
+##   # Must not run this test with another podman test
+##   exclusive: true
+##   # This test pulls a container image from remote sources.
+##   tags: "platform-independent needs-internet"
+##   description: Verify that running a basic container with docker works.
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+docker run --rm registry.fedoraproject.org/fedora:38 true
+
+ok "basic docker run successfully"
diff --git a/tests/kola/docker/data/commonlib.sh b/tests/kola/docker/data/commonlib.sh
new file mode 120000
index 0000000000..1742d51e67
--- /dev/null
+++ b/tests/kola/docker/data/commonlib.sh
@@ -0,0 +1 @@
+../../data/commonlib.sh
\ No newline at end of file

From 235506b5cadbda3629c8d3f9b00be54a98c8146d Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 21 Sep 2023 12:01:38 -0700
Subject: [PATCH 1839/2157] upgrade/extended: Get latest release from update
 server This test fails when it is run during the time period between the
 stream build and the release. Updated the test to get the last_release from
 update server and check if there's an edge pointing to it.

---
 tests/kola/upgrade/extended/test.sh | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index c1d29b5a3a..e975ca578b 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -75,10 +75,19 @@ get_booted_deployment_json() {
 version=$(get_booted_deployment_json | jq -r '.version')
 stream=$(get_booted_deployment_json | jq -r '.["base-commit-meta"]["fedora-coreos.stream"]')
 
-# Pick up the last release for the current stream
-test -f /srv/releases.json || \
-    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/releases.json" > /srv/releases.json
-last_release=$(jq -r .releases[-1].version /srv/releases.json)
+# Pick up the last release for the current stream from the update server
+test -f /srv/updateinfo.json || \
+    curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}" > /srv/updateinfo.json
+last_release=$(jq -r .nodes[-1].version /srv/updateinfo.json)
+last_release_index=$(jq -r '.nodes[-1].metadata."org.fedoraproject.coreos.releases.age_index"' /srv/updateinfo.json)
+latest_edge=$(jq -r .edges[0][1] /srv/updateinfo.json)
+
+# Now that we have the release from update json, let's check if it has an edge pointing to it
+# The latest_edge would ideally have the value of last_release_index if the release has rolled out
+# If the edge does not exist, we would pick the second last release as our last_release
+if [ $last_release_index != $latest_edge ]; then
+    last_release=$(jq -r .nodes[-2].version /srv/updateinfo.json)
+fi
 
 # If the user dropped down a /etc/target_stream file then we'll
 # pick up the info from there.

From 0ca42bcebb060f6a1dffd8aedf5acd6d875984a3 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 22 Sep 2023 06:06:01 +0000
Subject: [PATCH 1840/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 9f2899f189..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,16 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  coreos-installer:
-    evr: 0.18.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.18.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From de164d09dec19ca11e96c55df7554fcc893ebede Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Fri, 22 Sep 2023 02:16:01 -0700
Subject: [PATCH 1841/2157] upgrade/extended: Fix last_release_index extraction
 method Initially, I was getting the last_release_index from the update json
 file itself under key org.fedoraproject.coreos.releases.age_index whereas we
 are using the actual index value of the versions as edge values in edges
 array

---
 tests/kola/upgrade/extended/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index e975ca578b..372e9b9084 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -79,7 +79,7 @@ stream=$(get_booted_deployment_json | jq -r '.["base-commit-meta"]["fedora-coreo
 test -f /srv/updateinfo.json || \
     curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}" > /srv/updateinfo.json
 last_release=$(jq -r .nodes[-1].version /srv/updateinfo.json)
-last_release_index=$(jq -r '.nodes[-1].metadata."org.fedoraproject.coreos.releases.age_index"' /srv/updateinfo.json)
+last_release_index=$(jq '.nodes | length-1' /srv/updateinfo.json)
 latest_edge=$(jq -r .edges[0][1] /srv/updateinfo.json)
 
 # Now that we have the release from update json, let's check if it has an edge pointing to it

From f804f5d78ce0a48f32dfdd0b34529eeed513178c Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Fri, 22 Sep 2023 11:28:00 -0400
Subject: [PATCH 1842/2157] denylist: snooze ext.config.docker.basic on rawhide

This test is failing on rawhide.
Snooze the test, with `warn: true` for three weeks until
resolving https://github.com/coreos/fedora-coreos-tracker/issues/1578
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 48bd40880d..6a8478eca6 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -29,3 +29,9 @@
     - rawhide
     - next-devel
     - next
+- pattern: ext.config.docker.basic
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
+  snooze: 2023-10-13
+  warn: true
+  streams:
+    - rawhide

From 3e6dfffdeeebc0e586da0a825197405d24000403 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 22 Sep 2023 19:37:06 +0000
Subject: [PATCH 1843/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/761/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 40 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 28 +++++++++++++-------------
 manifest-lock.x86_64.json  | 40 +++++++++++++++++++-------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b46e4eedc4..69234c114c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.1-1.fc38.noarch"
+      "evra": "2:2.222.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -406,16 +406,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-98.fc38.noarch"
+      "evra": "1:2.06-100.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-98.fc38.aarch64"
+      "evra": "1:2.06-100.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-98.fc38.aarch64"
+      "evra": "1:2.06-100.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-98.fc38.aarch64"
+      "evra": "1:2.06-100.fc38.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.aarch64"
@@ -982,10 +982,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.5-2.fc38.aarch64"
+      "evra": "2023.6-1.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.5-2.fc38.aarch64"
+      "evra": "2023.6-1.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.aarch64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.9-1.fc38.aarch64"
+      "evra": "253.10-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-18T00:00:00Z",
+    "generated": "2023-09-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-17T00:27:35Z"
+        "generated": "2023-09-22T15:25:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-18T01:16:31Z"
+        "generated": "2023-09-22T01:12:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ed7ec2851a..ed11d125bc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.1-1.fc38.noarch"
+      "evra": "2:2.222.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -394,19 +394,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-98.fc38.noarch"
+      "evra": "1:2.06-100.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-98.fc38.ppc64le"
+      "evra": "1:2.06-100.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-98.fc38.noarch"
+      "evra": "1:2.06-100.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-98.fc38.ppc64le"
+      "evra": "1:2.06-100.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-98.fc38.ppc64le"
+      "evra": "1:2.06-100.fc38.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.ppc64le"
@@ -976,13 +976,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.5-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.5-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.5-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.ppc64le"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1195,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.9-1.fc38.ppc64le"
+      "evra": "253.10-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-18T00:00:00Z",
+    "generated": "2023-09-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-17T00:25:48Z"
+        "generated": "2023-09-22T15:24:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-18T01:16:39Z"
+        "generated": "2023-09-22T01:12:20Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 26ecd9e102..170ab98f61 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.1-1.fc38.noarch"
+      "evra": "2:2.222.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -934,10 +934,10 @@
       "evra": "1:3.0.9-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.5-2.fc38.s390x"
+      "evra": "2023.6-1.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.5-2.fc38.s390x"
+      "evra": "2023.6-1.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.s390x"
@@ -1063,10 +1063,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1144,22 +1144,22 @@
       "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.9-1.fc38.s390x"
+      "evra": "253.10-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-18T00:00:00Z",
+    "generated": "2023-09-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-17T00:26:19Z"
+        "generated": "2023-09-22T15:23:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-18T01:16:47Z"
+        "generated": "2023-09-22T01:12:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index dbc582b760..506d913f3e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.221.1-1.fc38.noarch"
+      "evra": "2:2.222.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -406,22 +406,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-98.fc38.noarch"
+      "evra": "1:2.06-100.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-98.fc38.x86_64"
+      "evra": "1:2.06-100.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-98.fc38.x86_64"
+      "evra": "1:2.06-100.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-98.fc38.noarch"
+      "evra": "1:2.06-100.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-98.fc38.x86_64"
+      "evra": "1:2.06-100.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-98.fc38.x86_64"
+      "evra": "1:2.06-100.fc38.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.x86_64"
@@ -988,10 +988,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.5-2.fc38.x86_64"
+      "evra": "2023.6-1.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.5-2.fc38.x86_64"
+      "evra": "2023.6-1.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.25.0-1.fc38.x86_64"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.27-1.fc38.noarch"
+      "evra": "38.28-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1195,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.9-1.fc38.x86_64"
+      "evra": "253.10-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-18T00:00:00Z",
+    "generated": "2023-09-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-17T00:26:48Z"
+        "generated": "2023-09-22T15:24:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-18T01:16:55Z"
+        "generated": "2023-09-22T01:12:35Z"
       }
     }
   }

From ab60ab62bcf19223a52cd40503a8ae4dd4675c73 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 23 Sep 2023 23:01:47 +0000
Subject: [PATCH 1844/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/762/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 69234c114c..66f4d2549b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -433,7 +433,7 @@
       "evra": "57-1.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.aarch64"
@@ -859,10 +859,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.aarch64"
@@ -904,7 +904,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -952,7 +952,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.aarch64"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-22T00:00:00Z",
+    "generated": "2023-09-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T15:25:26Z"
+        "generated": "2023-09-22T19:40:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-22T01:12:12Z"
+        "generated": "2023-09-23T01:22:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ed11d125bc..2a6bd12524 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -79,7 +79,7 @@
       "evra": "32:9.18.17-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -424,7 +424,7 @@
       "evra": "57-1.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.ppc64le"
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.ppc64le"
@@ -898,7 +898,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -946,7 +946,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.ppc64le"
@@ -1069,7 +1069,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-22T00:00:00Z",
+    "generated": "2023-09-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T15:24:30Z"
+        "generated": "2023-09-22T19:40:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-22T01:12:20Z"
+        "generated": "2023-09-23T01:22:20Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 170ab98f61..997f2067a1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -76,7 +76,7 @@
       "evra": "32:9.18.17-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -397,7 +397,7 @@
       "evra": "57-1.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.s390x"
@@ -820,10 +820,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.s390x"
@@ -862,7 +862,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -907,7 +907,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.s390x"
@@ -1018,7 +1018,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-22T00:00:00Z",
+    "generated": "2023-09-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T15:23:27Z"
+        "generated": "2023-09-22T19:40:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-22T01:12:27Z"
+        "generated": "2023-09-23T01:22:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 506d913f3e..fc290b1799 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,10 @@
       "evra": "1.25-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -79,7 +79,7 @@
       "evra": "0.2.9-1.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -439,7 +439,7 @@
       "evra": "57-1.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.x86_64"
@@ -862,10 +862,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.x86_64"
@@ -910,7 +910,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -958,7 +958,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-2.fc38.x86_64"
@@ -1069,7 +1069,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230804-153.fc38.noarch"
+      "evra": "20230919-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-22T00:00:00Z",
+    "generated": "2023-09-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T15:24:38Z"
+        "generated": "2023-09-22T19:40:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-22T01:12:35Z"
+        "generated": "2023-09-23T01:22:35Z"
       }
     }
   }

From c294aa41c3eb9480b8f5d92e9b158bbc648e98f6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 26 Sep 2023 06:33:03 +0000
Subject: [PATCH 1845/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/766/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 66f4d2549b..18c819a518 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1872-1.fc38.noarch"
+      "evra": "2:9.0.1927-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1872-1.fc38.aarch64"
+      "evra": "2:9.0.1927-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-23T00:00:00Z",
+    "generated": "2023-09-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T19:40:12Z"
+        "generated": "2023-09-24T22:56:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-23T01:22:12Z"
+        "generated": "2023-09-26T01:13:26Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2a6bd12524..c60e42e79d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1872-1.fc38.noarch"
+      "evra": "2:9.0.1927-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1872-1.fc38.ppc64le"
+      "evra": "2:9.0.1927-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-23T00:00:00Z",
+    "generated": "2023-09-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T19:40:27Z"
+        "generated": "2023-09-24T22:55:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-23T01:22:20Z"
+        "generated": "2023-09-26T01:13:34Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 997f2067a1..44357ccbc1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1872-1.fc38.noarch"
+      "evra": "2:9.0.1927-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1872-1.fc38.s390x"
+      "evra": "2:9.0.1927-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-23T00:00:00Z",
+    "generated": "2023-09-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T19:40:10Z"
+        "generated": "2023-09-24T22:56:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-23T01:22:27Z"
+        "generated": "2023-09-26T01:13:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fc290b1799..0423d31a66 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1872-1.fc38.noarch"
+      "evra": "2:9.0.1927-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1872-1.fc38.x86_64"
+      "evra": "2:9.0.1927-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-23T00:00:00Z",
+    "generated": "2023-09-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-22T19:40:32Z"
+        "generated": "2023-09-24T22:56:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-23T01:22:35Z"
+        "generated": "2023-09-26T01:13:49Z"
       }
     }
   }

From 03033e35ea2855fc984a1a5c8cd714cd0c812c88 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Mon, 25 Sep 2023 18:24:46 -0400
Subject: [PATCH 1846/2157] denylist: drop ext.config.kdump.crash test

ext.config.kdump.crash test can be dropped from the denylist for
as the new selinux-policy-38.28-1 pkg has landed in F39 and rawhide

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/1560
---
 kola-denylist.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 6a8478eca6..36c280d6eb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,14 +21,6 @@
   warn: true
   platforms:
     - azure
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1560
-  snooze: 2023-09-30
-  warn: true
-  streams:
-    - rawhide
-    - next-devel
-    - next
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
   snooze: 2023-10-13

From 36cc43942d0f0b1f323c3592d3a381a6fb87dacf Mon Sep 17 00:00:00 2001
From: Steven Presti <spresti@redhat.com>
Date: Tue, 26 Sep 2023 14:10:58 -0400
Subject: [PATCH 1847/2157] manifest: add bash-color-prompt for >= f39 fixes
 coreos/fedora-coreos-tracker#1567

Co-authored-by: Adam Piasecki <c4rt0gr4ph3r@gmail.com>
Co-authored-by: Yasmin de Souza <ydesouza@redhat.com>
---
 manifests/bash-color-prompt.yaml | 6 ++++++
 manifests/fedora-coreos.yaml     | 5 +++++
 2 files changed, 11 insertions(+)
 create mode 100644 manifests/bash-color-prompt.yaml

diff --git a/manifests/bash-color-prompt.yaml b/manifests/bash-color-prompt.yaml
new file mode 100644
index 0000000000..8d3152b56f
--- /dev/null
+++ b/manifests/bash-color-prompt.yaml
@@ -0,0 +1,6 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/1567
+# Merge with manifests/fedora-coreos.yaml once Fedora 39 is released to
+# all streams
+packages:
+  # Introduce a default colored prompt for Fedora's default shell bash.
+  - bash-color-prompt
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 16cccb8fdb..2115a986d1 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -56,6 +56,11 @@ conditional-include:
     # Merge with manifests/system-configuration.yaml once Fedora 39 is released
     # to all streams
     include: audit.yaml
+  - if: releasever >= 39
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1567
+    # Merge with manifests/fedora-coreos.yaml once Fedora 39 is released
+    # to all streams
+    include: bash-color-prompt.yaml
 
 ostree-layers:
   - overlay/15fcos

From 8192c8fdeb8ad21e7e96b947c23a0838085c8cdf Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 26 Sep 2023 21:45:43 -0700
Subject: [PATCH 1848/2157] denylist: extend snooze for coreos.ignition.ssh.key

This test is still failing so let's bump the snooze while we work
to find a fix for coreos/fedora-coreos-tracker#1553
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 36c280d6eb..8bed728abf 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,7 +17,7 @@
     - testing-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-09-27
+  snooze: 2023-10-13
   warn: true
   platforms:
     - azure

From 2f9a4aa9174fe06b37d2f3aecaa4dd0e97ddf15b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Sep 2023 01:37:35 +0000
Subject: [PATCH 1849/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/770/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 18c819a518..fe5db988ac 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.15-200.fc38.aarch64"
+      "evra": "6.5.5-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.15-200.fc38.aarch64"
+      "evra": "6.5.5-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.15-200.fc38.aarch64"
+      "evra": "6.5.5-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.15-200.fc38.aarch64"
+      "evra": "6.5.5-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-26T00:00:00Z",
+    "generated": "2023-09-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-24T22:56:09Z"
+        "generated": "2023-09-26T23:27:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-26T01:13:26Z"
+        "generated": "2023-09-27T02:37:49Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c60e42e79d..4ce34333ed 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.15-200.fc38.ppc64le"
+      "evra": "6.5.5-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.15-200.fc38.ppc64le"
+      "evra": "6.5.5-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.15-200.fc38.ppc64le"
+      "evra": "6.5.5-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.15-200.fc38.ppc64le"
+      "evra": "6.5.5-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-26T00:00:00Z",
+    "generated": "2023-09-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-24T22:55:15Z"
+        "generated": "2023-09-26T23:26:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-26T01:13:34Z"
+        "generated": "2023-09-27T02:37:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 44357ccbc1..cc0f14798b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -466,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.15-200.fc38.s390x"
+      "evra": "6.5.5-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.15-200.fc38.s390x"
+      "evra": "6.5.5-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.15-200.fc38.s390x"
+      "evra": "6.5.5-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.15-200.fc38.s390x"
+      "evra": "6.5.5-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-26T00:00:00Z",
+    "generated": "2023-09-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-24T22:56:00Z"
+        "generated": "2023-09-26T23:27:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-26T01:13:41Z"
+        "generated": "2023-09-27T02:38:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0423d31a66..87a0ed6683 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -511,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.15-200.fc38.x86_64"
+      "evra": "6.5.5-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.15-200.fc38.x86_64"
+      "evra": "6.5.5-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.15-200.fc38.x86_64"
+      "evra": "6.5.5-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.15-200.fc38.x86_64"
+      "evra": "6.5.5-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-26T00:00:00Z",
+    "generated": "2023-09-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-24T22:56:05Z"
+        "generated": "2023-09-26T23:27:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-26T01:13:49Z"
+        "generated": "2023-09-27T02:38:11Z"
       }
     }
   }

From 22df6f1fdf403228d26bb4f6e54a8a72a7499934 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Sep 2023 02:51:48 +0000
Subject: [PATCH 1850/2157] overrides: fast-track podman-4.7.0-1.fc38

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..d8d61d2ac8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,3 +14,15 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
+  podman:
+    evr: 5:4.7.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b7c4711bd0
+      reason: https://github.com/containers/podman/releases/tag/v4.7.0
+      type: fast-track
+  podman-plugins:
+    evr: 5:4.7.0-1.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b7c4711bd0
+      reason: https://github.com/containers/podman/releases/tag/v4.7.0
+      type: fast-track

From 9e1a2a1696a7b6dbd05d4b46d01ffebe3e83a553 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 28 Sep 2023 00:40:29 -0700
Subject: [PATCH 1851/2157] denylist: bump snooze for ext.config.kdump.crash on
 aarch64 This test is still failing.

---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8bed728abf..b960963270 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-09-28
+  snooze: 2023-10-24
   warn: true
   arches:
     - aarch64

From cdce208059fc87434635f1e57758f9811086f533 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 21 Sep 2023 14:45:58 +0200
Subject: [PATCH 1852/2157] ci & tests: Switch to quay.io/fedora/fedora

Fedora is planning on deprecating the registry and moving to quay.io for
all containers.

Existing containers are mirrors to quay.io so we should be able to
switch now.

See: https://discussion.fedoraproject.org/t/registry-fedoraproject-org-to-quay-io-migration/88231
See: https://pagure.io/fedora-infrastructure/issue/10386
---
 .github/workflows/add-override.yml          | 2 +-
 ci/buildroot/Dockerfile                     | 2 +-
 tests/kola/binfmt/qemu                      | 2 +-
 tests/kola/containers/quadlet/config.bu     | 2 +-
 tests/kola/containers/quadlet/test.sh       | 2 +-
 tests/kola/docker/basic                     | 2 +-
 tests/kola/ntp/data/ntplib.sh               | 2 +-
 tests/kola/podman/dns/test.sh               | 2 +-
 tests/kola/podman/rootless-pasta-networking | 2 +-
 tests/kola/podman/rootless-systemd          | 2 +-
 tests/kola/selinux/podman-tmpfs-context     | 2 +-
 tests/kola/toolbox/test.sh                  | 2 +-
 12 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/add-override.yml b/.github/workflows/add-override.yml
index 6f412df46d..219e711f82 100644
--- a/.github/workflows/add-override.yml
+++ b/.github/workflows/add-override.yml
@@ -37,7 +37,7 @@ jobs:
   add-override:
     name: Add package override
     runs-on: ubuntu-latest
-    container: registry.fedoraproject.org/fedora:latest
+    container: quay.io/fedora/fedora:latest
     steps:
       - name: Install dependencies
         run: dnf install -y git jq python3-bodhi-client python3-pyyaml
diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index b20088190b..01dfa684d7 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM registry.fedoraproject.org/fedora:38
+FROM quay.io/fedora/fedora:38
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf
diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index f28a2229c7..3140ef2920 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -20,7 +20,7 @@ set -xeuo pipefail
 
 case "$(arch)" in
     aarch64|ppc64le|s390x)
-        containerArch=$(podman run --arch=amd64 --rm registry.fedoraproject.org/fedora:38 arch)
+        containerArch=$(podman run --arch=amd64 --rm quay.io/fedora/fedora:38 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
diff --git a/tests/kola/containers/quadlet/config.bu b/tests/kola/containers/quadlet/config.bu
index cda6fbd045..a4fb72694f 100644
--- a/tests/kola/containers/quadlet/config.bu
+++ b/tests/kola/containers/quadlet/config.bu
@@ -9,7 +9,7 @@ storage:
           Description=A minimal container
 
           [Container]
-          Image=registry.fedoraproject.org/fedora-minimal
+          Image=quay.io/fedora/fedora-minimal
           Exec=sleep 60
           Volume=test.volume:/data
           Network=test.network
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index 966f26bc89..58afc48f9c 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -17,7 +17,7 @@ if [[ "$(podman network inspect systemd-test | jq -r '.[0].labels."org.test.Key"
     fatal "Network not correctly created"
 fi
 
-if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "registry.fedoraproject.org/fedora-minimal:latest" ]]; then
+if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "quay.io/fedora/fedora-minimal:latest" ]]; then
     fatal "Container not using the correct image"
 fi
 
diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
index 133703a682..7ab6bf9979 100755
--- a/tests/kola/docker/basic
+++ b/tests/kola/docker/basic
@@ -11,6 +11,6 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-docker run --rm registry.fedoraproject.org/fedora:38 true
+docker run --rm quay.io/fedora/fedora:38 true
 
 ok "basic docker run successfully"
diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index 4f8e8cff2f..262590791e 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -20,7 +20,7 @@ ntp_test_setup() {
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
     cat <<EOF >Dockerfile
-FROM registry.fedoraproject.org/fedora:38
+FROM quay.io/fedora/fedora:38
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 8ad98f8cad..0e5bb18d9b 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -23,7 +23,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork registry.fedoraproject.org/fedora:38 getent hosts google.com
+podman run --rm -t --network=testnetwork quay.io/fedora/fedora:38 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
index 8689162e38..4492360147 100755
--- a/tests/kola/podman/rootless-pasta-networking
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -20,7 +20,7 @@ set -xeuo pipefail
 runascoreuserscript='#!/bin/bash
 set -euxo pipefail
 # Just a basic test that uses pasta network and sets the gateway
-podman run -i --net=pasta:--mtu,1500 registry.fedoraproject.org/fedora:38 bash <<"EOF"
+podman run -i --net=pasta:--mtu,1500 quay.io/fedora/fedora:38 bash <<"EOF"
 set -euxo pipefail
 # Verify the mtu got set to 1500. No /sbin/ip so just use /sys/class/net/<nic>/mtu
 cat /sys/class/net/e*/mtu | grep 1500
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index c5d32976ca..07b0d3e480 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -35,7 +35,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM registry.fedoraproject.org/fedora:38
+FROM quay.io/fedora/fedora:38
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 8205aae166..4ec0a3e504 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -15,7 +15,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-context=$(podman run --rm --privileged registry.fedoraproject.org/fedora:38 \
+context=$(podman run --rm --privileged quay.io/fedora/fedora:38 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"
diff --git a/tests/kola/toolbox/test.sh b/tests/kola/toolbox/test.sh
index 1221b50fe6..d8db6db43b 100755
--- a/tests/kola/toolbox/test.sh
+++ b/tests/kola/toolbox/test.sh
@@ -22,7 +22,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-# Try five times to create the toolbox to avoid Fedora registry infra flakes
+# Try five times to create the toolbox to avoid container registry infra flakes
 for i in $(seq 1 5); do
     machinectl shell core@ /bin/toolbox create --assumeyes 1>/dev/null
     if [[ $(machinectl shell core@ /bin/toolbox list --containers | grep --count fedora-toolbox-) -ne 1 ]]; then

From c5775573d0fb592eb16f4f877295e109c138464d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Sep 2023 06:06:20 +0000
Subject: [PATCH 1853/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index d8d61d2ac8..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,15 +14,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
-  podman:
-    evr: 5:4.7.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b7c4711bd0
-      reason: https://github.com/containers/podman/releases/tag/v4.7.0
-      type: fast-track
-  podman-plugins:
-    evr: 5:4.7.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b7c4711bd0
-      reason: https://github.com/containers/podman/releases/tag/v4.7.0
-      type: fast-track

From bc9ce57980a1fd7d2870993a6b1b77dd5220a268 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 28 Sep 2023 15:45:16 -0400
Subject: [PATCH 1854/2157] 05core/dracut: enable `iscsi` module

In 9997df7b ("Move from `initramfs-args` in manifest to `dracut.conf.d`
files"), we migrated FCOS to use dracut dropins rather than CLI args.
One notable semantic change was that these dropins were also now
inherited by RHCOS.

One of the migrated directives was omitting the `iscsi` module. But RHCOS
OTOH has always included the `iscsi` dracut module, using `--add iscsi`.
This apparent conflict was noted in a comment and deemed safe[[1]].
And in fact, it *did* seem to work at the time, but only because there
was a bug in dracut: RHCOS happened to define some `--omit` arguments
as well and the bug made it so that the CLI arguments overrode the
inherited `omit_dracutmodules` dropin directives rather than being added
to them.[[2]]

The presence of this bug meant that `--add iscsi` still worked.
However, in RHEL9, the bug was fixed[[3]], which meant that we now
stopped pulling in the `iscsi` module since it's listed in the set
of modules to omit (`--add` arguments cannot undo earlier `--omit`/
`omit_dracutmodules` arguments).

The minimal fix needed here is to stop omitting the `iscsi` module. This
fixes https://issues.redhat.com/browse/OCPBUGS-19811, where some users
had already taken a dep on iSCSI iBFT support for autoconfiguration. It
also aligns with efforts to support root-on-iSCSI in the near future,
and there's no reason to not have that work happen in FCOS too.

A related larger task is to stop using `initramfs-args` in RHCOS since
it's now deprecated.[[4]]

[1]: https://github.com/coreos/fedora-coreos-config/pull/1828#discussion_r918220313
[2]: https://github.com/dracutdevs/dracut/issues/1341
[3]: https://github.com/dracutdevs/dracut/pull/1342
[4]: https://github.com/coreos/rpm-ostree/pull/3834
---
 .../usr/lib/dracut/dracut.conf.d/coreos-omits.conf  |  4 ++--
 tests/kola/files/initrd/expected-contents           | 13 +++++++++++++
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
index 3833a163ba..7aca06dff6 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
@@ -3,8 +3,8 @@
 # in /var/ and then ignition can't cleanly unmount it. For example:
 # https://github.com/dracutdevs/dracut/blob/1856ae95c873a6fe855b3dccd0144f1a96b9e71c/modules.d/95nfs/nfs-start-rpc.sh#L7
 # See also discussion in https://github.com/coreos/fedora-coreos-config/pull/60
-# Further, we currently do not use LVM, iSCSI or dmraid
-omit_dracutmodules+=" nfs lvm iscsi dmraid "
+# Further, we currently do not use LVM or dmraid
+omit_dracutmodules+=" nfs lvm dmraid "
 # More storage modules we don't use
 omit_dracutmodules+=" fcoe fcoe-uefi nbd "
 # We use NetworkManager
diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index 6db63a18a9..c595b21396 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -27,6 +27,12 @@ required_initrd_files=(
     "/usr/lib/udev/google_nvme_id"
 )
 
+required_initrd_kmods=(
+    # iSCSI iBFT kernel module
+    # https://issues.redhat.com/browse/OCPBUGS-19811
+    "iscsi_ibft"
+)
+
 tmpd=$(mktemp -d)
 cleanup() {
     rm -r "${tmpd}"
@@ -40,4 +46,11 @@ for file in "${required_initrd_files[@]}"; do
     fi
 done
 
+for kmod in "${required_initrd_kmods[@]}"; do
+    found=$(find "${tmpd}/usr/lib/modules/$(uname -r)" -name "${kmod}.ko*")
+    if [ -z "${found}" ]; then
+        fatal "kernel module ${kmod} was not found in initrd"
+    fi
+done
+
 ok "Found expected initrd files"

From eeed19ea5079390121eedb6e104af096b6c4626b Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Fri, 29 Sep 2023 11:13:13 -0700
Subject: [PATCH 1855/2157] denylist: snooze kdump.crash for ppc64le in rawhide

Ref issue:https://github.com/coreos/fedora-coreos-tracker/issues/1588
---
 kola-denylist.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b960963270..b8bba5c2f8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -27,3 +27,11 @@
   warn: true
   streams:
     - rawhide
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
+  snooze: 2023-10-24
+  warn: true
+  arches:
+    - ppc64le
+  streams:
+    - rawhide

From f82b221f0c2848eedadc0083ebfb9ed2a8b6bf2e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 29 Sep 2023 14:52:51 -0400
Subject: [PATCH 1856/2157] kola/expected-contents: only check for `iscsi_ibft`
 on supported arches

The module is currently only built on x86_64. It looks like support for
aarch64 is possible but just not enabled, so just grep for the config
knob.

Fixes bc9ce579 ("05core/dracut: enable `iscsi` module").
---
 tests/kola/files/initrd/expected-contents | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/tests/kola/files/initrd/expected-contents b/tests/kola/files/initrd/expected-contents
index c595b21396..85470ea4d0 100755
--- a/tests/kola/files/initrd/expected-contents
+++ b/tests/kola/files/initrd/expected-contents
@@ -27,11 +27,13 @@ required_initrd_files=(
     "/usr/lib/udev/google_nvme_id"
 )
 
-required_initrd_kmods=(
+required_initrd_kmods=()
+
+if grep CONFIG_ISCSI_IBFT=m "/usr/lib/modules/$(uname -r)/config"; then
     # iSCSI iBFT kernel module
     # https://issues.redhat.com/browse/OCPBUGS-19811
-    "iscsi_ibft"
-)
+    required_initrd_kmods+=("iscsi_ibft")
+fi
 
 tmpd=$(mktemp -d)
 cleanup() {

From a104bc73c866fa928b9b001e10d186792a53367e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Sep 2023 23:46:40 +0000
Subject: [PATCH 1857/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/777/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 38 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 73 insertions(+), 73 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fe5db988ac..93585050e4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -49,10 +49,10 @@
       "evra": "3.1.2-1.fc38.aarch64"
     },
     "authselect": {
-      "evra": "1.4.2-2.fc38.aarch64"
+      "evra": "1.4.3-1.fc38.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.4.2-2.fc38.aarch64"
+      "evra": "1.4.3-1.fc38.aarch64"
     },
     "avahi-libs": {
       "evra": "0.8-22.fc38.aarch64"
@@ -67,16 +67,16 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.17-1.fc38.aarch64"
+      "evra": "32:9.18.19-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.17-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.17-1.fc38.aarch64"
+      "evra": "32:9.18.19-1.fc38.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.9-1.fc38.aarch64"
+      "evra": "0.2.11-3.fc38.aarch64"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.9-1.fc38.aarch64"
+      "evra": "1.9.2-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.6-1.fc38.aarch64"
+      "evra": "2:4.18.7-1.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.6-1.fc38.aarch64"
+      "evra": "2:4.18.7-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -961,7 +961,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc38.aarch64"
+      "evra": "2.6.6-1.fc38.aarch64"
     },
     "openssh": {
       "evra": "9.0p1-17.fc38.aarch64"
@@ -1027,10 +1027,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.6.2-3.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-3.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1060,7 +1060,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.5-1.fc38.aarch64"
+      "evra": "2:7.2.6-1.fc38.aarch64"
     },
     "readline": {
       "evra": "8.2-3.fc38.aarch64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.8-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.6-1.fc38.aarch64"
+      "evra": "2:4.18.7-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.6-1.fc38.noarch"
+      "evra": "2:4.18.7-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.6-1.fc38.aarch64"
+      "evra": "2:4.18.7-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-27T00:00:00Z",
+    "generated": "2023-09-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-26T23:27:21Z"
+        "generated": "2023-09-29T02:15:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-27T02:37:49Z"
+        "generated": "2023-09-29T01:19:36Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4ce34333ed..97be6bfc44 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -49,10 +49,10 @@
       "evra": "3.1.2-1.fc38.ppc64le"
     },
     "authselect": {
-      "evra": "1.4.2-2.fc38.ppc64le"
+      "evra": "1.4.3-1.fc38.ppc64le"
     },
     "authselect-libs": {
-      "evra": "1.4.2-2.fc38.ppc64le"
+      "evra": "1.4.3-1.fc38.ppc64le"
     },
     "avahi-libs": {
       "evra": "0.8-22.fc38.ppc64le"
@@ -70,13 +70,13 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.17-1.fc38.ppc64le"
+      "evra": "32:9.18.19-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.17-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.17-1.fc38.ppc64le"
+      "evra": "32:9.18.19-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.9-1.fc38.ppc64le"
+      "evra": "1.9.2-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.6-1.fc38.ppc64le"
+      "evra": "2:4.18.7-1.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.6-1.fc38.ppc64le"
+      "evra": "2:4.18.7-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -955,7 +955,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc38.ppc64le"
+      "evra": "2.6.6-1.fc38.ppc64le"
     },
     "openssh": {
       "evra": "9.0p1-17.fc38.ppc64le"
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.6.2-3.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-3.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1063,7 +1063,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.5-1.fc38.ppc64le"
+      "evra": "2:7.2.6-1.fc38.ppc64le"
     },
     "readline": {
       "evra": "8.2-3.fc38.ppc64le"
@@ -1099,13 +1099,13 @@
       "evra": "2:1.1.8-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.6-1.fc38.ppc64le"
+      "evra": "2:4.18.7-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.6-1.fc38.noarch"
+      "evra": "2:4.18.7-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.6-1.fc38.ppc64le"
+      "evra": "2:4.18.7-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-27T00:00:00Z",
+    "generated": "2023-09-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-26T23:26:59Z"
+        "generated": "2023-09-28T16:16:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-27T02:37:56Z"
+        "generated": "2023-09-29T01:19:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index cc0f14798b..ba2afccca9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -49,10 +49,10 @@
       "evra": "3.1.2-1.fc38.s390x"
     },
     "authselect": {
-      "evra": "1.4.2-2.fc38.s390x"
+      "evra": "1.4.3-1.fc38.s390x"
     },
     "authselect-libs": {
-      "evra": "1.4.2-2.fc38.s390x"
+      "evra": "1.4.3-1.fc38.s390x"
     },
     "avahi-libs": {
       "evra": "0.8-22.fc38.s390x"
@@ -67,13 +67,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.17-1.fc38.s390x"
+      "evra": "32:9.18.19-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.17-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.17-1.fc38.s390x"
+      "evra": "32:9.18.19-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -178,7 +178,7 @@
       "evra": "3.18-1.fc38.s390x"
     },
     "crun": {
-      "evra": "1.9-1.fc38.s390x"
+      "evra": "1.9.2-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -730,7 +730,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.6-1.fc38.s390x"
+      "evra": "2:4.18.7-1.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.6-1.fc38.s390x"
+      "evra": "2:4.18.7-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -916,7 +916,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc38.s390x"
+      "evra": "2.6.6-1.fc38.s390x"
     },
     "openssh": {
       "evra": "9.0p1-17.fc38.s390x"
@@ -979,10 +979,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.6.2-3.fc38.s390x"
+      "evra": "5:4.7.0-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-3.fc38.s390x"
+      "evra": "5:4.7.0-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1012,7 +1012,7 @@
       "evra": "20230812-1.fc38.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.5-1.fc38.s390x"
+      "evra": "2:7.2.6-1.fc38.s390x"
     },
     "readline": {
       "evra": "8.2-3.fc38.s390x"
@@ -1051,13 +1051,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.6-1.fc38.s390x"
+      "evra": "2:4.18.7-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.6-1.fc38.noarch"
+      "evra": "2:4.18.7-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.6-1.fc38.s390x"
+      "evra": "2:4.18.7-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-27T00:00:00Z",
+    "generated": "2023-09-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-26T23:27:25Z"
+        "generated": "2023-09-28T16:16:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-27T02:38:04Z"
+        "generated": "2023-09-29T01:19:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 87a0ed6683..87a898bc66 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -49,10 +49,10 @@
       "evra": "3.1.2-1.fc38.x86_64"
     },
     "authselect": {
-      "evra": "1.4.2-2.fc38.x86_64"
+      "evra": "1.4.3-1.fc38.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.4.2-2.fc38.x86_64"
+      "evra": "1.4.3-1.fc38.x86_64"
     },
     "avahi-libs": {
       "evra": "0.8-22.fc38.x86_64"
@@ -67,16 +67,16 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.17-1.fc38.x86_64"
+      "evra": "32:9.18.19-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.17-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.17-1.fc38.x86_64"
+      "evra": "32:9.18.19-1.fc38.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.9-1.fc38.x86_64"
+      "evra": "0.2.11-3.fc38.x86_64"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.9-1.fc38.x86_64"
+      "evra": "1.9.2-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -772,7 +772,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.6-1.fc38.x86_64"
+      "evra": "2:4.18.7-1.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -841,7 +841,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.6-1.fc38.x86_64"
+      "evra": "2:4.18.7-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -967,7 +967,7 @@
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
     },
     "openldap": {
-      "evra": "2.6.4-1.fc38.x86_64"
+      "evra": "2.6.6-1.fc38.x86_64"
     },
     "openssh": {
       "evra": "9.0p1-17.fc38.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.6.2-3.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-3.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1099,13 +1099,13 @@
       "evra": "2:1.1.8-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.6-1.fc38.x86_64"
+      "evra": "2:4.18.7-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.6-1.fc38.noarch"
+      "evra": "2:4.18.7-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.6-1.fc38.x86_64"
+      "evra": "2:4.18.7-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-27T00:00:00Z",
+    "generated": "2023-09-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-26T23:27:34Z"
+        "generated": "2023-09-29T02:14:05Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-27T02:38:11Z"
+        "generated": "2023-09-29T01:19:58Z"
       }
     }
   }

From 61d7b8c8ca835595281efe219f1a0c068b90d939 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 2 Oct 2023 20:53:53 +0000
Subject: [PATCH 1858/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/783/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 93585050e4..65c5d1b38c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-29T00:00:00Z",
+    "generated": "2023-10-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-29T02:15:05Z"
+        "generated": "2023-10-01T23:23:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-29T01:19:36Z"
+        "generated": "2023-10-02T01:19:32Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 97be6bfc44..d85f14fcf9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-29T00:00:00Z",
+    "generated": "2023-10-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-28T16:16:33Z"
+        "generated": "2023-10-01T23:23:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-29T01:19:43Z"
+        "generated": "2023-10-02T01:19:39Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ba2afccca9..680365a856 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-29T00:00:00Z",
+    "generated": "2023-10-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-28T16:16:26Z"
+        "generated": "2023-10-01T23:22:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-29T01:19:50Z"
+        "generated": "2023-10-02T01:19:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 87a898bc66..7674d61e68 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-29T00:00:00Z",
+    "generated": "2023-10-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-29T02:14:05Z"
+        "generated": "2023-10-01T23:23:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-29T01:19:58Z"
+        "generated": "2023-10-02T01:19:54Z"
       }
     }
   }

From 17fd68358b09eced49940b6651b438af6cfd75ed Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 4 Oct 2023 09:42:33 -0400
Subject: [PATCH 1859/2157] manifests: add crun-wasm.yaml

This will be sourced by `next-devel` and `next` as part of
https://github.com/coreos/fedora-coreos-tracker/issues/1375.
---
 manifests/crun-wasm.yaml | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 manifests/crun-wasm.yaml

diff --git a/manifests/crun-wasm.yaml b/manifests/crun-wasm.yaml
new file mode 100644
index 0000000000..e9700c6bdc
--- /dev/null
+++ b/manifests/crun-wasm.yaml
@@ -0,0 +1,4 @@
+# for podman experimentation:
+# https://github.com/coreos/fedora-coreos-tracker/issues/1375
+packages:
+  - crun-wasm wasmedge-rt

From e6e5fb76603590ff33bafd50780ff1785903fd9f Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Wed, 4 Oct 2023 13:29:28 -0400
Subject: [PATCH 1860/2157] overrides: fast-track glibc-2.37-10.fc38

See: https://github.com/coreos/fedora-coreos-tracker/issues/1591
---
 manifest-lock.overrides.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..696f71ffab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,30 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  glibc:
+    evr: 2.37-10.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
+      type: fast-track
+  glibc-common:
+    evr: 2.37-10.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
+      type: fast-track
+  glibc-gconv-extra:
+    evr: 2.37-10.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
+      type: fast-track
+  glibc-minimal-langpack:
+    evr: 2.37-10.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 7bde417b9f9fdb1dd81c01667a32a393d5653c17 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 5 Oct 2023 00:14:26 +0000
Subject: [PATCH 1861/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 24 ------------------------
 1 file changed, 24 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 696f71ffab..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,30 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  glibc:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-common:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-gconv-extra:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-minimal-langpack:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 196dcbc614699311bd52ec112fedc3d6474e4830 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 5 Oct 2023 18:06:26 +0200
Subject: [PATCH 1862/2157] tests/kola/docker/basic: Only run on FCOS

Fixes: aa437320 tests/kola/docker: Add a basic docker run test
---
 tests/kola/docker/basic | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
index 7ab6bf9979..c1cbafcc1f 100755
--- a/tests/kola/docker/basic
+++ b/tests/kola/docker/basic
@@ -2,6 +2,8 @@
 ## kola:
 ##   # Must not run this test with another podman test
 ##   exclusive: true
+##   # We only ship moby/docker in FCOS
+##   distros: fcos
 ##   # This test pulls a container image from remote sources.
 ##   tags: "platform-independent needs-internet"
 ##   description: Verify that running a basic container with docker works.

From b1445540a9be6960c64bd6e630e8ed852e5c4095 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 4 Oct 2023 18:59:13 -0400
Subject: [PATCH 1863/2157] Revert "coreos-teardown-initramfs: use
 NetworkManager to teardown networking"

This reverts commit b8607dabb5e1a5a0795fe11b5089889038c150f6.

We're seeing around 75% failure rate with this patch when provisioning
RHCOS on AWS with m4 instance types. The error message is:

    Error: failed to set networking: Timeout was reached

I confirmed that D-Bus and NM are definitely still running when we issue
the `nmcli` call. Still, I think there's a subtle race somewhere (likely
combined with the specific network adapter of m4 instance types), that
we need to plug. We need more visibility into why NM isn't responding.
Anyway, for now let's revert this to not regress.

Fixes: https://issues.redhat.com/browse/OCPBUGS-17154
Probably fixes: https://issues.redhat.com/browse/OCPBUGS-19870
---
 .../coreos-teardown-initramfs.service         | 14 ++---
 .../coreos-teardown-initramfs.sh              | 61 +++++++++++++++----
 2 files changed, 56 insertions(+), 19 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
index 9703eec33a..b08c827bc5 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
@@ -18,13 +18,13 @@ DefaultDependencies=false
 Before=ignition-mount.service
 Before=ignition-complete.target
 
-# Since we are tearing down networking using NetworkManager itself
-# we need to make sure NetworkManager is running. Similarly
-# dbus-broker since nmcli talks to the daemon via DBUS. Since the
-# ordering for ExecStop is the opposite of ExecStart we need to use
-# `After=` here.
-After=nm-initrd.service
-After=dbus-broker.service
+# Since we are tearing down networking we need to make sure
+# NetworkManager has been stopped, otherwise it'll be trying
+# to react to our delete/down operations. Since the ordering
+# for ExecStop is the opposite of ExecStart we need to use
+# `Before=nm-initrd.service`.
+# https://issues.redhat.com/browse/OCPBUGS-11052
+Before=nm-initrd.service
 
 # Make sure ExecStop= runs before we switch root
 Conflicts=initrd-switch-root.target umount.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index afe69a99b4..35d681418b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -182,15 +182,55 @@ propagate_ifname_udev_rules() {
     fi
 }
 
+down_interface() {
+    echo "info: taking down network device: $1"
+    # On recommendation from the NM team let's try to delete the device
+    # first and if that doesn't work then set it to down and flush any
+    # associated addresses. Deleting virtual devices (bonds, teams, bridges,
+    # ip-tunnels, etc) will clean up any associated kernel resources. A real
+    # device can't be deleted so that will fail and we'll fallback to setting
+    # it down and flushing addresses.
+    if ! ip link delete $1; then
+        ip link set $1 down
+        ip addr flush dev $1
+    fi
+}
+
+# Iterate through the interfaces in the machine and take them down.
+# Note that in the future we would like to possibly use `nmcli` networking off`
+# for this. See the following two comments for details:
+# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
+# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599746049
+down_interfaces() {
+    if ! [ -z "$(ls /sys/class/net)" ]; then
+        for f in /sys/class/net/*; do
+            interface=$(basename "$f")
+            # The `bonding_masters` entry is not a true interface and thus
+            # cannot be taken down. Also skip local loopback
+            case "$interface" in
+                "lo" | "bonding_masters")
+                    continue
+                    ;;
+            esac
+            # When we start taking down devices some other devices can
+            # start to disappear (for example vlan on top of interface).
+            # If the device we're about to take down has disappeared
+            # since the start of this loop then skip taking it down.
+            if [ ! -e "$f" ]; then
+                echo "info: skipping teardown of ${interface}; no longer exists."
+                continue
+            fi
+            down_interface $interface
+        done
+    fi
+}
+
 main() {
     # Load libraries from dracut
     load_dracut_libs
 
-    # Take down all networking set up in the initramfs
-    if systemctl is-active --quiet nm-initrd.service; then
-        echo "info: taking down initramfs networking"
-        nmcli networking off
-    fi
+    # Take down all interfaces set up in the initramfs
+    down_interfaces
 
     # Clean up all routing
     echo "info: flushing all routing"
@@ -209,13 +249,10 @@ main() {
         propagate_ifname_udev_rules
     fi
 
-    # Configuration has been propagated, but we can't clean up
-    # /run/NetworkManager because NM is still running. Let's drop
-    # down a tmpfiles.d snippet so that it's cleaned up first thing
-    # in the real root. Doing it this way prevents us having to write
-    # another unit to do the cleanup after this service has finished.
-    echo "R! /run/NetworkManager - - - - -" > \
-        /run/tmpfiles.d/15-teardown-initramfs-networkmanager.conf
+    # Now that the configuration has been propagated (or not)
+    # clean it up so that no information from outside of the
+    # real root is passed on to NetworkManager in the real root
+    rm -rf /run/NetworkManager/
 
     rm -f /run/udev/rules.d/80-coreos-boot-disk.rules
     rm -f /dev/disk/by-id/coreos-boot-disk

From dd9c4f02e64de32d38a533552d006bc62db8a574 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 6 Oct 2023 04:15:24 +0000
Subject: [PATCH 1864/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/795/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 65c5d1b38c..16f4206c68 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.aarch64"
+      "evra": "1.8.0-1.fc38.aarch64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.aarch64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -739,7 +739,7 @@
       "evra": "0.1.5-53.fc38.aarch64"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.aarch64"
+      "evra": "1.16.0-2.fc38.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -925,7 +925,7 @@
       "evra": "2.0-0.65.20160912git.fc38.aarch64"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.aarch64"
+      "evra": "1.8.0-2.fc38.aarch64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.aarch64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1968-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.aarch64"
+      "evra": "2:9.0.1968-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:09Z"
+        "generated": "2023-10-05T22:18:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:32Z"
+        "generated": "2023-10-06T01:16:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d85f14fcf9..e1dc4f6068 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.ppc64le"
+      "evra": "1.8.0-1.fc38.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.ppc64le"
@@ -367,16 +367,16 @@
       "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -730,7 +730,7 @@
       "evra": "0.1.5-53.fc38.ppc64le"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.ppc64le"
+      "evra": "1.16.0-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -919,7 +919,7 @@
       "evra": "2.0-0.65.20160912git.fc38.ppc64le"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.ppc64le"
+      "evra": "1.8.0-2.fc38.ppc64le"
     },
     "nettle": {
       "evra": "3.8-3.fc38.ppc64le"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1968-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.ppc64le"
+      "evra": "2:9.0.1968-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:25Z"
+        "generated": "2023-10-05T22:17:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:39Z"
+        "generated": "2023-10-06T01:17:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 680365a856..0924900e57 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.s390x"
+      "evra": "1.8.0-1.fc38.s390x"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.s390x"
@@ -355,16 +355,16 @@
       "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -700,7 +700,7 @@
       "evra": "0.1.5-53.fc38.s390x"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.s390x"
+      "evra": "1.16.0-2.fc38.s390x"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -883,7 +883,7 @@
       "evra": "2.0-0.65.20160912git.fc38.s390x"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.s390x"
+      "evra": "1.8.0-2.fc38.s390x"
     },
     "nettle": {
       "evra": "3.8-3.fc38.s390x"
@@ -1063,10 +1063,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1968-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.s390x"
+      "evra": "2:9.0.1968-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:22:17Z"
+        "generated": "2023-10-05T22:18:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:47Z"
+        "generated": "2023-10-06T01:17:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7674d61e68..e86ab77c52 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.x86_64"
+      "evra": "1.8.0-1.fc38.x86_64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.x86_64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -742,7 +742,7 @@
       "evra": "0.1.5-53.fc38.x86_64"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.x86_64"
+      "evra": "1.16.0-2.fc38.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -931,7 +931,7 @@
       "evra": "2.0-0.65.20160912git.fc38.x86_64"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.x86_64"
+      "evra": "1.8.0-2.fc38.x86_64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.x86_64"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1968-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.x86_64"
+      "evra": "2:9.0.1968-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:20Z"
+        "generated": "2023-10-05T22:18:45Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:54Z"
+        "generated": "2023-10-06T01:17:16Z"
       }
     }
   }

From 1905f189ff908e421750ce3b527da5d4b70c2ab1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 7 Oct 2023 22:58:03 +0000
Subject: [PATCH 1865/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/798/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 16f4206c68..b685706d58 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -406,16 +406,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.aarch64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1968-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1968-1.fc38.aarch64"
+      "evra": "2:9.0.1984-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-06T00:00:00Z",
+    "generated": "2023-10-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-05T22:18:28Z"
+        "generated": "2023-10-06T23:02:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-06T01:16:53Z"
+        "generated": "2023-10-07T01:36:13Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e1dc4f6068..4374ba3e58 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -394,19 +394,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.ppc64le"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1968-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1968-1.fc38.ppc64le"
+      "evra": "2:9.0.1984-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-06T00:00:00Z",
+    "generated": "2023-10-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-05T22:17:49Z"
+        "generated": "2023-10-06T23:01:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-06T01:17:01Z"
+        "generated": "2023-10-07T01:36:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0924900e57..6d8d5a3c83 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1968-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1968-1.fc38.s390x"
+      "evra": "2:9.0.1984-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-06T00:00:00Z",
+    "generated": "2023-10-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-05T22:18:20Z"
+        "generated": "2023-10-06T23:01:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-06T01:17:08Z"
+        "generated": "2023-10-07T01:36:30Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e86ab77c52..ee84c11bfc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -406,22 +406,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.0-6.fc38.x86_64"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1968-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1968-1.fc38.x86_64"
+      "evra": "2:9.0.1984-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-06T00:00:00Z",
+    "generated": "2023-10-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-05T22:18:45Z"
+        "generated": "2023-10-06T23:03:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-06T01:17:16Z"
+        "generated": "2023-10-07T01:36:38Z"
       }
     }
   }

From b001b9b7d366217f59974779bd2df4aeeb71b08d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 8 Oct 2023 22:57:50 +0000
Subject: [PATCH 1866/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/800/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b685706d58..0aded22f9f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.aarch64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-07T00:00:00Z",
+    "generated": "2023-10-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-06T23:02:22Z"
+        "generated": "2023-10-07T23:02:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-07T01:36:13Z"
+        "generated": "2023-10-08T02:42:55Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4374ba3e58..7c5b369dd1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-07T00:00:00Z",
+    "generated": "2023-10-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-06T23:01:38Z"
+        "generated": "2023-10-07T23:01:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-07T01:36:21Z"
+        "generated": "2023-10-08T02:43:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6d8d5a3c83..89073d5bc8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -97,7 +97,7 @@
       "evra": "1.19.1-1.fc38.s390x"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-07T00:00:00Z",
+    "generated": "2023-10-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-06T23:01:31Z"
+        "generated": "2023-10-07T23:01:01Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-07T01:36:30Z"
+        "generated": "2023-10-08T02:43:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ee84c11bfc..b3ce7139a0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.x86_64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-07T00:00:00Z",
+    "generated": "2023-10-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-06T23:03:47Z"
+        "generated": "2023-10-07T23:03:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-07T01:36:38Z"
+        "generated": "2023-10-08T02:43:19Z"
       }
     }
   }

From dc050c8d8cb0539fb50981b11c59e4829380dd82 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 9 Oct 2023 23:47:51 +0000
Subject: [PATCH 1867/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/802/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0aded22f9f..c93cc281b4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.aarch64"
     },
     "dracut": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.aarch64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.aarch64"
+      "evra": "1.9.6-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.aarch64"
+      "evra": "2023.8-2.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.aarch64"
+      "evra": "2023.8-2.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-08T00:00:00Z",
+    "generated": "2023-10-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-07T23:02:09Z"
+        "generated": "2023-10-08T23:02:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-08T02:42:55Z"
+        "generated": "2023-10-09T01:46:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7c5b369dd1..1a7bf28545 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.ppc64le"
     },
     "dracut": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.ppc64le"
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.ppc64le"
+      "evra": "1.9.6-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -1081,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.ppc64le"
+      "evra": "2023.8-2.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.ppc64le"
+      "evra": "2023.8-2.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-08T00:00:00Z",
+    "generated": "2023-10-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-07T23:01:42Z"
+        "generated": "2023-10-08T23:01:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-08T02:43:03Z"
+        "generated": "2023-10-09T01:46:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 89073d5bc8..f97c9bf07f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -241,13 +241,13 @@
       "evra": "4.2-6.fc38.s390x"
     },
     "dracut": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.s390x"
@@ -337,7 +337,7 @@
       "evra": "3.14.1-1.fc38.s390x"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.s390x"
+      "evra": "1.9.6-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -1030,10 +1030,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.s390x"
+      "evra": "2023.8-2.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.s390x"
+      "evra": "2023.8-2.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-08T00:00:00Z",
+    "generated": "2023-10-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-07T23:01:01Z"
+        "generated": "2023-10-08T23:00:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-08T02:43:11Z"
+        "generated": "2023-10-09T01:47:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b3ce7139a0..1e7127a49c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.x86_64"
     },
     "dracut": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.x86_64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.x86_64"
+      "evra": "1.9.6-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -1081,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.x86_64"
+      "evra": "2023.8-2.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.x86_64"
+      "evra": "2023.8-2.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-08T00:00:00Z",
+    "generated": "2023-10-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-07T23:03:10Z"
+        "generated": "2023-10-08T23:01:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-08T02:43:19Z"
+        "generated": "2023-10-09T01:47:13Z"
       }
     }
   }

From 842197e0b2519b002f9fdbdc95fb7f05c2070f93 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 10 Oct 2023 12:17:41 -0400
Subject: [PATCH 1868/2157] ci/buildroot: allow arch-specific deps, make `lld`
 arch-specific

`lld` doesn't exist on s390x. Set things up similarly to how we have it
in cosa with our deps by having separate arch-specific dep files.
---
 ci/buildroot/buildroot-reqs-aarch64.txt | 1 +
 ci/buildroot/buildroot-reqs-ppc64le.txt | 1 +
 ci/buildroot/buildroot-reqs-x86_64.txt  | 1 +
 ci/buildroot/buildroot-reqs.txt         | 2 +-
 ci/buildroot/install-buildroot.sh       | 6 ++++++
 5 files changed, 10 insertions(+), 1 deletion(-)
 create mode 100644 ci/buildroot/buildroot-reqs-aarch64.txt
 create mode 100644 ci/buildroot/buildroot-reqs-ppc64le.txt
 create mode 100644 ci/buildroot/buildroot-reqs-x86_64.txt

diff --git a/ci/buildroot/buildroot-reqs-aarch64.txt b/ci/buildroot/buildroot-reqs-aarch64.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-aarch64.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs-ppc64le.txt b/ci/buildroot/buildroot-reqs-ppc64le.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-ppc64le.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs-x86_64.txt b/ci/buildroot/buildroot-reqs-x86_64.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-x86_64.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index bf3db9c8bd..afe92d4b73 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -43,7 +43,7 @@ attr
 gjs
 
 # Also, add clang since it's useful at least in CI for C/C++ projects
-clang lld
+clang
 # And the tools such as clang-format, used for style checking
 clang-tools-extra
 # All C/C++ projects should have CI that uses the sanitizers
diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
index 6de1d78a57..5176f1d896 100755
--- a/ci/buildroot/install-buildroot.sh
+++ b/ci/buildroot/install-buildroot.sh
@@ -6,9 +6,15 @@ set -euo pipefail
 dn=$(dirname "$0")
 tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
 
+arch=$(arch)
+
 echo "Installing base build requirements"
 dnf -y install /usr/bin/xargs 'dnf-command(builddep)'
 deps=$(grep -v '^#' "${dn}"/buildroot-reqs.txt)
+if [ -f "${dn}/buildroot-reqs-${arch}.txt" ]; then
+  deps+=" "
+  deps+=$(grep -v '^#' "${dn}/buildroot-reqs-${arch}.txt")
+fi
 echo "${deps}" | xargs dnf -y install
 
 echo "Installing build dependencies of primary packages"

From d972c54e3e0da491be26d02d43aae190ff70da5a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 10 Oct 2023 12:17:42 -0400
Subject: [PATCH 1869/2157] ci/buildroot: make builddep work on !x86_64

Source RPMs are arch-specific because the buildreqs that get converted
into RPM requires are rendered from the spec file, which may have arch
conditionals. So we can't take an SRPM created on an x86_64 machine and
use it on !x86_64. This is what `dnf builddep foo` does under the hood.

Work around this by rebuilding the SRPMs.

See also: https://bugzilla.redhat.com/show_bug.cgi?id=1402784#c6

(Another option mentioned there is to point straight at the spec file
in dist-git, but some packages (at least systemd) have spec files that
source other files and spec parsing would fail if we didn't clone the
whole repo, which gets heavyweight.)
---
 ci/buildroot/install-buildroot.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
index 5176f1d896..eb4d84502d 100755
--- a/ci/buildroot/install-buildroot.sh
+++ b/ci/buildroot/install-buildroot.sh
@@ -19,7 +19,14 @@ echo "${deps}" | xargs dnf -y install
 
 echo "Installing build dependencies of primary packages"
 brs=$(grep -v '^#' "${dn}"/buildroot-buildreqs.txt)
-echo "${brs}" | xargs dnf -y builddep
+(cd "${tmpd}" && mkdir rpmbuild
+ echo "${brs}" | xargs dnf download --source
+ # rebuild the SRPM for this arch; see
+ # https://bugzilla.redhat.com/show_bug.cgi?id=1402784#c6
+ find . -name '*.src.rpm' -print0 | xargs -0n 1 rpmbuild -rs --nodeps \
+    -D "%_topdir $PWD/rpmbuild" -D "%_tmppath %{_topdir}/tmp"
+ dnf builddep -y rpmbuild/SRPMS/*.src.rpm)
+rm -rf "${tmpd:?}"/*
 
 echo "Installing build dependencies from canonical spec files"
 specs=$(grep -v '^#' "${dn}"/buildroot-specs.txt)

From 59e2206455236dc9331e9b67adc05fe2556f6341 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 10 Oct 2023 13:18:45 -0700
Subject: [PATCH 1870/2157] upgrade/extended: Add rollout_wariness=0 to curl
 updates

Adding this option so we pick the latest changes to the
edges which point to the newest release during the rollout
window
---
 tests/kola/upgrade/extended/test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 372e9b9084..5eebc130a8 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -77,7 +77,7 @@ stream=$(get_booted_deployment_json | jq -r '.["base-commit-meta"]["fedora-coreo
 
 # Pick up the last release for the current stream from the update server
 test -f /srv/updateinfo.json || \
-    curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}" > /srv/updateinfo.json
+    curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}&rollout_wariness=0" > /srv/updateinfo.json
 last_release=$(jq -r .nodes[-1].version /srv/updateinfo.json)
 last_release_index=$(jq '.nodes | length-1' /srv/updateinfo.json)
 latest_edge=$(jq -r .edges[0][1] /srv/updateinfo.json)

From b3af2b994fa10c47148945e1a645cd1e4b343ed4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 11 Oct 2023 01:36:20 +0000
Subject: [PATCH 1871/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/804/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c93cc281b4..d89863dc29 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-09T00:00:00Z",
+    "generated": "2023-10-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-08T23:02:23Z"
+        "generated": "2023-10-09T23:53:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-09T01:46:50Z"
+        "generated": "2023-10-10T01:24:25Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1a7bf28545..a3143bc1ec 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-09T00:00:00Z",
+    "generated": "2023-10-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-08T23:01:28Z"
+        "generated": "2023-10-09T23:51:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-09T01:46:58Z"
+        "generated": "2023-10-10T01:24:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f97c9bf07f..066ffadfd6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -466,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-09T00:00:00Z",
+    "generated": "2023-10-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-08T23:00:35Z"
+        "generated": "2023-10-09T23:50:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-09T01:47:05Z"
+        "generated": "2023-10-10T01:24:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1e7127a49c..97716be8c8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -511,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-09T00:00:00Z",
+    "generated": "2023-10-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-08T23:01:50Z"
+        "generated": "2023-10-09T23:52:11Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-09T01:47:13Z"
+        "generated": "2023-10-10T01:24:48Z"
       }
     }
   }

From 42db380ec8f026877875f002835215fb188461ca Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 Oct 2023 01:30:11 +0000
Subject: [PATCH 1872/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/806/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d89863dc29..eca8a468af 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -397,7 +397,7 @@
       "evra": "3.8.1-1.fc38.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230808.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.aarch64"
@@ -691,7 +691,7 @@
       "evra": "1.8-5.fc38.aarch64"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.aarch64"
+      "evra": "1.3-1.fc38.aarch64"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.aarch64"
@@ -772,7 +772,7 @@
       "evra": "2:4.18.7-1.fc38.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.aarch64"
+      "evra": "0.7.25-1.fc38.aarch64"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.aarch64"
@@ -1264,7 +1264,7 @@
       "evra": "2.1.0-21.fc38.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.aarch64"
+      "evra": "1.3.2-1.fc38.aarch64"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-10T00:00:00Z",
+    "generated": "2023-10-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-09T23:53:35Z"
+        "generated": "2023-10-11T01:41:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-10T01:24:25Z"
+        "generated": "2023-10-11T01:26:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a3143bc1ec..0410a65d86 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -682,7 +682,7 @@
       "evra": "1.8-5.fc38.ppc64le"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.ppc64le"
+      "evra": "1.3-1.fc38.ppc64le"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.ppc64le"
@@ -769,7 +769,7 @@
       "evra": "2:4.18.7-1.fc38.ppc64le"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.ppc64le"
+      "evra": "0.7.25-1.fc38.ppc64le"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.ppc64le"
@@ -1267,7 +1267,7 @@
       "evra": "2.1.0-21.fc38.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.ppc64le"
+      "evra": "1.3.2-1.fc38.ppc64le"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-10T00:00:00Z",
+    "generated": "2023-10-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-09T23:51:38Z"
+        "generated": "2023-10-11T01:40:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-10T01:24:33Z"
+        "generated": "2023-10-11T01:26:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 066ffadfd6..44c00c4e06 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -652,7 +652,7 @@
       "evra": "1.8-5.fc38.s390x"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.s390x"
+      "evra": "1.3-1.fc38.s390x"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.s390x"
@@ -733,7 +733,7 @@
       "evra": "2:4.18.7-1.fc38.s390x"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.s390x"
+      "evra": "0.7.25-1.fc38.s390x"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.s390x"
@@ -1219,7 +1219,7 @@
       "evra": "2.1.0-21.fc38.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.s390x"
+      "evra": "1.3.2-1.fc38.s390x"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-10T00:00:00Z",
+    "generated": "2023-10-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-09T23:50:57Z"
+        "generated": "2023-10-11T01:40:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-10T01:24:41Z"
+        "generated": "2023-10-11T01:27:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 97716be8c8..665f1d9d5b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -397,7 +397,7 @@
       "evra": "3.8.1-1.fc38.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230808.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.x86_64"
@@ -694,7 +694,7 @@
       "evra": "1.8-5.fc38.x86_64"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.x86_64"
+      "evra": "1.3-1.fc38.x86_64"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.x86_64"
@@ -775,7 +775,7 @@
       "evra": "2:4.18.7-1.fc38.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.x86_64"
+      "evra": "0.7.25-1.fc38.x86_64"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.x86_64"
@@ -1267,7 +1267,7 @@
       "evra": "2.1.0-21.fc38.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.x86_64"
+      "evra": "1.3.2-1.fc38.x86_64"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-10T00:00:00Z",
+    "generated": "2023-10-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-09T23:52:11Z"
+        "generated": "2023-10-11T01:43:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-10T01:24:48Z"
+        "generated": "2023-10-11T01:27:10Z"
       }
     }
   }

From 465b1a6b0d133d529ce59a5983230dffc1845f02 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 Oct 2023 14:17:04 +0000
Subject: [PATCH 1873/2157] overrides: fast-track curl-8.0.1-5.fc38

---
 manifest-lock.overrides.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..b331c53851 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,6 +9,18 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
+  curl:
+    evr: 8.0.1-5.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b855de5c0f
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1593
+      type: fast-track
+  libcurl-minimal:
+    evr: 8.0.1-5.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b855de5c0f
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1593
+      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 5275e70c5b9896ba4404883ce89a7e1d2bd07b57 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 12 Oct 2023 23:37:41 +0000
Subject: [PATCH 1874/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/808/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index eca8a468af..5d3afc8899 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.aarch64"
+      "evra": "8.0.1-5.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -418,7 +418,7 @@
       "evra": "1:2.06-102.fc38.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.aarch64"
+      "evra": "6:0.7.1-1.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -589,7 +589,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.aarch64"
+      "evra": "8.0.1-5.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -955,7 +955,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.aarch64"
+      "evra": "2.4-3.fc38.aarch64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.aarch64"
+      "evra": "0^20231004.gf851084-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-11T00:00:00Z",
+    "generated": "2023-10-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-11T01:41:41Z"
+        "generated": "2023-10-12T16:29:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-11T01:26:46Z"
+        "generated": "2023-10-12T01:39:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0410a65d86..4cf5aeb9e2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.ppc64le"
+      "evra": "8.0.1-5.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -409,7 +409,7 @@
       "evra": "1:2.06-102.fc38.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.ppc64le"
+      "evra": "6:0.7.1-1.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -580,7 +580,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.ppc64le"
+      "evra": "8.0.1-5.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -949,7 +949,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.ppc64le"
+      "evra": "2.4-3.fc38.ppc64le"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.ppc64le"
+      "evra": "0^20231004.gf851084-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-11T00:00:00Z",
+    "generated": "2023-10-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-11T01:40:48Z"
+        "generated": "2023-10-12T16:28:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-11T01:26:54Z"
+        "generated": "2023-10-12T01:39:47Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 44c00c4e06..9dd138c26b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.s390x"
+      "evra": "8.0.1-5.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -382,7 +382,7 @@
       "evra": "3.8-3.fc38.s390x"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.s390x"
+      "evra": "6:0.7.1-1.fc38.s390x"
     },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
@@ -550,7 +550,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.s390x"
+      "evra": "8.0.1-5.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -910,7 +910,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.s390x"
+      "evra": "2.4-3.fc38.s390x"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
@@ -952,10 +952,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.s390x"
+      "evra": "0^20231004.gf851084-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-11T00:00:00Z",
+    "generated": "2023-10-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-11T01:40:20Z"
+        "generated": "2023-10-12T16:28:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-11T01:27:02Z"
+        "generated": "2023-10-12T01:39:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 665f1d9d5b..8416e23c81 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.x86_64"
+      "evra": "8.0.1-5.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -424,7 +424,7 @@
       "evra": "1:2.06-102.fc38.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.x86_64"
+      "evra": "6:0.7.1-1.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -592,7 +592,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.x86_64"
+      "evra": "8.0.1-5.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -961,7 +961,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.x86_64"
+      "evra": "2.4-3.fc38.x86_64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
@@ -1006,10 +1006,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.x86_64"
+      "evra": "0^20231004.gf851084-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-11T00:00:00Z",
+    "generated": "2023-10-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-11T01:43:19Z"
+        "generated": "2023-10-12T16:29:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-11T01:27:10Z"
+        "generated": "2023-10-12T01:40:03Z"
       }
     }
   }

From db3b5c517a6c29f800044982381a344083aae5da Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 29 Sep 2023 10:34:57 -0400
Subject: [PATCH 1875/2157] overlay/dracut: omit ifcfg module

It's been a while since we've moved to only propagating NM keyfiles from
the initrd to the real root, so we no longer need this module.

It currently still gets pulled in due to the `/etc/sysconfig/network-
scripts` directory existing in the real root (which contains a README
by default).

There's a patch upstream to make it purely opt-in[[1]], but for now let's just
explicitly opt out ourselves.

(Note this has no impact on whether ifcfg in the real root is supported,
which it still is in RHCOS. It just stops uselessly generating ifcfg
files in the initrd.)

[1]: https://github.com/dracutdevs/dracut/pull/2529
---
 .../05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf      | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
index 7aca06dff6..bf07099c46 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
@@ -9,6 +9,9 @@ omit_dracutmodules+=" nfs lvm dmraid "
 omit_dracutmodules+=" fcoe fcoe-uefi nbd "
 # We use NetworkManager
 omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
+# We only want to propagate NM keyfiles.
+# See also https://github.com/dracutdevs/dracut/pull/2529.
+omit_dracutmodules+=" ifcfg "
 # We use systemd network naming
 omit_dracutmodules+=" biosdevname "
 # Random stuff we don't want

From c31ae9be72cbfe7767dd51c7832cbfa46310fa89 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 13 Oct 2023 11:50:22 -0400
Subject: [PATCH 1876/2157] denylist: extend snooze for ext.config.docker.basic
 and coreos.ignition.ssh.key

These tests are still failing, so let's extend the snooze on them
while we wait for a fix.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b8bba5c2f8..aa8b75c1ff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,13 +17,13 @@
     - testing-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-10-13
+  snooze: 2023-10-31
   warn: true
   platforms:
     - azure
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  snooze: 2023-10-13
+  snooze: 2023-10-31
   warn: true
   streams:
     - rawhide

From fb581e1467bfc82db995f8feff2f5e6974cde425 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 14 Oct 2023 02:03:26 +0000
Subject: [PATCH 1877/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/812/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5d3afc8899..c9d4fe036c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -769,7 +769,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc38.aarch64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.8-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-12T00:00:00Z",
+    "generated": "2023-10-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T16:29:29Z"
+        "generated": "2023-10-12T23:41:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-12T01:39:40Z"
+        "generated": "2023-10-13T01:47:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4cf5aeb9e2..4cbc5f7516 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -766,7 +766,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc38.ppc64le"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -1099,13 +1099,13 @@
       "evra": "2:1.1.8-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-12T00:00:00Z",
+    "generated": "2023-10-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T16:28:51Z"
+        "generated": "2023-10-12T23:40:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-12T01:39:47Z"
+        "generated": "2023-10-13T01:47:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9dd138c26b..a21e4cda85 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -730,7 +730,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc38.s390x"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -1051,13 +1051,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-12T00:00:00Z",
+    "generated": "2023-10-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T16:28:30Z"
+        "generated": "2023-10-12T23:40:27Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-12T01:39:55Z"
+        "generated": "2023-10-13T01:47:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 8416e23c81..ec5a9141d5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -772,7 +772,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc38.x86_64"
@@ -841,7 +841,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -1099,13 +1099,13 @@
       "evra": "2:1.1.8-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-12T00:00:00Z",
+    "generated": "2023-10-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T16:29:48Z"
+        "generated": "2023-10-12T23:41:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-12T01:40:03Z"
+        "generated": "2023-10-13T01:47:25Z"
       }
     }
   }

From 4154040cc697862c691a05f08657b27ba999fa10 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 14 Oct 2023 23:57:35 +0000
Subject: [PATCH 1878/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/813/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c9d4fe036c..8dbe4806df 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -556,7 +556,7 @@
       "evra": "2.5.6-1.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -622,7 +622,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -790,7 +790,7 @@
       "evra": "2.9.1-1.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-13T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T23:41:17Z"
+        "generated": "2023-10-14T02:09:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-13T01:47:02Z"
+        "generated": "2023-10-14T01:22:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4cbc5f7516..f20dbb8165 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -547,7 +547,7 @@
       "evra": "2.5.6-1.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -613,7 +613,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -787,7 +787,7 @@
       "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-13T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T23:40:37Z"
+        "generated": "2023-10-14T02:06:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-13T01:47:09Z"
+        "generated": "2023-10-14T01:22:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a21e4cda85..dd45b2d485 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -517,7 +517,7 @@
       "evra": "2.5.6-1.fc38.s390x"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -583,7 +583,7 @@
       "evra": "1.5-2.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -751,7 +751,7 @@
       "evra": "2.9.1-1.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-13T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T23:40:27Z"
+        "generated": "2023-10-14T02:07:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-13T01:47:17Z"
+        "generated": "2023-10-14T01:23:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ec5a9141d5..2b4de7d87e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -625,7 +625,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.x86_64"
+      "evra": "13.2.1-4.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -793,7 +793,7 @@
       "evra": "2.9.1-1.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.x86_64"
+      "evra": "13.2.1-4.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-13T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-12T23:41:55Z"
+        "generated": "2023-10-14T02:07:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-13T01:47:25Z"
+        "generated": "2023-10-14T01:23:14Z"
       }
     }
   }

From b4de6674981889056cee299ac1fe6fcb3154da5d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 15 Oct 2023 00:16:07 +0000
Subject: [PATCH 1879/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index b331c53851..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,18 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  curl:
-    evr: 8.0.1-5.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b855de5c0f
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1593
-      type: fast-track
-  libcurl-minimal:
-    evr: 8.0.1-5.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-b855de5c0f
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1593
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:

From 9444fe11442b7b997bd38fb1491b1a77db7e1965 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 18 Oct 2023 00:05:41 +0000
Subject: [PATCH 1880/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/822/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8dbe4806df..1f6ed5a1ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -706,7 +706,7 @@
       "evra": "1.2.4-2.fc38.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.52.0-1.fc38.aarch64"
+      "evra": "1.52.0-2.fc38.aarch64"
     },
     "libnl3": {
       "evra": "3.7.0-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-14T00:00:00Z",
+    "generated": "2023-10-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-14T02:09:06Z"
+        "generated": "2023-10-16T16:30:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-14T01:22:50Z"
+        "generated": "2023-10-17T02:06:13Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f20dbb8165..27c459baa6 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -697,7 +697,7 @@
       "evra": "1.2.4-2.fc38.ppc64le"
     },
     "libnghttp2": {
-      "evra": "1.52.0-1.fc38.ppc64le"
+      "evra": "1.52.0-2.fc38.ppc64le"
     },
     "libnl3": {
       "evra": "3.7.0-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-14T00:00:00Z",
+    "generated": "2023-10-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-14T02:06:57Z"
+        "generated": "2023-10-16T16:30:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-14T01:22:58Z"
+        "generated": "2023-10-17T02:06:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dd45b2d485..931676ac6f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -667,7 +667,7 @@
       "evra": "1.2.4-2.fc38.s390x"
     },
     "libnghttp2": {
-      "evra": "1.52.0-1.fc38.s390x"
+      "evra": "1.52.0-2.fc38.s390x"
     },
     "libnl3": {
       "evra": "3.7.0-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-14T00:00:00Z",
+    "generated": "2023-10-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-14T02:07:15Z"
+        "generated": "2023-10-16T16:30:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-14T01:23:06Z"
+        "generated": "2023-10-17T02:06:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2b4de7d87e..d26dc1b829 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -709,7 +709,7 @@
       "evra": "1.2.4-2.fc38.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.52.0-1.fc38.x86_64"
+      "evra": "1.52.0-2.fc38.x86_64"
     },
     "libnl3": {
       "evra": "3.7.0-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-14T00:00:00Z",
+    "generated": "2023-10-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-14T02:07:48Z"
+        "generated": "2023-10-16T16:31:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-14T01:23:14Z"
+        "generated": "2023-10-17T02:06:50Z"
       }
     }
   }

From 61046ce310052fc1a04471449ea7a3ce6c81196c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 18 Oct 2023 23:51:10 +0000
Subject: [PATCH 1881/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/824/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1f6ed5a1ec..5b7fc285cb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.6-200.fc38.aarch64"
+      "evra": "6.5.7-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.6-200.fc38.aarch64"
+      "evra": "6.5.7-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.6-200.fc38.aarch64"
+      "evra": "6.5.7-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.6-200.fc38.aarch64"
+      "evra": "6.5.7-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-17T00:00:00Z",
+    "generated": "2023-10-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-16T16:30:56Z"
+        "generated": "2023-10-18T00:08:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-17T02:06:13Z"
+        "generated": "2023-10-18T01:40:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 27c459baa6..3124af3c10 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.6-200.fc38.ppc64le"
+      "evra": "6.5.7-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.6-200.fc38.ppc64le"
+      "evra": "6.5.7-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.6-200.fc38.ppc64le"
+      "evra": "6.5.7-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.6-200.fc38.ppc64le"
+      "evra": "6.5.7-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-17T00:00:00Z",
+    "generated": "2023-10-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-16T16:30:08Z"
+        "generated": "2023-10-18T00:07:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-17T02:06:24Z"
+        "generated": "2023-10-18T01:40:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 931676ac6f..f5334b6732 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -466,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.6-200.fc38.s390x"
+      "evra": "6.5.7-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.6-200.fc38.s390x"
+      "evra": "6.5.7-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.6-200.fc38.s390x"
+      "evra": "6.5.7-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.6-200.fc38.s390x"
+      "evra": "6.5.7-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-17T00:00:00Z",
+    "generated": "2023-10-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-16T16:30:19Z"
+        "generated": "2023-10-18T00:07:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-17T02:06:37Z"
+        "generated": "2023-10-18T01:41:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d26dc1b829..ab8188ea09 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -511,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.6-200.fc38.x86_64"
+      "evra": "6.5.7-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.6-200.fc38.x86_64"
+      "evra": "6.5.7-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.6-200.fc38.x86_64"
+      "evra": "6.5.7-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.6-200.fc38.x86_64"
+      "evra": "6.5.7-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-17T00:00:00Z",
+    "generated": "2023-10-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-16T16:31:09Z"
+        "generated": "2023-10-18T00:10:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-17T02:06:50Z"
+        "generated": "2023-10-18T01:41:10Z"
       }
     }
   }

From 4b6bb7fb1b9a3f396f165e5f1a2fe466fbe45140 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 19 Oct 2023 19:19:46 +0000
Subject: [PATCH 1882/2157] overrides: fast-track rust-zincati-0.0.26-2.fc38

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..f09ecbbb5f 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,3 +14,8 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
+  zincati:
+    evr: 0.0.26-2.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-06c1ba116f
+      type: fast-track

From 64f2dc320787eb27ea1d28f2932c2463ee925473 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 20 Oct 2023 16:54:38 -0400
Subject: [PATCH 1883/2157] buildroot: Enable testing-devel

Shorten the cycle for using new ostree in CI.
---
 ci/buildroot/install-buildroot.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
index eb4d84502d..2809b8a8f7 100755
--- a/ci/buildroot/install-buildroot.sh
+++ b/ci/buildroot/install-buildroot.sh
@@ -3,6 +3,10 @@ set -euo pipefail
 
 # This is invoked by Dockerfile
 
+dnf -y install dnf-plugins-core
+# We want to avoid a 7 day cycle for e.g. new ostree etc.
+dnf config-manager --set-enabled updates-testing
+
 dn=$(dirname "$0")
 tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
 

From b88c46c2b2f1d47bf270d930dc35b0fb3cb4b8aa Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 23 Oct 2023 11:44:56 -0400
Subject: [PATCH 1884/2157] tests/kernel-replace: update to f38 kernel; drop
 cruft

Here we update to the kernel from F38 GA and also drop the
rpm-ostree version check since all streams are past that. We also
drop the kernel-modules-core check since that's no longer needed
either.
---
 tests/kola/rpm-ostree/kernel-replace | 26 +++-----------------------
 1 file changed, 3 insertions(+), 23 deletions(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 0b51d570cc..a421a0b740 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -44,7 +44,7 @@ image=oci:$image_dir
 image_pull=ostree-unverified-image:$image
 tmp_imagedir=/var/tmp/fcos-tmp
 arch=$(arch)
-kver="6.0.7-301.fc37.${arch}"
+kver="6.2.9-300.fc38.${arch}"
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
@@ -71,31 +71,11 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
     td=$(mktemp -d)
     cd ${td}
     version=$(rpm-ostree --version | grep Version)
-cat > dracut_call.sh << EOF
-#!/bin/bash
-# Temporary workaround for: https://github.com/coreos/rpm-ostree/issues/4190
-# This has been fixed on rpm-ostree 2022.18 and this script will be removed
-# once that version reaches the stable coreos stream.
-if [[ "$version" == *"2023"* ]] || [[ "$version" == *"2022.19"* ]]; then
-    echo "Running rpm-ostree 2022.19 or newer.";
-else
-    echo "Running rpm-ostree 2022.18 or older, rebuilding the initramfs.";
-    echo "Building initramfs for Kernel: $kver"
-    /usr/libexec/rpm-ostree/wrapped/dracut --tmpdir /tmp/ --no-hostonly --kver $kver --reproducible \
-    -v --add ostree -f /tmp/initramfs2.img
-    mv /tmp/initramfs2.img /lib/modules/$kver/initramfs.img
-fi;
-EOF
 cat > Dockerfile << EOF
 FROM localhost/fcos
 RUN rpm-ostree cliwrap install-to-root /
-ADD dracut_call.sh dracut_call.sh
-RUN cat dracut_call.sh
-# Once kernel-modules-core is in all supported releases, we can remove this conditional.
-RUN if rpm -q kernel-modules-core; then echo "kernel-modules-core installed.. removing"; remove="--remove kernel-modules-core"; fi && \
-    chmod +x dracut_call.sh && rpm-ostree override replace \$remove \
-    https://koji.fedoraproject.org/koji/buildinfo?buildID=2084352 && \
-    ./dracut_call.sh && \
+RUN rpm-ostree override replace \
+    https://koji.fedoraproject.org/koji/buildinfo?buildID=2178613 && \
     ostree container commit
 EOF
     # Older podman found in RHEL8 blows up without /etc/resolv.conf

From 80bcd6cf781224d697f7a5892be9bfa5a93245ed Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 23 Oct 2023 22:55:41 -0400
Subject: [PATCH 1885/2157] tests/kernel-replace: extend timeout to 20m

We've seen this test timing out our ppc64le builder often lately.
It seems the heavy I/O for this test is causing that builder to
take longer and judging from the logs it looks like it is just getting
to the override of the kernel and is in the middle of the transaction
when it times out. Let't bump it to 20m.
---
 tests/kola/rpm-ostree/kernel-replace | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index a421a0b740..13cacaf0d0 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -1,7 +1,7 @@
 #!/bin/bash
 ## kola:
 ##   # Increase timeout since this test has a lot of I/O and involves rebasing
-##   timeoutMin: 15
+##   timeoutMin: 20
 ##   # We've seen some OOM when 1024M is used:
 ##   # https://github.com/coreos/fedora-coreos-tracker/issues/1506
 ##   minMemory: 2048

From f04f683c199aac4678f1ed0f50db35f76e966608 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 25 Oct 2023 01:59:45 +0000
Subject: [PATCH 1886/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/842/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 42 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 42 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 42 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 42 +++++++++++++++++++-------------------
 4 files changed, 84 insertions(+), 84 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5b7fc285cb..439af95ca4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.222.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.9.2-1.fc38.aarch64"
+      "evra": "1.10-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-10.fc38.aarch64"
+      "evra": "2.37-12.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-10.fc38.aarch64"
+      "evra": "2.37-12.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-10.fc38.aarch64"
+      "evra": "2.37-12.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-10.fc38.aarch64"
+      "evra": "2.37-12.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -445,22 +445,22 @@
       "evra": "6.4.0-1.fc38.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.1.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.1.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.1.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.1.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.noarch"
+      "evra": "1.8.9-4.fc38.1.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.aarch64"
+      "evra": "1.8.9-4.fc38.1.aarch64"
     },
     "iputils": {
       "evra": "20221126-2.fc38.aarch64"
@@ -739,7 +739,7 @@
       "evra": "0.1.5-53.fc38.aarch64"
     },
     "librepo": {
-      "evra": "1.16.0-2.fc38.aarch64"
+      "evra": "1.17.0-1.fc38.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -958,7 +958,7 @@
       "evra": "2.4-3.fc38.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
+      "evra": "6.9.9-1.fc38.aarch64"
     },
     "openldap": {
       "evra": "2.6.6-1.fc38.aarch64"
@@ -1141,7 +1141,7 @@
       "evra": "2.3.3-3.fc38.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.2.1-1.fc38.aarch64"
+      "evra": "1.2.2-1.fc38.aarch64"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.aarch64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1984-1.fc38.noarch"
+      "evra": "2:9.0.2048-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1984-1.fc38.aarch64"
+      "evra": "2:9.0.2048-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1267,7 +1267,7 @@
       "evra": "1.3.2-1.fc38.aarch64"
     },
     "zincati": {
-      "evra": "0.0.25-4.fc38.aarch64"
+      "evra": "0.0.26-2.fc38.aarch64"
     },
     "zlib": {
       "evra": "1.2.13-3.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-18T00:00:00Z",
+    "generated": "2023-10-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-18T00:08:37Z"
+        "generated": "2023-10-24T03:33:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-18T01:40:47Z"
+        "generated": "2023-10-24T01:16:44Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3124af3c10..fab50e7af4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.222.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.9.2-1.fc38.ppc64le"
+      "evra": "1.10-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -367,16 +367,16 @@
       "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-10.fc38.ppc64le"
+      "evra": "2.37-12.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-10.fc38.ppc64le"
+      "evra": "2.37-12.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-10.fc38.ppc64le"
+      "evra": "2.37-12.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-10.fc38.ppc64le"
+      "evra": "2.37-12.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -436,22 +436,22 @@
       "evra": "6.4.0-1.fc38.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.1.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.1.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.1.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.1.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.noarch"
+      "evra": "1.8.9-4.fc38.1.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.ppc64le"
+      "evra": "1.8.9-4.fc38.1.ppc64le"
     },
     "iputils": {
       "evra": "20221126-2.fc38.ppc64le"
@@ -730,7 +730,7 @@
       "evra": "0.1.5-53.fc38.ppc64le"
     },
     "librepo": {
-      "evra": "1.16.0-2.fc38.ppc64le"
+      "evra": "1.17.0-1.fc38.ppc64le"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -952,7 +952,7 @@
       "evra": "2.4-3.fc38.ppc64le"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
+      "evra": "6.9.9-1.fc38.ppc64le"
     },
     "openldap": {
       "evra": "2.6.6-1.fc38.ppc64le"
@@ -1144,7 +1144,7 @@
       "evra": "2.3.3-3.fc38.ppc64le"
     },
     "slirp4netns": {
-      "evra": "1.2.1-1.fc38.ppc64le"
+      "evra": "1.2.2-1.fc38.ppc64le"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.ppc64le"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1984-1.fc38.noarch"
+      "evra": "2:9.0.2048-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1984-1.fc38.ppc64le"
+      "evra": "2:9.0.2048-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1270,7 +1270,7 @@
       "evra": "1.3.2-1.fc38.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.25-4.fc38.ppc64le"
+      "evra": "0.0.26-2.fc38.ppc64le"
     },
     "zlib": {
       "evra": "1.2.13-3.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-18T00:00:00Z",
+    "generated": "2023-10-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-18T00:07:59Z"
+        "generated": "2023-10-24T03:33:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-18T01:40:55Z"
+        "generated": "2023-10-24T01:16:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f5334b6732..2d57d09a3b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -139,7 +139,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.222.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -178,7 +178,7 @@
       "evra": "3.18-1.fc38.s390x"
     },
     "crun": {
-      "evra": "1.9.2-1.fc38.s390x"
+      "evra": "1.10-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -355,16 +355,16 @@
       "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-10.fc38.s390x"
+      "evra": "2.37-12.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-10.fc38.s390x"
+      "evra": "2.37-12.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-10.fc38.s390x"
+      "evra": "2.37-12.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-10.fc38.s390x"
+      "evra": "2.37-12.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -409,22 +409,22 @@
       "evra": "6.4.0-1.fc38.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.s390x"
+      "evra": "1.8.9-4.fc38.1.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.s390x"
+      "evra": "1.8.9-4.fc38.1.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.s390x"
+      "evra": "1.8.9-4.fc38.1.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.s390x"
+      "evra": "1.8.9-4.fc38.1.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.noarch"
+      "evra": "1.8.9-4.fc38.1.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.s390x"
+      "evra": "1.8.9-4.fc38.1.s390x"
     },
     "iputils": {
       "evra": "20221126-2.fc38.s390x"
@@ -700,7 +700,7 @@
       "evra": "0.1.5-53.fc38.s390x"
     },
     "librepo": {
-      "evra": "1.16.0-2.fc38.s390x"
+      "evra": "1.17.0-1.fc38.s390x"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -913,7 +913,7 @@
       "evra": "2.4-3.fc38.s390x"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
+      "evra": "6.9.9-1.fc38.s390x"
     },
     "openldap": {
       "evra": "2.6.6-1.fc38.s390x"
@@ -1093,7 +1093,7 @@
       "evra": "2.3.3-3.fc38.s390x"
     },
     "slirp4netns": {
-      "evra": "1.2.1-1.fc38.s390x"
+      "evra": "1.2.2-1.fc38.s390x"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.s390x"
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1984-1.fc38.noarch"
+      "evra": "2:9.0.2048-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1984-1.fc38.s390x"
+      "evra": "2:9.0.2048-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1222,7 +1222,7 @@
       "evra": "1.3.2-1.fc38.s390x"
     },
     "zincati": {
-      "evra": "0.0.25-4.fc38.s390x"
+      "evra": "0.0.26-2.fc38.s390x"
     },
     "zlib": {
       "evra": "1.2.13-3.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-18T00:00:00Z",
+    "generated": "2023-10-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-18T00:07:42Z"
+        "generated": "2023-10-24T03:33:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-18T01:41:02Z"
+        "generated": "2023-10-24T01:17:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ab8188ea09..ba4366bd26 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -142,7 +142,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.222.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.9.2-1.fc38.x86_64"
+      "evra": "1.10-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-10.fc38.x86_64"
+      "evra": "2.37-12.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-10.fc38.x86_64"
+      "evra": "2.37-12.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-10.fc38.x86_64"
+      "evra": "2.37-12.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-10.fc38.x86_64"
+      "evra": "2.37-12.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -451,22 +451,22 @@
       "evra": "6.4.0-1.fc38.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.1.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.1.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.1.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.1.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.noarch"
+      "evra": "1.8.9-4.fc38.1.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.x86_64"
+      "evra": "1.8.9-4.fc38.1.x86_64"
     },
     "iputils": {
       "evra": "20221126-2.fc38.x86_64"
@@ -742,7 +742,7 @@
       "evra": "0.1.5-53.fc38.x86_64"
     },
     "librepo": {
-      "evra": "1.16.0-2.fc38.x86_64"
+      "evra": "1.17.0-1.fc38.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -964,7 +964,7 @@
       "evra": "2.4-3.fc38.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
+      "evra": "6.9.9-1.fc38.x86_64"
     },
     "openldap": {
       "evra": "2.6.6-1.fc38.x86_64"
@@ -1144,7 +1144,7 @@
       "evra": "2.3.3-3.fc38.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.2.1-1.fc38.x86_64"
+      "evra": "1.2.2-1.fc38.x86_64"
     },
     "snappy": {
       "evra": "1.1.9-7.fc38.x86_64"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1984-1.fc38.noarch"
+      "evra": "2:9.0.2048-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1984-1.fc38.x86_64"
+      "evra": "2:9.0.2048-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1270,7 +1270,7 @@
       "evra": "1.3.2-1.fc38.x86_64"
     },
     "zincati": {
-      "evra": "0.0.25-4.fc38.x86_64"
+      "evra": "0.0.26-2.fc38.x86_64"
     },
     "zlib": {
       "evra": "1.2.13-3.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-18T00:00:00Z",
+    "generated": "2023-10-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-18T00:10:34Z"
+        "generated": "2023-10-24T03:33:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-18T01:41:10Z"
+        "generated": "2023-10-24T01:17:07Z"
       }
     }
   }

From 6b1b56baab105ffac5cb290d5083f75e23437d2e Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 24 Oct 2023 15:35:41 -0700
Subject: [PATCH 1887/2157] denylist: extend snoozes for kdump.crash For
 rawhide ppc64le failure, we don't have a fixed kernel yet. For the aarch64
 selinux failure, it's been fixed in kexec-tools 2.0.27 which is now in F39.
 Will remove this once the prod streams have moved to F39

---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index aa8b75c1ff..7bf0fab079 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-10-24
+  snooze: 2023-11-15
   warn: true
   arches:
     - aarch64
@@ -29,7 +29,7 @@
     - rawhide
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
-  snooze: 2023-10-24
+  snooze: 2023-11-15
   warn: true
   arches:
     - ppc64le

From 472c23d6a0656867f5bf12e8f169e33617990e59 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 Oct 2023 05:03:17 +0000
Subject: [PATCH 1888/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/846/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 30 +++++++++++++++---------------
 4 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 439af95ca4..08032e521e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.7-200.fc38.aarch64"
+      "evra": "6.5.8-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.7-200.fc38.aarch64"
+      "evra": "6.5.8-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.7-200.fc38.aarch64"
+      "evra": "6.5.8-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.7-200.fc38.aarch64"
+      "evra": "6.5.8-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.10-1.fc38.aarch64"
+      "evra": "253.12-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-24T00:00:00Z",
+    "generated": "2023-10-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-24T03:33:37Z"
+        "generated": "2023-10-26T21:08:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-24T01:16:44Z"
+        "generated": "2023-10-27T01:21:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fab50e7af4..15b296d216 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.7-200.fc38.ppc64le"
+      "evra": "6.5.8-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.7-200.fc38.ppc64le"
+      "evra": "6.5.8-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.7-200.fc38.ppc64le"
+      "evra": "6.5.8-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.7-200.fc38.ppc64le"
+      "evra": "6.5.8-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1195,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.10-1.fc38.ppc64le"
+      "evra": "253.12-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-24T00:00:00Z",
+    "generated": "2023-10-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-24T03:33:29Z"
+        "generated": "2023-10-26T21:08:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-24T01:16:52Z"
+        "generated": "2023-10-27T01:21:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2d57d09a3b..ac33cb4272 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -466,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.7-200.fc38.s390x"
+      "evra": "6.5.8-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.7-200.fc38.s390x"
+      "evra": "6.5.8-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.7-200.fc38.s390x"
+      "evra": "6.5.8-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.7-200.fc38.s390x"
+      "evra": "6.5.8-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -1063,10 +1063,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1144,22 +1144,22 @@
       "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.10-1.fc38.s390x"
+      "evra": "253.12-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-24T00:00:00Z",
+    "generated": "2023-10-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-24T03:33:20Z"
+        "generated": "2023-10-26T21:08:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-24T01:17:00Z"
+        "generated": "2023-10-27T01:21:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ba4366bd26..1e538a83d0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -511,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.7-200.fc38.x86_64"
+      "evra": "6.5.8-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.7-200.fc38.x86_64"
+      "evra": "6.5.8-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.7-200.fc38.x86_64"
+      "evra": "6.5.8-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.7-200.fc38.x86_64"
+      "evra": "6.5.8-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.29-1.fc38.noarch"
+      "evra": "38.30-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1195,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.10-1.fc38.x86_64"
+      "evra": "253.12-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-24T00:00:00Z",
+    "generated": "2023-10-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-24T03:33:57Z"
+        "generated": "2023-10-26T21:10:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-24T01:17:07Z"
+        "generated": "2023-10-27T01:21:58Z"
       }
     }
   }

From 6027dbf3a5fabe66b358317ff311842c936d7673 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 15 Sep 2023 17:05:55 -0400
Subject: [PATCH 1889/2157] manifests: Move kernel into separate manifest

This is prep for rebasing on [sagano](https://gitlab.com/cgwalters-playground/sagano)
where I hit on the issue that to build images with `kernel-rt`,
we need to clearly separate the `kernel` package from userspace
stuff (`systemd`, `rpm-ostree`) etc.

Note that we'll need to make the same change in RHCOS - until
we rebase both on sagano.
---
 manifests/bootable-rpm-ostree.yaml | 5 ++---
 manifests/fedora-coreos-base.yaml  | 1 +
 manifests/kernel.yaml              | 3 +++
 3 files changed, 6 insertions(+), 3 deletions(-)
 create mode 100644 manifests/kernel.yaml

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index fdb9c8b078..9d5faddbec 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -1,12 +1,11 @@
-# This minimal base starts just from: kernel + systemd + rpm-ostree + bootloader.
+# This minimal base is the userspace: systemd + rpm-ostree + bootloader.
 # The intent of this is to inherit from this if you are doing something highly
 # custom that e.g. might not involve Ignition or podman, but you do want
 # rpm-ostree.
 # We expect most people though using coreos-assembler to inherit from
 # fedora-coreos-base.yaml.
 packages:
- # Kernel + systemd.
- - kernel systemd
+ - systemd
  # linux-firmware now a recommends so let's explicitly include it
  # https://gitlab.com/cki-project/kernel-ark/-/commit/32271d0cd9bd52d386eb35497c4876a8f041f70b
  # https://src.fedoraproject.org/rpms/kernel/c/f55c3e9ed8605ff28cb9a922efbab1055947e213?branch=rawhide
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index d48601af17..8a4f83f3d9 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -3,6 +3,7 @@
 # core functionality.
 
 include:
+  - kernel.yaml
   - system-configuration.yaml
   - ignition-and-ostree.yaml
   - file-transfer.yaml
diff --git a/manifests/kernel.yaml b/manifests/kernel.yaml
new file mode 100644
index 0000000000..1b1f1a4e29
--- /dev/null
+++ b/manifests/kernel.yaml
@@ -0,0 +1,3 @@
+packages:
+  # We use the default kernel package, but note c9s may differ
+  - kernel

From a5fb3f1317bed7df832f45d36420553b2419543f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 27 Oct 2023 06:06:14 +0000
Subject: [PATCH 1890/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f09ecbbb5f..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,8 +14,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
-  zincati:
-    evr: 0.0.26-2.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-06c1ba116f
-      type: fast-track

From 05f2ff37c5d1319ddc0835b26b81befde224a53e Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Tue, 31 Oct 2023 15:10:03 -0400
Subject: [PATCH 1891/2157] denylist: extend snooze for failing kola tests

ext.config.docker.basic and coreos.ignition.ssh.key are still
failing, so let's extend the snooze on them while we wait for a fix.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7bf0fab079..340ec40f2e 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,13 +17,13 @@
     - testing-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-10-31
+  snooze: 2023-11-15
   warn: true
   platforms:
     - azure
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  snooze: 2023-10-31
+  snooze: 2023-11-15
   warn: true
   streams:
     - rawhide

From f4f8dc72eb82a3909fc9439f2ac3494494f98ad9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 Nov 2023 00:42:09 +0000
Subject: [PATCH 1892/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/851/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 08032e521e..ffeff6d898 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -76,7 +76,7 @@
       "evra": "32:9.18.19-1.fc38.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.11-3.fc38.aarch64"
+      "evra": "0.2.12-2.fc38.aarch64"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.10-1.fc38.aarch64"
+      "evra": "1.11-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -808,7 +808,7 @@
       "evra": "0.14.1-1.fc38.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc2.fc38.aarch64"
+      "evra": "1.3.4-0.fc38.aarch64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.aarch64"
@@ -988,10 +988,10 @@
       "evra": "2023.6-1.fc38.aarch64"
     },
     "p11-kit": {
-      "evra": "0.25.0-1.fc38.aarch64"
+      "evra": "0.25.1-1.fc38.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.0-1.fc38.aarch64"
+      "evra": "0.25.1-1.fc38.aarch64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-27T00:00:00Z",
+    "generated": "2023-10-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-26T21:08:54Z"
+        "generated": "2023-10-27T20:54:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-27T01:21:34Z"
+        "generated": "2023-10-31T01:07:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 15b296d216..1393eeab20 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.10-1.fc38.ppc64le"
+      "evra": "1.11-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -805,7 +805,7 @@
       "evra": "0.14.1-1.fc38.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc2.fc38.ppc64le"
+      "evra": "1.3.4-0.fc38.ppc64le"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.ppc64le"
@@ -985,10 +985,10 @@
       "evra": "2023.6-1.fc38.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.25.0-1.fc38.ppc64le"
+      "evra": "0.25.1-1.fc38.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.25.0-1.fc38.ppc64le"
+      "evra": "0.25.1-1.fc38.ppc64le"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-27T00:00:00Z",
+    "generated": "2023-10-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-26T21:08:31Z"
+        "generated": "2023-10-27T20:53:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-27T01:21:42Z"
+        "generated": "2023-10-31T01:08:11Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ac33cb4272..6630a97c27 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -178,7 +178,7 @@
       "evra": "3.18-1.fc38.s390x"
     },
     "crun": {
-      "evra": "1.10-1.fc38.s390x"
+      "evra": "1.11-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -769,7 +769,7 @@
       "evra": "0.14.1-1.fc38.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc2.fc38.s390x"
+      "evra": "1.3.4-0.fc38.s390x"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.s390x"
@@ -940,10 +940,10 @@
       "evra": "2023.6-1.fc38.s390x"
     },
     "p11-kit": {
-      "evra": "0.25.0-1.fc38.s390x"
+      "evra": "0.25.1-1.fc38.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.25.0-1.fc38.s390x"
+      "evra": "0.25.1-1.fc38.s390x"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-27T00:00:00Z",
+    "generated": "2023-10-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-26T21:08:38Z"
+        "generated": "2023-10-27T20:53:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-27T01:21:50Z"
+        "generated": "2023-10-31T01:08:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1e538a83d0..6fe98b4cd1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -76,7 +76,7 @@
       "evra": "32:9.18.19-1.fc38.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.11-3.fc38.x86_64"
+      "evra": "0.2.12-2.fc38.x86_64"
     },
     "brcmfmac-firmware": {
       "evra": "20230919-1.fc38.noarch"
@@ -181,7 +181,7 @@
       "evra": "3.18-1.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.10-1.fc38.x86_64"
+      "evra": "1.11-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -811,7 +811,7 @@
       "evra": "0.14.1-1.fc38.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.3-1.rc2.fc38.x86_64"
+      "evra": "1.3.4-0.fc38.x86_64"
     },
     "libtool-ltdl": {
       "evra": "2.4.7-6.fc38.x86_64"
@@ -994,10 +994,10 @@
       "evra": "2023.6-1.fc38.x86_64"
     },
     "p11-kit": {
-      "evra": "0.25.0-1.fc38.x86_64"
+      "evra": "0.25.1-1.fc38.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.0-1.fc38.x86_64"
+      "evra": "0.25.1-1.fc38.x86_64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-27T00:00:00Z",
+    "generated": "2023-10-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-26T21:10:19Z"
+        "generated": "2023-10-27T20:54:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-27T01:21:58Z"
+        "generated": "2023-10-31T01:08:27Z"
       }
     }
   }

From 4b6b1b74fee50dad7d401e566eeaa3ec1a1d3d69 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 2 Nov 2023 10:06:28 -0400
Subject: [PATCH 1893/2157] Add the candidate compose repo

This patch adds a repo definition for the latest candidate compose
for a given Fedora release. This is only relevant in the lead up to
Beta and GA for a given Fedora release where packages in the candidate
compose can lead the Fedora stable repos. For our `next` stream we want
to pick up the packages quickly, so using the candidate compose as input
makes sense.

Using this repo in the `next*` streams should address
https://github.com/coreos/fedora-coreos-tracker/issues/1602
---
 fedora-candidate-compose.repo | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 fedora-candidate-compose.repo

diff --git a/fedora-candidate-compose.repo b/fedora-candidate-compose.repo
new file mode 100644
index 0000000000..b408da256f
--- /dev/null
+++ b/fedora-candidate-compose.repo
@@ -0,0 +1,21 @@
+# This yum repo entry represents the latest candidate compose for the given
+# Fedora release. During prep for final release some release blockers and
+# freeze exceptions are actually built in candidate composes first to
+# qualify them before they are promoted to the other repos. In order to pick
+# these packages up ASAP we'll pull from the latest candidate compose
+# as well. Note that if a package doesn't pass testing it will get
+# demoted from a later canddiate compose and never promoted to stable
+# repos. In this case a later bump-lockfile run will revert ot the
+# older NVR package that is currently in the stable repos. This should address:
+# https://github.com/coreos/fedora-coreos-tracker/issues/1602
+
+[fedora-candidate-compose]
+name=Fedora Candidate Compose $releasever - $basearch
+baseurl=https://kojipkgs.fedoraproject.org/compose/$releasever/latest-Fedora-$releasever/compose/Everything/$basearch/os/
+enabled=1
+#metadata_expire=7d
+repo_gpgcheck=0
+type=rpm
+gpgcheck=1
+gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
+skip_if_unavailable=False

From 6bfd01c7674f47a22697222629527b5d7e3f692d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 5 Nov 2023 01:30:47 +0000
Subject: [PATCH 1894/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/858/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 56 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 56 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 56 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 56 +++++++++++++++++++-------------------
 4 files changed, 112 insertions(+), 112 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ffeff6d898..0b419ac76e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,10 +37,13 @@
       "evra": "1.25-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231030-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -79,7 +82,7 @@
       "evra": "0.2.12-2.fc38.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.aarch64"
@@ -349,7 +352,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.6-1.fc38.aarch64"
+      "evra": "1.9.7-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -376,16 +379,16 @@
       "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-12.fc38.aarch64"
+      "evra": "2.37-13.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-12.fc38.aarch64"
+      "evra": "2.37-13.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-12.fc38.aarch64"
+      "evra": "2.37-13.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-12.fc38.aarch64"
+      "evra": "2.37-13.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -433,7 +436,7 @@
       "evra": "57-1.fc38.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.aarch64"
@@ -505,16 +508,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.8-200.fc38.aarch64"
+      "evra": "6.5.9-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.8-200.fc38.aarch64"
+      "evra": "6.5.9-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.8-200.fc38.aarch64"
+      "evra": "6.5.9-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.8-200.fc38.aarch64"
+      "evra": "6.5.9-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -618,9 +621,6 @@
     "libfido2": {
       "evra": "1.12.0-3.fc38.aarch64"
     },
-    "libgcab1": {
-      "evra": "1.5-2.fc38.aarch64"
-    },
     "libgcc": {
       "evra": "13.2.1-4.fc38.aarch64"
     },
@@ -859,10 +859,10 @@
       "evra": "2.5.1-34.fc38.aarch64"
     },
     "linux-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.aarch64"
@@ -904,7 +904,7 @@
       "evra": "4.1.1-3.fc38.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.aarch64"
@@ -952,7 +952,7 @@
       "evra": "2.0.16-2.fc38.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-3.fc38.aarch64"
@@ -988,10 +988,10 @@
       "evra": "2023.6-1.fc38.aarch64"
     },
     "p11-kit": {
-      "evra": "0.25.1-1.fc38.aarch64"
+      "evra": "0.25.2-1.fc38.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.1-1.fc38.aarch64"
+      "evra": "0.25.2-1.fc38.aarch64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.aarch64"
@@ -1066,7 +1066,7 @@
       "evra": "8.2-3.fc38.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.aarch64"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.2048-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2048-1.fc38.aarch64"
+      "evra": "2:9.0.2081-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-31T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-27T20:54:34Z"
+        "generated": "2023-11-04T02:16:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-31T01:07:58Z"
+        "generated": "2023-11-04T03:32:31Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1393eeab20..e0ad55dc89 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,10 +37,13 @@
       "evra": "1.25-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231030-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -79,7 +82,7 @@
       "evra": "32:9.18.19-1.fc38.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
@@ -340,7 +343,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.6-1.fc38.ppc64le"
+      "evra": "1.9.7-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -367,16 +370,16 @@
       "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-12.fc38.ppc64le"
+      "evra": "2.37-13.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-12.fc38.ppc64le"
+      "evra": "2.37-13.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-12.fc38.ppc64le"
+      "evra": "2.37-13.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-12.fc38.ppc64le"
+      "evra": "2.37-13.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -424,7 +427,7 @@
       "evra": "57-1.fc38.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.ppc64le"
@@ -496,16 +499,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.8-200.fc38.ppc64le"
+      "evra": "6.5.9-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.8-200.fc38.ppc64le"
+      "evra": "6.5.9-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.8-200.fc38.ppc64le"
+      "evra": "6.5.9-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.8-200.fc38.ppc64le"
+      "evra": "6.5.9-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -609,9 +612,6 @@
     "libfido2": {
       "evra": "1.12.0-3.fc38.ppc64le"
     },
-    "libgcab1": {
-      "evra": "1.5-2.fc38.ppc64le"
-    },
     "libgcc": {
       "evra": "13.2.1-4.fc38.ppc64le"
     },
@@ -856,10 +856,10 @@
       "evra": "2.5.1-34.fc38.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.ppc64le"
@@ -898,7 +898,7 @@
       "evra": "4.1.1-3.fc38.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.ppc64le"
@@ -946,7 +946,7 @@
       "evra": "2.0.16-2.fc38.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-3.fc38.ppc64le"
@@ -985,10 +985,10 @@
       "evra": "2023.6-1.fc38.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.25.1-1.fc38.ppc64le"
+      "evra": "0.25.2-1.fc38.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.25.1-1.fc38.ppc64le"
+      "evra": "0.25.2-1.fc38.ppc64le"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.ppc64le"
@@ -1069,7 +1069,7 @@
       "evra": "8.2-3.fc38.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.ppc64le"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.2048-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2048-1.fc38.ppc64le"
+      "evra": "2:9.0.2081-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-31T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-27T20:53:34Z"
+        "generated": "2023-11-04T02:14:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-31T01:08:11Z"
+        "generated": "2023-11-04T03:32:39Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6630a97c27..4b24c11cf3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,10 +37,13 @@
       "evra": "1.25-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231030-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -76,7 +79,7 @@
       "evra": "32:9.18.19-1.fc38.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
@@ -337,7 +340,7 @@
       "evra": "3.14.1-1.fc38.s390x"
     },
     "fwupd": {
-      "evra": "1.9.6-1.fc38.s390x"
+      "evra": "1.9.7-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -355,16 +358,16 @@
       "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-12.fc38.s390x"
+      "evra": "2.37-13.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-12.fc38.s390x"
+      "evra": "2.37-13.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-12.fc38.s390x"
+      "evra": "2.37-13.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-12.fc38.s390x"
+      "evra": "2.37-13.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -397,7 +400,7 @@
       "evra": "57-1.fc38.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.s390x"
@@ -466,16 +469,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.8-200.fc38.s390x"
+      "evra": "6.5.9-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.8-200.fc38.s390x"
+      "evra": "6.5.9-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.8-200.fc38.s390x"
+      "evra": "6.5.9-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.8-200.fc38.s390x"
+      "evra": "6.5.9-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -579,9 +582,6 @@
     "libfido2": {
       "evra": "1.12.0-3.fc38.s390x"
     },
-    "libgcab1": {
-      "evra": "1.5-2.fc38.s390x"
-    },
     "libgcc": {
       "evra": "13.2.1-4.fc38.s390x"
     },
@@ -820,10 +820,10 @@
       "evra": "2.5.1-34.fc38.s390x"
     },
     "linux-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.s390x"
@@ -862,7 +862,7 @@
       "evra": "4.1.1-3.fc38.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.s390x"
@@ -907,7 +907,7 @@
       "evra": "2.18.1-22.fc38.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-3.fc38.s390x"
@@ -940,10 +940,10 @@
       "evra": "2023.6-1.fc38.s390x"
     },
     "p11-kit": {
-      "evra": "0.25.1-1.fc38.s390x"
+      "evra": "0.25.2-1.fc38.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.25.1-1.fc38.s390x"
+      "evra": "0.25.2-1.fc38.s390x"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.s390x"
@@ -1018,7 +1018,7 @@
       "evra": "8.2-3.fc38.s390x"
     },
     "realtek-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.s390x"
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.2048-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2048-1.fc38.s390x"
+      "evra": "2:9.0.2081-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-31T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-27T20:53:25Z"
+        "generated": "2023-11-04T02:13:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-31T01:08:19Z"
+        "generated": "2023-11-04T03:32:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6fe98b4cd1..cc664a3e53 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,10 +37,13 @@
       "evra": "1.25-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231030-1.fc38.noarch"
     },
     "atheros-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "attr": {
       "evra": "2.5.1-6.fc38.x86_64"
@@ -79,7 +82,7 @@
       "evra": "0.2.12-2.fc38.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.x86_64"
@@ -349,7 +352,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.6-1.fc38.x86_64"
+      "evra": "1.9.7-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -376,16 +379,16 @@
       "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-12.fc38.x86_64"
+      "evra": "2.37-13.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-12.fc38.x86_64"
+      "evra": "2.37-13.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-12.fc38.x86_64"
+      "evra": "2.37-13.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-12.fc38.x86_64"
+      "evra": "2.37-13.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -439,7 +442,7 @@
       "evra": "57-1.fc38.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-1.fc38.x86_64"
@@ -511,16 +514,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.8-200.fc38.x86_64"
+      "evra": "6.5.9-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.8-200.fc38.x86_64"
+      "evra": "6.5.9-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.8-200.fc38.x86_64"
+      "evra": "6.5.9-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.8-200.fc38.x86_64"
+      "evra": "6.5.9-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -621,9 +624,6 @@
     "libfido2": {
       "evra": "1.12.0-3.fc38.x86_64"
     },
-    "libgcab1": {
-      "evra": "1.5-2.fc38.x86_64"
-    },
     "libgcc": {
       "evra": "13.2.1-4.fc38.x86_64"
     },
@@ -862,10 +862,10 @@
       "evra": "2.5.1-34.fc38.x86_64"
     },
     "linux-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-1.fc38.x86_64"
@@ -910,7 +910,7 @@
       "evra": "4.1.1-3.fc38.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nano": {
       "evra": "7.2-2.fc38.x86_64"
@@ -958,7 +958,7 @@
       "evra": "2.0.16-2.fc38.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "nvme-cli": {
       "evra": "2.4-3.fc38.x86_64"
@@ -994,10 +994,10 @@
       "evra": "2023.6-1.fc38.x86_64"
     },
     "p11-kit": {
-      "evra": "0.25.1-1.fc38.x86_64"
+      "evra": "0.25.2-1.fc38.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.1-1.fc38.x86_64"
+      "evra": "0.25.2-1.fc38.x86_64"
     },
     "pam": {
       "evra": "1.5.2-16.fc38.x86_64"
@@ -1069,7 +1069,7 @@
       "evra": "8.2-3.fc38.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20230919-1.fc38.noarch"
+      "evra": "20231030-1.fc38.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc38.x86_64"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.2048-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2048-1.fc38.x86_64"
+      "evra": "2:9.0.2081-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-31T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-27T20:54:44Z"
+        "generated": "2023-11-04T02:15:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-31T01:08:27Z"
+        "generated": "2023-11-04T03:32:55Z"
       }
     }
   }

From 9bac210d0be33e4cb5c5970fd30e8f3700078c79 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 30 Oct 2023 16:45:52 -0400
Subject: [PATCH 1895/2157] 05core: make `coreos-copy-firstboot-network` dep on
 bootfs explicit

Rather than having the unit have `After=coreos-gpt-setup.service`
as a way to conditionally require the bootfs to be available, have
`coreos-diskful-generator` actually inject the requirement dynamically,
just like it does already for `coreos-ignition-setup-user.service`.

This is prep for moving `coreos-gpt-setup.service`.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/1590
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator   | 7 +++++--
 .../35coreos-network/coreos-copy-firstboot-network.service | 5 +----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index e7d1d688c3..0014ecc1c6 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -84,9 +84,10 @@ if ! $(cmdline_bool 'ignition.firstboot' 0); then
     exit 0
 fi
 
-# coreos-ignition-setup-user.service should depend on the boot device node
-# only on diskful boots
+# coreos-ignition-setup-user.service and `coreos-copy-firstboot-network.service`
+# should depend on the boot device node only on diskful boots
 mkdir -p "${UNIT_DIR}/coreos-ignition-setup-user.service.d"
+mkdir -p "${UNIT_DIR}/coreos-copy-firstboot-network.service.d"
 cat > "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" <<EOF
 [Unit]
 Requires=dev-disk-by\x2dlabel-boot.device
@@ -95,6 +96,8 @@ After=dev-disk-by\x2dlabel-boot.device
 Requires=coreos-gpt-setup.service
 After=coreos-gpt-setup.service
 EOF
+cp "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" \
+    "${UNIT_DIR}/coreos-copy-firstboot-network.service.d/diskful.conf"
 
 # create symlink for udev rule
 mkdir -p /run/udev/rules.d/
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
index a1dd64b1bb..478dd85253 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-copy-firstboot-network.service
@@ -11,7 +11,7 @@
 # - In the diskful case, we need to look for networking configuration on the
 #   /boot partition
 #     - i.e. after /dev/disk/by-label/boot is available
-#     - which is implied by running after coreos-gpt-setup (see below)
+#     - which is injected via coreos-diskful-generator
 # - Need to run before networking is brought up.
 #     - This is done in nm-initrd.service [1]
 #     - i.e. Before=nm-initrd.service
@@ -41,9 +41,6 @@ Before=nm-initrd.service
 # compat: remove when everyone is on dracut 054+
 Before=dracut-initqueue.service
 After=dracut-cmdline.service
-# Any services looking at mounts need to order after this
-# because it causes device re-probing.
-After=coreos-gpt-setup.service
 # And since the boot device may be on multipath; optionally wait for it to
 # appear via the dynamic target.
 After=coreos-multipath-wait.target

From 5fb5b4fab803a91d7c9d40b665af0612964a7417 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 30 Oct 2023 16:45:53 -0400
Subject: [PATCH 1896/2157] 05core: run `coreos-gpt-setup` and
 `ignition-ostree-uuid-boot` later

These services need to manipulate the boot disk but if the disk is
backed by iSCSI, we need networking first. Move them to run later in the
boot process but still before `ignition-disks`.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/1590
---
 .../coreos-diskful-generator                  |  3 ---
 .../coreos-gpt-setup.service                  | 24 +++++++------------
 .../coreos-ignition-setup-user.service        |  2 +-
 .../coreos-secex-ignition-decrypt.service     |  4 ++--
 .../coreos-multipath-wait.target              |  4 ++--
 .../ignition-ostree-uuid-boot.service         |  7 ++----
 6 files changed, 15 insertions(+), 29 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 0014ecc1c6..b027ae5b02 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -92,9 +92,6 @@ cat > "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" <<EOF
 [Unit]
 Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
-
-Requires=coreos-gpt-setup.service
-After=coreos-gpt-setup.service
 EOF
 cp "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" \
     "${UNIT_DIR}/coreos-copy-firstboot-network.service.d/diskful.conf"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index f14f2e72f5..8b4fd5a37e 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -1,31 +1,23 @@
 [Unit]
 Description=Generate New UUID For Boot Disk GPT
 ConditionPathExists=/etc/initrd-release
-DefaultDependencies=no
-Before=local-fs-pre.target systemd-fsck-root.service
+Before=systemd-fsck-root.service
 Before=ignition-diskful.target
-Wants=systemd-udevd.service
-After=systemd-udevd.service
 
-# This unit must be the first to run when the disk holding the root partition
-# becomes available. To avoid relying on the name of the root partition which
-# is different between RHCOS LUKS setup and current FCOS setup, we wait for the
-# partition labeled 'boot' to become available. This is reliable as we don't
-# have any plan to support re-provisioning/re-writing the /boot partition,
-#
-# This is the only unit where it is safe to wait only on a specific disk label
-# as this will call udevadm settle after the GPT setup. Units that requires the
-# boot and root partitions to be available should order themselves after this
-# unit.
+# Have some ordering with this service since it also wants to access the bootfs.
+After=coreos-copy-firstboot-network.service
+
 Requires=dev-disk-by\x2dlabel-boot.device
 After=dev-disk-by\x2dlabel-boot.device
+
 # And since the boot device may be on multipath; optionally wait for it to
 # appear via the dynamic target.
-After=coreos-multipath-wait.target
+After=coreos-unique-boot.service
+Before=ignition-ostree-uuid-boot.service
 
 # Run before services that use device nodes, preventing them from racing
 # with udev activity generated by sgdisk
-Before=coreos-ignition-setup-user.service ignition-disks.service
+Before=ignition-kargs.service
 
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
index df0e256c8a..d92ba7c1dd 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
@@ -12,7 +12,7 @@ OnFailure=emergency.target
 OnFailureJobMode=isolate
 
 # On diskful boots, coreos-diskful-generator adds Requires/After on
-# dev-disk-by\x2dlabel-boot.device and coreos-gpt-setup.service
+# dev-disk-by\x2dlabel-boot.device
 
 [Service]
 Type=oneshot
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
index 02283bc3d0..c4edac3d58 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
@@ -7,8 +7,8 @@ DefaultDependencies=false
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
-# Run after virtio_blk and before Ignition
-After=coreos-gpt-setup.service
+# Run after udevd and before Ignition
+After=systemd-udevd.service
 Before=ignition-fetch-offline.service
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
index e0fd500cd4..5da2ee4bd6 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -11,8 +11,8 @@ After=multipathd.service
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
-# This is already enforced transitively by coreos-gpt-setup.service, but
-# let's be more explicit and list it directly here too.
+# This is one of the earliest services that accesses the bootfs so make sure we
+# already have our multipath target.
 Before=coreos-ignition-setup-user.service
 
 # This is already enforced by coreos-multipath-trigger.service, though ideally
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index 80415624ce..c99d5e2422 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -1,16 +1,13 @@
 [Unit]
 Description=Ignition OSTree: Regenerate Filesystem UUID (boot)
-DefaultDependencies=false
 ConditionPathExists=/usr/lib/initrd-release
 ConditionKernelCommandLine=ostree
 ConditionPathExists=!/run/ostree-live
-# We run pretty early
-Before=coreos-copy-firstboot-network.service
-Before=coreos-ignition-setup-user.service
-Before=ignition-fetch-offline.service
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service
+Before=ignition-disks.service
+
 # If we're going to reprovision the bootfs, then there's no need to restamp
 ConditionKernelCommandLine=!bootfs.roothash
 

From fdf3368556a234318ef073262505304d86d7c1cf Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 30 Oct 2023 16:45:54 -0400
Subject: [PATCH 1897/2157] 05core: adapt `coreos-ignition-setup-user.service`
 for iSCSI boot

In an iSCSI boot, we need networking before we can see the bootfs. So
`coreos-ignition-setup-user.service` needs to run after networking. We
also can't rely on the `fetch-offline` stage. Tweak things so that in
an iSCSI boot (1) we neuter the `fetch-offline` stage, and (2) we still
ensure that `coreos-ignition-setup-user.service` runs before the `fetch`
stage, which will take care of "consuming" the injected Ignition config.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/1590
---
 .../35coreos-ignition/coreos-diskful-generator   | 16 ++++++++++++++++
 .../coreos-ignition-setup-user.service           |  8 +++++---
 2 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index b027ae5b02..80f2aaf14b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -13,6 +13,7 @@ set -e
 exec 1>/dev/kmsg; exec 2>&1
 
 UNIT_DIR="${1:-/tmp}"
+EARLY_DIR="${2:-/tmp}"
 
 IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
@@ -96,6 +97,21 @@ EOF
 cp "${UNIT_DIR}/coreos-ignition-setup-user.service.d/diskful.conf" \
     "${UNIT_DIR}/coreos-copy-firstboot-network.service.d/diskful.conf"
 
+# If booting from iSCSI, then we need networking first before we
+# can see the bootfs. This has some implications.
+if test -n "$(cmdline_arg rd.iscsi.firmware)" || test -n "$(cmdline_arg netroot)"; then
+    mkdir -p "${EARLY_DIR}/ignition-complete.target.requires"
+
+    # In the injected Ignition config case, `coreos-ignition-setup-user.service`
+    # can't "pass" the config to `ignition-fetch-offline.service`. So we neuter
+    # the latter so that `ignition-fetch.service` (which runs after networking
+    # comes up) can pick it up instead.
+    ln -sf /dev/null "${EARLY_DIR}/ignition-complete.target.requires/ignition-fetch-offline.service"
+    # activate ignition-fetch.service
+    mkdir -p /run/ignition
+    touch /run/ignition/neednet
+fi
+
 # create symlink for udev rule
 mkdir -p /run/udev/rules.d/
 ln -sf /usr/lib/coreos/80-coreos-boot-disk.rules \
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
index d92ba7c1dd..3728641512 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-setup-user.service
@@ -4,9 +4,11 @@ Documentation=https://github.com/coreos/ignition
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=false
 
-# We run before config fetch because we may copy in new/different configs
-# for Ignition to consume.
-Before=ignition-fetch-offline.service
+# We run before config fetch because we may copy in new/different
+# configs for Ignition to consume. We include both fetch stages since
+# ignition-fetch-offline.service is neutered in a root on iSCSI boot (see
+# `coreos-diskful-generator`).
+Before=ignition-fetch-offline.service ignition-fetch.service
 
 OnFailure=emergency.target
 OnFailureJobMode=isolate

From 4da00215909011b38ded5d84431a8002b02d0eda Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 30 Oct 2023 16:45:55 -0400
Subject: [PATCH 1898/2157] 05core: neuter
 `coreos-copy-firstboot-network.service` for iSCSI boot

In an iSCSI boot, we have no utility for
`coreos-copy-firstboot-network.service` since it copies network settings
from the bootfs, which will only show up after networking has already
come up. Users are required to configure non-default networking via
kargs for iSCSI boots.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/1590
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator     | 5 +++++
 .../modules.d/35coreos-ignition/coreos-gpt-setup.service     | 2 ++
 2 files changed, 7 insertions(+)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 80f2aaf14b..d799354a25 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -110,6 +110,11 @@ if test -n "$(cmdline_arg rd.iscsi.firmware)" || test -n "$(cmdline_arg netroot)
     # activate ignition-fetch.service
     mkdir -p /run/ignition
     touch /run/ignition/neednet
+
+    # With iSCSI, configuring networking via kargs is a hard requirement
+    # since it can't be picked up from the bootfs (i.e. injected via
+    # `--copy-network`). So neuter `coreos-copy-firstboot-network.service`.
+    ln -sf /dev/null "${EARLY_DIR}/ignition-complete.target.requires/coreos-copy-firstboot-network.service"
 fi
 
 # create symlink for udev rule
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
index 8b4fd5a37e..629bb60f49 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-gpt-setup.service
@@ -5,6 +5,8 @@ Before=systemd-fsck-root.service
 Before=ignition-diskful.target
 
 # Have some ordering with this service since it also wants to access the bootfs.
+# We run after it since that service runs early and is skipped if we're on
+# iSCSI, but we still run.
 After=coreos-copy-firstboot-network.service
 
 Requires=dev-disk-by\x2dlabel-boot.device

From b509dbebe087d1850478f7394942623b4af6774f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 30 Oct 2023 16:45:56 -0400
Subject: [PATCH 1899/2157] 05core: don't teardown network on switchroot for
 iSCSI boot

During an iSCSI boot, we rely on networking to access the root device.
So at no point can networking go down once the rootfs is mounted. This
means we have to skip the teardown logic in `coreos-teardown-initramfs`
in that case.

One way to look at this conceptually is: the goal of this service is to
reset everything so that the real root is configured on the first boot
like it would be on any other boot (i.e. avoid first boot-specific state
carried from the initramfs). Since initramfs networking is required on
every boot for iSCSI, it's true on every boot that networking needs to
be carried forward across switchroot. So the goal is still met since
it's not a first boot-only concern.

Part of: https://github.com/coreos/fedora-coreos-tracker/issues/1590
---
 .../coreos-teardown-initramfs.sh              | 21 +++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index 35d681418b..8312b534a4 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -229,13 +229,22 @@ main() {
     # Load libraries from dracut
     load_dracut_libs
 
-    # Take down all interfaces set up in the initramfs
-    down_interfaces
+    # If we're using iSCSI, then we can't tear down networking since we'll lose
+    # root. This means in that case that the network config written to the real
+    # root won't be applied "from scratch". But anyway, since networking must
+    # stay on, it's simply not supported to configure the real root in a way
+    # that would require tearing down the connection on the interface involved.
+    if dracut_func getargbool 0 rd.iscsi.firmware || dracut_func getarg netroot; then
+        echo "info: iSCSI in use; not tearing down networking"
+    else
+        # Take down all interfaces set up in the initramfs
+        down_interfaces
 
-    # Clean up all routing
-    echo "info: flushing all routing"
-    ip route flush table main
-    ip route flush cache
+        # Clean up all routing
+        echo "info: flushing all routing"
+        ip route flush table main
+        ip route flush cache
+    fi
 
     # Hopefully our logic is sound enough that this is never needed, but
     # user's can explicitly disable initramfs network/hostname propagation

From 48ad3a31c14a1fa5972e8f83ae4ab00731c009ee Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 31 Oct 2023 16:49:36 -0400
Subject: [PATCH 1900/2157] 05core: make coreos-secex-ignition-decrypt.service
 virtio device dep explicit

The decryption script requires the encrypted Ignition virtio device to be
present. Previously, we used `Before=coreos-gpt-setup.service`, which I
think ran late enough that the device would always be present by then.
But we've now moved that service and `After=systemd-udevd.service` isn't
good enough so the service now fails because the device doesn't exist.

Fix this by directly listing the requirement on the device in
the unit, which is more explicit anyway. And because of systemd's
"ConditionPathExists don't turn off Requires" semantic, make the unit
dynamically enabled by the diskful generator. As a bonus, we now have
one less service in the default initramfs transaction (which actually
was getting pulled in on all arches too).
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator   | 5 +++++
 .../coreos-secex-ignition-decrypt.service                  | 7 +++++--
 .../lib/dracut/modules.d/35coreos-ignition/module-setup.sh | 3 ++-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index d799354a25..51d61cbc30 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -145,4 +145,9 @@ StandardOutput=null
 StandardError=null
 EOF
     done
+
+    # This one is done dynamically because it hard Requires a device to appear
+    # and if it's always part of the transaction, systemd will want the device
+    # to appear regardless of ConditionPathExists.
+    add_requires coreos-secex-ignition-decrypt.service ignition-diskful.target
 fi
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
index c4edac3d58..e52a29348f 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-decrypt.service
@@ -1,3 +1,5 @@
+# This service is enabled by coreos-diskful-generator
+
 [Unit]
 Description=CoreOS Secex Ignition Config Decryptor
 ConditionPathExists=/etc/initrd-release
@@ -7,8 +9,9 @@ DefaultDependencies=false
 OnFailure=emergency.target
 OnFailureJobMode=isolate
 
-# Run after udevd and before Ignition
-After=systemd-udevd.service
+# Run after the crypt device becomes available and before Ignition
+Requires=dev-disk-by\x2did-virtio\x2dignition_crypted.device
+After=dev-disk-by\x2did-virtio\x2dignition_crypted.device
 Before=ignition-fetch-offline.service
 
 [Service]
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
index f78725fdc6..b66a0c2782 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/module-setup.sh
@@ -83,7 +83,8 @@ install() {
 
     # IBM Secure Execution. Ignition config for reencryption of / and /boot
     inst_simple "$moddir/01-secex.ign" /usr/lib/coreos/01-secex.ign
-    install_ignition_unit "coreos-secex-ignition-decrypt.service"
+    inst_simple "$moddir/coreos-secex-ignition-decrypt.service" \
+        "$systemdsystemunitdir/coreos-secex-ignition-decrypt.service"
     inst_script "$moddir/coreos-secex-ignition-decrypt.sh" \
         "/usr/sbin/coreos-secex-ignition-decrypt"
 

From cb8d72235b3f9c020b9c0912f42cc5b99c707a34 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 Nov 2023 22:42:57 +0000
Subject: [PATCH 1901/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/868/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0b419ac76e..3d094f54a8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -982,10 +982,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.aarch64"
+      "evra": "2023.7-2.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.aarch64"
+      "evra": "2023.7-2.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.aarch64"
@@ -1027,10 +1027,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.aarch64"
+      "evra": "5:4.7.2-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.aarch64"
+      "evra": "5:4.7.2-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:16:19Z"
+        "generated": "2023-11-06T21:11:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-04T03:32:31Z"
+        "generated": "2023-11-07T04:06:48Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e0ad55dc89..eeb4b2af02 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -976,13 +976,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.ppc64le"
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.ppc64le"
+      "evra": "5:4.7.2-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.ppc64le"
+      "evra": "5:4.7.2-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:14:16Z"
+        "generated": "2023-11-06T21:09:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-04T03:32:39Z"
+        "generated": "2023-11-07T04:06:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4b24c11cf3..310773bd82 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -934,10 +934,10 @@
       "evra": "1:3.0.9-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.s390x"
+      "evra": "2023.7-2.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.s390x"
+      "evra": "2023.7-2.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.s390x"
@@ -979,10 +979,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.s390x"
+      "evra": "5:4.7.2-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.s390x"
+      "evra": "5:4.7.2-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:13:44Z"
+        "generated": "2023-11-06T21:08:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-04T03:32:47Z"
+        "generated": "2023-11-07T04:07:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cc664a3e53..97c050e67f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -988,10 +988,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.x86_64"
+      "evra": "2023.7-2.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.x86_64"
+      "evra": "2023.7-2.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.x86_64"
+      "evra": "5:4.7.2-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.x86_64"
+      "evra": "5:4.7.2-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:15:15Z"
+        "generated": "2023-11-06T21:11:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-04T03:32:55Z"
+        "generated": "2023-11-07T04:07:11Z"
       }
     }
   }

From 10d3485ae27b431b691303cfcab3ac28823971b4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 7 Nov 2023 22:31:27 -0500
Subject: [PATCH 1902/2157] Revert "lockfiles: bump to latest"

This reverts commit cb8d72235b3f9c020b9c0912f42cc5b99c707a34.
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3d094f54a8..0b419ac76e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -982,10 +982,10 @@
       "evra": "1.81-3.fc38.aarch64"
     },
     "ostree": {
-      "evra": "2023.7-2.fc38.aarch64"
+      "evra": "2023.6-1.fc38.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc38.aarch64"
+      "evra": "2023.6-1.fc38.aarch64"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.aarch64"
@@ -1027,10 +1027,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-07T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-06T21:11:14Z"
+        "generated": "2023-11-04T02:16:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-07T04:06:48Z"
+        "generated": "2023-11-04T03:32:31Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index eeb4b2af02..e0ad55dc89 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -976,13 +976,13 @@
       "evra": "1.81-3.fc38.ppc64le"
     },
     "ostree": {
-      "evra": "2023.7-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.7-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc38.ppc64le"
+      "evra": "2023.6-1.fc38.ppc64le"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.ppc64le"
@@ -1024,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-07T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-06T21:09:10Z"
+        "generated": "2023-11-04T02:14:16Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-07T04:06:55Z"
+        "generated": "2023-11-04T03:32:39Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 310773bd82..4b24c11cf3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -934,10 +934,10 @@
       "evra": "1:3.0.9-2.fc38.s390x"
     },
     "ostree": {
-      "evra": "2023.7-2.fc38.s390x"
+      "evra": "2023.6-1.fc38.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc38.s390x"
+      "evra": "2023.6-1.fc38.s390x"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.s390x"
@@ -979,10 +979,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc38.s390x"
+      "evra": "5:4.7.0-1.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc38.s390x"
+      "evra": "5:4.7.0-1.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-07T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-06T21:08:49Z"
+        "generated": "2023-11-04T02:13:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-07T04:07:03Z"
+        "generated": "2023-11-04T03:32:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 97c050e67f..cc664a3e53 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -988,10 +988,10 @@
       "evra": "1.81-3.fc38.x86_64"
     },
     "ostree": {
-      "evra": "2023.7-2.fc38.x86_64"
+      "evra": "2023.6-1.fc38.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc38.x86_64"
+      "evra": "2023.6-1.fc38.x86_64"
     },
     "p11-kit": {
       "evra": "0.25.2-1.fc38.x86_64"
@@ -1033,10 +1033,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-07T00:00:00Z",
+    "generated": "2023-11-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-06T21:11:40Z"
+        "generated": "2023-11-04T02:15:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-07T04:07:11Z"
+        "generated": "2023-11-04T03:32:55Z"
       }
     }
   }

From 249a1fd01affed6078515d201e9943020773bb7c Mon Sep 17 00:00:00 2001
From: Yasmin Valim <ydesouza@redhat.com>
Date: Tue, 7 Nov 2023 19:01:46 -0300
Subject: [PATCH 1903/2157] Move to Fedora Linux 39

Bump releasever in manifest.yam,bump the version in dockerfile and tests,  sync the lockfiles for all arches from next-devel for Fedora 39 release.
---
 ci/buildroot/Dockerfile                     |   2 +-
 image.yaml                                  |   6 -
 manifest-lock.aarch64.json                  | 885 +++++++++----------
 manifest-lock.overrides.yaml                |   6 +-
 manifest-lock.ppc64le.json                  | 877 +++++++++----------
 manifest-lock.s390x.json                    | 845 +++++++++----------
 manifest-lock.x86_64.json                   | 887 ++++++++++----------
 manifest.yaml                               |   2 +-
 tests/kola/binfmt/qemu                      |   2 +-
 tests/kola/docker/basic                     |   2 +-
 tests/kola/ntp/data/ntplib.sh               |   2 +-
 tests/kola/podman/dns/test.sh               |   2 +-
 tests/kola/podman/rootless-pasta-networking |   2 +-
 tests/kola/podman/rootless-systemd          |   2 +-
 tests/kola/selinux/podman-tmpfs-context     |   2 +-
 15 files changed, 1777 insertions(+), 1747 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 01dfa684d7..e80283bf8d 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM quay.io/fedora/fedora:38
+FROM quay.io/fedora/fedora:39
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf
diff --git a/image.yaml b/image.yaml
index 1b3c824d20..1bf800cca2 100644
--- a/image.yaml
+++ b/image.yaml
@@ -2,9 +2,3 @@
 # similarly to manifest.yaml. Unlike image-base.yaml, which is shared by all
 # streams.
 include: image-base.yaml
-
-# see https://github.com/coreos/coreos-assembler/pull/3607
-# Defaults for AWS
-aws-imdsv2-only: false
-aws-volume-type: "gp2"
-aws-x86-boot-mode: "legacy-bios"
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0b419ac76e..d6dadebf0f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1295 +1,1310 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.8-1.fc38.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.8-1.fc38.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.8-1.fc38.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.8-1.fc38.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.8-1.fc38.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.0.4-1.fc38.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc38.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64"
     },
     "acl": {
-      "evra": "2.3.1-6.fc38.aarch64"
+      "evra": "2.3.1-8.fc39.aarch64"
     },
     "adcli": {
-      "evra": "0.9.2-2.fc38.aarch64"
+      "evra": "0.9.2-3.fc39.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.2-1.fc38.aarch64"
+      "evra": "5.4.2-2.fc39.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-1.fc38.aarch64"
+      "evra": "5.4.2-2.fc39.aarch64"
     },
     "alternatives": {
-      "evra": "1.25-1.fc38.aarch64"
+      "evra": "1.25-1.fc39.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "amd-ucode-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "attr": {
-      "evra": "2.5.1-6.fc38.aarch64"
+      "evra": "2.5.1-8.fc39.aarch64"
+    },
+    "audit": {
+      "evra": "3.1.2-4.fc39.aarch64"
     },
     "audit-libs": {
-      "evra": "3.1.2-1.fc38.aarch64"
+      "evra": "3.1.2-4.fc39.aarch64"
     },
     "authselect": {
-      "evra": "1.4.3-1.fc38.aarch64"
+      "evra": "1.4.3-1.fc39.aarch64"
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc38.aarch64"
+      "evra": "1.4.3-1.fc39.aarch64"
     },
     "avahi-libs": {
-      "evra": "0.8-22.fc38.aarch64"
+      "evra": "0.8-24.fc39.aarch64"
     },
     "basesystem": {
-      "evra": "11-15.fc38.noarch"
+      "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-3.fc38.aarch64"
+      "evra": "5.2.15-5.fc39.aarch64"
+    },
+    "bash-color-prompt": {
+      "evra": "0.1-6.fc39.noarch"
     },
     "bash-completion": {
-      "evra": "1:2.11-9.fc38.noarch"
+      "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc38.aarch64"
+      "evra": "32:9.18.19-1.fc39.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc38.aarch64"
+      "evra": "32:9.18.19-1.fc39.aarch64"
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc38.aarch64"
+      "evra": "0.2.12-2.fc39.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "bsdtar": {
-      "evra": "3.6.1-4.fc38.aarch64"
+      "evra": "3.7.1-1.fc39.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc38.aarch64"
+      "evra": "6.5.1-1.fc39.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.7.0-1.fc38.aarch64"
+      "evra": "0.7.0-2.fc39.aarch64"
     },
     "bzip2": {
-      "evra": "1.0.8-13.fc38.aarch64"
+      "evra": "1.0.8-16.fc39.aarch64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-13.fc38.aarch64"
+      "evra": "1.0.8-16.fc39.aarch64"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc38.aarch64"
+      "evra": "1.19.1-1.fc39.aarch64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-14.fc38.aarch64"
+      "evra": "0.1.7-18.fc39.aarch64"
     },
     "chrony": {
-      "evra": "4.4-1.fc38.aarch64"
+      "evra": "4.4-1.fc39.aarch64"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc38.aarch64"
+      "evra": "7.0-2.fc39.aarch64"
     },
     "clevis": {
-      "evra": "19-2.fc38.aarch64"
+      "evra": "19-4.fc39.aarch64"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc38.aarch64"
+      "evra": "19-4.fc39.aarch64"
     },
     "clevis-luks": {
-      "evra": "19-2.fc38.aarch64"
+      "evra": "19-4.fc39.aarch64"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc38.aarch64"
+      "evra": "19-4.fc39.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc38.noarch"
+      "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc38.aarch64"
+      "evra": "2:2.1.7-3.fc39.aarch64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc38.aarch64"
+      "evra": "1.6.19-2.fc39.aarch64"
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-2.fc38.aarch64"
+      "evra": "1.3.0-3.fc39.aarch64"
     },
     "containers-common": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc38.aarch64"
+      "evra": "0.18.0-1.fc39.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc38.aarch64"
+      "evra": "0.18.0-1.fc39.aarch64"
     },
     "coreutils": {
-      "evra": "9.1-12.fc38.aarch64"
+      "evra": "9.3-4.fc39.aarch64"
     },
     "coreutils-common": {
-      "evra": "9.1-12.fc38.aarch64"
+      "evra": "9.3-4.fc39.aarch64"
     },
     "cpio": {
-      "evra": "2.13-14.fc38.aarch64"
+      "evra": "2.14-4.fc39.aarch64"
     },
     "cracklib": {
-      "evra": "2.9.11-1.fc38.aarch64"
+      "evra": "2.9.11-2.fc39.aarch64"
     },
     "criu": {
-      "evra": "3.18-1.fc38.aarch64"
+      "evra": "3.18-3.fc39.aarch64"
     },
     "criu-libs": {
-      "evra": "3.18-1.fc38.aarch64"
+      "evra": "3.18-3.fc39.aarch64"
     },
     "crun": {
-      "evra": "1.11-1.fc38.aarch64"
+      "evra": "1.11.1-1.fc39.aarch64"
+    },
+    "crun-wasm": {
+      "evra": "1.11.1-1.fc39.aarch64"
     },
     "crypto-policies": {
-      "evra": "20230301-1.gita12f7b2.fc38.noarch"
+      "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc38.aarch64"
+      "evra": "2.6.1-3.fc39.aarch64"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc38.aarch64"
+      "evra": "2.6.1-3.fc39.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-5.fc38.aarch64"
+      "evra": "8.2.1-3.fc39.aarch64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-9.fc38.aarch64"
+      "evra": "2.1.28-11.fc39.aarch64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-9.fc38.aarch64"
+      "evra": "2.1.28-11.fc39.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc39.aarch64"
     },
     "dbus-broker": {
-      "evra": "33-1.fc38.aarch64"
+      "evra": "33-2.fc39.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc39.aarch64"
     },
     "device-mapper": {
-      "evra": "1.02.189-2.fc38.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64"
     },
     "device-mapper-event": {
-      "evra": "1.02.189-2.fc38.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.189-2.fc38.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.189-2.fc38.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.4-2.fc38.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.4-2.fc38.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-10.fc38.aarch64"
+      "evra": "1.0.6-2.fc39.aarch64"
     },
     "diffutils": {
-      "evra": "3.10-1.fc38.aarch64"
+      "evra": "3.10-3.fc39.aarch64"
     },
     "dnsmasq": {
-      "evra": "2.89-5.fc38.aarch64"
+      "evra": "2.89-6.fc39.aarch64"
     },
     "dosfstools": {
-      "evra": "4.2-6.fc38.aarch64"
+      "evra": "4.2-7.fc39.aarch64"
     },
     "dracut": {
-      "evra": "059-4.fc38.aarch64"
+      "evra": "059-15.fc39.aarch64"
     },
     "dracut-network": {
-      "evra": "059-4.fc38.aarch64"
+      "evra": "059-15.fc39.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-4.fc38.aarch64"
+      "evra": "059-15.fc39.aarch64"
     },
     "duktape": {
-      "evra": "2.7.0-2.fc38.aarch64"
+      "evra": "2.7.0-5.fc39.aarch64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-4.fc38.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-4.fc38.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64"
     },
     "efi-filesystem": {
-      "evra": "5-7.fc38.noarch"
+      "evra": "5-9.fc39.noarch"
     },
     "efibootmgr": {
-      "evra": "18-3.fc38.aarch64"
+      "evra": "18-4.fc39.aarch64"
     },
     "efivar-libs": {
-      "evra": "38-7.fc38.aarch64"
+      "evra": "38-8.fc39.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-3.fc38.noarch"
+      "evra": "0.189-4.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-3.fc38.aarch64"
+      "evra": "0.189-4.fc39.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.189-3.fc38.aarch64"
+      "evra": "0.189-4.fc39.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc38.aarch64"
+      "evra": "2:6.5-1.fc39.aarch64"
     },
     "expat": {
-      "evra": "2.5.0-2.fc38.aarch64"
+      "evra": "2.5.0-3.fc39.aarch64"
     },
     "fedora-gpg-keys": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-repos": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "38-1.noarch"
-    },
-    "fedora-repos-modular": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "file": {
-      "evra": "5.44-3.fc38.aarch64"
+      "evra": "5.44-5.fc39.aarch64"
     },
     "file-libs": {
-      "evra": "5.44-3.fc38.aarch64"
+      "evra": "5.44-5.fc39.aarch64"
     },
     "filesystem": {
-      "evra": "3.18-3.fc38.aarch64"
+      "evra": "3.18-6.fc39.aarch64"
     },
     "findutils": {
-      "evra": "1:4.9.0-3.fc38.aarch64"
+      "evra": "1:4.9.0-5.fc39.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-1.fc38.aarch64"
+      "evra": "1.15.4-3.fc39.aarch64"
+    },
+    "fmt": {
+      "evra": "10.0.0-3.fc39.aarch64"
     },
     "fstrm": {
-      "evra": "0.6.1-6.fc38.aarch64"
+      "evra": "0.6.1-8.fc39.aarch64"
     },
     "fuse": {
-      "evra": "2.9.9-16.fc38.aarch64"
+      "evra": "2.9.9-17.fc39.aarch64"
     },
     "fuse-common": {
-      "evra": "3.14.1-1.fc38.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-16.fc38.aarch64"
+      "evra": "2.9.9-17.fc39.aarch64"
     },
     "fuse-overlayfs": {
-      "evra": "1.12-1.fc38.aarch64"
+      "evra": "1.12-2.fc39.aarch64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-3.fc38.aarch64"
+      "evra": "3.7.3-4.fc39.aarch64"
     },
     "fuse3": {
-      "evra": "3.14.1-1.fc38.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64"
     },
     "fuse3-libs": {
-      "evra": "3.14.1-1.fc38.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc38.aarch64"
+      "evra": "1.9.7-1.fc39.aarch64"
     },
     "gawk": {
-      "evra": "5.1.1-5.fc38.aarch64"
+      "evra": "5.2.2-2.fc39.aarch64"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-3.fc38.aarch64"
+      "evra": "1:1.23-4.fc39.aarch64"
     },
     "gdisk": {
-      "evra": "1.0.9-5.fc38.aarch64"
+      "evra": "1.0.9-6.fc39.aarch64"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-2.fc38.aarch64"
+      "evra": "0.22-2.fc39.aarch64"
     },
     "gettext-libs": {
-      "evra": "0.21.1-2.fc38.aarch64"
+      "evra": "0.22-2.fc39.aarch64"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-2.fc38.aarch64"
+      "evra": "0.22-2.fc39.aarch64"
     },
     "git-core": {
-      "evra": "2.41.0-1.fc38.aarch64"
+      "evra": "2.41.0-2.fc39.aarch64"
     },
     "glib2": {
-      "evra": "2.76.5-2.fc38.aarch64"
+      "evra": "2.78.1-1.fc39.aarch64"
     },
     "glibc": {
-      "evra": "2.37-13.fc38.aarch64"
+      "evra": "2.38-10.fc39.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-13.fc38.aarch64"
+      "evra": "2.38-10.fc39.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-13.fc38.aarch64"
+      "evra": "2.38-10.fc39.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-13.fc38.aarch64"
+      "evra": "2.38-10.fc39.aarch64"
     },
     "gmp": {
-      "evra": "1:6.2.1-4.fc38.aarch64"
+      "evra": "1:6.2.1-5.fc39.aarch64"
     },
     "gnupg2": {
-      "evra": "2.4.0-3.fc38.aarch64"
+      "evra": "2.4.3-2.fc39.aarch64"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc38.aarch64"
+      "evra": "3.8.1-1.fc39.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc39.noarch"
     },
     "gpgme": {
-      "evra": "1.17.1-5.fc38.aarch64"
+      "evra": "1.20.0-5.fc39.aarch64"
     },
     "grep": {
-      "evra": "3.8-3.fc38.aarch64"
+      "evra": "3.11-3.fc39.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-102.fc38.noarch"
+      "evra": "1:2.06-104.fc39.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-102.fc38.aarch64"
+      "evra": "1:2.06-104.fc39.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-102.fc38.aarch64"
+      "evra": "1:2.06-104.fc39.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-102.fc38.aarch64"
+      "evra": "1:2.06-104.fc39.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc38.aarch64"
+      "evra": "6:0.7.1-1.fc39.aarch64"
     },
     "gzip": {
-      "evra": "1.12-3.fc38.aarch64"
+      "evra": "1.12-6.fc39.aarch64"
     },
     "hostname": {
-      "evra": "3.23-8.fc38.aarch64"
+      "evra": "3.23-9.fc39.aarch64"
     },
     "ignition": {
-      "evra": "2.16.2-1.fc38.aarch64"
+      "evra": "2.16.2-2.fc39.aarch64"
     },
     "inih": {
-      "evra": "57-1.fc38.aarch64"
+      "evra": "57-2.fc39.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.3-1.fc38.aarch64"
+      "evra": "1.0.3-2.fc39.aarch64"
     },
     "iproute": {
-      "evra": "6.4.0-1.fc38.aarch64"
+      "evra": "6.4.0-2.fc39.aarch64"
     },
     "iproute-tc": {
-      "evra": "6.4.0-1.fc38.aarch64"
+      "evra": "6.4.0-2.fc39.aarch64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.1.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.1.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.1.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.1.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.1.noarch"
+      "evra": "1.8.9-5.fc39.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.1.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64"
     },
     "iputils": {
-      "evra": "20221126-2.fc38.aarch64"
+      "evra": "20221126-4.fc39.aarch64"
     },
     "irqbalance": {
-      "evra": "2:1.9.2-1.fc38.aarch64"
+      "evra": "2:1.9.2-2.fc39.aarch64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.aarch64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.aarch64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-6.fc38.aarch64"
+      "evra": "0.101-7.fc39.aarch64"
     },
     "jansson": {
-      "evra": "2.13.1-6.fc38.aarch64"
+      "evra": "2.13.1-7.fc39.aarch64"
     },
     "jemalloc": {
-      "evra": "5.3.0-3.fc38.aarch64"
+      "evra": "5.3.0-4.fc39.aarch64"
     },
     "jose": {
-      "evra": "11-7.fc38.aarch64"
+      "evra": "11-8.fc39.aarch64"
     },
     "jq": {
-      "evra": "1.6-16.fc38.aarch64"
+      "evra": "1.6-17.fc39.aarch64"
     },
     "json-c": {
-      "evra": "0.17-1.fc38.aarch64"
+      "evra": "0.17-1.fc39.aarch64"
     },
     "json-glib": {
-      "evra": "1.6.6-4.fc38.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64"
     },
     "kbd": {
-      "evra": "2.5.1-5.fc38.aarch64"
+      "evra": "2.6.3-1.fc39.aarch64"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-200.fc38.aarch64"
+      "evra": "6.5.9-300.fc39.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.9-200.fc38.aarch64"
+      "evra": "6.5.9-300.fc39.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.9-200.fc38.aarch64"
+      "evra": "6.5.9-300.fc39.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-200.fc38.aarch64"
+      "evra": "6.5.9-300.fc39.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.26-3.fc38.aarch64"
+      "evra": "2.0.27-2.fc39.aarch64"
     },
     "keyutils": {
-      "evra": "1.6.1-6.fc38.aarch64"
+      "evra": "1.6.1-7.fc39.aarch64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-6.fc38.aarch64"
+      "evra": "1.6.1-7.fc39.aarch64"
     },
     "kmod": {
-      "evra": "30-4.fc38.aarch64"
+      "evra": "30-6.fc39.aarch64"
     },
     "kmod-libs": {
-      "evra": "30-4.fc38.aarch64"
+      "evra": "30-6.fc39.aarch64"
     },
     "kpartx": {
-      "evra": "0.9.4-2.fc38.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64"
     },
     "krb5-libs": {
-      "evra": "1.21-3.fc38.aarch64"
+      "evra": "1.21.2-2.fc39.aarch64"
     },
     "less": {
-      "evra": "633-1.fc38.aarch64"
+      "evra": "633-2.fc39.aarch64"
     },
     "libacl": {
-      "evra": "2.3.1-6.fc38.aarch64"
+      "evra": "2.3.1-8.fc39.aarch64"
     },
     "libaio": {
-      "evra": "0.3.111-15.fc38.aarch64"
+      "evra": "0.3.111-16.fc39.aarch64"
     },
     "libarchive": {
-      "evra": "3.6.1-4.fc38.aarch64"
+      "evra": "3.7.1-1.fc39.aarch64"
     },
     "libargon2": {
-      "evra": "20190702-2.fc38.aarch64"
+      "evra": "20190702-3.fc39.aarch64"
     },
     "libassuan": {
-      "evra": "2.5.6-1.fc38.aarch64"
+      "evra": "2.5.6-2.fc39.aarch64"
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc38.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64"
     },
     "libattr": {
-      "evra": "2.5.1-6.fc38.aarch64"
+      "evra": "2.5.1-8.fc39.aarch64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-53.fc38.aarch64"
+      "evra": "0.1.1-54.fc39.aarch64"
     },
     "libblkid": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "libbpf": {
-      "evra": "2:1.1.0-2.fc38.aarch64"
+      "evra": "2:1.1.0-4.fc39.aarch64"
     },
     "libbsd": {
-      "evra": "0.11.7-4.fc38.aarch64"
+      "evra": "0.11.7-5.fc39.aarch64"
     },
     "libcap": {
-      "evra": "2.48-6.fc38.aarch64"
+      "evra": "2.48-7.fc39.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc38.aarch64"
+      "evra": "0.8.3-8.fc39.aarch64"
     },
     "libcbor": {
-      "evra": "0.7.0-9.fc38.aarch64"
+      "evra": "0.10.2-2.fc39.aarch64"
     },
     "libcollection": {
-      "evra": "0.7.0-53.fc38.aarch64"
+      "evra": "0.7.0-54.fc39.aarch64"
     },
     "libcom_err": {
-      "evra": "1.46.5-4.fc38.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-5.fc38.aarch64"
+      "evra": "8.2.1-3.fc39.aarch64"
     },
     "libdaemon": {
-      "evra": "0.14-25.fc38.aarch64"
+      "evra": "0.14-26.fc39.aarch64"
     },
     "libdb": {
-      "evra": "5.3.28-55.fc38.aarch64"
+      "evra": "5.3.28-56.fc39.aarch64"
     },
     "libdhash": {
-      "evra": "0.5.0-53.fc38.aarch64"
+      "evra": "0.5.0-54.fc39.aarch64"
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc38.aarch64"
+      "evra": "0.5.2-1.fc39.aarch64"
     },
     "libedit": {
-      "evra": "3.1-45.20221030cvs.fc38.aarch64"
+      "evra": "3.1-48.20230828cvs.fc39.aarch64"
     },
     "libevent": {
-      "evra": "2.1.12-8.fc38.aarch64"
+      "evra": "2.1.12-9.fc39.aarch64"
     },
     "libfdisk": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "libffi": {
-      "evra": "3.4.4-2.fc38.aarch64"
+      "evra": "3.4.4-4.fc39.aarch64"
     },
     "libfido2": {
-      "evra": "1.12.0-3.fc38.aarch64"
+      "evra": "1.13.0-3.fc39.aarch64"
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc38.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64"
     },
     "libgcrypt": {
-      "evra": "1.10.2-1.fc38.aarch64"
+      "evra": "1.10.2-2.fc39.aarch64"
     },
     "libgpg-error": {
-      "evra": "1.47-1.fc38.aarch64"
+      "evra": "1.47-2.fc39.aarch64"
     },
     "libgudev": {
-      "evra": "237-4.fc38.aarch64"
+      "evra": "238-2.fc39.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc38.aarch64"
+      "evra": "0.4.7-1.fc39.aarch64"
     },
     "libibverbs": {
-      "evra": "44.0-3.fc38.aarch64"
+      "evra": "46.0-4.fc39.aarch64"
     },
     "libicu": {
-      "evra": "72.1-2.fc38.aarch64"
+      "evra": "73.2-2.fc39.aarch64"
     },
     "libidn2": {
-      "evra": "2.3.4-2.fc38.aarch64"
+      "evra": "2.3.4-3.fc39.aarch64"
     },
     "libini_config": {
-      "evra": "1.3.1-53.fc38.aarch64"
+      "evra": "1.3.1-54.fc39.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc38.aarch64"
+      "evra": "0.1.14-2.fc39.aarch64"
     },
     "libjose": {
-      "evra": "11-7.fc38.aarch64"
+      "evra": "11-8.fc39.aarch64"
     },
     "libkcapi": {
-      "evra": "1.4.0-5.fc38.aarch64"
+      "evra": "1.4.0-7.fc39.aarch64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-5.fc38.aarch64"
+      "evra": "1.4.0-7.fc39.aarch64"
     },
     "libksba": {
-      "evra": "1.6.4-1.fc38.aarch64"
+      "evra": "1.6.4-2.fc39.aarch64"
     },
     "libldb": {
-      "evra": "2.7.2-1.fc38.aarch64"
+      "evra": "2.8.0-1.fc39.aarch64"
     },
     "libluksmeta": {
-      "evra": "9-15.fc38.aarch64"
+      "evra": "9-16.fc39.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-2.fc38.aarch64"
+      "evra": "1.7.1-3.fc39.aarch64"
     },
     "libmd": {
-      "evra": "1.1.0-1.fc38.aarch64"
+      "evra": "1.1.0-2.fc39.aarch64"
     },
     "libmnl": {
-      "evra": "1.0.5-2.fc38.aarch64"
+      "evra": "1.0.5-3.fc39.aarch64"
     },
     "libmodulemd": {
-      "evra": "2.15.0-2.fc38.aarch64"
+      "evra": "2.15.0-5.fc39.aarch64"
     },
     "libmount": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "libndp": {
-      "evra": "1.8-5.fc38.aarch64"
+      "evra": "1.8-6.fc39.aarch64"
     },
     "libnet": {
-      "evra": "1.3-1.fc38.aarch64"
+      "evra": "1.3-1.fc39.aarch64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-1.fc38.aarch64"
+      "evra": "1.0.9-2.fc39.aarch64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-23.fc38.aarch64"
+      "evra": "1.0.1-24.fc39.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-1.rc3.fc38.aarch64"
+      "evra": "1:2.6.3-2.rc3.fc39.aarch64"
     },
     "libnftnl": {
-      "evra": "1.2.4-2.fc38.aarch64"
+      "evra": "1.2.6-2.fc39.aarch64"
     },
     "libnghttp2": {
-      "evra": "1.52.0-2.fc38.aarch64"
+      "evra": "1.55.1-4.fc39.aarch64"
     },
     "libnl3": {
-      "evra": "3.7.0-3.fc38.aarch64"
+      "evra": "3.8.0-1.fc39.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-3.fc38.aarch64"
+      "evra": "3.8.0-1.fc39.aarch64"
     },
     "libnsl2": {
-      "evra": "2.0.0-5.fc38.aarch64"
+      "evra": "2.0.0-6.fc39.aarch64"
     },
     "libnvme": {
-      "evra": "1.4-2.fc38.aarch64"
+      "evra": "1.6-2.fc39.aarch64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-53.fc38.aarch64"
+      "evra": "0.2.1-54.fc39.aarch64"
     },
     "libpcap": {
-      "evra": "14:1.10.4-1.fc38.aarch64"
+      "evra": "14:1.10.4-2.fc39.aarch64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-6.fc38.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64"
     },
     "libpsl": {
-      "evra": "0.21.2-2.fc38.aarch64"
+      "evra": "0.21.2-4.fc39.aarch64"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc38.aarch64"
+      "evra": "1.4.5-6.fc39.aarch64"
     },
     "libref_array": {
-      "evra": "0.1.5-53.fc38.aarch64"
+      "evra": "0.1.5-54.fc39.aarch64"
     },
     "librepo": {
-      "evra": "1.17.0-1.fc38.aarch64"
+      "evra": "1.17.0-1.fc39.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-1.fc38.noarch"
+      "evra": "2.17.11-3.fc39.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-4.fc38.aarch64"
+      "evra": "2.5.3-6.fc39.aarch64"
     },
     "libselinux": {
-      "evra": "3.5-1.fc38.aarch64"
+      "evra": "3.5-5.fc39.aarch64"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc38.aarch64"
+      "evra": "3.5-5.fc39.aarch64"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc38.aarch64"
+      "evra": "3.5-4.fc39.aarch64"
     },
     "libsepol": {
-      "evra": "3.5-1.fc38.aarch64"
+      "evra": "3.5-2.fc39.aarch64"
     },
     "libsigsegv": {
-      "evra": "2.14-4.fc38.aarch64"
+      "evra": "2.14-5.fc39.aarch64"
     },
     "libslirp": {
-      "evra": "4.7.0-3.fc38.aarch64"
+      "evra": "4.7.0-4.fc39.aarch64"
     },
     "libsmartcols": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.8-1.fc38.aarch64"
+      "evra": "2:4.19.2-1.fc39.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc38.aarch64"
+      "evra": "0.7.25-1.fc39.aarch64"
     },
     "libss": {
-      "evra": "1.46.5-4.fc38.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc38.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64"
     },
     "libtalloc": {
-      "evra": "2.4.0-2.fc38.aarch64"
+      "evra": "2.4.1-1.fc39.aarch64"
     },
     "libtasn1": {
-      "evra": "4.19.0-2.fc38.aarch64"
+      "evra": "4.19.0-3.fc39.aarch64"
     },
     "libtdb": {
-      "evra": "1.4.8-1.fc38.aarch64"
+      "evra": "1.4.9-1.fc39.aarch64"
     },
     "libteam": {
-      "evra": "1.31-7.fc38.aarch64"
+      "evra": "1.32-1.fc39.aarch64"
     },
     "libtevent": {
-      "evra": "0.14.1-1.fc38.aarch64"
+      "evra": "0.15.0-1.fc39.aarch64"
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc38.aarch64"
+      "evra": "1.3.4-0.fc39.aarch64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-6.fc38.aarch64"
+      "evra": "2.4.7-7.fc39.aarch64"
     },
     "libunistring": {
-      "evra": "1.1-3.fc38.aarch64"
-    },
-    "libunistring1.0": {
-      "evra": "1.0-1.fc38.aarch64"
+      "evra": "1.1-5.fc39.aarch64"
     },
     "libusb1": {
-      "evra": "1.0.26-2.fc38.aarch64"
+      "evra": "1.0.26-3.fc39.aarch64"
     },
     "libuser": {
-      "evra": "0.64-2.fc38.aarch64"
+      "evra": "0.64-4.fc39.aarch64"
     },
     "libutempter": {
-      "evra": "1.2.1-8.fc38.aarch64"
+      "evra": "1.2.1-10.fc39.aarch64"
     },
     "libuuid": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "libuv": {
-      "evra": "1:1.46.0-1.fc38.aarch64"
+      "evra": "1:1.46.0-2.fc39.aarch64"
     },
     "libverto": {
-      "evra": "0.3.2-5.fc38.aarch64"
+      "evra": "0.3.2-6.fc39.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.8-1.fc38.aarch64"
+      "evra": "2:4.19.2-1.fc39.aarch64"
     },
     "libxcrypt": {
-      "evra": "4.4.36-1.fc38.aarch64"
+      "evra": "4.4.36-2.fc39.aarch64"
     },
     "libxml2": {
-      "evra": "2.10.4-1.fc38.aarch64"
+      "evra": "2.10.4-3.fc39.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc38.aarch64"
+      "evra": "0.3.14-1.fc39.aarch64"
     },
     "libyaml": {
-      "evra": "0.2.5-9.fc38.aarch64"
+      "evra": "0.2.5-12.fc39.aarch64"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc38.aarch64"
+      "evra": "1.5.5-4.fc39.aarch64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-34.fc38.aarch64"
+      "evra": "2.5.1-36.fc39.aarch64"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.31-1.fc38.aarch64"
+      "evra": "0.9.31-2.fc39.aarch64"
     },
     "logrotate": {
-      "evra": "3.21.0-2.fc38.aarch64"
+      "evra": "3.21.0-4.fc39.aarch64"
     },
     "lsof": {
-      "evra": "4.96.3-3.fc38.aarch64"
+      "evra": "4.96.3-4.fc39.aarch64"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc38.aarch64"
+      "evra": "5.4.6-3.fc39.aarch64"
     },
     "luksmeta": {
-      "evra": "9-15.fc38.aarch64"
+      "evra": "9-16.fc39.aarch64"
     },
     "lvm2": {
-      "evra": "2.03.18-2.fc38.aarch64"
+      "evra": "2.03.22-1.fc39.aarch64"
     },
     "lvm2-libs": {
-      "evra": "2.03.18-2.fc38.aarch64"
+      "evra": "2.03.22-1.fc39.aarch64"
     },
     "lz4-libs": {
-      "evra": "1.9.4-2.fc38.aarch64"
+      "evra": "1.9.4-4.fc39.aarch64"
     },
     "lzo": {
-      "evra": "2.10-8.fc38.aarch64"
+      "evra": "2.10-9.fc39.aarch64"
     },
     "mdadm": {
-      "evra": "4.2-4.fc38.aarch64"
+      "evra": "4.2-6.fc39.aarch64"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc38.aarch64"
+      "evra": "24.0.5-1.fc39.aarch64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-6.fc38.aarch64"
+      "evra": "2:0.6.0-7.fc39.aarch64"
     },
     "mpfr": {
-      "evra": "4.1.1-3.fc38.aarch64"
+      "evra": "4.2.0-3.fc39.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nano": {
-      "evra": "7.2-2.fc38.aarch64"
+      "evra": "7.2-4.fc39.aarch64"
     },
     "nano-default-editor": {
-      "evra": "7.2-2.fc38.noarch"
+      "evra": "7.2-4.fc39.noarch"
     },
     "ncurses": {
-      "evra": "6.4-3.20230114.fc38.aarch64"
+      "evra": "6.4-7.20230520.fc39.aarch64"
     },
     "ncurses-base": {
-      "evra": "6.4-3.20230114.fc38.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.4-3.20230114.fc38.aarch64"
+      "evra": "6.4-7.20230520.fc39.aarch64"
     },
     "net-tools": {
-      "evra": "2.0-0.65.20160912git.fc38.aarch64"
+      "evra": "2.0-0.67.20160912git.fc39.aarch64"
     },
     "netavark": {
-      "evra": "1.8.0-2.fc38.aarch64"
+      "evra": "1.8.0-2.fc39.aarch64"
     },
     "nettle": {
-      "evra": "3.8-3.fc38.aarch64"
+      "evra": "3.9.1-2.fc39.aarch64"
     },
     "newt": {
-      "evra": "0.52.23-2.fc38.aarch64"
+      "evra": "0.52.23-4.fc39.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-1.rc3.fc38.aarch64"
+      "evra": "1:2.6.3-2.rc3.fc39.aarch64"
     },
     "nftables": {
-      "evra": "1:1.0.5-2.fc38.aarch64"
+      "evra": "1:1.0.7-3.fc39.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc38.aarch64"
+      "evra": "2.2.15-1.fc39.aarch64"
     },
     "npth": {
-      "evra": "1.6-12.fc38.aarch64"
+      "evra": "1.6-14.fc39.aarch64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-22.fc38.aarch64"
+      "evra": "2.23.0-1.fc39.aarch64"
     },
     "numactl-libs": {
-      "evra": "2.0.16-2.fc38.aarch64"
+      "evra": "2.0.16-3.fc39.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-3.fc38.aarch64"
+      "evra": "2.6-1.fc39.aarch64"
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc38.aarch64"
+      "evra": "6.9.9-1.fc39.aarch64"
     },
     "openldap": {
-      "evra": "2.6.6-1.fc38.aarch64"
+      "evra": "2.6.6-1.fc39.aarch64"
     },
     "openssh": {
-      "evra": "9.0p1-17.fc38.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-17.fc38.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64"
     },
     "openssh-server": {
-      "evra": "9.0p1-17.fc38.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.9-2.fc38.aarch64"
+      "evra": "1:3.1.1-4.fc39.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-2.fc38.aarch64"
+      "evra": "1:3.1.1-4.fc39.aarch64"
     },
     "os-prober": {
-      "evra": "1.81-3.fc38.aarch64"
+      "evra": "1.81-4.fc39.aarch64"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.aarch64"
+      "evra": "2023.7-2.fc39.aarch64"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.aarch64"
+      "evra": "2023.7-2.fc39.aarch64"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc38.aarch64"
+      "evra": "0.25.2-1.fc39.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc38.aarch64"
+      "evra": "0.25.2-1.fc39.aarch64"
     },
     "pam": {
-      "evra": "1.5.2-16.fc38.aarch64"
+      "evra": "1.5.3-3.fc39.aarch64"
     },
     "pam-libs": {
-      "evra": "1.5.2-16.fc38.aarch64"
+      "evra": "1.5.3-3.fc39.aarch64"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc38.aarch64"
+      "evra": "0^20231004.gf851084-1.fc39.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc39.noarch"
     },
     "passwd": {
-      "evra": "0.80-14.fc38.aarch64"
+      "evra": "0.80-15.fc39.aarch64"
     },
     "pcre2": {
-      "evra": "10.42-1.fc38.1.aarch64"
+      "evra": "10.42-1.fc39.2.aarch64"
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc38.1.noarch"
+      "evra": "10.42-1.fc39.2.noarch"
     },
     "pigz": {
-      "evra": "2.7-3.fc38.aarch64"
+      "evra": "2.8-2.fc39.aarch64"
     },
     "pkgconf": {
-      "evra": "1.8.0-6.fc38.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-6.fc38.noarch"
+      "evra": "1.9.5-2.fc39.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-6.fc38.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc39.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.aarch64"
+      "evra": "5:4.7.0-1.fc39.aarch64"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc38.aarch64"
+      "evra": "3.5-8.fc39.aarch64"
     },
     "polkit": {
-      "evra": "122-3.fc38.1.aarch64"
+      "evra": "123-1.fc39.aarch64"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.1.aarch64"
+      "evra": "123-1.fc39.aarch64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-23.fc38.aarch64"
+      "evra": "0.1-26.fc39.aarch64"
     },
     "popt": {
-      "evra": "1.19-2.fc38.aarch64"
+      "evra": "1.19-3.fc39.aarch64"
     },
     "procps-ng": {
-      "evra": "3.3.17-11.fc38.aarch64"
+      "evra": "4.0.3-4.fc39.aarch64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-4.fc38.aarch64"
+      "evra": "1.4.1-5.fc39.aarch64"
     },
     "psmisc": {
-      "evra": "23.6-2.fc38.aarch64"
+      "evra": "23.6-4.fc39.aarch64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc38.noarch"
+      "evra": "20230812-1.fc39.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.6-1.fc38.aarch64"
+      "evra": "2:8.1.1-1.fc39.aarch64"
     },
     "readline": {
-      "evra": "8.2-3.fc38.aarch64"
+      "evra": "8.2-4.fc39.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc38.aarch64"
+      "evra": "1.2.6-4.rc2.fc39.1.aarch64"
     },
     "rpm": {
-      "evra": "4.18.1-3.fc38.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64"
     },
     "rpm-libs": {
-      "evra": "4.18.1-3.fc38.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc38.aarch64"
+      "evra": "2023.8-2.fc39.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc38.aarch64"
+      "evra": "2023.8-2.fc39.aarch64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-3.fc38.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64"
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc38.aarch64"
+      "evra": "1.5.0-1.fc39.aarch64"
     },
     "rsync": {
-      "evra": "3.2.7-2.fc38.aarch64"
+      "evra": "3.2.7-5.fc39.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc38.aarch64"
+      "evra": "2:1.1.8-1.fc39.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.8-1.fc38.aarch64"
+      "evra": "2:4.19.2-1.fc39.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.8-1.fc38.noarch"
+      "evra": "2:4.19.2-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.8-1.fc38.aarch64"
+      "evra": "2:4.19.2-1.fc39.aarch64"
     },
     "sed": {
-      "evra": "4.8-12.fc38.aarch64"
+      "evra": "4.8-14.fc39.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "setup": {
-      "evra": "2.14.3-2.fc38.noarch"
+      "evra": "2.14.4-1.fc39.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-5.fc38.aarch64"
+      "evra": "1.46-6.fc39.aarch64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-5.fc38.aarch64"
+      "evra": "1.46-6.fc39.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.13-6.fc38.aarch64"
+      "evra": "2:4.14.0-2.fc39.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-6.fc38.aarch64"
+      "evra": "2:4.14.0-2.fc39.aarch64"
     },
     "shared-mime-info": {
-      "evra": "2.2-3.fc38.aarch64"
+      "evra": "2.2-4.fc39.aarch64"
     },
     "shim-aa64": {
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc38.aarch64"
+      "evra": "1:1.13.3-1.fc39.aarch64"
     },
     "slang": {
-      "evra": "2.3.3-3.fc38.aarch64"
+      "evra": "2.3.3-4.fc39.aarch64"
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc38.aarch64"
+      "evra": "1.2.2-1.fc39.aarch64"
     },
     "snappy": {
-      "evra": "1.1.9-7.fc38.aarch64"
+      "evra": "1.1.10-2.fc39.aarch64"
     },
     "socat": {
-      "evra": "1.7.4.4-2.fc38.aarch64"
+      "evra": "1.7.4.4-3.fc39.aarch64"
+    },
+    "spdlog": {
+      "evra": "1.12.0-2.fc39.aarch64"
     },
     "sqlite-libs": {
-      "evra": "3.40.1-2.fc38.aarch64"
+      "evra": "3.42.0-7.fc39.aarch64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-3.fc38.aarch64"
+      "evra": "4.6.1-2.fc39.aarch64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-3.fc38.aarch64"
+      "evra": "0.1.4-4.fc39.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-client": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-common": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.1-1.fc38.aarch64"
+      "evra": "2.9.2-2.fc39.aarch64"
     },
     "stalld": {
-      "evra": "1.16-3.fc38.aarch64"
+      "evra": "1.16-4.fc39.aarch64"
     },
     "sudo": {
-      "evra": "1.9.13-2.p2.fc38.aarch64"
+      "evra": "1.9.14-1.p3.fc39.aarch64"
     },
     "systemd": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "systemd-container": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.12-1.fc38.aarch64"
+      "evra": "254.5-2.fc39.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-8.fc38.aarch64"
+      "evra": "2:1.35-2.fc39.aarch64"
     },
     "teamd": {
-      "evra": "1.31-7.fc38.aarch64"
+      "evra": "1.32-1.fc39.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc38.aarch64"
+      "evra": "0.0.99.4-3.fc39.aarch64"
     },
     "tpm2-tools": {
-      "evra": "5.5-3.fc38.aarch64"
+      "evra": "5.5-4.fc39.aarch64"
     },
     "tpm2-tss": {
-      "evra": "4.0.1-3.fc38.aarch64"
+      "evra": "4.0.1-4.fc39.aarch64"
     },
     "tzdata": {
-      "evra": "2023c-1.fc38.noarch"
+      "evra": "2023c-2.fc39.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.2-2.fc38.aarch64"
+      "evra": "0.14.0-3.fc39.aarch64"
     },
     "util-linux": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "util-linux-core": {
-      "evra": "2.38.1-4.fc38.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc38.aarch64"
+      "evra": "2:9.0.2081-1.fc39.aarch64"
+    },
+    "wasmedge-rt": {
+      "evra": "0.13.4-1.fc39.aarch64"
     },
     "which": {
-      "evra": "2.21-39.fc38.aarch64"
+      "evra": "2.21-40.fc39.aarch64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-4.fc38.aarch64"
+      "evra": "1.0.20210914-5.fc39.aarch64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-3.fc38.aarch64"
+      "evra": "6.4.0-1.fc39.aarch64"
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc38.aarch64"
+      "evra": "0.8.2-1.fc39.aarch64"
     },
     "xz": {
-      "evra": "5.4.1-1.fc38.aarch64"
+      "evra": "5.4.4-1.fc39.aarch64"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc38.aarch64"
+      "evra": "5.4.4-1.fc39.aarch64"
     },
     "yajl": {
-      "evra": "2.1.0-21.fc38.aarch64"
+      "evra": "2.1.0-22.fc39.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc38.aarch64"
+      "evra": "1.3.2-1.fc39.aarch64"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc38.aarch64"
+      "evra": "0.0.26-2.fc39.aarch64"
     },
     "zlib": {
-      "evra": "1.2.13-3.fc38.aarch64"
+      "evra": "1.2.13-4.fc39.aarch64"
     },
     "zram-generator": {
-      "evra": "1.1.2-4.fc38.aarch64"
+      "evra": "1.1.2-8.fc39.aarch64"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc38.aarch64"
+      "evra": "1.5.5-4.fc39.aarch64"
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-06T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-04-13T20:36:48Z"
+      "fedora-candidate-compose": {
+        "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:16:19Z"
+        "generated": "2023-11-05T01:43:40Z"
+      },
+      "fedora-next": {
+        "generated": "2023-11-03T02:50:15Z"
       },
-      "fedora-updates": {
-        "generated": "2023-11-04T03:32:31Z"
+      "fedora-next-updates": {
+        "generated": "2023-11-06T01:22:21Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1d1ec562ab..92fe471485 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,8 +9,8 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  moby-engine:
-    evr: 20.10.23-1.fc38
+  containerd:
+    evr: 1.6.19-2.fc39
     metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e0ad55dc89..03008da41f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,1298 +1,1301 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.8-1.fc38.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.8-1.fc38.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.8-1.fc38.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.8-1.fc38.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.8-1.fc38.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.0.4-1.fc38.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc38.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le"
     },
     "acl": {
-      "evra": "2.3.1-6.fc38.ppc64le"
+      "evra": "2.3.1-8.fc39.ppc64le"
     },
     "adcli": {
-      "evra": "0.9.2-2.fc38.ppc64le"
+      "evra": "0.9.2-3.fc39.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.2-1.fc38.ppc64le"
+      "evra": "5.4.2-2.fc39.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-1.fc38.ppc64le"
+      "evra": "5.4.2-2.fc39.ppc64le"
     },
     "alternatives": {
-      "evra": "1.25-1.fc38.ppc64le"
+      "evra": "1.25-1.fc39.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "amd-ucode-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "attr": {
-      "evra": "2.5.1-6.fc38.ppc64le"
+      "evra": "2.5.1-8.fc39.ppc64le"
+    },
+    "audit": {
+      "evra": "3.1.2-4.fc39.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.1.2-1.fc38.ppc64le"
+      "evra": "3.1.2-4.fc39.ppc64le"
     },
     "authselect": {
-      "evra": "1.4.3-1.fc38.ppc64le"
+      "evra": "1.4.3-1.fc39.ppc64le"
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc38.ppc64le"
+      "evra": "1.4.3-1.fc39.ppc64le"
     },
     "avahi-libs": {
-      "evra": "0.8-22.fc38.ppc64le"
+      "evra": "0.8-24.fc39.ppc64le"
     },
     "basesystem": {
-      "evra": "11-15.fc38.noarch"
+      "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-3.fc38.ppc64le"
+      "evra": "5.2.15-5.fc39.ppc64le"
+    },
+    "bash-color-prompt": {
+      "evra": "0.1-6.fc39.noarch"
     },
     "bash-completion": {
-      "evra": "1:2.11-9.fc38.noarch"
+      "evra": "1:2.11-12.fc39.noarch"
     },
     "bc": {
-      "evra": "1.07.1-17.fc38.ppc64le"
+      "evra": "1.07.1-19.fc39.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc38.ppc64le"
+      "evra": "32:9.18.19-1.fc39.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc38.ppc64le"
+      "evra": "32:9.18.19-1.fc39.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "bsdtar": {
-      "evra": "3.6.1-4.fc38.ppc64le"
+      "evra": "3.7.1-1.fc39.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc38.ppc64le"
+      "evra": "6.5.1-1.fc39.ppc64le"
     },
     "bubblewrap": {
-      "evra": "0.7.0-1.fc38.ppc64le"
+      "evra": "0.7.0-2.fc39.ppc64le"
     },
     "bzip2": {
-      "evra": "1.0.8-13.fc38.ppc64le"
+      "evra": "1.0.8-16.fc39.ppc64le"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-13.fc38.ppc64le"
+      "evra": "1.0.8-16.fc39.ppc64le"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc38.ppc64le"
+      "evra": "1.19.1-1.fc39.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-14.fc38.ppc64le"
+      "evra": "0.1.7-18.fc39.ppc64le"
     },
     "chrony": {
-      "evra": "4.4-1.fc38.ppc64le"
+      "evra": "4.4-1.fc39.ppc64le"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc38.ppc64le"
+      "evra": "7.0-2.fc39.ppc64le"
     },
     "clevis": {
-      "evra": "19-2.fc38.ppc64le"
+      "evra": "19-4.fc39.ppc64le"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc38.ppc64le"
+      "evra": "19-4.fc39.ppc64le"
     },
     "clevis-luks": {
-      "evra": "19-2.fc38.ppc64le"
+      "evra": "19-4.fc39.ppc64le"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc38.ppc64le"
+      "evra": "19-4.fc39.ppc64le"
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc38.noarch"
+      "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc38.ppc64le"
+      "evra": "2:2.1.7-3.fc39.ppc64le"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc38.ppc64le"
+      "evra": "1.6.19-2.fc39.ppc64le"
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-2.fc38.ppc64le"
+      "evra": "1.3.0-3.fc39.ppc64le"
     },
     "containers-common": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc38.ppc64le"
+      "evra": "0.18.0-1.fc39.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc38.ppc64le"
+      "evra": "0.18.0-1.fc39.ppc64le"
     },
     "coreutils": {
-      "evra": "9.1-12.fc38.ppc64le"
+      "evra": "9.3-4.fc39.ppc64le"
     },
     "coreutils-common": {
-      "evra": "9.1-12.fc38.ppc64le"
+      "evra": "9.3-4.fc39.ppc64le"
     },
     "cpio": {
-      "evra": "2.13-14.fc38.ppc64le"
+      "evra": "2.14-4.fc39.ppc64le"
     },
     "cracklib": {
-      "evra": "2.9.11-1.fc38.ppc64le"
+      "evra": "2.9.11-2.fc39.ppc64le"
     },
     "criu": {
-      "evra": "3.18-1.fc38.ppc64le"
+      "evra": "3.18-3.fc39.ppc64le"
     },
     "criu-libs": {
-      "evra": "3.18-1.fc38.ppc64le"
+      "evra": "3.18-3.fc39.ppc64le"
     },
     "crun": {
-      "evra": "1.11-1.fc38.ppc64le"
+      "evra": "1.11.1-1.fc39.ppc64le"
     },
     "crypto-policies": {
-      "evra": "20230301-1.gita12f7b2.fc38.noarch"
+      "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc38.ppc64le"
+      "evra": "2.6.1-3.fc39.ppc64le"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc38.ppc64le"
+      "evra": "2.6.1-3.fc39.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-5.fc38.ppc64le"
+      "evra": "8.2.1-3.fc39.ppc64le"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-9.fc38.ppc64le"
+      "evra": "2.1.28-11.fc39.ppc64le"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-9.fc38.ppc64le"
+      "evra": "2.1.28-11.fc39.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc39.ppc64le"
     },
     "dbus-broker": {
-      "evra": "33-1.fc38.ppc64le"
+      "evra": "33-2.fc39.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc39.ppc64le"
     },
     "device-mapper": {
-      "evra": "1.02.189-2.fc38.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le"
     },
     "device-mapper-event": {
-      "evra": "1.02.189-2.fc38.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.189-2.fc38.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le"
     },
     "device-mapper-libs": {
-      "evra": "1.02.189-2.fc38.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.4-2.fc38.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.4-2.fc38.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-10.fc38.ppc64le"
+      "evra": "1.0.6-2.fc39.ppc64le"
     },
     "diffutils": {
-      "evra": "3.10-1.fc38.ppc64le"
+      "evra": "3.10-3.fc39.ppc64le"
     },
     "dnsmasq": {
-      "evra": "2.89-5.fc38.ppc64le"
+      "evra": "2.89-6.fc39.ppc64le"
     },
     "dosfstools": {
-      "evra": "4.2-6.fc38.ppc64le"
+      "evra": "4.2-7.fc39.ppc64le"
     },
     "dracut": {
-      "evra": "059-4.fc38.ppc64le"
+      "evra": "059-15.fc39.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-4.fc38.ppc64le"
+      "evra": "059-15.fc39.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-4.fc38.ppc64le"
+      "evra": "059-15.fc39.ppc64le"
     },
     "duktape": {
-      "evra": "2.7.0-2.fc38.ppc64le"
+      "evra": "2.7.0-5.fc39.ppc64le"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-4.fc38.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-4.fc38.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-3.fc38.noarch"
+      "evra": "0.189-4.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-3.fc38.ppc64le"
+      "evra": "0.189-4.fc39.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.189-3.fc38.ppc64le"
+      "evra": "0.189-4.fc39.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc38.ppc64le"
+      "evra": "2:6.5-1.fc39.ppc64le"
     },
     "expat": {
-      "evra": "2.5.0-2.fc38.ppc64le"
+      "evra": "2.5.0-3.fc39.ppc64le"
     },
     "fedora-gpg-keys": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-repos": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "38-1.noarch"
-    },
-    "fedora-repos-modular": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "file": {
-      "evra": "5.44-3.fc38.ppc64le"
+      "evra": "5.44-5.fc39.ppc64le"
     },
     "file-libs": {
-      "evra": "5.44-3.fc38.ppc64le"
+      "evra": "5.44-5.fc39.ppc64le"
     },
     "filesystem": {
-      "evra": "3.18-3.fc38.ppc64le"
+      "evra": "3.18-6.fc39.ppc64le"
     },
     "findutils": {
-      "evra": "1:4.9.0-3.fc38.ppc64le"
+      "evra": "1:4.9.0-5.fc39.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-1.fc38.ppc64le"
+      "evra": "1.15.4-3.fc39.ppc64le"
     },
     "fstrm": {
-      "evra": "0.6.1-6.fc38.ppc64le"
+      "evra": "0.6.1-8.fc39.ppc64le"
     },
     "fuse": {
-      "evra": "2.9.9-16.fc38.ppc64le"
+      "evra": "2.9.9-17.fc39.ppc64le"
     },
     "fuse-common": {
-      "evra": "3.14.1-1.fc38.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le"
     },
     "fuse-libs": {
-      "evra": "2.9.9-16.fc38.ppc64le"
+      "evra": "2.9.9-17.fc39.ppc64le"
     },
     "fuse-overlayfs": {
-      "evra": "1.12-1.fc38.ppc64le"
+      "evra": "1.12-2.fc39.ppc64le"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-3.fc38.ppc64le"
+      "evra": "3.7.3-4.fc39.ppc64le"
     },
     "fuse3": {
-      "evra": "3.14.1-1.fc38.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le"
     },
     "fuse3-libs": {
-      "evra": "3.14.1-1.fc38.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc38.ppc64le"
+      "evra": "1.9.7-1.fc39.ppc64le"
     },
     "gawk": {
-      "evra": "5.1.1-5.fc38.ppc64le"
+      "evra": "5.2.2-2.fc39.ppc64le"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-3.fc38.ppc64le"
+      "evra": "1:1.23-4.fc39.ppc64le"
     },
     "gdisk": {
-      "evra": "1.0.9-5.fc38.ppc64le"
+      "evra": "1.0.9-6.fc39.ppc64le"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-2.fc38.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le"
     },
     "gettext-libs": {
-      "evra": "0.21.1-2.fc38.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-2.fc38.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le"
     },
     "git-core": {
-      "evra": "2.41.0-1.fc38.ppc64le"
+      "evra": "2.41.0-2.fc39.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.5-2.fc38.ppc64le"
+      "evra": "2.78.1-1.fc39.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-13.fc38.ppc64le"
+      "evra": "2.38-10.fc39.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-13.fc38.ppc64le"
+      "evra": "2.38-10.fc39.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-13.fc38.ppc64le"
+      "evra": "2.38-10.fc39.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-13.fc38.ppc64le"
+      "evra": "2.38-10.fc39.ppc64le"
     },
     "gmp": {
-      "evra": "1:6.2.1-4.fc38.ppc64le"
+      "evra": "1:6.2.1-5.fc39.ppc64le"
     },
     "gnupg2": {
-      "evra": "2.4.0-3.fc38.ppc64le"
+      "evra": "2.4.3-2.fc39.ppc64le"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc38.ppc64le"
+      "evra": "3.8.1-1.fc39.ppc64le"
     },
     "gpgme": {
-      "evra": "1.17.1-5.fc38.ppc64le"
+      "evra": "1.20.0-5.fc39.ppc64le"
     },
     "grep": {
-      "evra": "3.8-3.fc38.ppc64le"
+      "evra": "3.11-3.fc39.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-102.fc38.noarch"
+      "evra": "1:2.06-104.fc39.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-102.fc38.ppc64le"
+      "evra": "1:2.06-104.fc39.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-102.fc38.noarch"
+      "evra": "1:2.06-104.fc39.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-102.fc38.ppc64le"
+      "evra": "1:2.06-104.fc39.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-102.fc38.ppc64le"
+      "evra": "1:2.06-104.fc39.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc38.ppc64le"
+      "evra": "6:0.7.1-1.fc39.ppc64le"
     },
     "gzip": {
-      "evra": "1.12-3.fc38.ppc64le"
+      "evra": "1.12-6.fc39.ppc64le"
     },
     "hostname": {
-      "evra": "3.23-8.fc38.ppc64le"
+      "evra": "3.23-9.fc39.ppc64le"
     },
     "ignition": {
-      "evra": "2.16.2-1.fc38.ppc64le"
+      "evra": "2.16.2-2.fc39.ppc64le"
     },
     "inih": {
-      "evra": "57-1.fc38.ppc64le"
+      "evra": "57-2.fc39.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.3-1.fc38.ppc64le"
+      "evra": "1.0.3-2.fc39.ppc64le"
     },
     "iproute": {
-      "evra": "6.4.0-1.fc38.ppc64le"
+      "evra": "6.4.0-2.fc39.ppc64le"
     },
     "iproute-tc": {
-      "evra": "6.4.0-1.fc38.ppc64le"
+      "evra": "6.4.0-2.fc39.ppc64le"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.1.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.1.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.1.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.1.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.1.noarch"
+      "evra": "1.8.9-5.fc39.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.1.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le"
     },
     "iputils": {
-      "evra": "20221126-2.fc38.ppc64le"
+      "evra": "20221126-4.fc39.ppc64le"
     },
     "irqbalance": {
-      "evra": "2:1.9.2-1.fc38.ppc64le"
+      "evra": "2:1.9.2-2.fc39.ppc64le"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.ppc64le"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.ppc64le"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le"
     },
     "isns-utils-libs": {
-      "evra": "0.101-6.fc38.ppc64le"
+      "evra": "0.101-7.fc39.ppc64le"
     },
     "jansson": {
-      "evra": "2.13.1-6.fc38.ppc64le"
+      "evra": "2.13.1-7.fc39.ppc64le"
     },
     "jemalloc": {
-      "evra": "5.3.0-3.fc38.ppc64le"
+      "evra": "5.3.0-4.fc39.ppc64le"
     },
     "jose": {
-      "evra": "11-7.fc38.ppc64le"
+      "evra": "11-8.fc39.ppc64le"
     },
     "jq": {
-      "evra": "1.6-16.fc38.ppc64le"
+      "evra": "1.6-17.fc39.ppc64le"
     },
     "json-c": {
-      "evra": "0.17-1.fc38.ppc64le"
+      "evra": "0.17-1.fc39.ppc64le"
     },
     "json-glib": {
-      "evra": "1.6.6-4.fc38.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le"
     },
     "kbd": {
-      "evra": "2.5.1-5.fc38.ppc64le"
+      "evra": "2.6.3-1.fc39.ppc64le"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-200.fc38.ppc64le"
+      "evra": "6.5.9-300.fc39.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.9-200.fc38.ppc64le"
+      "evra": "6.5.9-300.fc39.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.9-200.fc38.ppc64le"
+      "evra": "6.5.9-300.fc39.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-200.fc38.ppc64le"
+      "evra": "6.5.9-300.fc39.ppc64le"
     },
     "kexec-tools": {
-      "evra": "2.0.26-3.fc38.ppc64le"
+      "evra": "2.0.27-2.fc39.ppc64le"
     },
     "keyutils": {
-      "evra": "1.6.1-6.fc38.ppc64le"
+      "evra": "1.6.1-7.fc39.ppc64le"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-6.fc38.ppc64le"
+      "evra": "1.6.1-7.fc39.ppc64le"
     },
     "kmod": {
-      "evra": "30-4.fc38.ppc64le"
+      "evra": "30-6.fc39.ppc64le"
     },
     "kmod-libs": {
-      "evra": "30-4.fc38.ppc64le"
+      "evra": "30-6.fc39.ppc64le"
     },
     "kpartx": {
-      "evra": "0.9.4-2.fc38.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le"
     },
     "krb5-libs": {
-      "evra": "1.21-3.fc38.ppc64le"
+      "evra": "1.21.2-2.fc39.ppc64le"
     },
     "less": {
-      "evra": "633-1.fc38.ppc64le"
+      "evra": "633-2.fc39.ppc64le"
     },
     "libacl": {
-      "evra": "2.3.1-6.fc38.ppc64le"
+      "evra": "2.3.1-8.fc39.ppc64le"
     },
     "libaio": {
-      "evra": "0.3.111-15.fc38.ppc64le"
+      "evra": "0.3.111-16.fc39.ppc64le"
     },
     "libarchive": {
-      "evra": "3.6.1-4.fc38.ppc64le"
+      "evra": "3.7.1-1.fc39.ppc64le"
     },
     "libargon2": {
-      "evra": "20190702-2.fc38.ppc64le"
+      "evra": "20190702-3.fc39.ppc64le"
     },
     "libassuan": {
-      "evra": "2.5.6-1.fc38.ppc64le"
+      "evra": "2.5.6-2.fc39.ppc64le"
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc38.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le"
     },
     "libattr": {
-      "evra": "2.5.1-6.fc38.ppc64le"
+      "evra": "2.5.1-8.fc39.ppc64le"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-53.fc38.ppc64le"
+      "evra": "0.1.1-54.fc39.ppc64le"
     },
     "libblkid": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libbpf": {
-      "evra": "2:1.1.0-2.fc38.ppc64le"
+      "evra": "2:1.1.0-4.fc39.ppc64le"
     },
     "libbsd": {
-      "evra": "0.11.7-4.fc38.ppc64le"
+      "evra": "0.11.7-5.fc39.ppc64le"
     },
     "libcap": {
-      "evra": "2.48-6.fc38.ppc64le"
+      "evra": "2.48-7.fc39.ppc64le"
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc38.ppc64le"
+      "evra": "0.8.3-8.fc39.ppc64le"
     },
     "libcbor": {
-      "evra": "0.7.0-9.fc38.ppc64le"
+      "evra": "0.10.2-2.fc39.ppc64le"
     },
     "libcollection": {
-      "evra": "0.7.0-53.fc38.ppc64le"
+      "evra": "0.7.0-54.fc39.ppc64le"
     },
     "libcom_err": {
-      "evra": "1.46.5-4.fc38.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-5.fc38.ppc64le"
+      "evra": "8.2.1-3.fc39.ppc64le"
     },
     "libdaemon": {
-      "evra": "0.14-25.fc38.ppc64le"
+      "evra": "0.14-26.fc39.ppc64le"
     },
     "libdb": {
-      "evra": "5.3.28-55.fc38.ppc64le"
+      "evra": "5.3.28-56.fc39.ppc64le"
     },
     "libdhash": {
-      "evra": "0.5.0-53.fc38.ppc64le"
+      "evra": "0.5.0-54.fc39.ppc64le"
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc38.ppc64le"
+      "evra": "0.5.2-1.fc39.ppc64le"
     },
     "libedit": {
-      "evra": "3.1-45.20221030cvs.fc38.ppc64le"
+      "evra": "3.1-48.20230828cvs.fc39.ppc64le"
     },
     "libevent": {
-      "evra": "2.1.12-8.fc38.ppc64le"
+      "evra": "2.1.12-9.fc39.ppc64le"
     },
     "libfdisk": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libffi": {
-      "evra": "3.4.4-2.fc38.ppc64le"
+      "evra": "3.4.4-4.fc39.ppc64le"
     },
     "libfido2": {
-      "evra": "1.12.0-3.fc38.ppc64le"
+      "evra": "1.13.0-3.fc39.ppc64le"
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc38.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le"
     },
     "libgcrypt": {
-      "evra": "1.10.2-1.fc38.ppc64le"
+      "evra": "1.10.2-2.fc39.ppc64le"
     },
     "libgpg-error": {
-      "evra": "1.47-1.fc38.ppc64le"
+      "evra": "1.47-2.fc39.ppc64le"
     },
     "libgudev": {
-      "evra": "237-4.fc38.ppc64le"
+      "evra": "238-2.fc39.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc38.ppc64le"
+      "evra": "0.4.7-1.fc39.ppc64le"
     },
     "libibverbs": {
-      "evra": "44.0-3.fc38.ppc64le"
+      "evra": "46.0-4.fc39.ppc64le"
     },
     "libicu": {
-      "evra": "72.1-2.fc38.ppc64le"
+      "evra": "73.2-2.fc39.ppc64le"
     },
     "libidn2": {
-      "evra": "2.3.4-2.fc38.ppc64le"
+      "evra": "2.3.4-3.fc39.ppc64le"
     },
     "libini_config": {
-      "evra": "1.3.1-53.fc38.ppc64le"
+      "evra": "1.3.1-54.fc39.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc38.ppc64le"
+      "evra": "0.1.14-2.fc39.ppc64le"
     },
     "libjose": {
-      "evra": "11-7.fc38.ppc64le"
+      "evra": "11-8.fc39.ppc64le"
     },
     "libkcapi": {
-      "evra": "1.4.0-5.fc38.ppc64le"
+      "evra": "1.4.0-7.fc39.ppc64le"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-5.fc38.ppc64le"
+      "evra": "1.4.0-7.fc39.ppc64le"
     },
     "libksba": {
-      "evra": "1.6.4-1.fc38.ppc64le"
+      "evra": "1.6.4-2.fc39.ppc64le"
     },
     "libldb": {
-      "evra": "2.7.2-1.fc38.ppc64le"
+      "evra": "2.8.0-1.fc39.ppc64le"
     },
     "libluksmeta": {
-      "evra": "9-15.fc38.ppc64le"
+      "evra": "9-16.fc39.ppc64le"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-2.fc38.ppc64le"
+      "evra": "1.7.1-3.fc39.ppc64le"
     },
     "libmd": {
-      "evra": "1.1.0-1.fc38.ppc64le"
+      "evra": "1.1.0-2.fc39.ppc64le"
     },
     "libmnl": {
-      "evra": "1.0.5-2.fc38.ppc64le"
+      "evra": "1.0.5-3.fc39.ppc64le"
     },
     "libmodulemd": {
-      "evra": "2.15.0-2.fc38.ppc64le"
+      "evra": "2.15.0-5.fc39.ppc64le"
     },
     "libmount": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libndp": {
-      "evra": "1.8-5.fc38.ppc64le"
+      "evra": "1.8-6.fc39.ppc64le"
     },
     "libnet": {
-      "evra": "1.3-1.fc38.ppc64le"
+      "evra": "1.3-1.fc39.ppc64le"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-1.fc38.ppc64le"
+      "evra": "1.0.9-2.fc39.ppc64le"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-23.fc38.ppc64le"
+      "evra": "1.0.1-24.fc39.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-1.rc3.fc38.ppc64le"
+      "evra": "1:2.6.3-2.rc3.fc39.ppc64le"
     },
     "libnftnl": {
-      "evra": "1.2.4-2.fc38.ppc64le"
+      "evra": "1.2.6-2.fc39.ppc64le"
     },
     "libnghttp2": {
-      "evra": "1.52.0-2.fc38.ppc64le"
+      "evra": "1.55.1-4.fc39.ppc64le"
     },
     "libnl3": {
-      "evra": "3.7.0-3.fc38.ppc64le"
+      "evra": "3.8.0-1.fc39.ppc64le"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-3.fc38.ppc64le"
+      "evra": "3.8.0-1.fc39.ppc64le"
     },
     "libnsl2": {
-      "evra": "2.0.0-5.fc38.ppc64le"
+      "evra": "2.0.0-6.fc39.ppc64le"
     },
     "libnvme": {
-      "evra": "1.4-2.fc38.ppc64le"
+      "evra": "1.6-2.fc39.ppc64le"
     },
     "libpath_utils": {
-      "evra": "0.2.1-53.fc38.ppc64le"
+      "evra": "0.2.1-54.fc39.ppc64le"
     },
     "libpcap": {
-      "evra": "14:1.10.4-1.fc38.ppc64le"
+      "evra": "14:1.10.4-2.fc39.ppc64le"
     },
     "libpkgconf": {
-      "evra": "1.8.0-6.fc38.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le"
     },
     "libpsl": {
-      "evra": "0.21.2-2.fc38.ppc64le"
+      "evra": "0.21.2-4.fc39.ppc64le"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc38.ppc64le"
+      "evra": "1.4.5-6.fc39.ppc64le"
     },
     "libref_array": {
-      "evra": "0.1.5-53.fc38.ppc64le"
+      "evra": "0.1.5-54.fc39.ppc64le"
     },
     "librepo": {
-      "evra": "1.17.0-1.fc38.ppc64le"
+      "evra": "1.17.0-1.fc39.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-1.fc38.noarch"
+      "evra": "2.17.11-3.fc39.noarch"
     },
     "librtas": {
-      "evra": "2.0.4-1.fc38.ppc64le"
+      "evra": "2.0.4-3.fc39.ppc64le"
     },
     "libseccomp": {
-      "evra": "2.5.3-4.fc38.ppc64le"
+      "evra": "2.5.3-6.fc39.ppc64le"
     },
     "libselinux": {
-      "evra": "3.5-1.fc38.ppc64le"
+      "evra": "3.5-5.fc39.ppc64le"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc38.ppc64le"
+      "evra": "3.5-5.fc39.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc38.ppc64le"
+      "evra": "3.5-4.fc39.ppc64le"
     },
     "libsepol": {
-      "evra": "3.5-1.fc38.ppc64le"
+      "evra": "3.5-2.fc39.ppc64le"
     },
     "libservicelog": {
-      "evra": "1.1.19-5.fc38.ppc64le"
+      "evra": "1.1.19-8.fc39.ppc64le"
     },
     "libsigsegv": {
-      "evra": "2.14-4.fc38.ppc64le"
+      "evra": "2.14-5.fc39.ppc64le"
     },
     "libslirp": {
-      "evra": "4.7.0-3.fc38.ppc64le"
+      "evra": "4.7.0-4.fc39.ppc64le"
     },
     "libsmartcols": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.8-1.fc38.ppc64le"
+      "evra": "2:4.19.2-1.fc39.ppc64le"
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc38.ppc64le"
+      "evra": "0.7.25-1.fc39.ppc64le"
     },
     "libss": {
-      "evra": "1.46.5-4.fc38.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc38.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le"
     },
     "libtalloc": {
-      "evra": "2.4.0-2.fc38.ppc64le"
+      "evra": "2.4.1-1.fc39.ppc64le"
     },
     "libtasn1": {
-      "evra": "4.19.0-2.fc38.ppc64le"
+      "evra": "4.19.0-3.fc39.ppc64le"
     },
     "libtdb": {
-      "evra": "1.4.8-1.fc38.ppc64le"
+      "evra": "1.4.9-1.fc39.ppc64le"
     },
     "libteam": {
-      "evra": "1.31-7.fc38.ppc64le"
+      "evra": "1.32-1.fc39.ppc64le"
     },
     "libtevent": {
-      "evra": "0.14.1-1.fc38.ppc64le"
+      "evra": "0.15.0-1.fc39.ppc64le"
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc38.ppc64le"
+      "evra": "1.3.4-0.fc39.ppc64le"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-6.fc38.ppc64le"
+      "evra": "2.4.7-7.fc39.ppc64le"
     },
     "libunistring": {
-      "evra": "1.1-3.fc38.ppc64le"
-    },
-    "libunistring1.0": {
-      "evra": "1.0-1.fc38.ppc64le"
+      "evra": "1.1-5.fc39.ppc64le"
     },
     "libusb1": {
-      "evra": "1.0.26-2.fc38.ppc64le"
+      "evra": "1.0.26-3.fc39.ppc64le"
     },
     "libuser": {
-      "evra": "0.64-2.fc38.ppc64le"
+      "evra": "0.64-4.fc39.ppc64le"
     },
     "libutempter": {
-      "evra": "1.2.1-8.fc38.ppc64le"
+      "evra": "1.2.1-10.fc39.ppc64le"
     },
     "libuuid": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libuv": {
-      "evra": "1:1.46.0-1.fc38.ppc64le"
+      "evra": "1:1.46.0-2.fc39.ppc64le"
     },
     "libverto": {
-      "evra": "0.3.2-5.fc38.ppc64le"
+      "evra": "0.3.2-6.fc39.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.8-1.fc38.ppc64le"
+      "evra": "2:4.19.2-1.fc39.ppc64le"
     },
     "libxcrypt": {
-      "evra": "4.4.36-1.fc38.ppc64le"
+      "evra": "4.4.36-2.fc39.ppc64le"
     },
     "libxml2": {
-      "evra": "2.10.4-1.fc38.ppc64le"
+      "evra": "2.10.4-3.fc39.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc38.ppc64le"
+      "evra": "0.3.14-1.fc39.ppc64le"
     },
     "libyaml": {
-      "evra": "0.2.5-9.fc38.ppc64le"
+      "evra": "0.2.5-12.fc39.ppc64le"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc38.ppc64le"
+      "evra": "1.5.5-4.fc39.ppc64le"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-34.fc38.ppc64le"
+      "evra": "2.5.1-36.fc39.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.31-1.fc38.ppc64le"
+      "evra": "0.9.31-2.fc39.ppc64le"
     },
     "logrotate": {
-      "evra": "3.21.0-2.fc38.ppc64le"
+      "evra": "3.21.0-4.fc39.ppc64le"
     },
     "lsof": {
-      "evra": "4.96.3-3.fc38.ppc64le"
+      "evra": "4.96.3-4.fc39.ppc64le"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc38.ppc64le"
+      "evra": "5.4.6-3.fc39.ppc64le"
     },
     "luksmeta": {
-      "evra": "9-15.fc38.ppc64le"
+      "evra": "9-16.fc39.ppc64le"
     },
     "lvm2": {
-      "evra": "2.03.18-2.fc38.ppc64le"
+      "evra": "2.03.22-1.fc39.ppc64le"
     },
     "lvm2-libs": {
-      "evra": "2.03.18-2.fc38.ppc64le"
+      "evra": "2.03.22-1.fc39.ppc64le"
     },
     "lz4-libs": {
-      "evra": "1.9.4-2.fc38.ppc64le"
+      "evra": "1.9.4-4.fc39.ppc64le"
     },
     "lzo": {
-      "evra": "2.10-8.fc38.ppc64le"
+      "evra": "2.10-9.fc39.ppc64le"
     },
     "mdadm": {
-      "evra": "4.2-4.fc38.ppc64le"
+      "evra": "4.2-6.fc39.ppc64le"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc38.ppc64le"
+      "evra": "24.0.5-1.fc39.ppc64le"
     },
     "mpfr": {
-      "evra": "4.1.1-3.fc38.ppc64le"
+      "evra": "4.2.0-3.fc39.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nano": {
-      "evra": "7.2-2.fc38.ppc64le"
+      "evra": "7.2-4.fc39.ppc64le"
     },
     "nano-default-editor": {
-      "evra": "7.2-2.fc38.noarch"
+      "evra": "7.2-4.fc39.noarch"
     },
     "ncurses": {
-      "evra": "6.4-3.20230114.fc38.ppc64le"
+      "evra": "6.4-7.20230520.fc39.ppc64le"
     },
     "ncurses-base": {
-      "evra": "6.4-3.20230114.fc38.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.4-3.20230114.fc38.ppc64le"
+      "evra": "6.4-7.20230520.fc39.ppc64le"
     },
     "net-tools": {
-      "evra": "2.0-0.65.20160912git.fc38.ppc64le"
+      "evra": "2.0-0.67.20160912git.fc39.ppc64le"
     },
     "netavark": {
-      "evra": "1.8.0-2.fc38.ppc64le"
+      "evra": "1.8.0-2.fc39.ppc64le"
     },
     "nettle": {
-      "evra": "3.8-3.fc38.ppc64le"
+      "evra": "3.9.1-2.fc39.ppc64le"
     },
     "newt": {
-      "evra": "0.52.23-2.fc38.ppc64le"
+      "evra": "0.52.23-4.fc39.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-1.rc3.fc38.ppc64le"
+      "evra": "1:2.6.3-2.rc3.fc39.ppc64le"
     },
     "nftables": {
-      "evra": "1:1.0.5-2.fc38.ppc64le"
+      "evra": "1:1.0.7-3.fc39.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc38.ppc64le"
+      "evra": "2.2.15-1.fc39.ppc64le"
     },
     "npth": {
-      "evra": "1.6-12.fc38.ppc64le"
+      "evra": "1.6-14.fc39.ppc64le"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-22.fc38.ppc64le"
+      "evra": "2.23.0-1.fc39.ppc64le"
     },
     "numactl-libs": {
-      "evra": "2.0.16-2.fc38.ppc64le"
+      "evra": "2.0.16-3.fc39.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-3.fc38.ppc64le"
+      "evra": "2.6-1.fc39.ppc64le"
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc38.ppc64le"
+      "evra": "6.9.9-1.fc39.ppc64le"
     },
     "openldap": {
-      "evra": "2.6.6-1.fc38.ppc64le"
+      "evra": "2.6.6-1.fc39.ppc64le"
     },
     "openssh": {
-      "evra": "9.0p1-17.fc38.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le"
     },
     "openssh-clients": {
-      "evra": "9.0p1-17.fc38.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le"
     },
     "openssh-server": {
-      "evra": "9.0p1-17.fc38.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.9-2.fc38.ppc64le"
+      "evra": "1:3.1.1-4.fc39.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-2.fc38.ppc64le"
+      "evra": "1:3.1.1-4.fc39.ppc64le"
     },
     "os-prober": {
-      "evra": "1.81-3.fc38.ppc64le"
+      "evra": "1.81-4.fc39.ppc64le"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le"
     },
     "ostree-grub2": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc38.ppc64le"
+      "evra": "0.25.2-1.fc39.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc38.ppc64le"
+      "evra": "0.25.2-1.fc39.ppc64le"
     },
     "pam": {
-      "evra": "1.5.2-16.fc38.ppc64le"
+      "evra": "1.5.3-3.fc39.ppc64le"
     },
     "pam-libs": {
-      "evra": "1.5.2-16.fc38.ppc64le"
+      "evra": "1.5.3-3.fc39.ppc64le"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc38.ppc64le"
+      "evra": "0^20231004.gf851084-1.fc39.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc39.noarch"
     },
     "passwd": {
-      "evra": "0.80-14.fc38.ppc64le"
+      "evra": "0.80-15.fc39.ppc64le"
     },
     "pcre2": {
-      "evra": "10.42-1.fc38.1.ppc64le"
+      "evra": "10.42-1.fc39.2.ppc64le"
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc38.1.noarch"
+      "evra": "10.42-1.fc39.2.noarch"
     },
     "pigz": {
-      "evra": "2.7-3.fc38.ppc64le"
+      "evra": "2.8-2.fc39.ppc64le"
     },
     "pkgconf": {
-      "evra": "1.8.0-6.fc38.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-6.fc38.noarch"
+      "evra": "1.9.5-2.fc39.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-6.fc38.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc39.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.ppc64le"
+      "evra": "5:4.7.0-1.fc39.ppc64le"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc38.ppc64le"
+      "evra": "3.5-8.fc39.ppc64le"
     },
     "polkit": {
-      "evra": "122-3.fc38.1.ppc64le"
+      "evra": "123-1.fc39.ppc64le"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.1.ppc64le"
+      "evra": "123-1.fc39.ppc64le"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-23.fc38.ppc64le"
+      "evra": "0.1-26.fc39.ppc64le"
     },
     "popt": {
-      "evra": "1.19-2.fc38.ppc64le"
+      "evra": "1.19-3.fc39.ppc64le"
     },
     "powerpc-utils-core": {
-      "evra": "1.3.11-1.fc38.ppc64le"
+      "evra": "1.3.11-4.fc39.ppc64le"
     },
     "ppc64-diag-rtas": {
-      "evra": "2.7.9-2.fc38.ppc64le"
+      "evra": "2.7.9-4.fc39.ppc64le"
     },
     "procps-ng": {
-      "evra": "3.3.17-11.fc38.ppc64le"
+      "evra": "4.0.3-4.fc39.ppc64le"
     },
     "protobuf-c": {
-      "evra": "1.4.1-4.fc38.ppc64le"
+      "evra": "1.4.1-5.fc39.ppc64le"
     },
     "psmisc": {
-      "evra": "23.6-2.fc38.ppc64le"
+      "evra": "23.6-4.fc39.ppc64le"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc38.noarch"
+      "evra": "20230812-1.fc39.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.6-1.fc38.ppc64le"
+      "evra": "2:8.1.1-1.fc39.ppc64le"
     },
     "readline": {
-      "evra": "8.2-3.fc38.ppc64le"
+      "evra": "8.2-4.fc39.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc38.ppc64le"
+      "evra": "1.2.6-4.rc2.fc39.1.ppc64le"
     },
     "rpm": {
-      "evra": "4.18.1-3.fc38.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le"
     },
     "rpm-libs": {
-      "evra": "4.18.1-3.fc38.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc38.ppc64le"
+      "evra": "2023.8-2.fc39.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc38.ppc64le"
+      "evra": "2023.8-2.fc39.ppc64le"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-3.fc38.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le"
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc38.ppc64le"
+      "evra": "1.5.0-1.fc39.ppc64le"
     },
     "rsync": {
-      "evra": "3.2.7-2.fc38.ppc64le"
+      "evra": "3.2.7-5.fc39.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc38.ppc64le"
+      "evra": "2:1.1.8-1.fc39.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.8-1.fc38.ppc64le"
+      "evra": "2:4.19.2-1.fc39.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.8-1.fc38.noarch"
+      "evra": "2:4.19.2-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.8-1.fc38.ppc64le"
+      "evra": "2:4.19.2-1.fc39.ppc64le"
     },
     "sed": {
-      "evra": "4.8-12.fc38.ppc64le"
+      "evra": "4.8-14.fc39.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "servicelog": {
-      "evra": "1.1.16-3.fc38.ppc64le"
+      "evra": "1.1.16-5.fc39.ppc64le"
     },
     "setup": {
-      "evra": "2.14.3-2.fc38.noarch"
+      "evra": "2.14.4-1.fc39.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-5.fc38.ppc64le"
+      "evra": "1.46-6.fc39.ppc64le"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-5.fc38.ppc64le"
+      "evra": "1.46-6.fc39.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.13-6.fc38.ppc64le"
+      "evra": "2:4.14.0-2.fc39.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-6.fc38.ppc64le"
+      "evra": "2:4.14.0-2.fc39.ppc64le"
     },
     "shared-mime-info": {
-      "evra": "2.2-3.fc38.ppc64le"
+      "evra": "2.2-4.fc39.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc38.ppc64le"
+      "evra": "1:1.13.3-1.fc39.ppc64le"
     },
     "slang": {
-      "evra": "2.3.3-3.fc38.ppc64le"
+      "evra": "2.3.3-4.fc39.ppc64le"
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc38.ppc64le"
+      "evra": "1.2.2-1.fc39.ppc64le"
     },
     "snappy": {
-      "evra": "1.1.9-7.fc38.ppc64le"
+      "evra": "1.1.10-2.fc39.ppc64le"
     },
     "socat": {
-      "evra": "1.7.4.4-2.fc38.ppc64le"
+      "evra": "1.7.4.4-3.fc39.ppc64le"
     },
     "sqlite-libs": {
-      "evra": "3.40.1-2.fc38.ppc64le"
+      "evra": "3.42.0-7.fc39.ppc64le"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-3.fc38.ppc64le"
+      "evra": "4.6.1-2.fc39.ppc64le"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-3.fc38.ppc64le"
+      "evra": "0.1.4-4.fc39.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.1-1.fc38.ppc64le"
+      "evra": "2.9.2-2.fc39.ppc64le"
     },
     "stalld": {
-      "evra": "1.16-3.fc38.ppc64le"
+      "evra": "1.16-4.fc39.ppc64le"
     },
     "sudo": {
-      "evra": "1.9.13-2.p2.fc38.ppc64le"
+      "evra": "1.9.14-1.p3.fc39.ppc64le"
     },
     "systemd": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.12-1.fc38.ppc64le"
+      "evra": "254.5-2.fc39.ppc64le"
     },
     "tar": {
-      "evra": "2:1.34-8.fc38.ppc64le"
+      "evra": "2:1.35-2.fc39.ppc64le"
     },
     "teamd": {
-      "evra": "1.31-7.fc38.ppc64le"
+      "evra": "1.32-1.fc39.ppc64le"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc38.ppc64le"
+      "evra": "0.0.99.4-3.fc39.ppc64le"
     },
     "tpm2-tools": {
-      "evra": "5.5-3.fc38.ppc64le"
+      "evra": "5.5-4.fc39.ppc64le"
     },
     "tpm2-tss": {
-      "evra": "4.0.1-3.fc38.ppc64le"
+      "evra": "4.0.1-4.fc39.ppc64le"
     },
     "tzdata": {
-      "evra": "2023c-1.fc38.noarch"
+      "evra": "2023c-2.fc39.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.2-2.fc38.ppc64le"
+      "evra": "0.14.0-3.fc39.ppc64le"
     },
     "util-linux": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "util-linux-core": {
-      "evra": "2.38.1-4.fc38.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc38.ppc64le"
+      "evra": "2:9.0.2081-1.fc39.ppc64le"
     },
     "which": {
-      "evra": "2.21-39.fc38.ppc64le"
+      "evra": "2.21-40.fc39.ppc64le"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-4.fc38.ppc64le"
+      "evra": "1.0.20210914-5.fc39.ppc64le"
     },
     "xfsprogs": {
-      "evra": "6.1.0-3.fc38.ppc64le"
+      "evra": "6.4.0-1.fc39.ppc64le"
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc38.ppc64le"
+      "evra": "0.8.2-1.fc39.ppc64le"
     },
     "xz": {
-      "evra": "5.4.1-1.fc38.ppc64le"
+      "evra": "5.4.4-1.fc39.ppc64le"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc38.ppc64le"
+      "evra": "5.4.4-1.fc39.ppc64le"
     },
     "yajl": {
-      "evra": "2.1.0-21.fc38.ppc64le"
+      "evra": "2.1.0-22.fc39.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc38.ppc64le"
+      "evra": "1.3.2-1.fc39.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc38.ppc64le"
+      "evra": "0.0.26-2.fc39.ppc64le"
     },
     "zlib": {
-      "evra": "1.2.13-3.fc38.ppc64le"
+      "evra": "1.2.13-4.fc39.ppc64le"
     },
     "zram-generator": {
-      "evra": "1.1.2-4.fc38.ppc64le"
+      "evra": "1.1.2-8.fc39.ppc64le"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc38.ppc64le"
+      "evra": "1.5.5-4.fc39.ppc64le"
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-06T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-04-13T20:36:47Z"
+      "fedora-candidate-compose": {
+        "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:14:16Z"
+        "generated": "2023-11-05T01:41:35Z"
+      },
+      "fedora-next": {
+        "generated": "2023-11-03T02:50:15Z"
       },
-      "fedora-updates": {
-        "generated": "2023-11-04T03:32:39Z"
+      "fedora-next-updates": {
+        "generated": "2023-11-06T01:22:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4b24c11cf3..87df7bbde0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,1250 +1,1253 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.8-1.fc38.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.8-1.fc38.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.8-1.fc38.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.8-1.fc38.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.8-1.fc38.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.0.4-1.fc38.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc38.s390x"
+      "evra": "1.8.0-1.fc39.s390x"
     },
     "acl": {
-      "evra": "2.3.1-6.fc38.s390x"
+      "evra": "2.3.1-8.fc39.s390x"
     },
     "adcli": {
-      "evra": "0.9.2-2.fc38.s390x"
+      "evra": "0.9.2-3.fc39.s390x"
     },
     "afterburn": {
-      "evra": "5.4.2-1.fc38.s390x"
+      "evra": "5.4.2-2.fc39.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-1.fc38.s390x"
+      "evra": "5.4.2-2.fc39.s390x"
     },
     "alternatives": {
-      "evra": "1.25-1.fc38.s390x"
+      "evra": "1.25-1.fc39.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "amd-ucode-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "attr": {
-      "evra": "2.5.1-6.fc38.s390x"
+      "evra": "2.5.1-8.fc39.s390x"
+    },
+    "audit": {
+      "evra": "3.1.2-4.fc39.s390x"
     },
     "audit-libs": {
-      "evra": "3.1.2-1.fc38.s390x"
+      "evra": "3.1.2-4.fc39.s390x"
     },
     "authselect": {
-      "evra": "1.4.3-1.fc38.s390x"
+      "evra": "1.4.3-1.fc39.s390x"
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc38.s390x"
+      "evra": "1.4.3-1.fc39.s390x"
     },
     "avahi-libs": {
-      "evra": "0.8-22.fc38.s390x"
+      "evra": "0.8-24.fc39.s390x"
     },
     "basesystem": {
-      "evra": "11-15.fc38.noarch"
+      "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-3.fc38.s390x"
+      "evra": "5.2.15-5.fc39.s390x"
+    },
+    "bash-color-prompt": {
+      "evra": "0.1-6.fc39.noarch"
     },
     "bash-completion": {
-      "evra": "1:2.11-9.fc38.noarch"
+      "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc38.s390x"
+      "evra": "32:9.18.19-1.fc39.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc38.s390x"
+      "evra": "32:9.18.19-1.fc39.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "bsdtar": {
-      "evra": "3.6.1-4.fc38.s390x"
+      "evra": "3.7.1-1.fc39.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc38.s390x"
+      "evra": "6.5.1-1.fc39.s390x"
     },
     "bubblewrap": {
-      "evra": "0.7.0-1.fc38.s390x"
+      "evra": "0.7.0-2.fc39.s390x"
     },
     "bzip2": {
-      "evra": "1.0.8-13.fc38.s390x"
+      "evra": "1.0.8-16.fc39.s390x"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-13.fc38.s390x"
+      "evra": "1.0.8-16.fc39.s390x"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc38.s390x"
+      "evra": "1.19.1-1.fc39.s390x"
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-14.fc38.s390x"
+      "evra": "0.1.7-18.fc39.s390x"
     },
     "chrony": {
-      "evra": "4.4-1.fc38.s390x"
+      "evra": "4.4-1.fc39.s390x"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc38.s390x"
+      "evra": "7.0-2.fc39.s390x"
     },
     "clevis": {
-      "evra": "19-2.fc38.s390x"
+      "evra": "19-4.fc39.s390x"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc38.s390x"
+      "evra": "19-4.fc39.s390x"
     },
     "clevis-luks": {
-      "evra": "19-2.fc38.s390x"
+      "evra": "19-4.fc39.s390x"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc38.s390x"
+      "evra": "19-4.fc39.s390x"
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc38.noarch"
+      "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc38.s390x"
+      "evra": "2:2.1.7-3.fc39.s390x"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc38.s390x"
+      "evra": "1.6.19-2.fc39.s390x"
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-2.fc38.s390x"
+      "evra": "1.3.0-3.fc39.s390x"
     },
     "containers-common": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc38.s390x"
+      "evra": "0.18.0-1.fc39.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc38.s390x"
+      "evra": "0.18.0-1.fc39.s390x"
     },
     "coreutils": {
-      "evra": "9.1-12.fc38.s390x"
+      "evra": "9.3-4.fc39.s390x"
     },
     "coreutils-common": {
-      "evra": "9.1-12.fc38.s390x"
+      "evra": "9.3-4.fc39.s390x"
     },
     "cpio": {
-      "evra": "2.13-14.fc38.s390x"
+      "evra": "2.14-4.fc39.s390x"
     },
     "cracklib": {
-      "evra": "2.9.11-1.fc38.s390x"
+      "evra": "2.9.11-2.fc39.s390x"
     },
     "criu": {
-      "evra": "3.18-1.fc38.s390x"
+      "evra": "3.18-3.fc39.s390x"
     },
     "criu-libs": {
-      "evra": "3.18-1.fc38.s390x"
+      "evra": "3.18-3.fc39.s390x"
     },
     "crun": {
-      "evra": "1.11-1.fc38.s390x"
+      "evra": "1.11.1-1.fc39.s390x"
     },
     "crypto-policies": {
-      "evra": "20230301-1.gita12f7b2.fc38.noarch"
+      "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc38.s390x"
+      "evra": "2.6.1-3.fc39.s390x"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc38.s390x"
+      "evra": "2.6.1-3.fc39.s390x"
     },
     "curl": {
-      "evra": "8.0.1-5.fc38.s390x"
+      "evra": "8.2.1-3.fc39.s390x"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-9.fc38.s390x"
+      "evra": "2.1.28-11.fc39.s390x"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-9.fc38.s390x"
+      "evra": "2.1.28-11.fc39.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc39.s390x"
     },
     "dbus-broker": {
-      "evra": "33-1.fc38.s390x"
+      "evra": "33-2.fc39.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc39.s390x"
     },
     "device-mapper": {
-      "evra": "1.02.189-2.fc38.s390x"
+      "evra": "1.02.196-1.fc39.s390x"
     },
     "device-mapper-event": {
-      "evra": "1.02.189-2.fc38.s390x"
+      "evra": "1.02.196-1.fc39.s390x"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.189-2.fc38.s390x"
+      "evra": "1.02.196-1.fc39.s390x"
     },
     "device-mapper-libs": {
-      "evra": "1.02.189-2.fc38.s390x"
+      "evra": "1.02.196-1.fc39.s390x"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.4-2.fc38.s390x"
+      "evra": "0.9.5-2.fc39.s390x"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.4-2.fc38.s390x"
+      "evra": "0.9.5-2.fc39.s390x"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-10.fc38.s390x"
+      "evra": "1.0.6-2.fc39.s390x"
     },
     "diffutils": {
-      "evra": "3.10-1.fc38.s390x"
+      "evra": "3.10-3.fc39.s390x"
     },
     "dnsmasq": {
-      "evra": "2.89-5.fc38.s390x"
+      "evra": "2.89-6.fc39.s390x"
     },
     "dosfstools": {
-      "evra": "4.2-6.fc38.s390x"
+      "evra": "4.2-7.fc39.s390x"
     },
     "dracut": {
-      "evra": "059-4.fc38.s390x"
+      "evra": "059-15.fc39.s390x"
     },
     "dracut-network": {
-      "evra": "059-4.fc38.s390x"
+      "evra": "059-15.fc39.s390x"
     },
     "dracut-squash": {
-      "evra": "059-4.fc38.s390x"
+      "evra": "059-15.fc39.s390x"
     },
     "duktape": {
-      "evra": "2.7.0-2.fc38.s390x"
+      "evra": "2.7.0-5.fc39.s390x"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-4.fc38.s390x"
+      "evra": "1.47.0-2.fc39.s390x"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-4.fc38.s390x"
+      "evra": "1.47.0-2.fc39.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-3.fc38.noarch"
+      "evra": "0.189-4.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-3.fc38.s390x"
+      "evra": "0.189-4.fc39.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.189-3.fc38.s390x"
+      "evra": "0.189-4.fc39.s390x"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc38.s390x"
+      "evra": "2:6.5-1.fc39.s390x"
     },
     "expat": {
-      "evra": "2.5.0-2.fc38.s390x"
+      "evra": "2.5.0-3.fc39.s390x"
     },
     "fedora-gpg-keys": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-repos": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "38-1.noarch"
-    },
-    "fedora-repos-modular": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "file": {
-      "evra": "5.44-3.fc38.s390x"
+      "evra": "5.44-5.fc39.s390x"
     },
     "file-libs": {
-      "evra": "5.44-3.fc38.s390x"
+      "evra": "5.44-5.fc39.s390x"
     },
     "filesystem": {
-      "evra": "3.18-3.fc38.s390x"
+      "evra": "3.18-6.fc39.s390x"
     },
     "findutils": {
-      "evra": "1:4.9.0-3.fc38.s390x"
+      "evra": "1:4.9.0-5.fc39.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-1.fc38.s390x"
+      "evra": "1.15.4-3.fc39.s390x"
     },
     "fstrm": {
-      "evra": "0.6.1-6.fc38.s390x"
+      "evra": "0.6.1-8.fc39.s390x"
     },
     "fuse": {
-      "evra": "2.9.9-16.fc38.s390x"
+      "evra": "2.9.9-17.fc39.s390x"
     },
     "fuse-common": {
-      "evra": "3.14.1-1.fc38.s390x"
+      "evra": "3.16.1-1.fc39.s390x"
     },
     "fuse-libs": {
-      "evra": "2.9.9-16.fc38.s390x"
+      "evra": "2.9.9-17.fc39.s390x"
     },
     "fuse-overlayfs": {
-      "evra": "1.12-1.fc38.s390x"
+      "evra": "1.12-2.fc39.s390x"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-3.fc38.s390x"
+      "evra": "3.7.3-4.fc39.s390x"
     },
     "fuse3": {
-      "evra": "3.14.1-1.fc38.s390x"
+      "evra": "3.16.1-1.fc39.s390x"
     },
     "fuse3-libs": {
-      "evra": "3.14.1-1.fc38.s390x"
+      "evra": "3.16.1-1.fc39.s390x"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc38.s390x"
+      "evra": "1.9.7-1.fc39.s390x"
     },
     "gawk": {
-      "evra": "5.1.1-5.fc38.s390x"
+      "evra": "5.2.2-2.fc39.s390x"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-3.fc38.s390x"
+      "evra": "1:1.23-4.fc39.s390x"
     },
     "gdisk": {
-      "evra": "1.0.9-5.fc38.s390x"
+      "evra": "1.0.9-6.fc39.s390x"
     },
     "git-core": {
-      "evra": "2.41.0-1.fc38.s390x"
+      "evra": "2.41.0-2.fc39.s390x"
     },
     "glib2": {
-      "evra": "2.76.5-2.fc38.s390x"
+      "evra": "2.78.1-1.fc39.s390x"
     },
     "glibc": {
-      "evra": "2.37-13.fc38.s390x"
+      "evra": "2.38-10.fc39.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-13.fc38.s390x"
+      "evra": "2.38-10.fc39.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-13.fc38.s390x"
+      "evra": "2.38-10.fc39.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-13.fc38.s390x"
+      "evra": "2.38-10.fc39.s390x"
     },
     "gmp": {
-      "evra": "1:6.2.1-4.fc38.s390x"
+      "evra": "1:6.2.1-5.fc39.s390x"
     },
     "gnupg2": {
-      "evra": "2.4.0-3.fc38.s390x"
+      "evra": "2.4.3-2.fc39.s390x"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc38.s390x"
+      "evra": "3.8.1-1.fc39.s390x"
     },
     "gpgme": {
-      "evra": "1.17.1-5.fc38.s390x"
+      "evra": "1.20.0-5.fc39.s390x"
     },
     "grep": {
-      "evra": "3.8-3.fc38.s390x"
+      "evra": "3.11-3.fc39.s390x"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc38.s390x"
+      "evra": "6:0.7.1-1.fc39.s390x"
     },
     "gzip": {
-      "evra": "1.12-3.fc38.s390x"
+      "evra": "1.12-6.fc39.s390x"
     },
     "hostname": {
-      "evra": "3.23-8.fc38.s390x"
+      "evra": "3.23-9.fc39.s390x"
     },
     "ignition": {
-      "evra": "2.16.2-1.fc38.s390x"
+      "evra": "2.16.2-2.fc39.s390x"
     },
     "inih": {
-      "evra": "57-1.fc38.s390x"
+      "evra": "57-2.fc39.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.3-1.fc38.s390x"
+      "evra": "1.0.3-2.fc39.s390x"
     },
     "iproute": {
-      "evra": "6.4.0-1.fc38.s390x"
+      "evra": "6.4.0-2.fc39.s390x"
     },
     "iproute-tc": {
-      "evra": "6.4.0-1.fc38.s390x"
+      "evra": "6.4.0-2.fc39.s390x"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.1.s390x"
+      "evra": "1.8.9-5.fc39.s390x"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.1.s390x"
+      "evra": "1.8.9-5.fc39.s390x"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.1.s390x"
+      "evra": "1.8.9-5.fc39.s390x"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.1.s390x"
+      "evra": "1.8.9-5.fc39.s390x"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.1.noarch"
+      "evra": "1.8.9-5.fc39.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.1.s390x"
+      "evra": "1.8.9-5.fc39.s390x"
     },
     "iputils": {
-      "evra": "20221126-2.fc38.s390x"
+      "evra": "20221126-4.fc39.s390x"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.s390x"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.s390x"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x"
     },
     "isns-utils-libs": {
-      "evra": "0.101-6.fc38.s390x"
+      "evra": "0.101-7.fc39.s390x"
     },
     "jansson": {
-      "evra": "2.13.1-6.fc38.s390x"
+      "evra": "2.13.1-7.fc39.s390x"
     },
     "jemalloc": {
-      "evra": "5.3.0-3.fc38.s390x"
+      "evra": "5.3.0-4.fc39.s390x"
     },
     "jose": {
-      "evra": "11-7.fc38.s390x"
+      "evra": "11-8.fc39.s390x"
     },
     "jq": {
-      "evra": "1.6-16.fc38.s390x"
+      "evra": "1.6-17.fc39.s390x"
     },
     "json-c": {
-      "evra": "0.17-1.fc38.s390x"
+      "evra": "0.17-1.fc39.s390x"
     },
     "json-glib": {
-      "evra": "1.6.6-4.fc38.s390x"
+      "evra": "1.8.0-1.fc39.s390x"
     },
     "kbd": {
-      "evra": "2.5.1-5.fc38.s390x"
+      "evra": "2.6.3-1.fc39.s390x"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-200.fc38.s390x"
+      "evra": "6.5.9-300.fc39.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.9-200.fc38.s390x"
+      "evra": "6.5.9-300.fc39.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.9-200.fc38.s390x"
+      "evra": "6.5.9-300.fc39.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-200.fc38.s390x"
+      "evra": "6.5.9-300.fc39.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.26-3.fc38.s390x"
+      "evra": "2.0.27-2.fc39.s390x"
     },
     "keyutils": {
-      "evra": "1.6.1-6.fc38.s390x"
+      "evra": "1.6.1-7.fc39.s390x"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-6.fc38.s390x"
+      "evra": "1.6.1-7.fc39.s390x"
     },
     "kmod": {
-      "evra": "30-4.fc38.s390x"
+      "evra": "30-6.fc39.s390x"
     },
     "kmod-libs": {
-      "evra": "30-4.fc38.s390x"
+      "evra": "30-6.fc39.s390x"
     },
     "kpartx": {
-      "evra": "0.9.4-2.fc38.s390x"
+      "evra": "0.9.5-2.fc39.s390x"
     },
     "krb5-libs": {
-      "evra": "1.21-3.fc38.s390x"
+      "evra": "1.21.2-2.fc39.s390x"
     },
     "less": {
-      "evra": "633-1.fc38.s390x"
+      "evra": "633-2.fc39.s390x"
     },
     "libacl": {
-      "evra": "2.3.1-6.fc38.s390x"
+      "evra": "2.3.1-8.fc39.s390x"
     },
     "libaio": {
-      "evra": "0.3.111-15.fc38.s390x"
+      "evra": "0.3.111-16.fc39.s390x"
     },
     "libarchive": {
-      "evra": "3.6.1-4.fc38.s390x"
+      "evra": "3.7.1-1.fc39.s390x"
     },
     "libargon2": {
-      "evra": "20190702-2.fc38.s390x"
+      "evra": "20190702-3.fc39.s390x"
     },
     "libassuan": {
-      "evra": "2.5.6-1.fc38.s390x"
+      "evra": "2.5.6-2.fc39.s390x"
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc38.s390x"
+      "evra": "13.2.1-4.fc39.s390x"
     },
     "libattr": {
-      "evra": "2.5.1-6.fc38.s390x"
+      "evra": "2.5.1-8.fc39.s390x"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-53.fc38.s390x"
+      "evra": "0.1.1-54.fc39.s390x"
     },
     "libblkid": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "libbpf": {
-      "evra": "2:1.1.0-2.fc38.s390x"
+      "evra": "2:1.1.0-4.fc39.s390x"
     },
     "libbsd": {
-      "evra": "0.11.7-4.fc38.s390x"
+      "evra": "0.11.7-5.fc39.s390x"
     },
     "libcap": {
-      "evra": "2.48-6.fc38.s390x"
+      "evra": "2.48-7.fc39.s390x"
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc38.s390x"
+      "evra": "0.8.3-8.fc39.s390x"
     },
     "libcbor": {
-      "evra": "0.7.0-9.fc38.s390x"
+      "evra": "0.10.2-2.fc39.s390x"
     },
     "libcollection": {
-      "evra": "0.7.0-53.fc38.s390x"
+      "evra": "0.7.0-54.fc39.s390x"
     },
     "libcom_err": {
-      "evra": "1.46.5-4.fc38.s390x"
+      "evra": "1.47.0-2.fc39.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-5.fc38.s390x"
+      "evra": "8.2.1-3.fc39.s390x"
     },
     "libdaemon": {
-      "evra": "0.14-25.fc38.s390x"
+      "evra": "0.14-26.fc39.s390x"
     },
     "libdb": {
-      "evra": "5.3.28-55.fc38.s390x"
+      "evra": "5.3.28-56.fc39.s390x"
     },
     "libdhash": {
-      "evra": "0.5.0-53.fc38.s390x"
+      "evra": "0.5.0-54.fc39.s390x"
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc38.s390x"
+      "evra": "0.5.2-1.fc39.s390x"
     },
     "libedit": {
-      "evra": "3.1-45.20221030cvs.fc38.s390x"
+      "evra": "3.1-48.20230828cvs.fc39.s390x"
     },
     "libevent": {
-      "evra": "2.1.12-8.fc38.s390x"
+      "evra": "2.1.12-9.fc39.s390x"
     },
     "libfdisk": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "libffi": {
-      "evra": "3.4.4-2.fc38.s390x"
+      "evra": "3.4.4-4.fc39.s390x"
     },
     "libfido2": {
-      "evra": "1.12.0-3.fc38.s390x"
+      "evra": "1.13.0-3.fc39.s390x"
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc38.s390x"
+      "evra": "13.2.1-4.fc39.s390x"
     },
     "libgcrypt": {
-      "evra": "1.10.2-1.fc38.s390x"
+      "evra": "1.10.2-2.fc39.s390x"
     },
     "libgpg-error": {
-      "evra": "1.47-1.fc38.s390x"
+      "evra": "1.47-2.fc39.s390x"
     },
     "libgudev": {
-      "evra": "237-4.fc38.s390x"
+      "evra": "238-2.fc39.s390x"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc38.s390x"
+      "evra": "0.4.7-1.fc39.s390x"
     },
     "libibverbs": {
-      "evra": "44.0-3.fc38.s390x"
+      "evra": "46.0-4.fc39.s390x"
     },
     "libicu": {
-      "evra": "72.1-2.fc38.s390x"
+      "evra": "73.2-2.fc39.s390x"
     },
     "libidn2": {
-      "evra": "2.3.4-2.fc38.s390x"
+      "evra": "2.3.4-3.fc39.s390x"
     },
     "libini_config": {
-      "evra": "1.3.1-53.fc38.s390x"
+      "evra": "1.3.1-54.fc39.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc38.s390x"
+      "evra": "0.1.14-2.fc39.s390x"
     },
     "libjose": {
-      "evra": "11-7.fc38.s390x"
+      "evra": "11-8.fc39.s390x"
     },
     "libkcapi": {
-      "evra": "1.4.0-5.fc38.s390x"
+      "evra": "1.4.0-7.fc39.s390x"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-5.fc38.s390x"
+      "evra": "1.4.0-7.fc39.s390x"
     },
     "libksba": {
-      "evra": "1.6.4-1.fc38.s390x"
+      "evra": "1.6.4-2.fc39.s390x"
     },
     "libldb": {
-      "evra": "2.7.2-1.fc38.s390x"
+      "evra": "2.8.0-1.fc39.s390x"
     },
     "libluksmeta": {
-      "evra": "9-15.fc38.s390x"
+      "evra": "9-16.fc39.s390x"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-2.fc38.s390x"
+      "evra": "1.7.1-3.fc39.s390x"
     },
     "libmd": {
-      "evra": "1.1.0-1.fc38.s390x"
+      "evra": "1.1.0-2.fc39.s390x"
     },
     "libmnl": {
-      "evra": "1.0.5-2.fc38.s390x"
+      "evra": "1.0.5-3.fc39.s390x"
     },
     "libmodulemd": {
-      "evra": "2.15.0-2.fc38.s390x"
+      "evra": "2.15.0-5.fc39.s390x"
     },
     "libmount": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "libndp": {
-      "evra": "1.8-5.fc38.s390x"
+      "evra": "1.8-6.fc39.s390x"
     },
     "libnet": {
-      "evra": "1.3-1.fc38.s390x"
+      "evra": "1.3-1.fc39.s390x"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-1.fc38.s390x"
+      "evra": "1.0.9-2.fc39.s390x"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-23.fc38.s390x"
+      "evra": "1.0.1-24.fc39.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-1.rc3.fc38.s390x"
+      "evra": "1:2.6.3-2.rc3.fc39.s390x"
     },
     "libnftnl": {
-      "evra": "1.2.4-2.fc38.s390x"
+      "evra": "1.2.6-2.fc39.s390x"
     },
     "libnghttp2": {
-      "evra": "1.52.0-2.fc38.s390x"
+      "evra": "1.55.1-4.fc39.s390x"
     },
     "libnl3": {
-      "evra": "3.7.0-3.fc38.s390x"
+      "evra": "3.8.0-1.fc39.s390x"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-3.fc38.s390x"
+      "evra": "3.8.0-1.fc39.s390x"
     },
     "libnsl2": {
-      "evra": "2.0.0-5.fc38.s390x"
+      "evra": "2.0.0-6.fc39.s390x"
     },
     "libnvme": {
-      "evra": "1.4-2.fc38.s390x"
+      "evra": "1.6-2.fc39.s390x"
     },
     "libpath_utils": {
-      "evra": "0.2.1-53.fc38.s390x"
+      "evra": "0.2.1-54.fc39.s390x"
     },
     "libpcap": {
-      "evra": "14:1.10.4-1.fc38.s390x"
+      "evra": "14:1.10.4-2.fc39.s390x"
     },
     "libpkgconf": {
-      "evra": "1.8.0-6.fc38.s390x"
+      "evra": "1.9.5-2.fc39.s390x"
     },
     "libpsl": {
-      "evra": "0.21.2-2.fc38.s390x"
+      "evra": "0.21.2-4.fc39.s390x"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc38.s390x"
+      "evra": "1.4.5-6.fc39.s390x"
     },
     "libref_array": {
-      "evra": "0.1.5-53.fc38.s390x"
+      "evra": "0.1.5-54.fc39.s390x"
     },
     "librepo": {
-      "evra": "1.17.0-1.fc38.s390x"
+      "evra": "1.17.0-1.fc39.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-1.fc38.noarch"
+      "evra": "2.17.11-3.fc39.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-4.fc38.s390x"
+      "evra": "2.5.3-6.fc39.s390x"
     },
     "libselinux": {
-      "evra": "3.5-1.fc38.s390x"
+      "evra": "3.5-5.fc39.s390x"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc38.s390x"
+      "evra": "3.5-5.fc39.s390x"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc38.s390x"
+      "evra": "3.5-4.fc39.s390x"
     },
     "libsepol": {
-      "evra": "3.5-1.fc38.s390x"
+      "evra": "3.5-2.fc39.s390x"
     },
     "libsigsegv": {
-      "evra": "2.14-4.fc38.s390x"
+      "evra": "2.14-5.fc39.s390x"
     },
     "libslirp": {
-      "evra": "4.7.0-3.fc38.s390x"
+      "evra": "4.7.0-4.fc39.s390x"
     },
     "libsmartcols": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.8-1.fc38.s390x"
+      "evra": "2:4.19.2-1.fc39.s390x"
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc38.s390x"
+      "evra": "0.7.25-1.fc39.s390x"
     },
     "libss": {
-      "evra": "1.46.5-4.fc38.s390x"
+      "evra": "1.47.0-2.fc39.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc38.s390x"
+      "evra": "13.2.1-4.fc39.s390x"
     },
     "libtalloc": {
-      "evra": "2.4.0-2.fc38.s390x"
+      "evra": "2.4.1-1.fc39.s390x"
     },
     "libtasn1": {
-      "evra": "4.19.0-2.fc38.s390x"
+      "evra": "4.19.0-3.fc39.s390x"
     },
     "libtdb": {
-      "evra": "1.4.8-1.fc38.s390x"
+      "evra": "1.4.9-1.fc39.s390x"
     },
     "libteam": {
-      "evra": "1.31-7.fc38.s390x"
+      "evra": "1.32-1.fc39.s390x"
     },
     "libtevent": {
-      "evra": "0.14.1-1.fc38.s390x"
+      "evra": "0.15.0-1.fc39.s390x"
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc38.s390x"
+      "evra": "1.3.4-0.fc39.s390x"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-6.fc38.s390x"
+      "evra": "2.4.7-7.fc39.s390x"
     },
     "libunistring": {
-      "evra": "1.1-3.fc38.s390x"
-    },
-    "libunistring1.0": {
-      "evra": "1.0-1.fc38.s390x"
+      "evra": "1.1-5.fc39.s390x"
     },
     "libusb1": {
-      "evra": "1.0.26-2.fc38.s390x"
+      "evra": "1.0.26-3.fc39.s390x"
     },
     "libuser": {
-      "evra": "0.64-2.fc38.s390x"
+      "evra": "0.64-4.fc39.s390x"
     },
     "libutempter": {
-      "evra": "1.2.1-8.fc38.s390x"
+      "evra": "1.2.1-10.fc39.s390x"
     },
     "libuuid": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "libuv": {
-      "evra": "1:1.46.0-1.fc38.s390x"
+      "evra": "1:1.46.0-2.fc39.s390x"
     },
     "libverto": {
-      "evra": "0.3.2-5.fc38.s390x"
+      "evra": "0.3.2-6.fc39.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.8-1.fc38.s390x"
+      "evra": "2:4.19.2-1.fc39.s390x"
     },
     "libxcrypt": {
-      "evra": "4.4.36-1.fc38.s390x"
+      "evra": "4.4.36-2.fc39.s390x"
     },
     "libxml2": {
-      "evra": "2.10.4-1.fc38.s390x"
+      "evra": "2.10.4-3.fc39.s390x"
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc38.s390x"
+      "evra": "0.3.14-1.fc39.s390x"
     },
     "libyaml": {
-      "evra": "0.2.5-9.fc38.s390x"
+      "evra": "0.2.5-12.fc39.s390x"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc38.s390x"
+      "evra": "1.5.5-4.fc39.s390x"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-34.fc38.s390x"
+      "evra": "2.5.1-36.fc39.s390x"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.31-1.fc38.s390x"
+      "evra": "0.9.31-2.fc39.s390x"
     },
     "logrotate": {
-      "evra": "3.21.0-2.fc38.s390x"
+      "evra": "3.21.0-4.fc39.s390x"
     },
     "lsof": {
-      "evra": "4.96.3-3.fc38.s390x"
+      "evra": "4.96.3-4.fc39.s390x"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc38.s390x"
+      "evra": "5.4.6-3.fc39.s390x"
     },
     "luksmeta": {
-      "evra": "9-15.fc38.s390x"
+      "evra": "9-16.fc39.s390x"
     },
     "lvm2": {
-      "evra": "2.03.18-2.fc38.s390x"
+      "evra": "2.03.22-1.fc39.s390x"
     },
     "lvm2-libs": {
-      "evra": "2.03.18-2.fc38.s390x"
+      "evra": "2.03.22-1.fc39.s390x"
     },
     "lz4-libs": {
-      "evra": "1.9.4-2.fc38.s390x"
+      "evra": "1.9.4-4.fc39.s390x"
     },
     "lzo": {
-      "evra": "2.10-8.fc38.s390x"
+      "evra": "2.10-9.fc39.s390x"
     },
     "mdadm": {
-      "evra": "4.2-4.fc38.s390x"
+      "evra": "4.2-6.fc39.s390x"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc38.s390x"
+      "evra": "24.0.5-1.fc39.s390x"
     },
     "mpfr": {
-      "evra": "4.1.1-3.fc38.s390x"
+      "evra": "4.2.0-3.fc39.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nano": {
-      "evra": "7.2-2.fc38.s390x"
+      "evra": "7.2-4.fc39.s390x"
     },
     "nano-default-editor": {
-      "evra": "7.2-2.fc38.noarch"
+      "evra": "7.2-4.fc39.noarch"
     },
     "ncurses": {
-      "evra": "6.4-3.20230114.fc38.s390x"
+      "evra": "6.4-7.20230520.fc39.s390x"
     },
     "ncurses-base": {
-      "evra": "6.4-3.20230114.fc38.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.4-3.20230114.fc38.s390x"
+      "evra": "6.4-7.20230520.fc39.s390x"
     },
     "net-tools": {
-      "evra": "2.0-0.65.20160912git.fc38.s390x"
+      "evra": "2.0-0.67.20160912git.fc39.s390x"
     },
     "netavark": {
-      "evra": "1.8.0-2.fc38.s390x"
+      "evra": "1.8.0-2.fc39.s390x"
     },
     "nettle": {
-      "evra": "3.8-3.fc38.s390x"
+      "evra": "3.9.1-2.fc39.s390x"
     },
     "newt": {
-      "evra": "0.52.23-2.fc38.s390x"
+      "evra": "0.52.23-4.fc39.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-1.rc3.fc38.s390x"
+      "evra": "1:2.6.3-2.rc3.fc39.s390x"
     },
     "nftables": {
-      "evra": "1:1.0.5-2.fc38.s390x"
+      "evra": "1:1.0.7-3.fc39.s390x"
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc38.s390x"
+      "evra": "2.2.15-1.fc39.s390x"
     },
     "npth": {
-      "evra": "1.6-12.fc38.s390x"
+      "evra": "1.6-14.fc39.s390x"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-22.fc38.s390x"
+      "evra": "2.23.0-1.fc39.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-3.fc38.s390x"
+      "evra": "2.6-1.fc39.s390x"
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc38.s390x"
+      "evra": "6.9.9-1.fc39.s390x"
     },
     "openldap": {
-      "evra": "2.6.6-1.fc38.s390x"
+      "evra": "2.6.6-1.fc39.s390x"
     },
     "openssh": {
-      "evra": "9.0p1-17.fc38.s390x"
+      "evra": "9.3p1-9.fc39.s390x"
     },
     "openssh-clients": {
-      "evra": "9.0p1-17.fc38.s390x"
+      "evra": "9.3p1-9.fc39.s390x"
     },
     "openssh-server": {
-      "evra": "9.0p1-17.fc38.s390x"
+      "evra": "9.3p1-9.fc39.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.9-2.fc38.s390x"
+      "evra": "1:3.1.1-4.fc39.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-2.fc38.s390x"
+      "evra": "1:3.1.1-4.fc39.s390x"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.s390x"
+      "evra": "2023.7-2.fc39.s390x"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.s390x"
+      "evra": "2023.7-2.fc39.s390x"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc38.s390x"
+      "evra": "0.25.2-1.fc39.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc38.s390x"
+      "evra": "0.25.2-1.fc39.s390x"
     },
     "pam": {
-      "evra": "1.5.2-16.fc38.s390x"
+      "evra": "1.5.3-3.fc39.s390x"
     },
     "pam-libs": {
-      "evra": "1.5.2-16.fc38.s390x"
+      "evra": "1.5.3-3.fc39.s390x"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc38.s390x"
+      "evra": "0^20231004.gf851084-1.fc39.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc39.noarch"
     },
     "passwd": {
-      "evra": "0.80-14.fc38.s390x"
+      "evra": "0.80-15.fc39.s390x"
     },
     "pcre2": {
-      "evra": "10.42-1.fc38.1.s390x"
+      "evra": "10.42-1.fc39.2.s390x"
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc38.1.noarch"
+      "evra": "10.42-1.fc39.2.noarch"
     },
     "pigz": {
-      "evra": "2.7-3.fc38.s390x"
+      "evra": "2.8-2.fc39.s390x"
     },
     "pkgconf": {
-      "evra": "1.8.0-6.fc38.s390x"
+      "evra": "1.9.5-2.fc39.s390x"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-6.fc38.noarch"
+      "evra": "1.9.5-2.fc39.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-6.fc38.s390x"
+      "evra": "1.9.5-2.fc39.s390x"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.s390x"
+      "evra": "5:4.7.0-1.fc39.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.s390x"
+      "evra": "5:4.7.0-1.fc39.s390x"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc38.s390x"
+      "evra": "3.5-8.fc39.s390x"
     },
     "polkit": {
-      "evra": "122-3.fc38.1.s390x"
+      "evra": "123-1.fc39.s390x"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.1.s390x"
+      "evra": "123-1.fc39.s390x"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-23.fc38.s390x"
+      "evra": "0.1-26.fc39.s390x"
     },
     "popt": {
-      "evra": "1.19-2.fc38.s390x"
+      "evra": "1.19-3.fc39.s390x"
     },
     "procps-ng": {
-      "evra": "3.3.17-11.fc38.s390x"
+      "evra": "4.0.3-4.fc39.s390x"
     },
     "protobuf-c": {
-      "evra": "1.4.1-4.fc38.s390x"
+      "evra": "1.4.1-5.fc39.s390x"
     },
     "psmisc": {
-      "evra": "23.6-2.fc38.s390x"
+      "evra": "23.6-4.fc39.s390x"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc38.noarch"
+      "evra": "20230812-1.fc39.noarch"
     },
     "qemu-user-static-x86": {
-      "evra": "2:7.2.6-1.fc38.s390x"
+      "evra": "2:8.1.1-1.fc39.s390x"
     },
     "readline": {
-      "evra": "8.2-3.fc38.s390x"
+      "evra": "8.2-4.fc39.s390x"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc38.s390x"
+      "evra": "1.2.6-4.rc2.fc39.1.s390x"
     },
     "rpm": {
-      "evra": "4.18.1-3.fc38.s390x"
+      "evra": "4.19.0-1.fc39.s390x"
     },
     "rpm-libs": {
-      "evra": "4.18.1-3.fc38.s390x"
+      "evra": "4.19.0-1.fc39.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc38.s390x"
+      "evra": "2023.8-2.fc39.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc38.s390x"
+      "evra": "2023.8-2.fc39.s390x"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-3.fc38.s390x"
+      "evra": "4.19.0-1.fc39.s390x"
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc38.s390x"
+      "evra": "1.5.0-1.fc39.s390x"
     },
     "rsync": {
-      "evra": "3.2.7-2.fc38.s390x"
+      "evra": "3.2.7-5.fc39.s390x"
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc38.s390x"
+      "evra": "2:1.1.8-1.fc39.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.25.0-4.fc38.s390x"
+      "evra": "2:2.29.0-2.fc39.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.8-1.fc38.s390x"
+      "evra": "2:4.19.2-1.fc39.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.8-1.fc38.noarch"
+      "evra": "2:4.19.2-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.8-1.fc38.s390x"
+      "evra": "2:4.19.2-1.fc39.s390x"
     },
     "sed": {
-      "evra": "4.8-12.fc38.s390x"
+      "evra": "4.8-14.fc39.s390x"
     },
     "selinux-policy": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "setup": {
-      "evra": "2.14.3-2.fc38.noarch"
+      "evra": "2.14.4-1.fc39.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-5.fc38.s390x"
+      "evra": "1.46-6.fc39.s390x"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-5.fc38.s390x"
+      "evra": "1.46-6.fc39.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.13-6.fc38.s390x"
+      "evra": "2:4.14.0-2.fc39.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-6.fc38.s390x"
+      "evra": "2:4.14.0-2.fc39.s390x"
     },
     "shared-mime-info": {
-      "evra": "2.2-3.fc38.s390x"
+      "evra": "2.2-4.fc39.s390x"
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc38.s390x"
+      "evra": "1:1.13.3-1.fc39.s390x"
     },
     "slang": {
-      "evra": "2.3.3-3.fc38.s390x"
+      "evra": "2.3.3-4.fc39.s390x"
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc38.s390x"
+      "evra": "1.2.2-1.fc39.s390x"
     },
     "snappy": {
-      "evra": "1.1.9-7.fc38.s390x"
+      "evra": "1.1.10-2.fc39.s390x"
     },
     "socat": {
-      "evra": "1.7.4.4-2.fc38.s390x"
+      "evra": "1.7.4.4-3.fc39.s390x"
     },
     "sqlite-libs": {
-      "evra": "3.40.1-2.fc38.s390x"
+      "evra": "3.42.0-7.fc39.s390x"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-3.fc38.s390x"
+      "evra": "4.6.1-2.fc39.s390x"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-3.fc38.s390x"
+      "evra": "0.1.4-4.fc39.s390x"
     },
     "sssd-ad": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-client": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-common": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.1-1.fc38.s390x"
+      "evra": "2.9.2-2.fc39.s390x"
     },
     "stalld": {
-      "evra": "1.16-3.fc38.s390x"
+      "evra": "1.16-4.fc39.s390x"
     },
     "sudo": {
-      "evra": "1.9.13-2.p2.fc38.s390x"
+      "evra": "1.9.14-1.p3.fc39.s390x"
     },
     "systemd": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "systemd-container": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "systemd-libs": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "systemd-pam": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "systemd-udev": {
-      "evra": "253.12-1.fc38.s390x"
+      "evra": "254.5-2.fc39.s390x"
     },
     "tar": {
-      "evra": "2:1.34-8.fc38.s390x"
+      "evra": "2:1.35-2.fc39.s390x"
     },
     "teamd": {
-      "evra": "1.31-7.fc38.s390x"
+      "evra": "1.32-1.fc39.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc38.s390x"
+      "evra": "0.0.99.4-3.fc39.s390x"
     },
     "tpm2-tools": {
-      "evra": "5.5-3.fc38.s390x"
+      "evra": "5.5-4.fc39.s390x"
     },
     "tpm2-tss": {
-      "evra": "4.0.1-3.fc38.s390x"
+      "evra": "4.0.1-4.fc39.s390x"
     },
     "tzdata": {
-      "evra": "2023c-1.fc38.noarch"
+      "evra": "2023c-2.fc39.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.2-2.fc38.s390x"
+      "evra": "0.14.0-3.fc39.s390x"
     },
     "util-linux": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "util-linux-core": {
-      "evra": "2.38.1-4.fc38.s390x"
+      "evra": "2.39.2-1.fc39.s390x"
     },
     "veritysetup": {
-      "evra": "2.6.1-1.fc38.s390x"
+      "evra": "2.6.1-3.fc39.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc38.s390x"
+      "evra": "2:9.0.2081-1.fc39.s390x"
     },
     "which": {
-      "evra": "2.21-39.fc38.s390x"
+      "evra": "2.21-40.fc39.s390x"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-4.fc38.s390x"
+      "evra": "1.0.20210914-5.fc39.s390x"
     },
     "xfsprogs": {
-      "evra": "6.1.0-3.fc38.s390x"
+      "evra": "6.4.0-1.fc39.s390x"
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc38.s390x"
+      "evra": "0.8.2-1.fc39.s390x"
     },
     "xz": {
-      "evra": "5.4.1-1.fc38.s390x"
+      "evra": "5.4.4-1.fc39.s390x"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc38.s390x"
+      "evra": "5.4.4-1.fc39.s390x"
     },
     "yajl": {
-      "evra": "2.1.0-21.fc38.s390x"
+      "evra": "2.1.0-22.fc39.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc38.s390x"
+      "evra": "1.3.2-1.fc39.s390x"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc38.s390x"
+      "evra": "0.0.26-2.fc39.s390x"
     },
     "zlib": {
-      "evra": "1.2.13-3.fc38.s390x"
+      "evra": "1.2.13-4.fc39.s390x"
     },
     "zram-generator": {
-      "evra": "1.1.2-4.fc38.s390x"
+      "evra": "1.1.2-8.fc39.s390x"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc38.s390x"
+      "evra": "1.5.5-4.fc39.s390x"
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-06T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-04-13T20:36:40Z"
+      "fedora-candidate-compose": {
+        "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:13:44Z"
+        "generated": "2023-11-05T01:41:18Z"
+      },
+      "fedora-next": {
+        "generated": "2023-11-03T02:50:05Z"
       },
-      "fedora-updates": {
-        "generated": "2023-11-04T03:32:47Z"
+      "fedora-next-updates": {
+        "generated": "2023-11-06T01:22:26Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cc664a3e53..3e85f0dcb5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1298 +1,1313 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.42.8-1.fc38.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64"
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.42.8-1.fc38.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64"
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.42.8-1.fc38.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64"
     },
     "NetworkManager-team": {
-      "evra": "1:1.42.8-1.fc38.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64"
     },
     "NetworkManager-tui": {
-      "evra": "1:1.42.8-1.fc38.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.0.4-1.fc38.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc38.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64"
     },
     "acl": {
-      "evra": "2.3.1-6.fc38.x86_64"
+      "evra": "2.3.1-8.fc39.x86_64"
     },
     "adcli": {
-      "evra": "0.9.2-2.fc38.x86_64"
+      "evra": "0.9.2-3.fc39.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.2-1.fc38.x86_64"
+      "evra": "5.4.2-2.fc39.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-1.fc38.x86_64"
+      "evra": "5.4.2-2.fc39.x86_64"
     },
     "alternatives": {
-      "evra": "1.25-1.fc38.x86_64"
+      "evra": "1.25-1.fc39.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "amd-ucode-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "attr": {
-      "evra": "2.5.1-6.fc38.x86_64"
+      "evra": "2.5.1-8.fc39.x86_64"
+    },
+    "audit": {
+      "evra": "3.1.2-4.fc39.x86_64"
     },
     "audit-libs": {
-      "evra": "3.1.2-1.fc38.x86_64"
+      "evra": "3.1.2-4.fc39.x86_64"
     },
     "authselect": {
-      "evra": "1.4.3-1.fc38.x86_64"
+      "evra": "1.4.3-1.fc39.x86_64"
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc38.x86_64"
+      "evra": "1.4.3-1.fc39.x86_64"
     },
     "avahi-libs": {
-      "evra": "0.8-22.fc38.x86_64"
+      "evra": "0.8-24.fc39.x86_64"
     },
     "basesystem": {
-      "evra": "11-15.fc38.noarch"
+      "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-3.fc38.x86_64"
+      "evra": "5.2.15-5.fc39.x86_64"
+    },
+    "bash-color-prompt": {
+      "evra": "0.1-6.fc39.noarch"
     },
     "bash-completion": {
-      "evra": "1:2.11-9.fc38.noarch"
+      "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc38.x86_64"
+      "evra": "32:9.18.19-1.fc39.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc38.noarch"
+      "evra": "32:9.18.19-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc38.x86_64"
+      "evra": "32:9.18.19-1.fc39.x86_64"
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc38.x86_64"
+      "evra": "0.2.12-2.fc39.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "bsdtar": {
-      "evra": "3.6.1-4.fc38.x86_64"
+      "evra": "3.7.1-1.fc39.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc38.x86_64"
+      "evra": "6.5.1-1.fc39.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.7.0-1.fc38.x86_64"
+      "evra": "0.7.0-2.fc39.x86_64"
     },
     "bzip2": {
-      "evra": "1.0.8-13.fc38.x86_64"
+      "evra": "1.0.8-16.fc39.x86_64"
     },
     "bzip2-libs": {
-      "evra": "1.0.8-13.fc38.x86_64"
+      "evra": "1.0.8-16.fc39.x86_64"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc38.x86_64"
+      "evra": "1.19.1-1.fc39.x86_64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
     },
     "catatonit": {
-      "evra": "0.1.7-14.fc38.x86_64"
+      "evra": "0.1.7-18.fc39.x86_64"
     },
     "chrony": {
-      "evra": "4.4-1.fc38.x86_64"
+      "evra": "4.4-1.fc39.x86_64"
     },
     "cifs-utils": {
-      "evra": "7.0-1.fc38.x86_64"
+      "evra": "7.0-2.fc39.x86_64"
     },
     "clevis": {
-      "evra": "19-2.fc38.x86_64"
+      "evra": "19-4.fc39.x86_64"
     },
     "clevis-dracut": {
-      "evra": "19-2.fc38.x86_64"
+      "evra": "19-4.fc39.x86_64"
     },
     "clevis-luks": {
-      "evra": "19-2.fc38.x86_64"
+      "evra": "19-4.fc39.x86_64"
     },
     "clevis-systemd": {
-      "evra": "19-2.fc38.x86_64"
+      "evra": "19-4.fc39.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc38.noarch"
+      "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-2.fc38.x86_64"
+      "evra": "2:2.1.7-3.fc39.x86_64"
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-4.fc38.noarch"
+      "evra": "0.21.3-6.fc39.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc38.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch"
     },
     "containerd": {
-      "evra": "1.6.19-1.fc38.x86_64"
+      "evra": "1.6.19-2.fc39.x86_64"
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-2.fc38.x86_64"
+      "evra": "1.3.0-3.fc39.x86_64"
     },
     "containers-common": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "containers-common-extra": {
-      "evra": "4:1-89.fc38.noarch"
+      "evra": "4:1-95.fc39.noarch"
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc38.x86_64"
+      "evra": "0.18.0-1.fc39.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc38.x86_64"
+      "evra": "0.18.0-1.fc39.x86_64"
     },
     "coreutils": {
-      "evra": "9.1-12.fc38.x86_64"
+      "evra": "9.3-4.fc39.x86_64"
     },
     "coreutils-common": {
-      "evra": "9.1-12.fc38.x86_64"
+      "evra": "9.3-4.fc39.x86_64"
     },
     "cpio": {
-      "evra": "2.13-14.fc38.x86_64"
+      "evra": "2.14-4.fc39.x86_64"
     },
     "cracklib": {
-      "evra": "2.9.11-1.fc38.x86_64"
+      "evra": "2.9.11-2.fc39.x86_64"
     },
     "criu": {
-      "evra": "3.18-1.fc38.x86_64"
+      "evra": "3.18-3.fc39.x86_64"
     },
     "criu-libs": {
-      "evra": "3.18-1.fc38.x86_64"
+      "evra": "3.18-3.fc39.x86_64"
     },
     "crun": {
-      "evra": "1.11-1.fc38.x86_64"
+      "evra": "1.11.1-1.fc39.x86_64"
+    },
+    "crun-wasm": {
+      "evra": "1.11.1-1.fc39.x86_64"
     },
     "crypto-policies": {
-      "evra": "20230301-1.gita12f7b2.fc38.noarch"
+      "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
     "cryptsetup": {
-      "evra": "2.6.1-1.fc38.x86_64"
+      "evra": "2.6.1-3.fc39.x86_64"
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-1.fc38.x86_64"
+      "evra": "2.6.1-3.fc39.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-5.fc38.x86_64"
+      "evra": "8.2.1-3.fc39.x86_64"
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-9.fc38.x86_64"
+      "evra": "2.1.28-11.fc39.x86_64"
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-9.fc38.x86_64"
+      "evra": "2.1.28-11.fc39.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc39.x86_64"
     },
     "dbus-broker": {
-      "evra": "33-1.fc38.x86_64"
+      "evra": "33-2.fc39.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc39.x86_64"
     },
     "device-mapper": {
-      "evra": "1.02.189-2.fc38.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64"
     },
     "device-mapper-event": {
-      "evra": "1.02.189-2.fc38.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64"
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.189-2.fc38.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64"
     },
     "device-mapper-libs": {
-      "evra": "1.02.189-2.fc38.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64"
     },
     "device-mapper-multipath": {
-      "evra": "0.9.4-2.fc38.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64"
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.4-2.fc38.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64"
     },
     "device-mapper-persistent-data": {
-      "evra": "0.9.0-10.fc38.x86_64"
+      "evra": "1.0.6-2.fc39.x86_64"
     },
     "diffutils": {
-      "evra": "3.10-1.fc38.x86_64"
+      "evra": "3.10-3.fc39.x86_64"
     },
     "dnsmasq": {
-      "evra": "2.89-5.fc38.x86_64"
+      "evra": "2.89-6.fc39.x86_64"
     },
     "dosfstools": {
-      "evra": "4.2-6.fc38.x86_64"
+      "evra": "4.2-7.fc39.x86_64"
     },
     "dracut": {
-      "evra": "059-4.fc38.x86_64"
+      "evra": "059-15.fc39.x86_64"
     },
     "dracut-network": {
-      "evra": "059-4.fc38.x86_64"
+      "evra": "059-15.fc39.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-4.fc38.x86_64"
+      "evra": "059-15.fc39.x86_64"
     },
     "duktape": {
-      "evra": "2.7.0-2.fc38.x86_64"
+      "evra": "2.7.0-5.fc39.x86_64"
     },
     "e2fsprogs": {
-      "evra": "1.46.5-4.fc38.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64"
     },
     "e2fsprogs-libs": {
-      "evra": "1.46.5-4.fc38.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64"
     },
     "efi-filesystem": {
-      "evra": "5-7.fc38.noarch"
+      "evra": "5-9.fc39.noarch"
     },
     "efibootmgr": {
-      "evra": "18-3.fc38.x86_64"
+      "evra": "18-4.fc39.x86_64"
     },
     "efivar-libs": {
-      "evra": "38-7.fc38.x86_64"
+      "evra": "38-8.fc39.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-3.fc38.noarch"
+      "evra": "0.189-4.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-3.fc38.x86_64"
+      "evra": "0.189-4.fc39.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.189-3.fc38.x86_64"
+      "evra": "0.189-4.fc39.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc38.x86_64"
+      "evra": "2:6.5-1.fc39.x86_64"
     },
     "expat": {
-      "evra": "2.5.0-2.fc38.x86_64"
+      "evra": "2.5.0-3.fc39.x86_64"
     },
     "fedora-gpg-keys": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-36.noarch"
+      "evra": "39-30.noarch"
     },
     "fedora-repos": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-archive": {
-      "evra": "38-1.noarch"
-    },
-    "fedora-repos-modular": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "fedora-repos-ostree": {
-      "evra": "38-1.noarch"
+      "evra": "39-1.noarch"
     },
     "file": {
-      "evra": "5.44-3.fc38.x86_64"
+      "evra": "5.44-5.fc39.x86_64"
     },
     "file-libs": {
-      "evra": "5.44-3.fc38.x86_64"
+      "evra": "5.44-5.fc39.x86_64"
     },
     "filesystem": {
-      "evra": "3.18-3.fc38.x86_64"
+      "evra": "3.18-6.fc39.x86_64"
     },
     "findutils": {
-      "evra": "1:4.9.0-3.fc38.x86_64"
+      "evra": "1:4.9.0-5.fc39.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-1.fc38.x86_64"
+      "evra": "1.15.4-3.fc39.x86_64"
+    },
+    "fmt": {
+      "evra": "10.0.0-3.fc39.x86_64"
     },
     "fstrm": {
-      "evra": "0.6.1-6.fc38.x86_64"
+      "evra": "0.6.1-8.fc39.x86_64"
     },
     "fuse": {
-      "evra": "2.9.9-16.fc38.x86_64"
+      "evra": "2.9.9-17.fc39.x86_64"
     },
     "fuse-common": {
-      "evra": "3.14.1-1.fc38.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64"
     },
     "fuse-libs": {
-      "evra": "2.9.9-16.fc38.x86_64"
+      "evra": "2.9.9-17.fc39.x86_64"
     },
     "fuse-overlayfs": {
-      "evra": "1.12-1.fc38.x86_64"
+      "evra": "1.12-2.fc39.x86_64"
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-3.fc38.x86_64"
+      "evra": "3.7.3-4.fc39.x86_64"
     },
     "fuse3": {
-      "evra": "3.14.1-1.fc38.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64"
     },
     "fuse3-libs": {
-      "evra": "3.14.1-1.fc38.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc38.x86_64"
+      "evra": "1.9.7-1.fc39.x86_64"
     },
     "gawk": {
-      "evra": "5.1.1-5.fc38.x86_64"
+      "evra": "5.2.2-2.fc39.x86_64"
     },
     "gdbm-libs": {
-      "evra": "1:1.23-3.fc38.x86_64"
+      "evra": "1:1.23-4.fc39.x86_64"
     },
     "gdisk": {
-      "evra": "1.0.9-5.fc38.x86_64"
+      "evra": "1.0.9-6.fc39.x86_64"
     },
     "gettext-envsubst": {
-      "evra": "0.21.1-2.fc38.x86_64"
+      "evra": "0.22-2.fc39.x86_64"
     },
     "gettext-libs": {
-      "evra": "0.21.1-2.fc38.x86_64"
+      "evra": "0.22-2.fc39.x86_64"
     },
     "gettext-runtime": {
-      "evra": "0.21.1-2.fc38.x86_64"
+      "evra": "0.22-2.fc39.x86_64"
     },
     "git-core": {
-      "evra": "2.41.0-1.fc38.x86_64"
+      "evra": "2.41.0-2.fc39.x86_64"
     },
     "glib2": {
-      "evra": "2.76.5-2.fc38.x86_64"
+      "evra": "2.78.1-1.fc39.x86_64"
     },
     "glibc": {
-      "evra": "2.37-13.fc38.x86_64"
+      "evra": "2.38-10.fc39.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-13.fc38.x86_64"
+      "evra": "2.38-10.fc39.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-13.fc38.x86_64"
+      "evra": "2.38-10.fc39.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-13.fc38.x86_64"
+      "evra": "2.38-10.fc39.x86_64"
     },
     "gmp": {
-      "evra": "1:6.2.1-4.fc38.x86_64"
+      "evra": "1:6.2.1-5.fc39.x86_64"
     },
     "gnupg2": {
-      "evra": "2.4.0-3.fc38.x86_64"
+      "evra": "2.4.3-2.fc39.x86_64"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc38.x86_64"
+      "evra": "3.8.1-1.fc39.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc39.noarch"
     },
     "gpgme": {
-      "evra": "1.17.1-5.fc38.x86_64"
+      "evra": "1.20.0-5.fc39.x86_64"
     },
     "grep": {
-      "evra": "3.8-3.fc38.x86_64"
+      "evra": "3.11-3.fc39.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-102.fc38.noarch"
+      "evra": "1:2.06-104.fc39.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-102.fc38.x86_64"
+      "evra": "1:2.06-104.fc39.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-102.fc38.x86_64"
+      "evra": "1:2.06-104.fc39.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-102.fc38.noarch"
+      "evra": "1:2.06-104.fc39.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-102.fc38.x86_64"
+      "evra": "1:2.06-104.fc39.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-102.fc38.x86_64"
+      "evra": "1:2.06-104.fc39.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc38.x86_64"
+      "evra": "6:0.7.1-1.fc39.x86_64"
     },
     "gzip": {
-      "evra": "1.12-3.fc38.x86_64"
+      "evra": "1.12-6.fc39.x86_64"
     },
     "hostname": {
-      "evra": "3.23-8.fc38.x86_64"
+      "evra": "3.23-9.fc39.x86_64"
     },
     "ignition": {
-      "evra": "2.16.2-1.fc38.x86_64"
+      "evra": "2.16.2-2.fc39.x86_64"
     },
     "inih": {
-      "evra": "57-1.fc38.x86_64"
+      "evra": "57-2.fc39.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "ipcalc": {
-      "evra": "1.0.3-1.fc38.x86_64"
+      "evra": "1.0.3-2.fc39.x86_64"
     },
     "iproute": {
-      "evra": "6.4.0-1.fc38.x86_64"
+      "evra": "6.4.0-2.fc39.x86_64"
     },
     "iproute-tc": {
-      "evra": "6.4.0-1.fc38.x86_64"
+      "evra": "6.4.0-2.fc39.x86_64"
     },
     "iptables-legacy": {
-      "evra": "1.8.9-4.fc38.1.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64"
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-4.fc38.1.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64"
     },
     "iptables-libs": {
-      "evra": "1.8.9-4.fc38.1.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64"
     },
     "iptables-nft": {
-      "evra": "1.8.9-4.fc38.1.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64"
     },
     "iptables-services": {
-      "evra": "1.8.9-4.fc38.1.noarch"
+      "evra": "1.8.9-5.fc39.noarch"
     },
     "iptables-utils": {
-      "evra": "1.8.9-4.fc38.1.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64"
     },
     "iputils": {
-      "evra": "20221126-2.fc38.x86_64"
+      "evra": "20221126-4.fc39.x86_64"
     },
     "irqbalance": {
-      "evra": "2:1.9.2-1.fc38.x86_64"
+      "evra": "2:1.9.2-2.fc39.x86_64"
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.x86_64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64"
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.4-10.git2a8f9d8.fc38.x86_64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64"
     },
     "isns-utils-libs": {
-      "evra": "0.101-6.fc38.x86_64"
+      "evra": "0.101-7.fc39.x86_64"
     },
     "jansson": {
-      "evra": "2.13.1-6.fc38.x86_64"
+      "evra": "2.13.1-7.fc39.x86_64"
     },
     "jemalloc": {
-      "evra": "5.3.0-3.fc38.x86_64"
+      "evra": "5.3.0-4.fc39.x86_64"
     },
     "jose": {
-      "evra": "11-7.fc38.x86_64"
+      "evra": "11-8.fc39.x86_64"
     },
     "jq": {
-      "evra": "1.6-16.fc38.x86_64"
+      "evra": "1.6-17.fc39.x86_64"
     },
     "json-c": {
-      "evra": "0.17-1.fc38.x86_64"
+      "evra": "0.17-1.fc39.x86_64"
     },
     "json-glib": {
-      "evra": "1.6.6-4.fc38.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64"
     },
     "kbd": {
-      "evra": "2.5.1-5.fc38.x86_64"
+      "evra": "2.6.3-1.fc39.x86_64"
     },
     "kbd-legacy": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kbd-misc": {
-      "evra": "2.5.1-5.fc38.noarch"
+      "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-200.fc38.x86_64"
+      "evra": "6.5.9-300.fc39.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.9-200.fc38.x86_64"
+      "evra": "6.5.9-300.fc39.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.9-200.fc38.x86_64"
+      "evra": "6.5.9-300.fc39.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-200.fc38.x86_64"
+      "evra": "6.5.9-300.fc39.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.26-3.fc38.x86_64"
+      "evra": "2.0.27-2.fc39.x86_64"
     },
     "keyutils": {
-      "evra": "1.6.1-6.fc38.x86_64"
+      "evra": "1.6.1-7.fc39.x86_64"
     },
     "keyutils-libs": {
-      "evra": "1.6.1-6.fc38.x86_64"
+      "evra": "1.6.1-7.fc39.x86_64"
     },
     "kmod": {
-      "evra": "30-4.fc38.x86_64"
+      "evra": "30-6.fc39.x86_64"
     },
     "kmod-libs": {
-      "evra": "30-4.fc38.x86_64"
+      "evra": "30-6.fc39.x86_64"
     },
     "kpartx": {
-      "evra": "0.9.4-2.fc38.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64"
     },
     "krb5-libs": {
-      "evra": "1.21-3.fc38.x86_64"
+      "evra": "1.21.2-2.fc39.x86_64"
     },
     "less": {
-      "evra": "633-1.fc38.x86_64"
+      "evra": "633-2.fc39.x86_64"
     },
     "libacl": {
-      "evra": "2.3.1-6.fc38.x86_64"
+      "evra": "2.3.1-8.fc39.x86_64"
     },
     "libaio": {
-      "evra": "0.3.111-15.fc38.x86_64"
+      "evra": "0.3.111-16.fc39.x86_64"
     },
     "libarchive": {
-      "evra": "3.6.1-4.fc38.x86_64"
+      "evra": "3.7.1-1.fc39.x86_64"
     },
     "libargon2": {
-      "evra": "20190702-2.fc38.x86_64"
+      "evra": "20190702-3.fc39.x86_64"
     },
     "libassuan": {
-      "evra": "2.5.6-1.fc38.x86_64"
+      "evra": "2.5.6-2.fc39.x86_64"
     },
     "libattr": {
-      "evra": "2.5.1-6.fc38.x86_64"
+      "evra": "2.5.1-8.fc39.x86_64"
     },
     "libbasicobjects": {
-      "evra": "0.1.1-53.fc38.x86_64"
+      "evra": "0.1.1-54.fc39.x86_64"
     },
     "libblkid": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "libbpf": {
-      "evra": "2:1.1.0-2.fc38.x86_64"
+      "evra": "2:1.1.0-4.fc39.x86_64"
     },
     "libbsd": {
-      "evra": "0.11.7-4.fc38.x86_64"
+      "evra": "0.11.7-5.fc39.x86_64"
     },
     "libcap": {
-      "evra": "2.48-6.fc38.x86_64"
+      "evra": "2.48-7.fc39.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc38.x86_64"
+      "evra": "0.8.3-8.fc39.x86_64"
     },
     "libcbor": {
-      "evra": "0.7.0-9.fc38.x86_64"
+      "evra": "0.10.2-2.fc39.x86_64"
     },
     "libcollection": {
-      "evra": "0.7.0-53.fc38.x86_64"
+      "evra": "0.7.0-54.fc39.x86_64"
     },
     "libcom_err": {
-      "evra": "1.46.5-4.fc38.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-5.fc38.x86_64"
+      "evra": "8.2.1-3.fc39.x86_64"
     },
     "libdaemon": {
-      "evra": "0.14-25.fc38.x86_64"
+      "evra": "0.14-26.fc39.x86_64"
     },
     "libdb": {
-      "evra": "5.3.28-55.fc38.x86_64"
+      "evra": "5.3.28-56.fc39.x86_64"
     },
     "libdhash": {
-      "evra": "0.5.0-53.fc38.x86_64"
+      "evra": "0.5.0-54.fc39.x86_64"
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc38.x86_64"
+      "evra": "0.5.2-1.fc39.x86_64"
     },
     "libedit": {
-      "evra": "3.1-45.20221030cvs.fc38.x86_64"
+      "evra": "3.1-48.20230828cvs.fc39.x86_64"
     },
     "libevent": {
-      "evra": "2.1.12-8.fc38.x86_64"
+      "evra": "2.1.12-9.fc39.x86_64"
     },
     "libfdisk": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "libffi": {
-      "evra": "3.4.4-2.fc38.x86_64"
+      "evra": "3.4.4-4.fc39.x86_64"
     },
     "libfido2": {
-      "evra": "1.12.0-3.fc38.x86_64"
+      "evra": "1.13.0-3.fc39.x86_64"
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc38.x86_64"
+      "evra": "13.2.1-4.fc39.x86_64"
     },
     "libgcrypt": {
-      "evra": "1.10.2-1.fc38.x86_64"
+      "evra": "1.10.2-2.fc39.x86_64"
     },
     "libgpg-error": {
-      "evra": "1.47-1.fc38.x86_64"
+      "evra": "1.47-2.fc39.x86_64"
     },
     "libgudev": {
-      "evra": "237-4.fc38.x86_64"
+      "evra": "238-2.fc39.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.5-1.fc38.x86_64"
+      "evra": "0.4.7-1.fc39.x86_64"
     },
     "libibverbs": {
-      "evra": "44.0-3.fc38.x86_64"
+      "evra": "46.0-4.fc39.x86_64"
     },
     "libicu": {
-      "evra": "72.1-2.fc38.x86_64"
+      "evra": "73.2-2.fc39.x86_64"
     },
     "libidn2": {
-      "evra": "2.3.4-2.fc38.x86_64"
+      "evra": "2.3.4-3.fc39.x86_64"
     },
     "libini_config": {
-      "evra": "1.3.1-53.fc38.x86_64"
+      "evra": "1.3.1-54.fc39.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "libjcat": {
-      "evra": "0.1.13-1.fc38.x86_64"
+      "evra": "0.1.14-2.fc39.x86_64"
     },
     "libjose": {
-      "evra": "11-7.fc38.x86_64"
+      "evra": "11-8.fc39.x86_64"
     },
     "libkcapi": {
-      "evra": "1.4.0-5.fc38.x86_64"
+      "evra": "1.4.0-7.fc39.x86_64"
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-5.fc38.x86_64"
+      "evra": "1.4.0-7.fc39.x86_64"
     },
     "libksba": {
-      "evra": "1.6.4-1.fc38.x86_64"
+      "evra": "1.6.4-2.fc39.x86_64"
     },
     "libldb": {
-      "evra": "2.7.2-1.fc38.x86_64"
+      "evra": "2.8.0-1.fc39.x86_64"
     },
     "libluksmeta": {
-      "evra": "9-15.fc38.x86_64"
+      "evra": "9-16.fc39.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-2.fc38.x86_64"
+      "evra": "1.7.1-3.fc39.x86_64"
     },
     "libmd": {
-      "evra": "1.1.0-1.fc38.x86_64"
+      "evra": "1.1.0-2.fc39.x86_64"
     },
     "libmnl": {
-      "evra": "1.0.5-2.fc38.x86_64"
+      "evra": "1.0.5-3.fc39.x86_64"
     },
     "libmodulemd": {
-      "evra": "2.15.0-2.fc38.x86_64"
+      "evra": "2.15.0-5.fc39.x86_64"
     },
     "libmount": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "libndp": {
-      "evra": "1.8-5.fc38.x86_64"
+      "evra": "1.8-6.fc39.x86_64"
     },
     "libnet": {
-      "evra": "1.3-1.fc38.x86_64"
+      "evra": "1.3-1.fc39.x86_64"
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-1.fc38.x86_64"
+      "evra": "1.0.9-2.fc39.x86_64"
     },
     "libnfnetlink": {
-      "evra": "1.0.1-23.fc38.x86_64"
+      "evra": "1.0.1-24.fc39.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-1.rc3.fc38.x86_64"
+      "evra": "1:2.6.3-2.rc3.fc39.x86_64"
     },
     "libnftnl": {
-      "evra": "1.2.4-2.fc38.x86_64"
+      "evra": "1.2.6-2.fc39.x86_64"
     },
     "libnghttp2": {
-      "evra": "1.52.0-2.fc38.x86_64"
+      "evra": "1.55.1-4.fc39.x86_64"
     },
     "libnl3": {
-      "evra": "3.7.0-3.fc38.x86_64"
+      "evra": "3.8.0-1.fc39.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.7.0-3.fc38.x86_64"
+      "evra": "3.8.0-1.fc39.x86_64"
     },
     "libnsl2": {
-      "evra": "2.0.0-5.fc38.x86_64"
+      "evra": "2.0.0-6.fc39.x86_64"
     },
     "libnvme": {
-      "evra": "1.4-2.fc38.x86_64"
+      "evra": "1.6-2.fc39.x86_64"
     },
     "libpath_utils": {
-      "evra": "0.2.1-53.fc38.x86_64"
+      "evra": "0.2.1-54.fc39.x86_64"
     },
     "libpcap": {
-      "evra": "14:1.10.4-1.fc38.x86_64"
+      "evra": "14:1.10.4-2.fc39.x86_64"
     },
     "libpkgconf": {
-      "evra": "1.8.0-6.fc38.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64"
     },
     "libpsl": {
-      "evra": "0.21.2-2.fc38.x86_64"
+      "evra": "0.21.2-4.fc39.x86_64"
     },
     "libpwquality": {
-      "evra": "1.4.5-3.fc38.x86_64"
+      "evra": "1.4.5-6.fc39.x86_64"
     },
     "libref_array": {
-      "evra": "0.1.5-53.fc38.x86_64"
+      "evra": "0.1.5-54.fc39.x86_64"
     },
     "librepo": {
-      "evra": "1.17.0-1.fc38.x86_64"
+      "evra": "1.17.0-1.fc39.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-1.fc38.noarch"
+      "evra": "2.17.11-3.fc39.noarch"
     },
     "libseccomp": {
-      "evra": "2.5.3-4.fc38.x86_64"
+      "evra": "2.5.3-6.fc39.x86_64"
     },
     "libselinux": {
-      "evra": "3.5-1.fc38.x86_64"
+      "evra": "3.5-5.fc39.x86_64"
     },
     "libselinux-utils": {
-      "evra": "3.5-1.fc38.x86_64"
+      "evra": "3.5-5.fc39.x86_64"
     },
     "libsemanage": {
-      "evra": "3.5-2.fc38.x86_64"
+      "evra": "3.5-4.fc39.x86_64"
     },
     "libsepol": {
-      "evra": "3.5-1.fc38.x86_64"
+      "evra": "3.5-2.fc39.x86_64"
     },
     "libsigsegv": {
-      "evra": "2.14-4.fc38.x86_64"
+      "evra": "2.14-5.fc39.x86_64"
     },
     "libslirp": {
-      "evra": "4.7.0-3.fc38.x86_64"
+      "evra": "4.7.0-4.fc39.x86_64"
     },
     "libsmartcols": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.8-1.fc38.x86_64"
+      "evra": "2:4.19.2-1.fc39.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc38.x86_64"
+      "evra": "0.7.25-1.fc39.x86_64"
     },
     "libss": {
-      "evra": "1.46.5-4.fc38.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc38.x86_64"
+      "evra": "13.2.1-4.fc39.x86_64"
     },
     "libtalloc": {
-      "evra": "2.4.0-2.fc38.x86_64"
+      "evra": "2.4.1-1.fc39.x86_64"
     },
     "libtasn1": {
-      "evra": "4.19.0-2.fc38.x86_64"
+      "evra": "4.19.0-3.fc39.x86_64"
     },
     "libtdb": {
-      "evra": "1.4.8-1.fc38.x86_64"
+      "evra": "1.4.9-1.fc39.x86_64"
     },
     "libteam": {
-      "evra": "1.31-7.fc38.x86_64"
+      "evra": "1.32-1.fc39.x86_64"
     },
     "libtevent": {
-      "evra": "0.14.1-1.fc38.x86_64"
+      "evra": "0.15.0-1.fc39.x86_64"
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc38.x86_64"
+      "evra": "1.3.4-0.fc39.x86_64"
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-6.fc38.x86_64"
+      "evra": "2.4.7-7.fc39.x86_64"
     },
     "libunistring": {
-      "evra": "1.1-3.fc38.x86_64"
-    },
-    "libunistring1.0": {
-      "evra": "1.0-1.fc38.x86_64"
+      "evra": "1.1-5.fc39.x86_64"
     },
     "libusb1": {
-      "evra": "1.0.26-2.fc38.x86_64"
+      "evra": "1.0.26-3.fc39.x86_64"
     },
     "libuser": {
-      "evra": "0.64-2.fc38.x86_64"
+      "evra": "0.64-4.fc39.x86_64"
     },
     "libutempter": {
-      "evra": "1.2.1-8.fc38.x86_64"
+      "evra": "1.2.1-10.fc39.x86_64"
     },
     "libuuid": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "libuv": {
-      "evra": "1:1.46.0-1.fc38.x86_64"
+      "evra": "1:1.46.0-2.fc39.x86_64"
     },
     "libverto": {
-      "evra": "0.3.2-5.fc38.x86_64"
+      "evra": "0.3.2-6.fc39.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.8-1.fc38.x86_64"
+      "evra": "2:4.19.2-1.fc39.x86_64"
     },
     "libxcrypt": {
-      "evra": "4.4.36-1.fc38.x86_64"
+      "evra": "4.4.36-2.fc39.x86_64"
     },
     "libxml2": {
-      "evra": "2.10.4-1.fc38.x86_64"
+      "evra": "2.10.4-3.fc39.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc38.x86_64"
+      "evra": "0.3.14-1.fc39.x86_64"
     },
     "libyaml": {
-      "evra": "0.2.5-9.fc38.x86_64"
+      "evra": "0.2.5-12.fc39.x86_64"
     },
     "libzstd": {
-      "evra": "1.5.5-1.fc38.x86_64"
+      "evra": "1.5.5-4.fc39.x86_64"
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-34.fc38.x86_64"
+      "evra": "2.5.1-36.fc39.x86_64"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "lmdb-libs": {
-      "evra": "0.9.31-1.fc38.x86_64"
+      "evra": "0.9.31-2.fc39.x86_64"
     },
     "logrotate": {
-      "evra": "3.21.0-2.fc38.x86_64"
+      "evra": "3.21.0-4.fc39.x86_64"
     },
     "lsof": {
-      "evra": "4.96.3-3.fc38.x86_64"
+      "evra": "4.96.3-4.fc39.x86_64"
     },
     "lua-libs": {
-      "evra": "5.4.4-9.fc38.x86_64"
+      "evra": "5.4.6-3.fc39.x86_64"
     },
     "luksmeta": {
-      "evra": "9-15.fc38.x86_64"
+      "evra": "9-16.fc39.x86_64"
     },
     "lvm2": {
-      "evra": "2.03.18-2.fc38.x86_64"
+      "evra": "2.03.22-1.fc39.x86_64"
     },
     "lvm2-libs": {
-      "evra": "2.03.18-2.fc38.x86_64"
+      "evra": "2.03.22-1.fc39.x86_64"
     },
     "lz4-libs": {
-      "evra": "1.9.4-2.fc38.x86_64"
+      "evra": "1.9.4-4.fc39.x86_64"
     },
     "lzo": {
-      "evra": "2.10-8.fc38.x86_64"
+      "evra": "2.10-9.fc39.x86_64"
     },
     "mdadm": {
-      "evra": "4.2-4.fc38.x86_64"
+      "evra": "4.2-6.fc39.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-55.1.fc38.x86_64"
+      "evra": "2:2.1-57.fc39.x86_64"
     },
     "moby-engine": {
-      "evra": "20.10.23-1.fc38.x86_64"
+      "evra": "24.0.5-1.fc39.x86_64"
     },
     "mokutil": {
-      "evra": "2:0.6.0-6.fc38.x86_64"
+      "evra": "2:0.6.0-7.fc39.x86_64"
     },
     "mpfr": {
-      "evra": "4.1.1-3.fc38.x86_64"
+      "evra": "4.2.0-3.fc39.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nano": {
-      "evra": "7.2-2.fc38.x86_64"
+      "evra": "7.2-4.fc39.x86_64"
     },
     "nano-default-editor": {
-      "evra": "7.2-2.fc38.noarch"
+      "evra": "7.2-4.fc39.noarch"
     },
     "ncurses": {
-      "evra": "6.4-3.20230114.fc38.x86_64"
+      "evra": "6.4-7.20230520.fc39.x86_64"
     },
     "ncurses-base": {
-      "evra": "6.4-3.20230114.fc38.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch"
     },
     "ncurses-libs": {
-      "evra": "6.4-3.20230114.fc38.x86_64"
+      "evra": "6.4-7.20230520.fc39.x86_64"
     },
     "net-tools": {
-      "evra": "2.0-0.65.20160912git.fc38.x86_64"
+      "evra": "2.0-0.67.20160912git.fc39.x86_64"
     },
     "netavark": {
-      "evra": "1.8.0-2.fc38.x86_64"
+      "evra": "1.8.0-2.fc39.x86_64"
     },
     "nettle": {
-      "evra": "3.8-3.fc38.x86_64"
+      "evra": "3.9.1-2.fc39.x86_64"
     },
     "newt": {
-      "evra": "0.52.23-2.fc38.x86_64"
+      "evra": "0.52.23-4.fc39.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-1.rc3.fc38.x86_64"
+      "evra": "1:2.6.3-2.rc3.fc39.x86_64"
     },
     "nftables": {
-      "evra": "1:1.0.5-2.fc38.x86_64"
+      "evra": "1:1.0.7-3.fc39.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc38.x86_64"
+      "evra": "2.2.15-1.fc39.x86_64"
     },
     "npth": {
-      "evra": "1.6-12.fc38.x86_64"
+      "evra": "1.6-14.fc39.x86_64"
     },
     "nss-altfiles": {
-      "evra": "2.18.1-22.fc38.x86_64"
+      "evra": "2.23.0-1.fc39.x86_64"
     },
     "numactl-libs": {
-      "evra": "2.0.16-2.fc38.x86_64"
+      "evra": "2.0.16-3.fc39.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-3.fc38.x86_64"
+      "evra": "2.6-1.fc39.x86_64"
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc38.x86_64"
+      "evra": "6.9.9-1.fc39.x86_64"
     },
     "openldap": {
-      "evra": "2.6.6-1.fc38.x86_64"
+      "evra": "2.6.6-1.fc39.x86_64"
     },
     "openssh": {
-      "evra": "9.0p1-17.fc38.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-17.fc38.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64"
     },
     "openssh-server": {
-      "evra": "9.0p1-17.fc38.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.9-2.fc38.x86_64"
+      "evra": "1:3.1.1-4.fc39.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.9-2.fc38.x86_64"
+      "evra": "1:3.1.1-4.fc39.x86_64"
     },
     "os-prober": {
-      "evra": "1.81-3.fc38.x86_64"
+      "evra": "1.81-4.fc39.x86_64"
     },
     "ostree": {
-      "evra": "2023.6-1.fc38.x86_64"
+      "evra": "2023.7-2.fc39.x86_64"
     },
     "ostree-libs": {
-      "evra": "2023.6-1.fc38.x86_64"
+      "evra": "2023.7-2.fc39.x86_64"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc38.x86_64"
+      "evra": "0.25.2-1.fc39.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc38.x86_64"
+      "evra": "0.25.2-1.fc39.x86_64"
     },
     "pam": {
-      "evra": "1.5.2-16.fc38.x86_64"
+      "evra": "1.5.3-3.fc39.x86_64"
     },
     "pam-libs": {
-      "evra": "1.5.2-16.fc38.x86_64"
+      "evra": "1.5.3-3.fc39.x86_64"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc38.x86_64"
+      "evra": "0^20231004.gf851084-1.fc39.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc39.noarch"
     },
     "passwd": {
-      "evra": "0.80-14.fc38.x86_64"
+      "evra": "0.80-15.fc39.x86_64"
     },
     "pcre2": {
-      "evra": "10.42-1.fc38.1.x86_64"
+      "evra": "10.42-1.fc39.2.x86_64"
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc38.1.noarch"
+      "evra": "10.42-1.fc39.2.noarch"
     },
     "pigz": {
-      "evra": "2.7-3.fc38.x86_64"
+      "evra": "2.8-2.fc39.x86_64"
     },
     "pkgconf": {
-      "evra": "1.8.0-6.fc38.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64"
     },
     "pkgconf-m4": {
-      "evra": "1.8.0-6.fc38.noarch"
+      "evra": "1.9.5-2.fc39.noarch"
     },
     "pkgconf-pkg-config": {
-      "evra": "1.8.0-6.fc38.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc39.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc38.x86_64"
+      "evra": "5:4.7.0-1.fc39.x86_64"
     },
     "policycoreutils": {
-      "evra": "3.5-1.fc38.x86_64"
+      "evra": "3.5-8.fc39.x86_64"
     },
     "polkit": {
-      "evra": "122-3.fc38.1.x86_64"
+      "evra": "123-1.fc39.x86_64"
     },
     "polkit-libs": {
-      "evra": "122-3.fc38.1.x86_64"
+      "evra": "123-1.fc39.x86_64"
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-23.fc38.x86_64"
+      "evra": "0.1-26.fc39.x86_64"
     },
     "popt": {
-      "evra": "1.19-2.fc38.x86_64"
+      "evra": "1.19-3.fc39.x86_64"
     },
     "procps-ng": {
-      "evra": "3.3.17-11.fc38.x86_64"
+      "evra": "4.0.3-4.fc39.x86_64"
     },
     "protobuf-c": {
-      "evra": "1.4.1-4.fc38.x86_64"
+      "evra": "1.4.1-5.fc39.x86_64"
     },
     "psmisc": {
-      "evra": "23.6-2.fc38.x86_64"
+      "evra": "23.6-4.fc39.x86_64"
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc38.noarch"
+      "evra": "20230812-1.fc39.noarch"
     },
     "readline": {
-      "evra": "8.2-3.fc38.x86_64"
+      "evra": "8.2-4.fc39.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc38.noarch"
+      "evra": "20231030-1.fc39.noarch"
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc38.x86_64"
+      "evra": "1.2.6-4.rc2.fc39.1.x86_64"
     },
     "rpm": {
-      "evra": "4.18.1-3.fc38.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64"
     },
     "rpm-libs": {
-      "evra": "4.18.1-3.fc38.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc38.x86_64"
+      "evra": "2023.8-2.fc39.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc38.x86_64"
+      "evra": "2023.8-2.fc39.x86_64"
     },
     "rpm-plugin-selinux": {
-      "evra": "4.18.1-3.fc38.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64"
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc38.x86_64"
+      "evra": "1.5.0-1.fc39.x86_64"
     },
     "rsync": {
-      "evra": "3.2.7-2.fc38.x86_64"
+      "evra": "3.2.7-5.fc39.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc38.x86_64"
+      "evra": "2:1.1.8-1.fc39.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.8-1.fc38.x86_64"
+      "evra": "2:4.19.2-1.fc39.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.8-1.fc38.noarch"
+      "evra": "2:4.19.2-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.8-1.fc38.x86_64"
+      "evra": "2:4.19.2-1.fc39.x86_64"
     },
     "sed": {
-      "evra": "4.8-12.fc38.x86_64"
+      "evra": "4.8-14.fc39.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.30-1.fc38.noarch"
+      "evra": "39.1-1.fc39.noarch"
     },
     "setup": {
-      "evra": "2.14.3-2.fc38.noarch"
+      "evra": "2.14.4-1.fc39.noarch"
     },
     "sg3_utils": {
-      "evra": "1.46-5.fc38.x86_64"
+      "evra": "1.46-6.fc39.x86_64"
     },
     "sg3_utils-libs": {
-      "evra": "1.46-5.fc38.x86_64"
+      "evra": "1.46-6.fc39.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.13-6.fc38.x86_64"
+      "evra": "2:4.14.0-2.fc39.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-6.fc38.x86_64"
+      "evra": "2:4.14.0-2.fc39.x86_64"
     },
     "shared-mime-info": {
-      "evra": "2.2-3.fc38.x86_64"
+      "evra": "2.2-4.fc39.x86_64"
     },
     "shim-x64": {
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc38.x86_64"
+      "evra": "1:1.13.3-1.fc39.x86_64"
     },
     "slang": {
-      "evra": "2.3.3-3.fc38.x86_64"
+      "evra": "2.3.3-4.fc39.x86_64"
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc38.x86_64"
+      "evra": "1.2.2-1.fc39.x86_64"
     },
     "snappy": {
-      "evra": "1.1.9-7.fc38.x86_64"
+      "evra": "1.1.10-2.fc39.x86_64"
     },
     "socat": {
-      "evra": "1.7.4.4-2.fc38.x86_64"
+      "evra": "1.7.4.4-3.fc39.x86_64"
+    },
+    "spdlog": {
+      "evra": "1.12.0-2.fc39.x86_64"
     },
     "sqlite-libs": {
-      "evra": "3.40.1-2.fc38.x86_64"
+      "evra": "3.42.0-7.fc39.x86_64"
     },
     "squashfs-tools": {
-      "evra": "4.5.1-3.fc38.x86_64"
+      "evra": "4.6.1-2.fc39.x86_64"
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-3.fc38.x86_64"
+      "evra": "0.1.4-4.fc39.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-client": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-common": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.1-1.fc38.x86_64"
+      "evra": "2.9.2-2.fc39.x86_64"
     },
     "stalld": {
-      "evra": "1.16-3.fc38.x86_64"
+      "evra": "1.16-4.fc39.x86_64"
     },
     "sudo": {
-      "evra": "1.9.13-2.p2.fc38.x86_64"
+      "evra": "1.9.14-1.p3.fc39.x86_64"
     },
     "systemd": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "systemd-container": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.12-1.fc38.x86_64"
+      "evra": "254.5-2.fc39.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-8.fc38.x86_64"
+      "evra": "2:1.35-2.fc39.x86_64"
     },
     "teamd": {
-      "evra": "1.31-7.fc38.x86_64"
+      "evra": "1.32-1.fc39.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-1.fc38.x86_64"
+      "evra": "0.0.99.4-3.fc39.x86_64"
     },
     "tpm2-tools": {
-      "evra": "5.5-3.fc38.x86_64"
+      "evra": "5.5-4.fc39.x86_64"
     },
     "tpm2-tss": {
-      "evra": "4.0.1-3.fc38.x86_64"
+      "evra": "4.0.1-4.fc39.x86_64"
     },
     "tzdata": {
-      "evra": "2023c-1.fc38.noarch"
+      "evra": "2023c-2.fc39.noarch"
     },
     "userspace-rcu": {
-      "evra": "0.13.2-2.fc38.x86_64"
+      "evra": "0.14.0-3.fc39.x86_64"
     },
     "util-linux": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "util-linux-core": {
-      "evra": "2.38.1-4.fc38.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc38.noarch"
+      "evra": "2:9.0.2081-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc38.x86_64"
+      "evra": "2:9.0.2081-1.fc39.x86_64"
+    },
+    "wasmedge-rt": {
+      "evra": "0.13.4-1.fc39.x86_64"
     },
     "which": {
-      "evra": "2.21-39.fc38.x86_64"
+      "evra": "2.21-40.fc39.x86_64"
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-4.fc38.x86_64"
+      "evra": "1.0.20210914-5.fc39.x86_64"
     },
     "xfsprogs": {
-      "evra": "6.1.0-3.fc38.x86_64"
+      "evra": "6.4.0-1.fc39.x86_64"
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc38.x86_64"
+      "evra": "0.8.2-1.fc39.x86_64"
     },
     "xz": {
-      "evra": "5.4.1-1.fc38.x86_64"
+      "evra": "5.4.4-1.fc39.x86_64"
     },
     "xz-libs": {
-      "evra": "5.4.1-1.fc38.x86_64"
+      "evra": "5.4.4-1.fc39.x86_64"
     },
     "yajl": {
-      "evra": "2.1.0-21.fc38.x86_64"
+      "evra": "2.1.0-22.fc39.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc38.x86_64"
+      "evra": "1.3.2-1.fc39.x86_64"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc38.x86_64"
+      "evra": "0.0.26-2.fc39.x86_64"
     },
     "zlib": {
-      "evra": "1.2.13-3.fc38.x86_64"
+      "evra": "1.2.13-4.fc39.x86_64"
     },
     "zram-generator": {
-      "evra": "1.1.2-4.fc38.x86_64"
+      "evra": "1.1.2-8.fc39.x86_64"
     },
     "zstd": {
-      "evra": "1.5.5-1.fc38.x86_64"
+      "evra": "1.5.5-4.fc39.x86_64"
     }
   },
   "metadata": {
-    "generated": "2023-11-04T00:00:00Z",
+    "generated": "2023-11-06T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-04-13T20:37:10Z"
+      "fedora-candidate-compose": {
+        "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-04T02:15:15Z"
+        "generated": "2023-11-05T01:43:59Z"
+      },
+      "fedora-next": {
+        "generated": "2023-11-03T02:50:25Z"
       },
-      "fedora-updates": {
-        "generated": "2023-11-04T03:32:55Z"
+      "fedora-next-updates": {
+        "generated": "2023-11-06T01:22:29Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index c3f59ab5dd..d16344b9dc 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -2,7 +2,7 @@ variables:
   stream: testing-devel
   prod: false
 
-releasever: 38
+releasever: 39
 
 repos:
   # These repos are there to make it easier to add new packages to the OS and to
diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 3140ef2920..70282cf188 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -20,7 +20,7 @@ set -xeuo pipefail
 
 case "$(arch)" in
     aarch64|ppc64le|s390x)
-        containerArch=$(podman run --arch=amd64 --rm quay.io/fedora/fedora:38 arch)
+        containerArch=$(podman run --arch=amd64 --rm quay.io/fedora/fedora:39 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
index c1cbafcc1f..e8c970e5ef 100755
--- a/tests/kola/docker/basic
+++ b/tests/kola/docker/basic
@@ -13,6 +13,6 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-docker run --rm quay.io/fedora/fedora:38 true
+docker run --rm quay.io/fedora/fedora:39 true
 
 ok "basic docker run successfully"
diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index 262590791e..507e8cea1a 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -20,7 +20,7 @@ ntp_test_setup() {
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
     cat <<EOF >Dockerfile
-FROM quay.io/fedora/fedora:38
+FROM quay.io/fedora/fedora:39
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index 0e5bb18d9b..b3c77efb8f 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -23,7 +23,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork quay.io/fedora/fedora:38 getent hosts google.com
+podman run --rm -t --network=testnetwork quay.io/fedora/fedora:39 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
index 4492360147..ca11c4126e 100755
--- a/tests/kola/podman/rootless-pasta-networking
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -20,7 +20,7 @@ set -xeuo pipefail
 runascoreuserscript='#!/bin/bash
 set -euxo pipefail
 # Just a basic test that uses pasta network and sets the gateway
-podman run -i --net=pasta:--mtu,1500 quay.io/fedora/fedora:38 bash <<"EOF"
+podman run -i --net=pasta:--mtu,1500 quay.io/fedora/fedora:39 bash <<"EOF"
 set -euxo pipefail
 # Verify the mtu got set to 1500. No /sbin/ip so just use /sys/class/net/<nic>/mtu
 cat /sys/class/net/e*/mtu | grep 1500
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index 07b0d3e480..bae9596532 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -35,7 +35,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM quay.io/fedora/fedora:38
+FROM quay.io/fedora/fedora:39
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 4ec0a3e504..1e033e9f2d 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -15,7 +15,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-context=$(podman run --rm --privileged quay.io/fedora/fedora:38 \
+context=$(podman run --rm --privileged quay.io/fedora/fedora:39 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"

From f97b3f0e6b47f31c920c9e12f66d46b7625a9925 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 25 Oct 2023 23:27:43 -0400
Subject: [PATCH 1904/2157] manifests: include wasm packages in
 fedora-coreos-base manifest

It's a bit confusing to folks that this didn't make it into the
testing and stable streams [1]. Let's just include them on all
streams like we agreed to originally.

[1] https://github.com/coreos/fedora-coreos-tracker/issues/1375#issuecomment-1750114083
---
 manifest-lock.aarch64.json        | 12 ++++++++++++
 manifest-lock.x86_64.json         | 12 ++++++++++++
 manifests/crun-wasm.yaml          |  4 ----
 manifests/fedora-coreos-base.yaml |  5 ++++-
 4 files changed, 28 insertions(+), 5 deletions(-)
 delete mode 100644 manifests/crun-wasm.yaml

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d6dadebf0f..c39ff5d365 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -195,6 +195,9 @@
     "crun-wasm": {
       "evra": "1.11.1-1.fc39.aarch64"
     },
+    "crun-wasm": {
+      "evra": "1.10-1.fc38.aarch64"
+    },
     "crypto-policies": {
       "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
@@ -336,6 +339,9 @@
     "fmt": {
       "evra": "10.0.0-3.fc39.aarch64"
     },
+    "fmt": {
+      "evra": "9.1.0-2.fc38.aarch64"
+    },
     "fstrm": {
       "evra": "0.6.1-8.fc39.aarch64"
     },
@@ -1158,6 +1164,9 @@
     "spdlog": {
       "evra": "1.12.0-2.fc39.aarch64"
     },
+    "spdlog": {
+      "evra": "1.11.0-5.fc38.aarch64"
+    },
     "sqlite-libs": {
       "evra": "3.42.0-7.fc39.aarch64"
     },
@@ -1254,6 +1263,9 @@
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.aarch64"
     },
+    "wasmedge-rt": {
+      "evra": "0.13.4-2.fc38.aarch64"
+    },
     "which": {
       "evra": "2.21-40.fc39.aarch64"
     },
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3e85f0dcb5..1942178a49 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -195,6 +195,9 @@
     "crun-wasm": {
       "evra": "1.11.1-1.fc39.x86_64"
     },
+    "crun-wasm": {
+      "evra": "1.10-1.fc38.x86_64"
+    },
     "crypto-policies": {
       "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
@@ -336,6 +339,9 @@
     "fmt": {
       "evra": "10.0.0-3.fc39.x86_64"
     },
+    "fmt": {
+      "evra": "9.1.0-2.fc38.x86_64"
+    },
     "fstrm": {
       "evra": "0.6.1-8.fc39.x86_64"
     },
@@ -1161,6 +1167,9 @@
     "spdlog": {
       "evra": "1.12.0-2.fc39.x86_64"
     },
+    "spdlog": {
+      "evra": "1.11.0-5.fc38.x86_64"
+    },
     "sqlite-libs": {
       "evra": "3.42.0-7.fc39.x86_64"
     },
@@ -1257,6 +1266,9 @@
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.x86_64"
     },
+    "wasmedge-rt": {
+      "evra": "0.13.4-2.fc38.x86_64"
+    },
     "which": {
       "evra": "2.21-40.fc39.x86_64"
     },
diff --git a/manifests/crun-wasm.yaml b/manifests/crun-wasm.yaml
deleted file mode 100644
index e9700c6bdc..0000000000
--- a/manifests/crun-wasm.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-# for podman experimentation:
-# https://github.com/coreos/fedora-coreos-tracker/issues/1375
-packages:
-  - crun-wasm wasmedge-rt
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 8a4f83f3d9..f81e687999 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -174,14 +174,16 @@ packages:
 #   - Include this on non-x86_64 FCOS images to allow access to the large
 #     inventory of containers only built for x86_64.
 #     https://github.com/coreos/fedora-coreos-tracker/issues/1237
-#
 # - google-compute-engine-guest-configs-udev
 #   - Add this package on x86_64 and aarch64 (the two architectures
 #     GCP supports. https://github.com/coreos/fedora-coreos-tracker/issues/1494
 #     This should be moved to a shared manifest when RHEL has this package.
+# - crun-wasm wasmedge-rt
+#   - Support for wasm runtime: https://github.com/coreos/fedora-coreos-tracker/issues/1375
 packages-x86_64:
   - irqbalance
   - google-compute-engine-guest-configs-udev
+  - crun-wasm wasmedge-rt
 packages-ppc64le:
   - irqbalance
   - librtas
@@ -192,6 +194,7 @@ packages-aarch64:
   - irqbalance
   - qemu-user-static-x86
   - google-compute-engine-guest-configs-udev
+  - crun-wasm wasmedge-rt
 packages-s390x:
   - qemu-user-static-x86
 

From 15fc7d48f128755aba954af3cc8f2448f6ca4a26 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 9 Nov 2023 03:38:26 +0000
Subject: [PATCH 1905/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/871/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 33 +++++++++------------------------
 manifest-lock.ppc64le.json | 21 +++++++++------------
 manifest-lock.s390x.json   | 21 +++++++++------------
 manifest-lock.x86_64.json  | 33 +++++++++------------------------
 4 files changed, 36 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c39ff5d365..cb1935fcc8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -195,9 +195,6 @@
     "crun-wasm": {
       "evra": "1.11.1-1.fc39.aarch64"
     },
-    "crun-wasm": {
-      "evra": "1.10-1.fc38.aarch64"
-    },
     "crypto-policies": {
       "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
@@ -339,9 +336,6 @@
     "fmt": {
       "evra": "10.0.0-3.fc39.aarch64"
     },
-    "fmt": {
-      "evra": "9.1.0-2.fc38.aarch64"
-    },
     "fstrm": {
       "evra": "0.6.1-8.fc39.aarch64"
     },
@@ -523,16 +517,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-300.fc39.aarch64"
+      "evra": "6.5.10-300.fc39.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.9-300.fc39.aarch64"
+      "evra": "6.5.10-300.fc39.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.9-300.fc39.aarch64"
+      "evra": "6.5.10-300.fc39.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-300.fc39.aarch64"
+      "evra": "6.5.10-300.fc39.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.aarch64"
@@ -1164,9 +1158,6 @@
     "spdlog": {
       "evra": "1.12.0-2.fc39.aarch64"
     },
-    "spdlog": {
-      "evra": "1.11.0-5.fc38.aarch64"
-    },
     "sqlite-libs": {
       "evra": "3.42.0-7.fc39.aarch64"
     },
@@ -1263,9 +1254,6 @@
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.aarch64"
     },
-    "wasmedge-rt": {
-      "evra": "0.13.4-2.fc38.aarch64"
-    },
     "which": {
       "evra": "2.21-40.fc39.aarch64"
     },
@@ -1304,19 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-06T00:00:00Z",
+    "generated": "2023-11-09T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-05T01:43:40Z"
-      },
-      "fedora-next": {
-        "generated": "2023-11-03T02:50:15Z"
+        "generated": "2023-11-08T21:17:14Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-11-06T01:22:21Z"
+      "fedora-updates": {
+        "generated": "2023-11-08T01:14:18Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 03008da41f..7d09e3af19 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -502,16 +502,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-300.fc39.ppc64le"
+      "evra": "6.5.10-300.fc39.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.9-300.fc39.ppc64le"
+      "evra": "6.5.10-300.fc39.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.9-300.fc39.ppc64le"
+      "evra": "6.5.10-300.fc39.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-300.fc39.ppc64le"
+      "evra": "6.5.10-300.fc39.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.ppc64le"
@@ -1283,19 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-06T00:00:00Z",
+    "generated": "2023-11-09T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-05T01:41:35Z"
+        "generated": "2023-11-08T21:16:45Z"
       },
-      "fedora-next": {
-        "generated": "2023-11-03T02:50:15Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2023-11-06T01:22:24Z"
+      "fedora-updates": {
+        "generated": "2023-11-08T01:14:21Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 87df7bbde0..7536f432e1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -472,16 +472,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-300.fc39.s390x"
+      "evra": "6.5.10-300.fc39.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.9-300.fc39.s390x"
+      "evra": "6.5.10-300.fc39.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.9-300.fc39.s390x"
+      "evra": "6.5.10-300.fc39.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-300.fc39.s390x"
+      "evra": "6.5.10-300.fc39.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.s390x"
@@ -1235,19 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-06T00:00:00Z",
+    "generated": "2023-11-09T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-05T01:41:18Z"
+        "generated": "2023-11-08T21:16:11Z"
       },
-      "fedora-next": {
-        "generated": "2023-11-03T02:50:05Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2023-11-06T01:22:26Z"
+      "fedora-updates": {
+        "generated": "2023-11-08T01:14:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1942178a49..e85d246f36 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -195,9 +195,6 @@
     "crun-wasm": {
       "evra": "1.11.1-1.fc39.x86_64"
     },
-    "crun-wasm": {
-      "evra": "1.10-1.fc38.x86_64"
-    },
     "crypto-policies": {
       "evra": "20230731-1.git5ed06e0.fc39.noarch"
     },
@@ -339,9 +336,6 @@
     "fmt": {
       "evra": "10.0.0-3.fc39.x86_64"
     },
-    "fmt": {
-      "evra": "9.1.0-2.fc38.x86_64"
-    },
     "fstrm": {
       "evra": "0.6.1-8.fc39.x86_64"
     },
@@ -529,16 +523,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.9-300.fc39.x86_64"
+      "evra": "6.5.10-300.fc39.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.9-300.fc39.x86_64"
+      "evra": "6.5.10-300.fc39.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.9-300.fc39.x86_64"
+      "evra": "6.5.10-300.fc39.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.9-300.fc39.x86_64"
+      "evra": "6.5.10-300.fc39.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.x86_64"
@@ -1167,9 +1161,6 @@
     "spdlog": {
       "evra": "1.12.0-2.fc39.x86_64"
     },
-    "spdlog": {
-      "evra": "1.11.0-5.fc38.x86_64"
-    },
     "sqlite-libs": {
       "evra": "3.42.0-7.fc39.x86_64"
     },
@@ -1266,9 +1257,6 @@
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.x86_64"
     },
-    "wasmedge-rt": {
-      "evra": "0.13.4-2.fc38.x86_64"
-    },
     "which": {
       "evra": "2.21-40.fc39.x86_64"
     },
@@ -1307,19 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-06T00:00:00Z",
+    "generated": "2023-11-09T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-05T01:43:59Z"
-      },
-      "fedora-next": {
-        "generated": "2023-11-03T02:50:25Z"
+        "generated": "2023-11-08T21:18:22Z"
       },
-      "fedora-next-updates": {
-        "generated": "2023-11-06T01:22:29Z"
+      "fedora-updates": {
+        "generated": "2023-11-08T01:14:26Z"
       }
     }
   }

From 6b9c5025a565a503cfc57d72cbcb3d434bc018cc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 8 Nov 2023 21:11:49 +0000
Subject: [PATCH 1906/2157] overrides: pin rust-zincati-0.0.25-6.fc39

---
 manifest-lock.overrides.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 92fe471485..5fb815abff 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,3 +14,8 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
+  zincati:
+    evr: 0.0.25-6.fc39
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1608
+      type: pin

From 60009d9b5bdf4c7caab5e5d1d9aff355feea2fb5 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 9 Nov 2023 10:08:37 -0500
Subject: [PATCH 1907/2157] 05core: order boot UUID restamp before
 ignition-kargs.service

It seems like the ext4 in el9 at least has an issue where the filesystem
can become corrupted if doing the UUID restamp at the same time as kargs
are being written to the BLS. It's better anyway to make these kinds of
invasive changes offline, so enforce that.

Follow-up to 5fb5b4fa ("05core: run `coreos-gpt-setup` and
`ignition-ostree-uuid-boot` later").
---
 .../40ignition-ostree/ignition-ostree-uuid-boot.service       | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
index c99d5e2422..85448c2a67 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-uuid-boot.service
@@ -6,7 +6,9 @@ ConditionPathExists=!/run/ostree-live
 # Any services looking at mounts need to order after this
 # because it causes device re-probing.
 After=coreos-gpt-setup.service
-Before=ignition-disks.service
+# This could mount the bootfs rw and the ext4 in el9 at least doesn't seem to
+# like doing that in parallel with restamping the UUID
+Before=ignition-kargs.service
 
 # If we're going to reprovision the bootfs, then there's no need to restamp
 ConditionKernelCommandLine=!bootfs.roothash

From d4583a4813aaae6c5980031dfefbba96c04f5b7d Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 23 Oct 2023 16:58:46 -0400
Subject: [PATCH 1908/2157] manifest: Enable ostree bootloader-naming-2 for f40

- This removes the autoprune stuff which is already always on in ostree now
- Add the new "experiment" of bootloader-naming-2; xref https://github.com/ostreedev/ostree/pull/3007
---
 manifests/fedora-coreos.yaml    | 14 ++------------
 manifests/ostree-autoprune.yaml | 11 -----------
 manifests/ostree-bls.yaml       | 10 ++++++++++
 3 files changed, 12 insertions(+), 23 deletions(-)
 delete mode 100644 manifests/ostree-autoprune.yaml
 create mode 100644 manifests/ostree-bls.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 2115a986d1..77be73f3f1 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -23,19 +23,9 @@ conditional-include:
   - if: basearch != "s390x"
     # And remove some cruft from grub2
     include: grub2-removals.yaml
-  - if: basearch == "ppc64le"
-    # Need OSTree autopruning on ppc64le (because kernels aren't compressed)
-    # until we increase the size of /boot.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1247#issuecomment-1355314761
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1495#issuecomment-1561765705
-    include: ostree-autoprune.yaml
   - if:
-      - basearch == "aarch64"
-      - releasever >= 39
-    # In F39+ we will stop removing the qcom dtb files and thus we'll leverage OSTree autopruning
-    # so that we don't run into https://github.com/coreos/fedora-coreos-tracker/issues/1464
-    # again. OSTree autopruning is new so we're selectively enabling it before making it the default.
-    include: ostree-autoprune.yaml
+      - releasever >= 40
+    include: ostree-bls.yaml
   - if:
       - basearch == "aarch64"
       - releasever == 38
diff --git a/manifests/ostree-autoprune.yaml b/manifests/ostree-autoprune.yaml
deleted file mode 100644
index 44f3b4d370..0000000000
--- a/manifests/ostree-autoprune.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Enable OSTree autopruning to help with /boot size constraints
-# https://github.com/coreos/fedora-coreos-tracker/issues/1495
-postprocess:
-  - |
-    #!/usr/bin/env bash
-    mkdir -p /usr/lib/systemd/system/ostree-finalize-staged.service.d
-    cat <<'EOF' > /usr/lib/systemd/system/ostree-finalize-staged.service.d/ostree-autoprune.conf
-    [Service]
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1495
-    Environment=OSTREE_SYSROOT_OPTS=early-prune
-    EOF
diff --git a/manifests/ostree-bls.yaml b/manifests/ostree-bls.yaml
new file mode 100644
index 0000000000..5d99cf7316
--- /dev/null
+++ b/manifests/ostree-bls.yaml
@@ -0,0 +1,10 @@
+# Enable fixed OSTree grub2 naming
+# https://github.com/ostreedev/ostree/pull/3007
+postprocess:
+  - |
+    #!/usr/bin/env bash
+    mkdir -p /usr/lib/systemd/system/ostree-finalize-staged.service.d
+    cat <<'EOF' > /usr/lib/systemd/system/ostree-finalize-staged.service.d/ostree-bls-naming.conf
+    [Service]
+    Environment=OSTREE_SYSROOT_OPTS=bootloader-naming-2
+    EOF

From 202888a737589e35fc73985ccb69b111dfb06290 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 9 Nov 2023 12:08:33 -0500
Subject: [PATCH 1909/2157] tests/quadlet: update fedora-minimal image tag

For a brief period of time during the release of a new
Fedora version, the latest tag may not point to a proper version and
this test will fail. Update the fedora-minimal image tag to be
version specific instead of latest to prevent test failures.
---
 tests/kola/containers/quadlet/config.bu | 2 +-
 tests/kola/containers/quadlet/test.sh   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/containers/quadlet/config.bu b/tests/kola/containers/quadlet/config.bu
index a4fb72694f..c21433b5b5 100644
--- a/tests/kola/containers/quadlet/config.bu
+++ b/tests/kola/containers/quadlet/config.bu
@@ -9,7 +9,7 @@ storage:
           Description=A minimal container
 
           [Container]
-          Image=quay.io/fedora/fedora-minimal
+          Image=quay.io/fedora/fedora-minimal:39
           Exec=sleep 60
           Volume=test.volume:/data
           Network=test.network
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index 58afc48f9c..aa6bcc78ff 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -17,7 +17,7 @@ if [[ "$(podman network inspect systemd-test | jq -r '.[0].labels."org.test.Key"
     fatal "Network not correctly created"
 fi
 
-if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "quay.io/fedora/fedora-minimal:latest" ]]; then
+if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "quay.io/fedora/fedora-minimal:39" ]]; then
     fatal "Container not using the correct image"
 fi
 

From 8d9fd9710fec2000caa9dc83e50fb37712460421 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 11 Nov 2023 23:23:38 +0000
Subject: [PATCH 1910/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/877/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cb1935fcc8..61308519b9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -136,7 +136,7 @@
       "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-3.fc39.aarch64"
+      "evra": "2:2.1.8-2.fc39.aarch64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-6.fc39.noarch"
@@ -283,13 +283,13 @@
       "evra": "38-8.fc39.aarch64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-4.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-4.fc39.aarch64"
+      "evra": "0.190-1.fc39.aarch64"
     },
     "elfutils-libs": {
-      "evra": "0.189-4.fc39.aarch64"
+      "evra": "0.190-1.fc39.aarch64"
     },
     "ethtool": {
       "evra": "2:6.5-1.fc39.aarch64"
@@ -403,7 +403,7 @@
       "evra": "1:6.2.1-5.fc39.aarch64"
     },
     "gnupg2": {
-      "evra": "2.4.3-2.fc39.aarch64"
+      "evra": "2.4.3-3.fc39.aarch64"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.aarch64"
@@ -517,16 +517,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.10-300.fc39.aarch64"
+      "evra": "6.5.11-300.fc39.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.10-300.fc39.aarch64"
+      "evra": "6.5.11-300.fc39.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.10-300.fc39.aarch64"
+      "evra": "6.5.11-300.fc39.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.10-300.fc39.aarch64"
+      "evra": "6.5.11-300.fc39.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.aarch64"
@@ -1033,10 +1033,10 @@
       "evra": "1.9.5-2.fc39.aarch64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc39.aarch64"
+      "evra": "5:4.7.2-1.fc39.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc39.aarch64"
+      "evra": "5:4.7.2-1.fc39.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.aarch64"
@@ -1225,7 +1225,7 @@
       "evra": "1.32-1.fc39.aarch64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-3.fc39.aarch64"
+      "evra": "0.0.99.4-5.fc39.aarch64"
     },
     "tpm2-tools": {
       "evra": "5.5-4.fc39.aarch64"
@@ -1279,7 +1279,7 @@
       "evra": "1.3.2-1.fc39.aarch64"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc39.aarch64"
+      "evra": "0.0.25-6.fc39.aarch64"
     },
     "zlib": {
       "evra": "1.2.13-4.fc39.aarch64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-09T00:00:00Z",
+    "generated": "2023-11-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-08T21:17:14Z"
+        "generated": "2023-11-10T23:37:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-08T01:14:18Z"
+        "generated": "2023-11-11T06:01:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7d09e3af19..35349f9624 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -136,7 +136,7 @@
       "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-3.fc39.ppc64le"
+      "evra": "2:2.1.8-2.fc39.ppc64le"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-6.fc39.noarch"
@@ -271,13 +271,13 @@
       "evra": "1.47.0-2.fc39.ppc64le"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-4.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-4.fc39.ppc64le"
+      "evra": "0.190-1.fc39.ppc64le"
     },
     "elfutils-libs": {
-      "evra": "0.189-4.fc39.ppc64le"
+      "evra": "0.190-1.fc39.ppc64le"
     },
     "ethtool": {
       "evra": "2:6.5-1.fc39.ppc64le"
@@ -388,7 +388,7 @@
       "evra": "1:6.2.1-5.fc39.ppc64le"
     },
     "gnupg2": {
-      "evra": "2.4.3-2.fc39.ppc64le"
+      "evra": "2.4.3-3.fc39.ppc64le"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.ppc64le"
@@ -502,16 +502,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.10-300.fc39.ppc64le"
+      "evra": "6.5.11-300.fc39.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.10-300.fc39.ppc64le"
+      "evra": "6.5.11-300.fc39.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.10-300.fc39.ppc64le"
+      "evra": "6.5.11-300.fc39.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.10-300.fc39.ppc64le"
+      "evra": "6.5.11-300.fc39.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.ppc64le"
@@ -1024,10 +1024,10 @@
       "evra": "1.9.5-2.fc39.ppc64le"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc39.ppc64le"
+      "evra": "5:4.7.2-1.fc39.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc39.ppc64le"
+      "evra": "5:4.7.2-1.fc39.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.ppc64le"
@@ -1219,7 +1219,7 @@
       "evra": "1.32-1.fc39.ppc64le"
     },
     "toolbox": {
-      "evra": "0.0.99.4-3.fc39.ppc64le"
+      "evra": "0.0.99.4-5.fc39.ppc64le"
     },
     "tpm2-tools": {
       "evra": "5.5-4.fc39.ppc64le"
@@ -1270,7 +1270,7 @@
       "evra": "1.3.2-1.fc39.ppc64le"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc39.ppc64le"
+      "evra": "0.0.25-6.fc39.ppc64le"
     },
     "zlib": {
       "evra": "1.2.13-4.fc39.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-09T00:00:00Z",
+    "generated": "2023-11-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-08T21:16:45Z"
+        "generated": "2023-11-10T23:36:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-08T01:14:21Z"
+        "generated": "2023-11-11T06:01:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7536f432e1..23b05ab0e9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -133,7 +133,7 @@
       "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-3.fc39.s390x"
+      "evra": "2:2.1.8-2.fc39.s390x"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-6.fc39.noarch"
@@ -268,13 +268,13 @@
       "evra": "1.47.0-2.fc39.s390x"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-4.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-4.fc39.s390x"
+      "evra": "0.190-1.fc39.s390x"
     },
     "elfutils-libs": {
-      "evra": "0.189-4.fc39.s390x"
+      "evra": "0.190-1.fc39.s390x"
     },
     "ethtool": {
       "evra": "2:6.5-1.fc39.s390x"
@@ -376,7 +376,7 @@
       "evra": "1:6.2.1-5.fc39.s390x"
     },
     "gnupg2": {
-      "evra": "2.4.3-2.fc39.s390x"
+      "evra": "2.4.3-3.fc39.s390x"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.s390x"
@@ -472,16 +472,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.10-300.fc39.s390x"
+      "evra": "6.5.11-300.fc39.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.10-300.fc39.s390x"
+      "evra": "6.5.11-300.fc39.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.10-300.fc39.s390x"
+      "evra": "6.5.11-300.fc39.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.10-300.fc39.s390x"
+      "evra": "6.5.11-300.fc39.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.s390x"
@@ -979,10 +979,10 @@
       "evra": "1.9.5-2.fc39.s390x"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc39.s390x"
+      "evra": "5:4.7.2-1.fc39.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc39.s390x"
+      "evra": "5:4.7.2-1.fc39.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.s390x"
@@ -1168,7 +1168,7 @@
       "evra": "1.32-1.fc39.s390x"
     },
     "toolbox": {
-      "evra": "0.0.99.4-3.fc39.s390x"
+      "evra": "0.0.99.4-5.fc39.s390x"
     },
     "tpm2-tools": {
       "evra": "5.5-4.fc39.s390x"
@@ -1222,7 +1222,7 @@
       "evra": "1.3.2-1.fc39.s390x"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc39.s390x"
+      "evra": "0.0.25-6.fc39.s390x"
     },
     "zlib": {
       "evra": "1.2.13-4.fc39.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-09T00:00:00Z",
+    "generated": "2023-11-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-08T21:16:11Z"
+        "generated": "2023-11-10T23:35:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-08T01:14:24Z"
+        "generated": "2023-11-11T06:01:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e85d246f36..2d94f09221 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -136,7 +136,7 @@
       "evra": "0.33-3.fc39.noarch"
     },
     "conmon": {
-      "evra": "2:2.1.7-3.fc39.x86_64"
+      "evra": "2:2.1.8-2.fc39.x86_64"
     },
     "console-login-helper-messages": {
       "evra": "0.21.3-6.fc39.noarch"
@@ -283,13 +283,13 @@
       "evra": "38-8.fc39.x86_64"
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.189-4.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch"
     },
     "elfutils-libelf": {
-      "evra": "0.189-4.fc39.x86_64"
+      "evra": "0.190-1.fc39.x86_64"
     },
     "elfutils-libs": {
-      "evra": "0.189-4.fc39.x86_64"
+      "evra": "0.190-1.fc39.x86_64"
     },
     "ethtool": {
       "evra": "2:6.5-1.fc39.x86_64"
@@ -403,7 +403,7 @@
       "evra": "1:6.2.1-5.fc39.x86_64"
     },
     "gnupg2": {
-      "evra": "2.4.3-2.fc39.x86_64"
+      "evra": "2.4.3-3.fc39.x86_64"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.x86_64"
@@ -523,16 +523,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.10-300.fc39.x86_64"
+      "evra": "6.5.11-300.fc39.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.10-300.fc39.x86_64"
+      "evra": "6.5.11-300.fc39.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.10-300.fc39.x86_64"
+      "evra": "6.5.11-300.fc39.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.10-300.fc39.x86_64"
+      "evra": "6.5.11-300.fc39.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "1.9.5-2.fc39.x86_64"
     },
     "podman": {
-      "evra": "5:4.7.0-1.fc39.x86_64"
+      "evra": "5:4.7.2-1.fc39.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.0-1.fc39.x86_64"
+      "evra": "5:4.7.2-1.fc39.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.x86_64"
@@ -1228,7 +1228,7 @@
       "evra": "1.32-1.fc39.x86_64"
     },
     "toolbox": {
-      "evra": "0.0.99.4-3.fc39.x86_64"
+      "evra": "0.0.99.4-5.fc39.x86_64"
     },
     "tpm2-tools": {
       "evra": "5.5-4.fc39.x86_64"
@@ -1282,7 +1282,7 @@
       "evra": "1.3.2-1.fc39.x86_64"
     },
     "zincati": {
-      "evra": "0.0.26-2.fc39.x86_64"
+      "evra": "0.0.25-6.fc39.x86_64"
     },
     "zlib": {
       "evra": "1.2.13-4.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-09T00:00:00Z",
+    "generated": "2023-11-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-08T21:18:22Z"
+        "generated": "2023-11-10T23:37:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-08T01:14:26Z"
+        "generated": "2023-11-11T06:01:20Z"
       }
     }
   }

From 7b38f1c3ea1475d5e04d45377db0d58611878bb2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 12 Nov 2023 23:14:26 +0000
Subject: [PATCH 1911/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/879/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 61308519b9..698cdf1af4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -403,7 +403,7 @@
       "evra": "1:6.2.1-5.fc39.aarch64"
     },
     "gnupg2": {
-      "evra": "2.4.3-3.fc39.aarch64"
+      "evra": "2.4.3-4.fc39.aarch64"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.aarch64"
@@ -1292,7 +1292,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-11T00:00:00Z",
+    "generated": "2023-11-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
@@ -1301,7 +1301,7 @@
         "generated": "2023-11-10T23:37:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-11T06:01:12Z"
+        "generated": "2023-11-12T01:25:11Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 35349f9624..5642a5568d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -388,7 +388,7 @@
       "evra": "1:6.2.1-5.fc39.ppc64le"
     },
     "gnupg2": {
-      "evra": "2.4.3-3.fc39.ppc64le"
+      "evra": "2.4.3-4.fc39.ppc64le"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.ppc64le"
@@ -1283,7 +1283,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-11T00:00:00Z",
+    "generated": "2023-11-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
@@ -1292,7 +1292,7 @@
         "generated": "2023-11-10T23:36:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-11T06:01:15Z"
+        "generated": "2023-11-12T01:25:14Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 23b05ab0e9..1d0069109f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -376,7 +376,7 @@
       "evra": "1:6.2.1-5.fc39.s390x"
     },
     "gnupg2": {
-      "evra": "2.4.3-3.fc39.s390x"
+      "evra": "2.4.3-4.fc39.s390x"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.s390x"
@@ -1235,7 +1235,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-11T00:00:00Z",
+    "generated": "2023-11-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
@@ -1244,7 +1244,7 @@
         "generated": "2023-11-10T23:35:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-11T06:01:17Z"
+        "generated": "2023-11-12T01:25:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2d94f09221..7bab5b9db4 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -403,7 +403,7 @@
       "evra": "1:6.2.1-5.fc39.x86_64"
     },
     "gnupg2": {
-      "evra": "2.4.3-3.fc39.x86_64"
+      "evra": "2.4.3-4.fc39.x86_64"
     },
     "gnutls": {
       "evra": "3.8.1-1.fc39.x86_64"
@@ -1295,7 +1295,7 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-11T00:00:00Z",
+    "generated": "2023-11-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
@@ -1304,7 +1304,7 @@
         "generated": "2023-11-10T23:37:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-11T06:01:20Z"
+        "generated": "2023-11-12T01:25:19Z"
       }
     }
   }

From 59e39e57eb0d410a6babbc053fecc8bb6e54fc87 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 13 Nov 2023 11:30:58 -0800
Subject: [PATCH 1912/2157] kola/butane/grub-users: Update the test Adapt the
 test as per the changes from
 https://github.com/coreos/fedora-coreos-config/pull/2723 Now, we git grep
 from ostree-x.conf instead of ostress-x-fedora-coreos.conf

---
 tests/kola/butane/grub-users/test.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/kola/butane/grub-users/test.sh b/tests/kola/butane/grub-users/test.sh
index beb28f8de4..f31aacbebe 100755
--- a/tests/kola/butane/grub-users/test.sh
+++ b/tests/kola/butane/grub-users/test.sh
@@ -36,18 +36,18 @@ rebooted)
         fatal "Rebooted into old deployment"
     fi
     # cross-check karg with BLS configs
-    if grep -q test-added-karg /boot/loader.0/entries/ostree-1-fedora-coreos.conf; then
+    if grep -q test-added-karg /boot/loader.0/entries/ostree-1*.conf; then
         fatal "Old BLS config contains new karg"
     fi
-    if ! grep -q test-added-karg /boot/loader.0/entries/ostree-2-fedora-coreos.conf; then
+    if ! grep -q test-added-karg /boot/loader.0/entries/ostree-2*.conf; then
         fatal "New BLS config doesn't contain new karg"
     fi
     # old deployment should require a password to boot
-    if ! grep -q '^grub_users ""$' /boot/loader.0/entries/ostree-1-fedora-coreos.conf; then
+    if ! grep -q '^grub_users ""$' /boot/loader.0/entries/ostree-1*.conf; then
         fatal "Missing grub_users setting in old BLS config"
     fi
     # new one should not
-    if grep -q grub_users /boot/loader.0/entries/ostree-2-fedora-coreos.conf; then
+    if grep -q grub_users /boot/loader.0/entries/ostree-2*.conf; then
         fatal "grub_users setting present in new BLS config"
     fi
     ok "BLS grub_users setting"

From 9ca48e9403588b7090d228457976f2511e870b6e Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 23 Oct 2023 16:57:42 -0400
Subject: [PATCH 1913/2157] tests/kernel-replace: Adapt to already being in a
 container

This is so far the only test here which breaks when we're first
booted into a container.  rpm-ostree's own tests are *so*
not ready for this, but we can get to that later...
---
 tests/kola/rpm-ostree/kernel-replace | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 13cacaf0d0..4fd0dd38af 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -49,12 +49,22 @@ kver="6.2.9-300.fc38.${arch}"
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
     # Take the existing ostree commit, and export it to a container image, then rebase to it.
-    checksum=$(rpm-ostree status --json | jq -r '.deployments[0].checksum')
-    v0=$(rpm-ostree status --json | jq -r '.deployments[0].version')
+    rpm-ostree status --json > status.json
+    checksum=$(jq -r '.deployments[0].checksum' < status.json)
+    v0=$(jq -r '.deployments[0].version' < status.json)
+    imgref=$(jq -r '.deployments[0]["container-image-reference"]' < status.json)
     rm ${image_dir} -rf
+    encapsulate_args=()
+    # A hack...if we're booted into a container, then we need to fake things out
+    # for the merge commit to turn it back into an image.  What we *really* want
+    # here obviously is seamless support for re-serializing a container from
+    # the ostree storage, but right now we're not doing the tar-split stuff.
+    if [[ "$imgref" != null ]]; then
+      encapsulate_args+=("--label" "ostree.bootable=true")
+    fi
     # Since we're switching OS update stream, turn off zincati
     systemctl mask --now zincati
-    ostree container encapsulate --repo=/ostree/repo ${checksum} "${image}"
+    ostree container encapsulate "${encapsulate_args[@]}" --repo=/ostree/repo ${checksum} "${image}"
     # This one keeps --experimental, but we also test without it below
     rpm-ostree rebase --experimental "$image_pull"
     ostree container image list --repo=/ostree/repo | tee imglist.txt

From 0b50084c9605d40c01c083e8b7b8efd9695d13a5 Mon Sep 17 00:00:00 2001
From: HuijingHei <hhei@redhat.com>
Date: Thu, 9 Nov 2023 17:36:51 +0800
Subject: [PATCH 1914/2157] tests: verify systemd-sysuser.service with
 `ConditionNeedsUpdate=` will be triggered with new deployment

See https://github.com/ostreedev/ostree/issues/3069#issuecomment-1798115799
---
 tests/kola/systemd/condition-needs-update | 64 +++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100755 tests/kola/systemd/condition-needs-update

diff --git a/tests/kola/systemd/condition-needs-update b/tests/kola/systemd/condition-needs-update
new file mode 100755
index 0000000000..c99f275b06
--- /dev/null
+++ b/tests/kola/systemd/condition-needs-update
@@ -0,0 +1,64 @@
+#!/bin/bash
+## kola:
+##   tags: "platform-independent"
+##   description: Verify systemd-sysuser.service with `ConditionNeedsUpdate=`
+##     will be triggered with new deployment at boot time.
+
+# See https://github.com/ostreedev/ostree/issues/3069#issuecomment-1798115799
+
+# Systemd units using ConditionNeedsUpdate= run if the mtime of .updated in
+# the specified directory is newer than /usr. Since /usr has an mtime of
+# 0, there's no way to have an older .updated file refer to
+# https://ostreedev.github.io/ostree/repo/#content-objects. Systemd units
+# typically specify ConditionNeedsUpdate=/etc or ConditionNeedsUpdate=/var
+# to support stateless systems like ostree.
+
+# Remove the file .updated from the new deployment's /etc and the OS's /var
+# regardless of where they came from to ensure that these systemd units
+# run when booting new deployments, see
+# https://github.com/ostreedev/ostree/commit/19d18842cf2df944c7e9536494353aefa2916743
+
+set -xeuo pipefail
+
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+username=footest
+kargs="somedummykarg=1"
+
+case "${AUTOPKGTEST_REBOOT_MARK:-}" in
+  "")
+    ok "first boot"
+    if getent passwd ${username}; then
+      fatal "should not get user ${username} before testing"
+    fi
+    # create sysusers config
+    mkdir /etc/sysusers.d
+    echo "u      ${username}  -   ${username}" > /etc/sysusers.d/30-${username}.conf
+    /tmp/autopkgtest-reboot second-boot
+    ;;
+
+  second-boot)
+    # reboot to check user footest not created
+    ok "second boot"
+    if getent passwd ${username}; then
+      fatal "should not get user ${username} after second boot"
+    fi
+    # create a new deployment
+    rpm-ostree kargs --append=${kargs}
+    /tmp/autopkgtest-reboot third-boot
+    ;;
+
+  third-boot)
+    ok "third boot"
+    # check user footest is created
+    if ! getent passwd ${username}; then
+      fatal "should get user ${username} with new deployment after third boot"
+    fi
+    # check appended kargs
+    if ! grep "${kargs}" /proc/cmdline; then
+      fatal "can not get appended kargs ${kargs}"
+    fi
+    ;;
+
+    *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
+esac

From d637cc8c0a56aea3f4b34126b59cdf34bdd042a6 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Wed, 15 Nov 2023 09:14:35 -0800
Subject: [PATCH 1915/2157] denylist: extend snooze for failing kola tests
 Also, kexec-tools 2.0.27 is now in F39 so the kdump.crash is passing on
 production streams. kdump.crash in rawhide for ppc64le,
 ext.config.docker.basic and coreos.ignition.ssh.key are still failing

---
 kola-denylist.yaml | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 340ec40f2e..06d242edec 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,31 +5,21 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  snooze: 2023-11-15
-  warn: true
-  arches:
-    - aarch64
-  streams:
-    - stable
-    - testing
-    - testing-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-11-15
+  snooze: 2023-11-30
   warn: true
   platforms:
     - azure
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  snooze: 2023-11-15
+  snooze: 2023-11-30
   warn: true
   streams:
     - rawhide
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
-  snooze: 2023-11-15
+  snooze: 2023-11-30
   warn: true
   arches:
     - ppc64le

From 5b2dd061adf7450feee26d23e1b4c2495565c198 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 15 Nov 2023 23:09:20 +0000
Subject: [PATCH 1916/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/883/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 698cdf1af4..ca4b00db97 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -70,7 +70,7 @@
       "evra": "5.2.15-5.fc39.aarch64"
     },
     "bash-color-prompt": {
-      "evra": "0.1-6.fc39.noarch"
+      "evra": "0.2-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -331,7 +331,7 @@
       "evra": "1:4.9.0-5.fc39.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-3.fc39.aarch64"
+      "evra": "1.15.4-4.fc39.aarch64"
     },
     "fmt": {
       "evra": "10.0.0-3.fc39.aarch64"
@@ -643,7 +643,7 @@
       "evra": "238-2.fc39.aarch64"
     },
     "libgusb": {
-      "evra": "0.4.7-1.fc39.aarch64"
+      "evra": "0.4.8-1.fc39.aarch64"
     },
     "libibverbs": {
       "evra": "46.0-4.fc39.aarch64"
@@ -718,10 +718,10 @@
       "evra": "1.55.1-4.fc39.aarch64"
     },
     "libnl3": {
-      "evra": "3.8.0-1.fc39.aarch64"
+      "evra": "3.8.0-2.fc39.aarch64"
     },
     "libnl3-cli": {
-      "evra": "3.8.0-1.fc39.aarch64"
+      "evra": "3.8.0-2.fc39.aarch64"
     },
     "libnsl2": {
       "evra": "2.0.0-6.fc39.aarch64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-12T00:00:00Z",
+    "generated": "2023-11-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-10T23:37:35Z"
+        "generated": "2023-11-12T23:18:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-12T01:25:11Z"
+        "generated": "2023-11-15T01:37:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5642a5568d..8369fe07d9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -70,7 +70,7 @@
       "evra": "5.2.15-5.fc39.ppc64le"
     },
     "bash-color-prompt": {
-      "evra": "0.1-6.fc39.noarch"
+      "evra": "0.2-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -319,7 +319,7 @@
       "evra": "1:4.9.0-5.fc39.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-3.fc39.ppc64le"
+      "evra": "1.15.4-4.fc39.ppc64le"
     },
     "fstrm": {
       "evra": "0.6.1-8.fc39.ppc64le"
@@ -628,7 +628,7 @@
       "evra": "238-2.fc39.ppc64le"
     },
     "libgusb": {
-      "evra": "0.4.7-1.fc39.ppc64le"
+      "evra": "0.4.8-1.fc39.ppc64le"
     },
     "libibverbs": {
       "evra": "46.0-4.fc39.ppc64le"
@@ -703,10 +703,10 @@
       "evra": "1.55.1-4.fc39.ppc64le"
     },
     "libnl3": {
-      "evra": "3.8.0-1.fc39.ppc64le"
+      "evra": "3.8.0-2.fc39.ppc64le"
     },
     "libnl3-cli": {
-      "evra": "3.8.0-1.fc39.ppc64le"
+      "evra": "3.8.0-2.fc39.ppc64le"
     },
     "libnsl2": {
       "evra": "2.0.0-6.fc39.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-12T00:00:00Z",
+    "generated": "2023-11-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-10T23:36:00Z"
+        "generated": "2023-11-12T23:17:21Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-12T01:25:14Z"
+        "generated": "2023-11-15T01:37:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1d0069109f..1a40813d82 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -70,7 +70,7 @@
       "evra": "5.2.15-5.fc39.s390x"
     },
     "bash-color-prompt": {
-      "evra": "0.1-6.fc39.noarch"
+      "evra": "0.2-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -316,7 +316,7 @@
       "evra": "1:4.9.0-5.fc39.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-3.fc39.s390x"
+      "evra": "1.15.4-4.fc39.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-8.fc39.s390x"
@@ -598,7 +598,7 @@
       "evra": "238-2.fc39.s390x"
     },
     "libgusb": {
-      "evra": "0.4.7-1.fc39.s390x"
+      "evra": "0.4.8-1.fc39.s390x"
     },
     "libibverbs": {
       "evra": "46.0-4.fc39.s390x"
@@ -673,10 +673,10 @@
       "evra": "1.55.1-4.fc39.s390x"
     },
     "libnl3": {
-      "evra": "3.8.0-1.fc39.s390x"
+      "evra": "3.8.0-2.fc39.s390x"
     },
     "libnl3-cli": {
-      "evra": "3.8.0-1.fc39.s390x"
+      "evra": "3.8.0-2.fc39.s390x"
     },
     "libnsl2": {
       "evra": "2.0.0-6.fc39.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-12T00:00:00Z",
+    "generated": "2023-11-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-10T23:35:13Z"
+        "generated": "2023-11-12T23:17:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-12T01:25:16Z"
+        "generated": "2023-11-15T01:37:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7bab5b9db4..7728a800d5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -70,7 +70,7 @@
       "evra": "5.2.15-5.fc39.x86_64"
     },
     "bash-color-prompt": {
-      "evra": "0.1-6.fc39.noarch"
+      "evra": "0.2-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -331,7 +331,7 @@
       "evra": "1:4.9.0-5.fc39.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-3.fc39.x86_64"
+      "evra": "1.15.4-4.fc39.x86_64"
     },
     "fmt": {
       "evra": "10.0.0-3.fc39.x86_64"
@@ -646,7 +646,7 @@
       "evra": "238-2.fc39.x86_64"
     },
     "libgusb": {
-      "evra": "0.4.7-1.fc39.x86_64"
+      "evra": "0.4.8-1.fc39.x86_64"
     },
     "libibverbs": {
       "evra": "46.0-4.fc39.x86_64"
@@ -721,10 +721,10 @@
       "evra": "1.55.1-4.fc39.x86_64"
     },
     "libnl3": {
-      "evra": "3.8.0-1.fc39.x86_64"
+      "evra": "3.8.0-2.fc39.x86_64"
     },
     "libnl3-cli": {
-      "evra": "3.8.0-1.fc39.x86_64"
+      "evra": "3.8.0-2.fc39.x86_64"
     },
     "libnsl2": {
       "evra": "2.0.0-6.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-12T00:00:00Z",
+    "generated": "2023-11-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-10T23:37:09Z"
+        "generated": "2023-11-12T23:18:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-12T01:25:19Z"
+        "generated": "2023-11-15T01:37:49Z"
       }
     }
   }

From 077d4188c2dabb49d3d0e7dfe22b3944502ad323 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 17 Nov 2023 09:11:40 -0500
Subject: [PATCH 1917/2157] denylist: skip PXE tests on ppc64le

These tests are broken with the latest GRUB BOOTP binaries in cosa,
which is now on f39.
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 06d242edec..374f03a32a 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,3 +25,8 @@
     - ppc64le
   streams:
     - rawhide
+- pattern: pxe-*.ppcfw
+  tracker: https://github.com/coreos/coreos-assembler/issues/3370
+  # nb: testiso doesn't read this, so it's just for consistency
+  arches:
+    - ppc64le

From 14f3924d070644195a394e86cd4d926799b72ddf Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 17 Nov 2023 21:08:57 +0000
Subject: [PATCH 1918/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/887/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 42 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 42 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 42 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 44 +++++++++++++++++++-------------------
 4 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ca4b00db97..a886886a4c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -67,7 +67,7 @@
       "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-5.fc39.aarch64"
+      "evra": "5.2.21-1.fc39.aarch64"
     },
     "bash-color-prompt": {
       "evra": "0.2-1.fc39.noarch"
@@ -196,7 +196,7 @@
       "evra": "1.11.1-1.fc39.aarch64"
     },
     "crypto-policies": {
-      "evra": "20230731-1.git5ed06e0.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch"
     },
     "cryptsetup": {
       "evra": "2.6.1-3.fc39.aarch64"
@@ -382,7 +382,7 @@
       "evra": "0.22-2.fc39.aarch64"
     },
     "git-core": {
-      "evra": "2.41.0-2.fc39.aarch64"
+      "evra": "2.42.0-2.fc39.aarch64"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.aarch64"
@@ -658,7 +658,7 @@
       "evra": "1.3.1-54.fc39.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.aarch64"
@@ -787,16 +787,16 @@
       "evra": "1.47.0-2.fc39.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.aarch64"
@@ -1054,7 +1054,7 @@
       "evra": "1.19-3.fc39.aarch64"
     },
     "procps-ng": {
-      "evra": "4.0.3-4.fc39.aarch64"
+      "evra": "4.0.3-5.fc39.aarch64"
     },
     "protobuf-c": {
       "evra": "1.4.1-5.fc39.aarch64"
@@ -1168,31 +1168,31 @@
       "evra": "0.1.4-4.fc39.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-client": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-common": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-2.fc39.aarch64"
+      "evra": "2.9.2-3.fc39.aarch64"
     },
     "stalld": {
       "evra": "1.16-4.fc39.aarch64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-15T00:00:00Z",
+    "generated": "2023-11-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-12T23:18:06Z"
+        "generated": "2023-11-17T15:51:42Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-15T01:37:40Z"
+        "generated": "2023-11-17T01:26:15Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8369fe07d9..838d9fdf0c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -67,7 +67,7 @@
       "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-5.fc39.ppc64le"
+      "evra": "5.2.21-1.fc39.ppc64le"
     },
     "bash-color-prompt": {
       "evra": "0.2-1.fc39.noarch"
@@ -193,7 +193,7 @@
       "evra": "1.11.1-1.fc39.ppc64le"
     },
     "crypto-policies": {
-      "evra": "20230731-1.git5ed06e0.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch"
     },
     "cryptsetup": {
       "evra": "2.6.1-3.fc39.ppc64le"
@@ -367,7 +367,7 @@
       "evra": "0.22-2.fc39.ppc64le"
     },
     "git-core": {
-      "evra": "2.41.0-2.fc39.ppc64le"
+      "evra": "2.42.0-2.fc39.ppc64le"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.ppc64le"
@@ -643,7 +643,7 @@
       "evra": "1.3.1-54.fc39.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.ppc64le"
@@ -778,16 +778,16 @@
       "evra": "1.47.0-2.fc39.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.ppc64le"
@@ -1051,7 +1051,7 @@
       "evra": "2.7.9-4.fc39.ppc64le"
     },
     "procps-ng": {
-      "evra": "4.0.3-4.fc39.ppc64le"
+      "evra": "4.0.3-5.fc39.ppc64le"
     },
     "protobuf-c": {
       "evra": "1.4.1-5.fc39.ppc64le"
@@ -1162,31 +1162,31 @@
       "evra": "0.1.4-4.fc39.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-2.fc39.ppc64le"
+      "evra": "2.9.2-3.fc39.ppc64le"
     },
     "stalld": {
       "evra": "1.16-4.fc39.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-15T00:00:00Z",
+    "generated": "2023-11-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-12T23:17:21Z"
+        "generated": "2023-11-17T15:50:55Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-15T01:37:43Z"
+        "generated": "2023-11-17T01:26:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1a40813d82..f253735edf 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -67,7 +67,7 @@
       "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-5.fc39.s390x"
+      "evra": "5.2.21-1.fc39.s390x"
     },
     "bash-color-prompt": {
       "evra": "0.2-1.fc39.noarch"
@@ -190,7 +190,7 @@
       "evra": "1.11.1-1.fc39.s390x"
     },
     "crypto-policies": {
-      "evra": "20230731-1.git5ed06e0.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch"
     },
     "cryptsetup": {
       "evra": "2.6.1-3.fc39.s390x"
@@ -355,7 +355,7 @@
       "evra": "1.0.9-6.fc39.s390x"
     },
     "git-core": {
-      "evra": "2.41.0-2.fc39.s390x"
+      "evra": "2.42.0-2.fc39.s390x"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.s390x"
@@ -613,7 +613,7 @@
       "evra": "1.3.1-54.fc39.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.s390x"
@@ -742,16 +742,16 @@
       "evra": "1.47.0-2.fc39.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.s390x"
@@ -1000,7 +1000,7 @@
       "evra": "1.19-3.fc39.s390x"
     },
     "procps-ng": {
-      "evra": "4.0.3-4.fc39.s390x"
+      "evra": "4.0.3-5.fc39.s390x"
     },
     "protobuf-c": {
       "evra": "1.4.1-5.fc39.s390x"
@@ -1111,31 +1111,31 @@
       "evra": "0.1.4-4.fc39.s390x"
     },
     "sssd-ad": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-client": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-common": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-2.fc39.s390x"
+      "evra": "2.9.2-3.fc39.s390x"
     },
     "stalld": {
       "evra": "1.16-4.fc39.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-15T00:00:00Z",
+    "generated": "2023-11-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-12T23:17:23Z"
+        "generated": "2023-11-17T15:50:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-15T01:37:46Z"
+        "generated": "2023-11-17T01:26:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7728a800d5..dbfaa8f834 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -67,7 +67,7 @@
       "evra": "11-18.fc39.noarch"
     },
     "bash": {
-      "evra": "5.2.15-5.fc39.x86_64"
+      "evra": "5.2.21-1.fc39.x86_64"
     },
     "bash-color-prompt": {
       "evra": "0.2-1.fc39.noarch"
@@ -196,7 +196,7 @@
       "evra": "1.11.1-1.fc39.x86_64"
     },
     "crypto-policies": {
-      "evra": "20230731-1.git5ed06e0.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch"
     },
     "cryptsetup": {
       "evra": "2.6.1-3.fc39.x86_64"
@@ -382,7 +382,7 @@
       "evra": "0.22-2.fc39.x86_64"
     },
     "git-core": {
-      "evra": "2.41.0-2.fc39.x86_64"
+      "evra": "2.42.0-2.fc39.x86_64"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.x86_64"
@@ -661,7 +661,7 @@
       "evra": "1.3.1-54.fc39.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.x86_64"
@@ -790,16 +790,16 @@
       "evra": "1.47.0-2.fc39.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.x86_64"
@@ -904,7 +904,7 @@
       "evra": "4.2-6.fc39.x86_64"
     },
     "microcode_ctl": {
-      "evra": "2:2.1-57.fc39.x86_64"
+      "evra": "2:2.1-58.fc39.x86_64"
     },
     "moby-engine": {
       "evra": "24.0.5-1.fc39.x86_64"
@@ -1060,7 +1060,7 @@
       "evra": "1.19-3.fc39.x86_64"
     },
     "procps-ng": {
-      "evra": "4.0.3-4.fc39.x86_64"
+      "evra": "4.0.3-5.fc39.x86_64"
     },
     "protobuf-c": {
       "evra": "1.4.1-5.fc39.x86_64"
@@ -1171,31 +1171,31 @@
       "evra": "0.1.4-4.fc39.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-client": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-common": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-2.fc39.x86_64"
+      "evra": "2.9.2-3.fc39.x86_64"
     },
     "stalld": {
       "evra": "1.16-4.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-15T00:00:00Z",
+    "generated": "2023-11-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-12T23:18:44Z"
+        "generated": "2023-11-17T15:51:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-15T01:37:49Z"
+        "generated": "2023-11-17T01:26:26Z"
       }
     }
   }

From 869e728e4ce0f23ad46d5e3e8e78eec571624795 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 19 Nov 2023 01:11:15 +0000
Subject: [PATCH 1919/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/890/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 37 +++++++++++++++++--------------------
 manifest-lock.ppc64le.json | 37 +++++++++++++++++--------------------
 manifest-lock.s390x.json   | 37 +++++++++++++++++--------------------
 manifest-lock.x86_64.json  | 37 +++++++++++++++++--------------------
 4 files changed, 68 insertions(+), 80 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a886886a4c..92cf1a6f34 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,13 +37,10 @@
       "evra": "1.25-1.fc39.aarch64"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
-    },
-    "amd-ucode-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "attr": {
       "evra": "2.5.1-8.fc39.aarch64"
@@ -88,7 +85,7 @@
       "evra": "0.2.12-2.fc39.aarch64"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "bsdtar": {
       "evra": "3.7.1-1.fc39.aarch64"
@@ -256,13 +253,13 @@
       "evra": "4.2-7.fc39.aarch64"
     },
     "dracut": {
-      "evra": "059-15.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64"
     },
     "dracut-network": {
-      "evra": "059-15.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-15.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64"
     },
     "duktape": {
       "evra": "2.7.0-5.fc39.aarch64"
@@ -445,7 +442,7 @@
       "evra": "57-2.fc39.aarch64"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-2.fc39.aarch64"
@@ -865,10 +862,10 @@
       "evra": "2.5.1-36.fc39.aarch64"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-2.fc39.aarch64"
@@ -910,7 +907,7 @@
       "evra": "4.2.0-3.fc39.aarch64"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nano": {
       "evra": "7.2-4.fc39.aarch64"
@@ -958,7 +955,7 @@
       "evra": "2.0.16-3.fc39.aarch64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nvme-cli": {
       "evra": "2.6-1.fc39.aarch64"
@@ -1072,7 +1069,7 @@
       "evra": "8.2-4.fc39.aarch64"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc39.1.aarch64"
@@ -1246,10 +1243,10 @@
       "evra": "2.39.2-1.fc39.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc39.noarch"
+      "evra": "2:9.0.2105-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc39.aarch64"
+      "evra": "2:9.0.2105-1.fc39.aarch64"
     },
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.aarch64"
@@ -1292,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-17T00:00:00Z",
+    "generated": "2023-11-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T15:51:42Z"
+        "generated": "2023-11-17T21:15:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-17T01:26:15Z"
+        "generated": "2023-11-18T01:26:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 838d9fdf0c..dded4af3ab 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,13 +37,10 @@
       "evra": "1.25-1.fc39.ppc64le"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
-    },
-    "amd-ucode-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "attr": {
       "evra": "2.5.1-8.fc39.ppc64le"
@@ -88,7 +85,7 @@
       "evra": "32:9.18.19-1.fc39.ppc64le"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "bsdtar": {
       "evra": "3.7.1-1.fc39.ppc64le"
@@ -253,13 +250,13 @@
       "evra": "4.2-7.fc39.ppc64le"
     },
     "dracut": {
-      "evra": "059-15.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-15.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-15.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le"
     },
     "duktape": {
       "evra": "2.7.0-5.fc39.ppc64le"
@@ -430,7 +427,7 @@
       "evra": "57-2.fc39.ppc64le"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-2.fc39.ppc64le"
@@ -856,10 +853,10 @@
       "evra": "2.5.1-36.fc39.ppc64le"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-2.fc39.ppc64le"
@@ -898,7 +895,7 @@
       "evra": "4.2.0-3.fc39.ppc64le"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nano": {
       "evra": "7.2-4.fc39.ppc64le"
@@ -946,7 +943,7 @@
       "evra": "2.0.16-3.fc39.ppc64le"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nvme-cli": {
       "evra": "2.6-1.fc39.ppc64le"
@@ -1069,7 +1066,7 @@
       "evra": "8.2-4.fc39.ppc64le"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc39.1.ppc64le"
@@ -1240,10 +1237,10 @@
       "evra": "2.39.2-1.fc39.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc39.noarch"
+      "evra": "2:9.0.2105-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc39.ppc64le"
+      "evra": "2:9.0.2105-1.fc39.ppc64le"
     },
     "which": {
       "evra": "2.21-40.fc39.ppc64le"
@@ -1283,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-17T00:00:00Z",
+    "generated": "2023-11-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T15:50:55Z"
+        "generated": "2023-11-17T21:14:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-17T01:26:19Z"
+        "generated": "2023-11-18T01:26:44Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f253735edf..dcf4f1e4db 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,13 +37,10 @@
       "evra": "1.25-1.fc39.s390x"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
-    },
-    "amd-ucode-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "attr": {
       "evra": "2.5.1-8.fc39.s390x"
@@ -85,7 +82,7 @@
       "evra": "32:9.18.19-1.fc39.s390x"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "bsdtar": {
       "evra": "3.7.1-1.fc39.s390x"
@@ -250,13 +247,13 @@
       "evra": "4.2-7.fc39.s390x"
     },
     "dracut": {
-      "evra": "059-15.fc39.s390x"
+      "evra": "059-16.fc39.s390x"
     },
     "dracut-network": {
-      "evra": "059-15.fc39.s390x"
+      "evra": "059-16.fc39.s390x"
     },
     "dracut-squash": {
-      "evra": "059-15.fc39.s390x"
+      "evra": "059-16.fc39.s390x"
     },
     "duktape": {
       "evra": "2.7.0-5.fc39.s390x"
@@ -403,7 +400,7 @@
       "evra": "57-2.fc39.s390x"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-2.fc39.s390x"
@@ -820,10 +817,10 @@
       "evra": "2.5.1-36.fc39.s390x"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-2.fc39.s390x"
@@ -862,7 +859,7 @@
       "evra": "4.2.0-3.fc39.s390x"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nano": {
       "evra": "7.2-4.fc39.s390x"
@@ -907,7 +904,7 @@
       "evra": "2.23.0-1.fc39.s390x"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nvme-cli": {
       "evra": "2.6-1.fc39.s390x"
@@ -1018,7 +1015,7 @@
       "evra": "8.2-4.fc39.s390x"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc39.1.s390x"
@@ -1192,10 +1189,10 @@
       "evra": "2.6.1-3.fc39.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc39.noarch"
+      "evra": "2:9.0.2105-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc39.s390x"
+      "evra": "2:9.0.2105-1.fc39.s390x"
     },
     "which": {
       "evra": "2.21-40.fc39.s390x"
@@ -1235,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-17T00:00:00Z",
+    "generated": "2023-11-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T15:50:36Z"
+        "generated": "2023-11-17T21:14:24Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-17T01:26:23Z"
+        "generated": "2023-11-18T01:26:48Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index dbfaa8f834..7740f59254 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,13 +37,10 @@
       "evra": "1.25-1.fc39.x86_64"
     },
     "amd-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
-    },
-    "amd-ucode-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "atheros-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "attr": {
       "evra": "2.5.1-8.fc39.x86_64"
@@ -88,7 +85,7 @@
       "evra": "0.2.12-2.fc39.x86_64"
     },
     "brcmfmac-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "bsdtar": {
       "evra": "3.7.1-1.fc39.x86_64"
@@ -256,13 +253,13 @@
       "evra": "4.2-7.fc39.x86_64"
     },
     "dracut": {
-      "evra": "059-15.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64"
     },
     "dracut-network": {
-      "evra": "059-15.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-15.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64"
     },
     "duktape": {
       "evra": "2.7.0-5.fc39.x86_64"
@@ -451,7 +448,7 @@
       "evra": "57-2.fc39.x86_64"
     },
     "intel-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "ipcalc": {
       "evra": "1.0.3-2.fc39.x86_64"
@@ -868,10 +865,10 @@
       "evra": "2.5.1-36.fc39.x86_64"
     },
     "linux-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "linux-firmware-whence": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "lmdb-libs": {
       "evra": "0.9.31-2.fc39.x86_64"
@@ -916,7 +913,7 @@
       "evra": "4.2.0-3.fc39.x86_64"
     },
     "mt7xxx-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nano": {
       "evra": "7.2-4.fc39.x86_64"
@@ -964,7 +961,7 @@
       "evra": "2.0.16-3.fc39.x86_64"
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "nvme-cli": {
       "evra": "2.6-1.fc39.x86_64"
@@ -1075,7 +1072,7 @@
       "evra": "8.2-4.fc39.x86_64"
     },
     "realtek-firmware": {
-      "evra": "20231030-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch"
     },
     "rpcbind": {
       "evra": "1.2.6-4.rc2.fc39.1.x86_64"
@@ -1249,10 +1246,10 @@
       "evra": "2.39.2-1.fc39.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.2081-1.fc39.noarch"
+      "evra": "2:9.0.2105-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2081-1.fc39.x86_64"
+      "evra": "2:9.0.2105-1.fc39.x86_64"
     },
     "wasmedge-rt": {
       "evra": "0.13.4-1.fc39.x86_64"
@@ -1295,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-17T00:00:00Z",
+    "generated": "2023-11-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T15:51:51Z"
+        "generated": "2023-11-17T21:16:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-17T01:26:26Z"
+        "generated": "2023-11-18T01:26:52Z"
       }
     }
   }

From dad676136fd9419c5e6d8d33f0f8fb2f768081c5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 20 Nov 2023 00:53:52 +0000
Subject: [PATCH 1920/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/892/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 92cf1a6f34..b6d6368ad5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -415,16 +415,16 @@
       "evra": "3.11-3.fc39.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-104.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-104.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-104.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-104.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.1-1.fc39.aarch64"
@@ -991,10 +991,10 @@
       "evra": "2023.7-2.fc39.aarch64"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc39.aarch64"
+      "evra": "0.25.3-1.fc39.aarch64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc39.aarch64"
+      "evra": "0.25.3-1.fc39.aarch64"
     },
     "pam": {
       "evra": "1.5.3-3.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-18T00:00:00Z",
+    "generated": "2023-11-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T21:15:22Z"
+        "generated": "2023-11-18T23:11:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-18T01:26:40Z"
+        "generated": "2023-11-19T01:15:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index dded4af3ab..4aa6245200 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -397,19 +397,19 @@
       "evra": "3.11-3.fc39.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-104.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-104.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-104.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-104.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-104.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.1-1.fc39.ppc64le"
@@ -982,10 +982,10 @@
       "evra": "2023.7-2.fc39.ppc64le"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc39.ppc64le"
+      "evra": "0.25.3-1.fc39.ppc64le"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc39.ppc64le"
+      "evra": "0.25.3-1.fc39.ppc64le"
     },
     "pam": {
       "evra": "1.5.3-3.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-18T00:00:00Z",
+    "generated": "2023-11-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T21:14:41Z"
+        "generated": "2023-11-18T23:10:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-18T01:26:44Z"
+        "generated": "2023-11-19T01:15:57Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dcf4f1e4db..2410692168 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -937,10 +937,10 @@
       "evra": "2023.7-2.fc39.s390x"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc39.s390x"
+      "evra": "0.25.3-1.fc39.s390x"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc39.s390x"
+      "evra": "0.25.3-1.fc39.s390x"
     },
     "pam": {
       "evra": "1.5.3-3.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-18T00:00:00Z",
+    "generated": "2023-11-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T21:14:24Z"
+        "generated": "2023-11-18T23:11:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-18T01:26:48Z"
+        "generated": "2023-11-19T01:16:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7740f59254..364fe790e7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -415,22 +415,22 @@
       "evra": "3.11-3.fc39.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-104.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-104.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-104.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-104.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-104.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-104.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
       "evra": "6:0.7.1-1.fc39.x86_64"
@@ -997,10 +997,10 @@
       "evra": "2023.7-2.fc39.x86_64"
     },
     "p11-kit": {
-      "evra": "0.25.2-1.fc39.x86_64"
+      "evra": "0.25.3-1.fc39.x86_64"
     },
     "p11-kit-trust": {
-      "evra": "0.25.2-1.fc39.x86_64"
+      "evra": "0.25.3-1.fc39.x86_64"
     },
     "pam": {
       "evra": "1.5.3-3.fc39.x86_64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-18T00:00:00Z",
+    "generated": "2023-11-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-17T21:16:49Z"
+        "generated": "2023-11-18T23:12:59Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-18T01:26:52Z"
+        "generated": "2023-11-19T01:16:05Z"
       }
     }
   }

From c827303067c247e0c608a33d04b31657b826fcbc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 21 Nov 2023 01:08:06 +0000
Subject: [PATCH 1921/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/894/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b6d6368ad5..3d5834cbf1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1003,10 +1003,10 @@
       "evra": "1.5.3-3.fc39.aarch64"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc39.aarch64"
+      "evra": "0^20231107.g56d9f6d-1.fc39.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc39.noarch"
+      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-19T00:00:00Z",
+    "generated": "2023-11-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-18T23:11:26Z"
+        "generated": "2023-11-19T23:06:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-19T01:15:53Z"
+        "generated": "2023-11-20T01:13:01Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4aa6245200..df48e13147 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -994,10 +994,10 @@
       "evra": "1.5.3-3.fc39.ppc64le"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc39.ppc64le"
+      "evra": "0^20231107.g56d9f6d-1.fc39.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc39.noarch"
+      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-19T00:00:00Z",
+    "generated": "2023-11-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-18T23:10:40Z"
+        "generated": "2023-11-19T23:05:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-19T01:15:57Z"
+        "generated": "2023-11-20T01:13:05Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2410692168..8fe467b11d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -949,10 +949,10 @@
       "evra": "1.5.3-3.fc39.s390x"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc39.s390x"
+      "evra": "0^20231107.g56d9f6d-1.fc39.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc39.noarch"
+      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-19T00:00:00Z",
+    "generated": "2023-11-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-18T23:11:17Z"
+        "generated": "2023-11-19T23:05:17Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-19T01:16:01Z"
+        "generated": "2023-11-20T01:13:09Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 364fe790e7..245b7b70a1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1009,10 +1009,10 @@
       "evra": "1.5.3-3.fc39.x86_64"
     },
     "passt": {
-      "evra": "0^20231004.gf851084-1.fc39.x86_64"
+      "evra": "0^20231107.g56d9f6d-1.fc39.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20231004.gf851084-1.fc39.noarch"
+      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.x86_64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-19T00:00:00Z",
+    "generated": "2023-11-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-18T23:12:59Z"
+        "generated": "2023-11-19T23:07:54Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-19T01:16:05Z"
+        "generated": "2023-11-20T01:13:13Z"
       }
     }
   }

From cd69b31f59913f8dc5f941edcd92a2ff62f43309 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 21 Nov 2023 15:31:38 -0500
Subject: [PATCH 1922/2157] ci: cancel previous build on PR update

This is an easy way to save CI resources; when a PR is updated, abort
any previous build for that PR to focus on testing the latest push.
---
 .cci.jenkinsfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index c5e5f34ba8..d902235a26 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -1,5 +1,10 @@
 // Documentation: https://github.com/coreos/coreos-ci/blob/main/README-upstream-ci.md
 
+properties([
+    // abort previous runs when a PR is updated to save resources
+    disableConcurrentBuilds(abortPrevious: true)
+])
+
 // We run `kolaTestIso` which requires at least 8Gi. Add 1Gi for overhead.
 cosaPod(cpus: 4, memory: "9Gi") {
     checkoutToDir(scm, 'config')

From 4834ccc3fd9e04e3fab7e0c308edfb4398e58d56 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Nov 2023 03:40:44 +0000
Subject: [PATCH 1923/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/898/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 60 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 60 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 60 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 60 +++++++++++++++++++-------------------
 4 files changed, 120 insertions(+), 120 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3d5834cbf1..48ce663634 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -46,10 +46,10 @@
       "evra": "2.5.1-8.fc39.aarch64"
     },
     "audit": {
-      "evra": "3.1.2-4.fc39.aarch64"
+      "evra": "3.1.2-5.fc39.aarch64"
     },
     "audit-libs": {
-      "evra": "3.1.2-4.fc39.aarch64"
+      "evra": "3.1.2-5.fc39.aarch64"
     },
     "authselect": {
       "evra": "1.4.3-1.fc39.aarch64"
@@ -67,7 +67,7 @@
       "evra": "5.2.21-1.fc39.aarch64"
     },
     "bash-color-prompt": {
-      "evra": "0.2-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -103,7 +103,7 @@
       "evra": "1.0.8-16.fc39.aarch64"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc39.aarch64"
+      "evra": "1.21.0-1.fc39.aarch64"
     },
     "ca-certificates": {
       "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
@@ -358,7 +358,7 @@
       "evra": "3.16.1-1.fc39.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc39.aarch64"
+      "evra": "1.9.9-1.fc39.aarch64"
     },
     "gawk": {
       "evra": "5.2.2-2.fc39.aarch64"
@@ -514,16 +514,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.11-300.fc39.aarch64"
+      "evra": "6.5.12-300.fc39.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.11-300.fc39.aarch64"
+      "evra": "6.5.12-300.fc39.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.11-300.fc39.aarch64"
+      "evra": "6.5.12-300.fc39.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.11-300.fc39.aarch64"
+      "evra": "6.5.12-300.fc39.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.aarch64"
@@ -655,7 +655,7 @@
       "evra": "1.3.1-54.fc39.aarch64"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.aarch64"
@@ -784,16 +784,16 @@
       "evra": "1.47.0-2.fc39.aarch64"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.aarch64"
@@ -1081,10 +1081,10 @@
       "evra": "4.19.0-1.fc39.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc39.aarch64"
+      "evra": "2023.10-3.fc39.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc39.aarch64"
+      "evra": "2023.10-3.fc39.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.19.0-1.fc39.aarch64"
@@ -1111,10 +1111,10 @@
       "evra": "4.8-14.fc39.aarch64"
     },
     "selinux-policy": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "setup": {
       "evra": "2.14.4-1.fc39.noarch"
@@ -1165,31 +1165,31 @@
       "evra": "0.1.4-4.fc39.aarch64"
     },
     "sssd-ad": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-client": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-common": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-3.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64"
     },
     "stalld": {
       "evra": "1.16-4.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-20T00:00:00Z",
+    "generated": "2023-11-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-19T23:06:15Z"
+        "generated": "2023-11-20T23:06:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-20T01:13:01Z"
+        "generated": "2023-11-22T01:18:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index df48e13147..fff825cb9e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -46,10 +46,10 @@
       "evra": "2.5.1-8.fc39.ppc64le"
     },
     "audit": {
-      "evra": "3.1.2-4.fc39.ppc64le"
+      "evra": "3.1.2-5.fc39.ppc64le"
     },
     "audit-libs": {
-      "evra": "3.1.2-4.fc39.ppc64le"
+      "evra": "3.1.2-5.fc39.ppc64le"
     },
     "authselect": {
       "evra": "1.4.3-1.fc39.ppc64le"
@@ -67,7 +67,7 @@
       "evra": "5.2.21-1.fc39.ppc64le"
     },
     "bash-color-prompt": {
-      "evra": "0.2-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -103,7 +103,7 @@
       "evra": "1.0.8-16.fc39.ppc64le"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc39.ppc64le"
+      "evra": "1.21.0-1.fc39.ppc64le"
     },
     "ca-certificates": {
       "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
@@ -343,7 +343,7 @@
       "evra": "3.16.1-1.fc39.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc39.ppc64le"
+      "evra": "1.9.9-1.fc39.ppc64le"
     },
     "gawk": {
       "evra": "5.2.2-2.fc39.ppc64le"
@@ -499,16 +499,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.11-300.fc39.ppc64le"
+      "evra": "6.5.12-300.fc39.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.11-300.fc39.ppc64le"
+      "evra": "6.5.12-300.fc39.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.11-300.fc39.ppc64le"
+      "evra": "6.5.12-300.fc39.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.11-300.fc39.ppc64le"
+      "evra": "6.5.12-300.fc39.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.ppc64le"
@@ -640,7 +640,7 @@
       "evra": "1.3.1-54.fc39.ppc64le"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.ppc64le"
@@ -775,16 +775,16 @@
       "evra": "1.47.0-2.fc39.ppc64le"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.ppc64le"
@@ -1078,10 +1078,10 @@
       "evra": "4.19.0-1.fc39.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc39.ppc64le"
+      "evra": "2023.10-3.fc39.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc39.ppc64le"
+      "evra": "2023.10-3.fc39.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.19.0-1.fc39.ppc64le"
@@ -1108,10 +1108,10 @@
       "evra": "4.8-14.fc39.ppc64le"
     },
     "selinux-policy": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-5.fc39.ppc64le"
@@ -1159,31 +1159,31 @@
       "evra": "0.1.4-4.fc39.ppc64le"
     },
     "sssd-ad": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-client": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-common": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-3.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le"
     },
     "stalld": {
       "evra": "1.16-4.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-20T00:00:00Z",
+    "generated": "2023-11-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-19T23:05:31Z"
+        "generated": "2023-11-20T23:03:52Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-20T01:13:05Z"
+        "generated": "2023-11-22T01:18:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8fe467b11d..35d09e0882 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -46,10 +46,10 @@
       "evra": "2.5.1-8.fc39.s390x"
     },
     "audit": {
-      "evra": "3.1.2-4.fc39.s390x"
+      "evra": "3.1.2-5.fc39.s390x"
     },
     "audit-libs": {
-      "evra": "3.1.2-4.fc39.s390x"
+      "evra": "3.1.2-5.fc39.s390x"
     },
     "authselect": {
       "evra": "1.4.3-1.fc39.s390x"
@@ -67,7 +67,7 @@
       "evra": "5.2.21-1.fc39.s390x"
     },
     "bash-color-prompt": {
-      "evra": "0.2-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -100,7 +100,7 @@
       "evra": "1.0.8-16.fc39.s390x"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc39.s390x"
+      "evra": "1.21.0-1.fc39.s390x"
     },
     "ca-certificates": {
       "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
@@ -340,7 +340,7 @@
       "evra": "3.16.1-1.fc39.s390x"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc39.s390x"
+      "evra": "1.9.9-1.fc39.s390x"
     },
     "gawk": {
       "evra": "5.2.2-2.fc39.s390x"
@@ -469,16 +469,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.11-300.fc39.s390x"
+      "evra": "6.5.12-300.fc39.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.11-300.fc39.s390x"
+      "evra": "6.5.12-300.fc39.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.11-300.fc39.s390x"
+      "evra": "6.5.12-300.fc39.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.11-300.fc39.s390x"
+      "evra": "6.5.12-300.fc39.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.s390x"
@@ -610,7 +610,7 @@
       "evra": "1.3.1-54.fc39.s390x"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.s390x"
@@ -739,16 +739,16 @@
       "evra": "1.47.0-2.fc39.s390x"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.s390x"
@@ -1027,10 +1027,10 @@
       "evra": "4.19.0-1.fc39.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc39.s390x"
+      "evra": "2023.10-3.fc39.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc39.s390x"
+      "evra": "2023.10-3.fc39.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.19.0-1.fc39.s390x"
@@ -1060,10 +1060,10 @@
       "evra": "4.8-14.fc39.s390x"
     },
     "selinux-policy": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "setup": {
       "evra": "2.14.4-1.fc39.noarch"
@@ -1108,31 +1108,31 @@
       "evra": "0.1.4-4.fc39.s390x"
     },
     "sssd-ad": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-client": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-common": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-3.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x"
     },
     "stalld": {
       "evra": "1.16-4.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-20T00:00:00Z",
+    "generated": "2023-11-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-19T23:05:17Z"
+        "generated": "2023-11-20T23:03:47Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-20T01:13:09Z"
+        "generated": "2023-11-22T01:18:29Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 245b7b70a1..c9ca8e219d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -46,10 +46,10 @@
       "evra": "2.5.1-8.fc39.x86_64"
     },
     "audit": {
-      "evra": "3.1.2-4.fc39.x86_64"
+      "evra": "3.1.2-5.fc39.x86_64"
     },
     "audit-libs": {
-      "evra": "3.1.2-4.fc39.x86_64"
+      "evra": "3.1.2-5.fc39.x86_64"
     },
     "authselect": {
       "evra": "1.4.3-1.fc39.x86_64"
@@ -67,7 +67,7 @@
       "evra": "5.2.21-1.fc39.x86_64"
     },
     "bash-color-prompt": {
-      "evra": "0.2-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch"
     },
     "bash-completion": {
       "evra": "1:2.11-12.fc39.noarch"
@@ -103,7 +103,7 @@
       "evra": "1.0.8-16.fc39.x86_64"
     },
     "c-ares": {
-      "evra": "1.19.1-1.fc39.x86_64"
+      "evra": "1.21.0-1.fc39.x86_64"
     },
     "ca-certificates": {
       "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
@@ -358,7 +358,7 @@
       "evra": "3.16.1-1.fc39.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.7-1.fc39.x86_64"
+      "evra": "1.9.9-1.fc39.x86_64"
     },
     "gawk": {
       "evra": "5.2.2-2.fc39.x86_64"
@@ -520,16 +520,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.11-300.fc39.x86_64"
+      "evra": "6.5.12-300.fc39.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.11-300.fc39.x86_64"
+      "evra": "6.5.12-300.fc39.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.11-300.fc39.x86_64"
+      "evra": "6.5.12-300.fc39.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.11-300.fc39.x86_64"
+      "evra": "6.5.12-300.fc39.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.27-2.fc39.x86_64"
@@ -658,7 +658,7 @@
       "evra": "1.3.1-54.fc39.x86_64"
     },
     "libipa_hbac": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "libjcat": {
       "evra": "0.1.14-2.fc39.x86_64"
@@ -787,16 +787,16 @@
       "evra": "1.47.0-2.fc39.x86_64"
     },
     "libsss_certmap": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "libsss_idmap": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "libsss_sudo": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "libstdc++": {
       "evra": "13.2.1-4.fc39.x86_64"
@@ -1084,10 +1084,10 @@
       "evra": "4.19.0-1.fc39.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.8-2.fc39.x86_64"
+      "evra": "2023.10-3.fc39.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.8-2.fc39.x86_64"
+      "evra": "2023.10-3.fc39.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.19.0-1.fc39.x86_64"
@@ -1114,10 +1114,10 @@
       "evra": "4.8-14.fc39.x86_64"
     },
     "selinux-policy": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "39.1-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch"
     },
     "setup": {
       "evra": "2.14.4-1.fc39.noarch"
@@ -1168,31 +1168,31 @@
       "evra": "0.1.4-4.fc39.x86_64"
     },
     "sssd-ad": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-client": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-common": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-common-pac": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-ipa": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-krb5": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-krb5-common": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-ldap": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.2-3.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64"
     },
     "stalld": {
       "evra": "1.16-4.fc39.x86_64"
@@ -1292,16 +1292,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-20T00:00:00Z",
+    "generated": "2023-11-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-19T23:07:54Z"
+        "generated": "2023-11-20T23:05:12Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-20T01:13:13Z"
+        "generated": "2023-11-22T01:18:33Z"
       }
     }
   }

From 898bf23a672672e599c0e6260252a184145c0515 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 22 Nov 2023 17:18:08 +0100
Subject: [PATCH 1924/2157] manifests: Explicitly include amd-ucode-firmware

Explicitly include this sub package as we want to make sure that AMD CPU
microcode firmwares are included in FCOS, just like we include the ones
for Intel CPU.

See: https://bugzilla.redhat.com/show_bug.cgi?id=2251053
Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1618
---
 manifest-lock.x86_64.json          | 3 +++
 manifests/bootable-rpm-ostree.yaml | 1 +
 2 files changed, 4 insertions(+)

diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c9ca8e219d..30183ed10b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -39,6 +39,9 @@
     "amd-gpu-firmware": {
       "evra": "20231111-1.fc39.noarch"
     },
+    "amd-ucode-firmware": {
+      "evra": "20231111-1.fc39.noarch"
+    },
     "atheros-firmware": {
       "evra": "20231111-1.fc39.noarch"
     },
diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 9d5faddbec..1cdd3810be 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -29,6 +29,7 @@ packages-s390x:
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl
+  - amd-ucode-firmware
 
 exclude-packages:
   # Exclude kernel-debug-core to make sure that it doesn't somehow get

From 88f24495197ba1384d66fe5c0a3f3148495a783d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 Nov 2023 21:48:46 +0000
Subject: [PATCH 1925/2157] overrides: fast-track ignition-2.17.0-1.fc39

---
 manifest-lock.overrides.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5fb815abff..8b6dc06d48 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,6 +14,12 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
+  ignition:
+    evr: 2.17.0-1.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f754cec812
+      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f754cec812
+      type: fast-track
   zincati:
     evr: 0.0.25-6.fc39
     metadata:

From 80488e8cd697e0c74140eae2dc9c65a27b738cf9 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 23 Nov 2023 14:39:19 -0500
Subject: [PATCH 1926/2157] tests/kola/networking: adapt to new link file names

In systemd commit b94f59b9d56 (part of v255+), the priority of the link
file generated from the `ifname` karg was changed from 90 to 70. We
don't really care about the priority here so just use a glob instead.

Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1620
---
 .../ifname-karg/everyboot-systemd-link-file/test.sh           | 2 +-
 .../networking/ifname-karg/udev-rule-firstboot-propagation    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
index 26b2c85e30..389e04c136 100755
--- a/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
+++ b/tests/kola/networking/ifname-karg/everyboot-systemd-link-file/test.sh
@@ -20,7 +20,7 @@ run_tests() {
     # Make sure nothing was persisted from the initramfs
     check_file_not_exists '/etc/udev/rules.d/80-ifname.rules'
     # Make sure systemd-network-generator ran (from the real root)
-    check_file_exists "/run/systemd/network/90-${nicname}.link"
+    check_file_exists "/run/systemd/network/*-${nicname}.link"
     # Make sure the NIC is in use and got the expected IP address
     check_ip "${nicname}"
 }
diff --git a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
index 52350b96f6..37489d97c7 100755
--- a/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
+++ b/tests/kola/networking/ifname-karg/udev-rule-firstboot-propagation
@@ -24,7 +24,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
         check_file_exists '/etc/udev/rules.d/80-ifname.rules'
         # On first boot we expect systemd-network-generator to run too
         # because the ifname= karg was present, but only for first boot
-        check_file_exists "/run/systemd/network/90-${nicname}.link"
+        check_file_exists "/run/systemd/network/*-${nicname}.link"
         # Make sure the NIC is in use and got the expected IP address
         check_ip "${nicname}"
         /tmp/autopkgtest-reboot rebooted
@@ -36,7 +36,7 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
         check_file_exists '/etc/udev/rules.d/80-ifname.rules'
         # On second boot the ifname= karg isn't there so the file
         # created by systemd-network-generator shouldn't exist.
-        check_file_not_exists "/run/systemd/network/90-${nicname}.link"
+        check_file_not_exists "/run/systemd/network/*-${nicname}.link"
         # Make sure the NIC is in use and got the expected IP address
         check_ip "${nicname}"
       ;;

From 16b6d4195cdbe739677655f35aa01947c26762bf Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 22 Nov 2023 20:52:30 -0500
Subject: [PATCH 1927/2157] Revert "denylist: skip PXE tests on ppc64le"

This reverts commit 077d4188c2dabb49d3d0e7dfe22b3944502ad323.

Those tests should work now with the workaround added in
https://github.com/coreos/coreos-assembler/pull/3661.
---
 kola-denylist.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 374f03a32a..06d242edec 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,8 +25,3 @@
     - ppc64le
   streams:
     - rawhide
-- pattern: pxe-*.ppcfw
-  tracker: https://github.com/coreos/coreos-assembler/issues/3370
-  # nb: testiso doesn't read this, so it's just for consistency
-  arches:
-    - ppc64le

From 712471ce016496c8bd7c6ef3f272fe8fbd46495e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 25 Nov 2023 02:10:13 +0000
Subject: [PATCH 1928/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/904/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 48ce663634..ae0f898bc2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,10 +187,10 @@
       "evra": "3.18-3.fc39.aarch64"
     },
     "crun": {
-      "evra": "1.11.1-1.fc39.aarch64"
+      "evra": "1.11.2-1.fc39.aarch64"
     },
     "crun-wasm": {
-      "evra": "1.11.1-1.fc39.aarch64"
+      "evra": "1.11.2-1.fc39.aarch64"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -379,22 +379,22 @@
       "evra": "0.22-2.fc39.aarch64"
     },
     "git-core": {
-      "evra": "2.42.0-2.fc39.aarch64"
+      "evra": "2.43.0-1.fc39.aarch64"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.aarch64"
     },
     "glibc": {
-      "evra": "2.38-10.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64"
     },
     "glibc-common": {
-      "evra": "2.38-10.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-10.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-10.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-5.fc39.aarch64"
@@ -436,7 +436,7 @@
       "evra": "3.23-9.fc39.aarch64"
     },
     "ignition": {
-      "evra": "2.16.2-2.fc39.aarch64"
+      "evra": "2.17.0-1.fc39.aarch64"
     },
     "inih": {
       "evra": "57-2.fc39.aarch64"
@@ -526,7 +526,7 @@
       "evra": "6.5.12-300.fc39.aarch64"
     },
     "kexec-tools": {
-      "evra": "2.0.27-2.fc39.aarch64"
+      "evra": "2.0.27-3.fc39.aarch64"
     },
     "keyutils": {
       "evra": "1.6.1-7.fc39.aarch64"
@@ -1039,10 +1039,10 @@
       "evra": "3.5-8.fc39.aarch64"
     },
     "polkit": {
-      "evra": "123-1.fc39.aarch64"
+      "evra": "123-1.fc39.1.aarch64"
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.aarch64"
+      "evra": "123-1.fc39.1.aarch64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-26.fc39.aarch64"
@@ -1243,13 +1243,13 @@
       "evra": "2.39.2-1.fc39.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.2105-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2105-1.fc39.aarch64"
+      "evra": "2:9.0.2120-1.fc39.aarch64"
     },
     "wasmedge-rt": {
-      "evra": "0.13.4-1.fc39.aarch64"
+      "evra": "0.13.5-1.fc39.aarch64"
     },
     "which": {
       "evra": "2.21-40.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-22T00:00:00Z",
+    "generated": "2023-11-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-20T23:06:20Z"
+        "generated": "2023-11-24T01:42:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-22T01:18:21Z"
+        "generated": "2023-11-24T01:28:14Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fff825cb9e..b3e2b92cbe 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -187,7 +187,7 @@
       "evra": "3.18-3.fc39.ppc64le"
     },
     "crun": {
-      "evra": "1.11.1-1.fc39.ppc64le"
+      "evra": "1.11.2-1.fc39.ppc64le"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -364,22 +364,22 @@
       "evra": "0.22-2.fc39.ppc64le"
     },
     "git-core": {
-      "evra": "2.42.0-2.fc39.ppc64le"
+      "evra": "2.43.0-1.fc39.ppc64le"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.ppc64le"
     },
     "glibc": {
-      "evra": "2.38-10.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.38-10.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-10.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-10.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-5.fc39.ppc64le"
@@ -421,7 +421,7 @@
       "evra": "3.23-9.fc39.ppc64le"
     },
     "ignition": {
-      "evra": "2.16.2-2.fc39.ppc64le"
+      "evra": "2.17.0-1.fc39.ppc64le"
     },
     "inih": {
       "evra": "57-2.fc39.ppc64le"
@@ -511,7 +511,7 @@
       "evra": "6.5.12-300.fc39.ppc64le"
     },
     "kexec-tools": {
-      "evra": "2.0.27-2.fc39.ppc64le"
+      "evra": "2.0.27-3.fc39.ppc64le"
     },
     "keyutils": {
       "evra": "1.6.1-7.fc39.ppc64le"
@@ -1030,10 +1030,10 @@
       "evra": "3.5-8.fc39.ppc64le"
     },
     "polkit": {
-      "evra": "123-1.fc39.ppc64le"
+      "evra": "123-1.fc39.1.ppc64le"
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.ppc64le"
+      "evra": "123-1.fc39.1.ppc64le"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-26.fc39.ppc64le"
@@ -1237,10 +1237,10 @@
       "evra": "2.39.2-1.fc39.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.2105-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2105-1.fc39.ppc64le"
+      "evra": "2:9.0.2120-1.fc39.ppc64le"
     },
     "which": {
       "evra": "2.21-40.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-22T00:00:00Z",
+    "generated": "2023-11-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-20T23:03:52Z"
+        "generated": "2023-11-24T01:42:38Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-22T01:18:25Z"
+        "generated": "2023-11-24T01:28:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 35d09e0882..7c48237449 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -184,7 +184,7 @@
       "evra": "3.18-3.fc39.s390x"
     },
     "crun": {
-      "evra": "1.11.1-1.fc39.s390x"
+      "evra": "1.11.2-1.fc39.s390x"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -352,22 +352,22 @@
       "evra": "1.0.9-6.fc39.s390x"
     },
     "git-core": {
-      "evra": "2.42.0-2.fc39.s390x"
+      "evra": "2.43.0-1.fc39.s390x"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.s390x"
     },
     "glibc": {
-      "evra": "2.38-10.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x"
     },
     "glibc-common": {
-      "evra": "2.38-10.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-10.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-10.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-5.fc39.s390x"
@@ -394,7 +394,7 @@
       "evra": "3.23-9.fc39.s390x"
     },
     "ignition": {
-      "evra": "2.16.2-2.fc39.s390x"
+      "evra": "2.17.0-1.fc39.s390x"
     },
     "inih": {
       "evra": "57-2.fc39.s390x"
@@ -481,7 +481,7 @@
       "evra": "6.5.12-300.fc39.s390x"
     },
     "kexec-tools": {
-      "evra": "2.0.27-2.fc39.s390x"
+      "evra": "2.0.27-3.fc39.s390x"
     },
     "keyutils": {
       "evra": "1.6.1-7.fc39.s390x"
@@ -985,10 +985,10 @@
       "evra": "3.5-8.fc39.s390x"
     },
     "polkit": {
-      "evra": "123-1.fc39.s390x"
+      "evra": "123-1.fc39.1.s390x"
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.s390x"
+      "evra": "123-1.fc39.1.s390x"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-26.fc39.s390x"
@@ -1189,10 +1189,10 @@
       "evra": "2.6.1-3.fc39.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.2105-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2105-1.fc39.s390x"
+      "evra": "2:9.0.2120-1.fc39.s390x"
     },
     "which": {
       "evra": "2.21-40.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-22T00:00:00Z",
+    "generated": "2023-11-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-20T23:03:47Z"
+        "generated": "2023-11-24T01:42:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-22T01:18:29Z"
+        "generated": "2023-11-24T01:28:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 30183ed10b..665d2cd556 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,10 +190,10 @@
       "evra": "3.18-3.fc39.x86_64"
     },
     "crun": {
-      "evra": "1.11.1-1.fc39.x86_64"
+      "evra": "1.11.2-1.fc39.x86_64"
     },
     "crun-wasm": {
-      "evra": "1.11.1-1.fc39.x86_64"
+      "evra": "1.11.2-1.fc39.x86_64"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -382,22 +382,22 @@
       "evra": "0.22-2.fc39.x86_64"
     },
     "git-core": {
-      "evra": "2.42.0-2.fc39.x86_64"
+      "evra": "2.43.0-1.fc39.x86_64"
     },
     "glib2": {
       "evra": "2.78.1-1.fc39.x86_64"
     },
     "glibc": {
-      "evra": "2.38-10.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64"
     },
     "glibc-common": {
-      "evra": "2.38-10.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-10.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-10.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-5.fc39.x86_64"
@@ -445,7 +445,7 @@
       "evra": "3.23-9.fc39.x86_64"
     },
     "ignition": {
-      "evra": "2.16.2-2.fc39.x86_64"
+      "evra": "2.17.0-1.fc39.x86_64"
     },
     "inih": {
       "evra": "57-2.fc39.x86_64"
@@ -535,7 +535,7 @@
       "evra": "6.5.12-300.fc39.x86_64"
     },
     "kexec-tools": {
-      "evra": "2.0.27-2.fc39.x86_64"
+      "evra": "2.0.27-3.fc39.x86_64"
     },
     "keyutils": {
       "evra": "1.6.1-7.fc39.x86_64"
@@ -1048,10 +1048,10 @@
       "evra": "3.5-8.fc39.x86_64"
     },
     "polkit": {
-      "evra": "123-1.fc39.x86_64"
+      "evra": "123-1.fc39.1.x86_64"
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.x86_64"
+      "evra": "123-1.fc39.1.x86_64"
     },
     "polkit-pkla-compat": {
       "evra": "0.1-26.fc39.x86_64"
@@ -1249,13 +1249,13 @@
       "evra": "2.39.2-1.fc39.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.2105-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.2105-1.fc39.x86_64"
+      "evra": "2:9.0.2120-1.fc39.x86_64"
     },
     "wasmedge-rt": {
-      "evra": "0.13.4-1.fc39.x86_64"
+      "evra": "0.13.5-1.fc39.x86_64"
     },
     "which": {
       "evra": "2.21-40.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-22T00:00:00Z",
+    "generated": "2023-11-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-20T23:05:12Z"
+        "generated": "2023-11-24T01:44:07Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-22T01:18:33Z"
+        "generated": "2023-11-24T01:28:27Z"
       }
     }
   }

From 07e3b2823cb7a093fbafbfe24ee424313aa651fc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 25 Nov 2023 23:43:14 +0000
Subject: [PATCH 1929/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/906/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ae0f898bc2..d75e03b69b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,13 +73,13 @@
       "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc39.aarch64"
+      "evra": "32:9.18.20-1.fc39.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc39.aarch64"
+      "evra": "32:9.18.20-1.fc39.aarch64"
     },
     "bootupd": {
       "evra": "0.2.12-2.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-24T00:00:00Z",
+    "generated": "2023-11-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T01:42:28Z"
+        "generated": "2023-11-24T23:29:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-24T01:28:14Z"
+        "generated": "2023-11-25T02:34:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b3e2b92cbe..644c620ac9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -76,13 +76,13 @@
       "evra": "1.07.1-19.fc39.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc39.ppc64le"
+      "evra": "32:9.18.20-1.fc39.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc39.ppc64le"
+      "evra": "32:9.18.20-1.fc39.ppc64le"
     },
     "brcmfmac-firmware": {
       "evra": "20231111-1.fc39.noarch"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-24T00:00:00Z",
+    "generated": "2023-11-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T01:42:38Z"
+        "generated": "2023-11-24T23:29:03Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-24T01:28:18Z"
+        "generated": "2023-11-25T02:34:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7c48237449..0ed84ae9d3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,13 +73,13 @@
       "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc39.s390x"
+      "evra": "32:9.18.20-1.fc39.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc39.s390x"
+      "evra": "32:9.18.20-1.fc39.s390x"
     },
     "brcmfmac-firmware": {
       "evra": "20231111-1.fc39.noarch"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-24T00:00:00Z",
+    "generated": "2023-11-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T01:42:10Z"
+        "generated": "2023-11-24T23:28:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-24T01:28:22Z"
+        "generated": "2023-11-25T02:34:55Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 665d2cd556..ff3688488f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -76,13 +76,13 @@
       "evra": "1:2.11-12.fc39.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.19-1.fc39.x86_64"
+      "evra": "32:9.18.20-1.fc39.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.19-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.19-1.fc39.x86_64"
+      "evra": "32:9.18.20-1.fc39.x86_64"
     },
     "bootupd": {
       "evra": "0.2.12-2.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-24T00:00:00Z",
+    "generated": "2023-11-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T01:44:07Z"
+        "generated": "2023-11-24T23:30:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-24T01:28:27Z"
+        "generated": "2023-11-25T02:35:00Z"
       }
     }
   }

From 06e14b30442fbac3ad9ca6361916f25218934376 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 Nov 2023 23:31:24 +0000
Subject: [PATCH 1930/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/908/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d75e03b69b..75f44d86e3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -91,7 +91,7 @@
       "evra": "3.7.1-1.fc39.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc39.aarch64"
+      "evra": "6.6.2-1.fc39.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-2.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-25T00:00:00Z",
+    "generated": "2023-11-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T23:29:35Z"
+        "generated": "2023-11-25T23:46:28Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-25T02:34:46Z"
+        "generated": "2023-11-26T01:34:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 644c620ac9..5f9527859f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -91,7 +91,7 @@
       "evra": "3.7.1-1.fc39.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc39.ppc64le"
+      "evra": "6.6.2-1.fc39.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-2.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-25T00:00:00Z",
+    "generated": "2023-11-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T23:29:03Z"
+        "generated": "2023-11-25T23:45:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-25T02:34:51Z"
+        "generated": "2023-11-26T01:34:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0ed84ae9d3..d81b27da93 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -88,7 +88,7 @@
       "evra": "3.7.1-1.fc39.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc39.s390x"
+      "evra": "6.6.2-1.fc39.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-2.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-25T00:00:00Z",
+    "generated": "2023-11-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T23:28:49Z"
+        "generated": "2023-11-25T23:46:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-25T02:34:55Z"
+        "generated": "2023-11-26T01:34:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ff3688488f..cce5734131 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -94,7 +94,7 @@
       "evra": "3.7.1-1.fc39.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.5.1-1.fc39.x86_64"
+      "evra": "6.6.2-1.fc39.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-2.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-25T00:00:00Z",
+    "generated": "2023-11-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-24T23:30:09Z"
+        "generated": "2023-11-25T23:48:26Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-25T02:35:00Z"
+        "generated": "2023-11-26T01:34:16Z"
       }
     }
   }

From 9405adc728a5cb05429741212bd5b630791adac0 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Tue, 28 Nov 2023 12:19:04 -0500
Subject: [PATCH 1931/2157] denylist: skip `coreos.unique.boot.failure` on
 aarch64

This test has been failing on aarch64 builds. Let's denylist the
test while we work to find a fix for:
https://github.com/coreos/coreos-assembler/issues/3669
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 06d242edec..d72100c434 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -25,3 +25,9 @@
     - ppc64le
   streams:
     - rawhide
+- pattern: coreos.unique.boot.failure
+  tracker: https://github.com/coreos/coreos-assembler/issues/3669
+  snooze: 2023-12-12
+  warn: true
+  arches:
+    - aarch64

From 08b13806bb61faf85df2a93ffed9d7508ad47240 Mon Sep 17 00:00:00 2001
From: Luke Yang <luyang@redhat.com>
Date: Wed, 1 Nov 2023 11:33:47 -0400
Subject: [PATCH 1932/2157] tests: create partition scheme test

Create a test to verify partition numbers and sizes. This is to ensure
that the partition scheme is what we expect during the transition to using
OSBuild in the FCOS pipeline.
---
 tests/kola/disks/partition-scheme | 61 +++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100755 tests/kola/disks/partition-scheme

diff --git a/tests/kola/disks/partition-scheme b/tests/kola/disks/partition-scheme
new file mode 100755
index 0000000000..6fe51e99d2
--- /dev/null
+++ b/tests/kola/disks/partition-scheme
@@ -0,0 +1,61 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify the partition scheme is what we expect.
+##
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+root_part=$(findmnt -n -o SOURCE /sysroot)
+disk_name=$(lsblk --json -o PKNAME --path "$root_part" | jq --raw-output '.blockdevices[].pkname')
+diskData=$(sfdisk --json "$disk_name" | jq '.partitiontable' )
+partitionData=$(echo $diskData | jq '.partitions[]')
+totalPartitions=$(echo $diskData | jq '.partitions | length')
+sector_size=$(echo $diskData | jq .sectorsize)
+
+if [[ $totalPartitions -ne 4 ]]; then
+    fatal "Expected 4 partitions, got $totalPartitions"
+fi
+
+# check sizes of each parition
+ONE_MiB=$(( 1024 * 1024 ))
+
+# An associative array that maps the partition label to the size (in MiB)
+# of the partition. For the root partition we set it to "" to skip the check
+# there because the growfs service runs on first boot. Checking start
+# should be enough there.
+declare -A expected=(
+    ["BIOS-BOOT"]="1"
+    ["EFI-SYSTEM"]="127"
+    ["boot"]="384"
+    ["root"]=""
+)
+
+# There is a 1MiB gap at the beginning of the disks
+expected_start=$(( 1 * $ONE_MiB / $sector_size ))
+
+# Iterate over the partitions and check their start and size
+for key in "${!expected[@]}"; do
+    size_MiB="${expected[${key}]}"
+    start=$(echo "$partitionData" | jq "select ( .name == \"$key\") | .start")
+    sectors=$(echo "$partitionData" | jq "select ( .name == \"$key\") | .size")
+    size=$(( $sectors * $sector_size ))
+    if [[ "$start" -ne "$expected_start" ]]; then
+        fatal "Expected $key partition start sector of $expected_start, got $start"
+    fi
+    if [ ! -z "$size_MiB" ]; then
+        expected_size=$(($size_MiB * $ONE_MiB))
+        if [[ "$expected_size" -ne "$size" ]]; then
+            fatal "Expected $key partition of size $expected_size, got $size"
+        fi
+    fi
+    # The expected start of the next partition will be the start of this partition
+    # plus the size of this partition.
+    expected_start=$(($expected_start + $size / $sector_size))
+done
+
+ok partition scheme
+exit 0
\ No newline at end of file

From ffb0c30a3d9709fdc644bfac44ce857979a8211e Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 30 Nov 2023 12:44:38 -0500
Subject: [PATCH 1933/2157] denylist: extend expired snoozes

The following tests are still failing as of today:
- `coreos.ignition.ssh.key`
- `ext.config.docker.basic`
- `ext.config.kdump.crash`

Extend the snooze on these tests for another two weeks while
we wait for a fix on them.
---
 kola-denylist.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index d72100c434..e88fe54339 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,19 +7,19 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-11-30
+  snooze: 2023-12-14
   warn: true
   platforms:
     - azure
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  snooze: 2023-11-30
+  snooze: 2023-12-14
   warn: true
   streams:
     - rawhide
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
-  snooze: 2023-11-30
+  snooze: 2023-12-14
   warn: true
   arches:
     - ppc64le

From fb31cc67ba4d402991936fbd239c52fe729752a6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 1 Dec 2023 06:06:19 +0000
Subject: [PATCH 1934/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 8b6dc06d48..5fb815abff 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,12 +14,6 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
-  ignition:
-    evr: 2.17.0-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f754cec812
-      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f754cec812
-      type: fast-track
   zincati:
     evr: 0.0.25-6.fc39
     metadata:

From 28826ff490aa7fa4f2bc7339127d4eeda3f32a20 Mon Sep 17 00:00:00 2001
From: Jan Schintag <jan.schintag@de.ibm.com>
Date: Thu, 30 Nov 2023 17:23:07 +0100
Subject: [PATCH 1935/2157] s390x: Fix ext.config.disks.partition-scheme

s390x only has 2 partitions. Adjust the test accordingly.

Signed-off-by: Jan Schintag <jan.schintag@de.ibm.com>
---
 tests/kola/disks/partition-scheme | 43 +++++++++++++++++++++----------
 1 file changed, 29 insertions(+), 14 deletions(-)

diff --git a/tests/kola/disks/partition-scheme b/tests/kola/disks/partition-scheme
index 6fe51e99d2..1f456e0820 100755
--- a/tests/kola/disks/partition-scheme
+++ b/tests/kola/disks/partition-scheme
@@ -16,24 +16,39 @@ partitionData=$(echo $diskData | jq '.partitions[]')
 totalPartitions=$(echo $diskData | jq '.partitions | length')
 sector_size=$(echo $diskData | jq .sectorsize)
 
-if [[ $totalPartitions -ne 4 ]]; then
-    fatal "Expected 4 partitions, got $totalPartitions"
+arch=$(uname -m)
+
+if [[ "$arch" == "s390x" ]]; then
+    if [[ $totalPartitions -ne 2 ]]; then
+        fatal "Expected 2 partitions, got $totalPartitions"
+    fi
+    # An associative array that maps the partition label to the size (in MiB)
+    # of the partition. For the root partition we set it to "" to skip the check
+    # there because the growfs service runs on first boot. Checking start
+    # should be enough there.
+    declare -A expected=(
+        ["boot"]="384"
+        ["root"]=""
+    )
+else
+    if [[ $totalPartitions -ne 4 ]]; then
+        fatal "Expected 4 partitions, got $totalPartitions"
+    fi
+    # An associative array that maps the partition label to the size (in MiB)
+    # of the partition. For the root partition we set it to "" to skip the check
+    # there because the growfs service runs on first boot. Checking start
+    # should be enough there.
+    declare -A expected=(
+        ["BIOS-BOOT"]="1"
+        ["EFI-SYSTEM"]="127"
+        ["boot"]="384"
+        ["root"]=""
+    )
 fi
 
 # check sizes of each parition
 ONE_MiB=$(( 1024 * 1024 ))
 
-# An associative array that maps the partition label to the size (in MiB)
-# of the partition. For the root partition we set it to "" to skip the check
-# there because the growfs service runs on first boot. Checking start
-# should be enough there.
-declare -A expected=(
-    ["BIOS-BOOT"]="1"
-    ["EFI-SYSTEM"]="127"
-    ["boot"]="384"
-    ["root"]=""
-)
-
 # There is a 1MiB gap at the beginning of the disks
 expected_start=$(( 1 * $ONE_MiB / $sector_size ))
 
@@ -58,4 +73,4 @@ for key in "${!expected[@]}"; do
 done
 
 ok partition scheme
-exit 0
\ No newline at end of file
+exit 0

From 2bbc6f3502e11c241c87f0c0a2444e80f4385988 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 1 Dec 2023 11:38:17 -0500
Subject: [PATCH 1936/2157] tests/partition-scheme: support aarch64/ppc64le

And also fix an issue where if an expected partition was missing
it will cause a syntax error, but the error wasn't caught. We catch
it now by checking if the start/size detected are "" before moving
forward.
---
 tests/kola/disks/partition-scheme | 76 ++++++++++++++++++-------------
 1 file changed, 44 insertions(+), 32 deletions(-)

diff --git a/tests/kola/disks/partition-scheme b/tests/kola/disks/partition-scheme
index 1f456e0820..c20a09f54f 100755
--- a/tests/kola/disks/partition-scheme
+++ b/tests/kola/disks/partition-scheme
@@ -16,47 +16,60 @@ partitionData=$(echo $diskData | jq '.partitions[]')
 totalPartitions=$(echo $diskData | jq '.partitions | length')
 sector_size=$(echo $diskData | jq .sectorsize)
 
-arch=$(uname -m)
+ONE_MiB=$(( 1024 * 1024 ))
 
-if [[ "$arch" == "s390x" ]]; then
-    if [[ $totalPartitions -ne 2 ]]; then
-        fatal "Expected 2 partitions, got $totalPartitions"
-    fi
-    # An associative array that maps the partition label to the size (in MiB)
-    # of the partition. For the root partition we set it to "" to skip the check
-    # there because the growfs service runs on first boot. Checking start
-    # should be enough there.
-    declare -A expected=(
-        ["boot"]="384"
-        ["root"]=""
-    )
-else
-    if [[ $totalPartitions -ne 4 ]]; then
-        fatal "Expected 4 partitions, got $totalPartitions"
-    fi
-    # An associative array that maps the partition label to the size (in MiB)
-    # of the partition. For the root partition we set it to "" to skip the check
-    # there because the growfs service runs on first boot. Checking start
-    # should be enough there.
-    declare -A expected=(
-        ["BIOS-BOOT"]="1"
-        ["EFI-SYSTEM"]="127"
-        ["boot"]="384"
-        ["root"]=""
-    )
-fi
+# Keep information about the expected partitions in
+# an associative array. Since associative arrays are
+# unordered keep around a sorted variable so we can
+# infer the correct order later.
+case "$(uname -m)" in
+    "aarch64")
+        sorted="reserved EFI-SYSTEM boot root"
+        declare -A expected=(
+            ["reserved"]="1"
+            ["EFI-SYSTEM"]="127"
+            ["boot"]="384"
+            ["root"]=""
+        );;
+    "ppc64le")
+        sorted="PowerPC-PReP-boot reserved boot root"
+        declare -A expected=(
+            ["PowerPC-PReP-boot"]="4"
+            ["reserved"]="1"
+            ["boot"]="384"
+            ["root"]=""
+        );;
+    "x86_64")
+        sorted="BIOS-BOOT EFI-SYSTEM boot root"
+        declare -A expected=(
+            ["BIOS-BOOT"]="1"
+            ["EFI-SYSTEM"]="127"
+            ["boot"]="384"
+            ["root"]=""
+        );;
+    "s390x")
+        sorted="boot root"
+        declare -A expected=(
+            ["boot"]="384"
+            ["root"]=""
+        );;
+esac
 
-# check sizes of each parition
-ONE_MiB=$(( 1024 * 1024 ))
+# Check if the number of partitions match
+if [[ $totalPartitions -ne "${#expected[@]}" ]]; then
+    fatal "Expected ${#expected[@]} partitions, got $totalPartitions"
+fi
 
 # There is a 1MiB gap at the beginning of the disks
 expected_start=$(( 1 * $ONE_MiB / $sector_size ))
 
 # Iterate over the partitions and check their start and size
-for key in "${!expected[@]}"; do
+for key in $sorted; do
     size_MiB="${expected[${key}]}"
     start=$(echo "$partitionData" | jq "select ( .name == \"$key\") | .start")
     sectors=$(echo "$partitionData" | jq "select ( .name == \"$key\") | .size")
+    test -z "$start" && fatal "Could not detect start sector for $key"
+    test -z "$sectors" && fatal "Could not detect size in sectors for $key"
     size=$(( $sectors * $sector_size ))
     if [[ "$start" -ne "$expected_start" ]]; then
         fatal "Expected $key partition start sector of $expected_start, got $start"
@@ -73,4 +86,3 @@ for key in "${!expected[@]}"; do
 done
 
 ok partition scheme
-exit 0

From 1fca018ce889fa42105e7f6d0882d91b5338926f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Dec 2023 01:07:27 +0000
Subject: [PATCH 1937/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/922/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 54 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 54 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 56 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 54 ++++++++++++++++++------------------
 4 files changed, 109 insertions(+), 109 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 75f44d86e3..7643fd5517 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -94,7 +94,7 @@
       "evra": "6.6.2-1.fc39.aarch64"
     },
     "bubblewrap": {
-      "evra": "0.7.0-2.fc39.aarch64"
+      "evra": "0.8.0-1.fc39.aarch64"
     },
     "bzip2": {
       "evra": "1.0.8-16.fc39.aarch64"
@@ -289,7 +289,7 @@
       "evra": "0.190-1.fc39.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc39.aarch64"
+      "evra": "2:6.6-1.fc39.aarch64"
     },
     "expat": {
       "evra": "2.5.0-3.fc39.aarch64"
@@ -298,13 +298,13 @@
       "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-repos": {
       "evra": "39-1.noarch"
@@ -328,7 +328,7 @@
       "evra": "1:4.9.0-5.fc39.aarch64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-4.fc39.aarch64"
+      "evra": "1.15.6-1.fc39.aarch64"
     },
     "fmt": {
       "evra": "10.0.0-3.fc39.aarch64"
@@ -403,7 +403,7 @@
       "evra": "2.4.3-4.fc39.aarch64"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc39.aarch64"
+      "evra": "3.8.2-1.fc39.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
       "evra": "20230929.00-1.fc39.noarch"
@@ -514,16 +514,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.12-300.fc39.aarch64"
+      "evra": "6.6.2-201.fc39.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.12-300.fc39.aarch64"
+      "evra": "6.6.2-201.fc39.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.12-300.fc39.aarch64"
+      "evra": "6.6.2-201.fc39.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.12-300.fc39.aarch64"
+      "evra": "6.6.2-201.fc39.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.27-3.fc39.aarch64"
@@ -583,7 +583,7 @@
       "evra": "0.11.7-5.fc39.aarch64"
     },
     "libcap": {
-      "evra": "2.48-7.fc39.aarch64"
+      "evra": "2.48-8.fc39.aarch64"
     },
     "libcap-ng": {
       "evra": "0.8.3-8.fc39.aarch64"
@@ -679,7 +679,7 @@
       "evra": "9-16.fc39.aarch64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-3.fc39.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64"
     },
     "libmd": {
       "evra": "1.1.0-2.fc39.aarch64"
@@ -835,7 +835,7 @@
       "evra": "2.39.2-1.fc39.aarch64"
     },
     "libuv": {
-      "evra": "1:1.46.0-2.fc39.aarch64"
+      "evra": "1:1.47.0-3.fc39.aarch64"
     },
     "libverto": {
       "evra": "0.3.2-6.fc39.aarch64"
@@ -1003,10 +1003,10 @@
       "evra": "1.5.3-3.fc39.aarch64"
     },
     "passt": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.aarch64"
+      "evra": "0^20231119.g4f1709d-1.fc39.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.aarch64"
@@ -1030,10 +1030,10 @@
       "evra": "1.9.5-2.fc39.aarch64"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.aarch64"
+      "evra": "5:4.8.0-1.fc39.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.aarch64"
+      "evra": "5:4.8.0-1.fc39.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.aarch64"
@@ -1198,22 +1198,22 @@
       "evra": "1.9.14-1.p3.fc39.aarch64"
     },
     "systemd": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "systemd-container": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "systemd-libs": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "systemd-pam": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "systemd-resolved": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "systemd-udev": {
-      "evra": "254.5-2.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64"
     },
     "tar": {
       "evra": "2:1.35-2.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-26T00:00:00Z",
+    "generated": "2023-12-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-25T23:46:28Z"
+        "generated": "2023-11-27T00:08:40Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-26T01:34:03Z"
+        "generated": "2023-12-01T01:14:58Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5f9527859f..c49e4a664f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -94,7 +94,7 @@
       "evra": "6.6.2-1.fc39.ppc64le"
     },
     "bubblewrap": {
-      "evra": "0.7.0-2.fc39.ppc64le"
+      "evra": "0.8.0-1.fc39.ppc64le"
     },
     "bzip2": {
       "evra": "1.0.8-16.fc39.ppc64le"
@@ -277,7 +277,7 @@
       "evra": "0.190-1.fc39.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc39.ppc64le"
+      "evra": "2:6.6-1.fc39.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-3.fc39.ppc64le"
@@ -286,13 +286,13 @@
       "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-repos": {
       "evra": "39-1.noarch"
@@ -316,7 +316,7 @@
       "evra": "1:4.9.0-5.fc39.ppc64le"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-4.fc39.ppc64le"
+      "evra": "1.15.6-1.fc39.ppc64le"
     },
     "fstrm": {
       "evra": "0.6.1-8.fc39.ppc64le"
@@ -388,7 +388,7 @@
       "evra": "2.4.3-4.fc39.ppc64le"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc39.ppc64le"
+      "evra": "3.8.2-1.fc39.ppc64le"
     },
     "gpgme": {
       "evra": "1.20.0-5.fc39.ppc64le"
@@ -499,16 +499,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.12-300.fc39.ppc64le"
+      "evra": "6.6.2-201.fc39.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.12-300.fc39.ppc64le"
+      "evra": "6.6.2-201.fc39.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.12-300.fc39.ppc64le"
+      "evra": "6.6.2-201.fc39.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.12-300.fc39.ppc64le"
+      "evra": "6.6.2-201.fc39.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.27-3.fc39.ppc64le"
@@ -568,7 +568,7 @@
       "evra": "0.11.7-5.fc39.ppc64le"
     },
     "libcap": {
-      "evra": "2.48-7.fc39.ppc64le"
+      "evra": "2.48-8.fc39.ppc64le"
     },
     "libcap-ng": {
       "evra": "0.8.3-8.fc39.ppc64le"
@@ -664,7 +664,7 @@
       "evra": "9-16.fc39.ppc64le"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-3.fc39.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le"
     },
     "libmd": {
       "evra": "1.1.0-2.fc39.ppc64le"
@@ -826,7 +826,7 @@
       "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libuv": {
-      "evra": "1:1.46.0-2.fc39.ppc64le"
+      "evra": "1:1.47.0-3.fc39.ppc64le"
     },
     "libverto": {
       "evra": "0.3.2-6.fc39.ppc64le"
@@ -994,10 +994,10 @@
       "evra": "1.5.3-3.fc39.ppc64le"
     },
     "passt": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.ppc64le"
+      "evra": "0^20231119.g4f1709d-1.fc39.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.ppc64le"
@@ -1021,10 +1021,10 @@
       "evra": "1.9.5-2.fc39.ppc64le"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.ppc64le"
+      "evra": "5:4.8.0-1.fc39.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.ppc64le"
+      "evra": "5:4.8.0-1.fc39.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.ppc64le"
@@ -1192,22 +1192,22 @@
       "evra": "1.9.14-1.p3.fc39.ppc64le"
     },
     "systemd": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "systemd-container": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "systemd-libs": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "systemd-pam": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "systemd-udev": {
-      "evra": "254.5-2.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le"
     },
     "tar": {
       "evra": "2:1.35-2.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-26T00:00:00Z",
+    "generated": "2023-12-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-25T23:45:50Z"
+        "generated": "2023-11-27T00:07:49Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-26T01:34:07Z"
+        "generated": "2023-12-01T01:15:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d81b27da93..6fa0b43e39 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -91,7 +91,7 @@
       "evra": "6.6.2-1.fc39.s390x"
     },
     "bubblewrap": {
-      "evra": "0.7.0-2.fc39.s390x"
+      "evra": "0.8.0-1.fc39.s390x"
     },
     "bzip2": {
       "evra": "1.0.8-16.fc39.s390x"
@@ -274,7 +274,7 @@
       "evra": "0.190-1.fc39.s390x"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc39.s390x"
+      "evra": "2:6.6-1.fc39.s390x"
     },
     "expat": {
       "evra": "2.5.0-3.fc39.s390x"
@@ -283,13 +283,13 @@
       "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-repos": {
       "evra": "39-1.noarch"
@@ -313,7 +313,7 @@
       "evra": "1:4.9.0-5.fc39.s390x"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-4.fc39.s390x"
+      "evra": "1.15.6-1.fc39.s390x"
     },
     "fstrm": {
       "evra": "0.6.1-8.fc39.s390x"
@@ -376,7 +376,7 @@
       "evra": "2.4.3-4.fc39.s390x"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc39.s390x"
+      "evra": "3.8.2-1.fc39.s390x"
     },
     "gpgme": {
       "evra": "1.20.0-5.fc39.s390x"
@@ -469,16 +469,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.12-300.fc39.s390x"
+      "evra": "6.6.2-201.fc39.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.12-300.fc39.s390x"
+      "evra": "6.6.2-201.fc39.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.12-300.fc39.s390x"
+      "evra": "6.6.2-201.fc39.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.12-300.fc39.s390x"
+      "evra": "6.6.2-201.fc39.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.27-3.fc39.s390x"
@@ -538,7 +538,7 @@
       "evra": "0.11.7-5.fc39.s390x"
     },
     "libcap": {
-      "evra": "2.48-7.fc39.s390x"
+      "evra": "2.48-8.fc39.s390x"
     },
     "libcap-ng": {
       "evra": "0.8.3-8.fc39.s390x"
@@ -634,7 +634,7 @@
       "evra": "9-16.fc39.s390x"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-3.fc39.s390x"
+      "evra": "1.8.0-1.fc39.s390x"
     },
     "libmd": {
       "evra": "1.1.0-2.fc39.s390x"
@@ -790,7 +790,7 @@
       "evra": "2.39.2-1.fc39.s390x"
     },
     "libuv": {
-      "evra": "1:1.46.0-2.fc39.s390x"
+      "evra": "1:1.47.0-3.fc39.s390x"
     },
     "libverto": {
       "evra": "0.3.2-6.fc39.s390x"
@@ -949,10 +949,10 @@
       "evra": "1.5.3-3.fc39.s390x"
     },
     "passt": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.s390x"
+      "evra": "0^20231119.g4f1709d-1.fc39.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.s390x"
@@ -976,10 +976,10 @@
       "evra": "1.9.5-2.fc39.s390x"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.s390x"
+      "evra": "5:4.8.0-1.fc39.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.s390x"
+      "evra": "5:4.8.0-1.fc39.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.s390x"
@@ -1045,7 +1045,7 @@
       "evra": "2:1.1.8-1.fc39.s390x"
     },
     "s390utils-core": {
-      "evra": "2:2.29.0-2.fc39.s390x"
+      "evra": "2:2.29.0-4.fc39.s390x"
     },
     "samba-client-libs": {
       "evra": "2:4.19.2-1.fc39.s390x"
@@ -1141,22 +1141,22 @@
       "evra": "1.9.14-1.p3.fc39.s390x"
     },
     "systemd": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "systemd-container": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "systemd-libs": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "systemd-pam": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "systemd-resolved": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "systemd-udev": {
-      "evra": "254.5-2.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x"
     },
     "tar": {
       "evra": "2:1.35-2.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-26T00:00:00Z",
+    "generated": "2023-12-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-25T23:46:23Z"
+        "generated": "2023-11-27T00:07:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-26T01:34:12Z"
+        "generated": "2023-12-01T01:15:07Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cce5734131..d6c89c2902 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,7 +97,7 @@
       "evra": "6.6.2-1.fc39.x86_64"
     },
     "bubblewrap": {
-      "evra": "0.7.0-2.fc39.x86_64"
+      "evra": "0.8.0-1.fc39.x86_64"
     },
     "bzip2": {
       "evra": "1.0.8-16.fc39.x86_64"
@@ -292,7 +292,7 @@
       "evra": "0.190-1.fc39.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.5-1.fc39.x86_64"
+      "evra": "2:6.6-1.fc39.x86_64"
     },
     "expat": {
       "evra": "2.5.0-3.fc39.x86_64"
@@ -301,13 +301,13 @@
       "evra": "39-1.noarch"
     },
     "fedora-release-common": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-30.noarch"
+      "evra": "39-34.noarch"
     },
     "fedora-repos": {
       "evra": "39-1.noarch"
@@ -331,7 +331,7 @@
       "evra": "1:4.9.0-5.fc39.x86_64"
     },
     "flatpak-session-helper": {
-      "evra": "1.15.4-4.fc39.x86_64"
+      "evra": "1.15.6-1.fc39.x86_64"
     },
     "fmt": {
       "evra": "10.0.0-3.fc39.x86_64"
@@ -406,7 +406,7 @@
       "evra": "2.4.3-4.fc39.x86_64"
     },
     "gnutls": {
-      "evra": "3.8.1-1.fc39.x86_64"
+      "evra": "3.8.2-1.fc39.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
       "evra": "20230929.00-1.fc39.noarch"
@@ -523,16 +523,16 @@
       "evra": "2.6.3-1.fc39.noarch"
     },
     "kernel": {
-      "evra": "6.5.12-300.fc39.x86_64"
+      "evra": "6.6.2-201.fc39.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.12-300.fc39.x86_64"
+      "evra": "6.6.2-201.fc39.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.12-300.fc39.x86_64"
+      "evra": "6.6.2-201.fc39.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.12-300.fc39.x86_64"
+      "evra": "6.6.2-201.fc39.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.27-3.fc39.x86_64"
@@ -589,7 +589,7 @@
       "evra": "0.11.7-5.fc39.x86_64"
     },
     "libcap": {
-      "evra": "2.48-7.fc39.x86_64"
+      "evra": "2.48-8.fc39.x86_64"
     },
     "libcap-ng": {
       "evra": "0.8.3-8.fc39.x86_64"
@@ -685,7 +685,7 @@
       "evra": "9-16.fc39.x86_64"
     },
     "libmaxminddb": {
-      "evra": "1.7.1-3.fc39.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64"
     },
     "libmd": {
       "evra": "1.1.0-2.fc39.x86_64"
@@ -841,7 +841,7 @@
       "evra": "2.39.2-1.fc39.x86_64"
     },
     "libuv": {
-      "evra": "1:1.46.0-2.fc39.x86_64"
+      "evra": "1:1.47.0-3.fc39.x86_64"
     },
     "libverto": {
       "evra": "0.3.2-6.fc39.x86_64"
@@ -1012,10 +1012,10 @@
       "evra": "1.5.3-3.fc39.x86_64"
     },
     "passt": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.x86_64"
+      "evra": "0^20231119.g4f1709d-1.fc39.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20231107.g56d9f6d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
     },
     "passwd": {
       "evra": "0.80-15.fc39.x86_64"
@@ -1039,10 +1039,10 @@
       "evra": "1.9.5-2.fc39.x86_64"
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.x86_64"
+      "evra": "5:4.8.0-1.fc39.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.x86_64"
+      "evra": "5:4.8.0-1.fc39.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-8.fc39.x86_64"
@@ -1204,22 +1204,22 @@
       "evra": "1.9.14-1.p3.fc39.x86_64"
     },
     "systemd": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "systemd-container": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "systemd-libs": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "systemd-pam": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "systemd-resolved": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "systemd-udev": {
-      "evra": "254.5-2.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64"
     },
     "tar": {
       "evra": "2:1.35-2.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-11-26T00:00:00Z",
+    "generated": "2023-12-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-25T23:48:26Z"
+        "generated": "2023-11-27T00:08:58Z"
       },
       "fedora-updates": {
-        "generated": "2023-11-26T01:34:16Z"
+        "generated": "2023-12-01T01:15:12Z"
       }
     }
   }

From b1e8b314e2e0a50f29699c1f10ef593fa0eed43e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Dec 2023 23:08:16 +0000
Subject: [PATCH 1938/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/925/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 46 insertions(+), 46 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7643fd5517..5bdfac10ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,10 +187,10 @@
       "evra": "3.18-3.fc39.aarch64"
     },
     "crun": {
-      "evra": "1.11.2-1.fc39.aarch64"
+      "evra": "1.12-1.fc39.aarch64"
     },
     "crun-wasm": {
-      "evra": "1.11.2-1.fc39.aarch64"
+      "evra": "1.12-1.fc39.aarch64"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -706,7 +706,7 @@
       "evra": "1.0.1-24.fc39.aarch64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-2.rc3.fc39.aarch64"
+      "evra": "1:2.6.4-0.fc39.aarch64"
     },
     "libnftnl": {
       "evra": "1.2.6-2.fc39.aarch64"
@@ -775,7 +775,7 @@
       "evra": "2.39.2-1.fc39.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.19.2-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc39.aarch64"
@@ -841,7 +841,7 @@
       "evra": "0.3.2-6.fc39.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.19.2-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-2.fc39.aarch64"
@@ -937,7 +937,7 @@
       "evra": "0.52.23-4.fc39.aarch64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-2.rc3.fc39.aarch64"
+      "evra": "1:2.6.4-0.fc39.aarch64"
     },
     "nftables": {
       "evra": "1:1.0.7-3.fc39.aarch64"
@@ -1099,13 +1099,13 @@
       "evra": "2:1.1.8-1.fc39.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.19.2-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.19.2-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.19.2-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64"
     },
     "sed": {
       "evra": "4.8-14.fc39.aarch64"
@@ -1289,16 +1289,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-01T00:00:00Z",
+    "generated": "2023-12-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-27T00:08:40Z"
+        "generated": "2023-12-02T01:12:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-01T01:14:58Z"
+        "generated": "2023-12-02T01:16:05Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c49e4a664f..9518bad9fd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -187,7 +187,7 @@
       "evra": "3.18-3.fc39.ppc64le"
     },
     "crun": {
-      "evra": "1.11.2-1.fc39.ppc64le"
+      "evra": "1.12-1.fc39.ppc64le"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -691,7 +691,7 @@
       "evra": "1.0.1-24.fc39.ppc64le"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-2.rc3.fc39.ppc64le"
+      "evra": "1:2.6.4-0.fc39.ppc64le"
     },
     "libnftnl": {
       "evra": "1.2.6-2.fc39.ppc64le"
@@ -766,7 +766,7 @@
       "evra": "2.39.2-1.fc39.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.19.2-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc39.ppc64le"
@@ -832,7 +832,7 @@
       "evra": "0.3.2-6.fc39.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.19.2-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-2.fc39.ppc64le"
@@ -925,7 +925,7 @@
       "evra": "0.52.23-4.fc39.ppc64le"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-2.rc3.fc39.ppc64le"
+      "evra": "1:2.6.4-0.fc39.ppc64le"
     },
     "nftables": {
       "evra": "1:1.0.7-3.fc39.ppc64le"
@@ -1096,13 +1096,13 @@
       "evra": "2:1.1.8-1.fc39.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.19.2-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.19.2-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.19.2-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le"
     },
     "sed": {
       "evra": "4.8-14.fc39.ppc64le"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-01T00:00:00Z",
+    "generated": "2023-12-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-27T00:07:49Z"
+        "generated": "2023-12-02T01:11:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-01T01:15:03Z"
+        "generated": "2023-12-02T01:16:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6fa0b43e39..88c106a625 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -184,7 +184,7 @@
       "evra": "3.18-3.fc39.s390x"
     },
     "crun": {
-      "evra": "1.11.2-1.fc39.s390x"
+      "evra": "1.12-1.fc39.s390x"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -661,7 +661,7 @@
       "evra": "1.0.1-24.fc39.s390x"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-2.rc3.fc39.s390x"
+      "evra": "1:2.6.4-0.fc39.s390x"
     },
     "libnftnl": {
       "evra": "1.2.6-2.fc39.s390x"
@@ -730,7 +730,7 @@
       "evra": "2.39.2-1.fc39.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.19.2-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc39.s390x"
@@ -796,7 +796,7 @@
       "evra": "0.3.2-6.fc39.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.19.2-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-2.fc39.s390x"
@@ -889,7 +889,7 @@
       "evra": "0.52.23-4.fc39.s390x"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-2.rc3.fc39.s390x"
+      "evra": "1:2.6.4-0.fc39.s390x"
     },
     "nftables": {
       "evra": "1:1.0.7-3.fc39.s390x"
@@ -1048,13 +1048,13 @@
       "evra": "2:2.29.0-4.fc39.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.19.2-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x"
     },
     "samba-common": {
-      "evra": "2:4.19.2-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.19.2-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x"
     },
     "sed": {
       "evra": "4.8-14.fc39.s390x"
@@ -1232,16 +1232,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-01T00:00:00Z",
+    "generated": "2023-12-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-27T00:07:35Z"
+        "generated": "2023-12-02T01:11:31Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-01T01:15:07Z"
+        "generated": "2023-12-02T01:16:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d6c89c2902..4999d3f3cc 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -190,10 +190,10 @@
       "evra": "3.18-3.fc39.x86_64"
     },
     "crun": {
-      "evra": "1.11.2-1.fc39.x86_64"
+      "evra": "1.12-1.fc39.x86_64"
     },
     "crun-wasm": {
-      "evra": "1.11.2-1.fc39.x86_64"
+      "evra": "1.12-1.fc39.x86_64"
     },
     "crypto-policies": {
       "evra": "20231113-1.gitb402e82.fc39.noarch"
@@ -712,7 +712,7 @@
       "evra": "1.0.1-24.fc39.x86_64"
     },
     "libnfsidmap": {
-      "evra": "1:2.6.3-2.rc3.fc39.x86_64"
+      "evra": "1:2.6.4-0.fc39.x86_64"
     },
     "libnftnl": {
       "evra": "1.2.6-2.fc39.x86_64"
@@ -781,7 +781,7 @@
       "evra": "2.39.2-1.fc39.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.19.2-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64"
     },
     "libsolv": {
       "evra": "0.7.25-1.fc39.x86_64"
@@ -847,7 +847,7 @@
       "evra": "0.3.2-6.fc39.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.19.2-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-2.fc39.x86_64"
@@ -946,7 +946,7 @@
       "evra": "0.52.23-4.fc39.x86_64"
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.3-2.rc3.fc39.x86_64"
+      "evra": "1:2.6.4-0.fc39.x86_64"
     },
     "nftables": {
       "evra": "1:1.0.7-3.fc39.x86_64"
@@ -1105,13 +1105,13 @@
       "evra": "2:1.1.8-1.fc39.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.19.2-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.19.2-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.19.2-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64"
     },
     "sed": {
       "evra": "4.8-14.fc39.x86_64"
@@ -1295,16 +1295,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-01T00:00:00Z",
+    "generated": "2023-12-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-11-27T00:08:58Z"
+        "generated": "2023-12-02T01:12:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-01T01:15:12Z"
+        "generated": "2023-12-02T01:16:19Z"
       }
     }
   }

From 4f00959ae19d5c2b49020732c3b1e6c7abc4b9c5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Dec 2023 01:26:05 +0000
Subject: [PATCH 1939/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/929/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 2151 ++++++++++++++++++++++++++++-------
 manifest-lock.ppc64le.json | 2136 ++++++++++++++++++++++++++++-------
 manifest-lock.s390x.json   | 2056 +++++++++++++++++++++++++++-------
 manifest-lock.x86_64.json  | 2161 ++++++++++++++++++++++++++++--------
 4 files changed, 6796 insertions(+), 1708 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5bdfac10ec..0f75eb193b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,1304 +1,2591 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.aarch64"
+      "evra": "1:1.44.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "WALinuxAgent"
+      }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "aardvark-dns"
+      }
     },
     "acl": {
-      "evra": "2.3.1-8.fc39.aarch64"
+      "evra": "2.3.1-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.aarch64"
+      "evra": "0.9.2-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "adcli"
+      }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.aarch64"
+      "evra": "5.4.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.aarch64"
+      "evra": "5.4.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.aarch64"
+      "evra": "1.25-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "chkconfig"
+      }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.aarch64"
+      "evra": "2.5.1-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.aarch64"
+      "evra": "3.1.2-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.aarch64"
+      "evra": "3.1.2-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.aarch64"
+      "evra": "1.4.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.aarch64"
+      "evra": "1.4.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.aarch64"
+      "evra": "0.8-24.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "avahi"
+      }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch"
+      "evra": "11-18.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "basesystem"
+      }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.aarch64"
+      "evra": "5.2.21-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bash"
+      }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "shell-color-prompt"
+      }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch"
+      "evra": "1:2.11-12.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bash-completion"
+      }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.aarch64"
+      "evra": "32:9.18.20-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.aarch64"
+      "evra": "32:9.18.20-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc39.aarch64"
+      "evra": "0.2.12-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-bootupd"
+      }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.aarch64"
+      "evra": "3.7.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.aarch64"
+      "evra": "6.6.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "btrfs-progs"
+      }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.aarch64"
+      "evra": "0.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bubblewrap"
+      }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.aarch64"
+      "evra": "1.0.8-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.aarch64"
+      "evra": "1.0.8-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.aarch64"
+      "evra": "1.21.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "c-ares"
+      }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ca-certificates"
+      }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.aarch64"
+      "evra": "0.1.7-18.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "catatonit"
+      }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.aarch64"
+      "evra": "4.4-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "chrony"
+      }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.aarch64"
+      "evra": "7.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cifs-utils"
+      }
     },
     "clevis": {
-      "evra": "19-4.fc39.aarch64"
+      "evra": "19-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.aarch64"
+      "evra": "19-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.aarch64"
+      "evra": "19-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.aarch64"
+      "evra": "19-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch"
+      "evra": "0.33-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "cloud-utils"
+      }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.aarch64"
+      "evra": "2:2.1.8-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "conmon"
+      }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "container-selinux"
+      }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.aarch64"
+      "evra": "1.6.19-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "containerd"
+      }
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.aarch64"
+      "evra": "1.3.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "containernetworking-plugins"
+      }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.aarch64"
+      "evra": "0.18.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.aarch64"
+      "evra": "0.18.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.aarch64"
+      "evra": "9.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.aarch64"
+      "evra": "9.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.aarch64"
+      "evra": "2.14-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cpio"
+      }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.aarch64"
+      "evra": "2.9.11-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cracklib"
+      }
     },
     "criu": {
-      "evra": "3.18-3.fc39.aarch64"
+      "evra": "3.18-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.aarch64"
+      "evra": "3.18-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "crun": {
-      "evra": "1.12-1.fc39.aarch64"
+      "evra": "1.12-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crun-wasm": {
-      "evra": "1.12-1.fc39.aarch64"
+      "evra": "1.12-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "crypto-policies"
+      }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.aarch64"
+      "evra": "2.6.1-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.aarch64"
+      "evra": "2.6.1-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.aarch64"
+      "evra": "8.2.1-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.aarch64"
+      "evra": "2.1.28-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.aarch64"
+      "evra": "2.1.28-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.aarch64"
+      "evra": "1:1.14.10-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.aarch64"
+      "evra": "33-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dbus-broker"
+      }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.aarch64"
+      "evra": "1:1.14.10-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.aarch64"
+      "evra": "1.02.196-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.aarch64"
+      "evra": "1.0.6-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "device-mapper-persistent-data"
+      }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.aarch64"
+      "evra": "3.10-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "diffutils"
+      }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.aarch64"
+      "evra": "2.89-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dnsmasq"
+      }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.aarch64"
+      "evra": "4.2-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dosfstools"
+      }
     },
     "dracut": {
-      "evra": "059-16.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.aarch64"
+      "evra": "059-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.aarch64"
+      "evra": "2.7.0-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "duktape"
+      }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "efi-filesystem": {
-      "evra": "5-9.fc39.noarch"
+      "evra": "5-9.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "efi-rpm-macros"
+      }
     },
     "efibootmgr": {
-      "evra": "18-4.fc39.aarch64"
+      "evra": "18-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "efibootmgr"
+      }
     },
     "efivar-libs": {
-      "evra": "38-8.fc39.aarch64"
+      "evra": "38-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "efivar"
+      }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.aarch64"
+      "evra": "0.190-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.aarch64"
+      "evra": "0.190-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.aarch64"
+      "evra": "2:6.6-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ethtool"
+      }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.aarch64"
+      "evra": "2.5.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "expat"
+      }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "file": {
-      "evra": "5.44-5.fc39.aarch64"
+      "evra": "5.44-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.aarch64"
+      "evra": "5.44-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.aarch64"
+      "evra": "3.18-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "filesystem"
+      }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.aarch64"
+      "evra": "1:4.9.0-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "findutils"
+      }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.aarch64"
+      "evra": "1.15.6-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "flatpak"
+      }
     },
     "fmt": {
-      "evra": "10.0.0-3.fc39.aarch64"
+      "evra": "10.0.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fmt"
+      }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.aarch64"
+      "evra": "0.6.1-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fstrm"
+      }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.aarch64"
+      "evra": "2.9.9-17.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.aarch64"
+      "evra": "2.9.9-17.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.aarch64"
+      "evra": "1.12-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse-overlayfs"
+      }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.aarch64"
+      "evra": "3.7.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse-sshfs"
+      }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.aarch64"
+      "evra": "3.16.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.aarch64"
+      "evra": "1.9.9-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "fwupd"
+      }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.aarch64"
+      "evra": "5.2.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gawk"
+      }
     },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.aarch64"
+      "evra": "1:1.23-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.aarch64"
+      "evra": "1.0.9-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gdisk"
+      }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.aarch64"
+      "evra": "0.22-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.aarch64"
+      "evra": "0.22-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.aarch64"
+      "evra": "0.22-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.aarch64"
+      "evra": "2.43.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "git"
+      }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.aarch64"
+      "evra": "2.78.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "glib2"
+      }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.aarch64"
+      "evra": "2.38-11.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.aarch64"
+      "evra": "1:6.2.1-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gmp"
+      }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.aarch64"
+      "evra": "2.4.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gnupg2"
+      }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.aarch64"
+      "evra": "3.8.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gnutls"
+      }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc39.noarch"
+      "evra": "20230929.00-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "google-compute-engine-guest-configs"
+      }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.aarch64"
+      "evra": "1.20.0-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gpgme"
+      }
     },
     "grep": {
-      "evra": "3.11-3.fc39.aarch64"
+      "evra": "3.11-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "grep"
+      }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-109.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.aarch64"
+      "evra": "1:2.06-109.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.aarch64"
+      "evra": "6:0.7.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gvisor-tap-vsock"
+      }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.aarch64"
+      "evra": "1.12-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gzip"
+      }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.aarch64"
+      "evra": "3.23-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "hostname"
+      }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.aarch64"
+      "evra": "2.17.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ignition"
+      }
     },
     "inih": {
-      "evra": "57-2.fc39.aarch64"
+      "evra": "57-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "inih"
+      }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.aarch64"
+      "evra": "1.0.3-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ipcalc"
+      }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.aarch64"
+      "evra": "6.4.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.aarch64"
+      "evra": "6.4.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch"
+      "evra": "1.8.9-5.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.aarch64"
+      "evra": "1.8.9-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.aarch64"
+      "evra": "20221126-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iputils"
+      }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.aarch64"
+      "evra": "2:1.9.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "irqbalance"
+      }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.aarch64"
+      "evra": "0.101-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "isns-utils"
+      }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.aarch64"
+      "evra": "2.13.1-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "jansson"
+      }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.aarch64"
+      "evra": "5.3.0-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "jemalloc"
+      }
     },
     "jose": {
-      "evra": "11-8.fc39.aarch64"
+      "evra": "11-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "jq": {
-      "evra": "1.6-17.fc39.aarch64"
+      "evra": "1.6-17.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "jq"
+      }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.aarch64"
+      "evra": "0.17-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "json-c"
+      }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "json-glib"
+      }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.aarch64"
+      "evra": "2.6.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kernel": {
-      "evra": "6.6.2-201.fc39.aarch64"
+      "evra": "6.6.3-200.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-core": {
-      "evra": "6.6.2-201.fc39.aarch64"
+      "evra": "6.6.3-200.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules": {
-      "evra": "6.6.2-201.fc39.aarch64"
+      "evra": "6.6.3-200.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules-core": {
-      "evra": "6.6.2-201.fc39.aarch64"
+      "evra": "6.6.3-200.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.aarch64"
+      "evra": "2.0.27-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kexec-tools"
+      }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.aarch64"
+      "evra": "1.6.1-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.aarch64"
+      "evra": "1.6.1-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "kmod": {
-      "evra": "30-6.fc39.aarch64"
+      "evra": "30-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.aarch64"
+      "evra": "30-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.aarch64"
+      "evra": "0.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.aarch64"
+      "evra": "1.21.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "krb5"
+      }
     },
     "less": {
-      "evra": "633-2.fc39.aarch64"
+      "evra": "633-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "less"
+      }
     },
     "libacl": {
-      "evra": "2.3.1-8.fc39.aarch64"
+      "evra": "2.3.1-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.aarch64"
+      "evra": "0.3.111-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libaio"
+      }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.aarch64"
+      "evra": "3.7.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "libargon2": {
-      "evra": "20190702-3.fc39.aarch64"
+      "evra": "20190702-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "argon2"
+      }
     },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.aarch64"
+      "evra": "2.5.6-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libassuan"
+      }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.aarch64"
+      "evra": "2.5.1-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.aarch64"
+      "evra": "0.1.1-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.aarch64"
+      "evra": "2:1.1.0-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libbpf"
+      }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.aarch64"
+      "evra": "0.11.7-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libbsd"
+      }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.aarch64"
+      "evra": "2.48-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libcap"
+      }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.aarch64"
+      "evra": "0.8.3-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libcap-ng"
+      }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.aarch64"
+      "evra": "0.10.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libcbor"
+      }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.aarch64"
+      "evra": "0.7.0-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.aarch64"
+      "evra": "8.2.1-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.aarch64"
+      "evra": "0.14-26.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libdaemon"
+      }
     },
     "libdb": {
-      "evra": "5.3.28-56.fc39.aarch64"
+      "evra": "5.3.28-56.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libdb"
+      }
     },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.aarch64"
+      "evra": "0.5.0-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.aarch64"
+      "evra": "0.5.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libeconf"
+      }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.aarch64"
+      "evra": "3.1-48.20230828cvs.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libedit"
+      }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.aarch64"
+      "evra": "2.1.12-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libevent"
+      }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.aarch64"
+      "evra": "3.4.4-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libffi"
+      }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.aarch64"
+      "evra": "1.13.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libfido2"
+      }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.aarch64"
+      "evra": "1.10.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libgcrypt"
+      }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.aarch64"
+      "evra": "1.47-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libgpg-error"
+      }
     },
     "libgudev": {
-      "evra": "238-2.fc39.aarch64"
+      "evra": "238-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libgudev"
+      }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.aarch64"
+      "evra": "0.4.8-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libgusb"
+      }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.aarch64"
+      "evra": "46.0-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rdma-core"
+      }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.aarch64"
+      "evra": "73.2-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "icu"
+      }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.aarch64"
+      "evra": "2.3.4-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libidn2"
+      }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.aarch64"
+      "evra": "1.3.1-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.aarch64"
+      "evra": "0.1.14-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libjcat"
+      }
     },
     "libjose": {
-      "evra": "11-8.fc39.aarch64"
+      "evra": "11-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.aarch64"
+      "evra": "1.4.0-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.aarch64"
+      "evra": "1.4.0-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.aarch64"
+      "evra": "1.6.4-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libksba"
+      }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.aarch64"
+      "evra": "2.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libldb"
+      }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.aarch64"
+      "evra": "9-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.aarch64"
+      "evra": "1.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libmaxminddb"
+      }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.aarch64"
+      "evra": "1.1.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libmd"
+      }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.aarch64"
+      "evra": "1.0.5-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libmnl"
+      }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.aarch64"
+      "evra": "2.15.0-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libmodulemd"
+      }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.aarch64"
+      "evra": "1.8-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libndp"
+      }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.aarch64"
+      "evra": "1.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnet"
+      }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.aarch64"
+      "evra": "1.0.9-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnetfilter_conntrack"
+      }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.aarch64"
+      "evra": "1.0.1-24.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnfnetlink"
+      }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.aarch64"
+      "evra": "1:2.6.4-0.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.aarch64"
+      "evra": "1.2.6-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnftnl"
+      }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.aarch64"
+      "evra": "1.55.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nghttp2"
+      }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.aarch64"
+      "evra": "3.8.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.aarch64"
+      "evra": "3.8.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.aarch64"
+      "evra": "2.0.0-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnsl2"
+      }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.aarch64"
+      "evra": "1.6-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libnvme"
+      }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.aarch64"
+      "evra": "0.2.1-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.aarch64"
+      "evra": "14:1.10.4-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libpcap"
+      }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.aarch64"
+      "evra": "0.21.2-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libpsl"
+      }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.aarch64"
+      "evra": "1.4.5-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libpwquality"
+      }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.aarch64"
+      "evra": "0.1.5-54.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.aarch64"
+      "evra": "1.17.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "librepo"
+      }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch"
+      "evra": "2.17.11-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "libreport"
+      }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.aarch64"
+      "evra": "2.5.3-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libseccomp"
+      }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.aarch64"
+      "evra": "3.5-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.aarch64"
+      "evra": "3.5-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.aarch64"
+      "evra": "3.5-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libsemanage"
+      }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.aarch64"
+      "evra": "3.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libsepol"
+      }
     },
     "libsigsegv": {
-      "evra": "2.14-5.fc39.aarch64"
+      "evra": "2.14-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libsigsegv"
+      }
     },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.aarch64"
+      "evra": "4.7.0-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libslirp"
+      }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.aarch64"
+      "evra": "0.7.25-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libsolv"
+      }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.aarch64"
+      "evra": "1.47.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.aarch64"
+      "evra": "13.2.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.aarch64"
+      "evra": "2.4.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtalloc"
+      }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.aarch64"
+      "evra": "4.19.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtasn1"
+      }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.aarch64"
+      "evra": "1.4.9-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtdb"
+      }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.aarch64"
+      "evra": "1.32-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.aarch64"
+      "evra": "0.15.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtevent"
+      }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.aarch64"
+      "evra": "1.3.4-0.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtirpc"
+      }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.aarch64"
+      "evra": "2.4.7-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libtool"
+      }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.aarch64"
+      "evra": "1.1-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libunistring"
+      }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.aarch64"
+      "evra": "1.0.26-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libusb1"
+      }
     },
     "libuser": {
-      "evra": "0.64-4.fc39.aarch64"
+      "evra": "0.64-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libuser"
+      }
     },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.aarch64"
+      "evra": "1.2.1-10.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libutempter"
+      }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.aarch64"
+      "evra": "1:1.47.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libuv"
+      }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.aarch64"
+      "evra": "0.3.2-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libverto"
+      }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.aarch64"
+      "evra": "4.4.36-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libxcrypt"
+      }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.aarch64"
+      "evra": "2.10.4-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libxml2"
+      }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.aarch64"
+      "evra": "0.3.14-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libxmlb"
+      }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.aarch64"
+      "evra": "0.2.5-12.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libyaml"
+      }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.aarch64"
+      "evra": "1.5.5-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.aarch64"
+      "evra": "2.5.1-36.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "linux-atm"
+      }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.aarch64"
+      "evra": "0.9.31-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lmdb"
+      }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.aarch64"
+      "evra": "3.21.0-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "logrotate"
+      }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.aarch64"
+      "evra": "4.96.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lsof"
+      }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.aarch64"
+      "evra": "5.4.6-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lua"
+      }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.aarch64"
+      "evra": "9-16.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.aarch64"
+      "evra": "2.03.22-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.aarch64"
+      "evra": "2.03.22-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.aarch64"
+      "evra": "1.9.4-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lz4"
+      }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.aarch64"
+      "evra": "2.10-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "lzo"
+      }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.aarch64"
+      "evra": "4.2-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "mdadm"
+      }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.aarch64"
+      "evra": "24.0.5-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "moby-engine"
+      }
     },
     "mokutil": {
-      "evra": "2:0.6.0-7.fc39.aarch64"
+      "evra": "2:0.6.0-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "mokutil"
+      }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.aarch64"
+      "evra": "4.2.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "mpfr"
+      }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nano": {
-      "evra": "7.2-4.fc39.aarch64"
+      "evra": "7.2-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch"
+      "evra": "7.2-4.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.aarch64"
+      "evra": "6.4-7.20230520.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.aarch64"
+      "evra": "6.4-7.20230520.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.aarch64"
+      "evra": "2.0-0.67.20160912git.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "net-tools"
+      }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.aarch64"
+      "evra": "1.8.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "netavark"
+      }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.aarch64"
+      "evra": "3.9.1-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nettle"
+      }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.aarch64"
+      "evra": "0.52.23-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "newt"
+      }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.aarch64"
+      "evra": "1:2.6.4-0.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.aarch64"
+      "evra": "1:1.0.7-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nftables"
+      }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.aarch64"
+      "evra": "2.2.15-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nmstate"
+      }
     },
     "npth": {
-      "evra": "1.6-14.fc39.aarch64"
+      "evra": "1.6-14.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "npth"
+      }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.aarch64"
+      "evra": "2.23.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nss-altfiles"
+      }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.aarch64"
+      "evra": "2.0.16-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "numactl"
+      }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.aarch64"
+      "evra": "2.6-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "nvme-cli"
+      }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.aarch64"
+      "evra": "6.9.9-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "oniguruma"
+      }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.aarch64"
+      "evra": "2.6.6-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openldap"
+      }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.aarch64"
+      "evra": "9.3p1-9.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.aarch64"
+      "evra": "1:3.1.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.aarch64"
+      "evra": "1:3.1.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.aarch64"
+      "evra": "1.81-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "os-prober"
+      }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.aarch64"
+      "evra": "2023.7-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.aarch64"
+      "evra": "2023.7-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.aarch64"
+      "evra": "0.25.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.aarch64"
+      "evra": "0.25.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.aarch64"
+      "evra": "1.5.3-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.aarch64"
+      "evra": "1.5.3-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.aarch64"
+      "evra": "0^20231119.g4f1709d-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passwd": {
-      "evra": "0.80-15.fc39.aarch64"
+      "evra": "0.80-15.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "passwd"
+      }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.aarch64"
+      "evra": "10.42-1.fc39.2.aarch64",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch"
+      "evra": "10.42-1.fc39.2.noarch",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.aarch64"
+      "evra": "2.8-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pigz"
+      }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch"
+      "evra": "1.9.5-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.aarch64"
+      "evra": "1.9.5-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.aarch64"
+      "evra": "5:4.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.aarch64"
+      "evra": "5:4.8.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.aarch64"
+      "evra": "3.5-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "policycoreutils"
+      }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.aarch64"
+      "evra": "123-1.fc39.1.aarch64",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.aarch64"
+      "evra": "123-1.fc39.1.aarch64",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.aarch64"
+      "evra": "0.1-26.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "polkit-pkla-compat"
+      }
     },
     "popt": {
-      "evra": "1.19-3.fc39.aarch64"
+      "evra": "1.19-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "popt"
+      }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.aarch64"
+      "evra": "4.0.3-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "procps-ng"
+      }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.aarch64"
+      "evra": "1.4.1-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "protobuf-c"
+      }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.aarch64"
+      "evra": "23.6-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "psmisc"
+      }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch"
+      "evra": "20230812-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "publicsuffix-list"
+      }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.aarch64"
+      "evra": "2:8.1.1-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "qemu"
+      }
     },
     "readline": {
-      "evra": "8.2-4.fc39.aarch64"
+      "evra": "8.2-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "readline"
+      }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.aarch64"
+      "evra": "1.2.6-4.rc2.fc39.1.aarch64",
+      "metadata": {
+        "sourcerpm": "rpcbind"
+      }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.aarch64"
+      "evra": "2023.10-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.aarch64"
+      "evra": "2023.10-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.aarch64"
+      "evra": "4.19.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.aarch64"
+      "evra": "1.5.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-rpm-sequoia"
+      }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.aarch64"
+      "evra": "3.2.7-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rsync"
+      }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.aarch64"
+      "evra": "2:1.1.8-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "runc"
+      }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.aarch64"
+      "evra": "2:4.19.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "sed": {
-      "evra": "4.8-14.fc39.aarch64"
+      "evra": "4.8-14.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sed"
+      }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch"
+      "evra": "2.14.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "setup"
+      }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.aarch64"
+      "evra": "1.46-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.aarch64"
+      "evra": "1.46-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.aarch64"
+      "evra": "2:4.14.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.aarch64"
+      "evra": "2:4.14.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.aarch64"
+      "evra": "2.2-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "shared-mime-info"
+      }
     },
     "shim-aa64": {
-      "evra": "15.6-2.aarch64"
+      "evra": "15.6-2.aarch64",
+      "metadata": {
+        "sourcerpm": "shim"
+      }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.aarch64"
+      "evra": "1:1.13.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "skopeo"
+      }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.aarch64"
+      "evra": "2.3.3-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "slang"
+      }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.aarch64"
+      "evra": "1.2.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "slirp4netns"
+      }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.aarch64"
+      "evra": "1.1.10-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "snappy"
+      }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.aarch64"
+      "evra": "1.7.4.4-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "socat"
+      }
     },
     "spdlog": {
-      "evra": "1.12.0-2.fc39.aarch64"
+      "evra": "1.12.0-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "spdlog"
+      }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.aarch64"
+      "evra": "3.42.0-7.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sqlite"
+      }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.aarch64"
+      "evra": "4.6.1-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "squashfs-tools"
+      }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.aarch64"
+      "evra": "0.1.4-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-ssh-key-dir"
+      }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.aarch64"
+      "evra": "2.9.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.aarch64"
+      "evra": "1.16-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "stalld"
+      }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.aarch64"
+      "evra": "1.9.14-1.p3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "sudo"
+      }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.aarch64"
+      "evra": "254.7-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.aarch64"
+      "evra": "2:1.35-2.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "tar"
+      }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.aarch64"
+      "evra": "1.32-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.aarch64"
+      "evra": "0.0.99.4-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "toolbox"
+      }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.aarch64"
+      "evra": "5.5-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "tpm2-tools"
+      }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.aarch64"
+      "evra": "4.0.1-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch"
+      "evra": "2023c-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "tzdata"
+      }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.aarch64"
+      "evra": "0.14.0-3.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "userspace-rcu"
+      }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.aarch64"
+      "evra": "2.39.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.aarch64"
+      "evra": "2:9.0.2120-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "wasmedge-rt": {
-      "evra": "0.13.5-1.fc39.aarch64"
+      "evra": "0.13.5-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "wasmedge"
+      }
     },
     "which": {
-      "evra": "2.21-40.fc39.aarch64"
+      "evra": "2.21-40.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "which"
+      }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.aarch64"
+      "evra": "1.0.20210914-5.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "wireguard-tools"
+      }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.aarch64"
+      "evra": "6.4.0-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "xfsprogs"
+      }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.aarch64"
+      "evra": "0.8.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "xxhash"
+      }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.aarch64"
+      "evra": "5.4.4-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.aarch64"
+      "evra": "5.4.4-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.aarch64"
+      "evra": "2.1.0-22.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "yajl"
+      }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.aarch64"
+      "evra": "1.3.2-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "zchunk"
+      }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.aarch64"
+      "evra": "0.0.25-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-zincati"
+      }
     },
     "zlib": {
-      "evra": "1.2.13-4.fc39.aarch64"
+      "evra": "1.2.13-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "zlib"
+      }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.aarch64"
+      "evra": "1.1.2-8.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "rust-zram-generator"
+      }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.aarch64"
+      "evra": "1.5.5-4.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     }
   },
   "metadata": {
-    "generated": "2023-12-02T00:00:00Z",
+    "generated": "2023-12-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T01:12:34Z"
+        "generated": "2023-12-02T23:12:10Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-02T01:16:05Z"
+        "generated": "2023-12-04T01:26:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 9518bad9fd..8e8265bff4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,1295 +1,2573 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.ppc64le"
+      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "WALinuxAgent"
+      }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "aardvark-dns"
+      }
     },
     "acl": {
-      "evra": "2.3.1-8.fc39.ppc64le"
+      "evra": "2.3.1-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.ppc64le"
+      "evra": "0.9.2-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "adcli"
+      }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.ppc64le"
+      "evra": "5.4.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.ppc64le"
+      "evra": "5.4.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.ppc64le"
+      "evra": "1.25-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "chkconfig"
+      }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.ppc64le"
+      "evra": "2.5.1-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.ppc64le"
+      "evra": "3.1.2-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.ppc64le"
+      "evra": "3.1.2-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.ppc64le"
+      "evra": "1.4.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.ppc64le"
+      "evra": "1.4.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.ppc64le"
+      "evra": "0.8-24.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "avahi"
+      }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch"
+      "evra": "11-18.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "basesystem"
+      }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.ppc64le"
+      "evra": "5.2.21-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bash"
+      }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "shell-color-prompt"
+      }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch"
+      "evra": "1:2.11-12.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bash-completion"
+      }
     },
     "bc": {
-      "evra": "1.07.1-19.fc39.ppc64le"
+      "evra": "1.07.1-19.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bc"
+      }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.ppc64le"
+      "evra": "32:9.18.20-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.ppc64le"
+      "evra": "32:9.18.20-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.ppc64le"
+      "evra": "3.7.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.ppc64le"
+      "evra": "6.6.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "btrfs-progs"
+      }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.ppc64le"
+      "evra": "0.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bubblewrap"
+      }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.ppc64le"
+      "evra": "1.0.8-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.ppc64le"
+      "evra": "1.0.8-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.ppc64le"
+      "evra": "1.21.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "c-ares"
+      }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ca-certificates"
+      }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.ppc64le"
+      "evra": "0.1.7-18.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "catatonit"
+      }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.ppc64le"
+      "evra": "4.4-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "chrony"
+      }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.ppc64le"
+      "evra": "7.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cifs-utils"
+      }
     },
     "clevis": {
-      "evra": "19-4.fc39.ppc64le"
+      "evra": "19-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.ppc64le"
+      "evra": "19-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.ppc64le"
+      "evra": "19-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.ppc64le"
+      "evra": "19-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch"
+      "evra": "0.33-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "cloud-utils"
+      }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.ppc64le"
+      "evra": "2:2.1.8-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "conmon"
+      }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "container-selinux"
+      }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.ppc64le"
+      "evra": "1.6.19-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "containerd"
+      }
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.ppc64le"
+      "evra": "1.3.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "containernetworking-plugins"
+      }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.ppc64le"
+      "evra": "0.18.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.ppc64le"
+      "evra": "0.18.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.ppc64le"
+      "evra": "9.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.ppc64le"
+      "evra": "9.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.ppc64le"
+      "evra": "2.14-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cpio"
+      }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.ppc64le"
+      "evra": "2.9.11-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cracklib"
+      }
     },
     "criu": {
-      "evra": "3.18-3.fc39.ppc64le"
+      "evra": "3.18-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.ppc64le"
+      "evra": "3.18-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "crun": {
-      "evra": "1.12-1.fc39.ppc64le"
+      "evra": "1.12-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "crypto-policies"
+      }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.ppc64le"
+      "evra": "2.6.1-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.ppc64le"
+      "evra": "2.6.1-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.ppc64le"
+      "evra": "8.2.1-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.ppc64le"
+      "evra": "2.1.28-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.ppc64le"
+      "evra": "2.1.28-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.ppc64le"
+      "evra": "1:1.14.10-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.ppc64le"
+      "evra": "33-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dbus-broker"
+      }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.ppc64le"
+      "evra": "1:1.14.10-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.ppc64le"
+      "evra": "1.02.196-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.ppc64le"
+      "evra": "1.0.6-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "device-mapper-persistent-data"
+      }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.ppc64le"
+      "evra": "3.10-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "diffutils"
+      }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.ppc64le"
+      "evra": "2.89-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dnsmasq"
+      }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.ppc64le"
+      "evra": "4.2-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dosfstools"
+      }
     },
     "dracut": {
-      "evra": "059-16.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.ppc64le"
+      "evra": "059-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.ppc64le"
+      "evra": "2.7.0-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "duktape"
+      }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.ppc64le"
+      "evra": "0.190-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.ppc64le"
+      "evra": "0.190-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.ppc64le"
+      "evra": "2:6.6-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ethtool"
+      }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.ppc64le"
+      "evra": "2.5.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "expat"
+      }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "file": {
-      "evra": "5.44-5.fc39.ppc64le"
+      "evra": "5.44-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.ppc64le"
+      "evra": "5.44-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.ppc64le"
+      "evra": "3.18-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "filesystem"
+      }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.ppc64le"
+      "evra": "1:4.9.0-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "findutils"
+      }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.ppc64le"
+      "evra": "1.15.6-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "flatpak"
+      }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.ppc64le"
+      "evra": "0.6.1-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fstrm"
+      }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.ppc64le"
+      "evra": "2.9.9-17.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.ppc64le"
+      "evra": "2.9.9-17.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.ppc64le"
+      "evra": "1.12-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse-overlayfs"
+      }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.ppc64le"
+      "evra": "3.7.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse-sshfs"
+      }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.ppc64le"
+      "evra": "3.16.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.ppc64le"
+      "evra": "1.9.9-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "fwupd"
+      }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.ppc64le"
+      "evra": "5.2.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gawk"
+      }
     },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.ppc64le"
+      "evra": "1:1.23-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.ppc64le"
+      "evra": "1.0.9-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gdisk"
+      }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.ppc64le"
+      "evra": "0.22-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.ppc64le"
+      "evra": "2.43.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "git"
+      }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.ppc64le"
+      "evra": "2.78.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "glib2"
+      }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.ppc64le"
+      "evra": "2.38-11.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.ppc64le"
+      "evra": "1:6.2.1-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gmp"
+      }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.ppc64le"
+      "evra": "2.4.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gnupg2"
+      }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.ppc64le"
+      "evra": "3.8.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gnutls"
+      }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.ppc64le"
+      "evra": "1.20.0-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gpgme"
+      }
     },
     "grep": {
-      "evra": "3.11-3.fc39.ppc64le"
+      "evra": "3.11-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "grep"
+      }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-109.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-109.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.ppc64le"
+      "evra": "1:2.06-109.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.ppc64le"
+      "evra": "6:0.7.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gvisor-tap-vsock"
+      }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.ppc64le"
+      "evra": "1.12-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gzip"
+      }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.ppc64le"
+      "evra": "3.23-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "hostname"
+      }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.ppc64le"
+      "evra": "2.17.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ignition"
+      }
     },
     "inih": {
-      "evra": "57-2.fc39.ppc64le"
+      "evra": "57-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "inih"
+      }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.ppc64le"
+      "evra": "1.0.3-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ipcalc"
+      }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.ppc64le"
+      "evra": "6.4.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.ppc64le"
+      "evra": "6.4.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch"
+      "evra": "1.8.9-5.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.ppc64le"
+      "evra": "1.8.9-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.ppc64le"
+      "evra": "20221126-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iputils"
+      }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.ppc64le"
+      "evra": "2:1.9.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "irqbalance"
+      }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.ppc64le"
+      "evra": "0.101-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "isns-utils"
+      }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.ppc64le"
+      "evra": "2.13.1-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "jansson"
+      }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.ppc64le"
+      "evra": "5.3.0-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "jemalloc"
+      }
     },
     "jose": {
-      "evra": "11-8.fc39.ppc64le"
+      "evra": "11-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "jq": {
-      "evra": "1.6-17.fc39.ppc64le"
+      "evra": "1.6-17.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "jq"
+      }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.ppc64le"
+      "evra": "0.17-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "json-c"
+      }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "json-glib"
+      }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.ppc64le"
+      "evra": "2.6.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kernel": {
-      "evra": "6.6.2-201.fc39.ppc64le"
+      "evra": "6.6.3-200.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-core": {
-      "evra": "6.6.2-201.fc39.ppc64le"
+      "evra": "6.6.3-200.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules": {
-      "evra": "6.6.2-201.fc39.ppc64le"
+      "evra": "6.6.3-200.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules-core": {
-      "evra": "6.6.2-201.fc39.ppc64le"
+      "evra": "6.6.3-200.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.ppc64le"
+      "evra": "2.0.27-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kexec-tools"
+      }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.ppc64le"
+      "evra": "1.6.1-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.ppc64le"
+      "evra": "1.6.1-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "kmod": {
-      "evra": "30-6.fc39.ppc64le"
+      "evra": "30-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.ppc64le"
+      "evra": "30-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.ppc64le"
+      "evra": "0.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.ppc64le"
+      "evra": "1.21.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "krb5"
+      }
     },
     "less": {
-      "evra": "633-2.fc39.ppc64le"
+      "evra": "633-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "less"
+      }
     },
     "libacl": {
-      "evra": "2.3.1-8.fc39.ppc64le"
+      "evra": "2.3.1-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.ppc64le"
+      "evra": "0.3.111-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libaio"
+      }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.ppc64le"
+      "evra": "3.7.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "libargon2": {
-      "evra": "20190702-3.fc39.ppc64le"
+      "evra": "20190702-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "argon2"
+      }
     },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.ppc64le"
+      "evra": "2.5.6-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libassuan"
+      }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.ppc64le"
+      "evra": "2.5.1-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.ppc64le"
+      "evra": "0.1.1-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.ppc64le"
+      "evra": "2:1.1.0-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libbpf"
+      }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.ppc64le"
+      "evra": "0.11.7-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libbsd"
+      }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.ppc64le"
+      "evra": "2.48-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libcap"
+      }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.ppc64le"
+      "evra": "0.8.3-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libcap-ng"
+      }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.ppc64le"
+      "evra": "0.10.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libcbor"
+      }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.ppc64le"
+      "evra": "0.7.0-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.ppc64le"
+      "evra": "8.2.1-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.ppc64le"
+      "evra": "0.14-26.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libdaemon"
+      }
     },
     "libdb": {
-      "evra": "5.3.28-56.fc39.ppc64le"
+      "evra": "5.3.28-56.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libdb"
+      }
     },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.ppc64le"
+      "evra": "0.5.0-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.ppc64le"
+      "evra": "0.5.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libeconf"
+      }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.ppc64le"
+      "evra": "3.1-48.20230828cvs.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libedit"
+      }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.ppc64le"
+      "evra": "2.1.12-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libevent"
+      }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.ppc64le"
+      "evra": "3.4.4-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libffi"
+      }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.ppc64le"
+      "evra": "1.13.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libfido2"
+      }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.ppc64le"
+      "evra": "1.10.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libgcrypt"
+      }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.ppc64le"
+      "evra": "1.47-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libgpg-error"
+      }
     },
     "libgudev": {
-      "evra": "238-2.fc39.ppc64le"
+      "evra": "238-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libgudev"
+      }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.ppc64le"
+      "evra": "0.4.8-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libgusb"
+      }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.ppc64le"
+      "evra": "46.0-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rdma-core"
+      }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.ppc64le"
+      "evra": "73.2-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "icu"
+      }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.ppc64le"
+      "evra": "2.3.4-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libidn2"
+      }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.ppc64le"
+      "evra": "1.3.1-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.ppc64le"
+      "evra": "0.1.14-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libjcat"
+      }
     },
     "libjose": {
-      "evra": "11-8.fc39.ppc64le"
+      "evra": "11-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.ppc64le"
+      "evra": "1.4.0-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.ppc64le"
+      "evra": "1.4.0-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.ppc64le"
+      "evra": "1.6.4-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libksba"
+      }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.ppc64le"
+      "evra": "2.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libldb"
+      }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.ppc64le"
+      "evra": "9-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.ppc64le"
+      "evra": "1.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libmaxminddb"
+      }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.ppc64le"
+      "evra": "1.1.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libmd"
+      }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.ppc64le"
+      "evra": "1.0.5-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libmnl"
+      }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.ppc64le"
+      "evra": "2.15.0-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libmodulemd"
+      }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.ppc64le"
+      "evra": "1.8-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libndp"
+      }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.ppc64le"
+      "evra": "1.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnet"
+      }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.ppc64le"
+      "evra": "1.0.9-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnetfilter_conntrack"
+      }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.ppc64le"
+      "evra": "1.0.1-24.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnfnetlink"
+      }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.ppc64le"
+      "evra": "1:2.6.4-0.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.ppc64le"
+      "evra": "1.2.6-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnftnl"
+      }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.ppc64le"
+      "evra": "1.55.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nghttp2"
+      }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.ppc64le"
+      "evra": "3.8.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.ppc64le"
+      "evra": "3.8.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.ppc64le"
+      "evra": "2.0.0-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnsl2"
+      }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.ppc64le"
+      "evra": "1.6-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libnvme"
+      }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.ppc64le"
+      "evra": "0.2.1-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.ppc64le"
+      "evra": "14:1.10.4-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libpcap"
+      }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.ppc64le"
+      "evra": "0.21.2-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libpsl"
+      }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.ppc64le"
+      "evra": "1.4.5-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libpwquality"
+      }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.ppc64le"
+      "evra": "0.1.5-54.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.ppc64le"
+      "evra": "1.17.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "librepo"
+      }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch"
+      "evra": "2.17.11-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "libreport"
+      }
     },
     "librtas": {
-      "evra": "2.0.4-3.fc39.ppc64le"
+      "evra": "2.0.4-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "librtas"
+      }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.ppc64le"
+      "evra": "2.5.3-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libseccomp"
+      }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.ppc64le"
+      "evra": "3.5-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.ppc64le"
+      "evra": "3.5-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.ppc64le"
+      "evra": "3.5-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libsemanage"
+      }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.ppc64le"
+      "evra": "3.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libsepol"
+      }
     },
     "libservicelog": {
-      "evra": "1.1.19-8.fc39.ppc64le"
+      "evra": "1.1.19-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libservicelog"
+      }
     },
     "libsigsegv": {
-      "evra": "2.14-5.fc39.ppc64le"
+      "evra": "2.14-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libsigsegv"
+      }
     },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.ppc64le"
+      "evra": "4.7.0-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libslirp"
+      }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.ppc64le"
+      "evra": "0.7.25-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libsolv"
+      }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.ppc64le"
+      "evra": "1.47.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.ppc64le"
+      "evra": "13.2.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.ppc64le"
+      "evra": "2.4.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtalloc"
+      }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.ppc64le"
+      "evra": "4.19.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtasn1"
+      }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.ppc64le"
+      "evra": "1.4.9-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtdb"
+      }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.ppc64le"
+      "evra": "1.32-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.ppc64le"
+      "evra": "0.15.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtevent"
+      }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.ppc64le"
+      "evra": "1.3.4-0.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtirpc"
+      }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.ppc64le"
+      "evra": "2.4.7-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libtool"
+      }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.ppc64le"
+      "evra": "1.1-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libunistring"
+      }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.ppc64le"
+      "evra": "1.0.26-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libusb1"
+      }
     },
     "libuser": {
-      "evra": "0.64-4.fc39.ppc64le"
+      "evra": "0.64-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libuser"
+      }
     },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.ppc64le"
+      "evra": "1.2.1-10.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libutempter"
+      }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.ppc64le"
+      "evra": "1:1.47.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libuv"
+      }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.ppc64le"
+      "evra": "0.3.2-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libverto"
+      }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.ppc64le"
+      "evra": "4.4.36-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libxcrypt"
+      }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.ppc64le"
+      "evra": "2.10.4-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libxml2"
+      }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.ppc64le"
+      "evra": "0.3.14-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libxmlb"
+      }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.ppc64le"
+      "evra": "0.2.5-12.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libyaml"
+      }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.ppc64le"
+      "evra": "1.5.5-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.ppc64le"
+      "evra": "2.5.1-36.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "linux-atm"
+      }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.ppc64le"
+      "evra": "0.9.31-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lmdb"
+      }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.ppc64le"
+      "evra": "3.21.0-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "logrotate"
+      }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.ppc64le"
+      "evra": "4.96.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lsof"
+      }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.ppc64le"
+      "evra": "5.4.6-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lua"
+      }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.ppc64le"
+      "evra": "9-16.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.ppc64le"
+      "evra": "2.03.22-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.ppc64le"
+      "evra": "2.03.22-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.ppc64le"
+      "evra": "1.9.4-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lz4"
+      }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.ppc64le"
+      "evra": "2.10-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "lzo"
+      }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.ppc64le"
+      "evra": "4.2-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "mdadm"
+      }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.ppc64le"
+      "evra": "24.0.5-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "moby-engine"
+      }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.ppc64le"
+      "evra": "4.2.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "mpfr"
+      }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nano": {
-      "evra": "7.2-4.fc39.ppc64le"
+      "evra": "7.2-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch"
+      "evra": "7.2-4.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.ppc64le"
+      "evra": "6.4-7.20230520.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.ppc64le"
+      "evra": "6.4-7.20230520.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.ppc64le"
+      "evra": "2.0-0.67.20160912git.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "net-tools"
+      }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.ppc64le"
+      "evra": "1.8.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "netavark"
+      }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.ppc64le"
+      "evra": "3.9.1-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nettle"
+      }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.ppc64le"
+      "evra": "0.52.23-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "newt"
+      }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.ppc64le"
+      "evra": "1:2.6.4-0.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.ppc64le"
+      "evra": "1:1.0.7-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nftables"
+      }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.ppc64le"
+      "evra": "2.2.15-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nmstate"
+      }
     },
     "npth": {
-      "evra": "1.6-14.fc39.ppc64le"
+      "evra": "1.6-14.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "npth"
+      }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.ppc64le"
+      "evra": "2.23.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nss-altfiles"
+      }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.ppc64le"
+      "evra": "2.0.16-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "numactl"
+      }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.ppc64le"
+      "evra": "2.6-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "nvme-cli"
+      }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.ppc64le"
+      "evra": "6.9.9-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "oniguruma"
+      }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.ppc64le"
+      "evra": "2.6.6-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openldap"
+      }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.ppc64le"
+      "evra": "9.3p1-9.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.ppc64le"
+      "evra": "1:3.1.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.ppc64le"
+      "evra": "1:3.1.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.ppc64le"
+      "evra": "1.81-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "os-prober"
+      }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "ostree-grub2": {
-      "evra": "2023.7-2.fc39.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.ppc64le"
+      "evra": "2023.7-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.ppc64le"
+      "evra": "0.25.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.ppc64le"
+      "evra": "0.25.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.ppc64le"
+      "evra": "1.5.3-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.ppc64le"
+      "evra": "1.5.3-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.ppc64le"
+      "evra": "0^20231119.g4f1709d-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passwd": {
-      "evra": "0.80-15.fc39.ppc64le"
+      "evra": "0.80-15.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "passwd"
+      }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.ppc64le"
+      "evra": "10.42-1.fc39.2.ppc64le",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch"
+      "evra": "10.42-1.fc39.2.noarch",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.ppc64le"
+      "evra": "2.8-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pigz"
+      }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch"
+      "evra": "1.9.5-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.ppc64le"
+      "evra": "1.9.5-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.ppc64le"
+      "evra": "5:4.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.ppc64le"
+      "evra": "5:4.8.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.ppc64le"
+      "evra": "3.5-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "policycoreutils"
+      }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.ppc64le"
+      "evra": "123-1.fc39.1.ppc64le",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.ppc64le"
+      "evra": "123-1.fc39.1.ppc64le",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.ppc64le"
+      "evra": "0.1-26.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "polkit-pkla-compat"
+      }
     },
     "popt": {
-      "evra": "1.19-3.fc39.ppc64le"
+      "evra": "1.19-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "popt"
+      }
     },
     "powerpc-utils-core": {
-      "evra": "1.3.11-4.fc39.ppc64le"
+      "evra": "1.3.11-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "powerpc-utils"
+      }
     },
     "ppc64-diag-rtas": {
-      "evra": "2.7.9-4.fc39.ppc64le"
+      "evra": "2.7.9-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "ppc64-diag"
+      }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.ppc64le"
+      "evra": "4.0.3-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "procps-ng"
+      }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.ppc64le"
+      "evra": "1.4.1-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "protobuf-c"
+      }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.ppc64le"
+      "evra": "23.6-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "psmisc"
+      }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch"
+      "evra": "20230812-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "publicsuffix-list"
+      }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.ppc64le"
+      "evra": "2:8.1.1-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "qemu"
+      }
     },
     "readline": {
-      "evra": "8.2-4.fc39.ppc64le"
+      "evra": "8.2-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "readline"
+      }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.ppc64le"
+      "evra": "1.2.6-4.rc2.fc39.1.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpcbind"
+      }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.ppc64le"
+      "evra": "2023.10-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.ppc64le"
+      "evra": "2023.10-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.ppc64le"
+      "evra": "4.19.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.ppc64le"
+      "evra": "1.5.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-rpm-sequoia"
+      }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.ppc64le"
+      "evra": "3.2.7-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rsync"
+      }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.ppc64le"
+      "evra": "2:1.1.8-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "runc"
+      }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.ppc64le"
+      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "sed": {
-      "evra": "4.8-14.fc39.ppc64le"
+      "evra": "4.8-14.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sed"
+      }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "servicelog": {
-      "evra": "1.1.16-5.fc39.ppc64le"
+      "evra": "1.1.16-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "servicelog"
+      }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch"
+      "evra": "2.14.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "setup"
+      }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.ppc64le"
+      "evra": "1.46-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.ppc64le"
+      "evra": "1.46-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.ppc64le"
+      "evra": "2:4.14.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.ppc64le"
+      "evra": "2:4.14.0-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.ppc64le"
+      "evra": "2.2-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "shared-mime-info"
+      }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.ppc64le"
+      "evra": "1:1.13.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "skopeo"
+      }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.ppc64le"
+      "evra": "2.3.3-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "slang"
+      }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.ppc64le"
+      "evra": "1.2.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "slirp4netns"
+      }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.ppc64le"
+      "evra": "1.1.10-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "snappy"
+      }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.ppc64le"
+      "evra": "1.7.4.4-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "socat"
+      }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.ppc64le"
+      "evra": "3.42.0-7.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sqlite"
+      }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.ppc64le"
+      "evra": "4.6.1-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "squashfs-tools"
+      }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.ppc64le"
+      "evra": "0.1.4-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-ssh-key-dir"
+      }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le"
+      "evra": "2.9.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.ppc64le"
+      "evra": "1.16-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "stalld"
+      }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.ppc64le"
+      "evra": "1.9.14-1.p3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "sudo"
+      }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.ppc64le"
+      "evra": "254.7-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.ppc64le"
+      "evra": "2:1.35-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "tar"
+      }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.ppc64le"
+      "evra": "1.32-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.ppc64le"
+      "evra": "0.0.99.4-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "toolbox"
+      }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.ppc64le"
+      "evra": "5.5-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "tpm2-tools"
+      }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.ppc64le"
+      "evra": "4.0.1-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch"
+      "evra": "2023c-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "tzdata"
+      }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.ppc64le"
+      "evra": "0.14.0-3.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "userspace-rcu"
+      }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.ppc64le"
+      "evra": "2.39.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.ppc64le"
+      "evra": "2:9.0.2120-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "which": {
-      "evra": "2.21-40.fc39.ppc64le"
+      "evra": "2.21-40.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "which"
+      }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.ppc64le"
+      "evra": "1.0.20210914-5.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "wireguard-tools"
+      }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.ppc64le"
+      "evra": "6.4.0-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "xfsprogs"
+      }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.ppc64le"
+      "evra": "0.8.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "xxhash"
+      }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.ppc64le"
+      "evra": "5.4.4-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.ppc64le"
+      "evra": "5.4.4-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.ppc64le"
+      "evra": "2.1.0-22.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "yajl"
+      }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.ppc64le"
+      "evra": "1.3.2-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "zchunk"
+      }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.ppc64le"
+      "evra": "0.0.25-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-zincati"
+      }
     },
     "zlib": {
-      "evra": "1.2.13-4.fc39.ppc64le"
+      "evra": "1.2.13-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "zlib"
+      }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.ppc64le"
+      "evra": "1.1.2-8.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-zram-generator"
+      }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.ppc64le"
+      "evra": "1.5.5-4.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     }
   },
   "metadata": {
-    "generated": "2023-12-02T00:00:00Z",
+    "generated": "2023-12-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T01:11:50Z"
+        "generated": "2023-12-02T23:11:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-02T01:16:09Z"
+        "generated": "2023-12-04T01:26:23Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 88c106a625..96a0b5145b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,1247 +1,2477 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.s390x"
+      "evra": "1:1.44.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "WALinuxAgent"
+      }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.s390x"
+      "evra": "1.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "aardvark-dns"
+      }
     },
     "acl": {
-      "evra": "2.3.1-8.fc39.s390x"
+      "evra": "2.3.1-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.s390x"
+      "evra": "0.9.2-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "adcli"
+      }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.s390x"
+      "evra": "5.4.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.s390x"
+      "evra": "5.4.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.s390x"
+      "evra": "1.25-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "chkconfig"
+      }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.s390x"
+      "evra": "2.5.1-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.s390x"
+      "evra": "3.1.2-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.s390x"
+      "evra": "3.1.2-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.s390x"
+      "evra": "1.4.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.s390x"
+      "evra": "1.4.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.s390x"
+      "evra": "0.8-24.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "avahi"
+      }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch"
+      "evra": "11-18.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "basesystem"
+      }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.s390x"
+      "evra": "5.2.21-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bash"
+      }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "shell-color-prompt"
+      }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch"
+      "evra": "1:2.11-12.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bash-completion"
+      }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.s390x"
+      "evra": "32:9.18.20-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.s390x"
+      "evra": "32:9.18.20-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.s390x"
+      "evra": "3.7.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.s390x"
+      "evra": "6.6.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "btrfs-progs"
+      }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.s390x"
+      "evra": "0.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bubblewrap"
+      }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.s390x"
+      "evra": "1.0.8-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.s390x"
+      "evra": "1.0.8-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.s390x"
+      "evra": "1.21.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "c-ares"
+      }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ca-certificates"
+      }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.s390x"
+      "evra": "0.1.7-18.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "catatonit"
+      }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.s390x"
+      "evra": "4.4-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "chrony"
+      }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.s390x"
+      "evra": "7.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cifs-utils"
+      }
     },
     "clevis": {
-      "evra": "19-4.fc39.s390x"
+      "evra": "19-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.s390x"
+      "evra": "19-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.s390x"
+      "evra": "19-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.s390x"
+      "evra": "19-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch"
+      "evra": "0.33-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "cloud-utils"
+      }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.s390x"
+      "evra": "2:2.1.8-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "conmon"
+      }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "container-selinux"
+      }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.s390x"
+      "evra": "1.6.19-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "containerd"
+      }
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.s390x"
+      "evra": "1.3.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "containernetworking-plugins"
+      }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.s390x"
+      "evra": "0.18.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.s390x"
+      "evra": "0.18.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.s390x"
+      "evra": "9.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.s390x"
+      "evra": "9.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.s390x"
+      "evra": "2.14-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cpio"
+      }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.s390x"
+      "evra": "2.9.11-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cracklib"
+      }
     },
     "criu": {
-      "evra": "3.18-3.fc39.s390x"
+      "evra": "3.18-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.s390x"
+      "evra": "3.18-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "crun": {
-      "evra": "1.12-1.fc39.s390x"
+      "evra": "1.12-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "crypto-policies"
+      }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.s390x"
+      "evra": "2.6.1-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.s390x"
+      "evra": "2.6.1-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.s390x"
+      "evra": "8.2.1-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.s390x"
+      "evra": "2.1.28-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.s390x"
+      "evra": "2.1.28-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.s390x"
+      "evra": "1:1.14.10-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.s390x"
+      "evra": "33-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dbus-broker"
+      }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.s390x"
+      "evra": "1:1.14.10-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.s390x"
+      "evra": "1.02.196-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.s390x"
+      "evra": "1.02.196-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.s390x"
+      "evra": "1.02.196-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.s390x"
+      "evra": "1.02.196-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.s390x"
+      "evra": "0.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.s390x"
+      "evra": "0.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.s390x"
+      "evra": "1.0.6-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "device-mapper-persistent-data"
+      }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.s390x"
+      "evra": "3.10-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "diffutils"
+      }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.s390x"
+      "evra": "2.89-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dnsmasq"
+      }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.s390x"
+      "evra": "4.2-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dosfstools"
+      }
     },
     "dracut": {
-      "evra": "059-16.fc39.s390x"
+      "evra": "059-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.s390x"
+      "evra": "059-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.s390x"
+      "evra": "059-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.s390x"
+      "evra": "2.7.0-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "duktape"
+      }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.s390x"
+      "evra": "1.47.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.s390x"
+      "evra": "1.47.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.s390x"
+      "evra": "0.190-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.s390x"
+      "evra": "0.190-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.s390x"
+      "evra": "2:6.6-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ethtool"
+      }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.s390x"
+      "evra": "2.5.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "expat"
+      }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "file": {
-      "evra": "5.44-5.fc39.s390x"
+      "evra": "5.44-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.s390x"
+      "evra": "5.44-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.s390x"
+      "evra": "3.18-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "filesystem"
+      }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.s390x"
+      "evra": "1:4.9.0-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "findutils"
+      }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.s390x"
+      "evra": "1.15.6-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "flatpak"
+      }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.s390x"
+      "evra": "0.6.1-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fstrm"
+      }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.s390x"
+      "evra": "2.9.9-17.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.s390x"
+      "evra": "3.16.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.s390x"
+      "evra": "2.9.9-17.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.s390x"
+      "evra": "1.12-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse-overlayfs"
+      }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.s390x"
+      "evra": "3.7.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse-sshfs"
+      }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.s390x"
+      "evra": "3.16.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.s390x"
+      "evra": "3.16.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.s390x"
+      "evra": "1.9.9-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "fwupd"
+      }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.s390x"
+      "evra": "5.2.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gawk"
+      }
     },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.s390x"
+      "evra": "1:1.23-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.s390x"
+      "evra": "1.0.9-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gdisk"
+      }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.s390x"
+      "evra": "2.43.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "git"
+      }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.s390x"
+      "evra": "2.78.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "glib2"
+      }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.s390x"
+      "evra": "2.38-11.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.s390x"
+      "evra": "1:6.2.1-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gmp"
+      }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.s390x"
+      "evra": "2.4.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gnupg2"
+      }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.s390x"
+      "evra": "3.8.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gnutls"
+      }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.s390x"
+      "evra": "1.20.0-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gpgme"
+      }
     },
     "grep": {
-      "evra": "3.11-3.fc39.s390x"
+      "evra": "3.11-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "grep"
+      }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.s390x"
+      "evra": "6:0.7.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gvisor-tap-vsock"
+      }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.s390x"
+      "evra": "1.12-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gzip"
+      }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.s390x"
+      "evra": "3.23-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "hostname"
+      }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.s390x"
+      "evra": "2.17.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ignition"
+      }
     },
     "inih": {
-      "evra": "57-2.fc39.s390x"
+      "evra": "57-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "inih"
+      }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.s390x"
+      "evra": "1.0.3-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ipcalc"
+      }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.s390x"
+      "evra": "6.4.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.s390x"
+      "evra": "6.4.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.s390x"
+      "evra": "1.8.9-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.s390x"
+      "evra": "1.8.9-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.s390x"
+      "evra": "1.8.9-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.s390x"
+      "evra": "1.8.9-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch"
+      "evra": "1.8.9-5.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.s390x"
+      "evra": "1.8.9-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.s390x"
+      "evra": "20221126-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iputils"
+      }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.s390x"
+      "evra": "0.101-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "isns-utils"
+      }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.s390x"
+      "evra": "2.13.1-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "jansson"
+      }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.s390x"
+      "evra": "5.3.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "jemalloc"
+      }
     },
     "jose": {
-      "evra": "11-8.fc39.s390x"
+      "evra": "11-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "jq": {
-      "evra": "1.6-17.fc39.s390x"
+      "evra": "1.6-17.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "jq"
+      }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.s390x"
+      "evra": "0.17-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "json-c"
+      }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.s390x"
+      "evra": "1.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "json-glib"
+      }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.s390x"
+      "evra": "2.6.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kernel": {
-      "evra": "6.6.2-201.fc39.s390x"
+      "evra": "6.6.3-200.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-core": {
-      "evra": "6.6.2-201.fc39.s390x"
+      "evra": "6.6.3-200.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules": {
-      "evra": "6.6.2-201.fc39.s390x"
+      "evra": "6.6.3-200.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules-core": {
-      "evra": "6.6.2-201.fc39.s390x"
+      "evra": "6.6.3-200.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.s390x"
+      "evra": "2.0.27-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kexec-tools"
+      }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.s390x"
+      "evra": "1.6.1-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.s390x"
+      "evra": "1.6.1-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "kmod": {
-      "evra": "30-6.fc39.s390x"
+      "evra": "30-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.s390x"
+      "evra": "30-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.s390x"
+      "evra": "0.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.s390x"
+      "evra": "1.21.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "krb5"
+      }
     },
     "less": {
-      "evra": "633-2.fc39.s390x"
+      "evra": "633-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "less"
+      }
     },
     "libacl": {
-      "evra": "2.3.1-8.fc39.s390x"
+      "evra": "2.3.1-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.s390x"
+      "evra": "0.3.111-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libaio"
+      }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.s390x"
+      "evra": "3.7.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "libargon2": {
-      "evra": "20190702-3.fc39.s390x"
+      "evra": "20190702-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "argon2"
+      }
     },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.s390x"
+      "evra": "2.5.6-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libassuan"
+      }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.s390x"
+      "evra": "13.2.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.s390x"
+      "evra": "2.5.1-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.s390x"
+      "evra": "0.1.1-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.s390x"
+      "evra": "2:1.1.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libbpf"
+      }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.s390x"
+      "evra": "0.11.7-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libbsd"
+      }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.s390x"
+      "evra": "2.48-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libcap"
+      }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.s390x"
+      "evra": "0.8.3-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libcap-ng"
+      }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.s390x"
+      "evra": "0.10.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libcbor"
+      }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.s390x"
+      "evra": "0.7.0-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.s390x"
+      "evra": "1.47.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.s390x"
+      "evra": "8.2.1-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.s390x"
+      "evra": "0.14-26.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libdaemon"
+      }
     },
     "libdb": {
-      "evra": "5.3.28-56.fc39.s390x"
+      "evra": "5.3.28-56.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libdb"
+      }
     },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.s390x"
+      "evra": "0.5.0-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.s390x"
+      "evra": "0.5.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libeconf"
+      }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.s390x"
+      "evra": "3.1-48.20230828cvs.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libedit"
+      }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.s390x"
+      "evra": "2.1.12-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libevent"
+      }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.s390x"
+      "evra": "3.4.4-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libffi"
+      }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.s390x"
+      "evra": "1.13.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libfido2"
+      }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.s390x"
+      "evra": "13.2.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.s390x"
+      "evra": "1.10.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libgcrypt"
+      }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.s390x"
+      "evra": "1.47-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libgpg-error"
+      }
     },
     "libgudev": {
-      "evra": "238-2.fc39.s390x"
+      "evra": "238-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libgudev"
+      }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.s390x"
+      "evra": "0.4.8-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libgusb"
+      }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.s390x"
+      "evra": "46.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rdma-core"
+      }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.s390x"
+      "evra": "73.2-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "icu"
+      }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.s390x"
+      "evra": "2.3.4-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libidn2"
+      }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.s390x"
+      "evra": "1.3.1-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.s390x"
+      "evra": "0.1.14-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libjcat"
+      }
     },
     "libjose": {
-      "evra": "11-8.fc39.s390x"
+      "evra": "11-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.s390x"
+      "evra": "1.4.0-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.s390x"
+      "evra": "1.4.0-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.s390x"
+      "evra": "1.6.4-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libksba"
+      }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.s390x"
+      "evra": "2.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libldb"
+      }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.s390x"
+      "evra": "9-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.s390x"
+      "evra": "1.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libmaxminddb"
+      }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.s390x"
+      "evra": "1.1.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libmd"
+      }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.s390x"
+      "evra": "1.0.5-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libmnl"
+      }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.s390x"
+      "evra": "2.15.0-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libmodulemd"
+      }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.s390x"
+      "evra": "1.8-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libndp"
+      }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.s390x"
+      "evra": "1.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnet"
+      }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.s390x"
+      "evra": "1.0.9-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnetfilter_conntrack"
+      }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.s390x"
+      "evra": "1.0.1-24.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnfnetlink"
+      }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.s390x"
+      "evra": "1:2.6.4-0.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.s390x"
+      "evra": "1.2.6-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnftnl"
+      }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.s390x"
+      "evra": "1.55.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nghttp2"
+      }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.s390x"
+      "evra": "3.8.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.s390x"
+      "evra": "3.8.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.s390x"
+      "evra": "2.0.0-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnsl2"
+      }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.s390x"
+      "evra": "1.6-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libnvme"
+      }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.s390x"
+      "evra": "0.2.1-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.s390x"
+      "evra": "14:1.10.4-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libpcap"
+      }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.s390x"
+      "evra": "1.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.s390x"
+      "evra": "0.21.2-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libpsl"
+      }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.s390x"
+      "evra": "1.4.5-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libpwquality"
+      }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.s390x"
+      "evra": "0.1.5-54.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.s390x"
+      "evra": "1.17.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "librepo"
+      }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch"
+      "evra": "2.17.11-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "libreport"
+      }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.s390x"
+      "evra": "2.5.3-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libseccomp"
+      }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.s390x"
+      "evra": "3.5-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.s390x"
+      "evra": "3.5-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.s390x"
+      "evra": "3.5-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libsemanage"
+      }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.s390x"
+      "evra": "3.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libsepol"
+      }
     },
     "libsigsegv": {
-      "evra": "2.14-5.fc39.s390x"
+      "evra": "2.14-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libsigsegv"
+      }
     },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.s390x"
+      "evra": "4.7.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libslirp"
+      }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.s390x"
+      "evra": "0.7.25-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libsolv"
+      }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.s390x"
+      "evra": "1.47.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.s390x"
+      "evra": "13.2.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.s390x"
+      "evra": "2.4.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtalloc"
+      }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.s390x"
+      "evra": "4.19.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtasn1"
+      }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.s390x"
+      "evra": "1.4.9-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtdb"
+      }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.s390x"
+      "evra": "1.32-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.s390x"
+      "evra": "0.15.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtevent"
+      }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.s390x"
+      "evra": "1.3.4-0.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtirpc"
+      }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.s390x"
+      "evra": "2.4.7-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libtool"
+      }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.s390x"
+      "evra": "1.1-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libunistring"
+      }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.s390x"
+      "evra": "1.0.26-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libusb1"
+      }
     },
     "libuser": {
-      "evra": "0.64-4.fc39.s390x"
+      "evra": "0.64-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libuser"
+      }
     },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.s390x"
+      "evra": "1.2.1-10.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libutempter"
+      }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.s390x"
+      "evra": "1:1.47.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libuv"
+      }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.s390x"
+      "evra": "0.3.2-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libverto"
+      }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.s390x"
+      "evra": "4.4.36-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libxcrypt"
+      }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.s390x"
+      "evra": "2.10.4-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libxml2"
+      }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.s390x"
+      "evra": "0.3.14-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libxmlb"
+      }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.s390x"
+      "evra": "0.2.5-12.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libyaml"
+      }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.s390x"
+      "evra": "1.5.5-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.s390x"
+      "evra": "2.5.1-36.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "linux-atm"
+      }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.s390x"
+      "evra": "0.9.31-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lmdb"
+      }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.s390x"
+      "evra": "3.21.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "logrotate"
+      }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.s390x"
+      "evra": "4.96.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lsof"
+      }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.s390x"
+      "evra": "5.4.6-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lua"
+      }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.s390x"
+      "evra": "9-16.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.s390x"
+      "evra": "2.03.22-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.s390x"
+      "evra": "2.03.22-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.s390x"
+      "evra": "1.9.4-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lz4"
+      }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.s390x"
+      "evra": "2.10-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "lzo"
+      }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.s390x"
+      "evra": "4.2-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "mdadm"
+      }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.s390x"
+      "evra": "24.0.5-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "moby-engine"
+      }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.s390x"
+      "evra": "4.2.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "mpfr"
+      }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nano": {
-      "evra": "7.2-4.fc39.s390x"
+      "evra": "7.2-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch"
+      "evra": "7.2-4.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.s390x"
+      "evra": "6.4-7.20230520.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.s390x"
+      "evra": "6.4-7.20230520.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.s390x"
+      "evra": "2.0-0.67.20160912git.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "net-tools"
+      }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.s390x"
+      "evra": "1.8.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "netavark"
+      }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.s390x"
+      "evra": "3.9.1-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nettle"
+      }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.s390x"
+      "evra": "0.52.23-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "newt"
+      }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.s390x"
+      "evra": "1:2.6.4-0.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.s390x"
+      "evra": "1:1.0.7-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nftables"
+      }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.s390x"
+      "evra": "2.2.15-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nmstate"
+      }
     },
     "npth": {
-      "evra": "1.6-14.fc39.s390x"
+      "evra": "1.6-14.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "npth"
+      }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.s390x"
+      "evra": "2.23.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nss-altfiles"
+      }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.s390x"
+      "evra": "2.6-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "nvme-cli"
+      }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.s390x"
+      "evra": "6.9.9-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "oniguruma"
+      }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.s390x"
+      "evra": "2.6.6-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openldap"
+      }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.s390x"
+      "evra": "9.3p1-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.s390x"
+      "evra": "9.3p1-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.s390x"
+      "evra": "9.3p1-9.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.s390x"
+      "evra": "1:3.1.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.s390x"
+      "evra": "1:3.1.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.s390x"
+      "evra": "2023.7-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.s390x"
+      "evra": "2023.7-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.s390x"
+      "evra": "0.25.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.s390x"
+      "evra": "0.25.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.s390x"
+      "evra": "1.5.3-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.s390x"
+      "evra": "1.5.3-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.s390x"
+      "evra": "0^20231119.g4f1709d-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passwd": {
-      "evra": "0.80-15.fc39.s390x"
+      "evra": "0.80-15.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "passwd"
+      }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.s390x"
+      "evra": "10.42-1.fc39.2.s390x",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch"
+      "evra": "10.42-1.fc39.2.noarch",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.s390x"
+      "evra": "2.8-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pigz"
+      }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.s390x"
+      "evra": "1.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch"
+      "evra": "1.9.5-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.s390x"
+      "evra": "1.9.5-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.s390x"
+      "evra": "5:4.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.s390x"
+      "evra": "5:4.8.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.s390x"
+      "evra": "3.5-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "policycoreutils"
+      }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.s390x"
+      "evra": "123-1.fc39.1.s390x",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.s390x"
+      "evra": "123-1.fc39.1.s390x",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.s390x"
+      "evra": "0.1-26.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "polkit-pkla-compat"
+      }
     },
     "popt": {
-      "evra": "1.19-3.fc39.s390x"
+      "evra": "1.19-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "popt"
+      }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.s390x"
+      "evra": "4.0.3-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "procps-ng"
+      }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.s390x"
+      "evra": "1.4.1-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "protobuf-c"
+      }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.s390x"
+      "evra": "23.6-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "psmisc"
+      }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch"
+      "evra": "20230812-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "publicsuffix-list"
+      }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.s390x"
+      "evra": "2:8.1.1-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "qemu"
+      }
     },
     "readline": {
-      "evra": "8.2-4.fc39.s390x"
+      "evra": "8.2-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "readline"
+      }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.s390x"
+      "evra": "1.2.6-4.rc2.fc39.1.s390x",
+      "metadata": {
+        "sourcerpm": "rpcbind"
+      }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.s390x"
+      "evra": "4.19.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.s390x"
+      "evra": "4.19.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.s390x"
+      "evra": "2023.10-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.s390x"
+      "evra": "2023.10-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.s390x"
+      "evra": "4.19.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.s390x"
+      "evra": "1.5.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-rpm-sequoia"
+      }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.s390x"
+      "evra": "3.2.7-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rsync"
+      }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.s390x"
+      "evra": "2:1.1.8-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "runc"
+      }
     },
     "s390utils-core": {
-      "evra": "2:2.29.0-4.fc39.s390x"
+      "evra": "2:2.29.0-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "s390utils"
+      }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.s390x"
+      "evra": "2:4.19.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "sed": {
-      "evra": "4.8-14.fc39.s390x"
+      "evra": "4.8-14.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sed"
+      }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch"
+      "evra": "2.14.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "setup"
+      }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.s390x"
+      "evra": "1.46-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.s390x"
+      "evra": "1.46-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.s390x"
+      "evra": "2:4.14.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.s390x"
+      "evra": "2:4.14.0-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.s390x"
+      "evra": "2.2-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "shared-mime-info"
+      }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.s390x"
+      "evra": "1:1.13.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "skopeo"
+      }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.s390x"
+      "evra": "2.3.3-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "slang"
+      }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.s390x"
+      "evra": "1.2.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "slirp4netns"
+      }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.s390x"
+      "evra": "1.1.10-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "snappy"
+      }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.s390x"
+      "evra": "1.7.4.4-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "socat"
+      }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.s390x"
+      "evra": "3.42.0-7.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sqlite"
+      }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.s390x"
+      "evra": "4.6.1-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "squashfs-tools"
+      }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.s390x"
+      "evra": "0.1.4-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-ssh-key-dir"
+      }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.s390x"
+      "evra": "2.9.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.s390x"
+      "evra": "1.16-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "stalld"
+      }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.s390x"
+      "evra": "1.9.14-1.p3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "sudo"
+      }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.s390x"
+      "evra": "254.7-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.s390x"
+      "evra": "2:1.35-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "tar"
+      }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.s390x"
+      "evra": "1.32-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.s390x"
+      "evra": "0.0.99.4-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "toolbox"
+      }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.s390x"
+      "evra": "5.5-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "tpm2-tools"
+      }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.s390x"
+      "evra": "4.0.1-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch"
+      "evra": "2023c-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "tzdata"
+      }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.s390x"
+      "evra": "0.14.0-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "userspace-rcu"
+      }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.s390x"
+      "evra": "2.39.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "veritysetup": {
-      "evra": "2.6.1-3.fc39.s390x"
+      "evra": "2.6.1-3.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.s390x"
+      "evra": "2:9.0.2120-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "which": {
-      "evra": "2.21-40.fc39.s390x"
+      "evra": "2.21-40.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "which"
+      }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.s390x"
+      "evra": "1.0.20210914-5.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "wireguard-tools"
+      }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.s390x"
+      "evra": "6.4.0-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "xfsprogs"
+      }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.s390x"
+      "evra": "0.8.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "xxhash"
+      }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.s390x"
+      "evra": "5.4.4-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.s390x"
+      "evra": "5.4.4-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.s390x"
+      "evra": "2.1.0-22.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "yajl"
+      }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.s390x"
+      "evra": "1.3.2-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "zchunk"
+      }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.s390x"
+      "evra": "0.0.25-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-zincati"
+      }
     },
     "zlib": {
-      "evra": "1.2.13-4.fc39.s390x"
+      "evra": "1.2.13-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "zlib"
+      }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.s390x"
+      "evra": "1.1.2-8.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-zram-generator"
+      }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.s390x"
+      "evra": "1.5.5-4.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     }
   },
   "metadata": {
-    "generated": "2023-12-02T00:00:00Z",
+    "generated": "2023-12-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T01:11:31Z"
+        "generated": "2023-12-02T23:11:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-02T01:16:14Z"
+        "generated": "2023-12-04T01:26:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4999d3f3cc..2b7b5d1fe2 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,1310 +1,2603 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.x86_64"
+      "evra": "1:1.44.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "NetworkManager"
+      }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch"
+      "evra": "2.9.1.1-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "WALinuxAgent"
+      }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "aardvark-dns"
+      }
     },
     "acl": {
-      "evra": "2.3.1-8.fc39.x86_64"
+      "evra": "2.3.1-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.x86_64"
+      "evra": "0.9.2-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "adcli"
+      }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.x86_64"
+      "evra": "5.4.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.x86_64"
+      "evra": "5.4.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-afterburn"
+      }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.x86_64"
+      "evra": "1.25-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "chkconfig"
+      }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "amd-ucode-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.x86_64"
+      "evra": "2.5.1-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.x86_64"
+      "evra": "3.1.2-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.x86_64"
+      "evra": "3.1.2-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.x86_64"
+      "evra": "1.4.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.x86_64"
+      "evra": "1.4.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "authselect"
+      }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.x86_64"
+      "evra": "0.8-24.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "avahi"
+      }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch"
+      "evra": "11-18.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "basesystem"
+      }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.x86_64"
+      "evra": "5.2.21-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bash"
+      }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch"
+      "evra": "0.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "shell-color-prompt"
+      }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch"
+      "evra": "1:2.11-12.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bash-completion"
+      }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.x86_64"
+      "evra": "32:9.18.20-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch"
+      "evra": "32:9.18.20-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.x86_64"
+      "evra": "32:9.18.20-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bind"
+      }
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc39.x86_64"
+      "evra": "0.2.12-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-bootupd"
+      }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.x86_64"
+      "evra": "3.7.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.x86_64"
+      "evra": "6.6.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "btrfs-progs"
+      }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.x86_64"
+      "evra": "0.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bubblewrap"
+      }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.x86_64"
+      "evra": "1.0.8-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.x86_64"
+      "evra": "1.0.8-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "bzip2"
+      }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.x86_64"
+      "evra": "1.21.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "c-ares"
+      }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch"
+      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ca-certificates"
+      }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.x86_64"
+      "evra": "0.1.7-18.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "catatonit"
+      }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.x86_64"
+      "evra": "4.4-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "chrony"
+      }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.x86_64"
+      "evra": "7.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cifs-utils"
+      }
     },
     "clevis": {
-      "evra": "19-4.fc39.x86_64"
+      "evra": "19-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.x86_64"
+      "evra": "19-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.x86_64"
+      "evra": "19-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.x86_64"
+      "evra": "19-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "clevis"
+      }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch"
+      "evra": "0.33-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "cloud-utils"
+      }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.x86_64"
+      "evra": "2:2.1.8-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "conmon"
+      }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch"
+      "evra": "0.21.3-6.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "console-login-helper-messages"
+      }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch"
+      "evra": "2:2.224.0-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "container-selinux"
+      }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.x86_64"
+      "evra": "1.6.19-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "containerd"
+      }
     },
     "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.x86_64"
+      "evra": "1.3.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "containernetworking-plugins"
+      }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch"
+      "evra": "4:1-95.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "containers-common"
+      }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.x86_64"
+      "evra": "0.18.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.x86_64"
+      "evra": "0.18.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-coreos-installer"
+      }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.x86_64"
+      "evra": "9.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.x86_64"
+      "evra": "9.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "coreutils"
+      }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.x86_64"
+      "evra": "2.14-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cpio"
+      }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.x86_64"
+      "evra": "2.9.11-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cracklib"
+      }
     },
     "criu": {
-      "evra": "3.18-3.fc39.x86_64"
+      "evra": "3.18-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.x86_64"
+      "evra": "3.18-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "criu"
+      }
     },
     "crun": {
-      "evra": "1.12-1.fc39.x86_64"
+      "evra": "1.12-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crun-wasm": {
-      "evra": "1.12-1.fc39.x86_64"
+      "evra": "1.12-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "crun"
+      }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch"
+      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "crypto-policies"
+      }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.x86_64"
+      "evra": "2.6.1-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.x86_64"
+      "evra": "2.6.1-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cryptsetup"
+      }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.x86_64"
+      "evra": "8.2.1-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.x86_64"
+      "evra": "2.1.28-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.x86_64"
+      "evra": "2.1.28-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "cyrus-sasl"
+      }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.x86_64"
+      "evra": "1:1.14.10-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.x86_64"
+      "evra": "33-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dbus-broker"
+      }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch"
+      "evra": "1:1.14.10-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.x86_64"
+      "evra": "1:1.14.10-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dbus"
+      }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.x86_64"
+      "evra": "1.02.196-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.x86_64"
+      "evra": "1.0.6-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "device-mapper-persistent-data"
+      }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.x86_64"
+      "evra": "3.10-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "diffutils"
+      }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.x86_64"
+      "evra": "2.89-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dnsmasq"
+      }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.x86_64"
+      "evra": "4.2-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dosfstools"
+      }
     },
     "dracut": {
-      "evra": "059-16.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.x86_64"
+      "evra": "059-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "dracut"
+      }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.x86_64"
+      "evra": "2.7.0-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "duktape"
+      }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "efi-filesystem": {
-      "evra": "5-9.fc39.noarch"
+      "evra": "5-9.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "efi-rpm-macros"
+      }
     },
     "efibootmgr": {
-      "evra": "18-4.fc39.x86_64"
+      "evra": "18-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "efibootmgr"
+      }
     },
     "efivar-libs": {
-      "evra": "38-8.fc39.x86_64"
+      "evra": "38-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "efivar"
+      }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch"
+      "evra": "0.190-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.x86_64"
+      "evra": "0.190-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.x86_64"
+      "evra": "0.190-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "elfutils"
+      }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.x86_64"
+      "evra": "2:6.6-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ethtool"
+      }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.x86_64"
+      "evra": "2.5.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "expat"
+      }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch"
+      "evra": "39-34.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-release"
+      }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch"
+      "evra": "39-1.noarch",
+      "metadata": {
+        "sourcerpm": "fedora-repos"
+      }
     },
     "file": {
-      "evra": "5.44-5.fc39.x86_64"
+      "evra": "5.44-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.x86_64"
+      "evra": "5.44-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "file"
+      }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.x86_64"
+      "evra": "3.18-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "filesystem"
+      }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.x86_64"
+      "evra": "1:4.9.0-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "findutils"
+      }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.x86_64"
+      "evra": "1.15.6-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "flatpak"
+      }
     },
     "fmt": {
-      "evra": "10.0.0-3.fc39.x86_64"
+      "evra": "10.0.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fmt"
+      }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.x86_64"
+      "evra": "0.6.1-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fstrm"
+      }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.x86_64"
+      "evra": "2.9.9-17.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.x86_64"
+      "evra": "2.9.9-17.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse"
+      }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.x86_64"
+      "evra": "1.12-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse-overlayfs"
+      }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.x86_64"
+      "evra": "3.7.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse-sshfs"
+      }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.x86_64"
+      "evra": "3.16.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fuse3"
+      }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.x86_64"
+      "evra": "1.9.9-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "fwupd"
+      }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.x86_64"
+      "evra": "5.2.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gawk"
+      }
     },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.x86_64"
+      "evra": "1:1.23-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.x86_64"
+      "evra": "1.0.9-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gdisk"
+      }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.x86_64"
+      "evra": "0.22-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.x86_64"
+      "evra": "0.22-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.x86_64"
+      "evra": "0.22-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gettext"
+      }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.x86_64"
+      "evra": "2.43.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "git"
+      }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.x86_64"
+      "evra": "2.78.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "glib2"
+      }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.x86_64"
+      "evra": "2.38-11.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "glibc"
+      }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.x86_64"
+      "evra": "1:6.2.1-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gmp"
+      }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.x86_64"
+      "evra": "2.4.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gnupg2"
+      }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.x86_64"
+      "evra": "3.8.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gnutls"
+      }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc39.noarch"
+      "evra": "20230929.00-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "google-compute-engine-guest-configs"
+      }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.x86_64"
+      "evra": "1.20.0-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gpgme"
+      }
     },
     "grep": {
-      "evra": "3.11-3.fc39.x86_64"
+      "evra": "3.11-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "grep"
+      }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-109.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-pc": {
-      "evra": "1:2.06-109.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-109.fc39.noarch"
+      "evra": "1:2.06-109.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.x86_64"
+      "evra": "1:2.06-109.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "grub2"
+      }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.x86_64"
+      "evra": "6:0.7.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gvisor-tap-vsock"
+      }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.x86_64"
+      "evra": "1.12-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gzip"
+      }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.x86_64"
+      "evra": "3.23-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "hostname"
+      }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.x86_64"
+      "evra": "2.17.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ignition"
+      }
     },
     "inih": {
-      "evra": "57-2.fc39.x86_64"
+      "evra": "57-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "inih"
+      }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.x86_64"
+      "evra": "1.0.3-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ipcalc"
+      }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.x86_64"
+      "evra": "6.4.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.x86_64"
+      "evra": "6.4.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iproute"
+      }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch"
+      "evra": "1.8.9-5.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.x86_64"
+      "evra": "1.8.9-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iptables"
+      }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.x86_64"
+      "evra": "20221126-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iputils"
+      }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.x86_64"
+      "evra": "2:1.9.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "irqbalance"
+      }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64"
+      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "iscsi-initiator-utils"
+      }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.x86_64"
+      "evra": "0.101-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "isns-utils"
+      }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.x86_64"
+      "evra": "2.13.1-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "jansson"
+      }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.x86_64"
+      "evra": "5.3.0-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "jemalloc"
+      }
     },
     "jose": {
-      "evra": "11-8.fc39.x86_64"
+      "evra": "11-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "jq": {
-      "evra": "1.6-17.fc39.x86_64"
+      "evra": "1.6-17.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "jq"
+      }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.x86_64"
+      "evra": "0.17-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "json-c"
+      }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "json-glib"
+      }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.x86_64"
+      "evra": "2.6.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch"
+      "evra": "2.6.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "kbd"
+      }
     },
     "kernel": {
-      "evra": "6.6.2-201.fc39.x86_64"
+      "evra": "6.6.3-200.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-core": {
-      "evra": "6.6.2-201.fc39.x86_64"
+      "evra": "6.6.3-200.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules": {
-      "evra": "6.6.2-201.fc39.x86_64"
+      "evra": "6.6.3-200.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kernel-modules-core": {
-      "evra": "6.6.2-201.fc39.x86_64"
+      "evra": "6.6.3-200.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kernel"
+      }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.x86_64"
+      "evra": "2.0.27-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kexec-tools"
+      }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.x86_64"
+      "evra": "1.6.1-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.x86_64"
+      "evra": "1.6.1-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "keyutils"
+      }
     },
     "kmod": {
-      "evra": "30-6.fc39.x86_64"
+      "evra": "30-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.x86_64"
+      "evra": "30-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "kmod"
+      }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.x86_64"
+      "evra": "0.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "device-mapper-multipath"
+      }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.x86_64"
+      "evra": "1.21.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "krb5"
+      }
     },
     "less": {
-      "evra": "633-2.fc39.x86_64"
+      "evra": "633-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "less"
+      }
     },
     "libacl": {
-      "evra": "2.3.1-8.fc39.x86_64"
+      "evra": "2.3.1-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "acl"
+      }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.x86_64"
+      "evra": "0.3.111-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libaio"
+      }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.x86_64"
+      "evra": "3.7.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libarchive"
+      }
     },
     "libargon2": {
-      "evra": "20190702-3.fc39.x86_64"
+      "evra": "20190702-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "argon2"
+      }
     },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.x86_64"
+      "evra": "2.5.6-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libassuan"
+      }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.x86_64"
+      "evra": "2.5.1-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "attr"
+      }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.x86_64"
+      "evra": "0.1.1-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.x86_64"
+      "evra": "2:1.1.0-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libbpf"
+      }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.x86_64"
+      "evra": "0.11.7-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libbsd"
+      }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.x86_64"
+      "evra": "2.48-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libcap"
+      }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.x86_64"
+      "evra": "0.8.3-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libcap-ng"
+      }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.x86_64"
+      "evra": "0.10.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libcbor"
+      }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.x86_64"
+      "evra": "0.7.0-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.x86_64"
+      "evra": "8.2.1-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "curl"
+      }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.x86_64"
+      "evra": "0.14-26.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libdaemon"
+      }
     },
     "libdb": {
-      "evra": "5.3.28-56.fc39.x86_64"
+      "evra": "5.3.28-56.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libdb"
+      }
     },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.x86_64"
+      "evra": "0.5.0-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.x86_64"
+      "evra": "0.5.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libeconf"
+      }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.x86_64"
+      "evra": "3.1-48.20230828cvs.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libedit"
+      }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.x86_64"
+      "evra": "2.1.12-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libevent"
+      }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.x86_64"
+      "evra": "3.4.4-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libffi"
+      }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.x86_64"
+      "evra": "1.13.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libfido2"
+      }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.x86_64"
+      "evra": "13.2.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.x86_64"
+      "evra": "1.10.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libgcrypt"
+      }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.x86_64"
+      "evra": "1.47-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libgpg-error"
+      }
     },
     "libgudev": {
-      "evra": "238-2.fc39.x86_64"
+      "evra": "238-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libgudev"
+      }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.x86_64"
+      "evra": "0.4.8-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libgusb"
+      }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.x86_64"
+      "evra": "46.0-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rdma-core"
+      }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.x86_64"
+      "evra": "73.2-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "icu"
+      }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.x86_64"
+      "evra": "2.3.4-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libidn2"
+      }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.x86_64"
+      "evra": "1.3.1-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.x86_64"
+      "evra": "0.1.14-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libjcat"
+      }
     },
     "libjose": {
-      "evra": "11-8.fc39.x86_64"
+      "evra": "11-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "jose"
+      }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.x86_64"
+      "evra": "1.4.0-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.x86_64"
+      "evra": "1.4.0-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libkcapi"
+      }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.x86_64"
+      "evra": "1.6.4-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libksba"
+      }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.x86_64"
+      "evra": "2.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libldb"
+      }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.x86_64"
+      "evra": "9-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.x86_64"
+      "evra": "1.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libmaxminddb"
+      }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.x86_64"
+      "evra": "1.1.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libmd"
+      }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.x86_64"
+      "evra": "1.0.5-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libmnl"
+      }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.x86_64"
+      "evra": "2.15.0-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libmodulemd"
+      }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.x86_64"
+      "evra": "1.8-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libndp"
+      }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.x86_64"
+      "evra": "1.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnet"
+      }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.x86_64"
+      "evra": "1.0.9-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnetfilter_conntrack"
+      }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.x86_64"
+      "evra": "1.0.1-24.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnfnetlink"
+      }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.x86_64"
+      "evra": "1:2.6.4-0.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.x86_64"
+      "evra": "1.2.6-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnftnl"
+      }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.x86_64"
+      "evra": "1.55.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nghttp2"
+      }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.x86_64"
+      "evra": "3.8.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.x86_64"
+      "evra": "3.8.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnl3"
+      }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.x86_64"
+      "evra": "2.0.0-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnsl2"
+      }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.x86_64"
+      "evra": "1.6-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libnvme"
+      }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.x86_64"
+      "evra": "0.2.1-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.x86_64"
+      "evra": "14:1.10.4-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libpcap"
+      }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.x86_64"
+      "evra": "0.21.2-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libpsl"
+      }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.x86_64"
+      "evra": "1.4.5-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libpwquality"
+      }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.x86_64"
+      "evra": "0.1.5-54.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ding-libs"
+      }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.x86_64"
+      "evra": "1.17.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "librepo"
+      }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch"
+      "evra": "2.17.11-3.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "libreport"
+      }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.x86_64"
+      "evra": "2.5.3-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libseccomp"
+      }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.x86_64"
+      "evra": "3.5-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.x86_64"
+      "evra": "3.5-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libselinux"
+      }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.x86_64"
+      "evra": "3.5-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libsemanage"
+      }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.x86_64"
+      "evra": "3.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libsepol"
+      }
     },
     "libsigsegv": {
-      "evra": "2.14-5.fc39.x86_64"
+      "evra": "2.14-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libsigsegv"
+      }
     },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.x86_64"
+      "evra": "4.7.0-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libslirp"
+      }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.x86_64"
+      "evra": "0.7.25-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libsolv"
+      }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.x86_64"
+      "evra": "1.47.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "e2fsprogs"
+      }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.x86_64"
+      "evra": "13.2.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "gcc"
+      }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.x86_64"
+      "evra": "2.4.1-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtalloc"
+      }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.x86_64"
+      "evra": "4.19.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtasn1"
+      }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.x86_64"
+      "evra": "1.4.9-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtdb"
+      }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.x86_64"
+      "evra": "1.32-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.x86_64"
+      "evra": "0.15.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtevent"
+      }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.x86_64"
+      "evra": "1.3.4-0.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtirpc"
+      }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.x86_64"
+      "evra": "2.4.7-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libtool"
+      }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.x86_64"
+      "evra": "1.1-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libunistring"
+      }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.x86_64"
+      "evra": "1.0.26-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libusb1"
+      }
     },
     "libuser": {
-      "evra": "0.64-4.fc39.x86_64"
+      "evra": "0.64-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libuser"
+      }
     },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.x86_64"
+      "evra": "1.2.1-10.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libutempter"
+      }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.x86_64"
+      "evra": "1:1.47.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libuv"
+      }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.x86_64"
+      "evra": "0.3.2-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libverto"
+      }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.x86_64"
+      "evra": "4.4.36-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libxcrypt"
+      }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.x86_64"
+      "evra": "2.10.4-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libxml2"
+      }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.x86_64"
+      "evra": "0.3.14-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libxmlb"
+      }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.x86_64"
+      "evra": "0.2.5-12.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libyaml"
+      }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.x86_64"
+      "evra": "1.5.5-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     },
     "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.x86_64"
+      "evra": "2.5.1-36.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "linux-atm"
+      }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.x86_64"
+      "evra": "0.9.31-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lmdb"
+      }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.x86_64"
+      "evra": "3.21.0-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "logrotate"
+      }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.x86_64"
+      "evra": "4.96.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lsof"
+      }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.x86_64"
+      "evra": "5.4.6-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lua"
+      }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.x86_64"
+      "evra": "9-16.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "luksmeta"
+      }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.x86_64"
+      "evra": "2.03.22-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.x86_64"
+      "evra": "2.03.22-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lvm2"
+      }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.x86_64"
+      "evra": "1.9.4-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lz4"
+      }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.x86_64"
+      "evra": "2.10-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "lzo"
+      }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.x86_64"
+      "evra": "4.2-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "mdadm"
+      }
     },
     "microcode_ctl": {
-      "evra": "2:2.1-58.fc39.x86_64"
+      "evra": "2:2.1-58.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "microcode_ctl"
+      }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.x86_64"
+      "evra": "24.0.5-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "moby-engine"
+      }
     },
     "mokutil": {
-      "evra": "2:0.6.0-7.fc39.x86_64"
+      "evra": "2:0.6.0-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "mokutil"
+      }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.x86_64"
+      "evra": "4.2.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "mpfr"
+      }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nano": {
-      "evra": "7.2-4.fc39.x86_64"
+      "evra": "7.2-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch"
+      "evra": "7.2-4.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "nano"
+      }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.x86_64"
+      "evra": "6.4-7.20230520.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch"
+      "evra": "6.4-7.20230520.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.x86_64"
+      "evra": "6.4-7.20230520.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ncurses"
+      }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.x86_64"
+      "evra": "2.0-0.67.20160912git.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "net-tools"
+      }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.x86_64"
+      "evra": "1.8.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "netavark"
+      }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.x86_64"
+      "evra": "3.9.1-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nettle"
+      }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.x86_64"
+      "evra": "0.52.23-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "newt"
+      }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.x86_64"
+      "evra": "1:2.6.4-0.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nfs-utils"
+      }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.x86_64"
+      "evra": "1:1.0.7-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nftables"
+      }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.x86_64"
+      "evra": "2.2.15-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nmstate"
+      }
     },
     "npth": {
-      "evra": "1.6-14.fc39.x86_64"
+      "evra": "1.6-14.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "npth"
+      }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.x86_64"
+      "evra": "2.23.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nss-altfiles"
+      }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.x86_64"
+      "evra": "2.0.16-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "numactl"
+      }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.x86_64"
+      "evra": "2.6-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "nvme-cli"
+      }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.x86_64"
+      "evra": "6.9.9-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "oniguruma"
+      }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.x86_64"
+      "evra": "2.6.6-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openldap"
+      }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.x86_64"
+      "evra": "9.3p1-9.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openssh"
+      }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.x86_64"
+      "evra": "1:3.1.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.x86_64"
+      "evra": "1:3.1.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "openssl"
+      }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.x86_64"
+      "evra": "1.81-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "os-prober"
+      }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.x86_64"
+      "evra": "2023.7-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.x86_64"
+      "evra": "2023.7-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "ostree"
+      }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.x86_64"
+      "evra": "0.25.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.x86_64"
+      "evra": "0.25.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "p11-kit"
+      }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.x86_64"
+      "evra": "1.5.3-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.x86_64"
+      "evra": "1.5.3-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pam"
+      }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.x86_64"
+      "evra": "0^20231119.g4f1709d-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch"
+      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "passt"
+      }
     },
     "passwd": {
-      "evra": "0.80-15.fc39.x86_64"
+      "evra": "0.80-15.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "passwd"
+      }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.x86_64"
+      "evra": "10.42-1.fc39.2.x86_64",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch"
+      "evra": "10.42-1.fc39.2.noarch",
+      "metadata": {
+        "sourcerpm": "pcre2"
+      }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.x86_64"
+      "evra": "2.8-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pigz"
+      }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch"
+      "evra": "1.9.5-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.x86_64"
+      "evra": "1.9.5-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "pkgconf"
+      }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.x86_64"
+      "evra": "5:4.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.x86_64"
+      "evra": "5:4.8.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "podman"
+      }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.x86_64"
+      "evra": "3.5-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "policycoreutils"
+      }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.x86_64"
+      "evra": "123-1.fc39.1.x86_64",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.x86_64"
+      "evra": "123-1.fc39.1.x86_64",
+      "metadata": {
+        "sourcerpm": "polkit"
+      }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.x86_64"
+      "evra": "0.1-26.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "polkit-pkla-compat"
+      }
     },
     "popt": {
-      "evra": "1.19-3.fc39.x86_64"
+      "evra": "1.19-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "popt"
+      }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.x86_64"
+      "evra": "4.0.3-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "procps-ng"
+      }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.x86_64"
+      "evra": "1.4.1-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "protobuf-c"
+      }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.x86_64"
+      "evra": "23.6-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "psmisc"
+      }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch"
+      "evra": "20230812-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "publicsuffix-list"
+      }
     },
     "readline": {
-      "evra": "8.2-4.fc39.x86_64"
+      "evra": "8.2-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "readline"
+      }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch"
+      "evra": "20231111-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.x86_64"
+      "evra": "1.2.6-4.rc2.fc39.1.x86_64",
+      "metadata": {
+        "sourcerpm": "rpcbind"
+      }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.x86_64"
+      "evra": "2023.10-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.x86_64"
+      "evra": "2023.10-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rpm-ostree"
+      }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.x86_64"
+      "evra": "4.19.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rpm"
+      }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.x86_64"
+      "evra": "1.5.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-rpm-sequoia"
+      }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.x86_64"
+      "evra": "3.2.7-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rsync"
+      }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.x86_64"
+      "evra": "2:1.1.8-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "runc"
+      }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch"
+      "evra": "2:4.19.3-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.x86_64"
+      "evra": "2:4.19.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "samba"
+      }
     },
     "sed": {
-      "evra": "4.8-14.fc39.x86_64"
+      "evra": "4.8-14.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sed"
+      }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch"
+      "evra": "39.2-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "selinux-policy"
+      }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch"
+      "evra": "2.14.4-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "setup"
+      }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.x86_64"
+      "evra": "1.46-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.x86_64"
+      "evra": "1.46-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sg3_utils"
+      }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.x86_64"
+      "evra": "2:4.14.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.x86_64"
+      "evra": "2:4.14.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "shadow-utils"
+      }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.x86_64"
+      "evra": "2.2-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "shared-mime-info"
+      }
     },
     "shim-x64": {
-      "evra": "15.6-2.x86_64"
+      "evra": "15.6-2.x86_64",
+      "metadata": {
+        "sourcerpm": "shim"
+      }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.x86_64"
+      "evra": "1:1.13.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "skopeo"
+      }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.x86_64"
+      "evra": "2.3.3-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "slang"
+      }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.x86_64"
+      "evra": "1.2.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "slirp4netns"
+      }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.x86_64"
+      "evra": "1.1.10-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "snappy"
+      }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.x86_64"
+      "evra": "1.7.4.4-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "socat"
+      }
     },
     "spdlog": {
-      "evra": "1.12.0-2.fc39.x86_64"
+      "evra": "1.12.0-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "spdlog"
+      }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.x86_64"
+      "evra": "3.42.0-7.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sqlite"
+      }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.x86_64"
+      "evra": "4.6.1-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "squashfs-tools"
+      }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.x86_64"
+      "evra": "0.1.4-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-ssh-key-dir"
+      }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.x86_64"
+      "evra": "2.9.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sssd"
+      }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.x86_64"
+      "evra": "1.16-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "stalld"
+      }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.x86_64"
+      "evra": "1.9.14-1.p3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "sudo"
+      }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.x86_64"
+      "evra": "254.7-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "systemd"
+      }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.x86_64"
+      "evra": "2:1.35-2.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "tar"
+      }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.x86_64"
+      "evra": "1.32-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "libteam"
+      }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.x86_64"
+      "evra": "0.0.99.4-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "toolbox"
+      }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.x86_64"
+      "evra": "5.5-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "tpm2-tools"
+      }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.x86_64"
+      "evra": "4.0.1-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch"
+      "evra": "2023c-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "tzdata"
+      }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.x86_64"
+      "evra": "0.14.0-3.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "userspace-rcu"
+      }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.x86_64"
+      "evra": "2.39.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "util-linux"
+      }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch"
+      "evra": "2:9.0.2120-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.x86_64"
+      "evra": "2:9.0.2120-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "vim"
+      }
     },
     "wasmedge-rt": {
-      "evra": "0.13.5-1.fc39.x86_64"
+      "evra": "0.13.5-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "wasmedge"
+      }
     },
     "which": {
-      "evra": "2.21-40.fc39.x86_64"
+      "evra": "2.21-40.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "which"
+      }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.x86_64"
+      "evra": "1.0.20210914-5.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "wireguard-tools"
+      }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.x86_64"
+      "evra": "6.4.0-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "xfsprogs"
+      }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.x86_64"
+      "evra": "0.8.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "xxhash"
+      }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.x86_64"
+      "evra": "5.4.4-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.x86_64"
+      "evra": "5.4.4-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "xz"
+      }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.x86_64"
+      "evra": "2.1.0-22.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "yajl"
+      }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.x86_64"
+      "evra": "1.3.2-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "zchunk"
+      }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.x86_64"
+      "evra": "0.0.25-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-zincati"
+      }
     },
     "zlib": {
-      "evra": "1.2.13-4.fc39.x86_64"
+      "evra": "1.2.13-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "zlib"
+      }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.x86_64"
+      "evra": "1.1.2-8.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "rust-zram-generator"
+      }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.x86_64"
+      "evra": "1.5.5-4.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "zstd"
+      }
     }
   },
   "metadata": {
-    "generated": "2023-12-02T00:00:00Z",
+    "generated": "2023-12-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T01:12:46Z"
+        "generated": "2023-12-02T23:12:44Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-02T01:16:19Z"
+        "generated": "2023-12-04T01:26:33Z"
       }
     }
   }

From 3600e5e3aa18e1d3717f5fa5eafaa802d83739c2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 4 Dec 2023 20:44:28 +0000
Subject: [PATCH 1940/2157] overrides: pin podman-4.7.2-1.fc39

---
 manifest-lock.overrides.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 5fb815abff..22391141b1 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -14,6 +14,16 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
+  podman:
+    evr: 5:4.7.2-1.fc39
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
+      type: pin
+  podman-plugins:
+    evr: 5:4.7.2-1.fc39
+    metadata:
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
+      type: pin
   zincati:
     evr: 0.0.25-6.fc39
     metadata:

From e93651754737a7d0ab15a141fa2e0947e48f26f2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 5 Dec 2023 23:12:04 +0000
Subject: [PATCH 1941/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/931/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0f75eb193b..536c9c61cf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -559,19 +559,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch",
+      "evra": "0.190-4.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.aarch64",
+      "evra": "0.190-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.aarch64",
+      "evra": "0.190-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2059,13 +2059,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.aarch64",
+      "evra": "5:4.7.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.aarch64",
+      "evra": "5:4.7.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-04T00:00:00Z",
+    "generated": "2023-12-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T23:12:10Z"
+        "generated": "2023-12-04T23:05:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-04T01:26:19Z"
+        "generated": "2023-12-05T01:31:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8e8265bff4..834dc4d6b1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -535,19 +535,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch",
+      "evra": "0.190-4.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.ppc64le",
+      "evra": "0.190-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.ppc64le",
+      "evra": "0.190-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2041,13 +2041,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.ppc64le",
+      "evra": "5:4.7.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.ppc64le",
+      "evra": "5:4.7.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2558,16 +2558,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-04T00:00:00Z",
+    "generated": "2023-12-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T23:11:34Z"
+        "generated": "2023-12-04T23:03:13Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-04T01:26:23Z"
+        "generated": "2023-12-05T01:31:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 96a0b5145b..55a5faa984 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -529,19 +529,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch",
+      "evra": "0.190-4.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.s390x",
+      "evra": "0.190-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.s390x",
+      "evra": "0.190-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -1951,13 +1951,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.s390x",
+      "evra": "5:4.7.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.s390x",
+      "evra": "5:4.7.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2462,16 +2462,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-04T00:00:00Z",
+    "generated": "2023-12-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T23:11:13Z"
+        "generated": "2023-12-04T23:02:53Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-04T01:26:28Z"
+        "generated": "2023-12-05T01:31:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2b7b5d1fe2..2315b76087 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -565,19 +565,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-1.fc39.noarch",
+      "evra": "0.190-4.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-1.fc39.x86_64",
+      "evra": "0.190-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-1.fc39.x86_64",
+      "evra": "0.190-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2077,13 +2077,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.0-1.fc39.x86_64",
+      "evra": "5:4.7.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.0-1.fc39.x86_64",
+      "evra": "5:4.7.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-04T00:00:00Z",
+    "generated": "2023-12-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-02T23:12:44Z"
+        "generated": "2023-12-04T23:04:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-04T01:26:33Z"
+        "generated": "2023-12-05T01:31:17Z"
       }
     }
   }

From 86f6a29b56828ebf7c3a72ac96500296789a9a67 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 5 Dec 2023 15:53:35 -0500
Subject: [PATCH 1942/2157] overrides: drop zincati pin

We've had the new zincati in `next` for a few cycles and we should
be able to drop the pin now in `testing`.
---
 manifest-lock.overrides.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 22391141b1..99671be997 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -24,8 +24,3 @@ packages:
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
       type: pin
-  zincati:
-    evr: 0.0.25-6.fc39
-    metadata:
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1608
-      type: pin

From ee153ebb3f0b79e4046cdcd102f355dfa05f4763 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 5 Dec 2023 15:56:10 -0500
Subject: [PATCH 1943/2157] overrides: fast-track podman-4.8.1-1.fc39

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1625
---
 manifest-lock.overrides.yaml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 99671be997..fc0f9286c6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,12 +15,14 @@ packages:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
       type: pin
   podman:
-    evr: 5:4.7.2-1.fc39
+    evr: 5:4.8.1-1.fc39
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e8cfbfbdd9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
-      type: pin
+      type: fast-track
   podman-plugins:
-    evr: 5:4.7.2-1.fc39
+    evr: 5:4.8.1-1.fc39
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e8cfbfbdd9
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
-      type: pin
+      type: fast-track

From 6ac76ef1e089a2e322c8eec8be4b6c521f94edc0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 6 Dec 2023 15:46:45 +0000
Subject: [PATCH 1944/2157] overrides: fast-track containerd-1.6.23-2.fc39

---
 manifest-lock.overrides.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index fc0f9286c6..a6b2bfa7b0 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,10 +10,11 @@
 
 packages:
   containerd:
-    evr: 1.6.19-2.fc39
+    evr: 1.6.23-2.fc39
     metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f3d6f65e2f
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-      type: pin
+      type: fast-track
   podman:
     evr: 5:4.8.1-1.fc39
     metadata:

From 76362abe815a6ec6c559745962064e7437030acc Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 6 Dec 2023 12:38:18 -0500
Subject: [PATCH 1945/2157] manifests: move `amd-ucode-firmware` to
 FCOS-specific manifest

This change hasn't hit RHCOS/C9S yet so we can't put it in a shared
manifest.

Add a test so we know when RHCOS gets it.

Fixes 898bf23a ("manifests: Explicitly include amd-ucode-firmware").
---
 manifests/bootable-rpm-ostree.yaml  |  1 -
 manifests/fedora-coreos-base.yaml   |  4 ++++
 tests/kola/files/amd-ucode-firmware | 17 +++++++++++++++++
 3 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100755 tests/kola/files/amd-ucode-firmware

diff --git a/manifests/bootable-rpm-ostree.yaml b/manifests/bootable-rpm-ostree.yaml
index 1cdd3810be..9d5faddbec 100644
--- a/manifests/bootable-rpm-ostree.yaml
+++ b/manifests/bootable-rpm-ostree.yaml
@@ -29,7 +29,6 @@ packages-s390x:
 packages-x86_64:
   - grub2 grub2-efi-x64 efibootmgr shim
   - microcode_ctl
-  - amd-ucode-firmware
 
 exclude-packages:
   # Exclude kernel-debug-core to make sure that it doesn't somehow get
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index f81e687999..490e62bc96 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -184,6 +184,10 @@ packages-x86_64:
   - irqbalance
   - google-compute-engine-guest-configs-udev
   - crun-wasm wasmedge-rt
+  # Include AMD microcode updates, see https://github.com/coreos/fedora-coreos-tracker/issues/1618.
+  # This normally should belong in bootable-rpm-ostree.yaml (alongside
+  # `microcode_ctl`), but this change hasn't hit RHCOS yet.
+  - amd-ucode-firmware
 packages-ppc64le:
   - irqbalance
   - librtas
diff --git a/tests/kola/files/amd-ucode-firmware b/tests/kola/files/amd-ucode-firmware
new file mode 100755
index 0000000000..75d12cc41d
--- /dev/null
+++ b/tests/kola/files/amd-ucode-firmware
@@ -0,0 +1,17 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify that the host ships AMD microcode updates.
+
+# This will allow us to detect when the amd-ucode-firmware split happens in RHCOS:
+# https://github.com/coreos/fedora-coreos-tracker/issues/1618
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+if ! ls /usr/lib/firmware/amd-ucode/microcode*; then
+    fatal "no AMD microcode found on host"
+fi
+ok "found AMD microcode files"

From c5396ad1c27c842d7f4ad54903908f981c81917d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 7 Dec 2023 09:17:21 -0500
Subject: [PATCH 1946/2157] tests/kola/files/amd-ucode-firmware: limit to
 x86_64

This test is only relevant on x86_64.

Fixes 76362abe ("manifests: move `amd-ucode-firmware` to FCOS-specific
manifest").
---
 tests/kola/files/amd-ucode-firmware | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/kola/files/amd-ucode-firmware b/tests/kola/files/amd-ucode-firmware
index 75d12cc41d..64b16151c4 100755
--- a/tests/kola/files/amd-ucode-firmware
+++ b/tests/kola/files/amd-ucode-firmware
@@ -2,6 +2,7 @@
 ## kola:
 ##   exclusive: false
 ##   description: Verify that the host ships AMD microcode updates.
+##   architectures: x86_64
 
 # This will allow us to detect when the amd-ucode-firmware split happens in RHCOS:
 # https://github.com/coreos/fedora-coreos-tracker/issues/1618

From e2cc720238e9f0e67a1e9d0ec3c38cc30bfea771 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Dec 2023 06:05:51 +0000
Subject: [PATCH 1947/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 20 +-------------------
 1 file changed, 1 insertion(+), 19 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index a6b2bfa7b0..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,22 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  containerd:
-    evr: 1.6.23-2.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f3d6f65e2f
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-      type: fast-track
-  podman:
-    evr: 5:4.8.1-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e8cfbfbdd9
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
-      type: fast-track
-  podman-plugins:
-    evr: 5:4.8.1-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e8cfbfbdd9
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1625
-      type: fast-track
+packages: {}

From edd2372d35cf629bd51cfd42184323bf330ad595 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Dec 2023 00:09:26 +0000
Subject: [PATCH 1948/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/937/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 78 ++++++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 80 ++++++++++++++++++++------------------
 manifest-lock.s390x.json   | 70 ++++++++++++++++++---------------
 manifest-lock.x86_64.json  | 80 ++++++++++++++++++++------------------
 4 files changed, 166 insertions(+), 142 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 536c9c61cf..6cbce50408 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -223,7 +223,7 @@
       }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.aarch64",
+      "evra": "4.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "chrony"
       }
@@ -295,13 +295,13 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch",
+      "evra": "2:2.226.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.aarch64",
+      "evra": "1.6.23-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "containerd"
       }
@@ -325,13 +325,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.aarch64",
+      "evra": "0.18.0-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.aarch64",
+      "evra": "0.18.0-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -361,13 +361,13 @@
       }
     },
     "criu": {
-      "evra": "3.18-3.fc39.aarch64",
+      "evra": "3.19-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.aarch64",
+      "evra": "3.19-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "criu"
       }
@@ -715,7 +715,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.aarch64",
+      "evra": "1.9.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -769,25 +769,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.aarch64",
+      "evra": "2.38-14.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.aarch64",
+      "evra": "2.38-14.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.aarch64",
+      "evra": "2.38-14.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.aarch64",
+      "evra": "2.38-14.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -805,7 +805,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.aarch64",
+      "evra": "3.8.2-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -829,25 +829,25 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch",
+      "evra": "1:2.06-110.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-109.fc39.aarch64",
+      "evra": "1:2.06-110.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.aarch64",
+      "evra": "1:2.06-110.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.aarch64",
+      "evra": "1:2.06-110.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -1027,25 +1027,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.3-200.fc39.aarch64",
+      "evra": "6.6.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.3-200.fc39.aarch64",
+      "evra": "6.6.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.3-200.fc39.aarch64",
+      "evra": "6.6.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.3-200.fc39.aarch64",
+      "evra": "6.6.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1129,7 +1129,7 @@
       }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.aarch64",
+      "evra": "13.2.1-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.aarch64",
+      "evra": "13.2.1-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1555,7 +1555,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.aarch64",
+      "evra": "0.7.27-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1591,7 +1591,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.aarch64",
+      "evra": "13.2.1-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2059,13 +2059,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.aarch64",
+      "evra": "5:4.8.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.aarch64",
+      "evra": "5:4.8.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2161,13 +2161,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.aarch64",
+      "evra": "2023.11-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.aarch64",
+      "evra": "2023.11-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2179,7 +2179,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.aarch64",
+      "evra": "1.5.0-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2275,7 +2275,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.aarch64",
+      "evra": "1:1.14.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2455,7 +2455,13 @@
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.aarch64",
+      "evra": "4.0.1-6.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
+    },
+    "tpm2-tss-fapi": {
+      "evra": "4.0.1-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2551,7 +2557,7 @@
       }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.aarch64",
+      "evra": "0.0.27-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
@@ -2576,16 +2582,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-05T00:00:00Z",
+    "generated": "2023-12-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-04T23:05:30Z"
+        "generated": "2023-12-06T17:21:22Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-05T01:31:02Z"
+        "generated": "2023-12-08T01:30:51Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 834dc4d6b1..f62af8d649 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -223,7 +223,7 @@
       }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.ppc64le",
+      "evra": "4.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "chrony"
       }
@@ -295,13 +295,13 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch",
+      "evra": "2:2.226.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.ppc64le",
+      "evra": "1.6.23-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "containerd"
       }
@@ -325,13 +325,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.ppc64le",
+      "evra": "0.18.0-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.ppc64le",
+      "evra": "0.18.0-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -361,13 +361,13 @@
       }
     },
     "criu": {
-      "evra": "3.18-3.fc39.ppc64le",
+      "evra": "3.19-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.ppc64le",
+      "evra": "3.19-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "criu"
       }
@@ -685,7 +685,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.ppc64le",
+      "evra": "1.9.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -739,25 +739,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.ppc64le",
+      "evra": "2.38-14.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.ppc64le",
+      "evra": "2.38-14.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.ppc64le",
+      "evra": "2.38-14.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.ppc64le",
+      "evra": "2.38-14.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -775,7 +775,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.ppc64le",
+      "evra": "3.8.2-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -793,31 +793,31 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch",
+      "evra": "1:2.06-110.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-109.fc39.ppc64le",
+      "evra": "1:2.06-110.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-109.fc39.noarch",
+      "evra": "1:2.06-110.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.ppc64le",
+      "evra": "1:2.06-110.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.ppc64le",
+      "evra": "1:2.06-110.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -997,25 +997,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.3-200.fc39.ppc64le",
+      "evra": "6.6.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.3-200.fc39.ppc64le",
+      "evra": "6.6.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.3-200.fc39.ppc64le",
+      "evra": "6.6.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.3-200.fc39.ppc64le",
+      "evra": "6.6.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1099,7 +1099,7 @@
       }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.ppc64le",
+      "evra": "13.2.1-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1225,7 +1225,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.ppc64le",
+      "evra": "13.2.1-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1537,7 +1537,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.ppc64le",
+      "evra": "0.7.27-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1573,7 +1573,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.ppc64le",
+      "evra": "13.2.1-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2041,13 +2041,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.ppc64le",
+      "evra": "5:4.8.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.ppc64le",
+      "evra": "5:4.8.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2155,13 +2155,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.ppc64le",
+      "evra": "2023.11-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.ppc64le",
+      "evra": "2023.11-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2173,7 +2173,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.ppc64le",
+      "evra": "1.5.0-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2269,7 +2269,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.ppc64le",
+      "evra": "1:1.14.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2443,7 +2443,13 @@
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.ppc64le",
+      "evra": "4.0.1-6.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
+    },
+    "tpm2-tss-fapi": {
+      "evra": "4.0.1-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2533,7 +2539,7 @@
       }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.ppc64le",
+      "evra": "0.0.27-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
@@ -2558,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-05T00:00:00Z",
+    "generated": "2023-12-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-04T23:03:13Z"
+        "generated": "2023-12-06T17:19:20Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-05T01:31:07Z"
+        "generated": "2023-12-08T01:30:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 55a5faa984..9c48097273 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -217,7 +217,7 @@
       }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.s390x",
+      "evra": "4.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "chrony"
       }
@@ -289,13 +289,13 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch",
+      "evra": "2:2.226.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.s390x",
+      "evra": "1.6.23-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "containerd"
       }
@@ -319,13 +319,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.s390x",
+      "evra": "0.18.0-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.s390x",
+      "evra": "0.18.0-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -355,13 +355,13 @@
       }
     },
     "criu": {
-      "evra": "3.18-3.fc39.s390x",
+      "evra": "3.19-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.s390x",
+      "evra": "3.19-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "criu"
       }
@@ -679,7 +679,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.s390x",
+      "evra": "1.9.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -715,25 +715,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.s390x",
+      "evra": "2.38-14.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.s390x",
+      "evra": "2.38-14.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.s390x",
+      "evra": "2.38-14.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.s390x",
+      "evra": "2.38-14.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -751,7 +751,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.s390x",
+      "evra": "3.8.2-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -937,25 +937,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.3-200.fc39.s390x",
+      "evra": "6.6.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.3-200.fc39.s390x",
+      "evra": "6.6.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.3-200.fc39.s390x",
+      "evra": "6.6.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.3-200.fc39.s390x",
+      "evra": "6.6.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1039,7 +1039,7 @@
       }
     },
     "libatomic": {
-      "evra": "13.2.1-4.fc39.s390x",
+      "evra": "13.2.1-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1165,7 +1165,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.s390x",
+      "evra": "13.2.1-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1465,7 +1465,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.s390x",
+      "evra": "0.7.27-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1501,7 +1501,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.s390x",
+      "evra": "13.2.1-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1951,13 +1951,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.s390x",
+      "evra": "5:4.8.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.s390x",
+      "evra": "5:4.8.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2053,13 +2053,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.s390x",
+      "evra": "2023.11-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.s390x",
+      "evra": "2023.11-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2071,7 +2071,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.s390x",
+      "evra": "1.5.0-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.s390x",
+      "evra": "1:1.14.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2341,7 +2341,13 @@
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.s390x",
+      "evra": "4.0.1-6.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
+    },
+    "tpm2-tss-fapi": {
+      "evra": "4.0.1-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2437,7 +2443,7 @@
       }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.s390x",
+      "evra": "0.0.27-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
@@ -2462,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-05T00:00:00Z",
+    "generated": "2023-12-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-04T23:02:53Z"
+        "generated": "2023-12-06T17:19:50Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-05T01:31:12Z"
+        "generated": "2023-12-08T01:31:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2315b76087..4c31931885 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -229,7 +229,7 @@
       }
     },
     "chrony": {
-      "evra": "4.4-1.fc39.x86_64",
+      "evra": "4.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "chrony"
       }
@@ -301,13 +301,13 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.224.0-1.fc39.noarch",
+      "evra": "2:2.226.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.19-2.fc39.x86_64",
+      "evra": "1.6.23-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "containerd"
       }
@@ -331,13 +331,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-1.fc39.x86_64",
+      "evra": "0.18.0-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-1.fc39.x86_64",
+      "evra": "0.18.0-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -367,13 +367,13 @@
       }
     },
     "criu": {
-      "evra": "3.18-3.fc39.x86_64",
+      "evra": "3.19-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.18-3.fc39.x86_64",
+      "evra": "3.19-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "criu"
       }
@@ -721,7 +721,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.9-1.fc39.x86_64",
+      "evra": "1.9.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -775,25 +775,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-11.fc39.x86_64",
+      "evra": "2.38-14.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-11.fc39.x86_64",
+      "evra": "2.38-14.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-11.fc39.x86_64",
+      "evra": "2.38-14.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-11.fc39.x86_64",
+      "evra": "2.38-14.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -811,7 +811,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-1.fc39.x86_64",
+      "evra": "3.8.2-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -835,37 +835,37 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-109.fc39.noarch",
+      "evra": "1:2.06-110.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-109.fc39.x86_64",
+      "evra": "1:2.06-110.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc": {
-      "evra": "1:2.06-109.fc39.x86_64",
+      "evra": "1:2.06-110.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-109.fc39.noarch",
+      "evra": "1:2.06-110.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-109.fc39.x86_64",
+      "evra": "1:2.06-110.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-109.fc39.x86_64",
+      "evra": "1:2.06-110.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.3-200.fc39.x86_64",
+      "evra": "6.6.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.3-200.fc39.x86_64",
+      "evra": "6.6.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.3-200.fc39.x86_64",
+      "evra": "6.6.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.3-200.fc39.x86_64",
+      "evra": "6.6.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1267,7 +1267,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-4.fc39.x86_64",
+      "evra": "13.2.1-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.25-1.fc39.x86_64",
+      "evra": "0.7.27-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1603,7 +1603,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-4.fc39.x86_64",
+      "evra": "13.2.1-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2077,13 +2077,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.7.2-1.fc39.x86_64",
+      "evra": "5:4.8.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.7.2-1.fc39.x86_64",
+      "evra": "5:4.8.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2173,13 +2173,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.10-3.fc39.x86_64",
+      "evra": "2023.11-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.10-3.fc39.x86_64",
+      "evra": "2023.11-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2191,7 +2191,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-1.fc39.x86_64",
+      "evra": "1.5.0-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2287,7 +2287,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.13.3-1.fc39.x86_64",
+      "evra": "1:1.14.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2467,7 +2467,13 @@
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-4.fc39.x86_64",
+      "evra": "4.0.1-6.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "tpm2-tss"
+      }
+    },
+    "tpm2-tss-fapi": {
+      "evra": "4.0.1-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2563,7 +2569,7 @@
       }
     },
     "zincati": {
-      "evra": "0.0.25-6.fc39.x86_64",
+      "evra": "0.0.27-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
@@ -2588,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-05T00:00:00Z",
+    "generated": "2023-12-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-04T23:04:22Z"
+        "generated": "2023-12-06T17:20:14Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-05T01:31:17Z"
+        "generated": "2023-12-08T01:31:05Z"
       }
     }
   }

From b54cf77ee7dba98b4ed35594270824eb5ef7334d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Dec 2023 21:52:33 +0000
Subject: [PATCH 1949/2157] overrides: fast-track rust-bootupd-0.2.15-2.fc39

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..0eedc25f6c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  bootupd:
+    evr: 0.2.15-2.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7d001fa064
+      type: fast-track

From b7d0b715daf4aaa9adc1e4bda404b7b41bb4c2b1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 10 Dec 2023 23:02:09 +0000
Subject: [PATCH 1950/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/939/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6cbce50408..93ff2f9eb7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc39.aarch64",
+      "evra": "0.2.15-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -403,7 +403,7 @@
       }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.aarch64",
+      "evra": "8.2.1-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -1195,7 +1195,7 @@
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.aarch64",
+      "evra": "8.2.1-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -2491,13 +2491,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch",
+      "evra": "2:9.0.2153-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.aarch64",
+      "evra": "2:9.0.2153-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2582,16 +2582,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-08T00:00:00Z",
+    "generated": "2023-12-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-06T17:21:22Z"
+        "generated": "2023-12-09T01:30:37Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-08T01:30:51Z"
+        "generated": "2023-12-10T01:28:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f62af8d649..a8932a3bd5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -397,7 +397,7 @@
       }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.ppc64le",
+      "evra": "8.2.1-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -1165,7 +1165,7 @@
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.ppc64le",
+      "evra": "8.2.1-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -2479,13 +2479,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch",
+      "evra": "2:9.0.2153-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.ppc64le",
+      "evra": "2:9.0.2153-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-08T00:00:00Z",
+    "generated": "2023-12-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-06T17:19:20Z"
+        "generated": "2023-12-09T01:29:30Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-08T01:30:56Z"
+        "generated": "2023-12-10T01:28:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9c48097273..5158cf1af3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -391,7 +391,7 @@
       }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.s390x",
+      "evra": "8.2.1-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -1105,7 +1105,7 @@
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.s390x",
+      "evra": "8.2.1-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -2383,13 +2383,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch",
+      "evra": "2:9.0.2153-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.s390x",
+      "evra": "2:9.0.2153-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-08T00:00:00Z",
+    "generated": "2023-12-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-06T17:19:50Z"
+        "generated": "2023-12-09T01:28:39Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-08T01:31:01Z"
+        "generated": "2023-12-10T01:28:13Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4c31931885..7889f8aa5a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.12-2.fc39.x86_64",
+      "evra": "0.2.15-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -409,7 +409,7 @@
       }
     },
     "curl": {
-      "evra": "8.2.1-3.fc39.x86_64",
+      "evra": "8.2.1-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -1207,7 +1207,7 @@
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-3.fc39.x86_64",
+      "evra": "8.2.1-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "curl"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2120-1.fc39.noarch",
+      "evra": "2:9.0.2153-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2120-1.fc39.x86_64",
+      "evra": "2:9.0.2153-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-08T00:00:00Z",
+    "generated": "2023-12-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-06T17:20:14Z"
+        "generated": "2023-12-09T01:31:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-08T01:31:05Z"
+        "generated": "2023-12-10T01:28:18Z"
       }
     }
   }

From 882414d45676b3fc63ced9d0573d5441037fc096 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Dec 2023 23:15:09 +0000
Subject: [PATCH 1951/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/942/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 93ff2f9eb7..d54b4b7808 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.aarch64",
+      "evra": "1.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -763,7 +763,7 @@
       }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.aarch64",
+      "evra": "2.78.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -1411,7 +1411,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1855,7 +1855,7 @@
       }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.aarch64",
+      "evra": "1.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -1873,7 +1873,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2582,16 +2582,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-10T00:00:00Z",
+    "generated": "2023-12-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-09T01:30:37Z"
+        "generated": "2023-12-10T23:09:41Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-10T01:28:03Z"
+        "generated": "2023-12-13T01:20:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a8932a3bd5..6613f5e537 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.ppc64le",
+      "evra": "1.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -733,7 +733,7 @@
       }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.ppc64le",
+      "evra": "2.78.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -1381,7 +1381,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1831,7 +1831,7 @@
       }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.ppc64le",
+      "evra": "1.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -1849,7 +1849,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-10T00:00:00Z",
+    "generated": "2023-12-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-09T01:29:30Z"
+        "generated": "2023-12-10T23:10:04Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-10T01:28:08Z"
+        "generated": "2023-12-13T01:20:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5158cf1af3..045789445b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.s390x",
+      "evra": "1.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -709,7 +709,7 @@
       }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.s390x",
+      "evra": "2.78.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -1321,7 +1321,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.s390x",
+      "evra": "1:2.6.4-0.rc2.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1759,7 +1759,7 @@
       }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.s390x",
+      "evra": "1.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -1777,7 +1777,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.s390x",
+      "evra": "1:2.6.4-0.rc2.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-10T00:00:00Z",
+    "generated": "2023-12-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-09T01:28:39Z"
+        "generated": "2023-12-10T23:08:33Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-10T01:28:13Z"
+        "generated": "2023-12-13T01:20:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7889f8aa5a..3c2bbc672d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.8.0-1.fc39.x86_64",
+      "evra": "1.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -769,7 +769,7 @@
       }
     },
     "glib2": {
-      "evra": "2.78.1-1.fc39.x86_64",
+      "evra": "2.78.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -1423,7 +1423,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1873,7 +1873,7 @@
       }
     },
     "netavark": {
-      "evra": "1.8.0-2.fc39.x86_64",
+      "evra": "1.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -1891,7 +1891,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-10T00:00:00Z",
+    "generated": "2023-12-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-09T01:31:00Z"
+        "generated": "2023-12-10T23:09:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-10T01:28:18Z"
+        "generated": "2023-12-13T01:20:39Z"
       }
     }
   }

From 9500d4c5966c6a66c85f18cb58c1b7c59d7f36a7 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Thu, 14 Dec 2023 00:32:15 -0500
Subject: [PATCH 1952/2157] denylist: remove ext.config.kdump.crash

The fix for https://github.com/coreos/fedora-coreos-tracker/issues/1588
landed upstream and this test is now passing so let's remove it from
the denylist.
---
 kola-denylist.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e88fe54339..57160dbe73 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,14 +17,6 @@
   warn: true
   streams:
     - rawhide
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
-  snooze: 2023-12-14
-  warn: true
-  arches:
-    - ppc64le
-  streams:
-    - rawhide
 - pattern: coreos.unique.boot.failure
   tracker: https://github.com/coreos/coreos-assembler/issues/3669
   snooze: 2023-12-12

From 6ddee2742657bf6d5ecce48e33a1c5763c843f4c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 13 Dec 2023 23:45:18 +0000
Subject: [PATCH 1953/2157] overrides: fast-track rust-bootupd-0.2.16-2.fc39

---
 manifest-lock.overrides.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 0eedc25f6c..ed059f539c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -10,7 +10,7 @@
 
 packages:
   bootupd:
-    evr: 0.2.15-2.fc39
+    evr: 0.2.16-2.fc39
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7d001fa064
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5705e05f53
       type: fast-track

From 53f319cfe6fe561e907835b833e3becbc2929d3b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 14 Dec 2023 23:29:55 +0000
Subject: [PATCH 1954/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/943/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d54b4b7808..1b1946489e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -163,7 +163,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.15-2.fc39.aarch64",
+      "evra": "0.2.16-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -1027,25 +1027,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.4-200.fc39.aarch64",
+      "evra": "6.6.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.4-200.fc39.aarch64",
+      "evra": "6.6.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.4-200.fc39.aarch64",
+      "evra": "6.6.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.4-200.fc39.aarch64",
+      "evra": "6.6.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2582,16 +2582,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-13T00:00:00Z",
+    "generated": "2023-12-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-10T23:09:41Z"
+        "generated": "2023-12-14T14:42:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-13T01:20:23Z"
+        "generated": "2023-12-14T01:22:33Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6613f5e537..6aa221fee3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -997,25 +997,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.4-200.fc39.ppc64le",
+      "evra": "6.6.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.4-200.fc39.ppc64le",
+      "evra": "6.6.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.4-200.fc39.ppc64le",
+      "evra": "6.6.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.4-200.fc39.ppc64le",
+      "evra": "6.6.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-13T00:00:00Z",
+    "generated": "2023-12-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-10T23:10:04Z"
+        "generated": "2023-12-14T14:40:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-13T01:20:28Z"
+        "generated": "2023-12-14T01:22:38Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 045789445b..dc672ddfe5 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -937,25 +937,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.4-200.fc39.s390x",
+      "evra": "6.6.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.4-200.fc39.s390x",
+      "evra": "6.6.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.4-200.fc39.s390x",
+      "evra": "6.6.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.4-200.fc39.s390x",
+      "evra": "6.6.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-13T00:00:00Z",
+    "generated": "2023-12-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-10T23:08:33Z"
+        "generated": "2023-12-14T14:41:08Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-13T01:20:34Z"
+        "generated": "2023-12-14T01:22:44Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3c2bbc672d..a14fd0b7e0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.15-2.fc39.x86_64",
+      "evra": "0.2.16-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.4-200.fc39.x86_64",
+      "evra": "6.6.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.4-200.fc39.x86_64",
+      "evra": "6.6.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.4-200.fc39.x86_64",
+      "evra": "6.6.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.4-200.fc39.x86_64",
+      "evra": "6.6.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-13T00:00:00Z",
+    "generated": "2023-12-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-10T23:09:51Z"
+        "generated": "2023-12-14T14:41:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-13T01:20:39Z"
+        "generated": "2023-12-14T01:22:49Z"
       }
     }
   }

From b40f727e95b044201cde232a2ca64ec8a862b2ea Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 8 Dec 2023 17:10:06 -0500
Subject: [PATCH 1955/2157] overlay.d: add 40grub overlay

bootupd upstream was modified to store default static grub configs
and allow for OS integrators to add their own snippets by placing
files in /usr/lib/bootupd/grub2-static/configs.d/ [1] When we move
to building with osbuild we will start taking advantage of this
functionality and calling bootupd with --with-static-configs. Let's
go ahead and add our snippets here so they can be leveraged when we
start calling bootupd with --with-static-configs.

The snippets added here come from the parts of the config currently
defined in coreos-assembler that weren't lifted into bootupd [2][3][4].

[1] https://github.com/coreos/bootupd/pull/543
[2] https://github.com/coreos/coreos-assembler/blob/4636b1a5c6dc00b1d6a58b1bfbb199431444336b/src/grub.cfg#L58-L60
[3] https://github.com/coreos/coreos-assembler/blob/4636b1a5c6dc00b1d6a58b1bfbb199431444336b/src/grub.cfg#L71-L85
[4] https://github.com/coreos/coreos-assembler/blob/4636b1a5c6dc00b1d6a58b1bfbb199431444336b/src/grub.cfg#L87-L91
---
 manifests/fedora-coreos-base.yaml              |  1 +
 .../grub2-static/configs.d/30_console.cfg      |  4 ++++
 .../configs.d/40_coreos-ignition.cfg           | 18 ++++++++++++++++++
 .../grub2-static/configs.d/70_coreos-user.cfg  |  6 ++++++
 overlay.d/README.md                            |  6 ++++++
 5 files changed, 35 insertions(+)
 create mode 100644 overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg
 create mode 100644 overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/40_coreos-ignition.cfg
 create mode 100644 overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/70_coreos-user.cfg

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 490e62bc96..35be6cd2dd 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -18,6 +18,7 @@ ostree-layers:
   - overlay/20platform-chrony
   - overlay/25azure-udev-rules
   - overlay/30lvmdevices
+  - overlay/40grub
 
 # Be minimal
 recommends: false
diff --git a/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg
new file mode 100644
index 0000000000..d352292fc8
--- /dev/null
+++ b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg
@@ -0,0 +1,4 @@
+
+# Any non-default console settings will be inserted here.
+# CONSOLE-SETTINGS-START
+# CONSOLE-SETTINGS-END
diff --git a/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/40_coreos-ignition.cfg b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/40_coreos-ignition.cfg
new file mode 100644
index 0000000000..31bda1dcec
--- /dev/null
+++ b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/40_coreos-ignition.cfg
@@ -0,0 +1,18 @@
+# Remove soon when Ignition is providing this:
+# https://github.com/coreos/fedora-coreos-config/pull/2769#discussion_r1428152480
+#
+# Determine if this is a first boot and set the ${ignition_firstboot} variable
+# which is used in the kernel command line.
+set ignition_firstboot=""
+if [ -f "/ignition.firstboot" ]; then
+    # Default networking parameters to be used with ignition.
+    set ignition_network_kcmdline=''
+
+    # Source in the `ignition.firstboot` file which could override the
+    # above $ignition_network_kcmdline with static networking config.
+    # This override feature is also by coreos-installer to persist static
+    # networking config provided during install to the first boot of the machine.
+    source "/ignition.firstboot"
+
+    set ignition_firstboot="ignition.firstboot ${ignition_network_kcmdline}"
+fi
diff --git a/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/70_coreos-user.cfg b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/70_coreos-user.cfg
new file mode 100644
index 0000000000..8c4460b127
--- /dev/null
+++ b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/70_coreos-user.cfg
@@ -0,0 +1,6 @@
+
+# Import user defined configuration
+# tracker: https://github.com/coreos/fedora-coreos-tracker/issues/805
+if [ -f $prefix/user.cfg ]; then
+  source $prefix/user.cfg
+fi
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 23b64bdd13..4ef0405e28 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -93,3 +93,9 @@ pre-existing LVM devices attached. See the tracker issue [1] for more
 information.
 
 [1] https://github.com/coreos/fedora-coreos-tracker/issues/1517
+
+40grub
+------
+
+Add in static grub configs that will be leveraged by bootupd when
+managing bootloaders. See https://github.com/coreos/bootupd/pull/543

From f674936eb6b500206f142318359660ab82eb7e0f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 16 Dec 2023 02:46:15 +0000
Subject: [PATCH 1956/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/945/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 ++++++++++++++++++------------
 manifest-lock.ppc64le.json | 30 ++++++++++++++++++------------
 manifest-lock.s390x.json   | 30 ++++++++++++++++++------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 67 insertions(+), 49 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1b1946489e..170e95fffb 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,13 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -169,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -883,7 +889,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1723,13 +1729,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1813,7 +1819,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1909,7 +1915,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2137,7 +2143,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2582,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-14T00:00:00Z",
+    "generated": "2023-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-14T14:42:48Z"
+        "generated": "2023-12-15T22:46:25Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-14T01:22:33Z"
+        "generated": "2023-12-15T18:55:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 6aa221fee3..b2ccf4d4d9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -73,13 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -169,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -853,7 +859,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1705,13 +1711,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1789,7 +1795,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1885,7 +1891,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2131,7 +2137,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2564,16 +2570,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-14T00:00:00Z",
+    "generated": "2023-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-14T14:40:34Z"
+        "generated": "2023-12-15T22:44:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-14T01:22:38Z"
+        "generated": "2023-12-15T18:55:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dc672ddfe5..dac5603978 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,13 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
+    "amd-ucode-firmware": {
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -163,7 +169,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -799,7 +805,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1633,13 +1639,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1717,7 +1723,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1807,7 +1813,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2029,7 +2035,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2468,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-14T00:00:00Z",
+    "generated": "2023-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-14T14:41:08Z"
+        "generated": "2023-12-15T22:44:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-14T01:22:44Z"
+        "generated": "2023-12-15T18:56:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a14fd0b7e0..9af9a0bd1e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -901,7 +901,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1735,13 +1735,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1831,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1927,7 +1927,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2149,7 +2149,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231111-1.fc39.noarch",
+      "evra": "20231211-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-14T00:00:00Z",
+    "generated": "2023-12-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-14T14:41:32Z"
+        "generated": "2023-12-15T22:45:34Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-14T01:22:49Z"
+        "generated": "2023-12-15T18:56:10Z"
       }
     }
   }

From cecf89866b8a357b89fe9f67f9ed5d9321e4b2af Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 17 Dec 2023 23:42:11 +0000
Subject: [PATCH 1957/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/947/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 170e95fffb..10a9e6325d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2497,13 +2497,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2153-1.fc39.noarch",
+      "evra": "2:9.0.2167-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2153-1.fc39.aarch64",
+      "evra": "2:9.0.2167-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-16T00:00:00Z",
+    "generated": "2023-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-15T22:46:25Z"
+        "generated": "2023-12-16T02:52:09Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-15T18:55:54Z"
+        "generated": "2023-12-17T01:27:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b2ccf4d4d9..3bfb4e7b54 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2485,13 +2485,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2153-1.fc39.noarch",
+      "evra": "2:9.0.2167-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2153-1.fc39.ppc64le",
+      "evra": "2:9.0.2167-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2570,16 +2570,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-16T00:00:00Z",
+    "generated": "2023-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-15T22:44:23Z"
+        "generated": "2023-12-16T02:50:32Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-15T18:55:59Z"
+        "generated": "2023-12-17T01:27:13Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dac5603978..3fc2ec2b3e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2389,13 +2389,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2153-1.fc39.noarch",
+      "evra": "2:9.0.2167-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2153-1.fc39.s390x",
+      "evra": "2:9.0.2167-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-16T00:00:00Z",
+    "generated": "2023-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-15T22:44:06Z"
+        "generated": "2023-12-16T02:50:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-15T18:56:05Z"
+        "generated": "2023-12-17T01:27:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9af9a0bd1e..5d0f76b5af 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2153-1.fc39.noarch",
+      "evra": "2:9.0.2167-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2153-1.fc39.x86_64",
+      "evra": "2:9.0.2167-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-16T00:00:00Z",
+    "generated": "2023-12-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-15T22:45:34Z"
+        "generated": "2023-12-16T02:51:51Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-15T18:56:10Z"
+        "generated": "2023-12-17T01:27:24Z"
       }
     }
   }

From cf1b2fe5ce73fba4fdf16d1963c05857c29aea13 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 19 Dec 2023 00:07:47 +0000
Subject: [PATCH 1958/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/948/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 10a9e6325d..8f99879928 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -433,7 +433,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.aarch64",
+      "evra": "34-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -2227,13 +2227,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-17T00:00:00Z",
+    "generated": "2023-12-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-16T02:52:09Z"
+        "generated": "2023-12-17T23:49:46Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-17T01:27:08Z"
+        "generated": "2023-12-18T01:58:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3bfb4e7b54..d1a60fd276 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -427,7 +427,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.ppc64le",
+      "evra": "34-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -2221,13 +2221,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2570,16 +2570,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-17T00:00:00Z",
+    "generated": "2023-12-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-16T02:50:32Z"
+        "generated": "2023-12-17T23:47:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-17T01:27:13Z"
+        "generated": "2023-12-18T01:58:59Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3fc2ec2b3e..ebe31b44f6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -421,7 +421,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.s390x",
+      "evra": "34-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -2125,13 +2125,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-17T00:00:00Z",
+    "generated": "2023-12-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-16T02:50:29Z"
+        "generated": "2023-12-17T23:47:23Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-17T01:27:18Z"
+        "generated": "2023-12-18T01:59:05Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5d0f76b5af..7b615c1e8d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -433,7 +433,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "33-2.fc39.x86_64",
+      "evra": "34-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -2233,13 +2233,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.2-1.fc39.noarch",
+      "evra": "39.3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-17T00:00:00Z",
+    "generated": "2023-12-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-16T02:51:51Z"
+        "generated": "2023-12-17T23:50:00Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-17T01:27:24Z"
+        "generated": "2023-12-18T01:59:10Z"
       }
     }
   }

From 4d28aff006ab120e9771b0fafd2b9df0879f080f Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Wed, 20 Dec 2023 10:41:17 +0100
Subject: [PATCH 1959/2157] The test for iscsi boot fails on somes arches

let's disable while we build images for all the arches and create a repo
centralizing images that kola needs for the tests.
---
 kola-denylist.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 57160dbe73..65dc242c84 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,3 +23,6 @@
   warn: true
   arches:
     - aarch64
+- pattern: iso-offline-install-iscsi.bios
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
+  snooze: 2024-01-20

From af4d014c34f614147e910386def73b4d3981c325 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 21 Dec 2023 06:05:41 +0000
Subject: [PATCH 1960/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index ed059f539c..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  bootupd:
-    evr: 0.2.16-2.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-5705e05f53
-      type: fast-track
+packages: {}

From 7ae32de727adfee3824b10cf83d8400bef710583 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 2 Jan 2024 19:05:21 -0500
Subject: [PATCH 1961/2157] tests/timesyncd: fix NM dispatcher URL

Apparently the `master` branch got deleted in favor of `main` so we
need to update the URL here.
---
 tests/kola/ntp/timesyncd/dhcp-propagation/config.bu | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu b/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
index 8570cbaea0..bce15939ea 100644
--- a/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
+++ b/tests/kola/ntp/timesyncd/dhcp-propagation/config.bu
@@ -13,5 +13,5 @@ storage:
   files:
     - path: /etc/NetworkManager/dispatcher.d/30-timesyncd
       contents:
-        source: "https://github.com/eworm-de/networkmanager-dispatcher-timesyncd/raw/master/30-timesyncd"
+        source: "https://github.com/eworm-de/networkmanager-dispatcher-timesyncd/raw/main/30-timesyncd"
       mode: 0755

From 1dd81785f848fd5c39c5621655ff5a93b1260a7c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 3 Jan 2024 06:44:00 +0000
Subject: [PATCH 1962/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/953/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 56 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 58 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 56 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 54 +++++++++++++++++------------------
 4 files changed, 112 insertions(+), 112 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8f99879928..a26e6337c9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -331,13 +331,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-2.fc39.aarch64",
+      "evra": "0.20.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-2.fc39.aarch64",
+      "evra": "0.20.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -391,7 +391,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -433,7 +433,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "34-1.fc39.aarch64",
+      "evra": "35-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -1033,31 +1033,31 @@
       }
     },
     "kernel": {
-      "evra": "6.6.6-200.fc39.aarch64",
+      "evra": "6.6.8-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.6-200.fc39.aarch64",
+      "evra": "6.6.8-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.6-200.fc39.aarch64",
+      "evra": "6.6.8-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.6-200.fc39.aarch64",
+      "evra": "6.6.8-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.aarch64",
+      "evra": "2.0.27-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.aarch64",
+      "evra": "2.48-9.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libcap"
       }
@@ -1435,13 +1435,13 @@
       }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.aarch64",
+      "evra": "3.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.aarch64",
+      "evra": "3.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
@@ -1891,7 +1891,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.aarch64",
+      "evra": "2.2.21-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -1975,13 +1975,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.aarch64",
+      "evra": "2023.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.aarch64",
+      "evra": "2023.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2011,13 +2011,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.aarch64",
+      "evra": "0^20231204.gb86afe3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2065,13 +2065,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.1-1.fc39.aarch64",
+      "evra": "5:4.8.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.1-1.fc39.aarch64",
+      "evra": "5:4.8.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2131,7 +2131,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.aarch64",
+      "evra": "2:8.1.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2155,13 +2155,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.aarch64",
+      "evra": "4.19.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.aarch64",
+      "evra": "4.19.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2179,7 +2179,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.aarch64",
+      "evra": "4.19.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2389,7 +2389,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.aarch64",
+      "evra": "1.16-7.fc39.aarch64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2557,7 +2557,7 @@
       }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.aarch64",
+      "evra": "1.4.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "zchunk"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-18T00:00:00Z",
+    "generated": "2024-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-17T23:49:46Z"
+        "generated": "2023-12-19T00:17:56Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-18T01:58:54Z"
+        "generated": "2024-01-03T02:15:35Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d1a60fd276..eeccf7ec22 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,13 +331,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-2.fc39.ppc64le",
+      "evra": "0.20.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-2.fc39.ppc64le",
+      "evra": "0.20.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -385,7 +385,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -427,7 +427,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "34-1.fc39.ppc64le",
+      "evra": "35-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -1003,31 +1003,31 @@
       }
     },
     "kernel": {
-      "evra": "6.6.6-200.fc39.ppc64le",
+      "evra": "6.6.8-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.6-200.fc39.ppc64le",
+      "evra": "6.6.8-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.6-200.fc39.ppc64le",
+      "evra": "6.6.8-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.6-200.fc39.ppc64le",
+      "evra": "6.6.8-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.ppc64le",
+      "evra": "2.0.27-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
@@ -1141,7 +1141,7 @@
       }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.ppc64le",
+      "evra": "2.48-9.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libcap"
       }
@@ -1405,13 +1405,13 @@
       }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.ppc64le",
+      "evra": "3.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.ppc64le",
+      "evra": "3.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libnl3"
       }
@@ -1867,7 +1867,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.ppc64le",
+      "evra": "2.2.21-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -1951,19 +1951,19 @@
       }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.ppc64le",
+      "evra": "2023.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-grub2": {
-      "evra": "2023.7-2.fc39.ppc64le",
+      "evra": "2023.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.ppc64le",
+      "evra": "2023.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -1993,13 +1993,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.ppc64le",
+      "evra": "0^20231204.gb86afe3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2047,13 +2047,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.1-1.fc39.ppc64le",
+      "evra": "5:4.8.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.1-1.fc39.ppc64le",
+      "evra": "5:4.8.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2125,7 +2125,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.ppc64le",
+      "evra": "2:8.1.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2149,13 +2149,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.ppc64le",
+      "evra": "4.19.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.ppc64le",
+      "evra": "4.19.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2173,7 +2173,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.ppc64le",
+      "evra": "4.19.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2377,7 +2377,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.ppc64le",
+      "evra": "1.16-7.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2539,7 +2539,7 @@
       }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.ppc64le",
+      "evra": "1.4.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "zchunk"
       }
@@ -2570,16 +2570,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-18T00:00:00Z",
+    "generated": "2024-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-17T23:47:35Z"
+        "generated": "2023-12-19T00:17:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-18T01:58:59Z"
+        "generated": "2024-01-03T02:15:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ebe31b44f6..f0d76b8f5b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -325,13 +325,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-2.fc39.s390x",
+      "evra": "0.20.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-2.fc39.s390x",
+      "evra": "0.20.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -379,7 +379,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -421,7 +421,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "34-1.fc39.s390x",
+      "evra": "35-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -943,31 +943,31 @@
       }
     },
     "kernel": {
-      "evra": "6.6.6-200.fc39.s390x",
+      "evra": "6.6.8-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.6-200.fc39.s390x",
+      "evra": "6.6.8-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.6-200.fc39.s390x",
+      "evra": "6.6.8-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.6-200.fc39.s390x",
+      "evra": "6.6.8-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.s390x",
+      "evra": "2.0.27-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
@@ -1081,7 +1081,7 @@
       }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.s390x",
+      "evra": "2.48-9.fc39.s390x",
       "metadata": {
         "sourcerpm": "libcap"
       }
@@ -1345,13 +1345,13 @@
       }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.s390x",
+      "evra": "3.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.s390x",
+      "evra": "3.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libnl3"
       }
@@ -1795,7 +1795,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.s390x",
+      "evra": "2.2.21-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -1867,13 +1867,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.s390x",
+      "evra": "2023.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.s390x",
+      "evra": "2023.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -1903,13 +1903,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.s390x",
+      "evra": "0^20231204.gb86afe3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -1957,13 +1957,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.1-1.fc39.s390x",
+      "evra": "5:4.8.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.1-1.fc39.s390x",
+      "evra": "5:4.8.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2023,7 +2023,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.1-1.fc39.s390x",
+      "evra": "2:8.1.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2047,13 +2047,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.s390x",
+      "evra": "4.19.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.s390x",
+      "evra": "4.19.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2071,7 +2071,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.s390x",
+      "evra": "4.19.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2275,7 +2275,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.s390x",
+      "evra": "1.16-7.fc39.s390x",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2443,7 +2443,7 @@
       }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.s390x",
+      "evra": "1.4.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "zchunk"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-18T00:00:00Z",
+    "generated": "2024-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-17T23:47:23Z"
+        "generated": "2023-12-19T00:16:29Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-18T01:59:05Z"
+        "generated": "2024-01-03T02:15:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7b615c1e8d..450768e4f9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -331,13 +331,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.18.0-2.fc39.x86_64",
+      "evra": "0.20.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.18.0-2.fc39.x86_64",
+      "evra": "0.20.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -391,7 +391,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20231113-1.gitb402e82.fc39.noarch",
+      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -433,7 +433,7 @@
       }
     },
     "dbus-broker": {
-      "evra": "34-1.fc39.x86_64",
+      "evra": "35-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
@@ -1045,31 +1045,31 @@
       }
     },
     "kernel": {
-      "evra": "6.6.6-200.fc39.x86_64",
+      "evra": "6.6.8-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.6-200.fc39.x86_64",
+      "evra": "6.6.8-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.6-200.fc39.x86_64",
+      "evra": "6.6.8-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.6-200.fc39.x86_64",
+      "evra": "6.6.8-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-3.fc39.x86_64",
+      "evra": "2.0.27-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
@@ -1177,7 +1177,7 @@
       }
     },
     "libcap": {
-      "evra": "2.48-8.fc39.x86_64",
+      "evra": "2.48-9.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libcap"
       }
@@ -1441,13 +1441,13 @@
       }
     },
     "libnl3": {
-      "evra": "3.8.0-2.fc39.x86_64",
+      "evra": "3.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.8.0-2.fc39.x86_64",
+      "evra": "3.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
@@ -1903,7 +1903,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.15-1.fc39.x86_64",
+      "evra": "2.2.21-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -1987,13 +1987,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.7-2.fc39.x86_64",
+      "evra": "2023.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.7-2.fc39.x86_64",
+      "evra": "2023.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2023,13 +2023,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231119.g4f1709d-1.fc39.x86_64",
+      "evra": "0^20231204.gb86afe3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231119.g4f1709d-1.fc39.noarch",
+      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2077,13 +2077,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.1-1.fc39.x86_64",
+      "evra": "5:4.8.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.1-1.fc39.x86_64",
+      "evra": "5:4.8.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2161,13 +2161,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.0-1.fc39.x86_64",
+      "evra": "4.19.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.0-1.fc39.x86_64",
+      "evra": "4.19.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2185,7 +2185,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.0-1.fc39.x86_64",
+      "evra": "4.19.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2395,7 +2395,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-4.fc39.x86_64",
+      "evra": "1.16-7.fc39.x86_64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2563,7 +2563,7 @@
       }
     },
     "zchunk-libs": {
-      "evra": "1.3.2-1.fc39.x86_64",
+      "evra": "1.4.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "zchunk"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-12-18T00:00:00Z",
+    "generated": "2024-01-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-17T23:50:00Z"
+        "generated": "2023-12-19T00:19:36Z"
       },
       "fedora-updates": {
-        "generated": "2023-12-18T01:59:10Z"
+        "generated": "2024-01-03T02:15:52Z"
       }
     }
   }

From 5411e881cef56cb747a2d3d76fc7db16015ffdba Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 2 Jan 2024 15:25:06 -0500
Subject: [PATCH 1963/2157] tests/root-reprovision: Query `/sysroot`, not `/`

Prep for enabling composefs.  This is the same issue as
https://github.com/coreos/coreos-installer/pull/1203
---
 tests/kola/root-reprovision/filesystem-only/test.sh  | 2 +-
 tests/kola/root-reprovision/linear/test.sh           | 4 ++--
 tests/kola/root-reprovision/luks/data/luks-test.sh   | 4 ++--
 tests/kola/root-reprovision/swap-before-root/test.sh | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/tests/kola/root-reprovision/filesystem-only/test.sh b/tests/kola/root-reprovision/filesystem-only/test.sh
index 43cd85af1a..6dd520d5bd 100755
--- a/tests/kola/root-reprovision/filesystem-only/test.sh
+++ b/tests/kola/root-reprovision/filesystem-only/test.sh
@@ -14,7 +14,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-fstype=$(findmnt -nvr / -o FSTYPE)
+fstype=$(findmnt -nvr /sysroot -o FSTYPE)
 [[ $fstype == ext4 ]]
 ok "source is ext4"
 
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
index 3dce05e080..2fe204a14d 100755
--- a/tests/kola/root-reprovision/linear/test.sh
+++ b/tests/kola/root-reprovision/linear/test.sh
@@ -18,13 +18,13 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-srcdev=$(findmnt -nvr / -o SOURCE)
+srcdev=$(findmnt -nvr /sysroot -o SOURCE)
 [[ ${srcdev} == $(realpath /dev/md/foobar) ]]
 
 blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
 [[ ${blktype} == linear ]]
 
-fstype=$(findmnt -nvr / -o FSTYPE)
+fstype=$(findmnt -nvr /sysroot -o FSTYPE)
 [[ ${fstype} == xfs ]]
 ok "source is XFS on linear device"
 
diff --git a/tests/kola/root-reprovision/luks/data/luks-test.sh b/tests/kola/root-reprovision/luks/data/luks-test.sh
index 8e2f8b47be..615b4fd175 100755
--- a/tests/kola/root-reprovision/luks/data/luks-test.sh
+++ b/tests/kola/root-reprovision/luks/data/luks-test.sh
@@ -4,13 +4,13 @@
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-srcdev=$(findmnt -nvr / -o SOURCE)
+srcdev=$(findmnt -nvr /sysroot -o SOURCE)
 [[ ${srcdev} == /dev/mapper/myluksdev ]]
 
 blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
 [[ ${blktype} == crypt ]]
 
-fstype=$(findmnt -nvr / -o FSTYPE)
+fstype=$(findmnt -nvr /sysroot -o FSTYPE)
 [[ ${fstype} == xfs ]]
 ok "source is XFS on LUKS device"
 
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index 654e5eee5e..2deb4b8efd 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -23,7 +23,7 @@ swapstatus=$(systemctl is-active dev-disk-by\\x2dpartlabel-swap.swap)
 [[ ${swapstatus} == active ]]
 ok "swap is active"
 
-fstype=$(findmnt -nvr / -o FSTYPE)
+fstype=$(findmnt -nvr /sysroot -o FSTYPE)
 [[ ${fstype} == xfs ]]
 ok "source is xfs"
 

From 853d6267fb4a6394ef36eb1ee02d92138246d54e Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 3 Jan 2024 11:29:48 -0500
Subject: [PATCH 1964/2157] tests: Two more composefs compatibility fixes

To help enable composefs.
---
 tests/kola/files/root-immutable-bit | 7 +++++--
 tests/kola/reboot/test.sh           | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/tests/kola/files/root-immutable-bit b/tests/kola/files/root-immutable-bit
index 5884b9daf7..a25a50b9e9 100755
--- a/tests/kola/files/root-immutable-bit
+++ b/tests/kola/files/root-immutable-bit
@@ -1,14 +1,17 @@
 #!/bin/bash
 ## kola:
 ##   exclusive: false
-##   description: Verify / has the immutable bit.
+##   description: Verify / has the immutable bit or we're using composefs.
 
 set -xeuo pipefail
 
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-if ! lsattr -d / | grep -qe '--i--'; then
+fstype=$(findmnt -nvr / -o FSTYPE)
+if test $fstype == overlay; then
+    echo "on overlayfs"
+elif ! lsattr -d / | grep -qe '--i--'; then
     fatal "missing immutable bit on /"
 fi
 ok immutable bit
diff --git a/tests/kola/reboot/test.sh b/tests/kola/reboot/test.sh
index 673e8ec2e3..35b6d24a68 100755
--- a/tests/kola/reboot/test.sh
+++ b/tests/kola/reboot/test.sh
@@ -11,7 +11,7 @@ set -xeuo pipefail
 
 # /var
 varsrc=$(findmnt -nvr /var -o SOURCE)
-rootsrc=$(findmnt -nvr / -o SOURCE)
+rootsrc=$(findmnt -nvr /sysroot -o SOURCE)
 [[ $(realpath "$varsrc") == $(realpath "$rootsrc") ]]
 ok "/var is backed by rootfs"
 

From 740ed072aa3a99d852a5bc407993a108f6113d7c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Jan 2024 00:28:40 +0000
Subject: [PATCH 1965/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/955/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a26e6337c9..a81b7db291 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1153,7 +1153,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1243,7 +1243,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1387,7 +1387,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1549,7 +1549,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1669,7 +1669,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2485,13 +2485,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.aarch64",
+      "evra": "2.39.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-03T00:00:00Z",
+    "generated": "2024-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-19T00:17:56Z"
+        "generated": "2024-01-03T06:55:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-03T02:15:35Z"
+        "generated": "2024-01-04T01:58:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index eeccf7ec22..eef4f62604 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1123,7 +1123,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1213,7 +1213,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1357,7 +1357,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1531,7 +1531,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1651,7 +1651,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2473,13 +2473,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.ppc64le",
+      "evra": "2.39.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2570,16 +2570,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-03T00:00:00Z",
+    "generated": "2024-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-19T00:17:36Z"
+        "generated": "2024-01-03T06:53:50Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-03T02:15:41Z"
+        "generated": "2024-01-04T01:58:09Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f0d76b8f5b..bce5d6b3c7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1063,7 +1063,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1153,7 +1153,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1297,7 +1297,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1459,7 +1459,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1579,7 +1579,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2371,13 +2371,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.s390x",
+      "evra": "2.39.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-03T00:00:00Z",
+    "generated": "2024-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-19T00:16:29Z"
+        "generated": "2024-01-03T06:52:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-03T02:15:46Z"
+        "generated": "2024-01-04T01:58:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 450768e4f9..50caf59910 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1159,7 +1159,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1249,7 +1249,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1393,7 +1393,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1555,7 +1555,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2491,13 +2491,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.2-1.fc39.x86_64",
+      "evra": "2.39.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-03T00:00:00Z",
+    "generated": "2024-01-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-12-19T00:19:36Z"
+        "generated": "2024-01-03T06:54:06Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-03T02:15:52Z"
+        "generated": "2024-01-04T01:58:21Z"
       }
     }
   }

From fa5441a1e45f1731db775d2fd26db48ee2dfe401 Mon Sep 17 00:00:00 2001
From: Super User <root@ibm-p9z-27-lp17.ibm2.lab.eng.bos.redhat.com>
Date: Wed, 27 Dec 2023 14:54:18 -0500
Subject: [PATCH 1966/2157]  Add bootupd package for ppc64le

- Bootupd is now available for ppc64le
as part of our ongoing efforts to
integrate osbuild. Let's include it

- Let's also enable the existing test
to check it.

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 manifest-lock.ppc64le.json        | 6 ++++++
 manifests/fedora-coreos-base.yaml | 3 ++-
 tests/kola/boot/bootupd           | 2 +-
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index eef4f62604..1dffcc45cc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -174,6 +174,12 @@
         "sourcerpm": "bind"
       }
     },
+    "bootupd": {
+      "evra": "0.2.16-2.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "rust-bootupd"
+      }
+    },
     "brcmfmac-firmware": {
       "evra": "20231211-1.fc39.noarch",
       "metadata": {
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 35be6cd2dd..2aef067e0e 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -205,8 +205,9 @@ packages-s390x:
 
 # See https://github.com/coreos/bootupd
 arch-include:
-  x86_64: bootupd.yaml
   aarch64: bootupd.yaml
+  ppc64le: bootupd.yaml
+  x86_64: bootupd.yaml
 
 remove-from-packages:
   # Hopefully short-term hack -- see https://github.com/coreos/fedora-coreos-config/pull/1206#discussion_r705425869.
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index ea4f948b1e..97bbeceb5c 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -13,7 +13,7 @@ set -xeuo pipefail
 . "$KOLA_EXT_DATA/commonlib.sh"
 
 case "$(arch)" in
-    x86_64|aarch64)
+    aarch64|ppc64le|x86_64)
         bootupctl status
         ok bootupctl
         ;;

From 4b60b9244c50f013a50dfa88c4365c92923bb85b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Jan 2024 05:33:58 +0000
Subject: [PATCH 1967/2157] overrides: fast-track rust-bootupd-0.2.17-2.fc39

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..1febf3b21c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  bootupd:
+    evr: 0.2.17-2.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-7fe41d9788
+      type: fast-track

From 09fbb20e43ed1a5eb246d64c96c902fa7fbf07e0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 5 Jan 2024 01:31:18 -0500
Subject: [PATCH 1968/2157] manifests: update qcom dtb hack on aarch64

We need this hack again to work around a new corner case
in the /boot ENOSPC wars.

See https://github.com/coreos/fedora-coreos-tracker/issues/1637
---
 manifests/aarch64-drop-qcom-dtb-files.yaml | 4 ++--
 manifests/fedora-coreos.yaml               | 3 +--
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/manifests/aarch64-drop-qcom-dtb-files.yaml b/manifests/aarch64-drop-qcom-dtb-files.yaml
index 0b21df21ed..e7d1af3198 100644
--- a/manifests/aarch64-drop-qcom-dtb-files.yaml
+++ b/manifests/aarch64-drop-qcom-dtb-files.yaml
@@ -1,6 +1,6 @@
 # Short term hack to avoid running out of space on aarch64. This should
-# save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1464
-# This can be removed once we are on F39+.
+# save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1637
+# This can be removed once we have added a barrier release.
 postprocess:
   - |
     #!/usr/bin/env bash
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 77be73f3f1..fe88df513c 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -28,8 +28,7 @@ conditional-include:
     include: ostree-bls.yaml
   - if:
       - basearch == "aarch64"
-      - releasever == 38
-    # Remove qcom dtb on F38 files since autopruning isn't in place yet
+    # Remove qcom dtb to help us overcome https://github.com/coreos/fedora-coreos-tracker/issues/1637
     include: aarch64-drop-qcom-dtb-files.yaml
   - if:
       - releasever == 38

From 56ff07562b034d5e5eb99862929a769c70620e6b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 5 Jan 2024 10:34:38 -0500
Subject: [PATCH 1969/2157] overrides: fast-track ostree-2023.8-3.fc39

Contains the fix for the corner case issue described in
https://github.com/coreos/fedora-coreos-tracker/issues/1637
---
 manifest-lock.overrides.aarch64.yaml | 23 ++++++++++++++++++++++
 manifest-lock.overrides.ppc64le.yaml | 29 ++++++++++++++++++++++++++++
 manifest-lock.overrides.s390x.yaml   | 23 ++++++++++++++++++++++
 manifest-lock.overrides.x86_64.yaml  | 23 ++++++++++++++++++++++
 4 files changed, 98 insertions(+)
 create mode 100644 manifest-lock.overrides.aarch64.yaml
 create mode 100644 manifest-lock.overrides.ppc64le.yaml
 create mode 100644 manifest-lock.overrides.s390x.yaml
 create mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
new file mode 100644
index 0000000000..dc3487210b
--- /dev/null
+++ b/manifest-lock.overrides.aarch64.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.8-3.fc39.aarch64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
+  ostree-libs:
+    evra: 2023.8-3.fc39.aarch64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
new file mode 100644
index 0000000000..d76399f3bb
--- /dev/null
+++ b/manifest-lock.overrides.ppc64le.yaml
@@ -0,0 +1,29 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.8-3.fc39.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
+  ostree-libs:
+    evra: 2023.8-3.fc39.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
+  ostree-grub2:
+    evra: 2023.8-3.fc39.ppc64le
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
new file mode 100644
index 0000000000..c3445e9db2
--- /dev/null
+++ b/manifest-lock.overrides.s390x.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.8-3.fc39.s390x
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
+  ostree-libs:
+    evra: 2023.8-3.fc39.s390x
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
new file mode 100644
index 0000000000..06b85e4238
--- /dev/null
+++ b/manifest-lock.overrides.x86_64.yaml
@@ -0,0 +1,23 @@
+# This lockfile should be used to pin to a package version (`type: pin`) or to
+# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
+# packages will automatically be removed once they are in the stable repos.
+#
+# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
+# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
+# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
+# in the `metadata.reason` key, though it's acceptable to omit a `reason`
+# for FCOS-specific packages (ignition, afterburn, etc.).
+
+packages:
+  ostree:
+    evra: 2023.8-3.fc39.x86_64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track
+  ostree-libs:
+    evra: 2023.8-3.fc39.x86_64
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
+      type: fast-track

From ee494abd6e7cb50b032f4627878ca14d65d321a3 Mon Sep 17 00:00:00 2001
From: Michael Nguyen <mnguyen@redhat.com>
Date: Wed, 20 Dec 2023 16:56:09 -0500
Subject: [PATCH 1970/2157] workflows/openshift-os: Add NO-JIRA to PR title

openshift/os main PRs require either a valid Jira issue reference
or NO-JIRA prepended to the title. This is automated
fedora-coreos-config bump so lets use NO-JIRA.
---
 .github/workflows/openshift-os.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index a60cbee83d..6e8dc13d76 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -72,7 +72,7 @@ jobs:
             Bump fedora-coreos-config
 
             ${{ env.SHORTLOG }}
-          title: Bump fedora-coreos-config
+          title: "NO-JIRA: Bump fedora-coreos-config"
           body: |
             Created by [GitHub workflow](${{ github.server_url }}/${{ github.repository }}/actions/workflows/openshift-os.yml) ([source](${{ github.server_url }}/${{ github.repository }}/blob/testing-devel/.github/workflows/openshift-os.yml)).
 

From 21e9eecd11484284e08ceb5c08b078298ec948a2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 8 Jan 2024 19:13:56 +0000
Subject: [PATCH 1971/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/956/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a81b7db291..08567b7bd9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.16-2.fc39.aarch64",
+      "evra": "0.2.17-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -721,7 +721,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.10-1.fc39.aarch64",
+      "evra": "1.9.11-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.8-200.fc39.aarch64",
+      "evra": "6.6.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.8-200.fc39.aarch64",
+      "evra": "6.6.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.8-200.fc39.aarch64",
+      "evra": "6.6.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.8-200.fc39.aarch64",
+      "evra": "6.6.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1975,13 +1975,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-2.fc39.aarch64",
+      "evra": "2023.8-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-2.fc39.aarch64",
+      "evra": "2023.8-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2473,7 +2473,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch",
+      "evra": "2023d-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2497,13 +2497,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2167-1.fc39.noarch",
+      "evra": "2:9.0.2190-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2167-1.fc39.aarch64",
+      "evra": "2:9.0.2190-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-04T00:00:00Z",
+    "generated": "2024-01-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-03T06:55:19Z"
+        "generated": "2024-01-05T18:12:24Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-04T01:58:03Z"
+        "generated": "2024-01-08T01:15:22Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1dffcc45cc..a678b821f2 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -175,7 +175,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.16-2.fc39.ppc64le",
+      "evra": "0.2.17-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -697,7 +697,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.10-1.fc39.ppc64le",
+      "evra": "1.9.11-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1009,25 +1009,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.8-200.fc39.ppc64le",
+      "evra": "6.6.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.8-200.fc39.ppc64le",
+      "evra": "6.6.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.8-200.fc39.ppc64le",
+      "evra": "6.6.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.8-200.fc39.ppc64le",
+      "evra": "6.6.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1957,19 +1957,19 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-2.fc39.ppc64le",
+      "evra": "2023.8-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-grub2": {
-      "evra": "2023.8-2.fc39.ppc64le",
+      "evra": "2023.8-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-2.fc39.ppc64le",
+      "evra": "2023.8-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2467,7 +2467,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch",
+      "evra": "2023d-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2491,13 +2491,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2167-1.fc39.noarch",
+      "evra": "2:9.0.2190-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2167-1.fc39.ppc64le",
+      "evra": "2:9.0.2190-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-04T00:00:00Z",
+    "generated": "2024-01-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-03T06:53:50Z"
+        "generated": "2024-01-05T18:11:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-04T01:58:09Z"
+        "generated": "2024-01-08T01:15:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bce5d6b3c7..bc4383e0d8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -685,7 +685,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.10-1.fc39.s390x",
+      "evra": "1.9.11-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -943,25 +943,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.8-200.fc39.s390x",
+      "evra": "6.6.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.8-200.fc39.s390x",
+      "evra": "6.6.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.8-200.fc39.s390x",
+      "evra": "6.6.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.8-200.fc39.s390x",
+      "evra": "6.6.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1867,13 +1867,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-2.fc39.s390x",
+      "evra": "2023.8-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-2.fc39.s390x",
+      "evra": "2023.8-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2359,7 +2359,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch",
+      "evra": "2023d-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2389,13 +2389,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2167-1.fc39.noarch",
+      "evra": "2:9.0.2190-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2167-1.fc39.s390x",
+      "evra": "2:9.0.2190-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-04T00:00:00Z",
+    "generated": "2024-01-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-03T06:52:38Z"
+        "generated": "2024-01-05T18:11:06Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-04T01:58:15Z"
+        "generated": "2024-01-08T01:15:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 50caf59910..6c6bd68b0a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.16-2.fc39.x86_64",
+      "evra": "0.2.17-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -721,7 +721,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.10-1.fc39.x86_64",
+      "evra": "1.9.11-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.8-200.fc39.x86_64",
+      "evra": "6.6.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.8-200.fc39.x86_64",
+      "evra": "6.6.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.8-200.fc39.x86_64",
+      "evra": "6.6.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.8-200.fc39.x86_64",
+      "evra": "6.6.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1987,13 +1987,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-2.fc39.x86_64",
+      "evra": "2023.8-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-2.fc39.x86_64",
+      "evra": "2023.8-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2479,7 +2479,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023c-2.fc39.noarch",
+      "evra": "2023d-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2167-1.fc39.noarch",
+      "evra": "2:9.0.2190-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2167-1.fc39.x86_64",
+      "evra": "2:9.0.2190-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-04T00:00:00Z",
+    "generated": "2024-01-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-03T06:54:06Z"
+        "generated": "2024-01-05T18:12:37Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-04T01:58:21Z"
+        "generated": "2024-01-08T01:15:39Z"
       }
     }
   }

From b2e5db8bbe078ad9a9eed2d9daae08a36cab382c Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 8 Jan 2024 09:25:34 -0800
Subject: [PATCH 1972/2157] denylist: snooze rpm-ostree.kernel-replace

Recent rawhide runs fails in ext.config.rpm-ostree.kernel-replace
test because the ostree container encapsulate command just
seems to hang forever. Snoozing till we fix it
---
 kola-denylist.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 65dc242c84..0ce5dee75b 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -26,3 +26,8 @@
 - pattern: iso-offline-install-iscsi.bios
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
   snooze: 2024-01-20
+- pattern: ext.config.rpm-ostree.kernel-replace
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1642
+  snooze: 2024-01-22
+  streams:
+    - rawhide

From 17b7f15f49c00ba1e522f15a72f6df70db01fdcc Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Jan 2024 23:59:11 +0000
Subject: [PATCH 1973/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/959/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 08567b7bd9..33e2e7865d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -301,7 +301,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.226.0-1.fc39.noarch",
+      "evra": "2:2.227.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -2065,13 +2065,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.2-1.fc39.aarch64",
+      "evra": "5:4.8.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.2-1.fc39.aarch64",
+      "evra": "5:4.8.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-08T00:00:00Z",
+    "generated": "2024-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-05T18:12:24Z"
+        "generated": "2024-01-08T19:22:59Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-08T01:15:22Z"
+        "generated": "2024-01-09T01:36:25Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a678b821f2..540655335e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.226.0-1.fc39.noarch",
+      "evra": "2:2.227.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -2053,13 +2053,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.2-1.fc39.ppc64le",
+      "evra": "5:4.8.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.2-1.fc39.ppc64le",
+      "evra": "5:4.8.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-08T00:00:00Z",
+    "generated": "2024-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-05T18:11:29Z"
+        "generated": "2024-01-08T19:22:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-08T01:15:28Z"
+        "generated": "2024-01-09T01:36:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index bc4383e0d8..ce889b02ac 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -295,7 +295,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.226.0-1.fc39.noarch",
+      "evra": "2:2.227.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -1957,13 +1957,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.2-1.fc39.s390x",
+      "evra": "5:4.8.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.2-1.fc39.s390x",
+      "evra": "5:4.8.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-08T00:00:00Z",
+    "generated": "2024-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-05T18:11:06Z"
+        "generated": "2024-01-08T19:21:41Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-08T01:15:34Z"
+        "generated": "2024-01-09T01:36:37Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6c6bd68b0a..bbd926ae22 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -301,7 +301,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.226.0-1.fc39.noarch",
+      "evra": "2:2.227.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -2077,13 +2077,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.2-1.fc39.x86_64",
+      "evra": "5:4.8.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.2-1.fc39.x86_64",
+      "evra": "5:4.8.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-08T00:00:00Z",
+    "generated": "2024-01-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-05T18:12:37Z"
+        "generated": "2024-01-08T19:23:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-08T01:15:39Z"
+        "generated": "2024-01-09T01:36:43Z"
       }
     }
   }

From 785b77ec61bd385078fdf52bf438f541e6272ead Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 11 Jan 2024 23:40:32 +0000
Subject: [PATCH 1974/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/961/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 33e2e7865d..e34302c5cd 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1555,7 +1555,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.aarch64",
+      "evra": "2:4.19.4-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.aarch64",
+      "evra": "2:4.19.4-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2203,19 +2203,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.aarch64",
+      "evra": "2:4.19.4-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch",
+      "evra": "2:4.19.4-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.aarch64",
+      "evra": "2:4.19.4-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2497,13 +2497,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2190-1.fc39.noarch",
+      "evra": "2:9.1.016-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2190-1.fc39.aarch64",
+      "evra": "2:9.1.016-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-09T00:00:00Z",
+    "generated": "2024-01-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-08T19:22:59Z"
+        "generated": "2024-01-10T00:05:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-09T01:36:25Z"
+        "generated": "2024-01-11T01:04:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 540655335e..124309d705 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1543,7 +1543,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "evra": "2:4.19.4-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "evra": "2:4.19.4-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2203,19 +2203,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "evra": "2:4.19.4-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch",
+      "evra": "2:4.19.4-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.ppc64le",
+      "evra": "2:4.19.4-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2491,13 +2491,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2190-1.fc39.noarch",
+      "evra": "2:9.1.016-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2190-1.fc39.ppc64le",
+      "evra": "2:9.1.016-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-09T00:00:00Z",
+    "generated": "2024-01-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-08T19:22:03Z"
+        "generated": "2024-01-10T00:02:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-09T01:36:31Z"
+        "generated": "2024-01-11T01:04:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ce889b02ac..10431cee01 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1465,7 +1465,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.s390x",
+      "evra": "2:4.19.4-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1597,7 +1597,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.s390x",
+      "evra": "2:4.19.4-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2101,19 +2101,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.s390x",
+      "evra": "2:4.19.4-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch",
+      "evra": "2:4.19.4-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.s390x",
+      "evra": "2:4.19.4-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2389,13 +2389,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2190-1.fc39.noarch",
+      "evra": "2:9.1.016-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2190-1.fc39.s390x",
+      "evra": "2:9.1.016-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-09T00:00:00Z",
+    "generated": "2024-01-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-08T19:21:41Z"
+        "generated": "2024-01-10T00:02:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-09T01:36:37Z"
+        "generated": "2024-01-11T01:04:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bbd926ae22..ec4f0875b5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.3-1.fc39.x86_64",
+      "evra": "2:4.19.4-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.3-1.fc39.x86_64",
+      "evra": "2:4.19.4-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2209,19 +2209,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.3-1.fc39.x86_64",
+      "evra": "2:4.19.4-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.3-1.fc39.noarch",
+      "evra": "2:4.19.4-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.3-1.fc39.x86_64",
+      "evra": "2:4.19.4-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.0.2190-1.fc39.noarch",
+      "evra": "2:9.1.016-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.0.2190-1.fc39.x86_64",
+      "evra": "2:9.1.016-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-09T00:00:00Z",
+    "generated": "2024-01-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-08T19:23:11Z"
+        "generated": "2024-01-10T00:03:27Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-09T01:36:43Z"
+        "generated": "2024-01-11T01:04:31Z"
       }
     }
   }

From 7d4a08a4ffb373c636c64b0b1e5b681495a39466 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 12 Jan 2024 23:29:20 +0000
Subject: [PATCH 1975/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/962/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e34302c5cd..b5a1d5d3e9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -211,7 +211,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.aarch64",
+      "evra": "1.25.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1939,19 +1939,19 @@
       }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.aarch64",
+      "evra": "9.3p1-10.fc39.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.aarch64",
+      "evra": "9.3p1-10.fc39.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.aarch64",
+      "evra": "9.3p1-10.fc39.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-11T00:00:00Z",
+    "generated": "2024-01-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-10T00:05:39Z"
+        "generated": "2024-01-11T23:46:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-11T01:04:12Z"
+        "generated": "2024-01-12T01:03:06Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 124309d705..93a0a95ac4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -217,7 +217,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.ppc64le",
+      "evra": "1.25.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1921,19 +1921,19 @@
       }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.ppc64le",
+      "evra": "9.3p1-10.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.ppc64le",
+      "evra": "9.3p1-10.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.ppc64le",
+      "evra": "9.3p1-10.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-11T00:00:00Z",
+    "generated": "2024-01-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-10T00:02:22Z"
+        "generated": "2024-01-11T23:44:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-11T01:04:18Z"
+        "generated": "2024-01-12T01:03:12Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 10431cee01..11aef47adf 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -205,7 +205,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.s390x",
+      "evra": "1.25.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1837,19 +1837,19 @@
       }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.s390x",
+      "evra": "9.3p1-10.fc39.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.s390x",
+      "evra": "9.3p1-10.fc39.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.s390x",
+      "evra": "9.3p1-10.fc39.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-11T00:00:00Z",
+    "generated": "2024-01-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-10T00:02:14Z"
+        "generated": "2024-01-11T23:43:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-11T01:04:24Z"
+        "generated": "2024-01-12T01:03:18Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ec4f0875b5..1b367c6bab 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -211,7 +211,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.21.0-1.fc39.x86_64",
+      "evra": "1.25.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1951,19 +1951,19 @@
       }
     },
     "openssh": {
-      "evra": "9.3p1-9.fc39.x86_64",
+      "evra": "9.3p1-10.fc39.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-9.fc39.x86_64",
+      "evra": "9.3p1-10.fc39.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-9.fc39.x86_64",
+      "evra": "9.3p1-10.fc39.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-11T00:00:00Z",
+    "generated": "2024-01-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-10T00:03:27Z"
+        "generated": "2024-01-11T23:44:55Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-11T01:04:31Z"
+        "generated": "2024-01-12T01:03:24Z"
       }
     }
   }

From 074a9d822073287a4fb38460478021f77a7a8e09 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 12 Jan 2024 15:10:38 -0500
Subject: [PATCH 1976/2157] 40ignition-ostree: avoid jq try-catch

There seems to be a bug in jq 1.7 where `try .foo catch "" |
ascii_downcase` now fails.

It seems like jq implements short-circuiting boolean operators, so we
can rework this to instead just use a simpler `and` operator.

Reported-by: Gursewak Mangat <gursmangat@gmail.com>
---
 .../modules.d/40ignition-ostree/ignition-ostree-transposefs.sh  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
index 62fa977043..7bec45c936 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-transposefs.sh
@@ -36,7 +36,7 @@ query_fslabel() {
 
 # Print jq query string for partitions with type GUID $1
 query_parttype() {
-    echo ".storage?.disks? // [] | map(.partitions?) | flatten | map(select(try .typeGuid catch \"\" | ascii_downcase == \"$1\"))"
+    echo ".storage?.disks? // [] | map(.partitions?) | flatten | map(select(has(\"typeGuid\") and (.typeGuid | ascii_downcase == \"$1\")))"
 }
 
 # Print partition labels for partitions with type GUID $1

From c4f87229c8a3a946930757a86bbe0c45cb6dbb20 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 Jan 2024 06:05:18 +0000
Subject: [PATCH 1977/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 1febf3b21c..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  bootupd:
-    evr: 0.2.17-2.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-7fe41d9788
-      type: fast-track
+packages: {}

From 18f24747927b7f87c8c29440a4e7fc3ec57dfbd5 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 15 Jan 2024 11:56:17 -0500
Subject: [PATCH 1978/2157] denylist: update outdated entries

The issues with `ext.config.docker.basic`
and `coreos.unique.boot.failure` were both resolved and
these tests are passing again. Remove the denylist
entries for these two tests.
Bump the snooze for `coreos.ignition.ssh.key` while we
continue to investigate the issue.
---
 kola-denylist.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0ce5dee75b..eb9b08f7ff 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,22 +7,10 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2023-12-14
+  snooze: 2024-02-05
   warn: true
   platforms:
     - azure
-- pattern: ext.config.docker.basic
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  snooze: 2023-12-14
-  warn: true
-  streams:
-    - rawhide
-- pattern: coreos.unique.boot.failure
-  tracker: https://github.com/coreos/coreos-assembler/issues/3669
-  snooze: 2023-12-12
-  warn: true
-  arches:
-    - aarch64
 - pattern: iso-offline-install-iscsi.bios
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
   snooze: 2024-01-20

From 8d5c7cd1bbc82d6af7af1b64571d2317eeab9347 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 15 Jan 2024 20:57:58 +0000
Subject: [PATCH 1979/2157] lockfiles: bump timestamp

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/965/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index b5a1d5d3e9..676dcbad97 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-12T00:00:00Z",
+    "generated": "2024-01-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-11T23:46:13Z"
+        "generated": "2024-01-13T16:53:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-12T01:03:06Z"
+        "generated": "2024-01-15T01:54:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 93a0a95ac4..ae4260a7b5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-12T00:00:00Z",
+    "generated": "2024-01-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-11T23:44:28Z"
+        "generated": "2024-01-13T16:52:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-12T01:03:12Z"
+        "generated": "2024-01-15T01:54:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 11aef47adf..3e497965a0 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2474,16 +2474,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-12T00:00:00Z",
+    "generated": "2024-01-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-11T23:43:22Z"
+        "generated": "2024-01-13T16:51:56Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-12T01:03:18Z"
+        "generated": "2024-01-15T01:54:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1b367c6bab..abd8d9bb0e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-12T00:00:00Z",
+    "generated": "2024-01-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-11T23:44:55Z"
+        "generated": "2024-01-13T16:54:57Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-12T01:03:24Z"
+        "generated": "2024-01-15T01:54:20Z"
       }
     }
   }

From 206cc56fe0f0866f18f4c5c0fbd117dec77944ea Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 16 Jan 2024 09:33:54 -0800
Subject: [PATCH 1980/2157] denylist: snooze root-reprovision.linear

Most recent rawhide build fails root-reprovision.linear
kola test with the latest kernel release. Snoozing till
it gets fixed
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index eb9b08f7ff..a99bb01d90 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -19,3 +19,9 @@
   snooze: 2024-01-22
   streams:
     - rawhide
+- pattern: ext.config.root-reprovision.linear
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1648
+  snooze: 2024-01-22
+  warn: true  
+  streams:
+    - rawhide

From f074bf924581644f6d558d3b7cb3b78497ed677d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 18 Jan 2024 00:12:31 +0000
Subject: [PATCH 1981/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/967/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 676dcbad97..91cb0d7263 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.9-200.fc39.aarch64",
+      "evra": "6.6.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.9-200.fc39.aarch64",
+      "evra": "6.6.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.9-200.fc39.aarch64",
+      "evra": "6.6.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.9-200.fc39.aarch64",
+      "evra": "6.6.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2125,7 +2125,7 @@
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch",
+      "evra": "20240107-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
@@ -2588,7 +2588,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-15T00:00:00Z",
+    "generated": "2024-01-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
@@ -2597,7 +2597,7 @@
         "generated": "2024-01-13T16:53:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-15T01:54:02Z"
+        "generated": "2024-01-17T00:57:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ae4260a7b5..1f53731f8a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1009,25 +1009,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.9-200.fc39.ppc64le",
+      "evra": "6.6.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.9-200.fc39.ppc64le",
+      "evra": "6.6.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.9-200.fc39.ppc64le",
+      "evra": "6.6.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.9-200.fc39.ppc64le",
+      "evra": "6.6.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2125,7 +2125,7 @@
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch",
+      "evra": "20240107-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
@@ -2576,7 +2576,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-15T00:00:00Z",
+    "generated": "2024-01-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
@@ -2585,7 +2585,7 @@
         "generated": "2024-01-13T16:52:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-15T01:54:08Z"
+        "generated": "2024-01-17T00:57:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3e497965a0..8d25056598 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -943,25 +943,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.9-200.fc39.s390x",
+      "evra": "6.6.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.9-200.fc39.s390x",
+      "evra": "6.6.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.9-200.fc39.s390x",
+      "evra": "6.6.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.9-200.fc39.s390x",
+      "evra": "6.6.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2017,7 +2017,7 @@
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch",
+      "evra": "20240107-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
@@ -2474,7 +2474,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-15T00:00:00Z",
+    "generated": "2024-01-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
@@ -2483,7 +2483,7 @@
         "generated": "2024-01-13T16:51:56Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-15T01:54:14Z"
+        "generated": "2024-01-17T00:57:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index abd8d9bb0e..0add50ad76 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.9-200.fc39.x86_64",
+      "evra": "6.6.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.9-200.fc39.x86_64",
+      "evra": "6.6.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.9-200.fc39.x86_64",
+      "evra": "6.6.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.9-200.fc39.x86_64",
+      "evra": "6.6.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2137,7 +2137,7 @@
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20230812-1.fc39.noarch",
+      "evra": "20240107-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
@@ -2594,7 +2594,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-15T00:00:00Z",
+    "generated": "2024-01-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
@@ -2603,7 +2603,7 @@
         "generated": "2024-01-13T16:54:57Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-15T01:54:20Z"
+        "generated": "2024-01-17T00:57:21Z"
       }
     }
   }

From 94ed2a1889ccbbdcaced52c1a37c8a2bb44f660d Mon Sep 17 00:00:00 2001
From: Renata Ravanelli <rravanel@redhat.com>
Date: Tue, 16 Jan 2024 10:20:27 -0300
Subject: [PATCH 1982/2157] Add bootupd package for s390x - Bootupd is now
 available for s390x as part of our ongoing efforts to integrate osbuild.
 Let's include it

- Let's also enable the existing test
to check it.

Signed-off-by: Renata Ravanelli <rravanel@redhat.com>
---
 manifest-lock.s390x.json          | 6 ++++++
 manifests/fedora-coreos-base.yaml | 9 ++-------
 tests/kola/boot/bootupd           | 8 ++------
 3 files changed, 10 insertions(+), 13 deletions(-)

diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 8d25056598..3e68a79183 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -168,6 +168,12 @@
         "sourcerpm": "bind"
       }
     },
+    "bootupd": {
+      "evra": "0.2.17-2.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "rust-bootupd"
+      }
+    },
     "brcmfmac-firmware": {
       "evra": "20231211-1.fc39.noarch",
       "metadata": {
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 2aef067e0e..10dd0a7733 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -10,7 +10,8 @@ include:
   - networking-tools.yaml
   - user-experience.yaml
   - shared-workarounds.yaml
-
+  # See https://github.com/coreos/bootupd
+  - bootupd.yaml
 ostree-layers:
   - overlay/05core
   - overlay/08nouveau
@@ -203,12 +204,6 @@ packages-aarch64:
 packages-s390x:
   - qemu-user-static-x86
 
-# See https://github.com/coreos/bootupd
-arch-include:
-  aarch64: bootupd.yaml
-  ppc64le: bootupd.yaml
-  x86_64: bootupd.yaml
-
 remove-from-packages:
   # Hopefully short-term hack -- see https://github.com/coreos/fedora-coreos-config/pull/1206#discussion_r705425869.
   # This keeps the size down and ensures nothing tries to use it, preventing us
diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 97bbeceb5c..1ae236b0e4 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -12,9 +12,5 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-case "$(arch)" in
-    aarch64|ppc64le|x86_64)
-        bootupctl status
-        ok bootupctl
-        ;;
-esac
+bootupctl status
+ok bootupctl

From 29b0314178fc516a1240cd7edec055f6f80acd0e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 17 Jan 2024 21:33:03 -0500
Subject: [PATCH 1983/2157] tests/bootupd: skip test on ppc64le and s390x if
 bootupd not installed

This test runs on both the 9.2 and 9.4 variants of RHCOS, but we only
have bootupd on ppc64le and s390x on the latter. On those arches, make
the test conditional on whether bootupd is installed.
---
 tests/kola/boot/bootupd | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 1ae236b0e4..34634be594 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -12,5 +12,20 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
+# Not all streams on which this test runs has bootupd on all arches yet. On
+# x86_64 and aarch64, we always expect bootupd to be installed. On ppc64le and
+# s390x, let's just conditionally check that *if* bootupd is installed, then
+# it's functioning as expected. We can harden it more once we've hard cut over
+# to 9.4.
+case "$(arch)" in
+    aarch64|x86_64)
+        ;;
+    *)
+        if ! rpm -q bootupd; then
+            exit 0
+        fi
+        ;;
+esac
+
 bootupctl status
 ok bootupctl

From c84c4ef18c7a193968d46d0468920a69ab938a98 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 18 Jan 2024 14:50:56 -0500
Subject: [PATCH 1984/2157] kola/lvmdevices: use serial to reference disks

Using `/dev/vda`/`/dev/vdb` to refer to attached disks in inherently
unreliable since the order may change across e.g. OS or QEMU versions.

Slap on a serial name instead and refer to it that way. Interestingly,
it seems like the LVM tooling also picks up on this and bases its entry
in the `lvmdevices` file on the device serial.

Closes: #2807
---
 tests/kola/disks/lvmdevices | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/tests/kola/disks/lvmdevices b/tests/kola/disks/lvmdevices
index b651affa87..bcea424def 100755
--- a/tests/kola/disks/lvmdevices
+++ b/tests/kola/disks/lvmdevices
@@ -5,7 +5,7 @@
 ##   # additionalDisks is only supported on qemu.
 ##   platforms: qemu
 ##   # A few extra disks to set up LVM on.
-##   additionalDisks: ["1G", "2G"]
+##   additionalDisks: ["1G:serial=disk1", "2G:serial=disk2"]
 
 set -xeuo pipefail
 
@@ -29,8 +29,8 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
       # Set up LVM on the two disks and set up a vg/lv/fs/mount on one
       # of them. Specify a blank devicesfile so the *create commands
       # won't touch our devices file.
-      pvcreate --devicesfile="" /dev/vda /dev/vdb
-      vgcreate --devicesfile="" vg1 /dev/vda
+      pvcreate --devicesfile="" /dev/disk/by-id/virtio-disk1 /dev/disk/by-id/virtio-disk2
+      vgcreate --devicesfile="" vg1 /dev/disk/by-id/virtio-disk1
       lvcreate --devicesfile="" vg1 --name=lv1 -l 100%FREE
       mkfs.ext4 /dev/vg1/lv1
       echo "/dev/vg1/lv1 /srv/ ext4 defaults 0 2" >> /etc/fstab
@@ -46,8 +46,8 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 
   rebooted)
       # Check that the devices are in the devices file.
-      grep -q 'DEVNAME=/dev/vda' "$LVMDEVICESFILE" || fatal "Missing vda in devices file"
-      grep -q 'DEVNAME=/dev/vdb' "$LVMDEVICESFILE" || fatal "Missing vdb in devices file"
+      grep -q 'IDTYPE=sys_serial IDNAME=disk1' "$LVMDEVICESFILE" || fatal "Missing disk1 in devices file"
+      grep -q 'IDTYPE=sys_serial IDNAME=disk2' "$LVMDEVICESFILE" || fatal "Missing disk2 in devices file"
 
       # Check that we can see the PVs
       if [ "$(pvs --noheadings | wc -l)" != '2' ]; then

From 95fb9aabc5635a7ed68885abf7c5814a4352e57b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 18 Jan 2024 14:23:20 -0500
Subject: [PATCH 1985/2157] tests/grub2-install: update to match bootupd
 grub2-install invocation

The bootupd invocation of grub2-install [1] specifies both mdraid1x
and part_gpt modules. Let's update it here so the tests pass if built
using OSBuild.

[1] https://github.com/coreos/bootupd/blob/e1be3005d827fc3bacf82a2c2a98cd9c0706c65f/src/bios.rs#L66-L69
---
 tests/kola/boot/grub2-install | 27 +++++++++++++++++++++------
 1 file changed, 21 insertions(+), 6 deletions(-)

diff --git a/tests/kola/boot/grub2-install b/tests/kola/boot/grub2-install
index 6064c46ec5..d9aa01e0fe 100755
--- a/tests/kola/boot/grub2-install
+++ b/tests/kola/boot/grub2-install
@@ -18,23 +18,36 @@ set -xeuo pipefail
 
 boot_dev=/boot
 arch=$(arch)
+grub_install_args=""
+grub_modules=()
 case ${arch} in
   x86_64)
     target=i386-pc
     core="${boot_dev}/grub2/${target}/core.img"
     partition=$(findmnt -no SOURCE ${boot_dev})
     device=$(lsblk --paths -no PKNAME ${partition})
-    # sync grub2-install parameter according to image build script
-    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
-    grub_install_args="--modules mdraid1x"
+    #
+    # Handle modules for both the create_disk.sh case that only
+    # includes "mdraid1x" and bootupd case (used when building using
+    # OSBuild) that adds "part_gpt". The aleph stage in osbuild is
+    # the only one that creates a file at /sysroot/.aleph-version.json
+    #
+    # sync grub2-install parameters with the bootupd invocation from:
+    # https://github.com/coreos/bootupd/blob/main/src/bios.rs
+    grub_modules+=("mdraid1x")
+    if [ -f /sysroot/.aleph-version.json ]; then
+        # collapse this if in't the previous line when all is moved
+        # over to building using OSBuild.
+        grub_modules+=("part_gpt")
+    fi
     ;;
 
   ppc64le)
     target=powerpc-ieee1275
     core="${boot_dev}/grub2/${target}/core.elf"
     device=$(realpath /dev/disk/by-partlabel/PowerPC-PReP-boot)
-    # sync grub2-install parameter according to image build script
-    # https://github.com/coreos/coreos-assembler/blob/main/src/create_disk.sh
+    # sync grub2-install parameters with the bootupd invocation from:
+    # https://github.com/coreos/bootupd/blob/main/src/bios.rs
     grub_install_args="--no-nvram"
     ;;
 
@@ -47,7 +60,9 @@ esac
 core_sum=$(sha256sum ${core} | awk '{print $1}')
 
 mount -o remount,rw ${boot_dev}
-grub2-install --target ${target} --boot-directory ${boot_dev} ${grub_install_args} ${device}
+grub2-install --target ${target} --boot-directory ${boot_dev} \
+      ${grub_modules:+--modules "${grub_modules[*]}"}         \
+      ${grub_install_args} ${device}
 
 new_core_sum=$(sha256sum ${core} | awk '{print $1}')
 

From deaaaf8b2cbef60a5e2aef2309aa6048d854ae20 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Sat, 20 Jan 2024 12:20:07 -0500
Subject: [PATCH 1986/2157] denylist: drop snooze for
 iso-offline-install-iscsi.bios

This means it will be unconditionally denylisted because it's known
to fail right now. Until that is fixed there is no use having it
un-snooze periodically.

See https://github.com/coreos/fedora-coreos-tracker/issues/1638
---
 kola-denylist.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a99bb01d90..96acc27223 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,7 +13,6 @@
     - azure
 - pattern: iso-offline-install-iscsi.bios
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
-  snooze: 2024-01-20
 - pattern: ext.config.rpm-ostree.kernel-replace
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1642
   snooze: 2024-01-22

From 0c1b090433b8b543db55a8386fbef62552f19c8d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 22 Jan 2024 19:36:07 +0000
Subject: [PATCH 1987/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/973/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 36 ++++++++++++++++++------------------
 manifest-lock.ppc64le.json | 36 ++++++++++++++++++------------------
 manifest-lock.s390x.json   | 36 ++++++++++++++++++------------------
 manifest-lock.x86_64.json  | 36 ++++++++++++++++++------------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 91cb0d7263..6ad0e5db35 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -487,7 +487,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.aarch64",
+      "evra": "1.0.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -859,7 +859,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.aarch64",
+      "evra": "6:0.7.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.11-200.fc39.aarch64",
+      "evra": "6.6.12-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.11-200.fc39.aarch64",
+      "evra": "6.6.12-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.11-200.fc39.aarch64",
+      "evra": "6.6.12-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.11-200.fc39.aarch64",
+      "evra": "6.6.12-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1417,7 +1417,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc2.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1633,7 +1633,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.aarch64",
+      "evra": "1.3.4-0.rc2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -1705,7 +1705,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.aarch64",
+      "evra": "0.3.15-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1879,7 +1879,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc2.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2011,13 +2011,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231204.gb86afe3-1.fc39.aarch64",
+      "evra": "0^20231230.gf091893-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
+      "evra": "0^20231230.gf091893-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2449,7 +2449,7 @@
       }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.aarch64",
+      "evra": "0.0.99.5-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2497,13 +2497,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.016-1.fc39.noarch",
+      "evra": "2:9.1.031-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.016-1.fc39.aarch64",
+      "evra": "2:9.1.031-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2588,16 +2588,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-17T00:00:00Z",
+    "generated": "2024-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-13T16:53:43Z"
+        "generated": "2024-01-19T22:03:21Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-17T00:57:02Z"
+        "generated": "2024-01-22T01:06:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 1f53731f8a..b839446276 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -487,7 +487,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.ppc64le",
+      "evra": "1.0.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -835,7 +835,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.ppc64le",
+      "evra": "6:0.7.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -1009,25 +1009,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.11-200.fc39.ppc64le",
+      "evra": "6.6.12-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.11-200.fc39.ppc64le",
+      "evra": "6.6.12-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.11-200.fc39.ppc64le",
+      "evra": "6.6.12-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.11-200.fc39.ppc64le",
+      "evra": "6.6.12-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1393,7 +1393,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc2.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1621,7 +1621,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.ppc64le",
+      "evra": "1.3.4-0.rc2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.ppc64le",
+      "evra": "0.3.15-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1861,7 +1861,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc2.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1999,13 +1999,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231204.gb86afe3-1.fc39.ppc64le",
+      "evra": "0^20231230.gf091893-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
+      "evra": "0^20231230.gf091893-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2443,7 +2443,7 @@
       }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.ppc64le",
+      "evra": "0.0.99.5-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2491,13 +2491,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.016-1.fc39.noarch",
+      "evra": "2:9.1.031-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.016-1.fc39.ppc64le",
+      "evra": "2:9.1.031-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-17T00:00:00Z",
+    "generated": "2024-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-13T16:52:38Z"
+        "generated": "2024-01-19T21:49:09Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-17T00:57:08Z"
+        "generated": "2024-01-22T01:06:15Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3e68a79183..01a57bde71 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -481,7 +481,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.s390x",
+      "evra": "1.0.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -781,7 +781,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.s390x",
+      "evra": "6:0.7.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -949,25 +949,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.11-200.fc39.s390x",
+      "evra": "6.6.12-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.11-200.fc39.s390x",
+      "evra": "6.6.12-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.11-200.fc39.s390x",
+      "evra": "6.6.12-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.11-200.fc39.s390x",
+      "evra": "6.6.12-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1333,7 +1333,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc2.fc39.s390x",
+      "evra": "1:2.6.4-0.rc3.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1549,7 +1549,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.s390x",
+      "evra": "1.3.4-0.rc2.fc39.s390x",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -1621,7 +1621,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.s390x",
+      "evra": "0.3.15-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1789,7 +1789,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc2.fc39.s390x",
+      "evra": "1:2.6.4-0.rc3.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1909,13 +1909,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231204.gb86afe3-1.fc39.s390x",
+      "evra": "0^20231230.gf091893-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
+      "evra": "0^20231230.gf091893-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2341,7 +2341,7 @@
       }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.s390x",
+      "evra": "0.0.99.5-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2395,13 +2395,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.016-1.fc39.noarch",
+      "evra": "2:9.1.031-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.016-1.fc39.s390x",
+      "evra": "2:9.1.031-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2480,16 +2480,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-17T00:00:00Z",
+    "generated": "2024-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-13T16:51:56Z"
+        "generated": "2024-01-19T21:48:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-17T00:57:15Z"
+        "generated": "2024-01-22T01:06:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0add50ad76..d825a6fea3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -487,7 +487,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.6-2.fc39.x86_64",
+      "evra": "1.0.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -871,7 +871,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.1-1.fc39.x86_64",
+      "evra": "6:0.7.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.11-200.fc39.x86_64",
+      "evra": "6.6.12-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.11-200.fc39.x86_64",
+      "evra": "6.6.12-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.11-200.fc39.x86_64",
+      "evra": "6.6.12-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.11-200.fc39.x86_64",
+      "evra": "6.6.12-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1423,7 +1423,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc2.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1639,7 +1639,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.fc39.x86_64",
+      "evra": "1.3.4-0.rc2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.14-1.fc39.x86_64",
+      "evra": "0.3.15-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1891,7 +1891,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc2.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2023,13 +2023,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231204.gb86afe3-1.fc39.x86_64",
+      "evra": "0^20231230.gf091893-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231204.gb86afe3-1.fc39.noarch",
+      "evra": "0^20231230.gf091893-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2455,7 +2455,7 @@
       }
     },
     "toolbox": {
-      "evra": "0.0.99.4-5.fc39.x86_64",
+      "evra": "0.0.99.5-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.016-1.fc39.noarch",
+      "evra": "2:9.1.031-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.016-1.fc39.x86_64",
+      "evra": "2:9.1.031-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-17T00:00:00Z",
+    "generated": "2024-01-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-13T16:54:57Z"
+        "generated": "2024-01-19T22:02:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-17T00:57:21Z"
+        "generated": "2024-01-22T01:06:29Z"
       }
     }
   }

From 9d7ccf099724bfc53010485fedf93a47c734a286 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 22 Jan 2024 21:48:23 +0000
Subject: [PATCH 1988/2157] overrides: fast-track rust-afterburn-5.5.1-1.fc39

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..4225ff58e8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  afterburn:
+    evr: 5.5.1-1.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
+      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
+      type: fast-track
+  afterburn-dracut:
+    evr: 5.5.1-1.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
+      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
+      type: fast-track

From 922fcc11b2d308a40d906ef9d8e577dffbe307a5 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Tue, 23 Jan 2024 11:00:11 -0500
Subject: [PATCH 1989/2157] denylist: extend expired snoozes

`ext.config.rpm-ostree.kernel-replace` and
`ext.config.root-reprovision.linear` are still failing.
Let's extend the snooze while we continue to investigate.
---
 kola-denylist.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 96acc27223..40ad4f2764 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,12 +15,13 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
 - pattern: ext.config.rpm-ostree.kernel-replace
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1642
-  snooze: 2024-01-22
+  snooze: 2024-02-05
+  warn: true
   streams:
     - rawhide
 - pattern: ext.config.root-reprovision.linear
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1648
-  snooze: 2024-01-22
+  snooze: 2024-02-05
   warn: true  
   streams:
     - rawhide

From 69d18a592bb5665b334797aadfb708b6d59c61cb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Jan 2024 16:50:45 +0000
Subject: [PATCH 1990/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/978/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 120 ++++++++++++++++++++++---------------
 manifest-lock.ppc64le.json | 120 ++++++++++++++++++++++---------------
 manifest-lock.s390x.json   | 120 ++++++++++++++++++++++---------------
 manifest-lock.x86_64.json  | 120 ++++++++++++++++++++++---------------
 4 files changed, 288 insertions(+), 192 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6ad0e5db35..daabba60ac 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -55,37 +55,37 @@
       }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.aarch64",
+      "evra": "5.5.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.aarch64",
+      "evra": "5.5.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.aarch64",
+      "evra": "1.26-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.aarch64",
+      "evra": "3.1.2-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.aarch64",
+      "evra": "3.1.2-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -133,7 +133,7 @@
       }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.aarch64",
+      "evra": "5.2.26-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "bash"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.aarch64",
+      "evra": "6.7-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -240,6 +240,12 @@
         "sourcerpm": "cifs-utils"
       }
     },
+    "cirrus-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "clevis": {
       "evra": "19-4.fc39.aarch64",
       "metadata": {
@@ -343,13 +349,13 @@
       }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.aarch64",
+      "evra": "9.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.aarch64",
+      "evra": "9.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
@@ -888,8 +894,14 @@
         "sourcerpm": "inih"
       }
     },
+    "intel-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "intel-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1093,7 +1105,7 @@
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.aarch64",
+      "evra": "1.21.2-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "krb5"
       }
@@ -1315,7 +1327,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1555,7 +1567,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-2.fc39.aarch64",
+      "evra": "2:4.19.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1573,25 +1585,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1687,7 +1699,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-2.fc39.aarch64",
+      "evra": "2:4.19.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1729,13 +1741,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1819,7 +1831,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1915,7 +1927,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1926,6 +1938,12 @@
         "sourcerpm": "nvme-cli"
       }
     },
+    "nxpwireless-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "oniguruma": {
       "evra": "6.9.9-1.fc39.aarch64",
       "metadata": {
@@ -2143,7 +2161,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2203,19 +2221,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-2.fc39.aarch64",
+      "evra": "2:4.19.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-2.fc39.noarch",
+      "evra": "2:4.19.4-3.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-2.fc39.aarch64",
+      "evra": "2:4.19.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2335,55 +2353,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.aarch64",
+      "evra": "2.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2401,37 +2419,37 @@
       }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.aarch64",
+      "evra": "254.8-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2448,6 +2466,12 @@
         "sourcerpm": "libteam"
       }
     },
+    "tiwilink-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "toolbox": {
       "evra": "0.0.99.5-2.fc39.aarch64",
       "metadata": {
@@ -2588,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-22T00:00:00Z",
+    "generated": "2024-01-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-19T22:03:21Z"
+        "generated": "2024-01-24T00:15:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-22T01:06:09Z"
+        "generated": "2024-01-24T01:20:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b839446276..7d26f8554f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -55,37 +55,37 @@
       }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.ppc64le",
+      "evra": "5.5.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.ppc64le",
+      "evra": "5.5.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.ppc64le",
+      "evra": "1.26-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.ppc64le",
+      "evra": "3.1.2-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.ppc64le",
+      "evra": "3.1.2-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -133,7 +133,7 @@
       }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.ppc64le",
+      "evra": "5.2.26-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "bash"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -193,7 +193,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.ppc64le",
+      "evra": "6.7-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -246,6 +246,12 @@
         "sourcerpm": "cifs-utils"
       }
     },
+    "cirrus-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "clevis": {
       "evra": "19-4.fc39.ppc64le",
       "metadata": {
@@ -349,13 +355,13 @@
       }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.ppc64le",
+      "evra": "9.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.ppc64le",
+      "evra": "9.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "coreutils"
       }
@@ -864,8 +870,14 @@
         "sourcerpm": "inih"
       }
     },
+    "intel-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "intel-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1069,7 +1081,7 @@
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.ppc64le",
+      "evra": "1.21.2-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "krb5"
       }
@@ -1291,7 +1303,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1543,7 +1555,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-2.fc39.ppc64le",
+      "evra": "2:4.19.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1561,25 +1573,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1675,7 +1687,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-2.fc39.ppc64le",
+      "evra": "2:4.19.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1717,13 +1729,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1801,7 +1813,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1897,7 +1909,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1908,6 +1920,12 @@
         "sourcerpm": "nvme-cli"
       }
     },
+    "nxpwireless-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "oniguruma": {
       "evra": "6.9.9-1.fc39.ppc64le",
       "metadata": {
@@ -2143,7 +2161,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2203,19 +2221,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-2.fc39.ppc64le",
+      "evra": "2:4.19.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-2.fc39.noarch",
+      "evra": "2:4.19.4-3.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-2.fc39.ppc64le",
+      "evra": "2:4.19.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2329,55 +2347,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.ppc64le",
+      "evra": "2.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2395,37 +2413,37 @@
       }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.ppc64le",
+      "evra": "254.8-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2442,6 +2460,12 @@
         "sourcerpm": "libteam"
       }
     },
+    "tiwilink-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "toolbox": {
       "evra": "0.0.99.5-2.fc39.ppc64le",
       "metadata": {
@@ -2576,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-22T00:00:00Z",
+    "generated": "2024-01-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-19T21:49:09Z"
+        "generated": "2024-01-24T00:14:23Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-22T01:06:15Z"
+        "generated": "2024-01-24T01:20:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 01a57bde71..dca4621c7c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -55,37 +55,37 @@
       }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.s390x",
+      "evra": "5.5.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.s390x",
+      "evra": "5.5.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.s390x",
+      "evra": "1.26-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.s390x",
+      "evra": "3.1.2-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.s390x",
+      "evra": "3.1.2-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -133,7 +133,7 @@
       }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.s390x",
+      "evra": "5.2.26-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "bash"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.s390x",
+      "evra": "6.7-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -240,6 +240,12 @@
         "sourcerpm": "cifs-utils"
       }
     },
+    "cirrus-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "clevis": {
       "evra": "19-4.fc39.s390x",
       "metadata": {
@@ -343,13 +349,13 @@
       }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.s390x",
+      "evra": "9.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.s390x",
+      "evra": "9.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "coreutils"
       }
@@ -810,8 +816,14 @@
         "sourcerpm": "inih"
       }
     },
+    "intel-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "intel-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1009,7 +1021,7 @@
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.s390x",
+      "evra": "1.21.2-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "krb5"
       }
@@ -1231,7 +1243,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1471,7 +1483,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-2.fc39.s390x",
+      "evra": "2:4.19.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1489,25 +1501,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1603,7 +1615,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-2.fc39.s390x",
+      "evra": "2:4.19.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1645,13 +1657,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1729,7 +1741,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1819,7 +1831,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1830,6 +1842,12 @@
         "sourcerpm": "nvme-cli"
       }
     },
+    "nxpwireless-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "oniguruma": {
       "evra": "6.9.9-1.fc39.s390x",
       "metadata": {
@@ -2041,7 +2059,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2107,19 +2125,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-2.fc39.s390x",
+      "evra": "2:4.19.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-2.fc39.noarch",
+      "evra": "2:4.19.4-3.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-2.fc39.s390x",
+      "evra": "2:4.19.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2227,55 +2245,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.s390x",
+      "evra": "2.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2293,37 +2311,37 @@
       }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.s390x",
+      "evra": "254.8-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2340,6 +2358,12 @@
         "sourcerpm": "libteam"
       }
     },
+    "tiwilink-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "toolbox": {
       "evra": "0.0.99.5-2.fc39.s390x",
       "metadata": {
@@ -2480,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-22T00:00:00Z",
+    "generated": "2024-01-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-19T21:48:51Z"
+        "generated": "2024-01-24T00:12:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-22T01:06:22Z"
+        "generated": "2024-01-24T01:21:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d825a6fea3..023aedf1f0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -55,37 +55,37 @@
       }
     },
     "afterburn": {
-      "evra": "5.4.2-2.fc39.x86_64",
+      "evra": "5.5.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.4.2-2.fc39.x86_64",
+      "evra": "5.5.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.25-1.fc39.x86_64",
+      "evra": "1.26-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-5.fc39.x86_64",
+      "evra": "3.1.2-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-5.fc39.x86_64",
+      "evra": "3.1.2-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -133,7 +133,7 @@
       }
     },
     "bash": {
-      "evra": "5.2.21-1.fc39.x86_64",
+      "evra": "5.2.26-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "bash"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.6.2-1.fc39.x86_64",
+      "evra": "6.7-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -240,6 +240,12 @@
         "sourcerpm": "cifs-utils"
       }
     },
+    "cirrus-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "clevis": {
       "evra": "19-4.fc39.x86_64",
       "metadata": {
@@ -343,13 +349,13 @@
       }
     },
     "coreutils": {
-      "evra": "9.3-4.fc39.x86_64",
+      "evra": "9.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-4.fc39.x86_64",
+      "evra": "9.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
@@ -900,8 +906,14 @@
         "sourcerpm": "inih"
       }
     },
+    "intel-audio-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "intel-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1105,7 +1117,7 @@
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-2.fc39.x86_64",
+      "evra": "1.21.2-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "krb5"
       }
@@ -1321,7 +1333,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1561,7 +1573,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-2.fc39.x86_64",
+      "evra": "2:4.19.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1579,25 +1591,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1693,7 +1705,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-2.fc39.x86_64",
+      "evra": "2:4.19.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1735,13 +1747,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1843,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1927,7 +1939,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1938,6 +1950,12 @@
         "sourcerpm": "nvme-cli"
       }
     },
+    "nxpwireless-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "oniguruma": {
       "evra": "6.9.9-1.fc39.x86_64",
       "metadata": {
@@ -2149,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20231211-1.fc39.noarch",
+      "evra": "20240115-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2209,19 +2227,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-2.fc39.x86_64",
+      "evra": "2:4.19.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-2.fc39.noarch",
+      "evra": "2:4.19.4-3.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-2.fc39.x86_64",
+      "evra": "2:4.19.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2341,55 +2359,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.3-1.fc39.x86_64",
+      "evra": "2.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2407,37 +2425,37 @@
       }
     },
     "systemd": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.7-1.fc39.x86_64",
+      "evra": "254.8-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2454,6 +2472,12 @@
         "sourcerpm": "libteam"
       }
     },
+    "tiwilink-firmware": {
+      "evra": "20240115-2.fc39.noarch",
+      "metadata": {
+        "sourcerpm": "linux-firmware"
+      }
+    },
     "toolbox": {
       "evra": "0.0.99.5-2.fc39.x86_64",
       "metadata": {
@@ -2594,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-22T00:00:00Z",
+    "generated": "2024-01-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-19T22:02:29Z"
+        "generated": "2024-01-24T00:13:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-22T01:06:29Z"
+        "generated": "2024-01-24T01:21:08Z"
       }
     }
   }

From 19c78c6f2325610f18fc415a7f8e579a8b5bce2e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 26 Jan 2024 00:25:26 +0000
Subject: [PATCH 1991/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/980/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 54 insertions(+), 54 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index daabba60ac..59ccb483e9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.aarch64",
+      "evra": "32:9.18.21-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch",
+      "evra": "32:9.18.21-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.aarch64",
+      "evra": "32:9.18.21-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.227.0-1.fc39.noarch",
+      "evra": "2:2.228.1-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.12-1.fc39.aarch64",
+      "evra": "1.13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.12-1.fc39.aarch64",
+      "evra": "1.13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.12-200.fc39.aarch64",
+      "evra": "6.6.13-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.12-200.fc39.aarch64",
+      "evra": "6.6.13-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.12-200.fc39.aarch64",
+      "evra": "6.6.13-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.12-200.fc39.aarch64",
+      "evra": "6.6.13-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2155,7 +2155,7 @@
       }
     },
     "readline": {
-      "evra": "8.2-4.fc39.aarch64",
+      "evra": "8.2-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "readline"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-24T00:00:00Z",
+    "generated": "2024-01-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T00:15:30Z"
+        "generated": "2024-01-24T16:55:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-24T01:20:47Z"
+        "generated": "2024-01-25T00:34:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7d26f8554f..fdc998f7db 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -157,19 +157,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.ppc64le",
+      "evra": "32:9.18.21-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch",
+      "evra": "32:9.18.21-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.ppc64le",
+      "evra": "32:9.18.21-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -313,7 +313,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.227.0-1.fc39.noarch",
+      "evra": "2:2.228.1-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -391,7 +391,7 @@
       }
     },
     "crun": {
-      "evra": "1.12-1.fc39.ppc64le",
+      "evra": "1.13-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.12-200.fc39.ppc64le",
+      "evra": "6.6.13-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.12-200.fc39.ppc64le",
+      "evra": "6.6.13-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.12-200.fc39.ppc64le",
+      "evra": "6.6.13-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.12-200.fc39.ppc64le",
+      "evra": "6.6.13-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2155,7 +2155,7 @@
       }
     },
     "readline": {
-      "evra": "8.2-4.fc39.ppc64le",
+      "evra": "8.2-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "readline"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-24T00:00:00Z",
+    "generated": "2024-01-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T00:14:23Z"
+        "generated": "2024-01-24T16:54:10Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-24T01:20:54Z"
+        "generated": "2024-01-25T00:34:10Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dca4621c7c..9759fb366b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.s390x",
+      "evra": "32:9.18.21-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch",
+      "evra": "32:9.18.21-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.s390x",
+      "evra": "32:9.18.21-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.227.0-1.fc39.noarch",
+      "evra": "2:2.228.1-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -385,7 +385,7 @@
       }
     },
     "crun": {
-      "evra": "1.12-1.fc39.s390x",
+      "evra": "1.13-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.12-200.fc39.s390x",
+      "evra": "6.6.13-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.12-200.fc39.s390x",
+      "evra": "6.6.13-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.12-200.fc39.s390x",
+      "evra": "6.6.13-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.12-200.fc39.s390x",
+      "evra": "6.6.13-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2053,7 +2053,7 @@
       }
     },
     "readline": {
-      "evra": "8.2-4.fc39.s390x",
+      "evra": "8.2-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "readline"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-24T00:00:00Z",
+    "generated": "2024-01-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T00:12:38Z"
+        "generated": "2024-01-24T16:55:04Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-24T01:21:01Z"
+        "generated": "2024-01-25T00:34:17Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 023aedf1f0..4eb5e2cb77 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.20-1.fc39.x86_64",
+      "evra": "32:9.18.21-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.20-1.fc39.noarch",
+      "evra": "32:9.18.21-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.20-1.fc39.x86_64",
+      "evra": "32:9.18.21-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.227.0-1.fc39.noarch",
+      "evra": "2:2.228.1-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.12-1.fc39.x86_64",
+      "evra": "1.13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.12-1.fc39.x86_64",
+      "evra": "1.13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.12-200.fc39.x86_64",
+      "evra": "6.6.13-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.12-200.fc39.x86_64",
+      "evra": "6.6.13-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.12-200.fc39.x86_64",
+      "evra": "6.6.13-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.12-200.fc39.x86_64",
+      "evra": "6.6.13-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2161,7 +2161,7 @@
       }
     },
     "readline": {
-      "evra": "8.2-4.fc39.x86_64",
+      "evra": "8.2-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "readline"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-24T00:00:00Z",
+    "generated": "2024-01-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T00:13:38Z"
+        "generated": "2024-01-24T16:55:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-24T01:21:08Z"
+        "generated": "2024-01-25T00:34:24Z"
       }
     }
   }

From 757cdfc298ce804c87a3db6e5c83b1f7e1b3e9ed Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 28 Jan 2024 00:26:38 +0000
Subject: [PATCH 1992/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/984/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 67 insertions(+), 67 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 59ccb483e9..bce13084c5 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -457,25 +457,25 @@
       }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -1165,7 +1165,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1399,7 +1399,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1681,7 +1681,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1783,13 +1783,13 @@
       }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.aarch64",
+      "evra": "2.03.23-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.aarch64",
+      "evra": "2.03.23-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-1.fc39.aarch64",
+      "evra": "2:8.1.3-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2509,13 +2509,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-1.fc39.aarch64",
+      "evra": "2.39.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-25T00:00:00Z",
+    "generated": "2024-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T16:55:43Z"
+        "generated": "2024-01-27T19:22:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-25T00:34:02Z"
+        "generated": "2024-01-27T01:19:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index fdc998f7db..73f2c843a7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -457,25 +457,25 @@
       }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -1141,7 +1141,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1231,7 +1231,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1375,7 +1375,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1549,7 +1549,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1669,7 +1669,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1771,13 +1771,13 @@
       }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.ppc64le",
+      "evra": "2.03.23-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.ppc64le",
+      "evra": "2.03.23-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-1.fc39.ppc64le",
+      "evra": "2:8.1.3-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-1.fc39.ppc64le",
+      "evra": "2.39.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-25T00:00:00Z",
+    "generated": "2024-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T16:54:10Z"
+        "generated": "2024-01-27T19:20:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-25T00:34:10Z"
+        "generated": "2024-01-27T01:19:50Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9759fb366b..3d2760fdb6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -451,25 +451,25 @@
       }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.s390x",
+      "evra": "1.02.197-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.s390x",
+      "evra": "1.02.197-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.s390x",
+      "evra": "1.02.197-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.s390x",
+      "evra": "1.02.197-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -1081,7 +1081,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1315,7 +1315,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1477,7 +1477,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1597,7 +1597,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1699,13 +1699,13 @@
       }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.s390x",
+      "evra": "2.03.23-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.s390x",
+      "evra": "2.03.23-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -2047,7 +2047,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-1.fc39.s390x",
+      "evra": "2:8.1.3-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2401,13 +2401,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-1.fc39.s390x",
+      "evra": "2.39.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-25T00:00:00Z",
+    "generated": "2024-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T16:55:04Z"
+        "generated": "2024-01-27T19:20:32Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-25T00:34:17Z"
+        "generated": "2024-01-27T01:19:57Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4eb5e2cb77..ef5e7adaee 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -457,25 +457,25 @@
       }
     },
     "device-mapper": {
-      "evra": "1.02.196-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.196-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.196-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.196-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1405,7 +1405,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1789,13 +1789,13 @@
       }
     },
     "lvm2": {
-      "evra": "2.03.22-1.fc39.x86_64",
+      "evra": "2.03.23-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.22-1.fc39.x86_64",
+      "evra": "2.03.23-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
@@ -2515,13 +2515,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-1.fc39.x86_64",
+      "evra": "2.39.3-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-25T00:00:00Z",
+    "generated": "2024-01-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-24T16:55:13Z"
+        "generated": "2024-01-27T19:21:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-25T00:34:24Z"
+        "generated": "2024-01-27T01:20:05Z"
       }
     }
   }

From b5ad3d6a055ce5745afc2495474bc8df6bf66d9a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 29 Jan 2024 00:28:31 +0000
Subject: [PATCH 1993/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/986/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index bce13084c5..6274336b58 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2413,7 +2413,7 @@
       }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.aarch64",
+      "evra": "1.9.15-1.p5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "sudo"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-27T00:00:00Z",
+    "generated": "2024-01-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-27T19:22:22Z"
+        "generated": "2024-01-28T02:41:54Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-27T01:19:43Z"
+        "generated": "2024-01-28T02:35:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 73f2c843a7..58e4729839 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2407,7 +2407,7 @@
       }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.ppc64le",
+      "evra": "1.9.15-1.p5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "sudo"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-27T00:00:00Z",
+    "generated": "2024-01-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-27T19:20:53Z"
+        "generated": "2024-01-28T02:39:07Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-27T01:19:50Z"
+        "generated": "2024-01-28T02:35:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3d2760fdb6..74470ca017 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2305,7 +2305,7 @@
       }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.s390x",
+      "evra": "1.9.15-1.p5.fc39.s390x",
       "metadata": {
         "sourcerpm": "sudo"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-27T00:00:00Z",
+    "generated": "2024-01-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-27T19:20:32Z"
+        "generated": "2024-01-28T02:40:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-27T01:19:57Z"
+        "generated": "2024-01-28T02:35:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ef5e7adaee..515ebe618c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2419,7 +2419,7 @@
       }
     },
     "sudo": {
-      "evra": "1.9.14-1.p3.fc39.x86_64",
+      "evra": "1.9.15-1.p5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "sudo"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-27T00:00:00Z",
+    "generated": "2024-01-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-27T19:21:52Z"
+        "generated": "2024-01-28T02:40:45Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-27T01:20:05Z"
+        "generated": "2024-01-28T02:36:06Z"
       }
     }
   }

From 8ff50806b2c634e4940614d2a92d94ee196f60a1 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 29 Jan 2024 10:41:58 -0800
Subject: [PATCH 1994/2157] denylist: remove
 ext.config.rpm-ostree.kernel-replace

The test passes with the latest kernel build
kernel-6.8.0-0.rc2.19.fc40
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 40ad4f2764..e212a92b29 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,12 +13,6 @@
     - azure
 - pattern: iso-offline-install-iscsi.bios
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
-- pattern: ext.config.rpm-ostree.kernel-replace
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1642
-  snooze: 2024-02-05
-  warn: true
-  streams:
-    - rawhide
 - pattern: ext.config.root-reprovision.linear
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1648
   snooze: 2024-02-05

From c5fdd04044ffd77b7151027024a8f6de8021de67 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 31 Jan 2024 05:23:28 +0000
Subject: [PATCH 1995/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/990/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 66 insertions(+), 66 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6274336b58..562d93285c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-6.fc39.aarch64",
+      "evra": "3.1.2-8.fc39.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-6.fc39.aarch64",
+      "evra": "3.1.2-8.fc39.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.13-1.fc39.aarch64",
+      "evra": "1.14-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.13-1.fc39.aarch64",
+      "evra": "1.14-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.aarch64",
+      "evra": "2.89-7.fc39.aarch64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -589,7 +589,7 @@
       }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.aarch64",
+      "evra": "2:6.7-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ethtool"
       }
@@ -817,7 +817,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-2.fc39.aarch64",
+      "evra": "3.8.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1315,7 +1315,7 @@
       }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.aarch64",
+      "evra": "2.3.7-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libidn2"
       }
@@ -1375,7 +1375,7 @@
       }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.aarch64",
+      "evra": "1.9.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
@@ -2083,13 +2083,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.3-1.fc39.aarch64",
+      "evra": "5:4.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.3-1.fc39.aarch64",
+      "evra": "5:4.9.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-2.fc39.aarch64",
+      "evra": "1.6.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2245,13 +2245,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-28T00:00:00Z",
+    "generated": "2024-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-28T02:41:54Z"
+        "generated": "2024-01-30T23:11:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-28T02:35:45Z"
+        "generated": "2024-01-31T01:58:50Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 58e4729839..05f6773ce7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-6.fc39.ppc64le",
+      "evra": "3.1.2-8.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-6.fc39.ppc64le",
+      "evra": "3.1.2-8.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -391,7 +391,7 @@
       }
     },
     "crun": {
-      "evra": "1.13-1.fc39.ppc64le",
+      "evra": "1.14-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.ppc64le",
+      "evra": "2.89-7.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -571,7 +571,7 @@
       }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.ppc64le",
+      "evra": "2:6.7-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ethtool"
       }
@@ -793,7 +793,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-2.fc39.ppc64le",
+      "evra": "3.8.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1291,7 +1291,7 @@
       }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.ppc64le",
+      "evra": "2.3.7-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libidn2"
       }
@@ -1351,7 +1351,7 @@
       }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.ppc64le",
+      "evra": "1.9.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
@@ -2071,13 +2071,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.3-1.fc39.ppc64le",
+      "evra": "5:4.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.3-1.fc39.ppc64le",
+      "evra": "5:4.9.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-2.fc39.ppc64le",
+      "evra": "1.6.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2245,13 +2245,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-28T00:00:00Z",
+    "generated": "2024-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-28T02:39:07Z"
+        "generated": "2024-01-30T23:10:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-28T02:35:52Z"
+        "generated": "2024-01-31T01:58:57Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 74470ca017..4f6ac92a15 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-6.fc39.s390x",
+      "evra": "3.1.2-8.fc39.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-6.fc39.s390x",
+      "evra": "3.1.2-8.fc39.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -385,7 +385,7 @@
       }
     },
     "crun": {
-      "evra": "1.13-1.fc39.s390x",
+      "evra": "1.14-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -499,7 +499,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.s390x",
+      "evra": "2.89-7.fc39.s390x",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -565,7 +565,7 @@
       }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.s390x",
+      "evra": "2:6.7-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ethtool"
       }
@@ -769,7 +769,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-2.fc39.s390x",
+      "evra": "3.8.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1231,7 +1231,7 @@
       }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.s390x",
+      "evra": "2.3.7-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libidn2"
       }
@@ -1291,7 +1291,7 @@
       }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.s390x",
+      "evra": "1.9.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
@@ -1981,13 +1981,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.3-1.fc39.s390x",
+      "evra": "5:4.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.3-1.fc39.s390x",
+      "evra": "5:4.9.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2101,7 +2101,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-2.fc39.s390x",
+      "evra": "1.6.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2149,13 +2149,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-28T00:00:00Z",
+    "generated": "2024-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-28T02:40:35Z"
+        "generated": "2024-01-30T23:10:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-28T02:35:59Z"
+        "generated": "2024-01-31T01:59:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 515ebe618c..ff89f1a8e7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -97,13 +97,13 @@
       }
     },
     "audit": {
-      "evra": "3.1.2-6.fc39.x86_64",
+      "evra": "3.1.2-8.fc39.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-6.fc39.x86_64",
+      "evra": "3.1.2-8.fc39.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.13-1.fc39.x86_64",
+      "evra": "1.14-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.13-1.fc39.x86_64",
+      "evra": "1.14-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-6.fc39.x86_64",
+      "evra": "2.89-7.fc39.x86_64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -589,7 +589,7 @@
       }
     },
     "ethtool": {
-      "evra": "2:6.6-1.fc39.x86_64",
+      "evra": "2:6.7-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ethtool"
       }
@@ -817,7 +817,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.2-2.fc39.x86_64",
+      "evra": "3.8.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1321,7 +1321,7 @@
       }
     },
     "libidn2": {
-      "evra": "2.3.4-3.fc39.x86_64",
+      "evra": "2.3.7-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libidn2"
       }
@@ -1381,7 +1381,7 @@
       }
     },
     "libmaxminddb": {
-      "evra": "1.8.0-1.fc39.x86_64",
+      "evra": "1.9.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
@@ -2095,13 +2095,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.8.3-1.fc39.x86_64",
+      "evra": "5:4.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.8.3-1.fc39.x86_64",
+      "evra": "5:4.9.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2209,7 +2209,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.5.0-2.fc39.x86_64",
+      "evra": "1.6.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2251,13 +2251,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.3-1.fc39.noarch",
+      "evra": "39.4-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-28T00:00:00Z",
+    "generated": "2024-01-31T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-28T02:40:45Z"
+        "generated": "2024-01-30T23:11:56Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-28T02:36:06Z"
+        "generated": "2024-01-31T01:59:12Z"
       }
     }
   }

From 147222412ea197f1e649b72e1c58f51cf421791a Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 30 Jan 2024 18:01:36 -0500
Subject: [PATCH 1996/2157] tests/kernel-replace: tag with "reprovision"

This is a hack to get this test to run not in parallel with other
tests. The performance on our ppc64le builder has been abysmal and
this is one lever we can pull. We have bumped the timeout for the
test in the past. It's already at 20m. I say we just start running
this test serially.
---
 tests/kola/rpm-ostree/kernel-replace | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tests/kola/rpm-ostree/kernel-replace b/tests/kola/rpm-ostree/kernel-replace
index 4fd0dd38af..82dd80716e 100755
--- a/tests/kola/rpm-ostree/kernel-replace
+++ b/tests/kola/rpm-ostree/kernel-replace
@@ -9,7 +9,11 @@
 ##   # RHCOS. See: https://github.com/containers/skopeo/issues/1846
 ##   distros: fcos
 ##   # Needs internet access as we fetch files from koji
-##   tags: "needs-internet platform-independent"
+##   # We add the "reprovision" tag here even though we aren't
+##   # reprovisioning as a hack so that in our pipeline the test
+##   # will execute with no other tests. We were seeing a lot of
+##   # timeouts on ppc64le.
+##   tags: "needs-internet platform-independent reprovision"
 ##   description: Verify that build of a container image with a new kernel
 ##     and reboot into it succeeds.
 

From eeda1c362960f75cdfa03f945a9ebad1aabb02ef Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 31 Jan 2024 12:06:23 +0000
Subject: [PATCH 1997/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 4225ff58e8..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  afterburn:
-    evr: 5.5.1-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
-      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
-      type: fast-track
-  afterburn-dracut:
-    evr: 5.5.1-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
-      reason: https://bodhi.fedoraproject.org/updates/FEDORA-2024-daa3a4e52a
-      type: fast-track
+packages: {}

From f1a628d8c70d0bde8161b8cb64ec962338ca8296 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 23 Jan 2024 16:43:25 -0500
Subject: [PATCH 1998/2157] denylist: add denial for files.console-config on
 rawhide

When we switch to using OSBuild this test will start failing. See
https://github.com/coreos/fedora-coreos-tracker/issues/1654
---
 kola-denylist.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index e212a92b29..793a2dd246 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -19,3 +19,7 @@
   warn: true  
   streams:
     - rawhide
+- pattern: ext.config.files.console-config
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1654
+  streams:
+    - rawhide

From f1c4441b4a0c52e968a56bfa86bba5d7b71b3e77 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 2 Feb 2024 00:41:50 +0000
Subject: [PATCH 1999/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/992/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 562d93285c..f569d2ddd6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.228.1-1.fc39.noarch",
+      "evra": "2:2.229.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -781,25 +781,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-14.fc39.aarch64",
+      "evra": "2.38-16.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-14.fc39.aarch64",
+      "evra": "2.38-16.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-14.fc39.aarch64",
+      "evra": "2.38-16.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-14.fc39.aarch64",
+      "evra": "2.38-16.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -1873,7 +1873,7 @@
       }
     },
     "netavark": {
-      "evra": "1.9.0-1.fc39.aarch64",
+      "evra": "1.10.1-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-31T00:00:00Z",
+    "generated": "2024-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-30T23:11:52Z"
+        "generated": "2024-02-01T18:06:49Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-31T01:58:50Z"
+        "generated": "2024-02-01T01:46:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 05f6773ce7..ad9ec84bc0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -313,7 +313,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.228.1-1.fc39.noarch",
+      "evra": "2:2.229.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -757,25 +757,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-14.fc39.ppc64le",
+      "evra": "2.38-16.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-14.fc39.ppc64le",
+      "evra": "2.38-16.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-14.fc39.ppc64le",
+      "evra": "2.38-16.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-14.fc39.ppc64le",
+      "evra": "2.38-16.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -1855,7 +1855,7 @@
       }
     },
     "netavark": {
-      "evra": "1.9.0-1.fc39.ppc64le",
+      "evra": "1.10.1-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-31T00:00:00Z",
+    "generated": "2024-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-30T23:10:48Z"
+        "generated": "2024-02-01T18:06:08Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-31T01:58:57Z"
+        "generated": "2024-02-01T01:46:26Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4f6ac92a15..9727063ac3 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.228.1-1.fc39.noarch",
+      "evra": "2:2.229.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -733,25 +733,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-14.fc39.s390x",
+      "evra": "2.38-16.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-14.fc39.s390x",
+      "evra": "2.38-16.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-14.fc39.s390x",
+      "evra": "2.38-16.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-14.fc39.s390x",
+      "evra": "2.38-16.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -1783,7 +1783,7 @@
       }
     },
     "netavark": {
-      "evra": "1.9.0-1.fc39.s390x",
+      "evra": "1.10.1-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-31T00:00:00Z",
+    "generated": "2024-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-30T23:10:33Z"
+        "generated": "2024-02-01T18:07:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-31T01:59:04Z"
+        "generated": "2024-02-01T01:46:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index ff89f1a8e7..bbaca45ad1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -307,7 +307,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.228.1-1.fc39.noarch",
+      "evra": "2:2.229.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -781,25 +781,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-14.fc39.x86_64",
+      "evra": "2.38-16.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-14.fc39.x86_64",
+      "evra": "2.38-16.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-14.fc39.x86_64",
+      "evra": "2.38-16.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-14.fc39.x86_64",
+      "evra": "2.38-16.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -1885,7 +1885,7 @@
       }
     },
     "netavark": {
-      "evra": "1.9.0-1.fc39.x86_64",
+      "evra": "1.10.1-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-01-31T00:00:00Z",
+    "generated": "2024-02-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-01-30T23:11:56Z"
+        "generated": "2024-02-01T18:06:56Z"
       },
       "fedora-updates": {
-        "generated": "2024-01-31T01:59:12Z"
+        "generated": "2024-02-01T01:46:41Z"
       }
     }
   }

From c73ef28636c6f07d0f2a8bb4fd7250d1400fdb3f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 3 Feb 2024 01:23:28 +0000
Subject: [PATCH 2000/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/994/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f569d2ddd6..2906eaec17 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.13-200.fc39.aarch64",
+      "evra": "6.6.14-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.13-200.fc39.aarch64",
+      "evra": "6.6.14-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.13-200.fc39.aarch64",
+      "evra": "6.6.14-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.13-200.fc39.aarch64",
+      "evra": "6.6.14-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1333,7 +1333,7 @@
       }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.aarch64",
+      "evra": "0.2.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libjcat"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-01T00:00:00Z",
+    "generated": "2024-02-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-01T18:06:49Z"
+        "generated": "2024-02-02T17:26:18Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-01T01:46:19Z"
+        "generated": "2024-02-02T01:01:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ad9ec84bc0..5546f8d425 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.13-200.fc39.ppc64le",
+      "evra": "6.6.14-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.13-200.fc39.ppc64le",
+      "evra": "6.6.14-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.13-200.fc39.ppc64le",
+      "evra": "6.6.14-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.13-200.fc39.ppc64le",
+      "evra": "6.6.14-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1309,7 +1309,7 @@
       }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.ppc64le",
+      "evra": "0.2.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libjcat"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-01T00:00:00Z",
+    "generated": "2024-02-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-01T18:06:08Z"
+        "generated": "2024-02-02T17:24:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-01T01:46:26Z"
+        "generated": "2024-02-02T01:02:01Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9727063ac3..6078ab7479 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.13-200.fc39.s390x",
+      "evra": "6.6.14-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.13-200.fc39.s390x",
+      "evra": "6.6.14-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.13-200.fc39.s390x",
+      "evra": "6.6.14-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.13-200.fc39.s390x",
+      "evra": "6.6.14-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1249,7 +1249,7 @@
       }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.s390x",
+      "evra": "0.2.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libjcat"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-01T00:00:00Z",
+    "generated": "2024-02-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-01T18:07:38Z"
+        "generated": "2024-02-02T17:25:09Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-01T01:46:34Z"
+        "generated": "2024-02-02T01:02:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index bbaca45ad1..42a1f7828b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.13-200.fc39.x86_64",
+      "evra": "6.6.14-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.13-200.fc39.x86_64",
+      "evra": "6.6.14-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.13-200.fc39.x86_64",
+      "evra": "6.6.14-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.13-200.fc39.x86_64",
+      "evra": "6.6.14-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1339,7 +1339,7 @@
       }
     },
     "libjcat": {
-      "evra": "0.1.14-2.fc39.x86_64",
+      "evra": "0.2.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libjcat"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-01T00:00:00Z",
+    "generated": "2024-02-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-01T18:06:56Z"
+        "generated": "2024-02-02T17:26:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-01T01:46:41Z"
+        "generated": "2024-02-02T01:02:16Z"
       }
     }
   }

From 7574b824f311b952d4681cc5db3792efc176fdaf Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 2 Feb 2024 14:17:19 -0700
Subject: [PATCH 2001/2157] tests/kola/root-reprovision: remove test for linear
 device

md-linear has been marked as deprecated for 2.5 years and was
finally removed from the kernel in v6.8.
Remove the `root-reprovision.linear` test from FCOS and, as a result,
RHCOS.
See https://github.com/coreos/fedora-coreos-tracker/issues/1648#issuecomment-1924505345
for the decision to drop the test.
---
 tests/kola/root-reprovision/linear/config.bu  | 14 -----
 .../root-reprovision/linear/data/commonlib.sh |  1 -
 tests/kola/root-reprovision/linear/test.sh    | 59 -------------------
 3 files changed, 74 deletions(-)
 delete mode 100644 tests/kola/root-reprovision/linear/config.bu
 delete mode 120000 tests/kola/root-reprovision/linear/data/commonlib.sh
 delete mode 100755 tests/kola/root-reprovision/linear/test.sh

diff --git a/tests/kola/root-reprovision/linear/config.bu b/tests/kola/root-reprovision/linear/config.bu
deleted file mode 100644
index 4be3adf2c6..0000000000
--- a/tests/kola/root-reprovision/linear/config.bu
+++ /dev/null
@@ -1,14 +0,0 @@
-variant: fcos
-version: 1.4.0
-storage:
-  raid:
-    - name: foobar
-      level: linear
-      devices:
-      - /dev/disk/by-id/virtio-disk1
-      - /dev/disk/by-id/virtio-disk2
-  filesystems:
-    - device: /dev/md/foobar
-      format: xfs
-      wipe_filesystem: true
-      label: root
diff --git a/tests/kola/root-reprovision/linear/data/commonlib.sh b/tests/kola/root-reprovision/linear/data/commonlib.sh
deleted file mode 120000
index b8dcbdca1a..0000000000
--- a/tests/kola/root-reprovision/linear/data/commonlib.sh
+++ /dev/null
@@ -1 +0,0 @@
-../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/root-reprovision/linear/test.sh b/tests/kola/root-reprovision/linear/test.sh
deleted file mode 100755
index 2fe204a14d..0000000000
--- a/tests/kola/root-reprovision/linear/test.sh
+++ /dev/null
@@ -1,59 +0,0 @@
-#!/bin/bash
-## kola:
-##   # additionalDisks is only supported on qemu.
-##   platforms: qemu
-##   # Root reprovisioning requires at least 4GiB of memory.
-##   minMemory: 4096
-##   # Linear RAID is setup on these disks.
-##   additionalDisks: ["5G", "5G"]
-##   # This test includes a lot of disk I/O and needs a higher
-##   # timeout value than the default.
-##   timeoutMin: 15
-##   # This test reprovisions the rootfs.
-##   tags: reprovision
-##   description: Verify the root reprovision with linear RAID works.
-
-set -xeuo pipefail
-
-# shellcheck disable=SC1091
-. "$KOLA_EXT_DATA/commonlib.sh"
-
-srcdev=$(findmnt -nvr /sysroot -o SOURCE)
-[[ ${srcdev} == $(realpath /dev/md/foobar) ]]
-
-blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
-[[ ${blktype} == linear ]]
-
-fstype=$(findmnt -nvr /sysroot -o FSTYPE)
-[[ ${fstype} == xfs ]]
-ok "source is XFS on linear device"
-
-rootflags=$(findmnt /sysroot -no OPTIONS)
-if ! grep prjquota <<< "${rootflags}"; then
-    fatal "missing prjquota in root mount flags: ${rootflags}"
-fi
-ok "root mounted with prjquota"
-
-case "${AUTOPKGTEST_REBOOT_MARK:-}" in
-  "")
-      # check that ignition-ostree-growfs didn't run
-      if [ -e /run/ignition-ostree-growfs.stamp ]; then
-          fatal "ignition-ostree-growfs ran"
-      fi
-
-      # check that autosave-xfs didn't run
-      if [ -e /run/ignition-ostree-autosaved-xfs.stamp ]; then
-          fatal "unexpected autosaved XFS"
-      fi
-
-      # reboot once to sanity-check we can find root on second boot
-      /tmp/autopkgtest-reboot rebooted
-      ;;
-
-  rebooted)
-      grep root=UUID= /proc/cmdline
-      grep rd.md.uuid= /proc/cmdline
-      ok "found root kargs"
-      ;;
-  *) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
-esac

From 3c70d6afe733a95a41fcb25ec8d824fbb557c4ab Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 4 Feb 2024 23:27:34 +0000
Subject: [PATCH 2002/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/996/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2906eaec17..7eebc1bf12 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -565,7 +565,7 @@
       }
     },
     "efivar-libs": {
-      "evra": "38-8.fc39.aarch64",
+      "evra": "39-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "efivar"
       }
@@ -2185,13 +2185,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.11-1.fc39.aarch64",
+      "evra": "2024.2-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.11-1.fc39.aarch64",
+      "evra": "2024.2-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-02T00:00:00Z",
+    "generated": "2024-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-02T17:26:18Z"
+        "generated": "2024-02-03T16:46:04Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-02T01:01:54Z"
+        "generated": "2024-02-04T01:38:16Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5546f8d425..4930c0df08 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2185,13 +2185,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.11-1.fc39.ppc64le",
+      "evra": "2024.2-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.11-1.fc39.ppc64le",
+      "evra": "2024.2-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-02T00:00:00Z",
+    "generated": "2024-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-02T17:24:53Z"
+        "generated": "2024-02-03T16:45:24Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-02T01:02:01Z"
+        "generated": "2024-02-04T01:38:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6078ab7479..b1fc65de9a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2083,13 +2083,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.11-1.fc39.s390x",
+      "evra": "2024.2-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.11-1.fc39.s390x",
+      "evra": "2024.2-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-02T00:00:00Z",
+    "generated": "2024-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-02T17:25:09Z"
+        "generated": "2024-02-03T16:45:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-02T01:02:08Z"
+        "generated": "2024-02-04T01:38:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 42a1f7828b..50e23771c5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -565,7 +565,7 @@
       }
     },
     "efivar-libs": {
-      "evra": "38-8.fc39.x86_64",
+      "evra": "39-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "efivar"
       }
@@ -2191,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2023.11-1.fc39.x86_64",
+      "evra": "2024.2-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2023.11-1.fc39.x86_64",
+      "evra": "2024.2-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-02T00:00:00Z",
+    "generated": "2024-02-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-02T17:26:20Z"
+        "generated": "2024-02-03T16:46:10Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-02T01:02:16Z"
+        "generated": "2024-02-04T01:38:38Z"
       }
     }
   }

From 6349d58bf7c71b9000be71264d71806d8ecb6758 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Feb 2024 14:47:49 +0000
Subject: [PATCH 2003/2157] overrides: fast-track runc-1.1.12-1.fc39

---
 manifest-lock.overrides.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..6249bf574b 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,10 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  runc:
+    evr: 2:1.1.12-1.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-900dc7f6ff
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1664
+      type: fast-track

From 9686232966938e1a2a5a6a8050d99871704b27b1 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 5 Feb 2024 10:07:23 -0700
Subject: [PATCH 2004/2157] denylist: extend snooze for
 `coreos.ignition.ssh.key`

This test is still failing. Let's bump the snooze while we
continue to investigate:
https://github.com/coreos/fedora-coreos-tracker/issues/1553
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 793a2dd246..0415f13b8c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-02-05
+  snooze: 2024-02-26
   warn: true
   platforms:
     - azure

From bbed2db5ac421792b0aa1be84e9aacb19a034263 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 5 Feb 2024 10:08:41 -0700
Subject: [PATCH 2005/2157] denylist: remove `root-reprovision.linear` entry

md.linear was removed from the 6.8 kernel and as a result
we removed the test from FCOS and RHCOS in:
https://github.com/coreos/fedora-coreos-config/pull/2830.
Remove the entry to clean up the denylist.
---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 0415f13b8c..c98e19cac8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,12 +13,6 @@
     - azure
 - pattern: iso-offline-install-iscsi.bios
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
-- pattern: ext.config.root-reprovision.linear
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1648
-  snooze: 2024-02-05
-  warn: true  
-  streams:
-    - rawhide
 - pattern: ext.config.files.console-config
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1654
   streams:

From 1cd719826da739c693592075762c00e42834caf7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 5 Feb 2024 23:28:07 +0000
Subject: [PATCH 2006/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/997/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 55 insertions(+), 55 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7eebc1bf12..863ef0f105 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.9.0-1.fc39.aarch64",
+      "evra": "1.10.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -841,25 +841,25 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-110.fc39.noarch",
+      "evra": "1:2.06-116.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-110.fc39.aarch64",
+      "evra": "1:2.06-116.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-110.fc39.aarch64",
+      "evra": "1:2.06-116.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-110.fc39.aarch64",
+      "evra": "1:2.06-116.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -889,7 +889,7 @@
       }
     },
     "inih": {
-      "evra": "57-2.fc39.aarch64",
+      "evra": "58-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "inih"
       }
@@ -1753,7 +1753,7 @@
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.aarch64",
+      "evra": "0.9.32-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "lmdb"
       }
@@ -2173,13 +2173,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-1.fc39.aarch64",
+      "evra": "4.19.1-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-1.fc39.aarch64",
+      "evra": "4.19.1-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2197,7 +2197,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-1.fc39.aarch64",
+      "evra": "4.19.1-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2215,7 +2215,7 @@
       }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.aarch64",
+      "evra": "2:1.1.12-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "runc"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-04T00:00:00Z",
+    "generated": "2024-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-03T16:46:04Z"
+        "generated": "2024-02-05T16:25:24Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-04T01:38:16Z"
+        "generated": "2024-02-05T01:16:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4930c0df08..69539194ad 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.9.0-1.fc39.ppc64le",
+      "evra": "1.10.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -811,31 +811,31 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-110.fc39.noarch",
+      "evra": "1:2.06-116.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-110.fc39.ppc64le",
+      "evra": "1:2.06-116.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-110.fc39.noarch",
+      "evra": "1:2.06-116.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-110.fc39.ppc64le",
+      "evra": "1:2.06-116.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-110.fc39.ppc64le",
+      "evra": "1:2.06-116.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -865,7 +865,7 @@
       }
     },
     "inih": {
-      "evra": "57-2.fc39.ppc64le",
+      "evra": "58-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "inih"
       }
@@ -1741,7 +1741,7 @@
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.ppc64le",
+      "evra": "0.9.32-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "lmdb"
       }
@@ -2173,13 +2173,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-1.fc39.ppc64le",
+      "evra": "4.19.1-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-1.fc39.ppc64le",
+      "evra": "4.19.1-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2197,7 +2197,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-1.fc39.ppc64le",
+      "evra": "4.19.1-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2215,7 +2215,7 @@
       }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.ppc64le",
+      "evra": "2:1.1.12-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "runc"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-04T00:00:00Z",
+    "generated": "2024-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-03T16:45:24Z"
+        "generated": "2024-02-05T16:25:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-04T01:38:24Z"
+        "generated": "2024-02-05T01:16:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b1fc65de9a..e29a86f378 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.9.0-1.fc39.s390x",
+      "evra": "1.10.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -811,7 +811,7 @@
       }
     },
     "inih": {
-      "evra": "57-2.fc39.s390x",
+      "evra": "58-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "inih"
       }
@@ -1669,7 +1669,7 @@
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.s390x",
+      "evra": "0.9.32-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "lmdb"
       }
@@ -2071,13 +2071,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-1.fc39.s390x",
+      "evra": "4.19.1-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-1.fc39.s390x",
+      "evra": "4.19.1-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2095,7 +2095,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-1.fc39.s390x",
+      "evra": "4.19.1-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2113,7 +2113,7 @@
       }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.s390x",
+      "evra": "2:1.1.12-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "runc"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-04T00:00:00Z",
+    "generated": "2024-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-03T16:45:17Z"
+        "generated": "2024-02-05T16:22:58Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-04T01:38:31Z"
+        "generated": "2024-02-05T01:16:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 50e23771c5..298fe6eee1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -37,7 +37,7 @@
       }
     },
     "aardvark-dns": {
-      "evra": "1.9.0-1.fc39.x86_64",
+      "evra": "1.10.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
@@ -841,37 +841,37 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-110.fc39.noarch",
+      "evra": "1:2.06-116.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-110.fc39.x86_64",
+      "evra": "1:2.06-116.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc": {
-      "evra": "1:2.06-110.fc39.x86_64",
+      "evra": "1:2.06-116.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-110.fc39.noarch",
+      "evra": "1:2.06-116.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-110.fc39.x86_64",
+      "evra": "1:2.06-116.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-110.fc39.x86_64",
+      "evra": "1:2.06-116.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -901,7 +901,7 @@
       }
     },
     "inih": {
-      "evra": "57-2.fc39.x86_64",
+      "evra": "58-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "inih"
       }
@@ -1759,7 +1759,7 @@
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.31-2.fc39.x86_64",
+      "evra": "0.9.32-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "lmdb"
       }
@@ -2179,13 +2179,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-1.fc39.x86_64",
+      "evra": "4.19.1-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-1.fc39.x86_64",
+      "evra": "4.19.1-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-1.fc39.x86_64",
+      "evra": "4.19.1-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2221,7 +2221,7 @@
       }
     },
     "runc": {
-      "evra": "2:1.1.8-1.fc39.x86_64",
+      "evra": "2:1.1.12-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "runc"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-04T00:00:00Z",
+    "generated": "2024-02-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-03T16:46:10Z"
+        "generated": "2024-02-05T16:26:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-04T01:38:38Z"
+        "generated": "2024-02-05T01:16:21Z"
       }
     }
   }

From 83a5f2593f92cfd487c651419a4ea70301a05ed5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 6 Feb 2024 06:05:35 +0000
Subject: [PATCH 2007/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 6249bf574b..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  runc:
-    evr: 2:1.1.12-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-900dc7f6ff
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1664
-      type: fast-track
+packages: {}

From c2efb86e41e66984da3154f926d1344c7a6708f4 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Mon, 15 Jan 2024 17:37:58 +0100
Subject: [PATCH 2008/2157] Enable iscsi test

I have found that nested virtualization does not work for
other arches than x86, so the test is disabled for those
arches in the kola testiso code
We can re-enable this so it runs on x86 at least in the meantime

Tracker issue: https://github.com/coreos/fedora-coreos-tracker/issues/1657
---
 kola-denylist.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index c98e19cac8..a9d2b6a327 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -11,8 +11,6 @@
   warn: true
   platforms:
     - azure
-- pattern: iso-offline-install-iscsi.bios
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1638
 - pattern: ext.config.files.console-config
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1654
   streams:

From 31702a6c98843c3572ba4fd618aedecf3db22a12 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 6 Feb 2024 14:22:45 -0500
Subject: [PATCH 2009/2157] 05core: drop duplicate sysctl dropin to lower
 printk level

This doesn't work anymore since systemd locked down where generators
can write files:

    [    9.246494] /usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator: line 24: /etc/sysctl.d/20-coreos-autologin-kernel-printk.conf: Read-only file system

But anyway, nowadays this duplicates `coreos-printk-quiet.service` which
was added two years after this code was written (#1840).

Noticed by Colin in
https://github.com/ostreedev/ostree/pull/3158#issuecomment-1930494055.
---
 .../coreos-liveiso-autologin-generator         | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
index c794f32066..987f888960 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
@@ -20,17 +20,6 @@ ExecStart=-/sbin/agetty --autologin core -o '-p -f core' ${args} %I \$TERM
 EOF
 }
 
-quiet_kernel_console_messages() {
-    cat <<'EOF' > /etc/sysctl.d/20-coreos-autologin-kernel-printk.conf
-# Raise console message logging level from DEBUG (7) to WARNING (4)
-# so that kernel debug message don't get interspersed on the console
-# that
-# may frustrate a user trying to interactively do an install with
-# nmtui and coreos-installer.
-kernel.printk=4
-EOF
-}
-
 write_interactive_live_motd() {
     # Write motd to a tmp file and not directly to /etc/motd because
     # SELinux denies write from init_t to etc_t
@@ -93,13 +82,6 @@ write_dropin "getty@.service"        "--noclear"
 # Also autologin on serial console if someone enables that
 write_dropin "serial-getty@.service" "--keep-baud 115200,38400,9600"
 
-# When the installer runs a lot of things happen on the system (audit
-# messages from running via sudo, re-reading partition table messages,
-# mounting filesystem messages, etc.). Quieting the verbosity of the
-# kernel console will help us keep our sanity.
-quiet_kernel_console_messages
-
-
 # Write an motd that will let the user know about the live environment
 # and what is possible.
 write_interactive_live_motd

From 09750a1f7af893e1f7665db9f814929fc6352e1d Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Wed, 7 Feb 2024 08:27:52 -0500
Subject: [PATCH 2010/2157] manifests/bootupd: Drop unnecessary `/`

It's not supported to pass anything other than `/` now, and
the argument has been optional for some time.
---
 manifests/bootupd.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/bootupd.yaml b/manifests/bootupd.yaml
index ca8c5de64e..5490631add 100644
--- a/manifests/bootupd.yaml
+++ b/manifests/bootupd.yaml
@@ -10,4 +10,4 @@ postprocess:
     # Until we have https://github.com/coreos/rpm-ostree/pull/2275
     mkdir -p /run
     # Transforms /usr/lib/ostree-boot into a bootupd-compatible update payload
-    /usr/bin/bootupctl backend generate-update-metadata /
+    /usr/bin/bootupctl backend generate-update-metadata

From 24142b26cf8644ac86e3e8f9345dc75b59dced8e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 11:24:13 -0500
Subject: [PATCH 2011/2157] manifests: make bash-color-prompt unconditional

We are now on F39+ everywhere.
---
 manifests/bash-color-prompt.yaml | 6 ------
 manifests/fedora-coreos.yaml     | 8 +++-----
 2 files changed, 3 insertions(+), 11 deletions(-)
 delete mode 100644 manifests/bash-color-prompt.yaml

diff --git a/manifests/bash-color-prompt.yaml b/manifests/bash-color-prompt.yaml
deleted file mode 100644
index 8d3152b56f..0000000000
--- a/manifests/bash-color-prompt.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-# https://github.com/coreos/fedora-coreos-tracker/issues/1567
-# Merge with manifests/fedora-coreos.yaml once Fedora 39 is released to
-# all streams
-packages:
-  # Introduce a default colored prompt for Fedora's default shell bash.
-  - bash-color-prompt
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index fe88df513c..e82dcd7068 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -45,11 +45,6 @@ conditional-include:
     # Merge with manifests/system-configuration.yaml once Fedora 39 is released
     # to all streams
     include: audit.yaml
-  - if: releasever >= 39
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1567
-    # Merge with manifests/fedora-coreos.yaml once Fedora 39 is released
-    # to all streams
-    include: bash-color-prompt.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -75,6 +70,9 @@ packages:
   - zincati
   # Include and set the default editor
   - nano nano-default-editor
+  # Introduce a default colored prompt for Fedora's default shell bash.
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1567
+  - bash-color-prompt
 
 etc-group-members:
   # Add the docker group to /etc/group

From aeb38d0aee4c75e5f5557c32b3e7b445d5877776 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 11:27:21 -0500
Subject: [PATCH 2012/2157] manifests: make audit unconditional

We are now on F39+ everywhere.
---
 manifests/audit.yaml                | 6 ------
 manifests/fedora-coreos.yaml        | 5 -----
 manifests/system-configuration.yaml | 3 +++
 3 files changed, 3 insertions(+), 11 deletions(-)
 delete mode 100644 manifests/audit.yaml

diff --git a/manifests/audit.yaml b/manifests/audit.yaml
deleted file mode 100644
index 048d846d4c..0000000000
--- a/manifests/audit.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-# https://github.com/coreos/fedora-coreos-tracker/issues/1362
-# Merge with manifests/system-configuration.yaml once Fedora 39 is released to
-# all streams
-packages:
-  # Manage and load rules in the audit subsystem in the kernel
-  - audit
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index e82dcd7068..03e56d7854 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -40,11 +40,6 @@ conditional-include:
     # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
     # once Fedora 39 is released to all streams
     include: enable-fwupd-refresh-timer.yaml
-  - if: releasever >= 39
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1362
-    # Merge with manifests/system-configuration.yaml once Fedora 39 is released
-    # to all streams
-    include: audit.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index a2fad7794a..fd78cd1306 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -3,6 +3,9 @@
 # RHCOS.
 
 packages:
+  # Manage and load rules in the audit subsystem in the kernel
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1362
+  - audit
   # Configuring SSH keys, cloud provider check-in, etc
   - afterburn afterburn-dracut
   # NTP support

From a008bf233bed459112c7aaef49789589f68087d9 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 11:33:33 -0500
Subject: [PATCH 2013/2157] manifests: make fwupd-refresh.timer enablement
 unconditional

We are now on F39+ everywhere.
---
 manifests/enable-fwupd-refresh-timer.yaml                | 2 --
 manifests/fedora-coreos.yaml                             | 5 -----
 .../15fcos/usr/lib/systemd/system-preset/45-fcos.preset  | 2 ++
 overlay.d/18fwupd-refresh-timer/statoverride             | 2 --
 .../systemd/system-preset/50-fwupd-refresh-timer.preset  | 4 ----
 overlay.d/README.md                                      | 9 ---------
 6 files changed, 2 insertions(+), 22 deletions(-)
 delete mode 100644 manifests/enable-fwupd-refresh-timer.yaml
 delete mode 100644 overlay.d/18fwupd-refresh-timer/statoverride
 delete mode 100644 overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset

diff --git a/manifests/enable-fwupd-refresh-timer.yaml b/manifests/enable-fwupd-refresh-timer.yaml
deleted file mode 100644
index 79cd710aa5..0000000000
--- a/manifests/enable-fwupd-refresh-timer.yaml
+++ /dev/null
@@ -1,2 +0,0 @@
-ostree-layers:
-  - overlay/18fwupd-refresh-timer
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 03e56d7854..865ff70bf6 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -35,11 +35,6 @@ conditional-include:
     # Modularity is going away in F39+ so we'll only include
     # the fedora-repos-modular package in <39.
     include: fedora-modularity.yaml
-  - if: releasever >= 39
-    # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
-    # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
-    # once Fedora 39 is released to all streams
-    include: enable-fwupd-refresh-timer.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index fd18bec843..12ca639f39 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,3 +1,5 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
 enable coreos-check-cgroups.service
+# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+enable fwupd-refresh.timer
diff --git a/overlay.d/18fwupd-refresh-timer/statoverride b/overlay.d/18fwupd-refresh-timer/statoverride
deleted file mode 100644
index 27a95affe2..0000000000
--- a/overlay.d/18fwupd-refresh-timer/statoverride
+++ /dev/null
@@ -1,2 +0,0 @@
-# Config file for overriding permission bits on overlay files/dirs
-# Format: =<file mode in decimal> <absolute path to a file or directory>
diff --git a/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset b/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset
deleted file mode 100644
index d6f4bf900c..0000000000
--- a/overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset
+++ /dev/null
@@ -1,4 +0,0 @@
-# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
-# As this is for FCOS only for now, once Fedora 39 is released to all streams,
-# this should be moved to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
-enable fwupd-refresh.timer
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 4ef0405e28..6ab411b54b 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -50,15 +50,6 @@ via Console Login Helper Messages.
 
 Remove once Fedora 39 lands in all streams.
 
-18fwupd-refresh-timer
----------------------
-
-Enable fwupd-refresh.timer on Fedora 39:
-https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
-
-Move to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset once
-Fedora 39 lands in all streams.
-
 20platform-chrony
 -----------------
 

From 8381845f21e51eff536e7bea1af864a5b87176ed Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 11:34:32 -0500
Subject: [PATCH 2014/2157] manifests: drop fedora-modularity overlay/manifest

We are now on F39+ everywhere where modularity no longer exists.
---
 manifests/fedora-coreos.yaml                  |  5 ----
 manifests/fedora-modularity.yaml              |  7 -----
 .../46-fcos-fedora-modularity.preset          |  1 -
 .../system/coreos-check-modularity.service    | 10 -------
 .../usr/libexec/coreos-check-modularity       | 29 -------------------
 overlay.d/README.md                           |  8 -----
 6 files changed, 60 deletions(-)
 delete mode 100644 manifests/fedora-modularity.yaml
 delete mode 100644 overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
 delete mode 100644 overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
 delete mode 100755 overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 865ff70bf6..7c8a1a5e74 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -30,11 +30,6 @@ conditional-include:
       - basearch == "aarch64"
     # Remove qcom dtb to help us overcome https://github.com/coreos/fedora-coreos-tracker/issues/1637
     include: aarch64-drop-qcom-dtb-files.yaml
-  - if:
-      - releasever == 38
-    # Modularity is going away in F39+ so we'll only include
-    # the fedora-repos-modular package in <39.
-    include: fedora-modularity.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/fedora-modularity.yaml b/manifests/fedora-modularity.yaml
deleted file mode 100644
index 208d5696d8..0000000000
--- a/manifests/fedora-modularity.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-# Modularity is going away in F39+ so we'll only include
-# the fedora-repos-modular package in <39.
-packages:
-  - fedora-repos-modular
-# And we'll warn users who have layered modular packages
-ostree-layers:
-  - overlay/17fedora-modularity
diff --git a/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset b/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
deleted file mode 100644
index 7744a39307..0000000000
--- a/overlay.d/17fedora-modularity/usr/lib/systemd/system-preset/46-fcos-fedora-modularity.preset
+++ /dev/null
@@ -1 +0,0 @@
-enable coreos-check-modularity.service
diff --git a/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service b/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
deleted file mode 100644
index 915cfbe7c4..0000000000
--- a/overlay.d/17fedora-modularity/usr/lib/systemd/system/coreos-check-modularity.service
+++ /dev/null
@@ -1,10 +0,0 @@
-# This service is used for printing a message if
-# modular RPMs are being used
-[Unit]
-Description=Check if modular packages are layered
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/coreos-check-modularity
-RemainAfterExit=yes
-[Install]
-WantedBy=multi-user.target
diff --git a/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity b/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
deleted file mode 100755
index 4855059cd4..0000000000
--- a/overlay.d/17fedora-modularity/usr/libexec/coreos-check-modularity
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/usr/bin/bash
-# This script checks if the system has layered modular packages and
-# prints a message to the serial console.
-
-# Change the output color to yellow
-warn=$(echo -e '\033[0;33m')
-# No color
-nc=$(echo -e '\033[0m')
-
-# Find the number of installed modules
-num_modules=$(rpm-ostree status --json | jq '.deployments[0].modules | length')
-
-# If there are no modules then nothing to do here
-[ "$num_modules" == "0" ] && exit 0
-
-motd_path=/run/motd.d/35_modularity_warning.motd
-cat << EOF > "${motd_path}"
-${warn}
-############################################################################
-WARNING: This system has layered modularity RPMs. In Fedora 39 modularity
-has been retired. The system will most likely stop updating successfully
-when Fedora CoreOS transitions to Fedora 39. See this tracker for more info:
-https://github.com/coreos/fedora-coreos-tracker/issues/1513
-
-To disable this warning, use:
-sudo systemctl disable coreos-check-modularity.service
-############################################################################
-${nc}
-EOF
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 6ab411b54b..9597731fdf 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -42,14 +42,6 @@ Things that are more closely "Fedora CoreOS":
 Disable Zincati on non-production streams:
 https://github.com/coreos/fedora-coreos-tracker/issues/163
 
-17fedora-modularity
--------------------
-
-Check for layered modularity RPMs to warn users of the retirement in Fedora 39
-via Console Login Helper Messages.
-
-Remove once Fedora 39 lands in all streams.
-
 20platform-chrony
 -----------------
 

From e978a152509620274a552fc14622f1d79612dce6 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 12:04:44 -0500
Subject: [PATCH 2015/2157] manifests: drop aarch64 dtb removal

The software fixing https://github.com/coreos/fedora-coreos-tracker/issues/1637
is now in all streams and barriers have been added. We can drop this.
---
 manifests/aarch64-drop-qcom-dtb-files.yaml | 8 --------
 manifests/fedora-coreos.yaml               | 4 ----
 2 files changed, 12 deletions(-)
 delete mode 100644 manifests/aarch64-drop-qcom-dtb-files.yaml

diff --git a/manifests/aarch64-drop-qcom-dtb-files.yaml b/manifests/aarch64-drop-qcom-dtb-files.yaml
deleted file mode 100644
index e7d1af3198..0000000000
--- a/manifests/aarch64-drop-qcom-dtb-files.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-# Short term hack to avoid running out of space on aarch64. This should
-# save us about 14M. https://github.com/coreos/fedora-coreos-tracker/issues/1637
-# This can be removed once we have added a barrier release.
-postprocess:
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    rm -vrf /usr/lib/modules/*aarch64/dtb/qcom/
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 7c8a1a5e74..262423cc47 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -26,10 +26,6 @@ conditional-include:
   - if:
       - releasever >= 40
     include: ostree-bls.yaml
-  - if:
-      - basearch == "aarch64"
-    # Remove qcom dtb to help us overcome https://github.com/coreos/fedora-coreos-tracker/issues/1637
-    include: aarch64-drop-qcom-dtb-files.yaml
 
 ostree-layers:
   - overlay/15fcos

From bce243b5efbcfa5e6ecf0cb869da5238e0a9d7e5 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 7 Feb 2024 13:01:41 -0500
Subject: [PATCH 2016/2157] manifests: add new passwd manifest, include only on
 F39

The passwd RPM is no longer available in F40+ [1]. The passwd
binary is provided by shadow-utils, which we already name. Let's
configure it so that passwd gets named in the package lists only
on F39.

[1] https://src.fedoraproject.org/rpms/shadow-utils/c/91360f25a8c8b810d59bec2803a2477a2647c775?branch=rawhide
---
 manifests/fedora-coreos.yaml        | 4 ++++
 manifests/passwd.yaml               | 6 ++++++
 manifests/system-configuration.yaml | 1 -
 3 files changed, 10 insertions(+), 1 deletion(-)
 create mode 100644 manifests/passwd.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 262423cc47..469caede66 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -26,6 +26,10 @@ conditional-include:
   - if:
       - releasever >= 40
     include: ostree-bls.yaml
+  - if: releasever == 39
+    # passwd RPM was obsoleted by shadow-utils in F40+, but we need to keep
+    # including it in F39. Remove this when we are on F40+ on all streams.
+    include: passwd.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/passwd.yaml b/manifests/passwd.yaml
new file mode 100644
index 0000000000..1210ff744e
--- /dev/null
+++ b/manifests/passwd.yaml
@@ -0,0 +1,6 @@
+packages:
+  # passwd was obsoleted by shadow-utils in F40+
+  # https://src.fedoraproject.org/rpms/shadow-utils/c/91360f25a8c8b810d59bec2803a2477a2647c775?branch=rawhide
+  # We'll include this file on F39 for now. It can be removed when we are no
+  # longer on F39. RHCOS was taken care of by https://github.com/openshift/os/pull/1438
+  - passwd
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index fd78cd1306..dc86093815 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -25,7 +25,6 @@ packages:
   - sg3_utils
   - xfsprogs
   # User configuration
-  - passwd
   - shadow-utils
   - acl
   # SELinux policy

From 029d320bfe95ab0c59b6fb376467c03397588e60 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 8 Feb 2024 11:29:52 +0100
Subject: [PATCH 2017/2157] manifests/bootupd: Remove 'mkdir -p /run'
 workaround

This was added a while back as a fast-track for a fix in rpm-ostree and
we don't need it anymore.

Reverts: https://github.com/coreos/fedora-coreos-config/commit/cb300804dbb0ffea4e04b84cfb1109b4585c29c5
---
 manifests/bootupd.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/manifests/bootupd.yaml b/manifests/bootupd.yaml
index 5490631add..fe4aa4bed7 100644
--- a/manifests/bootupd.yaml
+++ b/manifests/bootupd.yaml
@@ -7,7 +7,5 @@ postprocess:
   - |
     #!/bin/bash
     set -xeuo pipefail
-    # Until we have https://github.com/coreos/rpm-ostree/pull/2275
-    mkdir -p /run
     # Transforms /usr/lib/ostree-boot into a bootupd-compatible update payload
     /usr/bin/bootupctl backend generate-update-metadata

From 2ba8bcca240a401443f23e76d9f14a2c1986fd08 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 5 Feb 2024 22:43:44 -0500
Subject: [PATCH 2018/2157] 40ignition-ostree: add
 ignition-ostree-mount-state-overlays.service

The new experimental `opt-usrlocal-overlays` treefile knob[1] allows
users to overlay packages with `/opt`/`/usr/local` content (and
eventually, rebase to container images with content in those places).

However, booting a base compose with this knob will break Ignition
configs that currently write data in e.g. `/opt` since that now points
to `/usr/lib/opt`, which is of course read-only.

We need to assemble the state overlays from the initramfs so that those
configs keep working seamlessly.

This is a no-op if state overlays are off (status quo), but it'll make
it easier for people and CI to test the feature.

This is a tiny part of the required bits if we want to eventually
turn this on in FCOS/RHCOS. The other major part is migrating existing
systems.

[1] https://github.com/coreos/rpm-ostree/pull/4728
---
 ...nition-ostree-mount-state-overlays.service | 19 +++++++
 .../ignition-ostree-mount-state-overlays.sh   | 50 +++++++++++++++++++
 .../40ignition-ostree/module-setup.sh         |  4 ++
 3 files changed, 73 insertions(+)
 create mode 100644 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.service
 create mode 100755 overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.sh

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.service
new file mode 100644
index 0000000000..59fac81264
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=Ignition OSTree Mount State Overlays
+DefaultDependencies=false
+ConditionKernelCommandLine=|ostree
+ConditionPathExists=|/run/ostree-live
+
+# Need to do this with all mount points active
+After=ignition-mount.service
+# Not strictly required, but both do /var things
+After=ignition-ostree-populate-var.service
+
+# But *before* we start dumping files in there
+Before=ignition-files.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/libexec/ignition-ostree-mount-state-overlays mount
+ExecStop=/usr/libexec/ignition-ostree-mount-state-overlays umount
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.sh
new file mode 100755
index 0000000000..84a987b6b7
--- /dev/null
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-mount-state-overlays.sh
@@ -0,0 +1,50 @@
+#!/bin/bash
+set -euo pipefail
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+if [ $# -ne 1 ] || { [[ $1 != mount ]] && [[ $1 != umount ]]; }; then
+    fatal "Usage: $0 <mount|umount>"
+fi
+
+# if state overlays are not enabled, there's nothing to do
+if ! ls /sysroot/usr/lib/systemd/system/local-fs.target.requires/ostree-state-overlay@*.service 2>/dev/null; then
+    exit 0
+fi
+
+do_mount() {
+    # be nice to persistent /var; if the top-level state overlay dir exists,
+    # then assume it's properly labeled
+    relabel=1
+    state_overlays_dir=/sysroot/var/ostree/state-overlays
+    if [ -d ${state_overlays_dir} ]; then
+        relabel=0
+    fi
+    for overlay in /usr/lib/opt /usr/local; do
+        escaped=$(systemd-escape --path "${overlay}")
+        overlay_dirs=${state_overlays_dir}/${escaped}
+        mkdir -p "${overlay_dirs}"/{upper,work}
+        # ideally we'd use `ostree admin state-overlay`, but that'd require
+        # pulling in bwrap and chroot which isn't yet in the FCOS initrd
+        mount -t overlay overlay /sysroot/${overlay} -o "lowerdir=/sysroot/${overlay},upperdir=${overlay_dirs}/upper,workdir=${overlay_dirs}/work"
+    done
+    if [ $relabel = 1 ]; then
+        coreos-relabel /var/ostree
+        # the above relabel will have relabeled the upperdir too; relabel that
+        # from the perspective of the mount point so it's not var_t
+        for overlay in /usr/lib/opt /usr/local; do
+            coreos-relabel ${overlay}
+        done
+    fi
+}
+
+do_umount() {
+    for overlay in /usr/lib/opt /usr/local; do
+        umount /sysroot/${overlay}
+    done
+}
+
+"do_$1"
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
index 81ab59896b..d7fd9b650d 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/module-setup.sh
@@ -102,5 +102,9 @@ install() {
     inst_script "$moddir/coreos-check-rootfs-size" \
         /usr/libexec/coreos-check-rootfs-size
 
+    install_ignition_unit ignition-ostree-mount-state-overlays.service
+    inst_script "$moddir/ignition-ostree-mount-state-overlays.sh" \
+        /usr/libexec/ignition-ostree-mount-state-overlays
+
     inst_script "$moddir/coreos-relabel" /usr/bin/coreos-relabel
 }

From cf5395e212621eeb000681040a13bb6ed66ba013 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Feb 2024 02:05:32 +0000
Subject: [PATCH 2019/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1003/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 863ef0f105..abf4d08749 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -325,13 +325,13 @@
       }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.14-200.fc39.aarch64",
+      "evra": "6.7.3-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.14-200.fc39.aarch64",
+      "evra": "6.7.3-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.14-200.fc39.aarch64",
+      "evra": "6.7.3-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.14-200.fc39.aarch64",
+      "evra": "6.7.3-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-05T00:00:00Z",
+    "generated": "2024-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T16:25:24Z"
+        "generated": "2024-02-05T23:30:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-05T01:16:00Z"
+        "generated": "2024-02-07T01:41:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 69539194ad..ac1d17b540 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -331,13 +331,13 @@
       }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.14-200.fc39.ppc64le",
+      "evra": "6.7.3-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.14-200.fc39.ppc64le",
+      "evra": "6.7.3-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.14-200.fc39.ppc64le",
+      "evra": "6.7.3-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.14-200.fc39.ppc64le",
+      "evra": "6.7.3-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-05T00:00:00Z",
+    "generated": "2024-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T16:25:14Z"
+        "generated": "2024-02-05T23:31:45Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-05T01:16:07Z"
+        "generated": "2024-02-07T01:41:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e29a86f378..87d2809382 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -325,13 +325,13 @@
       }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.14-200.fc39.s390x",
+      "evra": "6.7.3-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.14-200.fc39.s390x",
+      "evra": "6.7.3-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.14-200.fc39.s390x",
+      "evra": "6.7.3-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.14-200.fc39.s390x",
+      "evra": "6.7.3-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-05T00:00:00Z",
+    "generated": "2024-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T16:22:58Z"
+        "generated": "2024-02-05T23:29:40Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-05T01:16:14Z"
+        "generated": "2024-02-07T01:42:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 298fe6eee1..2bbd52aea3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -325,13 +325,13 @@
       }
     },
     "containers-common": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-95.fc39.noarch",
+      "evra": "4:1-99.fc39.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.6.14-200.fc39.x86_64",
+      "evra": "6.7.3-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.6.14-200.fc39.x86_64",
+      "evra": "6.7.3-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.6.14-200.fc39.x86_64",
+      "evra": "6.7.3-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.6.14-200.fc39.x86_64",
+      "evra": "6.7.3-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-05T00:00:00Z",
+    "generated": "2024-02-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T16:26:15Z"
+        "generated": "2024-02-05T23:32:26Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-05T01:16:21Z"
+        "generated": "2024-02-07T01:42:10Z"
       }
     }
   }

From 89ad211656f02e96f4ff08ef1f0cb88ae782c934 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Thu, 8 Feb 2024 00:47:34 -0800
Subject: [PATCH 2020/2157] manifests/fedora-coreos: drop
 kdump-aarch64-aws-workaround

No longer need that workaround since the issue has been fixed
Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1187
---
 manifests/fedora-coreos.yaml                |  3 ---
 manifests/kdump-aarch64-aws-workaround.yaml | 12 ------------
 2 files changed, 15 deletions(-)
 delete mode 100644 manifests/kdump-aarch64-aws-workaround.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 469caede66..9f8e1c52d6 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -17,9 +17,6 @@ conditional-include:
   - if: prod == false
     # long-term, would be good to support specifying a nested TreeComposeConfig
     include: disable-zincati.yaml
-  - if: basearch == "aarch64"
-    # Fixup for kdump on aarch64 AWS instances
-    include: kdump-aarch64-aws-workaround.yaml
   - if: basearch != "s390x"
     # And remove some cruft from grub2
     include: grub2-removals.yaml
diff --git a/manifests/kdump-aarch64-aws-workaround.yaml b/manifests/kdump-aarch64-aws-workaround.yaml
deleted file mode 100644
index c198739425..0000000000
--- a/manifests/kdump-aarch64-aws-workaround.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-# This file includes a fixup for kdump on aarch64 AWS instances.
-# The issue seems specific to aarch64 AWS instances, but we'll go
-# ahead and apply it across the board for aarch64, since that's
-# the easiest thing to do. Hopefully the upstream issue will get
-# resolved soon.
-postprocess:
-  - |
-    #!/usr/bin/env bash
-    # Remove irqpoll from the list of KDUMP_COMMANDLINE_APPEND. This
-    # causes issues on aarch64 AWS instances.
-    # https://github.com/coreos/fedora-coreos-tracker/issues/1187
-    sed -i -e 's/irqpoll //' /etc/sysconfig/kdump

From 6d5e24549017f92468d5ac9a9dd33603b1bab89a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 9 Feb 2024 23:25:24 +0000
Subject: [PATCH 2021/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1004/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index abf4d08749..3da03e49a7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2419,37 +2419,37 @@
       }
     },
     "systemd": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.8-2.fc39.aarch64",
+      "evra": "254.9-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2497,7 +2497,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023d-1.fc39.noarch",
+      "evra": "2024a-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2618,10 +2618,10 @@
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T23:30:28Z"
+        "generated": "2024-02-09T02:10:00Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-07T01:41:47Z"
+        "generated": "2024-02-09T01:12:29Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ac1d17b540..2f32bc9574 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2413,37 +2413,37 @@
       }
     },
     "systemd": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.8-2.fc39.ppc64le",
+      "evra": "254.9-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2491,7 +2491,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023d-1.fc39.noarch",
+      "evra": "2024a-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2606,10 +2606,10 @@
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T23:31:45Z"
+        "generated": "2024-02-09T02:09:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-07T01:41:55Z"
+        "generated": "2024-02-09T01:12:36Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 87d2809382..1d0bd9dc76 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2311,37 +2311,37 @@
       }
     },
     "systemd": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.8-2.fc39.s390x",
+      "evra": "254.9-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2389,7 +2389,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023d-1.fc39.noarch",
+      "evra": "2024a-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2510,10 +2510,10 @@
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T23:29:40Z"
+        "generated": "2024-02-09T02:08:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-07T01:42:03Z"
+        "generated": "2024-02-09T01:12:43Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2bbd52aea3..543561c9af 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2425,37 +2425,37 @@
       }
     },
     "systemd": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.8-2.fc39.x86_64",
+      "evra": "254.9-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2503,7 +2503,7 @@
       }
     },
     "tzdata": {
-      "evra": "2023d-1.fc39.noarch",
+      "evra": "2024a-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
@@ -2624,10 +2624,10 @@
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-05T23:32:26Z"
+        "generated": "2024-02-09T02:10:08Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-07T01:42:10Z"
+        "generated": "2024-02-09T01:12:51Z"
       }
     }
   }

From 4b744b00b90d6b6579ff7c432a6c92e762c8ebe6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 10 Feb 2024 23:27:36 +0000
Subject: [PATCH 2022/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1005/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 28 ++++++++++++++--------------
 manifest-lock.s390x.json   | 28 ++++++++++++++--------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3da03e49a7..87e0c8e6c9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.3-200.fc39.aarch64",
+      "evra": "6.7.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.3-200.fc39.aarch64",
+      "evra": "6.7.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.3-200.fc39.aarch64",
+      "evra": "6.7.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.3-200.fc39.aarch64",
+      "evra": "6.7.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1165,7 +1165,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1399,7 +1399,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1681,7 +1681,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2509,13 +2509,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-4.fc39.aarch64",
+      "evra": "2.39.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-09T00:00:00Z",
+    "generated": "2024-02-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T02:10:00Z"
+        "generated": "2024-02-09T23:31:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-09T01:12:29Z"
+        "generated": "2024-02-10T01:17:00Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2f32bc9574..55b015098b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.3-200.fc39.ppc64le",
+      "evra": "6.7.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.3-200.fc39.ppc64le",
+      "evra": "6.7.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.3-200.fc39.ppc64le",
+      "evra": "6.7.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.3-200.fc39.ppc64le",
+      "evra": "6.7.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1141,7 +1141,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1231,7 +1231,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1375,7 +1375,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1549,7 +1549,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1669,7 +1669,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-4.fc39.ppc64le",
+      "evra": "2.39.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-09T00:00:00Z",
+    "generated": "2024-02-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T02:09:03Z"
+        "generated": "2024-02-09T23:30:44Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-09T01:12:36Z"
+        "generated": "2024-02-10T01:17:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1d0bd9dc76..7daba3c47c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.3-200.fc39.s390x",
+      "evra": "6.7.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.3-200.fc39.s390x",
+      "evra": "6.7.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.3-200.fc39.s390x",
+      "evra": "6.7.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.3-200.fc39.s390x",
+      "evra": "6.7.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1081,7 +1081,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1315,7 +1315,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1477,7 +1477,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1597,7 +1597,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2401,13 +2401,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-4.fc39.s390x",
+      "evra": "2.39.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-09T00:00:00Z",
+    "generated": "2024-02-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T02:08:52Z"
+        "generated": "2024-02-09T23:30:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-09T01:12:43Z"
+        "generated": "2024-02-10T01:17:15Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 543561c9af..6b22548f24 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.3-200.fc39.x86_64",
+      "evra": "6.7.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.3-200.fc39.x86_64",
+      "evra": "6.7.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.3-200.fc39.x86_64",
+      "evra": "6.7.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.3-200.fc39.x86_64",
+      "evra": "6.7.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1405,7 +1405,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2515,13 +2515,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-4.fc39.x86_64",
+      "evra": "2.39.3-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-09T00:00:00Z",
+    "generated": "2024-02-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T02:10:08Z"
+        "generated": "2024-02-09T23:31:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-09T01:12:51Z"
+        "generated": "2024-02-10T01:17:23Z"
       }
     }
   }

From 533a8249e821a72db69bfd40397f0c4ac0c654f0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 12 Feb 2024 23:15:41 +0000
Subject: [PATCH 2023/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1007/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 87e0c8e6c9..4e8e8f51da 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -727,7 +727,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.11-1.fc39.aarch64",
+      "evra": "1.9.13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-10T00:00:00Z",
+    "generated": "2024-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T23:31:11Z"
+        "generated": "2024-02-10T23:31:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-10T01:17:00Z"
+        "generated": "2024-02-12T02:38:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 55b015098b..4eeee8cfc8 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -703,7 +703,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.11-1.fc39.ppc64le",
+      "evra": "1.9.13-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-10T00:00:00Z",
+    "generated": "2024-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T23:30:44Z"
+        "generated": "2024-02-10T23:30:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-10T01:17:08Z"
+        "generated": "2024-02-12T02:38:26Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7daba3c47c..aaba93a83e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -697,7 +697,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.11-1.fc39.s390x",
+      "evra": "1.9.13-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-10T00:00:00Z",
+    "generated": "2024-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T23:30:22Z"
+        "generated": "2024-02-10T23:30:36Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-10T01:17:15Z"
+        "generated": "2024-02-12T02:38:34Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6b22548f24..d1fc528949 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -727,7 +727,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.11-1.fc39.x86_64",
+      "evra": "1.9.13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-10T00:00:00Z",
+    "generated": "2024-02-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-09T23:31:20Z"
+        "generated": "2024-02-10T23:31:58Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-10T01:17:23Z"
+        "generated": "2024-02-12T02:38:41Z"
       }
     }
   }

From 6f073a2b939ec0677b7b39177ec605a96ba20497 Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 13 Feb 2024 09:16:57 -0800
Subject: [PATCH 2024/2157] manifest: drop containernetworking-plugins and
 podman-plugins

Since podman is dropping support for CNI networking entirely
we can drop containernetworking-plugins and  podman-plugins.
Podman stopped shipping podman-plugins rpm with the Podmanv5.
Subsequently, we wouldn't need containernetworking-plugins as
it is just libraries for writing CNI plugins.
---
 manifests/cni-plugins.yaml        | 5 +++++
 manifests/fedora-coreos-base.yaml | 7 +++----
 manifests/fedora-coreos.yaml      | 6 ++++++
 3 files changed, 14 insertions(+), 4 deletions(-)
 create mode 100644 manifests/cni-plugins.yaml

diff --git a/manifests/cni-plugins.yaml b/manifests/cni-plugins.yaml
new file mode 100644
index 0000000000..7f70831d4f
--- /dev/null
+++ b/manifests/cni-plugins.yaml
@@ -0,0 +1,5 @@
+# Issue: https://github.com/coreos/fedora-coreos-config/pull/2818
+# Delete this file once we are on Podman v5 everywhere.
+# i.e. We have moved past F39.
+packages:
+  - containernetworking-plugins podman-plugins
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 10dd0a7733..57fe09ac96 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -104,11 +104,10 @@ packages:
   # Containers
   - systemd-container catatonit
   - fuse-overlayfs slirp4netns
-  # support for old style CNI networks and name resolution for
-  # podman containers with CNI networks
+  # Some host applications(i.e. NetworkManager) use dnsmasq
+  # as the binary for some various utility operations.
   # https://github.com/coreos/fedora-coreos-tracker/issues/519
-  # https://github.com/coreos/fedora-coreos-tracker/issues/1128#issuecomment-1071338097
-  - containernetworking-plugins podman-plugins dnsmasq
+  - dnsmasq
   # For podman v4 netavark gets pulled in but it only recommends
   # aardvark-dns (which provides name resolution based on container
   # names). This functionality was previously provided by dnsname from
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 9f8e1c52d6..edd8679cb9 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -27,6 +27,12 @@ conditional-include:
     # passwd RPM was obsoleted by shadow-utils in F40+, but we need to keep
     # including it in F39. Remove this when we are on F40+ on all streams.
     include: passwd.yaml
+  - if: releasever == 39
+    # No longer need CNI plugins in f40 since Podman dropped
+    # support for CNI networking entirely in Podmanv5
+    # Remove this once we have Podman v5 in f39.
+    # xref: https://github.com/coreos/fedora-coreos-tracker/issues/1629
+    include: cni-plugins.yaml
 
 ostree-layers:
   - overlay/15fcos

From 68b7cbd49cc093b591ca0f8ce1b5ea16ac3a23c0 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 14 Feb 2024 18:26:46 -0500
Subject: [PATCH 2025/2157] denylist: snooze var-mount.scsi-id test

This started failing in rawhide and we haven't had time to fully
investigate yet.

https://github.com/coreos/fedora-coreos-tracker/issues/1670
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a9d2b6a327..7e3984be06 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -15,3 +15,9 @@
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1654
   streams:
     - rawhide
+- pattern: ext.config.var-mount.scsi-id
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
+  snooze: 2024-02-21
+  warn: true
+  streams:
+    - rawhide

From dfc0604b1fc7149290585f8a724b4b8a62c04456 Mon Sep 17 00:00:00 2001
From: Benjamin Sherman <benjamin@holyarmy.org>
Date: Tue, 6 Feb 2024 15:52:31 -0600
Subject: [PATCH 2026/2157] feat: use generator vs static drop-in for
 rescue/emergency services

This uses a systemd-generator to replace the static drop-ins which
provide SYSTEMD_SULOGIN_FORCE=1 for rescue.service and
emergency.service.

This improves security by not grantng a root shell upon fsck-failure,
for example. This respects password protected bootloaders and should
be compatible with hardening efforts such as:
https://github.com/coreos/fedora-coreos-tracker/issues/805
---
 .../coreos-sulogin-force-generator            | 66 +++++++++++++++++++
 .../coreos-sulogin-force.conf                 |  7 --
 .../coreos-sulogin-force.conf                 |  1 -
 3 files changed, 66 insertions(+), 8 deletions(-)
 create mode 100755 overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
 delete mode 100644 overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
 delete mode 120000 overlay.d/05core/usr/lib/systemd/system/rescue.service.d/coreos-sulogin-force.conf

diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
new file mode 100755
index 0000000000..a38da85a01
--- /dev/null
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
@@ -0,0 +1,66 @@
+#!/usr/bin/bash
+
+# This systemd.generator(7) detects if rescue or emergency targets were
+# requested from the kernel cmdline; if so, it overrides the respective
+# target to set force sulogin, allowing use of rescue/emergency targets
+# on systems with locked root password (as is Fedora default).
+#
+# This does NOT bypass locked root password on a fsck failure, but WILL
+# bypass when rescue/emergency targets are chosen from kernel cmdline.
+# Since this requires console/grub access, it is assumed to be at least
+# as secure as a user reset of the root password using grub to modify
+# the kernel cmdline with init=/bin/bash .
+#
+# NOTE: the SYSTEMD_SULOGIN_FORCE method used here does not bypass any
+# assigned password; root password is only bypassed when locked/unset.
+
+export PATH="/usr/bin:/usr/sbin:${PATH}"
+if [ -n "$1" ]; then
+    # If invoked with arguments (not testing) log to kmsg
+    # https://github.com/systemd/systemd/issues/15638
+    exec 1>/dev/kmsg; exec 2>&1
+fi
+
+# If invoked with no arguments (for testing) write to /tmp
+UNIT_DIR="${1:-/tmp}"
+
+set -euo pipefail
+
+have_some_karg() {
+    local args=("$@")
+    IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
+    local i
+    for i in "${cmdline[@]}"; do
+        for a in "${args[@]}"; do
+        if [[ "$i" == "$a" ]]; then
+            return 0
+        fi
+        done
+    done
+    return 1
+}
+
+write_dropin() {
+    local service="$1"
+
+    local out_dir="${UNIT_DIR}/${service}.service.d"
+    mkdir -p "${out_dir}"
+
+    # /tmp isn't r/w yet, and the shell needs to cache the here-document
+    TMPDIR=/run
+    cat > "${out_dir}/sulogin-force.conf" <<EOF
+# Automatically created by coreos-sulogin-force-generator
+[Service]
+Environment=SYSTEMD_SULOGIN_FORCE=1
+EOF
+    echo "$(basename ${0}): set SYSTEMD_SULOGIN_FORCE=1 for ${service}.service"
+}
+
+# Match kernel command line targets for systemd(1) rescue/emergency
+# Ignores 'rd.' prefixed targets since they enter the dracut ramdisk
+# environment which does not interact with installed system root user.
+if have_some_karg 'systemd.unit=rescue.target' rescue single s S 1; then
+    write_dropin rescue
+elif have_some_karg 'systemd.unit=emergency.target' emergency '-b' ; then
+    write_dropin emergency
+fi
\ No newline at end of file
diff --git a/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf b/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
deleted file mode 100644
index d58bda6af4..0000000000
--- a/overlay.d/05core/usr/lib/systemd/system/emergency.service.d/coreos-sulogin-force.conf
+++ /dev/null
@@ -1,7 +0,0 @@
-# https://github.com/coreos/coreos-installer/commit/15a79263d0bd5d72056a6080f6687dc10cba2dda
-# https://github.com/systemd/systemd/pull/10397
-# We want things like `systemd.unit=emergency.target` and `single` on the
-# kernel command line to just work even with our locked root account.
-# This file is used as an override for both emergency.target and rescue.target.
-[Service]
-Environment=SYSTEMD_SULOGIN_FORCE=1
diff --git a/overlay.d/05core/usr/lib/systemd/system/rescue.service.d/coreos-sulogin-force.conf b/overlay.d/05core/usr/lib/systemd/system/rescue.service.d/coreos-sulogin-force.conf
deleted file mode 120000
index a8a1f7adb7..0000000000
--- a/overlay.d/05core/usr/lib/systemd/system/rescue.service.d/coreos-sulogin-force.conf
+++ /dev/null
@@ -1 +0,0 @@
-../emergency.service.d/coreos-sulogin-force.conf
\ No newline at end of file

From 43be5237bc96ba22d2f3d339e572262876c78c23 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Feb 2024 01:25:47 +0000
Subject: [PATCH 2027/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1011/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4e8e8f51da..e5fbf5d066 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.aarch64",
+      "evra": "2.43.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2521,13 +2521,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.031-1.fc39.noarch",
+      "evra": "2:9.1.076-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.031-1.fc39.aarch64",
+      "evra": "2:9.1.076-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-12T00:00:00Z",
+    "generated": "2024-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-10T23:31:51Z"
+        "generated": "2024-02-12T23:18:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-12T02:38:19Z"
+        "generated": "2024-02-15T00:51:01Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 4eeee8cfc8..0b431161a4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -745,7 +745,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.ppc64le",
+      "evra": "2.43.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2515,13 +2515,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.031-1.fc39.noarch",
+      "evra": "2:9.1.076-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.031-1.fc39.ppc64le",
+      "evra": "2:9.1.076-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-12T00:00:00Z",
+    "generated": "2024-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-10T23:30:51Z"
+        "generated": "2024-02-12T23:17:40Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-12T02:38:26Z"
+        "generated": "2024-02-15T00:51:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index aaba93a83e..f43e9b55ce 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -721,7 +721,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.s390x",
+      "evra": "2.43.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2419,13 +2419,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.031-1.fc39.noarch",
+      "evra": "2:9.1.076-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.031-1.fc39.s390x",
+      "evra": "2:9.1.076-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-12T00:00:00Z",
+    "generated": "2024-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-10T23:30:36Z"
+        "generated": "2024-02-12T23:17:24Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-12T02:38:34Z"
+        "generated": "2024-02-15T00:51:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d1fc528949..9501deb920 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.0-1.fc39.x86_64",
+      "evra": "2.43.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2527,13 +2527,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.031-1.fc39.noarch",
+      "evra": "2:9.1.076-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.031-1.fc39.x86_64",
+      "evra": "2:9.1.076-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-12T00:00:00Z",
+    "generated": "2024-02-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-10T23:31:58Z"
+        "generated": "2024-02-12T23:18:31Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-12T02:38:41Z"
+        "generated": "2024-02-15T00:51:23Z"
       }
     }
   }

From 32ee5d5f89163211ba034a38cbd4ec92f6296cb8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 16 Feb 2024 23:03:51 +0000
Subject: [PATCH 2028/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1012/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e5fbf5d066..8d6f8cf5d9 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.1-1.fc39.aarch64",
+      "evra": "2.43.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2173,13 +2173,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-2.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-2.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2197,7 +2197,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-2.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-15T00:00:00Z",
+    "generated": "2024-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-12T23:18:29Z"
+        "generated": "2024-02-16T04:36:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-15T00:51:01Z"
+        "generated": "2024-02-16T01:33:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0b431161a4..3732ef99b5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -745,7 +745,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.1-1.fc39.ppc64le",
+      "evra": "2.43.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2173,13 +2173,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-2.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-2.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2197,7 +2197,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-2.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-15T00:00:00Z",
+    "generated": "2024-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-12T23:17:40Z"
+        "generated": "2024-02-16T04:35:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-15T00:51:08Z"
+        "generated": "2024-02-16T01:33:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index f43e9b55ce..726a39ad96 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -721,7 +721,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.1-1.fc39.s390x",
+      "evra": "2.43.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2071,13 +2071,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-2.fc39.s390x",
+      "evra": "4.19.1.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-2.fc39.s390x",
+      "evra": "4.19.1.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2095,7 +2095,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-2.fc39.s390x",
+      "evra": "4.19.1.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-15T00:00:00Z",
+    "generated": "2024-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-12T23:17:24Z"
+        "generated": "2024-02-16T04:35:07Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-15T00:51:16Z"
+        "generated": "2024-02-16T01:33:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9501deb920..42eb44483b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.1-1.fc39.x86_64",
+      "evra": "2.43.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2179,13 +2179,13 @@
       }
     },
     "rpm": {
-      "evra": "4.19.1-2.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1-2.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1-2.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-15T00:00:00Z",
+    "generated": "2024-02-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-12T23:18:31Z"
+        "generated": "2024-02-16T04:36:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-15T00:51:23Z"
+        "generated": "2024-02-16T01:33:31Z"
       }
     }
   }

From 1d757f451fa0b8510091233574d2c012afbc4d91 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Thu, 8 Feb 2024 11:52:26 +0100
Subject: [PATCH 2029/2157] 05core: skip sysroot.mount for remote kdump

If kdump is setup to upload logs to a remote host, the
XFS module may not be loaded, which cause sysroot.mount to fail.

If the target for logs is SSH, kdump will boot with a `kdump_remote_ip`
karg. Skip generating sysroot.mount in that case so kdump can boot
without having to load XFS.

This is a temporary fix until we migrate older systems to have a root
karg: https://github.com/coreos/fedora-coreos-tracker/issues/1675

See https://issues.redhat.com/browse/OCPBUGS-27935
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 51d61cbc30..0bee1e6b63 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -66,7 +66,11 @@ mkdir -p ${UNIT_DIR}
 # We want to generate sysroot.mount on ostree systems, but we don't want
 # to run if there's already a root= karg, where the systemd-fstab-generator
 # should win.
-if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)"; then
+# We also don't want to generate sysroot.mount if we are booting a kdump kernel
+# that aims to upload logs to a remote target, as the XFS kernel module won't be loaded
+# https://issues.redhat.com/browse/OCPBUGS-27935
+# FIXME: this kdump case should be removed when we are done with https://github.com/coreos/fedora-coreos-tracker/issues/1675
+if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)" && test -z "$(cmdline_arg kdump_remote_ip)"; then
     cat >${UNIT_DIR}/sysroot.mount << 'EOF'
 [Unit]
 Before=initrd-root-fs.target

From 8866b18b18173d04c53abc8856541339f7a0f3e2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 17 Feb 2024 23:02:17 +0000
Subject: [PATCH 2030/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1013/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8d6f8cf5d9..3907fd1f8d 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -493,7 +493,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.9-1.fc39.aarch64",
+      "evra": "1.0.11-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -595,7 +595,7 @@
       }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.aarch64",
+      "evra": "2.6.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1573,7 +1573,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.27-1.fc39.aarch64",
+      "evra": "0.7.28-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1873,7 +1873,7 @@
       }
     },
     "netavark": {
-      "evra": "1.10.1-5.fc39.aarch64",
+      "evra": "1.10.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-16T00:00:00Z",
+    "generated": "2024-02-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T04:36:30Z"
+        "generated": "2024-02-16T23:16:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-16T01:33:08Z"
+        "generated": "2024-02-17T00:47:30Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3732ef99b5..b2119016dd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -493,7 +493,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.9-1.fc39.ppc64le",
+      "evra": "1.0.11-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -577,7 +577,7 @@
       }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.ppc64le",
+      "evra": "2.6.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.27-1.fc39.ppc64le",
+      "evra": "0.7.28-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1855,7 +1855,7 @@
       }
     },
     "netavark": {
-      "evra": "1.10.1-5.fc39.ppc64le",
+      "evra": "1.10.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-16T00:00:00Z",
+    "generated": "2024-02-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T04:35:22Z"
+        "generated": "2024-02-16T23:15:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-16T01:33:16Z"
+        "generated": "2024-02-17T00:47:38Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 726a39ad96..d14a0d0ec9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -487,7 +487,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.9-1.fc39.s390x",
+      "evra": "1.0.11-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -571,7 +571,7 @@
       }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.s390x",
+      "evra": "2.6.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1489,7 +1489,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.27-1.fc39.s390x",
+      "evra": "0.7.28-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1783,7 +1783,7 @@
       }
     },
     "netavark": {
-      "evra": "1.10.1-5.fc39.s390x",
+      "evra": "1.10.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-16T00:00:00Z",
+    "generated": "2024-02-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T04:35:07Z"
+        "generated": "2024-02-16T23:15:36Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-16T01:33:23Z"
+        "generated": "2024-02-17T00:47:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 42eb44483b..4d56c2bb74 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -493,7 +493,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.9-1.fc39.x86_64",
+      "evra": "1.0.11-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -595,7 +595,7 @@
       }
     },
     "expat": {
-      "evra": "2.5.0-3.fc39.x86_64",
+      "evra": "2.6.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1579,7 +1579,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.27-1.fc39.x86_64",
+      "evra": "0.7.28-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1885,7 +1885,7 @@
       }
     },
     "netavark": {
-      "evra": "1.10.1-5.fc39.x86_64",
+      "evra": "1.10.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "netavark"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-16T00:00:00Z",
+    "generated": "2024-02-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T04:36:33Z"
+        "generated": "2024-02-16T23:16:55Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-16T01:33:31Z"
+        "generated": "2024-02-17T00:47:53Z"
       }
     }
   }

From 11037a29729e2a9c84dd38bf568261f67d1a7503 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 18 Feb 2024 23:01:08 +0000
Subject: [PATCH 2031/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1014/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3907fd1f8d..123d0e2f55 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2299,7 +2299,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.0-1.fc39.aarch64",
+      "evra": "1:1.14.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2521,13 +2521,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.076-2.fc39.noarch",
+      "evra": "2:9.1.113-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.076-2.fc39.aarch64",
+      "evra": "2:9.1.113-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-17T00:00:00Z",
+    "generated": "2024-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T23:16:33Z"
+        "generated": "2024-02-18T05:50:55Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-17T00:47:30Z"
+        "generated": "2024-02-18T00:46:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b2119016dd..40c8056048 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2299,7 +2299,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.0-1.fc39.ppc64le",
+      "evra": "1:1.14.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2515,13 +2515,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.076-2.fc39.noarch",
+      "evra": "2:9.1.113-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.076-2.fc39.ppc64le",
+      "evra": "2:9.1.113-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-17T00:00:00Z",
+    "generated": "2024-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T23:15:48Z"
+        "generated": "2024-02-18T05:49:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-17T00:47:38Z"
+        "generated": "2024-02-18T00:46:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d14a0d0ec9..efd86a9ab8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2197,7 +2197,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.0-1.fc39.s390x",
+      "evra": "1:1.14.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2419,13 +2419,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.076-2.fc39.noarch",
+      "evra": "2:9.1.113-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.076-2.fc39.s390x",
+      "evra": "2:9.1.113-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-17T00:00:00Z",
+    "generated": "2024-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T23:15:36Z"
+        "generated": "2024-02-18T05:49:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-17T00:47:46Z"
+        "generated": "2024-02-18T00:47:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4d56c2bb74..066f73741f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2305,7 +2305,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.0-1.fc39.x86_64",
+      "evra": "1:1.14.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2527,13 +2527,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.076-2.fc39.noarch",
+      "evra": "2:9.1.113-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.076-2.fc39.x86_64",
+      "evra": "2:9.1.113-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-17T00:00:00Z",
+    "generated": "2024-02-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-16T23:16:55Z"
+        "generated": "2024-02-18T05:51:02Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-17T00:47:53Z"
+        "generated": "2024-02-18T00:47:10Z"
       }
     }
   }

From 82bdc5e4a0fb238d90726794b7aa59330f23bba5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 19 Feb 2024 23:37:45 +0000
Subject: [PATCH 2032/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1015/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 123d0e2f55..2d32e87eb7 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.21-2.fc39.aarch64",
+      "evra": "32:9.18.24-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.21-2.fc39.noarch",
+      "evra": "32:9.18.24-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.21-2.fc39.aarch64",
+      "evra": "32:9.18.24-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-7.fc39.aarch64",
+      "evra": "2.90-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -2407,7 +2407,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-7.fc39.aarch64",
+      "evra": "1.19.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-18T00:00:00Z",
+    "generated": "2024-02-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T05:50:55Z"
+        "generated": "2024-02-18T23:04:00Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-18T00:46:47Z"
+        "generated": "2024-02-19T02:22:48Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 40c8056048..50a2b4cdb9 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -157,19 +157,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.21-2.fc39.ppc64le",
+      "evra": "32:9.18.24-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.21-2.fc39.noarch",
+      "evra": "32:9.18.24-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.21-2.fc39.ppc64le",
+      "evra": "32:9.18.24-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-7.fc39.ppc64le",
+      "evra": "2.90-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -2401,7 +2401,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-7.fc39.ppc64le",
+      "evra": "1.19.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-18T00:00:00Z",
+    "generated": "2024-02-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T05:49:38Z"
+        "generated": "2024-02-18T23:03:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-18T00:46:54Z"
+        "generated": "2024-02-19T02:22:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index efd86a9ab8..ca7a421cc1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.21-2.fc39.s390x",
+      "evra": "32:9.18.24-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.21-2.fc39.noarch",
+      "evra": "32:9.18.24-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.21-2.fc39.s390x",
+      "evra": "32:9.18.24-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -499,7 +499,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-7.fc39.s390x",
+      "evra": "2.90-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -2299,7 +2299,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-7.fc39.s390x",
+      "evra": "1.19.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-18T00:00:00Z",
+    "generated": "2024-02-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T05:49:20Z"
+        "generated": "2024-02-18T23:03:08Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-18T00:47:02Z"
+        "generated": "2024-02-19T02:23:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 066f73741f..c42163b0de 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.21-2.fc39.x86_64",
+      "evra": "32:9.18.24-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.21-2.fc39.noarch",
+      "evra": "32:9.18.24-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.21-2.fc39.x86_64",
+      "evra": "32:9.18.24-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -505,7 +505,7 @@
       }
     },
     "dnsmasq": {
-      "evra": "2.89-7.fc39.x86_64",
+      "evra": "2.90-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
@@ -2413,7 +2413,7 @@
       }
     },
     "stalld": {
-      "evra": "1.16-7.fc39.x86_64",
+      "evra": "1.19.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-18T00:00:00Z",
+    "generated": "2024-02-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T05:51:02Z"
+        "generated": "2024-02-18T23:04:02Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-18T00:47:10Z"
+        "generated": "2024-02-19T02:23:11Z"
       }
     }
   }

From bc8a569080a23976dc52d4dfd1964e0657a4b52a Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 16 Feb 2024 16:51:47 -0500
Subject: [PATCH 2033/2157] Move versionary script here

When we emptied this script out of
https://github.com/coreos/fedora-coreos-releng-automation/ in [[1]],
I'm not sure why I decided to move it to cosa instead of this repo,
where it clearly belongs much better.

[1]: https://github.com/coreos/coreos-assembler/pull/3113
---
 versionary | 173 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 173 insertions(+)
 create mode 100755 versionary

diff --git a/versionary b/versionary
new file mode 100755
index 0000000000..09d49f735f
--- /dev/null
+++ b/versionary
@@ -0,0 +1,173 @@
+#!/usr/bin/python3 -u
+
+# This file originally lived in
+# https://github.com/coreos/fedora-coreos-releng-automation. See that repo for
+# archeological git research.
+
+'''
+    Implements the Fedora CoreOS versioning scheme as per:
+        https://github.com/coreos/fedora-coreos-tracker/issues/81
+        https://github.com/coreos/fedora-coreos-tracker/issues/211
+'''
+
+import argparse
+import json
+import os
+import re
+import subprocess
+import sys
+import time
+import yaml
+
+from datetime import datetime
+
+# streams which don't use lockfiles
+UNLOCKED_STREAMS = [
+    'rawhide',
+    'branched',
+    'bodhi-updates-testing',
+    'bodhi-updates',
+]
+
+# https://github.com/coreos/fedora-coreos-tracker/issues/211#issuecomment-543547587
+STREAM_TO_NUM = {
+    'next': 1,
+    'testing': 2,
+    'stable': 3,
+    'next-devel': 10,
+    'testing-devel': 20,
+    'rawhide': 91,
+    'branched': 92,
+    'bodhi-updates-testing': 93,
+    'bodhi-updates': 94,
+}
+
+
+def main():
+    args = parse_args()
+    if args.workdir is not None:
+        os.chdir(args.workdir)
+    assert os.path.isdir('builds'), 'Missing builds/ dir'
+
+    manifest = get_flattened_manifest()
+    x, y, z = (get_x(manifest), get_y(manifest), get_z(manifest))
+    n = get_next_iteration(x, y, z)
+    new_version = f'{x}.{y}.{z}.{n}'
+
+    # sanity check the new version by trying to re-parse it
+    assert parse_version(new_version) is not None
+    print(new_version)
+
+
+def parse_args():
+    parser = argparse.ArgumentParser()
+    parser.add_argument('--workdir', help="path to cosa workdir")
+    return parser.parse_args()
+
+
+def get_x(manifest):
+    """
+        X is the Fedora release version on which we're based.
+    """
+    releasever = manifest['releasever']
+    eprint(f"x: {releasever} (from manifest)")
+    return int(releasever)
+
+
+def get_y(manifest):
+    """
+        Y is the base snapshot date in YYYYMMDD format of Fedora. We derive
+        this using the timestamp in the base lockfile.
+    """
+
+    stream = manifest['add-commit-metadata']['fedora-coreos.stream']
+
+    # XXX: should sanity check that the lockfiles for all the basearches have
+    # matching timestamps
+    exts = ['json', 'yaml']
+    for ext in exts:
+        try:
+            with open(f"src/config/manifest-lock.x86_64.{ext}") as f:
+                lockfile = yaml.safe_load(f)
+                generated = lockfile.get('metadata', {}).get('generated')
+                if not generated:
+                    raise Exception("Missing 'metadata.generated' key "
+                                    f"from {lockfile}")
+                dt = datetime.strptime(generated, '%Y-%m-%dT%H:%M:%SZ')
+                assert stream not in UNLOCKED_STREAMS
+                msg_src = "from lockfile"
+                break
+        except FileNotFoundError:
+            continue
+    else:
+        # must be an unlocked stream
+        assert stream in UNLOCKED_STREAMS
+        msg_src = "unlocked stream"
+        dt = datetime.now()
+
+    ymd = dt.strftime('%Y%m%d')
+    eprint(f"y: {ymd} ({msg_src})")
+    return int(ymd)
+
+
+def get_z(manifest):
+    """
+        Z is the stream indicator.
+    """
+    stream = manifest['add-commit-metadata']['fedora-coreos.stream']
+    assert stream in STREAM_TO_NUM, f"Unknown stream: {stream}"
+    mapped = STREAM_TO_NUM[stream]
+    eprint(f"z: {mapped} (mapped from stream {stream})")
+    return mapped
+
+
+def get_next_iteration(x, y, z):
+    try:
+        with open('builds/builds.json') as f:
+            builds = json.load(f)
+    except FileNotFoundError:
+        builds = {'builds': []}
+
+    if len(builds['builds']) == 0:
+        eprint("n: 0 (no previous builds)")
+        return 0
+
+    last_buildid = builds['builds'][0]['id']
+    last_version = parse_version(last_buildid)
+    if not last_version:
+        eprint(f"n: 0 (previous version {last_buildid} does not match scheme)")
+        return 0
+
+    if (x, y, z) != last_version[:3]:
+        eprint(f"n: 0 (previous version {last_buildid} x.y.z does not match)")
+        return 0
+
+    n = last_version[3] + 1
+    eprint(f"n: {n} (incremented from previous version {last_buildid})")
+    return n
+
+
+def get_flattened_manifest():
+    return yaml.safe_load(
+        subprocess.check_output(['rpm-ostree', 'compose', 'tree',
+                                 '--print-only', 'src/config/manifest.yaml']))
+
+
+def parse_version(version):
+    m = re.match(r'^([0-9]{2})\.([0-9]{8})\.([0-9]+)\.([0-9]+)$', version)
+    if m is None:
+        return None
+    # sanity-check date
+    try:
+        time.strptime(m.group(2), '%Y%m%d')
+    except ValueError:
+        return None
+    return tuple(map(int, m.groups()))
+
+
+def eprint(*args):
+    print(*args, file=sys.stderr)
+
+
+if __name__ == "__main__":
+    sys.exit(main())

From 5c2e164ad1d1243c30f39ac9d0c78b8116622f37 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Tue, 20 Feb 2024 13:23:26 -0700
Subject: [PATCH 2034/2157] denylist: snooze ext.config.var-mount.scsi-id on
 branched

F40 has branched from rawhide, so we'll be tracking it in the
branched stream once enabled:
https://github.com/coreos/fedora-coreos-pipeline/pull/962.
Let's also snooze `ext.config.var-mount.scsi-id` on branched
since it's been failing on F40.
---
 kola-denylist.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 7e3984be06..a31fe2c8ca 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -21,3 +21,4 @@
   warn: true
   streams:
     - rawhide
+    - branched

From 2819e82f933f2645f20cdfd52322c593bdb47194 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 21 Feb 2024 02:19:58 +0000
Subject: [PATCH 2035/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1017/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 2d32e87eb7..d2def14621 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.14-1.fc39.aarch64",
+      "evra": "1.14.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14-1.fc39.aarch64",
+      "evra": "1.14.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.aarch64",
+      "evra": "1:1.48.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libuv"
       }
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-2.fc39.aarch64",
+      "evra": "2:8.1.3-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-19T00:00:00Z",
+    "generated": "2024-02-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T23:04:00Z"
+        "generated": "2024-02-19T23:41:04Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-19T02:22:48Z"
+        "generated": "2024-02-20T01:27:17Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 50a2b4cdb9..256368f362 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -391,7 +391,7 @@
       }
     },
     "crun": {
-      "evra": "1.14-1.fc39.ppc64le",
+      "evra": "1.14.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.ppc64le",
+      "evra": "1:1.48.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libuv"
       }
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-2.fc39.ppc64le",
+      "evra": "2:8.1.3-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-19T00:00:00Z",
+    "generated": "2024-02-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T23:03:20Z"
+        "generated": "2024-02-19T23:40:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-19T02:22:56Z"
+        "generated": "2024-02-20T01:27:25Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ca7a421cc1..5880451341 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -385,7 +385,7 @@
       }
     },
     "crun": {
-      "evra": "1.14-1.fc39.s390x",
+      "evra": "1.14.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1603,7 +1603,7 @@
       }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.s390x",
+      "evra": "1:1.48.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libuv"
       }
@@ -2047,7 +2047,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-2.fc39.s390x",
+      "evra": "2:8.1.3-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-19T00:00:00Z",
+    "generated": "2024-02-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T23:03:08Z"
+        "generated": "2024-02-19T23:39:44Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-19T02:23:03Z"
+        "generated": "2024-02-20T01:27:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c42163b0de..b3dd5adfa5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -385,13 +385,13 @@
       }
     },
     "crun": {
-      "evra": "1.14-1.fc39.x86_64",
+      "evra": "1.14.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14-1.fc39.x86_64",
+      "evra": "1.14.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libuv": {
-      "evra": "1:1.47.0-3.fc39.x86_64",
+      "evra": "1:1.48.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libuv"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-19T00:00:00Z",
+    "generated": "2024-02-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-18T23:04:02Z"
+        "generated": "2024-02-19T23:41:06Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-19T02:23:11Z"
+        "generated": "2024-02-20T01:27:41Z"
       }
     }
   }

From 3668ce5c07fdb7b6cc7ac7e12040410c9c4addad Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Tue, 23 Jan 2024 16:57:20 -0800
Subject: [PATCH 2036/2157] Add Podman v5 breaking changes checks

Podman 5 will come with breaking changes affecting upgradability.
CGroups v1 environments will be required to switch to CGroups v2
and CNI plugin environemnts will need to switch to netavark.
Updated the existing cgroups-version check and added the check
for CNI networking
---
 manifests/fedora-coreos.yaml                  |  3 ++
 manifests/podman-v5.yaml                      |  5 +++
 .../lib/systemd/system-preset/14-fcos.preset  |  1 +
 .../coreos-cni-networking-check.service       | 11 ++++++
 .../usr/libexec/coreos-cni-networking-check   | 37 +++++++++++++++++++
 .../lib/systemd/system-preset/45-fcos.preset  |  2 +-
 ...e => coreos-check-cgroups-version.service} |  2 +-
 ...k-cgroups => coreos-check-cgroups-version} |  9 +++--
 overlay.d/README.md                           |  8 ++++
 9 files changed, 72 insertions(+), 6 deletions(-)
 create mode 100644 manifests/podman-v5.yaml
 create mode 100644 overlay.d/14podman-v5/usr/lib/systemd/system-preset/14-fcos.preset
 create mode 100644 overlay.d/14podman-v5/usr/lib/systemd/system/coreos-cni-networking-check.service
 create mode 100755 overlay.d/14podman-v5/usr/libexec/coreos-cni-networking-check
 rename overlay.d/15fcos/usr/lib/systemd/system/{coreos-check-cgroups.service => coreos-check-cgroups-version.service} (83%)
 rename overlay.d/15fcos/usr/libexec/{coreos-check-cgroups => coreos-check-cgroups-version} (76%)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index edd8679cb9..f5948d8fe3 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -33,6 +33,9 @@ conditional-include:
     # Remove this once we have Podman v5 in f39.
     # xref: https://github.com/coreos/fedora-coreos-tracker/issues/1629
     include: cni-plugins.yaml
+  - if: releasever == 39
+    # Checks for breaking changes that came with Podman v5.
+    include: podman-v5.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/podman-v5.yaml b/manifests/podman-v5.yaml
new file mode 100644
index 0000000000..e38fae413e
--- /dev/null
+++ b/manifests/podman-v5.yaml
@@ -0,0 +1,5 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/1629
+# Delete this file once we are on Podman v5 everywhere.
+# i.e. We have moved past F39.
+ostree-layers:
+  - overlay/14podman-v5
diff --git a/overlay.d/14podman-v5/usr/lib/systemd/system-preset/14-fcos.preset b/overlay.d/14podman-v5/usr/lib/systemd/system-preset/14-fcos.preset
new file mode 100644
index 0000000000..28f419bc04
--- /dev/null
+++ b/overlay.d/14podman-v5/usr/lib/systemd/system-preset/14-fcos.preset
@@ -0,0 +1 @@
+enable coreos-cni-networking-check.service
diff --git a/overlay.d/14podman-v5/usr/lib/systemd/system/coreos-cni-networking-check.service b/overlay.d/14podman-v5/usr/lib/systemd/system/coreos-cni-networking-check.service
new file mode 100644
index 0000000000..5b39d848a7
--- /dev/null
+++ b/overlay.d/14podman-v5/usr/lib/systemd/system/coreos-cni-networking-check.service
@@ -0,0 +1,11 @@
+# This service checks if the system nodes are still using
+# CNI networking. If so, they will be warned to move
+# their nodes to netavark respectively.
+[Unit]
+Description=Check If Podman Is Still Using CNI Networking
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-cni-networking-check
+RemainAfterExit=yes
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/14podman-v5/usr/libexec/coreos-cni-networking-check b/overlay.d/14podman-v5/usr/libexec/coreos-cni-networking-check
new file mode 100755
index 0000000000..8aab7f616d
--- /dev/null
+++ b/overlay.d/14podman-v5/usr/libexec/coreos-cni-networking-check
@@ -0,0 +1,37 @@
+#!/usr/bin/bash
+set -euo pipefail
+# Podman is dropping support for CNI networking.
+# Podman 5 changes: https://fedoraproject.org/wiki/Changes/Podman5
+# This script checks if the system nodes are still using CNI
+# networking. If so, they will warned to move their nodes to Netavark.
+
+# Change the output color to yellow
+warn=$(echo -e '\033[0;33m')
+# No color
+nc=$(echo -e '\033[0m')
+
+# Podman supports two network backends Netavark and CNI.
+# Netavark is the default network backend and was added in
+# Podman version 4.0. CNI is deprecated and is removed
+# in Podman version 5.0, in preference of Netavark.
+podmanBackend=$(podman info --format "{{.Host.NetworkBackend}}")
+
+if [[ $podmanBackend != "netavark" ]]; then
+    motd_path=/run/motd.d/35_cni_warning.motd
+
+    cat << EOF > "${motd_path}"
+${warn}
+##############################################################################
+WARNING: Podman is using CNI networking. CNI is deprecated and will be
+removed in the upcoming Podman v5.0, in preference of Netavark. To switch
+from CNI networking to Netavark, you must run 'podman system reset --force'.
+This will delete all of your images, containers, and custom networks.
+Depending on your setup it may be preferable to reprovision the whole machine
+from the latest images.
+
+To disable this warning, use:
+sudo systemctl disable coreos-cni-networking-check.service
+##############################################################################
+${nc}
+EOF
+fi
diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index 12ca639f39..27780787c9 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -1,5 +1,5 @@
 enable coreos-check-ssh-keys.service
 # Check if cgroupsv1 is still being used
-enable coreos-check-cgroups.service
+enable coreos-check-cgroups-version.service
 # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
 enable fwupd-refresh.timer
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
similarity index 83%
rename from overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
rename to overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
index 08055efe73..2aff8f6cdb 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
@@ -5,7 +5,7 @@ Description=Check if cgroupsv1 Is Still Being Used
 ConditionControlGroupController=v1
 [Service]
 Type=oneshot
-ExecStart=/usr/libexec/coreos-check-cgroups
+ExecStart=/usr/libexec/coreos-check-cgroups-version
 RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-cgroups b/overlay.d/15fcos/usr/libexec/coreos-check-cgroups-version
similarity index 76%
rename from overlay.d/15fcos/usr/libexec/coreos-check-cgroups
rename to overlay.d/15fcos/usr/libexec/coreos-check-cgroups-version
index 39a68b7178..5e0ec8b1be 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-cgroups
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-cgroups-version
@@ -11,15 +11,16 @@ motd_path=/run/motd.d/30_cgroupsv1_warning.motd
 
 cat << EOF > "${motd_path}"
 ${warn}
-############################################################################
+##########################################################################
 WARNING: This system is using cgroups v1. For increased reliability
 it is strongly recommended to migrate this system and your workloads
-to use cgroups v2. For instructions on how to adjust kernel arguments
+to use cgroups v2. A future version of Podman will also drop support
+for cgroups v1. For instructions on how to adjust kernel arguments
 to use cgroups v2, see:
 https://docs.fedoraproject.org/en-US/fedora-coreos/kernel-args/
 
 To disable this warning, use:
-sudo systemctl disable coreos-check-cgroups.service
-############################################################################
+sudo systemctl disable coreos-check-cgroups-version.service
+##########################################################################
 ${nc}
 EOF
diff --git a/overlay.d/README.md b/overlay.d/README.md
index 9597731fdf..7fdf54070d 100644
--- a/overlay.d/README.md
+++ b/overlay.d/README.md
@@ -24,6 +24,14 @@ https://bugzilla.redhat.com/show_bug.cgi?id=1700056
 
 Warning about `/etc/sysconfig`.
 
+14podman-v5
+------
+
+Warn about breaking changes [1] with Podman v5 and link the
+users to how they can adapt their existing nodes.
+
+[1] https://github.com/coreos/fedora-coreos-tracker/issues/1629
+
 15fcos
 ------
 

From 35a2bf1bbd288e8812f7b85e91418a6854e580a4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 19 Feb 2024 14:28:20 -0500
Subject: [PATCH 2037/2157] overlay.d/40grub: delete 30_console.cfg file

See https://github.com/coreos/fedora-coreos-tracker/issues/1671
where we discovered that having this be a static config delivered
by bootupd was a bad idea.

Instead we'll have something else create a file in /boot/grub2/console.cfg
(most likely https://github.com/osbuild/osbuild/pull/1589) and we'll have
the bootupd static grub configs source it (https://github.com/coreos/bootupd/pull/619).
---
 .../usr/lib/bootupd/grub2-static/configs.d/30_console.cfg     | 4 ----
 1 file changed, 4 deletions(-)
 delete mode 100644 overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg

diff --git a/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg b/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg
deleted file mode 100644
index d352292fc8..0000000000
--- a/overlay.d/40grub/usr/lib/bootupd/grub2-static/configs.d/30_console.cfg
+++ /dev/null
@@ -1,4 +0,0 @@
-
-# Any non-default console settings will be inserted here.
-# CONSOLE-SETTINGS-START
-# CONSOLE-SETTINGS-END

From c9f6fbb19a570f939b0389ca40ca311fc6aeb9b4 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 20 Feb 2024 23:09:13 -0500
Subject: [PATCH 2038/2157] tests/console-config: update file for grub console
 settings check

We'll now prefer console.cfg if it exists over grub.cfg.
---
 tests/kola/files/console-config | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/tests/kola/files/console-config b/tests/kola/files/console-config
index 95c66c70e4..327436be37 100755
--- a/tests/kola/files/console-config
+++ b/tests/kola/files/console-config
@@ -47,11 +47,16 @@ ok "platforms.json exists!"
 platform=$(cmdline_arg ignition.platform.id)
 expected_kargs=$(platform_json_kargs "$platform")
 expected_grub_cmds=$(platform_json_grub_cmds "$platform")
+if [ -f /boot/grub2/console.cfg ]; then
+    grub_console_cfg_file=/boot/grub2/console.cfg
+else
+    grub_console_cfg_file=/boot/grub2/grub.cfg
+fi
 if [ -n "$expected_kargs" ] && ! grep -Eq " ${expected_kargs}( |$)" /proc/cmdline; then
     fatal "Didn't find $expected_kargs in $(cat /proc/cmdline)"
 fi
-if [ -n "$expected_grub_cmds" ] && ! grep -qzP "\n${expected_grub_cmds}\n" /boot/grub2/grub.cfg; then
-    fatal "Didn't find platform grub commands in /boot/grub2/grub.cfg"
+if [ -n "$expected_grub_cmds" ] && ! grep -qzP "\n${expected_grub_cmds}\n" $grub_console_cfg_file; then
+    fatal "Didn't find platform grub commands in ${grub_console_cfg_file}"
 fi
 ok "platforms.json matches grub.cfg and kargs"
 

From 476a371ef9093ae6a5d34fe38db51eccdf121071 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 21 Feb 2024 15:20:42 -0500
Subject: [PATCH 2039/2157] tests/var-mount/scsi-id: simplify bootloader entry
 finding

We don't have to be super strict here in how we find the bootloader
entry. There should only be one, so simplify the logic using a glob
instead.

Motivated by the fact that this will break otherwise as part of
https://github.com/openshift/os/pull/1445 where the `ID` will be
`centos`, but the stateroot will still be `scos`.
---
 tests/kola/var-mount/scsi-id/test.sh | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index afb834a5e3..4885786856 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -18,15 +18,7 @@ if [ $fstype != xfs ]; then
     fatal "Error: /var fstype is $fstype, expected is xfs"
 fi
 
-source /etc/os-release
-ostree_conf=""
-if [ "$ID" == "fedora" ]; then
-    ostree_conf="/boot/loader.1/entries/ostree-1-fedora-coreos.conf"
-elif [[ "${ID_LIKE}" =~ "rhel" ]]; then
-    ostree_conf="/boot/loader.1/entries/ostree-1-${ID}.conf"
-else
-    fatal "fail: not operating on expected OS"
-fi
+ostree_conf=$(ls /boot/loader/entries/*.conf)
 
 initramfs=/boot$(grep initrd ${ostree_conf} | sed 's/initrd //g')
 tempfile=$(mktemp)

From db38a0b1cb18b5b0d690eadbd08e3c071e8aa037 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 21 Feb 2024 15:23:01 -0500
Subject: [PATCH 2040/2157] tests/commonlib: consider `centos` ID as SCOS

The `ID` will change to `centos` as part of
https://github.com/openshift/os/pull/1445.
---
 tests/kola/data/commonlib.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 79166f9977..12bd07a0b5 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -64,7 +64,7 @@ is_rhcos9() {
 # scos
 is_scos() {
     source /etc/os-release
-    [ "${ID}" == "scos" ] && [ "${VARIANT_ID}" == "coreos" ]
+    { [ "${ID}" == "scos" ] || [ "${ID}" == "centos" ]; } && [ "${VARIANT_ID}" == "coreos" ]
 }
 
 IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"

From 3aea1b8821e3d626732a803e0f5d03d1d5ea7db1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Feb 2024 02:14:27 +0000
Subject: [PATCH 2041/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1020/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 58 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 58 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 58 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 58 +++++++++++++++++++-------------------
 4 files changed, 116 insertions(+), 116 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d2def14621..47f4f72d2c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7-1.fc39.aarch64",
+      "evra": "6.7.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -277,7 +277,7 @@
       }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.aarch64",
+      "evra": "2:2.1.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "conmon"
       }
@@ -865,7 +865,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.2-1.fc39.aarch64",
+      "evra": "6:0.7.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -895,13 +895,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.4-200.fc39.aarch64",
+      "evra": "6.7.5-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.4-200.fc39.aarch64",
+      "evra": "6.7.5-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.4-200.fc39.aarch64",
+      "evra": "6.7.5-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.4-200.fc39.aarch64",
+      "evra": "6.7.5-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-3.fc39.aarch64",
+      "evra": "2:4.19.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1699,7 +1699,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-3.fc39.aarch64",
+      "evra": "2:4.19.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1741,13 +1741,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1831,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1927,7 +1927,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1939,7 +1939,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2161,7 +2161,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2221,19 +2221,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-3.fc39.aarch64",
+      "evra": "2:4.19.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-3.fc39.noarch",
+      "evra": "2:4.19.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-3.fc39.aarch64",
+      "evra": "2:4.19.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2467,7 +2467,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-20T00:00:00Z",
+    "generated": "2024-02-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-19T23:41:04Z"
+        "generated": "2024-02-21T03:41:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-20T01:27:17Z"
+        "generated": "2024-02-22T02:05:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 256368f362..7b004e481d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -193,7 +193,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7-1.fc39.ppc64le",
+      "evra": "6.7.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -247,7 +247,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -283,7 +283,7 @@
       }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.ppc64le",
+      "evra": "2:2.1.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "conmon"
       }
@@ -841,7 +841,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.2-1.fc39.ppc64le",
+      "evra": "6:0.7.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -871,13 +871,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.4-200.fc39.ppc64le",
+      "evra": "6.7.5-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.4-200.fc39.ppc64le",
+      "evra": "6.7.5-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.4-200.fc39.ppc64le",
+      "evra": "6.7.5-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.4-200.fc39.ppc64le",
+      "evra": "6.7.5-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1555,7 +1555,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-3.fc39.ppc64le",
+      "evra": "2:4.19.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-3.fc39.ppc64le",
+      "evra": "2:4.19.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1729,13 +1729,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1813,7 +1813,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1909,7 +1909,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1921,7 +1921,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2161,7 +2161,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2221,19 +2221,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-3.fc39.ppc64le",
+      "evra": "2:4.19.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-3.fc39.noarch",
+      "evra": "2:4.19.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-3.fc39.ppc64le",
+      "evra": "2:4.19.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2461,7 +2461,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-20T00:00:00Z",
+    "generated": "2024-02-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-19T23:40:05Z"
+        "generated": "2024-02-21T03:40:02Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-20T01:27:25Z"
+        "generated": "2024-02-22T02:05:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5880451341..e215a25d2d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7-1.fc39.s390x",
+      "evra": "6.7.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -277,7 +277,7 @@
       }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.s390x",
+      "evra": "2:2.1.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "conmon"
       }
@@ -787,7 +787,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.2-1.fc39.s390x",
+      "evra": "6:0.7.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -817,13 +817,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.4-200.fc39.s390x",
+      "evra": "6.7.5-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.4-200.fc39.s390x",
+      "evra": "6.7.5-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.4-200.fc39.s390x",
+      "evra": "6.7.5-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.4-200.fc39.s390x",
+      "evra": "6.7.5-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1483,7 +1483,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-3.fc39.s390x",
+      "evra": "2:4.19.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1615,7 +1615,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-3.fc39.s390x",
+      "evra": "2:4.19.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1657,13 +1657,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1741,7 +1741,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1831,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1843,7 +1843,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2059,7 +2059,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2125,19 +2125,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-3.fc39.s390x",
+      "evra": "2:4.19.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-3.fc39.noarch",
+      "evra": "2:4.19.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-3.fc39.s390x",
+      "evra": "2:4.19.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2359,7 +2359,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-20T00:00:00Z",
+    "generated": "2024-02-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-19T23:39:44Z"
+        "generated": "2024-02-21T03:39:44Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-20T01:27:33Z"
+        "generated": "2024-02-22T02:05:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b3dd5adfa5..20af6ebb24 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7-1.fc39.x86_64",
+      "evra": "6.7.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -277,7 +277,7 @@
       }
     },
     "conmon": {
-      "evra": "2:2.1.8-2.fc39.x86_64",
+      "evra": "2:2.1.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "conmon"
       }
@@ -877,7 +877,7 @@
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.2-1.fc39.x86_64",
+      "evra": "6:0.7.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
@@ -907,13 +907,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.4-200.fc39.x86_64",
+      "evra": "6.7.5-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.4-200.fc39.x86_64",
+      "evra": "6.7.5-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.4-200.fc39.x86_64",
+      "evra": "6.7.5-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.4-200.fc39.x86_64",
+      "evra": "6.7.5-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1573,7 +1573,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.4-3.fc39.x86_64",
+      "evra": "2:4.19.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1705,7 +1705,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.4-3.fc39.x86_64",
+      "evra": "2:4.19.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1747,13 +1747,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1843,7 +1843,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1939,7 +1939,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1951,7 +1951,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2227,19 +2227,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.4-3.fc39.x86_64",
+      "evra": "2:4.19.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.4-3.fc39.noarch",
+      "evra": "2:4.19.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.4-3.fc39.x86_64",
+      "evra": "2:4.19.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2473,7 +2473,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240115-2.fc39.noarch",
+      "evra": "20240220-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-20T00:00:00Z",
+    "generated": "2024-02-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-19T23:41:06Z"
+        "generated": "2024-02-21T03:41:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-20T01:27:41Z"
+        "generated": "2024-02-22T02:06:07Z"
       }
     }
   }

From 8be6dc03b128fe0f8e9de3f1b5b6f8907ebd3960 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 22 Feb 2024 23:08:12 -0500
Subject: [PATCH 2042/2157] denylist: extend snooze for var-mount.scsi-id test

This is still outstanding. Let's snooze it so we don't keep getting
warnings from builds.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a31fe2c8ca..8312ffd95f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,7 +17,7 @@
     - rawhide
 - pattern: ext.config.var-mount.scsi-id
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
-  snooze: 2024-02-21
+  snooze: 2024-02-29
   warn: true
   streams:
     - rawhide

From e51777611b7963f76e490e682ff8d8ea4b6ef9d1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 23 Feb 2024 23:37:37 +0000
Subject: [PATCH 2043/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1021/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 47f4f72d2c..1c471a007f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2029,13 +2029,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231230.gf091893-1.fc39.aarch64",
+      "evra": "0^20240220.g1e6f92b-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231230.gf091893-1.fc39.noarch",
+      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2083,13 +2083,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.0-1.fc39.aarch64",
+      "evra": "5:4.9.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.0-1.fc39.aarch64",
+      "evra": "5:4.9.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-22T00:00:00Z",
+    "generated": "2024-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-21T03:41:15Z"
+        "generated": "2024-02-23T15:13:34Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-22T02:05:43Z"
+        "generated": "2024-02-23T01:17:47Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7b004e481d..ad2ed39376 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2017,13 +2017,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231230.gf091893-1.fc39.ppc64le",
+      "evra": "0^20240220.g1e6f92b-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231230.gf091893-1.fc39.noarch",
+      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2071,13 +2071,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.0-1.fc39.ppc64le",
+      "evra": "5:4.9.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.0-1.fc39.ppc64le",
+      "evra": "5:4.9.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-22T00:00:00Z",
+    "generated": "2024-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-21T03:40:02Z"
+        "generated": "2024-02-23T15:12:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-22T02:05:51Z"
+        "generated": "2024-02-23T01:17:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e215a25d2d..d594511140 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1927,13 +1927,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231230.gf091893-1.fc39.s390x",
+      "evra": "0^20240220.g1e6f92b-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231230.gf091893-1.fc39.noarch",
+      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -1981,13 +1981,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.0-1.fc39.s390x",
+      "evra": "5:4.9.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.0-1.fc39.s390x",
+      "evra": "5:4.9.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-22T00:00:00Z",
+    "generated": "2024-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-21T03:39:44Z"
+        "generated": "2024-02-23T15:12:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-22T02:05:59Z"
+        "generated": "2024-02-23T01:18:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 20af6ebb24..9df8d93ac3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2041,13 +2041,13 @@
       }
     },
     "passt": {
-      "evra": "0^20231230.gf091893-1.fc39.x86_64",
+      "evra": "0^20240220.g1e6f92b-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20231230.gf091893-1.fc39.noarch",
+      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2095,13 +2095,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.0-1.fc39.x86_64",
+      "evra": "5:4.9.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.0-1.fc39.x86_64",
+      "evra": "5:4.9.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-22T00:00:00Z",
+    "generated": "2024-02-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-21T03:41:25Z"
+        "generated": "2024-02-23T15:13:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-22T02:06:07Z"
+        "generated": "2024-02-23T01:18:12Z"
       }
     }
   }

From a9801201e74f6453bcd23671d9088a27d6ec719a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 25 Feb 2024 23:35:44 +0000
Subject: [PATCH 2044/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1023/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1c471a007f..a05820124a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-3.fc39.aarch64",
+      "evra": "2:8.1.3-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-23T00:00:00Z",
+    "generated": "2024-02-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-23T15:13:34Z"
+        "generated": "2024-02-24T17:26:46Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-23T01:17:47Z"
+        "generated": "2024-02-25T01:16:44Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index ad2ed39376..2262fbb0b0 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2149,7 +2149,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-3.fc39.ppc64le",
+      "evra": "2:8.1.3-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-23T00:00:00Z",
+    "generated": "2024-02-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-23T15:12:25Z"
+        "generated": "2024-02-24T17:26:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-23T01:17:55Z"
+        "generated": "2024-02-25T01:16:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d594511140..af925eac8f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2047,7 +2047,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-3.fc39.s390x",
+      "evra": "2:8.1.3-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-23T00:00:00Z",
+    "generated": "2024-02-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-23T15:12:03Z"
+        "generated": "2024-02-24T17:26:04Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-23T01:18:04Z"
+        "generated": "2024-02-25T01:17:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9df8d93ac3..eaf8f87842 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-23T00:00:00Z",
+    "generated": "2024-02-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-23T15:13:28Z"
+        "generated": "2024-02-24T17:27:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-23T01:18:12Z"
+        "generated": "2024-02-25T01:17:09Z"
       }
     }
   }

From 1cfbd773ce3137febe43d651fba48d5eeb81a79e Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 16 Feb 2024 12:36:37 -0500
Subject: [PATCH 2045/2157] manifests: enable cliwrap on Fedora 40+

As part of the bootable containers effort, we want to put emphasis on a
consistent experience when deriving images. A big part of that is being
able to type `dnf install -y ...` in one's `Containerfile`.

Let's turn on cliwrap for this. This was previously agreed[[1]], but
we ended never shipping it since there was a less invasive way to test
it.[[2]] Here, we bundle it as part of the Fedora 40 rebase. This will
naturally allow it to bake in `branched` and `next` for a while before
making it to `stable`.

Eventually, once dnf5 is ready, it could take on this role (including
package layering on the client-side), at which point we will no longer
need to wrap it.

[1]: https://github.com/coreos/fedora-coreos-config/pull/830#issuecomment-780840462
[2]: https://github.com/coreos/fedora-coreos-config/pull/830#issuecomment-789806308
---
 manifests/cliwrap.yaml        | 2 ++
 manifests/fedora-coreos.yaml  | 2 ++
 tests/kola/extensions/package | 6 ++++++
 3 files changed, 10 insertions(+)
 create mode 100644 manifests/cliwrap.yaml

diff --git a/manifests/cliwrap.yaml b/manifests/cliwrap.yaml
new file mode 100644
index 0000000000..8a2b7d4692
--- /dev/null
+++ b/manifests/cliwrap.yaml
@@ -0,0 +1,2 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/730
+cliwrap: true
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index f5948d8fe3..f0bf5af9ea 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -36,6 +36,8 @@ conditional-include:
   - if: releasever == 39
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
+  - if: releasever >= 40
+    include: cliwrap.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index 92539d8ac5..f457d2170b 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -52,3 +52,9 @@ if [[ -n "${failed}" ]]; then
   fatal "could not install: ${failed}"
 fi
 ok "successfully installed os rpm package extensions"
+
+# also try the wrapped dnf
+if jq -e .cliwrap /usr/share/rpm-ostree/treefile.json; then
+  dnf install -y 'ltrace'
+  ok "dnf cliwrap"
+fi

From a7361670c6cb2744ea645808adb64519a9556ced Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 26 Feb 2024 09:20:17 -0800
Subject: [PATCH 2046/2157]  denylist: drop files.console-config snooze

In reference to https://github.com/coreos/coreos-assembler/pull/3742
this test should be passing now. Updating the denylist accordingly.
---
 kola-denylist.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 8312ffd95f..38dc6f4696 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -11,10 +11,6 @@
   warn: true
   platforms:
     - azure
-- pattern: ext.config.files.console-config
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1654
-  streams:
-    - rawhide
 - pattern: ext.config.var-mount.scsi-id
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
   snooze: 2024-02-29

From 44798a0e19ad3049a17e66eec85c6984e978706a Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Tue, 27 Feb 2024 11:04:37 +0100
Subject: [PATCH 2047/2157] workflows/openshift-os allow custom branches

Allow specifying the source branch to open a PR from
as well as the target branch to compare against.
This is useful for backporting work
---
 .github/workflows/openshift-os.yml | 25 ++++++++++++++++++++-----
 1 file changed, 20 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index 6e8dc13d76..9498813dfe 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -6,11 +6,21 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
     inputs:
-      branch:
+      branch-name:
         # Allow overriding branch for syncs that need manual fixups
-        description: PR branch
+        description: PR branch name
         required: true
         default: fcc-sync
+      branch:
+        # Allow specifying the source branch for backports
+        description: Source branch to use for PR
+        required: true
+        default: testing-devel
+      target-branch:
+        # Allow specifying the target branch for backports
+        description: Target branch to open PR against
+        required: true
+        default: master
 
 permissions:
   # none at all
@@ -31,12 +41,16 @@ jobs:
 
       - name: Update submodule
         env:
-          BRANCH_NAME: ${{ github.event.inputs.branch }}
+          BRANCH_NAME: ${{ github.event.inputs.branch-name }}
+          SOURCE_BRANCH: ${{ github.event.inputs.branch }}
+          TARGET_BRANCH: ${{ github.event.inputs.target-branch }}
         run: |
           set -euxo pipefail
 
-          # Default branch name for on.schedule case
+          # Default branches names for on.schedule case
           echo "BRANCH_NAME=${BRANCH_NAME:-fcc-sync}" >> $GITHUB_ENV
+          echo "SOURCE_BRANCH=${SOURCE_BRANCH:-testing-devel}" >> $GITHUB_ENV
+          echo "TARGET_BRANCH=${TARGET_BRANCH:-master}" >> $GITHUB_ENV
 
           git submodule init
           git submodule update
@@ -53,7 +67,7 @@ jobs:
               echo "No non-trivial changes; exiting"
               exit 0
           fi
-          git checkout testing-devel
+          git checkout $SOURCE_BRANCH
 
           marker=OPENSHIFT-OS-END-OF-LOG-MARKER-$RANDOM$RANDOM$RANDOM
           cat >> $GITHUB_ENV <<EOF
@@ -68,6 +82,7 @@ jobs:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           push-to-fork: coreosbot-releng/os
           branch: ${{ env.BRANCH_NAME }}
+          base: ${{ env.TARGET_BRANCH }}
           commit-message: |
             Bump fedora-coreos-config
 

From a2bc3794eb6999373cdc5c4fb531ec6fd9ad9529 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 26 Feb 2024 23:03:36 -0700
Subject: [PATCH 2048/2157] denylist: extend snooze for
 `coreos.ignition.ssh.key`

Extend the snooze while we continue to investigate
https://github.com/coreos/fedora-coreos-tracker/issues/1553
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 38dc6f4696..49738bc79f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-02-26
+  snooze: 2024-03-29
   warn: true
   platforms:
     - azure

From 3789b068627af980a3914fbab42153adc2df5815 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 27 Feb 2024 14:19:27 -0500
Subject: [PATCH 2049/2157] Revert "manifests: enable cliwrap on Fedora 40+"

This reverts commit 1cfbd773ce3137febe43d651fba48d5eeb81a79e.

This seems to be breaking `ext.config.rpm-ostree.kernel-replace` at
least:

https://github.com/coreos/fedora-coreos-tracker/issues/1679
---
 manifests/cliwrap.yaml        | 2 --
 manifests/fedora-coreos.yaml  | 2 --
 tests/kola/extensions/package | 6 ------
 3 files changed, 10 deletions(-)
 delete mode 100644 manifests/cliwrap.yaml

diff --git a/manifests/cliwrap.yaml b/manifests/cliwrap.yaml
deleted file mode 100644
index 8a2b7d4692..0000000000
--- a/manifests/cliwrap.yaml
+++ /dev/null
@@ -1,2 +0,0 @@
-# https://github.com/coreos/fedora-coreos-tracker/issues/730
-cliwrap: true
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index f0bf5af9ea..f5948d8fe3 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -36,8 +36,6 @@ conditional-include:
   - if: releasever == 39
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
-  - if: releasever >= 40
-    include: cliwrap.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/tests/kola/extensions/package b/tests/kola/extensions/package
index f457d2170b..92539d8ac5 100755
--- a/tests/kola/extensions/package
+++ b/tests/kola/extensions/package
@@ -52,9 +52,3 @@ if [[ -n "${failed}" ]]; then
   fatal "could not install: ${failed}"
 fi
 ok "successfully installed os rpm package extensions"
-
-# also try the wrapped dnf
-if jq -e .cliwrap /usr/share/rpm-ostree/treefile.json; then
-  dnf install -y 'ltrace'
-  ok "dnf cliwrap"
-fi

From 72db29c52145556814c53fb846f44999e0d64b62 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 28 Feb 2024 07:08:35 +0000
Subject: [PATCH 2050/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1026/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a05820124a..6fe0e95f09 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -607,19 +607,19 @@
       }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.2-1.fc39.aarch64",
+      "evra": "2.44.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.5-200.fc39.aarch64",
+      "evra": "6.7.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.5-200.fc39.aarch64",
+      "evra": "6.7.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.5-200.fc39.aarch64",
+      "evra": "6.7.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.5-200.fc39.aarch64",
+      "evra": "6.7.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-25T00:00:00Z",
+    "generated": "2024-02-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-24T17:26:46Z"
+        "generated": "2024-02-25T23:43:12Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-25T01:16:44Z"
+        "generated": "2024-02-28T01:02:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2262fbb0b0..515adbf8bf 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -589,19 +589,19 @@
       }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
@@ -745,7 +745,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.2-1.fc39.ppc64le",
+      "evra": "2.44.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.5-200.fc39.ppc64le",
+      "evra": "6.7.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.5-200.fc39.ppc64le",
+      "evra": "6.7.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.5-200.fc39.ppc64le",
+      "evra": "6.7.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.5-200.fc39.ppc64le",
+      "evra": "6.7.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-25T00:00:00Z",
+    "generated": "2024-02-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-24T17:26:05Z"
+        "generated": "2024-02-25T23:42:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-25T01:16:52Z"
+        "generated": "2024-02-28T01:02:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index af925eac8f..5565b7c885 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -583,19 +583,19 @@
       }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
@@ -721,7 +721,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.2-1.fc39.s390x",
+      "evra": "2.44.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.5-200.fc39.s390x",
+      "evra": "6.7.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.5-200.fc39.s390x",
+      "evra": "6.7.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.5-200.fc39.s390x",
+      "evra": "6.7.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.5-200.fc39.s390x",
+      "evra": "6.7.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-25T00:00:00Z",
+    "generated": "2024-02-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-24T17:26:04Z"
+        "generated": "2024-02-25T23:41:46Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-25T01:17:00Z"
+        "generated": "2024-02-28T01:02:39Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index eaf8f87842..33e7f12157 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -607,19 +607,19 @@
       }
     },
     "fedora-release-common": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-34.noarch",
+      "evra": "39-36.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
@@ -769,7 +769,7 @@
       }
     },
     "git-core": {
-      "evra": "2.43.2-1.fc39.x86_64",
+      "evra": "2.44.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.5-200.fc39.x86_64",
+      "evra": "6.7.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.5-200.fc39.x86_64",
+      "evra": "6.7.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.5-200.fc39.x86_64",
+      "evra": "6.7.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.5-200.fc39.x86_64",
+      "evra": "6.7.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-25T00:00:00Z",
+    "generated": "2024-02-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-24T17:27:05Z"
+        "generated": "2024-02-25T23:43:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-25T01:17:09Z"
+        "generated": "2024-02-28T01:02:48Z"
       }
     }
   }

From 1909aa9e64047d2d325daf1f2e1e44442f7809c5 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Tue, 27 Feb 2024 16:18:21 +0100
Subject: [PATCH 2051/2157] workflows/openshift-os : fixing up the initial
 checkout

the base branch should be checked out initally otherwise the rebase will
fails.
Also fixup the log generation to remove the hard-coded testing-devel
Make the sources branches to a pickup menu and generate the destination
branch and the base PR branch from that to avoid errors.
---
 .github/workflows/openshift-os.yml | 62 +++++++++++++++++++-----------
 1 file changed, 40 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index 9498813dfe..3e55e62a09 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -6,22 +6,20 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
     inputs:
-      branch-name:
-        # Allow overriding branch for syncs that need manual fixups
-        description: PR branch name
-        required: true
-        default: fcc-sync
       branch:
         # Allow specifying the source branch for backports
         description: Source branch to use for PR
         required: true
         default: testing-devel
-      target-branch:
-        # Allow specifying the target branch for backports
-        description: Target branch to open PR against
-        required: true
-        default: master
-
+        type: choice
+        options:
+          - testing-devel
+          - rhcos-4.15
+          - rhcos-4.14
+          - rhcos-4.13
+          - rhcos-4.12
+          - rhcos-4.11
+          - rhcos-4.10
 permissions:
   # none at all
   contents: none
@@ -30,7 +28,31 @@ jobs:
   update-submodule:
     name: Update fedora-coreos-config submodule
     runs-on: ubuntu-latest
+    env:
+      SOURCE_BRANCH: ${{ github.event.inputs.branch }}
     steps:
+      - name: Set branches values
+        run: |
+          case $SOURCE_BRANCH in
+              testing-devel)
+                echo "TARGET_BRANCH=master" >> $GITHUB_ENV
+                echo "BRANCH_NAME=fcc-sync" >> $GITHUB_ENV
+              ;;
+              rhcos-*)
+              # split the string around the -
+                array=(${SOURCE_BRANCH//-/ })
+                OCP_VERSION=${array[1]}
+                echo "TARGET_BRANCH=release-${OCP_VERSION}" >> $GITHUB_ENV
+                echo "BRANCH_NAME=fcc-sync-${SOURCE_BRANCH}" >> $GITHUB_ENV
+                ;;
+              *)
+                # Default branches names for on.schedule case
+                echo "SOURCE_BRANCH=testing-devel" >> $GITHUB_ENV
+                echo "TARGET_BRANCH=master" >> $GITHUB_ENV
+                echo "BRANCH_NAME=fcc-sync" >> $GITHUB_ENV
+              ;;
+          esac
+
       - name: Check out repository
         uses: actions/checkout@v3
         with:
@@ -38,27 +60,22 @@ jobs:
           # We need an unbroken commit chain when pushing to the fork.  Don't
           # make assumptions about which commits are already available there.
           fetch-depth: 0
+          # We need to checkout against the target branch
+          ref: ${{ env.TARGET_BRANCH }}
 
       - name: Update submodule
-        env:
-          BRANCH_NAME: ${{ github.event.inputs.branch-name }}
-          SOURCE_BRANCH: ${{ github.event.inputs.branch }}
-          TARGET_BRANCH: ${{ github.event.inputs.target-branch }}
         run: |
           set -euxo pipefail
 
-          # Default branches names for on.schedule case
-          echo "BRANCH_NAME=${BRANCH_NAME:-fcc-sync}" >> $GITHUB_ENV
-          echo "SOURCE_BRANCH=${SOURCE_BRANCH:-testing-devel}" >> $GITHUB_ENV
-          echo "TARGET_BRANCH=${TARGET_BRANCH:-master}" >> $GITHUB_ENV
-
           git submodule init
           git submodule update
 
           cd fedora-coreos-config
+          # the submodule init only fetch the submodule commit and the default branch `testing-devel`
+          git fetch origin ${SOURCE_BRANCH}
           # Omit CoreOS Bot commits from the log message, since they generally
           # only affect FCOS
-          git shortlog "HEAD..testing-devel" --perl-regexp \
+          git shortlog "HEAD..FETCH_HEAD" --perl-regexp \
               --author='^((?!CoreOS Bot <coreosbot@fedoraproject.org>).*)$' \
               > $RUNNER_TEMP/shortlog
 
@@ -67,6 +84,7 @@ jobs:
               echo "No non-trivial changes; exiting"
               exit 0
           fi
+
           git checkout $SOURCE_BRANCH
 
           marker=OPENSHIFT-OS-END-OF-LOG-MARKER-$RANDOM$RANDOM$RANDOM
@@ -77,7 +95,7 @@ jobs:
           EOF
 
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v4.2.3
+        uses: peter-evans/create-pull-request@v6.0.0
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           push-to-fork: coreosbot-releng/os

From 8c32993d6d1a3489e7549348734734f2bcced7fe Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 29 Feb 2024 23:49:10 +0000
Subject: [PATCH 2052/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1028/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 6fe0e95f09..5674bf479a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -727,7 +727,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.13-1.fc39.aarch64",
+      "evra": "1.9.14-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-28T00:00:00Z",
+    "generated": "2024-02-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-25T23:43:12Z"
+        "generated": "2024-02-29T17:42:58Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-28T01:02:23Z"
+        "generated": "2024-02-29T02:00:57Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 515adbf8bf..349cf8b45f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -703,7 +703,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.13-1.fc39.ppc64le",
+      "evra": "1.9.14-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-28T00:00:00Z",
+    "generated": "2024-02-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-25T23:42:14Z"
+        "generated": "2024-02-29T17:41:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-28T01:02:31Z"
+        "generated": "2024-02-29T02:01:05Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 5565b7c885..b7c6a65538 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -697,7 +697,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.13-1.fc39.s390x",
+      "evra": "1.9.14-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-28T00:00:00Z",
+    "generated": "2024-02-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-25T23:41:46Z"
+        "generated": "2024-02-29T17:41:12Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-28T01:02:39Z"
+        "generated": "2024-02-29T02:01:14Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 33e7f12157..9dd45b81fe 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -727,7 +727,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.13-1.fc39.x86_64",
+      "evra": "1.9.14-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-28T00:00:00Z",
+    "generated": "2024-02-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-25T23:43:14Z"
+        "generated": "2024-02-29T17:42:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-28T01:02:48Z"
+        "generated": "2024-02-29T02:01:23Z"
       }
     }
   }

From 2408bb6ad63c58f00b2d92a0f48446b872e7a883 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Fri, 1 Mar 2024 09:18:45 -0700
Subject: [PATCH 2053/2157] denylist: extend snooze for
 ext.config.var-mount.scsi-id

This test is still failing. Let's extend the snooze while we
continue to investigate https://github.com/coreos/fedora-coreos-tracker/issues/1670
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 49738bc79f..371b91e271 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,7 +13,7 @@
     - azure
 - pattern: ext.config.var-mount.scsi-id
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
-  snooze: 2024-02-29
+  snooze: 2024-03-18
   warn: true
   streams:
     - rawhide

From 40f34bb493e97bd89753cef620733c4761931956 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 2 Mar 2024 02:36:08 +0000
Subject: [PATCH 2054/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1030/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5674bf479a..ef6344e754 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1165,7 +1165,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1399,7 +1399,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1681,7 +1681,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1849,19 +1849,19 @@
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.aarch64",
+      "evra": "6.4-7.20230520.fc39.1.aarch64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch",
+      "evra": "6.4-7.20230520.fc39.1.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.aarch64",
+      "evra": "6.4-7.20230520.fc39.1.aarch64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
@@ -2509,13 +2509,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-5.fc39.aarch64",
+      "evra": "2.39.3-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-29T00:00:00Z",
+    "generated": "2024-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-29T17:42:58Z"
+        "generated": "2024-03-01T17:40:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-29T02:00:57Z"
+        "generated": "2024-03-01T00:59:49Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 349cf8b45f..d695a7a795 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1141,7 +1141,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1231,7 +1231,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1375,7 +1375,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1549,7 +1549,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1669,7 +1669,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1831,19 +1831,19 @@
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.ppc64le",
+      "evra": "6.4-7.20230520.fc39.1.ppc64le",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch",
+      "evra": "6.4-7.20230520.fc39.1.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.ppc64le",
+      "evra": "6.4-7.20230520.fc39.1.ppc64le",
       "metadata": {
         "sourcerpm": "ncurses"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-5.fc39.ppc64le",
+      "evra": "2.39.3-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-29T00:00:00Z",
+    "generated": "2024-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-29T17:41:43Z"
+        "generated": "2024-03-01T17:38:45Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-29T02:01:05Z"
+        "generated": "2024-03-01T00:59:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b7c6a65538..ba09f73c89 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1081,7 +1081,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1171,7 +1171,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1315,7 +1315,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1477,7 +1477,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1597,7 +1597,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1759,19 +1759,19 @@
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.s390x",
+      "evra": "6.4-7.20230520.fc39.1.s390x",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch",
+      "evra": "6.4-7.20230520.fc39.1.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.s390x",
+      "evra": "6.4-7.20230520.fc39.1.s390x",
       "metadata": {
         "sourcerpm": "ncurses"
       }
@@ -2401,13 +2401,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-5.fc39.s390x",
+      "evra": "2.39.3-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-29T00:00:00Z",
+    "generated": "2024-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-29T17:41:12Z"
+        "generated": "2024-03-01T17:38:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-29T02:01:14Z"
+        "generated": "2024-03-01T01:00:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9dd45b81fe..138a2e070a 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1171,7 +1171,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1405,7 +1405,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1861,19 +1861,19 @@
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.x86_64",
+      "evra": "6.4-7.20230520.fc39.1.x86_64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.noarch",
+      "evra": "6.4-7.20230520.fc39.1.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.x86_64",
+      "evra": "6.4-7.20230520.fc39.1.x86_64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
@@ -2515,13 +2515,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-5.fc39.x86_64",
+      "evra": "2.39.3-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-02-29T00:00:00Z",
+    "generated": "2024-03-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-02-29T17:42:20Z"
+        "generated": "2024-03-01T17:39:49Z"
       },
       "fedora-updates": {
-        "generated": "2024-02-29T02:01:23Z"
+        "generated": "2024-03-01T01:00:15Z"
       }
     }
   }

From c6662caac7149597f0e7bfa8d3efb3ae1ee83f48 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Fri, 1 Mar 2024 10:47:07 +0100
Subject: [PATCH 2055/2157] workflows/openshift-os : add target branch in the
 PR tittle

Also add an optionnal field to link to the JIRA bug when backporting
This will create a PR tittled:
[$DEST-BRANCH] $JIRA: Bump-fedora-coreos-config

https://github.com/openshift/os/pull/1453#issuecomment-1971378702
---
 .github/workflows/openshift-os.yml | 29 ++++++++++++++++++++---------
 1 file changed, 20 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index 3e55e62a09..b57f5943e3 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -20,6 +20,12 @@ on:
           - rhcos-4.12
           - rhcos-4.11
           - rhcos-4.10
+      jira:
+        description: The JIRA reference to put in the PR title. Defaults to "NO-JIRA".
+        required: false
+        default: NO-JIRA
+        type: string
+
 permissions:
   # none at all
   contents: none
@@ -30,29 +36,34 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SOURCE_BRANCH: ${{ github.event.inputs.branch }}
+      JIRA: ${{ github.event.inputs.jira }}
     steps:
       - name: Set branches values
         run: |
+          set -euxo pipefail
+
           case $SOURCE_BRANCH in
-              testing-devel)
+              # in the on.schedule case, the SOURCE_BRANCH is empty
+              testing-devel|"")
+                echo "SOURCE_BRANCH=testing-devel" >> $GITHUB_ENV
                 echo "TARGET_BRANCH=master" >> $GITHUB_ENV
                 echo "BRANCH_NAME=fcc-sync" >> $GITHUB_ENV
-              ;;
+                ;;
               rhcos-*)
-              # split the string around the -
+                # split the string around the -
                 array=(${SOURCE_BRANCH//-/ })
                 OCP_VERSION=${array[1]}
                 echo "TARGET_BRANCH=release-${OCP_VERSION}" >> $GITHUB_ENV
                 echo "BRANCH_NAME=fcc-sync-${SOURCE_BRANCH}" >> $GITHUB_ENV
+                echo "TITLE_PREFIX=[release-${OCP_VERSION}] " >> $GITHUB_ENV
                 ;;
               *)
-                # Default branches names for on.schedule case
-                echo "SOURCE_BRANCH=testing-devel" >> $GITHUB_ENV
-                echo "TARGET_BRANCH=master" >> $GITHUB_ENV
-                echo "BRANCH_NAME=fcc-sync" >> $GITHUB_ENV
-              ;;
+                echo "SOURCE_BRANCH=$SOURCE_BRANCH is invalid" >&2
+                exit 1
+                ;;
           esac
 
+          echo "JIRA=${JIRA:-NO-JIRA}" >> $GITHUB_ENV
       - name: Check out repository
         uses: actions/checkout@v3
         with:
@@ -105,7 +116,7 @@ jobs:
             Bump fedora-coreos-config
 
             ${{ env.SHORTLOG }}
-          title: "NO-JIRA: Bump fedora-coreos-config"
+          title: "${{ env.TITLE_PREFIX }}${{ env.JIRA }}: Bump fedora-coreos-config"
           body: |
             Created by [GitHub workflow](${{ github.server_url }}/${{ github.repository }}/actions/workflows/openshift-os.yml) ([source](${{ github.server_url }}/${{ github.repository }}/blob/testing-devel/.github/workflows/openshift-os.yml)).
 

From f10ac7976d1100c3700b278a56ee9ac10b5fdcaf Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 7 Mar 2024 19:36:20 +0000
Subject: [PATCH 2056/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1037/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ef6344e754..69740336ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -745,7 +745,7 @@
       }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.aarch64",
+      "evra": "1.0.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gdisk"
       }
@@ -811,7 +811,7 @@
       }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.aarch64",
+      "evra": "2.4.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
@@ -1045,25 +1045,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.6-200.fc39.aarch64",
+      "evra": "6.7.7-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.6-200.fc39.aarch64",
+      "evra": "6.7.7-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.6-200.fc39.aarch64",
+      "evra": "6.7.7-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.6-200.fc39.aarch64",
+      "evra": "6.7.7-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2245,13 +2245,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-01T00:00:00Z",
+    "generated": "2024-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-01T17:40:14Z"
+        "generated": "2024-03-02T17:32:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-01T00:59:49Z"
+        "generated": "2024-03-07T00:51:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d695a7a795..5ad609c363 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -721,7 +721,7 @@
       }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.ppc64le",
+      "evra": "1.0.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gdisk"
       }
@@ -787,7 +787,7 @@
       }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.ppc64le",
+      "evra": "2.4.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
@@ -1021,25 +1021,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.6-200.fc39.ppc64le",
+      "evra": "6.7.7-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.6-200.fc39.ppc64le",
+      "evra": "6.7.7-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.6-200.fc39.ppc64le",
+      "evra": "6.7.7-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.6-200.fc39.ppc64le",
+      "evra": "6.7.7-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2245,13 +2245,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-01T00:00:00Z",
+    "generated": "2024-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-01T17:38:45Z"
+        "generated": "2024-03-02T17:30:18Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-01T00:59:58Z"
+        "generated": "2024-03-07T00:51:43Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index ba09f73c89..c52e94152e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -715,7 +715,7 @@
       }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.s390x",
+      "evra": "1.0.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gdisk"
       }
@@ -763,7 +763,7 @@
       }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.s390x",
+      "evra": "2.4.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
@@ -961,25 +961,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.6-200.fc39.s390x",
+      "evra": "6.7.7-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.6-200.fc39.s390x",
+      "evra": "6.7.7-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.6-200.fc39.s390x",
+      "evra": "6.7.7-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.6-200.fc39.s390x",
+      "evra": "6.7.7-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2149,13 +2149,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-01T00:00:00Z",
+    "generated": "2024-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-01T17:38:28Z"
+        "generated": "2024-03-02T17:31:32Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-01T01:00:06Z"
+        "generated": "2024-03-07T00:51:51Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 138a2e070a..5d04e1c58f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -745,7 +745,7 @@
       }
     },
     "gdisk": {
-      "evra": "1.0.9-6.fc39.x86_64",
+      "evra": "1.0.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gdisk"
       }
@@ -811,7 +811,7 @@
       }
     },
     "gnupg2": {
-      "evra": "2.4.3-4.fc39.x86_64",
+      "evra": "2.4.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.6-200.fc39.x86_64",
+      "evra": "6.7.7-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.6-200.fc39.x86_64",
+      "evra": "6.7.7-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.6-200.fc39.x86_64",
+      "evra": "6.7.7-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.6-200.fc39.x86_64",
+      "evra": "6.7.7-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2251,13 +2251,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.4-1.fc39.noarch",
+      "evra": "39.5-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-01T00:00:00Z",
+    "generated": "2024-03-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-01T17:39:49Z"
+        "generated": "2024-03-02T17:31:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-01T01:00:15Z"
+        "generated": "2024-03-07T00:52:00Z"
       }
     }
   }

From 6b0ae977c2a819222f8df9e3c7373efef68ac112 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Mar 2024 23:31:07 +0000
Subject: [PATCH 2057/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1039/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 69740336ec..1657eee0f6 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -703,7 +703,7 @@
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.aarch64",
+      "evra": "1.13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
@@ -2323,7 +2323,7 @@
       }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.aarch64",
+      "evra": "1.8.0.0-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "socat"
       }
@@ -2419,37 +2419,37 @@
       }
     },
     "systemd": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.9-1.fc39.aarch64",
+      "evra": "254.10-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-07T00:00:00Z",
+    "generated": "2024-03-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-02T17:32:14Z"
+        "generated": "2024-03-07T19:43:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-07T00:51:34Z"
+        "generated": "2024-03-08T01:10:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5ad609c363..308c716e44 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -679,7 +679,7 @@
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.ppc64le",
+      "evra": "1.13-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
@@ -2323,7 +2323,7 @@
       }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.ppc64le",
+      "evra": "1.8.0.0-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "socat"
       }
@@ -2413,37 +2413,37 @@
       }
     },
     "systemd": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.9-1.fc39.ppc64le",
+      "evra": "254.10-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-07T00:00:00Z",
+    "generated": "2024-03-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-02T17:30:18Z"
+        "generated": "2024-03-07T19:42:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-07T00:51:43Z"
+        "generated": "2024-03-08T01:10:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c52e94152e..55a72ba8b1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -673,7 +673,7 @@
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.s390x",
+      "evra": "1.13-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
@@ -2221,7 +2221,7 @@
       }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.s390x",
+      "evra": "1.8.0.0-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "socat"
       }
@@ -2311,37 +2311,37 @@
       }
     },
     "systemd": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.9-1.fc39.s390x",
+      "evra": "254.10-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-07T00:00:00Z",
+    "generated": "2024-03-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-02T17:31:32Z"
+        "generated": "2024-03-07T19:42:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-07T00:51:51Z"
+        "generated": "2024-03-08T01:10:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5d04e1c58f..3f8fd743df 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -703,7 +703,7 @@
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.12-2.fc39.x86_64",
+      "evra": "1.13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
@@ -2329,7 +2329,7 @@
       }
     },
     "socat": {
-      "evra": "1.7.4.4-3.fc39.x86_64",
+      "evra": "1.8.0.0-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "socat"
       }
@@ -2425,37 +2425,37 @@
       }
     },
     "systemd": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.9-1.fc39.x86_64",
+      "evra": "254.10-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-07T00:00:00Z",
+    "generated": "2024-03-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-02T17:31:51Z"
+        "generated": "2024-03-07T19:43:50Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-07T00:52:00Z"
+        "generated": "2024-03-08T01:10:34Z"
       }
     }
   }

From 90f984d8ab227627ad28cefbd3583d4711232df7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 9 Mar 2024 23:36:16 +0000
Subject: [PATCH 2058/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1040/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1657eee0f6..65abe63945 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.17-2.fc39.aarch64",
+      "evra": "0.2.18-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -571,19 +571,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-4.fc39.noarch",
+      "evra": "0.191-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-4.fc39.aarch64",
+      "evra": "0.191-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-4.fc39.aarch64",
+      "evra": "0.191-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2612,16 +2612,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-08T00:00:00Z",
+    "generated": "2024-03-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-07T19:43:48Z"
+        "generated": "2024-03-09T17:43:09Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-08T01:10:08Z"
+        "generated": "2024-03-09T01:32:16Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 308c716e44..7571c15939 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -175,7 +175,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.17-2.fc39.ppc64le",
+      "evra": "0.2.18-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -553,19 +553,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-4.fc39.noarch",
+      "evra": "0.191-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-4.fc39.ppc64le",
+      "evra": "0.191-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-4.fc39.ppc64le",
+      "evra": "0.191-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2600,16 +2600,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-08T00:00:00Z",
+    "generated": "2024-03-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-07T19:42:53Z"
+        "generated": "2024-03-09T17:41:59Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-08T01:10:16Z"
+        "generated": "2024-03-09T01:32:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 55a72ba8b1..088e328687 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.17-2.fc39.s390x",
+      "evra": "0.2.18-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -547,19 +547,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-4.fc39.noarch",
+      "evra": "0.191-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-4.fc39.s390x",
+      "evra": "0.191-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-4.fc39.s390x",
+      "evra": "0.191-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2504,16 +2504,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-08T00:00:00Z",
+    "generated": "2024-03-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-07T19:42:28Z"
+        "generated": "2024-03-09T17:42:01Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-08T01:10:25Z"
+        "generated": "2024-03-09T01:32:33Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3f8fd743df..2f9e3fc388 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -169,7 +169,7 @@
       }
     },
     "bootupd": {
-      "evra": "0.2.17-2.fc39.x86_64",
+      "evra": "0.2.18-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
@@ -571,19 +571,19 @@
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.190-4.fc39.noarch",
+      "evra": "0.191-2.fc39.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.190-4.fc39.x86_64",
+      "evra": "0.191-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.190-4.fc39.x86_64",
+      "evra": "0.191-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-08T00:00:00Z",
+    "generated": "2024-03-09T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-07T19:43:50Z"
+        "generated": "2024-03-09T17:43:34Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-08T01:10:34Z"
+        "generated": "2024-03-09T01:32:42Z"
       }
     }
   }

From 10d5f64d6a953abc37ed2341f91e1d468dcf1964 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 12 Mar 2024 14:55:29 -0400
Subject: [PATCH 2059/2157] tests/bootupd: check for `/boot/bootupd-state.json`

`bootupctl status` will still be happy even if that file doesn't exist,
so let's check for it explicitly to make sure that
`bootupctl backend install` ran correctly at disk image generation time.
---
 tests/kola/boot/bootupd | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 34634be594..6e29500d7e 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -27,5 +27,10 @@ case "$(arch)" in
         ;;
 esac
 
+state_file=/boot/bootupd-state.json
+if [ ! -f "${state_file}" ]; then
+    fatal "${state_file} not present"
+fi
+
 bootupctl status
 ok bootupctl

From 8ced0db61f23a9b59ef096317fb6fc225bfba133 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Fri, 8 Mar 2024 15:18:05 +0100
Subject: [PATCH 2060/2157] 05core: check for kdump_remote_ip as a dracut karg

Further refines 1d757f451fa0b8510091233574d2c012afbc4d91
See https://github.com/coreos/fedora-coreos-config/pull/2847
This one was merged with not enough testing : it turns out the kernel
arg is only visible to dracut, which turns it into a drop-in file, in
/etc/cmdline.d/60kdumpip.conf

Use the dracut lib to query the "kdump_remote_ip" argument to skip the sysroot
mount unit in kdump initramfs
(only when kdump is configured to export logs to a remote IP)

Ref https://issues.redhat.com/browse/OCPBUGS-29762
---
 .../coreos-diskful-generator                  | 33 ++++++++++++++-----
 1 file changed, 24 insertions(+), 9 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index 0bee1e6b63..a9bff32d30 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -6,7 +6,17 @@
 # With Ignition v 2.5.0, ignition-dracut was merged into Ignition and the CoreOS
 # specific bits were deposited here.
 
-set -e
+set +euo pipefail
+. /usr/lib/dracut-lib.sh
+set -euo pipefail
+
+# dracut isn't nice with `set -e`
+dracut_func() {
+    set +euo pipefail
+    "$@"; local rc=$?
+    set -euo pipefail
+    return $rc
+}
 
 # Generators don't have logging right now
 # https://github.com/systemd/systemd/issues/15638
@@ -17,7 +27,8 @@ EARLY_DIR="${2:-/tmp}"
 
 IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
-    local name="$1" value="$2"
+    local name value
+    name="$1"
     for arg in "${cmdline[@]}"; do
         if [[ "${arg%%=*}" == "${name}" ]]; then
             value="${arg#*=}"
@@ -27,7 +38,8 @@ cmdline_arg() {
 }
 
 cmdline_bool() {
-    local value=$(cmdline_arg "$@")
+    local value
+    value=$(cmdline_arg "$@")
     case "$value" in
         ""|0|no|off) return 1;;
         *) return 0;;
@@ -62,16 +74,19 @@ fi
 # all old machines so there are still some that could exist that don't
 # have root= and rootflags= kargs. For that reason we run this bit of
 # code on EVERY diskful boot.
-mkdir -p ${UNIT_DIR}
+mkdir -p "${UNIT_DIR}"
 # We want to generate sysroot.mount on ostree systems, but we don't want
 # to run if there's already a root= karg, where the systemd-fstab-generator
 # should win.
 # We also don't want to generate sysroot.mount if we are booting a kdump kernel
-# that aims to upload logs to a remote target, as the XFS kernel module won't be loaded
+# that aims to upload logs to a remote target, as we may be in a diskless setup
 # https://issues.redhat.com/browse/OCPBUGS-27935
-# FIXME: this kdump case should be removed when we are done with https://github.com/coreos/fedora-coreos-tracker/issues/1675
-if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)" && test -z "$(cmdline_arg kdump_remote_ip)"; then
-    cat >${UNIT_DIR}/sysroot.mount << 'EOF'
+# FIXME use dracut-lib https://github.com/coreos/fedora-coreos-config/pull/2890#issuecomment-1985953499
+# rather than ConditionPathExists
+# Using dracut-lib seems to interfere with iscsi functionnality but this requires deeper investigation
+# and more tests : https://github.com/coreos/fedora-coreos-tracker/issues/1689
+if test -n "$(cmdline_arg ostree)" && test -z "$(cmdline_arg root)" && ! dracut_func getargbool 0 'kdump_remote_ip'; then
+    cat >"${UNIT_DIR}"/sysroot.mount << 'EOF'
 [Unit]
 Before=initrd-root-fs.target
 After=coreos-rootflags.service
@@ -85,7 +100,7 @@ EOF
     add_requires coreos-rootflags.service initrd-root-fs.target
 fi
 
-if ! $(cmdline_bool 'ignition.firstboot' 0); then
+if ! cmdline_bool 'ignition.firstboot'; then
     exit 0
 fi
 

From 67eb1a2b61a0dc77712621e865850f1c4f93042d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 11 Mar 2024 12:10:27 -0400
Subject: [PATCH 2061/2157] tests: use `/dev/disk/by-id/coreos-boot-disk`
 instead of `/dev/vda`

Hardcoding `/dev/vda` will break if there are more than one block device
may be attached (like on s390x where we attach another disk to pass in
Ignition). This is why the `/dev/disk/by-id/coreos-boot-disk` symlink
was added. Use it.

While we're here, switch from `platform: qemu` to
`tags: platform-independent` since they should theoretically work on any
platform now (though they are equivalent today).

Closes: https://github.com/coreos/fedora-coreos-tracker/issues/1683
---
 tests/kola/root-reprovision/swap-before-root/config.bu | 2 +-
 tests/kola/root-reprovision/swap-before-root/test.sh   | 4 +---
 tests/kola/var-mount/luks/config.bu                    | 2 +-
 tests/kola/var-mount/luks/test.sh                      | 3 +--
 tests/kola/var-mount/simple/config.bu                  | 2 +-
 tests/kola/var-mount/simple/test.sh                    | 4 +---
 6 files changed, 6 insertions(+), 11 deletions(-)

diff --git a/tests/kola/root-reprovision/swap-before-root/config.bu b/tests/kola/root-reprovision/swap-before-root/config.bu
index 63fa6d2e9c..c67161402b 100644
--- a/tests/kola/root-reprovision/swap-before-root/config.bu
+++ b/tests/kola/root-reprovision/swap-before-root/config.bu
@@ -3,7 +3,7 @@ version: 1.4.0
 
 storage:
   disks:
-    - device: /dev/vda
+    - device: /dev/disk/by-id/coreos-boot-disk
       partitions:
         - number: 4
           label: swap
diff --git a/tests/kola/root-reprovision/swap-before-root/test.sh b/tests/kola/root-reprovision/swap-before-root/test.sh
index 2deb4b8efd..e88c1cdb03 100755
--- a/tests/kola/root-reprovision/swap-before-root/test.sh
+++ b/tests/kola/root-reprovision/swap-before-root/test.sh
@@ -1,7 +1,5 @@
 #!/bin/bash
 ## kola:
-##   # This test's config manually references /dev/vda and is thus QEMU only
-##   platforms: qemu
 ##   # Root reprovisioning requires at least 4GiB of memory.
 ##   minMemory: 4096
 ##   # This test includes a lot of disk I/O and needs a higher
@@ -11,7 +9,7 @@
 ##   # legal but usually not intended, so Butane warns about it.
 ##   allowConfigWarnings: true
 ##   # This test reprovisions the rootfs.
-##   tags: reprovision
+##   tags: reprovision platform-independent
 ##   description: Verify the root reprovision and swap enabled are supported.
 
 set -xeuo pipefail
diff --git a/tests/kola/var-mount/luks/config.bu b/tests/kola/var-mount/luks/config.bu
index 294426e29c..50b5612cf2 100644
--- a/tests/kola/var-mount/luks/config.bu
+++ b/tests/kola/var-mount/luks/config.bu
@@ -2,7 +2,7 @@ variant: fcos
 version: 1.3.0
 storage:
   disks:
-    - device: /dev/vda
+    - device: /dev/disk/by-id/coreos-boot-disk
       partitions:
         - label: var
           size_mib: 1000
diff --git a/tests/kola/var-mount/luks/test.sh b/tests/kola/var-mount/luks/test.sh
index bb72e762c9..00e9455771 100755
--- a/tests/kola/var-mount/luks/test.sh
+++ b/tests/kola/var-mount/luks/test.sh
@@ -1,9 +1,8 @@
 #!/bin/bash
 ## kola:
-##   # Restrict to qemu for now because the primary disk path is platform-dependent
-##   platforms: qemu
 ##   architectures: "! s390x"
 ##   description: Verify that reprovision disk with luks works.
+##   tags: platform-independent
 
 set -xeuo pipefail
 
diff --git a/tests/kola/var-mount/simple/config.bu b/tests/kola/var-mount/simple/config.bu
index 424b7e7d5c..cb7584e459 100644
--- a/tests/kola/var-mount/simple/config.bu
+++ b/tests/kola/var-mount/simple/config.bu
@@ -2,7 +2,7 @@ variant: fcos
 version: 1.3.0
 storage:
   disks:
-    - device: /dev/vda
+    - device: /dev/disk/by-id/coreos-boot-disk
       partitions:
         - label: var
           guid: 63194b49-e4b7-43f9-9a8b-df0fd8279bb7
diff --git a/tests/kola/var-mount/simple/test.sh b/tests/kola/var-mount/simple/test.sh
index 9ccfed7c06..c18e23c5a1 100755
--- a/tests/kola/var-mount/simple/test.sh
+++ b/tests/kola/var-mount/simple/test.sh
@@ -1,9 +1,7 @@
 #!/bin/bash
 ## kola:
-##   platforms: qemu
 ##   description: Verify that provision disk with guid works.
-#
-# Restrict to qemu for now because the primary disk path is platform-dependent
+##   tags: platform-independent
 
 set -xeuo pipefail
 

From 2be247d1f7ce12c38d3bd89566c8d70a301cbe6a Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 14 Mar 2024 19:51:57 -0400
Subject: [PATCH 2062/2157] manifest: Unpin ostree

It seems like something that was intended to unpin `fast-track`
overrides isn't.
---
 manifest-lock.overrides.aarch64.yaml | 23 ----------------------
 manifest-lock.overrides.ppc64le.yaml | 29 ----------------------------
 manifest-lock.overrides.s390x.yaml   | 23 ----------------------
 manifest-lock.overrides.x86_64.yaml  | 23 ----------------------
 4 files changed, 98 deletions(-)
 delete mode 100644 manifest-lock.overrides.aarch64.yaml
 delete mode 100644 manifest-lock.overrides.ppc64le.yaml
 delete mode 100644 manifest-lock.overrides.s390x.yaml
 delete mode 100644 manifest-lock.overrides.x86_64.yaml

diff --git a/manifest-lock.overrides.aarch64.yaml b/manifest-lock.overrides.aarch64.yaml
deleted file mode 100644
index dc3487210b..0000000000
--- a/manifest-lock.overrides.aarch64.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.8-3.fc39.aarch64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
-  ostree-libs:
-    evra: 2023.8-3.fc39.aarch64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
diff --git a/manifest-lock.overrides.ppc64le.yaml b/manifest-lock.overrides.ppc64le.yaml
deleted file mode 100644
index d76399f3bb..0000000000
--- a/manifest-lock.overrides.ppc64le.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.8-3.fc39.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
-  ostree-libs:
-    evra: 2023.8-3.fc39.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
-  ostree-grub2:
-    evra: 2023.8-3.fc39.ppc64le
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
diff --git a/manifest-lock.overrides.s390x.yaml b/manifest-lock.overrides.s390x.yaml
deleted file mode 100644
index c3445e9db2..0000000000
--- a/manifest-lock.overrides.s390x.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.8-3.fc39.s390x
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
-  ostree-libs:
-    evra: 2023.8-3.fc39.s390x
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
diff --git a/manifest-lock.overrides.x86_64.yaml b/manifest-lock.overrides.x86_64.yaml
deleted file mode 100644
index 06b85e4238..0000000000
--- a/manifest-lock.overrides.x86_64.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# This lockfile should be used to pin to a package version (`type: pin`) or to
-# fast-track packages ahead of Bodhi (`type: fast-track`). Fast-tracked
-# packages will automatically be removed once they are in the stable repos.
-#
-# IMPORTANT: YAML comments *will not* be preserved. All `pin` overrides *must*
-# include a URL in the `metadata.reason` key. Overrides of type `fast-track`
-# *should* include a Bodhi update URL in the `metadata.bodhi` key and a URL
-# in the `metadata.reason` key, though it's acceptable to omit a `reason`
-# for FCOS-specific packages (ignition, afterburn, etc.).
-
-packages:
-  ostree:
-    evra: 2023.8-3.fc39.x86_64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track
-  ostree-libs:
-    evra: 2023.8-3.fc39.x86_64
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1637
-      type: fast-track

From efb4d7c7c052cc41575c77b3db1d0124bd3b8aa1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 14 Mar 2024 16:55:28 -0400
Subject: [PATCH 2063/2157] tests/bootupd: don't check for
 `/boot/bootupd-state.json` on s390x

On x86_64 and aarch64, we always expect the file to exist. On ppc64le,
we only expect it to exist if it was built using osbuild. On s390x, we
never expect it to exist.

Fixes 10d5f64d ("tests/bootupd: check for `/boot/bootupd-state.json`").
---
 tests/kola/boot/bootupd | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tests/kola/boot/bootupd b/tests/kola/boot/bootupd
index 6e29500d7e..c909d6e919 100755
--- a/tests/kola/boot/bootupd
+++ b/tests/kola/boot/bootupd
@@ -17,9 +17,18 @@ set -xeuo pipefail
 # s390x, let's just conditionally check that *if* bootupd is installed, then
 # it's functioning as expected. We can harden it more once we've hard cut over
 # to 9.4.
+check_state_file=
 case "$(arch)" in
     aarch64|x86_64)
+        # on these arches, we always expect state files to exist
+        check_state_file=1
         ;;
+    ppc64le)
+        # ppc64le has it if built by osbuild, otherwise not
+        if [ -e /sysroot/.aleph-version.json ]; then
+            check_state_file=1
+        fi
+        ;& # fallthrough
     *)
         if ! rpm -q bootupd; then
             exit 0
@@ -28,7 +37,7 @@ case "$(arch)" in
 esac
 
 state_file=/boot/bootupd-state.json
-if [ ! -f "${state_file}" ]; then
+if [ -n "${check_state_file}" ] && [ ! -f "${state_file}" ]; then
     fatal "${state_file} not present"
 fi
 

From 9246e20b3dac3b148359292f8255566e2a057d0e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 15 Mar 2024 05:55:04 +0000
Subject: [PATCH 2064/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1047/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json |  98 +++++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 100 ++++++++++++++++++++-----------------
 manifest-lock.s390x.json   |  88 +++++++++++++++++---------------
 manifest-lock.x86_64.json  |  96 +++++++++++++++++++----------------
 4 files changed, 206 insertions(+), 176 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 65abe63945..1b17592f90 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -276,6 +276,18 @@
         "sourcerpm": "cloud-utils"
       }
     },
+    "composefs": {
+      "evra": "1.0.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
+    "composefs-libs": {
+      "evra": "1.0.3-1.fc39.aarch64",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
     "conmon": {
       "evra": "2:2.1.10-1.fc39.aarch64",
       "metadata": {
@@ -307,7 +319,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.229.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -337,13 +349,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.20.0-1.fc39.aarch64",
+      "evra": "0.21.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.20.0-1.fc39.aarch64",
+      "evra": "0.21.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -385,13 +397,13 @@
       }
     },
     "crun": {
-      "evra": "1.14.3-1.fc39.aarch64",
+      "evra": "1.14.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.3-1.fc39.aarch64",
+      "evra": "1.14.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -493,7 +505,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.11-1.fc39.aarch64",
+      "evra": "1.0.12-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -727,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.14-1.fc39.aarch64",
+      "evra": "1.9.15-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -841,25 +853,25 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-116.fc39.noarch",
+      "evra": "1:2.06-118.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-116.fc39.aarch64",
+      "evra": "1:2.06-118.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-116.fc39.aarch64",
+      "evra": "1:2.06-118.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-116.fc39.aarch64",
+      "evra": "1:2.06-118.fc39.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -895,13 +907,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1045,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.7-200.fc39.aarch64",
+      "evra": "6.7.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.7-200.fc39.aarch64",
+      "evra": "6.7.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.7-200.fc39.aarch64",
+      "evra": "6.7.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.7-200.fc39.aarch64",
+      "evra": "6.7.9-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1146,12 +1158,6 @@
         "sourcerpm": "libassuan"
       }
     },
-    "libatomic": {
-      "evra": "13.2.1-6.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "gcc"
-      }
-    },
     "libattr": {
       "evra": "2.5.1-8.fc39.aarch64",
       "metadata": {
@@ -1663,7 +1669,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.aarch64",
+      "evra": "1.0.27-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -1741,13 +1747,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1837,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1927,7 +1933,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1939,7 +1945,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1993,13 +1999,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-3.fc39.aarch64",
+      "evra": "2024.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-3.fc39.aarch64",
+      "evra": "2024.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2161,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2185,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.2-2.fc39.aarch64",
+      "evra": "2024.3-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.2-2.fc39.aarch64",
+      "evra": "2024.3-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2467,13 +2473,13 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-2.fc39.aarch64",
+      "evra": "0.0.99.5-4.fc39.aarch64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2521,13 +2527,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.113-1.fc39.noarch",
+      "evra": "2:9.1.158-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.113-1.fc39.aarch64",
+      "evra": "2:9.1.158-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2612,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-09T00:00:00Z",
+    "generated": "2024-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-09T17:43:09Z"
+        "generated": "2024-03-11T18:18:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-09T01:32:16Z"
+        "generated": "2024-03-15T01:00:22Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 7571c15939..a5c8aaf02b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -247,7 +247,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -282,6 +282,18 @@
         "sourcerpm": "cloud-utils"
       }
     },
+    "composefs": {
+      "evra": "1.0.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
+    "composefs-libs": {
+      "evra": "1.0.3-1.fc39.ppc64le",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
     "conmon": {
       "evra": "2:2.1.10-1.fc39.ppc64le",
       "metadata": {
@@ -313,7 +325,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.229.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -343,13 +355,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.20.0-1.fc39.ppc64le",
+      "evra": "0.21.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.20.0-1.fc39.ppc64le",
+      "evra": "0.21.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -391,7 +403,7 @@
       }
     },
     "crun": {
-      "evra": "1.14.3-1.fc39.ppc64le",
+      "evra": "1.14.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -493,7 +505,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.11-1.fc39.ppc64le",
+      "evra": "1.0.12-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -703,7 +715,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.14-1.fc39.ppc64le",
+      "evra": "1.9.15-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -811,31 +823,31 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-116.fc39.noarch",
+      "evra": "1:2.06-118.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-116.fc39.ppc64le",
+      "evra": "1:2.06-118.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-116.fc39.noarch",
+      "evra": "1:2.06-118.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-116.fc39.ppc64le",
+      "evra": "1:2.06-118.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-116.fc39.ppc64le",
+      "evra": "1:2.06-118.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -871,13 +883,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1021,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.7-200.fc39.ppc64le",
+      "evra": "6.7.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.7-200.fc39.ppc64le",
+      "evra": "6.7.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.7-200.fc39.ppc64le",
+      "evra": "6.7.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.7-200.fc39.ppc64le",
+      "evra": "6.7.9-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1122,12 +1134,6 @@
         "sourcerpm": "libassuan"
       }
     },
-    "libatomic": {
-      "evra": "13.2.1-6.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "gcc"
-      }
-    },
     "libattr": {
       "evra": "2.5.1-8.fc39.ppc64le",
       "metadata": {
@@ -1651,7 +1657,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.ppc64le",
+      "evra": "1.0.27-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -1729,13 +1735,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1813,7 +1819,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1909,7 +1915,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1921,7 +1927,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1975,19 +1981,19 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-3.fc39.ppc64le",
+      "evra": "2024.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-grub2": {
-      "evra": "2023.8-3.fc39.ppc64le",
+      "evra": "2024.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-3.fc39.ppc64le",
+      "evra": "2024.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2161,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2185,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.2-2.fc39.ppc64le",
+      "evra": "2024.3-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.2-2.fc39.ppc64le",
+      "evra": "2024.3-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2461,13 +2467,13 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-2.fc39.ppc64le",
+      "evra": "0.0.99.5-4.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2515,13 +2521,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.113-1.fc39.noarch",
+      "evra": "2:9.1.158-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.113-1.fc39.ppc64le",
+      "evra": "2:9.1.158-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2600,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-09T00:00:00Z",
+    "generated": "2024-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-09T17:41:59Z"
+        "generated": "2024-03-10T17:39:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-09T01:32:24Z"
+        "generated": "2024-03-15T01:00:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 088e328687..6bc5b30fb9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -276,6 +276,18 @@
         "sourcerpm": "cloud-utils"
       }
     },
+    "composefs": {
+      "evra": "1.0.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
+    "composefs-libs": {
+      "evra": "1.0.3-1.fc39.s390x",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
     "conmon": {
       "evra": "2:2.1.10-1.fc39.s390x",
       "metadata": {
@@ -307,7 +319,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.229.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -337,13 +349,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.20.0-1.fc39.s390x",
+      "evra": "0.21.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.20.0-1.fc39.s390x",
+      "evra": "0.21.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -385,7 +397,7 @@
       }
     },
     "crun": {
-      "evra": "1.14.3-1.fc39.s390x",
+      "evra": "1.14.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -487,7 +499,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.11-1.fc39.s390x",
+      "evra": "1.0.12-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -697,7 +709,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.14-1.fc39.s390x",
+      "evra": "1.9.15-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -817,13 +829,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -961,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.7-200.fc39.s390x",
+      "evra": "6.7.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.7-200.fc39.s390x",
+      "evra": "6.7.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.7-200.fc39.s390x",
+      "evra": "6.7.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.7-200.fc39.s390x",
+      "evra": "6.7.9-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1062,12 +1074,6 @@
         "sourcerpm": "libassuan"
       }
     },
-    "libatomic": {
-      "evra": "13.2.1-6.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "gcc"
-      }
-    },
     "libattr": {
       "evra": "2.5.1-8.fc39.s390x",
       "metadata": {
@@ -1579,7 +1585,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.s390x",
+      "evra": "1.0.27-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -1657,13 +1663,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1741,7 +1747,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1831,7 +1837,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1843,7 +1849,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1891,13 +1897,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-3.fc39.s390x",
+      "evra": "2024.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-3.fc39.s390x",
+      "evra": "2024.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2059,7 +2065,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2083,13 +2089,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.2-2.fc39.s390x",
+      "evra": "2024.3-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.2-2.fc39.s390x",
+      "evra": "2024.3-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2359,13 +2365,13 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-2.fc39.s390x",
+      "evra": "0.0.99.5-4.fc39.s390x",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2419,13 +2425,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.113-1.fc39.noarch",
+      "evra": "2:9.1.158-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.113-1.fc39.s390x",
+      "evra": "2:9.1.158-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2504,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-09T00:00:00Z",
+    "generated": "2024-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-09T17:42:01Z"
+        "generated": "2024-03-10T17:39:46Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-09T01:32:33Z"
+        "generated": "2024-03-15T01:00:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2f9e3fc388..4c3d048f65 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -276,6 +276,18 @@
         "sourcerpm": "cloud-utils"
       }
     },
+    "composefs": {
+      "evra": "1.0.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
+    "composefs-libs": {
+      "evra": "1.0.3-1.fc39.x86_64",
+      "metadata": {
+        "sourcerpm": "composefs"
+      }
+    },
     "conmon": {
       "evra": "2:2.1.10-1.fc39.x86_64",
       "metadata": {
@@ -307,7 +319,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.229.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -337,13 +349,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.20.0-1.fc39.x86_64",
+      "evra": "0.21.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.20.0-1.fc39.x86_64",
+      "evra": "0.21.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -385,13 +397,13 @@
       }
     },
     "crun": {
-      "evra": "1.14.3-1.fc39.x86_64",
+      "evra": "1.14.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.3-1.fc39.x86_64",
+      "evra": "1.14.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -493,7 +505,7 @@
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.11-1.fc39.x86_64",
+      "evra": "1.0.12-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
@@ -727,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.14-1.fc39.x86_64",
+      "evra": "1.9.15-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -841,37 +853,37 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-116.fc39.noarch",
+      "evra": "1:2.06-118.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-116.fc39.x86_64",
+      "evra": "1:2.06-118.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc": {
-      "evra": "1:2.06-116.fc39.x86_64",
+      "evra": "1:2.06-118.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-116.fc39.noarch",
+      "evra": "1:2.06-118.fc39.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-116.fc39.x86_64",
+      "evra": "1:2.06-118.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-116.fc39.x86_64",
+      "evra": "1:2.06-118.fc39.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -907,13 +919,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1057,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.7-200.fc39.x86_64",
+      "evra": "6.7.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.7-200.fc39.x86_64",
+      "evra": "6.7.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.7-200.fc39.x86_64",
+      "evra": "6.7.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.7-200.fc39.x86_64",
+      "evra": "6.7.9-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1669,7 +1681,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.26-3.fc39.x86_64",
+      "evra": "1.0.27-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -1747,13 +1759,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1843,7 +1855,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1939,7 +1951,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1951,7 +1963,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2005,13 +2017,13 @@
       }
     },
     "ostree": {
-      "evra": "2023.8-3.fc39.x86_64",
+      "evra": "2024.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2023.8-3.fc39.x86_64",
+      "evra": "2024.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2167,7 +2179,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2191,13 +2203,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.2-2.fc39.x86_64",
+      "evra": "2024.3-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.2-2.fc39.x86_64",
+      "evra": "2024.3-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2473,13 +2485,13 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240220-1.fc39.noarch",
+      "evra": "20240312-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-2.fc39.x86_64",
+      "evra": "0.0.99.5-4.fc39.x86_64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
@@ -2527,13 +2539,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.113-1.fc39.noarch",
+      "evra": "2:9.1.158-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.113-1.fc39.x86_64",
+      "evra": "2:9.1.158-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-09T00:00:00Z",
+    "generated": "2024-03-15T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-09T17:43:34Z"
+        "generated": "2024-03-11T18:18:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-09T01:32:42Z"
+        "generated": "2024-03-15T01:00:48Z"
       }
     }
   }

From 6650e81d6107fd53d88ad8ddf441a302b23f4035 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 15 Mar 2024 16:12:29 -0400
Subject: [PATCH 2065/2157] manifests: add makedumpfile RPM on F41+

This was made into a subpackage, but is required for kdump to work.
See https://github.com/coreos/fedora-coreos-tracker/issues/1692
---
 manifests/fedora-coreos.yaml | 3 +++
 manifests/makedumpfile.yaml  | 4 ++++
 2 files changed, 7 insertions(+)
 create mode 100644 manifests/makedumpfile.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index f5948d8fe3..92e8eaf578 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -36,6 +36,9 @@ conditional-include:
   - if: releasever == 39
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
+  - if: releasever >= 41
+    # Include makedumpfile subpackage from kexec-tools (new in F41+)
+    include: makedumpfile.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/makedumpfile.yaml b/manifests/makedumpfile.yaml
new file mode 100644
index 0000000000..5d5813df50
--- /dev/null
+++ b/manifests/makedumpfile.yaml
@@ -0,0 +1,4 @@
+# makedumpfile is needed for kdump and was broken out to a subpackage
+# in F41+. Drop this when we no longer support <F41.
+packages:
+  - makedumpfile

From fe95453097e0f761bf6510f5516c424533290d7f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 17 Mar 2024 23:35:29 +0000
Subject: [PATCH 2066/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1050/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1b17592f90..07b7948a9a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2527,13 +2527,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.158-1.fc39.noarch",
+      "evra": "2:9.1.181-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.158-1.fc39.aarch64",
+      "evra": "2:9.1.181-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-15T00:00:00Z",
+    "generated": "2024-03-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-11T18:18:19Z"
+        "generated": "2024-03-16T18:15:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-15T01:00:22Z"
+        "generated": "2024-03-17T02:01:59Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a5c8aaf02b..322a56b1dd 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2521,13 +2521,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.158-1.fc39.noarch",
+      "evra": "2:9.1.181-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.158-1.fc39.ppc64le",
+      "evra": "2:9.1.181-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-15T00:00:00Z",
+    "generated": "2024-03-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-10T17:39:33Z"
+        "generated": "2024-03-16T18:14:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-15T01:00:31Z"
+        "generated": "2024-03-17T02:02:08Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6bc5b30fb9..2d13a6a0be 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2425,13 +2425,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.158-1.fc39.noarch",
+      "evra": "2:9.1.181-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.158-1.fc39.s390x",
+      "evra": "2:9.1.181-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-15T00:00:00Z",
+    "generated": "2024-03-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-10T17:39:46Z"
+        "generated": "2024-03-16T18:14:21Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-15T01:00:40Z"
+        "generated": "2024-03-17T02:02:16Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4c3d048f65..b565816f9b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2539,13 +2539,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.158-1.fc39.noarch",
+      "evra": "2:9.1.181-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.158-1.fc39.x86_64",
+      "evra": "2:9.1.181-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-15T00:00:00Z",
+    "generated": "2024-03-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-11T18:18:22Z"
+        "generated": "2024-03-16T18:15:34Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-15T01:00:48Z"
+        "generated": "2024-03-17T02:02:25Z"
       }
     }
   }

From 70a979f18935a8e0dba079f3b4e0001920abbb9a Mon Sep 17 00:00:00 2001
From: gursewak1997 <gursmangat@gmail.com>
Date: Mon, 18 Mar 2024 09:56:09 -0700
Subject: [PATCH 2067/2157] denylist: extend snooze for var-mount.scsi-id

This test is still failing. Let's extend the snooze while we
continue to investigate coreos/fedora-coreos-tracker#1670
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 371b91e271..9588eab43c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -13,7 +13,7 @@
     - azure
 - pattern: ext.config.var-mount.scsi-id
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
-  snooze: 2024-03-18
+  snooze: 2024-04-01
   warn: true
   streams:
     - rawhide

From 80889723bf69df90d02447aaff27b9479b44b607 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Mon, 18 Mar 2024 16:17:33 -0400
Subject: [PATCH 2068/2157] denylist: snooze ext.config.var-mount.scsi-id on
 next & next-devel

Let's also snooze `ext.config.var-mount.scsi-id` on next & next-devel
since it's been failing on F40.
Ref: https://github.com/coreos/fedora-coreos-config/pull/2901
---
 kola-denylist.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 9588eab43c..58d92dae6c 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -18,3 +18,5 @@
   streams:
     - rawhide
     - branched
+    - next
+    - next-devel

From ff0ec83e17f97b1d69a20bf7dd870a91dd8afb27 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 19 Mar 2024 04:52:03 +0000
Subject: [PATCH 2069/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1052/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 07b7948a9a..0b8be344ea 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1087,13 +1087,13 @@
       }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.aarch64",
+      "evra": "1.6.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.aarch64",
+      "evra": "1.6.3-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
@@ -1435,7 +1435,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc3.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1897,7 +1897,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc3.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-17T00:00:00Z",
+    "generated": "2024-03-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-16T18:15:25Z"
+        "generated": "2024-03-18T18:57:54Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-17T02:01:59Z"
+        "generated": "2024-03-19T01:04:54Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 322a56b1dd..d010c6fc6f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1063,13 +1063,13 @@
       }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.ppc64le",
+      "evra": "1.6.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.ppc64le",
+      "evra": "1.6.3-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "keyutils"
       }
@@ -1411,7 +1411,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc3.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1879,7 +1879,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc3.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-17T00:00:00Z",
+    "generated": "2024-03-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-16T18:14:35Z"
+        "generated": "2024-03-18T18:57:07Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-17T02:02:08Z"
+        "generated": "2024-03-19T01:05:03Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 2d13a6a0be..3143a2a17c 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1003,13 +1003,13 @@
       }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.s390x",
+      "evra": "1.6.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.s390x",
+      "evra": "1.6.3-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "keyutils"
       }
@@ -1351,7 +1351,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc3.fc39.s390x",
+      "evra": "1:2.6.4-0.rc5.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1807,7 +1807,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc3.fc39.s390x",
+      "evra": "1:2.6.4-0.rc5.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-17T00:00:00Z",
+    "generated": "2024-03-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-16T18:14:21Z"
+        "generated": "2024-03-18T18:56:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-17T02:02:16Z"
+        "generated": "2024-03-19T01:05:11Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index b565816f9b..3926a1feae 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1099,13 +1099,13 @@
       }
     },
     "keyutils": {
-      "evra": "1.6.1-7.fc39.x86_64",
+      "evra": "1.6.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.1-7.fc39.x86_64",
+      "evra": "1.6.3-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
@@ -1447,7 +1447,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc3.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1915,7 +1915,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc3.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-17T00:00:00Z",
+    "generated": "2024-03-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-16T18:15:34Z"
+        "generated": "2024-03-18T18:57:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-17T02:02:25Z"
+        "generated": "2024-03-19T01:05:20Z"
       }
     }
   }

From 5ec7272869c3aed246c5280592420f0e93818cf2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 8 Mar 2024 16:01:17 +0000
Subject: [PATCH 2070/2157] overrides: fast-track ignition-2.18.0-1.fc39

---
 manifest-lock.overrides.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..2719b8432e 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,9 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  ignition:
+    evr: 2.18.0-1.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a7740a9d1
+      type: fast-track

From ec73d41ca494c95c8392241e60a85f766959d797 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 20 Mar 2024 13:58:28 -0400
Subject: [PATCH 2071/2157] manifests: remove ostree-bls.yaml

`bootloader-naming-2` was turned on by default in ostree v2024.5 [1]
so keeping it here isn't necessary any longer.

[1] https://github.com/ostreedev/ostree/releases/tag/v2024.5
---
 manifests/fedora-coreos.yaml |  3 ---
 manifests/ostree-bls.yaml    | 10 ----------
 2 files changed, 13 deletions(-)
 delete mode 100644 manifests/ostree-bls.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 92e8eaf578..a7dd32e03d 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -20,9 +20,6 @@ conditional-include:
   - if: basearch != "s390x"
     # And remove some cruft from grub2
     include: grub2-removals.yaml
-  - if:
-      - releasever >= 40
-    include: ostree-bls.yaml
   - if: releasever == 39
     # passwd RPM was obsoleted by shadow-utils in F40+, but we need to keep
     # including it in F39. Remove this when we are on F40+ on all streams.
diff --git a/manifests/ostree-bls.yaml b/manifests/ostree-bls.yaml
deleted file mode 100644
index 5d99cf7316..0000000000
--- a/manifests/ostree-bls.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-# Enable fixed OSTree grub2 naming
-# https://github.com/ostreedev/ostree/pull/3007
-postprocess:
-  - |
-    #!/usr/bin/env bash
-    mkdir -p /usr/lib/systemd/system/ostree-finalize-staged.service.d
-    cat <<'EOF' > /usr/lib/systemd/system/ostree-finalize-staged.service.d/ostree-bls-naming.conf
-    [Service]
-    Environment=OSTREE_SYSROOT_OPTS=bootloader-naming-2
-    EOF

From 2ceb9e2c245f7f0d31f4a42067d598675d5eafa2 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 20 Mar 2024 23:43:37 +0000
Subject: [PATCH 2072/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1058/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0b8be344ea..ffad476d0e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -895,7 +895,7 @@
       }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.aarch64",
+      "evra": "2.18.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ignition"
       }
@@ -1279,7 +1279,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-6.fc39.aarch64",
+      "evra": "13.2.1-7.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1615,7 +1615,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-6.fc39.aarch64",
+      "evra": "13.2.1-7.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-19T00:00:00Z",
+    "generated": "2024-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-18T18:57:54Z"
+        "generated": "2024-03-20T16:39:01Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-19T01:04:54Z"
+        "generated": "2024-03-20T01:52:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d010c6fc6f..5acd92690f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -871,7 +871,7 @@
       }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.ppc64le",
+      "evra": "2.18.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ignition"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-6.fc39.ppc64le",
+      "evra": "13.2.1-7.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1603,7 +1603,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-6.fc39.ppc64le",
+      "evra": "13.2.1-7.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-19T00:00:00Z",
+    "generated": "2024-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-18T18:57:07Z"
+        "generated": "2024-03-20T16:38:12Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-19T01:05:03Z"
+        "generated": "2024-03-20T01:52:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 3143a2a17c..38890f22a2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -817,7 +817,7 @@
       }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.s390x",
+      "evra": "2.18.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ignition"
       }
@@ -1195,7 +1195,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-6.fc39.s390x",
+      "evra": "13.2.1-7.fc39.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1531,7 +1531,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-6.fc39.s390x",
+      "evra": "13.2.1-7.fc39.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-19T00:00:00Z",
+    "generated": "2024-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-18T18:56:51Z"
+        "generated": "2024-03-20T16:38:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-19T01:05:11Z"
+        "generated": "2024-03-20T01:52:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3926a1feae..606c4cf0f5 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -907,7 +907,7 @@
       }
     },
     "ignition": {
-      "evra": "2.17.0-1.fc39.x86_64",
+      "evra": "2.18.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ignition"
       }
@@ -1291,7 +1291,7 @@
       }
     },
     "libgcc": {
-      "evra": "13.2.1-6.fc39.x86_64",
+      "evra": "13.2.1-7.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1627,7 +1627,7 @@
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-6.fc39.x86_64",
+      "evra": "13.2.1-7.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-19T00:00:00Z",
+    "generated": "2024-03-20T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-18T18:57:53Z"
+        "generated": "2024-03-20T16:41:49Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-19T01:05:20Z"
+        "generated": "2024-03-20T01:52:34Z"
       }
     }
   }

From 88e72b4af8ed8379430630c446ff2425caca23b6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 22 Mar 2024 16:22:27 +0000
Subject: [PATCH 2073/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1063/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ffad476d0e..07cbf1131a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1651,7 +1651,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.rc2.fc39.aarch64",
+      "evra": "1.3.4-1.rc3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -2173,7 +2173,7 @@
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.aarch64",
+      "evra": "1.2.6-4.rc3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
@@ -2299,7 +2299,7 @@
       }
     },
     "shim-aa64": {
-      "evra": "15.6-2.aarch64",
+      "evra": "15.8-3.aarch64",
       "metadata": {
         "sourcerpm": "shim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-20T00:00:00Z",
+    "generated": "2024-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-20T16:39:01Z"
+        "generated": "2024-03-22T06:28:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-20T01:52:09Z"
+        "generated": "2024-03-22T01:10:09Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5acd92690f..493a054734 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1639,7 +1639,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.rc2.fc39.ppc64le",
+      "evra": "1.3.4-1.rc3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -2173,7 +2173,7 @@
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.ppc64le",
+      "evra": "1.2.6-4.rc3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-20T00:00:00Z",
+    "generated": "2024-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-20T16:38:12Z"
+        "generated": "2024-03-22T06:27:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-20T01:52:17Z"
+        "generated": "2024-03-22T01:10:18Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 38890f22a2..990c070737 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1567,7 +1567,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.rc2.fc39.s390x",
+      "evra": "1.3.4-1.rc3.fc39.s390x",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -2071,7 +2071,7 @@
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.s390x",
+      "evra": "1.2.6-4.rc3.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-20T00:00:00Z",
+    "generated": "2024-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-20T16:38:05Z"
+        "generated": "2024-03-22T06:27:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-20T01:52:25Z"
+        "generated": "2024-03-22T01:10:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 606c4cf0f5..66d6aa041c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1663,7 +1663,7 @@
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-0.rc2.fc39.x86_64",
+      "evra": "1.3.4-1.rc3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
@@ -2185,7 +2185,7 @@
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc2.fc39.1.x86_64",
+      "evra": "1.2.6-4.rc3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
@@ -2311,7 +2311,7 @@
       }
     },
     "shim-x64": {
-      "evra": "15.6-2.x86_64",
+      "evra": "15.8-3.x86_64",
       "metadata": {
         "sourcerpm": "shim"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-20T00:00:00Z",
+    "generated": "2024-03-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-20T16:41:49Z"
+        "generated": "2024-03-22T06:28:31Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-20T01:52:34Z"
+        "generated": "2024-03-22T01:10:35Z"
       }
     }
   }

From 726caac419b232906db42a2255879fe83dc74b0a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 22 Mar 2024 06:05:52 +0000
Subject: [PATCH 2074/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 2719b8432e..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,9 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  ignition:
-    evr: 2.18.0-1.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a7740a9d1
-      type: fast-track
+packages: {}

From 905084260508a354c2a77653b1f7278b56fde237 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 24 Mar 2024 23:43:43 +0000
Subject: [PATCH 2075/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1068/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 07cbf1131a..ca0c8f48ab 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -829,7 +829,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.3-1.fc39.aarch64",
+      "evra": "3.8.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-22T00:00:00Z",
+    "generated": "2024-03-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-22T06:28:28Z"
+        "generated": "2024-03-23T23:36:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-22T01:10:09Z"
+        "generated": "2024-03-24T01:01:03Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 493a054734..5fc9726dc7 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -805,7 +805,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.3-1.fc39.ppc64le",
+      "evra": "3.8.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-22T00:00:00Z",
+    "generated": "2024-03-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-22T06:27:29Z"
+        "generated": "2024-03-23T23:35:10Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-22T01:10:18Z"
+        "generated": "2024-03-24T01:01:11Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 990c070737..1d79f2f81e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -781,7 +781,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.3-1.fc39.s390x",
+      "evra": "3.8.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-22T00:00:00Z",
+    "generated": "2024-03-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-22T06:27:14Z"
+        "generated": "2024-03-23T23:34:55Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-22T01:10:27Z"
+        "generated": "2024-03-24T01:01:20Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 66d6aa041c..957561421f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -829,7 +829,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.3-1.fc39.x86_64",
+      "evra": "3.8.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-22T00:00:00Z",
+    "generated": "2024-03-24T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-22T06:28:31Z"
+        "generated": "2024-03-23T23:36:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-22T01:10:35Z"
+        "generated": "2024-03-24T01:01:28Z"
       }
     }
   }

From de6428283c56f6669376af6406af0bfcfa2855f4 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 21 Mar 2024 16:40:36 -0400
Subject: [PATCH 2076/2157] Add `dnf5` on Fedora 41+

As per https://github.com/coreos/fedora-coreos-tracker/issues/1687,
we will for now add `dnf5` to the rawhide stream to test it out and
re-evaluate at branching.

It's not the default yet in f41, so doesn't own the `dnf` executable
name. Manually add a symlink to make playing with it more natural.
---
 manifests/exclude-dnf.yaml   |  3 +++
 manifests/fedora-coreos.yaml |  8 +++++++-
 manifests/include-dnf.yaml   | 13 +++++++++++++
 3 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 manifests/exclude-dnf.yaml
 create mode 100644 manifests/include-dnf.yaml

diff --git a/manifests/exclude-dnf.yaml b/manifests/exclude-dnf.yaml
new file mode 100644
index 0000000000..dc51914b9f
--- /dev/null
+++ b/manifests/exclude-dnf.yaml
@@ -0,0 +1,3 @@
+exclude-packages:
+  - dnf
+  - dnf5
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index a7dd32e03d..ada7419b8a 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -36,6 +36,13 @@ conditional-include:
   - if: releasever >= 41
     # Include makedumpfile subpackage from kexec-tools (new in F41+)
     include: makedumpfile.yaml
+  # On <41, we want to keep making sure dnf doesn't slip in somehow
+  # On 41+, we do want it
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1687
+  - if: releasever < 41
+    include: exclude-dnf.yaml
+  - if: releasever >= 41
+    include: include-dnf.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -163,7 +170,6 @@ exclude-packages:
   - perl
   - perl-interpreter
   - nodejs
-  - dnf
   - grubby
   - cowsay  # Just in case
   # Let's make sure initscripts doesn't get pulled back in
diff --git a/manifests/include-dnf.yaml b/manifests/include-dnf.yaml
new file mode 100644
index 0000000000..f98d98aa73
--- /dev/null
+++ b/manifests/include-dnf.yaml
@@ -0,0 +1,13 @@
+packages:
+  - dnf5
+
+# until dnf5 becomes the default, manually symlink dnf to it
+postprocess:
+  - |
+    #!/usr/bin/bash
+    set -euo pipefail
+    if command -v dnf; then
+      echo 'dnf5 is now the default, remove this postprocess script!' >&2
+      exit 1
+    fi
+    ln -s dnf5 /usr/bin/dnf

From b6e02c43728642ab69dc674f0ce6c9709d436119 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 27 Mar 2024 23:30:03 +0000
Subject: [PATCH 2077/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1074/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ca0c8f48ab..4ffc7aa3e4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.9-200.fc39.aarch64",
+      "evra": "6.7.10-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.9-200.fc39.aarch64",
+      "evra": "6.7.10-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.9-200.fc39.aarch64",
+      "evra": "6.7.10-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.9-200.fc39.aarch64",
+      "evra": "6.7.10-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1909,7 +1909,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.21-2.fc39.aarch64",
+      "evra": "2.2.26-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-24T00:00:00Z",
+    "generated": "2024-03-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-23T23:36:22Z"
+        "generated": "2024-03-27T17:00:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-24T01:01:03Z"
+        "generated": "2024-03-27T01:17:40Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5fc9726dc7..5e0d7ecc54 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.9-200.fc39.ppc64le",
+      "evra": "6.7.10-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.9-200.fc39.ppc64le",
+      "evra": "6.7.10-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.9-200.fc39.ppc64le",
+      "evra": "6.7.10-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.9-200.fc39.ppc64le",
+      "evra": "6.7.10-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1891,7 +1891,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.21-2.fc39.ppc64le",
+      "evra": "2.2.26-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-24T00:00:00Z",
+    "generated": "2024-03-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-23T23:35:10Z"
+        "generated": "2024-03-27T16:59:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-24T01:01:11Z"
+        "generated": "2024-03-27T01:17:49Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1d79f2f81e..6d0f40d0b7 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.9-200.fc39.s390x",
+      "evra": "6.7.10-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.9-200.fc39.s390x",
+      "evra": "6.7.10-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.9-200.fc39.s390x",
+      "evra": "6.7.10-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.9-200.fc39.s390x",
+      "evra": "6.7.10-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1819,7 +1819,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.21-2.fc39.s390x",
+      "evra": "2.2.26-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-24T00:00:00Z",
+    "generated": "2024-03-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-23T23:34:55Z"
+        "generated": "2024-03-27T16:59:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-24T01:01:20Z"
+        "generated": "2024-03-27T01:17:57Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 957561421f..617a5241b8 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.9-200.fc39.x86_64",
+      "evra": "6.7.10-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.9-200.fc39.x86_64",
+      "evra": "6.7.10-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.9-200.fc39.x86_64",
+      "evra": "6.7.10-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.9-200.fc39.x86_64",
+      "evra": "6.7.10-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1927,7 +1927,7 @@
       }
     },
     "nmstate": {
-      "evra": "2.2.21-2.fc39.x86_64",
+      "evra": "2.2.26-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-24T00:00:00Z",
+    "generated": "2024-03-27T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-23T23:36:17Z"
+        "generated": "2024-03-27T17:00:40Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-24T01:01:28Z"
+        "generated": "2024-03-27T01:18:05Z"
       }
     }
   }

From 2d513e5e5cd8ed95c19b17eb6c74b6df0ae0e5a1 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 28 Mar 2024 09:31:42 -0400
Subject: [PATCH 2078/2157] denylist: only warn if `coreos.boot-mirror` tests
 fail on ppc64le

These tests have been flaky on ppc64le for a while. Let's just mark them
as warn-only until we can actually look more into what's going on there.
---
 kola-denylist.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 58d92dae6c..dd3782f025 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -20,3 +20,6 @@
     - branched
     - next
     - next-devel
+- pattern: coreos.boot-mirror*
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1659
+  warn: true

From 50a46b2fe082ff4c4ece3a494d241add5fca182c Mon Sep 17 00:00:00 2001
From: HuijingHei <hhei@redhat.com>
Date: Thu, 28 Mar 2024 15:15:15 +0800
Subject: [PATCH 2079/2157] tests: check default dropins file permissions

Add check in existing case, xerf to https://github.com/coreos/ignition/issues/1833
---
 tests/kola/ignition/delete-config/test.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tests/kola/ignition/delete-config/test.sh b/tests/kola/ignition/delete-config/test.sh
index 0cd4c1de2b..46b3b29e4a 100755
--- a/tests/kola/ignition/delete-config/test.sh
+++ b/tests/kola/ignition/delete-config/test.sh
@@ -29,6 +29,10 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
 "")
     # Ignition boot
 
+    # https://github.com/coreos/ignition/issues/1833
+    if [ $(stat --format="%a" /etc/systemd/system/ignition-delete-config.service.d/50-kola.conf) != "644" ]; then
+        fatal "dropin file permission should be 644"
+    fi
     if [ ! -e /run/ignition-rmcfg-ran ]; then
         fatal "mocked ignition-rmcfg did not run on first boot"
     fi

From e8f616b1da4bd4171b1bbe69cc4dc063387e9cc4 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 28 Mar 2024 23:33:35 +0000
Subject: [PATCH 2080/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1077/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4ffc7aa3e4..73c32940c8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7.1-1.fc39.aarch64",
+      "evra": "6.8-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-27T00:00:00Z",
+    "generated": "2024-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-27T17:00:39Z"
+        "generated": "2024-03-28T18:25:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-27T01:17:40Z"
+        "generated": "2024-03-28T01:17:33Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5e0d7ecc54..51c28593ff 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -193,7 +193,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7.1-1.fc39.ppc64le",
+      "evra": "6.8-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-27T00:00:00Z",
+    "generated": "2024-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-27T16:59:22Z"
+        "generated": "2024-03-28T18:24:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-27T01:17:49Z"
+        "generated": "2024-03-28T01:17:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6d0f40d0b7..986eddcf62 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7.1-1.fc39.s390x",
+      "evra": "6.8-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-27T00:00:00Z",
+    "generated": "2024-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-27T16:59:03Z"
+        "generated": "2024-03-28T18:23:57Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-27T01:17:57Z"
+        "generated": "2024-03-28T01:17:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 617a5241b8..2ace4d8738 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.7.1-1.fc39.x86_64",
+      "evra": "6.8-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-27T00:00:00Z",
+    "generated": "2024-03-28T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-27T17:00:40Z"
+        "generated": "2024-03-28T18:25:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-27T01:18:05Z"
+        "generated": "2024-03-28T01:17:59Z"
       }
     }
   }

From 965d6db1cbfa3d934aa3392656d4d442b10b839d Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Fri, 29 Mar 2024 13:52:42 -0400
Subject: [PATCH 2081/2157] Kdump currently fails on kernel-next, for ppc64le

This is a known upstream bug
See coreos/fedora-coreos-tracker#1698
Also see upstream bug : https://bugzilla.redhat.com/show_bug.cgi?id=2269991
---
 kola-denylist.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index dd3782f025..b1e07272ec 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,3 +23,9 @@
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1659
   warn: true
+- pattern: ext.config.kdump.crash
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1698
+  snooze: 2024-04-07
+  warn: true
+  streams:
+    - rawhide

From 54e74018ebe32a709299e10818a9a16c58524c0d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 29 Mar 2024 23:38:15 +0000
Subject: [PATCH 2082/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1080/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 73c32940c8..a94583e3e3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -247,25 +247,25 @@
       }
     },
     "clevis": {
-      "evra": "19-4.fc39.aarch64",
+      "evra": "20-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.aarch64",
+      "evra": "20-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.aarch64",
+      "evra": "20-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.aarch64",
+      "evra": "20-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
@@ -793,25 +793,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-16.fc39.aarch64",
+      "evra": "2.38-17.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-16.fc39.aarch64",
+      "evra": "2.38-17.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-16.fc39.aarch64",
+      "evra": "2.38-17.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-16.fc39.aarch64",
+      "evra": "2.38-17.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-28T00:00:00Z",
+    "generated": "2024-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-28T18:25:15Z"
+        "generated": "2024-03-29T16:32:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-28T01:17:33Z"
+        "generated": "2024-03-29T00:59:24Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 51c28593ff..50bc188368 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -253,25 +253,25 @@
       }
     },
     "clevis": {
-      "evra": "19-4.fc39.ppc64le",
+      "evra": "20-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.ppc64le",
+      "evra": "20-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.ppc64le",
+      "evra": "20-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.ppc64le",
+      "evra": "20-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
@@ -769,25 +769,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-16.fc39.ppc64le",
+      "evra": "2.38-17.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-16.fc39.ppc64le",
+      "evra": "2.38-17.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-16.fc39.ppc64le",
+      "evra": "2.38-17.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-16.fc39.ppc64le",
+      "evra": "2.38-17.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-28T00:00:00Z",
+    "generated": "2024-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-28T18:24:20Z"
+        "generated": "2024-03-29T16:31:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-28T01:17:42Z"
+        "generated": "2024-03-29T00:59:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 986eddcf62..61e622cb2a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -247,25 +247,25 @@
       }
     },
     "clevis": {
-      "evra": "19-4.fc39.s390x",
+      "evra": "20-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.s390x",
+      "evra": "20-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.s390x",
+      "evra": "20-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.s390x",
+      "evra": "20-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
@@ -745,25 +745,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-16.fc39.s390x",
+      "evra": "2.38-17.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-16.fc39.s390x",
+      "evra": "2.38-17.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-16.fc39.s390x",
+      "evra": "2.38-17.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-16.fc39.s390x",
+      "evra": "2.38-17.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-28T00:00:00Z",
+    "generated": "2024-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-28T18:23:57Z"
+        "generated": "2024-03-29T16:30:56Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-28T01:17:50Z"
+        "generated": "2024-03-29T00:59:41Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2ace4d8738..2544fa7d74 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -247,25 +247,25 @@
       }
     },
     "clevis": {
-      "evra": "19-4.fc39.x86_64",
+      "evra": "20-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "19-4.fc39.x86_64",
+      "evra": "20-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "19-4.fc39.x86_64",
+      "evra": "20-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-systemd": {
-      "evra": "19-4.fc39.x86_64",
+      "evra": "20-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
@@ -793,25 +793,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-16.fc39.x86_64",
+      "evra": "2.38-17.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-16.fc39.x86_64",
+      "evra": "2.38-17.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-16.fc39.x86_64",
+      "evra": "2.38-17.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-16.fc39.x86_64",
+      "evra": "2.38-17.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-28T00:00:00Z",
+    "generated": "2024-03-29T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-28T18:25:22Z"
+        "generated": "2024-03-29T16:32:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-28T01:17:59Z"
+        "generated": "2024-03-29T00:59:49Z"
       }
     }
   }

From 7740b9cf5042c2e1dd20131f087f52395a706502 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 30 Mar 2024 23:31:33 +0000
Subject: [PATCH 2083/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1082/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index a94583e3e3..c787e988ec 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1999,13 +1999,13 @@
       }
     },
     "ostree": {
-      "evra": "2024.4-1.fc39.aarch64",
+      "evra": "2024.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.4-1.fc39.aarch64",
+      "evra": "2024.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-29T00:00:00Z",
+    "generated": "2024-03-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-29T16:32:29Z"
+        "generated": "2024-03-30T17:41:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-29T00:59:24Z"
+        "generated": "2024-03-30T00:56:44Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 50bc188368..2e0ef5760b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1981,19 +1981,19 @@
       }
     },
     "ostree": {
-      "evra": "2024.4-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-grub2": {
-      "evra": "2024.4-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.4-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-29T00:00:00Z",
+    "generated": "2024-03-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-29T16:31:15Z"
+        "generated": "2024-03-30T17:39:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-29T00:59:33Z"
+        "generated": "2024-03-30T00:56:53Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 61e622cb2a..a017a198de 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1897,13 +1897,13 @@
       }
     },
     "ostree": {
-      "evra": "2024.4-1.fc39.s390x",
+      "evra": "2024.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.4-1.fc39.s390x",
+      "evra": "2024.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-29T00:00:00Z",
+    "generated": "2024-03-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-29T16:30:56Z"
+        "generated": "2024-03-30T17:39:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-29T00:59:41Z"
+        "generated": "2024-03-30T00:57:01Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 2544fa7d74..185782aa7c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2017,13 +2017,13 @@
       }
     },
     "ostree": {
-      "evra": "2024.4-1.fc39.x86_64",
+      "evra": "2024.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.4-1.fc39.x86_64",
+      "evra": "2024.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-29T00:00:00Z",
+    "generated": "2024-03-30T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-29T16:32:30Z"
+        "generated": "2024-03-30T17:41:07Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-29T00:59:49Z"
+        "generated": "2024-03-30T00:57:10Z"
       }
     }
   }

From 8c0cb522a9a9beb49e64d54e9c2b363252229278 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 1 Apr 2024 10:47:09 -0600
Subject: [PATCH 2084/2157] denylist: extend snooze for two tests

The snooze expired on `coreos.ignition.ssh.key` and
`ext.config.var-mount.scsi-id`, but the tests are still failing.
Let's extend the snoozes while we continue to investigate.
---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index b1e07272ec..a6b6934fcb 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,13 +7,13 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-03-29
+  snooze: 2024-04-15
   warn: true
   platforms:
     - azure
 - pattern: ext.config.var-mount.scsi-id
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
-  snooze: 2024-04-01
+  snooze: 2024-04-15
   warn: true
   streams:
     - rawhide

From 0045a5f9a985c9e8e4966293e99d0559def513c7 Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 1 Apr 2024 10:49:24 -0600
Subject: [PATCH 2085/2157] denylist: only denylist `coreos.boot-mirror*` on
 ppc64le

This test is only failing on ppc64le so update the denylist
entry to skip the test only on that arch.
---
 kola-denylist.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a6b6934fcb..bf2eb769f1 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -23,6 +23,8 @@
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1659
   warn: true
+  arches:
+    - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1698
   snooze: 2024-04-07

From 8ed487d7d3395585e361b70902b496fcd05d79a5 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 1 Apr 2024 22:00:04 +0000
Subject: [PATCH 2086/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1086/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c787e988ec..5d6e2f7452 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -2191,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.3-3.fc39.aarch64",
+      "evra": "2024.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.3-3.fc39.aarch64",
+      "evra": "2024.4-3.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2305,7 +2305,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.2-1.fc39.aarch64",
+      "evra": "1:1.15.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-30T00:00:00Z",
+    "generated": "2024-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-30T17:41:05Z"
+        "generated": "2024-04-01T02:18:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-30T00:56:44Z"
+        "generated": "2024-04-01T00:37:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2e0ef5760b..c3ceb7b19c 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -2191,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.3-3.fc39.ppc64le",
+      "evra": "2024.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.3-3.fc39.ppc64le",
+      "evra": "2024.4-3.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2305,7 +2305,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.2-1.fc39.ppc64le",
+      "evra": "1:1.15.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-30T00:00:00Z",
+    "generated": "2024-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-30T17:39:53Z"
+        "generated": "2024-04-01T02:17:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-30T00:56:53Z"
+        "generated": "2024-04-01T00:37:52Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a017a198de..4c838fd6fd 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2089,13 +2089,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.3-3.fc39.s390x",
+      "evra": "2024.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.3-3.fc39.s390x",
+      "evra": "2024.4-3.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.2-1.fc39.s390x",
+      "evra": "1:1.15.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-30T00:00:00Z",
+    "generated": "2024-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-30T17:39:33Z"
+        "generated": "2024-04-01T02:17:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-30T00:57:01Z"
+        "generated": "2024-04-01T00:38:00Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 185782aa7c..214a569cf0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -2203,13 +2203,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.3-3.fc39.x86_64",
+      "evra": "2024.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.3-3.fc39.x86_64",
+      "evra": "2024.4-3.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2317,7 +2317,7 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.14.2-1.fc39.x86_64",
+      "evra": "1:1.15.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-03-30T00:00:00Z",
+    "generated": "2024-04-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-03-30T17:41:07Z"
+        "generated": "2024-04-01T02:18:33Z"
       },
       "fedora-updates": {
-        "generated": "2024-03-30T00:57:10Z"
+        "generated": "2024-04-01T00:38:09Z"
       }
     }
   }

From e656b31ddca883f73c2359c73790562840059732 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 2 Apr 2024 23:32:01 +0000
Subject: [PATCH 2087/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1089/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 5d6e2f7452..16d79fc196 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.10-200.fc39.aarch64",
+      "evra": "6.7.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.10-200.fc39.aarch64",
+      "evra": "6.7.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.10-200.fc39.aarch64",
+      "evra": "6.7.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.10-200.fc39.aarch64",
+      "evra": "6.7.11-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1735,7 +1735,7 @@
       }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.aarch64",
+      "evra": "1.5.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2611,23 +2611,23 @@
       }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.aarch64",
+      "evra": "1.5.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "zstd"
       }
     }
   },
   "metadata": {
-    "generated": "2024-04-01T00:00:00Z",
+    "generated": "2024-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T02:18:39Z"
+        "generated": "2024-04-01T22:27:02Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-01T00:37:43Z"
+        "generated": "2024-04-02T01:11:10Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c3ceb7b19c..8f366a8d2e 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.10-200.fc39.ppc64le",
+      "evra": "6.7.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.10-200.fc39.ppc64le",
+      "evra": "6.7.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.10-200.fc39.ppc64le",
+      "evra": "6.7.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.10-200.fc39.ppc64le",
+      "evra": "6.7.11-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1723,7 +1723,7 @@
       }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.ppc64le",
+      "evra": "1.5.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2599,23 +2599,23 @@
       }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.ppc64le",
+      "evra": "1.5.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "zstd"
       }
     }
   },
   "metadata": {
-    "generated": "2024-04-01T00:00:00Z",
+    "generated": "2024-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T02:17:30Z"
+        "generated": "2024-04-01T22:25:37Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-01T00:37:52Z"
+        "generated": "2024-04-02T01:11:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4c838fd6fd..4b3690560a 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.10-200.fc39.s390x",
+      "evra": "6.7.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.10-200.fc39.s390x",
+      "evra": "6.7.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.10-200.fc39.s390x",
+      "evra": "6.7.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.10-200.fc39.s390x",
+      "evra": "6.7.11-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1651,7 +1651,7 @@
       }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.s390x",
+      "evra": "1.5.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2503,23 +2503,23 @@
       }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.s390x",
+      "evra": "1.5.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "zstd"
       }
     }
   },
   "metadata": {
-    "generated": "2024-04-01T00:00:00Z",
+    "generated": "2024-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T02:17:11Z"
+        "generated": "2024-04-01T22:25:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-01T00:38:00Z"
+        "generated": "2024-04-02T01:11:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 214a569cf0..286648fe87 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.10-200.fc39.x86_64",
+      "evra": "6.7.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.10-200.fc39.x86_64",
+      "evra": "6.7.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.10-200.fc39.x86_64",
+      "evra": "6.7.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.10-200.fc39.x86_64",
+      "evra": "6.7.11-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1747,7 +1747,7 @@
       }
     },
     "libzstd": {
-      "evra": "1.5.5-4.fc39.x86_64",
+      "evra": "1.5.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2623,23 +2623,23 @@
       }
     },
     "zstd": {
-      "evra": "1.5.5-4.fc39.x86_64",
+      "evra": "1.5.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "zstd"
       }
     }
   },
   "metadata": {
-    "generated": "2024-04-01T00:00:00Z",
+    "generated": "2024-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T02:18:33Z"
+        "generated": "2024-04-01T22:26:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-01T00:38:09Z"
+        "generated": "2024-04-02T01:11:36Z"
       }
     }
   }

From 959aa5c75ff41b4df7290cde86c4bfb853204729 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 3 Apr 2024 19:11:24 +0200
Subject: [PATCH 2088/2157] manifests: Add back more wireless card firmwares

Temporarily add back more wireless card firmwares until we announce
their removal and add a CLHM module to warn users about it.

See: https://github.com/coreos/fedora-coreos-tracker/issues/1575
---
 manifests/fedora-coreos-base.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 57fe09ac96..042cac741d 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -161,7 +161,7 @@ packages:
   # GPU Firmware files (not broken out into subpackage of linux-firmware in RHEL yet)
   - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
   # Wifi/BT firmware files https://github.com/coreos/fedora-coreos-tracker/issues/1575
-  - atheros-firmware brcmfmac-firmware mt7xxx-firmware realtek-firmware
+  - atheros-firmware brcmfmac-firmware mt7xxx-firmware realtek-firmware nxpwireless-firmware tiwilink-firmware
 
 
 # - irqbalance

From 57e37351c882240a747d4a347957d40cd0d1a22e Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 3 Apr 2024 23:29:39 +0000
Subject: [PATCH 2089/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1092/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 16 ++++++++--------
 manifest-lock.ppc64le.json | 16 ++++++++--------
 manifest-lock.s390x.json   | 16 ++++++++--------
 manifest-lock.x86_64.json  | 16 ++++++++--------
 4 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 16d79fc196..c19ab06e07 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -607,7 +607,7 @@
       }
     },
     "expat": {
-      "evra": "2.6.0-1.fc39.aarch64",
+      "evra": "2.6.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1243,7 +1243,7 @@
       }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.aarch64",
+      "evra": "0.5.2-2.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libeconf"
       }
@@ -1513,7 +1513,7 @@
       }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.aarch64",
+      "evra": "1.17.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "librepo"
       }
@@ -2089,13 +2089,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.3-1.fc39.aarch64",
+      "evra": "5:4.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.3-1.fc39.aarch64",
+      "evra": "5:4.9.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-02T00:00:00Z",
+    "generated": "2024-04-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T22:27:02Z"
+        "generated": "2024-04-02T23:40:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-02T01:11:10Z"
+        "generated": "2024-04-03T01:07:25Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 8f366a8d2e..42b43c83c4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -589,7 +589,7 @@
       }
     },
     "expat": {
-      "evra": "2.6.0-1.fc39.ppc64le",
+      "evra": "2.6.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1219,7 +1219,7 @@
       }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.ppc64le",
+      "evra": "0.5.2-2.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libeconf"
       }
@@ -1489,7 +1489,7 @@
       }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.ppc64le",
+      "evra": "1.17.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "librepo"
       }
@@ -2077,13 +2077,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.3-1.fc39.ppc64le",
+      "evra": "5:4.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.3-1.fc39.ppc64le",
+      "evra": "5:4.9.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-02T00:00:00Z",
+    "generated": "2024-04-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T22:25:37Z"
+        "generated": "2024-04-02T23:39:12Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-02T01:11:19Z"
+        "generated": "2024-04-03T01:07:33Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 4b3690560a..0701625ba2 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -583,7 +583,7 @@
       }
     },
     "expat": {
-      "evra": "2.6.0-1.fc39.s390x",
+      "evra": "2.6.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1159,7 +1159,7 @@
       }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.s390x",
+      "evra": "0.5.2-2.fc39.s390x",
       "metadata": {
         "sourcerpm": "libeconf"
       }
@@ -1429,7 +1429,7 @@
       }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.s390x",
+      "evra": "1.17.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "librepo"
       }
@@ -1987,13 +1987,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.3-1.fc39.s390x",
+      "evra": "5:4.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.3-1.fc39.s390x",
+      "evra": "5:4.9.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-02T00:00:00Z",
+    "generated": "2024-04-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T22:25:05Z"
+        "generated": "2024-04-02T23:38:46Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-02T01:11:27Z"
+        "generated": "2024-04-03T01:07:42Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 286648fe87..0f0298f7d9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -607,7 +607,7 @@
       }
     },
     "expat": {
-      "evra": "2.6.0-1.fc39.x86_64",
+      "evra": "2.6.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "expat"
       }
@@ -1255,7 +1255,7 @@
       }
     },
     "libeconf": {
-      "evra": "0.5.2-1.fc39.x86_64",
+      "evra": "0.5.2-2.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libeconf"
       }
@@ -1525,7 +1525,7 @@
       }
     },
     "librepo": {
-      "evra": "1.17.0-1.fc39.x86_64",
+      "evra": "1.17.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "librepo"
       }
@@ -2107,13 +2107,13 @@
       }
     },
     "podman": {
-      "evra": "5:4.9.3-1.fc39.x86_64",
+      "evra": "5:4.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "podman-plugins": {
-      "evra": "5:4.9.3-1.fc39.x86_64",
+      "evra": "5:4.9.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-02T00:00:00Z",
+    "generated": "2024-04-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-01T22:26:29Z"
+        "generated": "2024-04-02T23:40:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-02T01:11:36Z"
+        "generated": "2024-04-03T01:07:50Z"
       }
     }
   }

From 7c7e5394e9d08f4d02e944924282cefabfcfd59c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 5 Apr 2024 23:43:28 +0000
Subject: [PATCH 2090/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1096/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 8 ++++----
 manifest-lock.s390x.json   | 8 ++++----
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c19ab06e07..9f8be96aac 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -721,7 +721,7 @@
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.aarch64",
+      "evra": "3.7.3-9.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-03T00:00:00Z",
+    "generated": "2024-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-02T23:40:22Z"
+        "generated": "2024-04-04T23:19:01Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-03T01:07:25Z"
+        "generated": "2024-04-05T02:27:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 42b43c83c4..cc3579c1e3 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -697,7 +697,7 @@
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.ppc64le",
+      "evra": "3.7.3-9.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-03T00:00:00Z",
+    "generated": "2024-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-02T23:39:12Z"
+        "generated": "2024-04-04T23:17:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-03T01:07:33Z"
+        "generated": "2024-04-05T02:27:54Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 0701625ba2..b416d0659b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -691,7 +691,7 @@
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.s390x",
+      "evra": "3.7.3-9.fc39.s390x",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-03T00:00:00Z",
+    "generated": "2024-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-02T23:38:46Z"
+        "generated": "2024-04-04T23:16:31Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-03T01:07:42Z"
+        "generated": "2024-04-05T02:28:02Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 0f0298f7d9..150a68d6f7 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -721,7 +721,7 @@
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-4.fc39.x86_64",
+      "evra": "3.7.3-9.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-03T00:00:00Z",
+    "generated": "2024-04-05T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-02T23:40:20Z"
+        "generated": "2024-04-04T23:18:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-03T01:07:50Z"
+        "generated": "2024-04-05T02:28:11Z"
       }
     }
   }

From 107e9f5096a487c7a3a512178fbd02880cc9c03d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 6 Apr 2024 23:42:02 +0000
Subject: [PATCH 2091/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1098/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9f8be96aac..12b9d4d6fe 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.11-200.fc39.aarch64",
+      "evra": "6.8.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.11-200.fc39.aarch64",
+      "evra": "6.8.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.11-200.fc39.aarch64",
+      "evra": "6.8.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.11-200.fc39.aarch64",
+      "evra": "6.8.4-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-05T00:00:00Z",
+    "generated": "2024-04-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-04T23:19:01Z"
+        "generated": "2024-04-06T17:42:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-05T02:27:45Z"
+        "generated": "2024-04-06T01:32:46Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index cc3579c1e3..17ca5a9ea1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.11-200.fc39.ppc64le",
+      "evra": "6.8.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.11-200.fc39.ppc64le",
+      "evra": "6.8.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.11-200.fc39.ppc64le",
+      "evra": "6.8.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.11-200.fc39.ppc64le",
+      "evra": "6.8.4-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-05T00:00:00Z",
+    "generated": "2024-04-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-04T23:17:19Z"
+        "generated": "2024-04-06T17:40:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-05T02:27:54Z"
+        "generated": "2024-04-06T01:32:55Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b416d0659b..7198726022 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.11-200.fc39.s390x",
+      "evra": "6.8.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.11-200.fc39.s390x",
+      "evra": "6.8.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.11-200.fc39.s390x",
+      "evra": "6.8.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.11-200.fc39.s390x",
+      "evra": "6.8.4-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-05T00:00:00Z",
+    "generated": "2024-04-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-04T23:16:31Z"
+        "generated": "2024-04-06T17:40:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-05T02:28:02Z"
+        "generated": "2024-04-06T01:33:03Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 150a68d6f7..150756db79 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.7.11-200.fc39.x86_64",
+      "evra": "6.8.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.7.11-200.fc39.x86_64",
+      "evra": "6.8.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.7.11-200.fc39.x86_64",
+      "evra": "6.8.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.7.11-200.fc39.x86_64",
+      "evra": "6.8.4-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-05T00:00:00Z",
+    "generated": "2024-04-06T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-04T23:18:19Z"
+        "generated": "2024-04-06T17:42:09Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-05T02:28:11Z"
+        "generated": "2024-04-06T01:33:12Z"
       }
     }
   }

From 876bdf6b02a15fbea9e4051ade2106e657f0b2e9 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 8 Apr 2024 02:19:12 +0000
Subject: [PATCH 2092/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1100/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 12b9d4d6fe..4e3aeaa80b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -739,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.15-1.fc39.aarch64",
+      "evra": "1.9.16-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1723,7 +1723,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.15-1.fc39.aarch64",
+      "evra": "0.3.17-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-06T00:00:00Z",
+    "generated": "2024-04-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-06T17:42:11Z"
+        "generated": "2024-04-07T17:50:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-06T01:32:46Z"
+        "generated": "2024-04-07T01:16:43Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 17ca5a9ea1..b439e803b8 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -715,7 +715,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.15-1.fc39.ppc64le",
+      "evra": "1.9.16-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.15-1.fc39.ppc64le",
+      "evra": "0.3.17-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-06T00:00:00Z",
+    "generated": "2024-04-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-06T17:40:48Z"
+        "generated": "2024-04-07T17:49:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-06T01:32:55Z"
+        "generated": "2024-04-07T01:16:51Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7198726022..a32be14dbe 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -709,7 +709,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.15-1.fc39.s390x",
+      "evra": "1.9.16-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1639,7 +1639,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.15-1.fc39.s390x",
+      "evra": "0.3.17-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-06T00:00:00Z",
+    "generated": "2024-04-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-06T17:40:25Z"
+        "generated": "2024-04-07T17:49:20Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-06T01:33:03Z"
+        "generated": "2024-04-07T01:16:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 150756db79..c3e4a1f3aa 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -739,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.15-1.fc39.x86_64",
+      "evra": "1.9.16-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1735,7 +1735,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.15-1.fc39.x86_64",
+      "evra": "0.3.17-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-06T00:00:00Z",
+    "generated": "2024-04-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-06T17:42:09Z"
+        "generated": "2024-04-07T17:50:50Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-06T01:33:12Z"
+        "generated": "2024-04-07T01:17:08Z"
       }
     }
   }

From fa2966b1dc283d8ace3069c55518217189448cf4 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Wed, 3 Apr 2024 16:10:07 +0200
Subject: [PATCH 2093/2157] Manifests: move zram to system-configuration

Kubernetes 1.28 now supports swap on zram as beta
Moving the zram-generator package to a manifest shared with rhcos.

See https://github.com/coreos/fedora-coreos-docs/issues/530
---
 manifests/fedora-coreos-base.yaml   | 3 ---
 manifests/system-configuration.yaml | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index 042cac741d..d58d72c4dd 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -150,9 +150,6 @@ packages:
   - console-login-helper-messages-motdgen
   # i18n
   - kbd
-  # zram-generator (but not zram-generator-defaults) for F33 change
-  # https://github.com/coreos/fedora-coreos-tracker/issues/509
-  - zram-generator
   # resolved was broken out to its own package in rawhide/f35
   - systemd-resolved
   # In F35+ need `iptables-legacy` package
diff --git a/manifests/system-configuration.yaml b/manifests/system-configuration.yaml
index dc86093815..0f982b612d 100644
--- a/manifests/system-configuration.yaml
+++ b/manifests/system-configuration.yaml
@@ -43,6 +43,9 @@ packages:
   - ssh-key-dir
   # Allow for configuring different timezones
   - tzdata
+  # zram-generator (but not zram-generator-defaults) for F33 change
+  # https://github.com/coreos/fedora-coreos-tracker/issues/509
+  - zram-generator
 
 postprocess:
   # Mask systemd-repart. Ignition is responsible for partition setup on first

From 2b6b65953c14b9b6fac52edc67ede7385e76c3d7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 9 Apr 2024 13:44:43 +0000
Subject: [PATCH 2094/2157] overrides: fast-track rpm-ostree-2024.4-6.fc39

---
 manifest-lock.overrides.yaml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..477f35d32c 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,16 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  rpm-ostree:
+    evr: 2024.4-6.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-4afd3d38ae
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1705
+      type: fast-track
+  rpm-ostree-libs:
+    evr: 2024.4-6.fc39
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-4afd3d38ae
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1705
+      type: fast-track

From 0ef8f17ec4d336f300193c128934da9ed358e24f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 19 Mar 2024 17:45:52 +0100
Subject: [PATCH 2095/2157] tests: Verify access permissions for shadow &
 gshadow

Merge with the existing passwd & group check and also check backup
files.

See: https://github.com/coreos/rpm-ostree/pull/4911
---
 tests/kola/files/etc-passwd-group-permissions | 17 -------
 tests/kola/files/etc-permissions              | 44 +++++++++++++++++++
 2 files changed, 44 insertions(+), 17 deletions(-)
 delete mode 100755 tests/kola/files/etc-passwd-group-permissions
 create mode 100755 tests/kola/files/etc-permissions

diff --git a/tests/kola/files/etc-passwd-group-permissions b/tests/kola/files/etc-passwd-group-permissions
deleted file mode 100755
index 5eb98363a8..0000000000
--- a/tests/kola/files/etc-passwd-group-permissions
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/bin/bash
-## kola:
-##   exclusive: false
-##   description: Verify /etc/passwd and /etc/group have correct permissions.
-
-set -xeuo pipefail
-
-# shellcheck disable=SC1091
-. "$KOLA_EXT_DATA/commonlib.sh"
-
-for f in '/etc/passwd' '/etc/group'; do
-    if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
-        ls -al "${f}"
-        fatal "found incorrect permissions for ${f}"
-    fi
-done
-ok "correct ownership and mode on /etc/passwd & /etc/group"
diff --git a/tests/kola/files/etc-permissions b/tests/kola/files/etc-permissions
new file mode 100755
index 0000000000..13430b047c
--- /dev/null
+++ b/tests/kola/files/etc-permissions
@@ -0,0 +1,44 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify that /etc/(passwd|group|shadow|gshadow) have correct permissions.
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+incorrect=""
+for f in '/etc/passwd' '/etc/group'; do
+    if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
+        incorrect+=" ${f}"
+    fi
+done
+for f in '/etc/passwd-' '/etc/group-'; do
+    if [[ -f "${f}" ]]; then
+        if [[ $(stat --format="%a %u %g" "${f}") != "644 0 0" ]]; then
+            incorrect+=" ${f}"
+        fi
+    fi
+done
+for f in '/etc/shadow' '/etc/gshadow'; do
+    if [[ $(stat --format="%a %u %g" "${f}") != "0 0 0" ]]; then
+        incorrect+=" ${f}"
+    fi
+done
+for f in '/etc/shadow-' '/etc/gshadow-'; do
+    if [[ -f "${f}" ]]; then
+        if [[ $(stat --format="%a %u %g" "${f}") != "0 0 0" ]]; then
+            incorrect+=" ${f}"
+        fi
+    fi
+done
+
+if [[ -n "${incorrect}" ]]; then
+    # We explicitely want to split on whitespace here
+    # shellcheck disable=SC2086
+    ls -al ${incorrect}
+    fatal "found incorrect permissions for: ${incorrect}"
+fi
+
+ok "correct ownership and mode on /etc/passwd, /etc/group, /etc/shadow and /etc/gshadow"

From 4075bf28dfa44745fd2fe47c433003e148b508ba Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 9 Apr 2024 15:37:44 -0400
Subject: [PATCH 2096/2157] image-base: drop bootfs_metadata_csum_seed entry

This is no longer a supported feature in COSA. See
https://github.com/coreos/coreos-assembler/commit/383349c7791c483d344647f01b116e160cab0f5f
---
 image-base.yaml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/image-base.yaml b/image-base.yaml
index 974433e2d0..cc038b04b8 100644
--- a/image-base.yaml
+++ b/image-base.yaml
@@ -17,15 +17,6 @@ ignition-network-kcmdline: []
 # Optional remote by which to prefix the deployed OSTree ref
 ostree-remote: fedora
 
-# opt in to using the `metadata_csum_seed` feature of the ext4 filesystem
-# for the /boot filesystem. Support for this was only recently added to grub
-# and isn't available everywhere yet so we'll gate it behind this image.yaml
-# knob. It should be easy to know when RHEL/RHCOS supports this by just flipping
-# this to `true` and doing a build. It should error when building the disk
-# images if grub doesn't support it.
-# https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html
-bootfs_metadata_csum_seed: true
-
 vmware-os-type: fedora64Guest
 # VMware hardware versions: https://kb.vmware.com/s/article/1003746
 # We use the newest version allowed by the oldest non-EOL VMware

From b35adec0758c153aa583be30db9a52183e646231 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 Apr 2024 06:06:30 +0000
Subject: [PATCH 2097/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 477f35d32c..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,16 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  rpm-ostree:
-    evr: 2024.4-6.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-4afd3d38ae
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1705
-      type: fast-track
-  rpm-ostree-libs:
-    evr: 2024.4-6.fc39
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-4afd3d38ae
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1705
-      type: fast-track
+packages: {}

From a08194c7a7f6cead70e7aacfdab651a9af578c40 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 Apr 2024 18:51:03 +0000
Subject: [PATCH 2098/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1107/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 68 insertions(+), 68 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4e3aeaa80b..cca5db7a4b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1171,7 +1171,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1183,7 +1183,7 @@
       }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.aarch64",
+      "evra": "0.12.2-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libbsd"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1405,7 +1405,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1687,7 +1687,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2035,13 +2035,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.aarch64",
+      "evra": "0^20240326.g4988e2b-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
+      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2191,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-3.fc39.aarch64",
+      "evra": "2024.4-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-3.fc39.aarch64",
+      "evra": "2024.4-6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2515,25 +2515,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-6.fc39.aarch64",
+      "evra": "2.39.4-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.181-1.fc39.noarch",
+      "evra": "2:9.1.264-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.181-1.fc39.aarch64",
+      "evra": "2:9.1.264-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-07T00:00:00Z",
+    "generated": "2024-04-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-07T17:50:51Z"
+        "generated": "2024-04-09T17:43:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-07T01:16:43Z"
+        "generated": "2024-04-10T03:59:34Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index b439e803b8..5f2e2482a8 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1147,7 +1147,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1159,7 +1159,7 @@
       }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.ppc64le",
+      "evra": "0.12.2-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libbsd"
       }
@@ -1237,7 +1237,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1381,7 +1381,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1555,7 +1555,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2023,13 +2023,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.ppc64le",
+      "evra": "0^20240326.g4988e2b-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
+      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2191,13 +2191,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-3.fc39.ppc64le",
+      "evra": "2024.4-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-3.fc39.ppc64le",
+      "evra": "2024.4-6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2509,25 +2509,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-6.fc39.ppc64le",
+      "evra": "2.39.4-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.181-1.fc39.noarch",
+      "evra": "2:9.1.264-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.181-1.fc39.ppc64le",
+      "evra": "2:9.1.264-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-07T00:00:00Z",
+    "generated": "2024-04-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-07T17:49:39Z"
+        "generated": "2024-04-09T17:42:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-07T01:16:51Z"
+        "generated": "2024-04-10T03:59:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a32be14dbe..7497283b07 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1087,7 +1087,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1099,7 +1099,7 @@
       }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.s390x",
+      "evra": "0.12.2-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libbsd"
       }
@@ -1177,7 +1177,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1321,7 +1321,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1483,7 +1483,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1603,7 +1603,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1933,13 +1933,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.s390x",
+      "evra": "0^20240326.g4988e2b-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
+      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2089,13 +2089,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-3.fc39.s390x",
+      "evra": "2024.4-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-3.fc39.s390x",
+      "evra": "2024.4-6.fc39.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2407,13 +2407,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-6.fc39.s390x",
+      "evra": "2.39.4-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2425,13 +2425,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.181-1.fc39.noarch",
+      "evra": "2:9.1.264-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.181-1.fc39.s390x",
+      "evra": "2:9.1.264-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-07T00:00:00Z",
+    "generated": "2024-04-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-07T17:49:20Z"
+        "generated": "2024-04-09T17:41:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-07T01:16:59Z"
+        "generated": "2024-04-10T03:59:51Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c3e4a1f3aa..c0bbe3c080 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1183,7 +1183,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1195,7 +1195,7 @@
       }
     },
     "libbsd": {
-      "evra": "0.11.7-5.fc39.x86_64",
+      "evra": "0.12.2-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libbsd"
       }
@@ -1273,7 +1273,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1417,7 +1417,7 @@
       }
     },
     "libmount": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1579,7 +1579,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1699,7 +1699,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2053,13 +2053,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.x86_64",
+      "evra": "0^20240326.g4988e2b-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240220.g1e6f92b-1.fc39.noarch",
+      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2203,13 +2203,13 @@
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-3.fc39.x86_64",
+      "evra": "2024.4-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-3.fc39.x86_64",
+      "evra": "2024.4-6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
@@ -2527,25 +2527,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.3-6.fc39.x86_64",
+      "evra": "2.39.4-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.181-1.fc39.noarch",
+      "evra": "2:9.1.264-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.181-1.fc39.x86_64",
+      "evra": "2:9.1.264-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-07T00:00:00Z",
+    "generated": "2024-04-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-07T17:50:50Z"
+        "generated": "2024-04-09T17:43:40Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-07T01:17:08Z"
+        "generated": "2024-04-10T04:00:00Z"
       }
     }
   }

From 925112713eb38b010287f27e0a43857b665c2185 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Fri, 5 Apr 2024 15:14:40 +0200
Subject: [PATCH 2099/2157] ext-tests/ext Fix var-mount/scsi-id failure on
 rawhide

Update the scsci-id test to set a WWN for the disk, and use reliable
udev symlinks to adjust for a change in sg3_utils [1]

Note that the `wwn` value set is converted to base 16 by QEMU,
so the symlink in the ignition config must reflects it.

This requires https://github.com/coreos/coreos-assembler/pull/3772
See https://github.com/coreos/fedora-coreos-tracker/issues/1670

[1] https://listman.redhat.com/archives/dm-devel/2023-March/053645.html
---
 tests/kola/var-mount/scsi-id/config.bu | 3 ++-
 tests/kola/var-mount/scsi-id/test.sh   | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/tests/kola/var-mount/scsi-id/config.bu b/tests/kola/var-mount/scsi-id/config.bu
index 97677034a1..276f4f405f 100644
--- a/tests/kola/var-mount/scsi-id/config.bu
+++ b/tests/kola/var-mount/scsi-id/config.bu
@@ -2,7 +2,8 @@ variant: fcos
 version: 1.4.0
 storage:
   disks:
-    - device: /dev/disk/by-id/scsi-0NVME_VirtualMultipath_disk1
+    # the symlink is from wwn=123456789 converted to hexadecimal (base16)
+    - device: /dev/disk/by-id/scsi-300000000075bcd15
       wipe_table: true
       partitions:
         - number: 1
diff --git a/tests/kola/var-mount/scsi-id/test.sh b/tests/kola/var-mount/scsi-id/test.sh
index 4885786856..405f7a0f55 100755
--- a/tests/kola/var-mount/scsi-id/test.sh
+++ b/tests/kola/var-mount/scsi-id/test.sh
@@ -2,7 +2,7 @@
 ## kola:
 ##   # additionalDisks is only supported on QEMU
 ##   platforms: qemu
-##   additionalDisks: ["5G:mpath"]
+##   additionalDisks: ["5G:channel=scsi,wwn=123456789"]
 ##   description: Verify udev rules /dev/disk/by-id/scsi-* symlinks exist
 ##     in initramfs.
 

From 17126242224a7b189d36ae500a8834f09ff53c5b Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Fri, 12 Apr 2024 11:12:33 +0200
Subject: [PATCH 2100/2157] Denylist: re-enable ext/var-mount/scsi-id

An update in rawhide broke /dev/disk-by symlinks that the scsi-id
relied on. [1] fixed the test but i forgot to re-enable it

[1] https://github.com/coreos/fedora-coreos-config/pull/2943
---
 kola-denylist.yaml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index bf2eb769f1..1ac236f803 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -11,15 +11,6 @@
   warn: true
   platforms:
     - azure
-- pattern: ext.config.var-mount.scsi-id
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1670
-  snooze: 2024-04-15
-  warn: true
-  streams:
-    - rawhide
-    - branched
-    - next
-    - next-devel
 - pattern: coreos.boot-mirror*
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1659
   warn: true

From 8989d70d5ba3374fec03c962e61a48bf2672259d Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 11 Apr 2024 10:55:08 -0400
Subject: [PATCH 2101/2157] tests/manual: add in coreos-builds-bisect script

This script will allow us to perform bisection on our list
of builds for our CoreOS streams. It will enable us to find issues
faster. It was inspired by rpm-ostree-bisect [1], which does somethign
similar, but operates on the OSTree repo from inside the OS.

Example output looks something like:

```
+ echo 'Could not access /etc/shadow -> SUCCESS'
Could not access /etc/shadow -> SUCCESS
+ exit 0
38.20230819.3.0 passed
BISECT TEST RESULTS:
Last known good build: 38.20230819.3.0
First known bad build: 38.20230902.3.0
```

[1] https://github.com/ostreedev/ostree-releng-scripts/blob/master/rpm-ostree-bisecthis
---
 tests/manual/coreos-builds-bisect.py | 303 +++++++++++++++++++++++++++
 1 file changed, 303 insertions(+)
 create mode 100755 tests/manual/coreos-builds-bisect.py

diff --git a/tests/manual/coreos-builds-bisect.py b/tests/manual/coreos-builds-bisect.py
new file mode 100755
index 0000000000..49a27a9f00
--- /dev/null
+++ b/tests/manual/coreos-builds-bisect.py
@@ -0,0 +1,303 @@
+#!/usr/bin/python3
+#
+# Copyright 2024 Dusty Mabe <dusty@dustymabe.com>
+#
+#  This program is free software; you can redistribute it and/or
+#  modify it under the terms of the GNU Lesser General Public
+#  License as published by the Free Software Foundation; either
+#  version 2 of the License, or (at your option) any later version.
+#
+#  This library is distributed in the hope that it will be useful,
+#  but WITHOUT ANY WARRANTY; without even the implied warranty of
+#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+#  Lesser General Public License for more details.
+#
+#  You should have received a copy of the GNU Lesser General Public
+#  License along with this library. If not, see <http://www.gnu.org/licenses/>.
+#
+#
+# This program will bisect a list of CoreOS builds, like what are
+# stored in a builds.json file. Example:
+#
+# It was heavily inspired by rpm-ostree-bisect:
+# https://github.com/ostreedev/ostree-releng-scripts/blob/master/rpm-ostree-bisect
+#
+# Here is some high level representation of what it does:
+#
+#    grab info on every build in builds.json
+#    A -> B -> C -> D -> E -> F -> G
+#
+#    user provided good/bad builds
+#
+#    run test script
+#    returns 0 for pass and 1 for failure
+#
+#    known good is A, known bad is G
+#
+#    start bisect:
+#    deploy D, test --> bad
+#    mark D, E, F bad
+#
+#    deploy B, test --> good
+#    mark B good
+#
+#    deploy C, test --> bad
+#
+#    Failure introduced in B -> C
+#
+# An example invocation from a cosa build dir looks like:
+#
+#   cosa buildfetch --force --stream=rawhide # to populate builds/builds.json
+#   ./coreos-builds-bisect.py --bad 41.20240404.91.0  \
+#                             --good 39.20230813.91.0 \
+#                             --testscript=./test.sh
+#
+# If the testing gets interrupted for some reason you should
+# be able to continue it with:
+#
+#   ./coreos-builds-bisect.py --resume                \
+#                             --bad 41.20240404.91.0  \
+#                             --good 39.20230813.91.0 \
+#                             --testscript=./test.sh
+#
+# The testcript that gets called from this will get passed one
+# argument, which is the ID of the build that should be tested.
+# It is up to the test script to pull anything necessary to test
+# that build, run the test, and return success or failure.
+#
+# For example:
+# ```
+#     cat ./test.sh
+#     #!/bin/bash
+#     set -eux -o pipefail
+#     build=$1
+#     cosa buildfetch --force --stream=rawhide --build=$build --artifact=qemu
+#     cosa decompress --build=$build
+#     cosa kola run --build=$build ext.config.mynewtestiwrote
+
+import argparse
+import json
+import os
+import os.path
+import subprocess
+import sys
+import tempfile
+from collections import OrderedDict
+
+DATA_FILE = './coreos-builds-bisect-data.json'
+BUILDS_JSON_FILE = './builds/builds.json'
+
+# Inspired by https://stackoverflow.com/a/287944
+class colors:
+    CLEAR = '\033[0m'
+    CYAN = '\033[96m'
+    GREEN = '\033[92m'
+    YELLOW = '\033[93m'
+    RED = '\033[91m'
+
+def fatal(msg):
+    print(colors.RED + msg + colors.CLEAR, file=sys.stderr)
+    sys.exit(1)
+
+def log_color(msg, color):
+    print(color + msg + colors.CLEAR)
+    sys.stdout.flush()
+
+def log(msg):
+    log_color(msg, colors.CYAN)
+
+def log_success(msg):
+    log_color(msg, colors.GREEN)
+
+def log_warn(msg):
+    log_color(msg, colors.YELLOW)
+
+"""
+    Initialize build ID order dict. The array will be a list of
+    commits in descending order. Each entry will be a dict with
+    key of commitid and value = a dict of version, heuristic
+    (TESTED, GIVEN, ASSUMED), and status (GOOD/BAD/UNKNOWN)
+
+    builds = {
+        '39.20230813.91.0' => {
+                      'heuristic', 'TESTED',
+                      'status': 'GOOD',
+                    },
+    }
+"""
+def initialize_builds_info(buildsjson, arch, badbuild, goodbuild):
+    with open(buildsjson, 'r') as f:
+        builds = json.load(f, object_pairs_hook=OrderedDict)
+    # Further narrow in on just the list of build dicts
+    builds = builds['builds']
+
+    # An ordered dictionary of builds info
+    info = OrderedDict()
+
+    # Populate the info dict
+    for build in builds:
+        # If this build has an entry for this architecture add it to
+        # our builds info dict.
+        if arch in build['arches']:
+            info.update({ build['id']: { 'status': 'UNKNOWN',
+                                         'heuristic': 'ASSUMED'}})
+    # Mark the bad commit bad and the good commit good
+    info[badbuild]['status'] = 'BAD'
+    info[badbuild]['heuristic'] = 'GIVEN'
+    info[goodbuild]['status'] = 'GOOD'
+    info[goodbuild]['heuristic'] = 'GIVEN'
+    return info
+
+
+def load_data(datafile):
+    with open(datafile, 'r') as f:
+        data = json.load(f, object_pairs_hook=OrderedDict)
+    return data
+
+
+def write_data(datafile, data):
+    dirname = os.path.dirname(datafile)
+    (_, tmpfile) = tempfile.mkstemp(
+                    dir=dirname,
+                    prefix="coreos-builds-bisect")
+
+    with open(tmpfile, 'w') as f:
+        json.dump(data, f, indent=4)
+    os.rename(tmpfile, datafile)
+
+
+def verify_script(testscript):
+    # Verify test script exists and is executable
+    if not testscript:
+        fatal("Must provide a --testscript to run")
+    if not (os.path.isfile(testscript)
+         and os.access(testscript, os.X_OK)):
+        fatal(f"provided test script: {testscript} is not an executable file")
+
+
+def bisect(args):
+    badbuild  = args.badbuild
+    goodbuild = args.goodbuild
+    testscript = args.testscript
+    datafile = args.datafile
+
+    builds_info = load_data(datafile)
+
+    # Loop until we're done bisecting
+    while True:
+        # Find list of unknown status builds
+        unknowns = []
+        lastbad = None
+        firstgood = None
+        for buildid in builds_info.keys():
+            status = builds_info[buildid]['status']
+            if status == 'BAD':
+                lastbad = buildid
+            elif status == 'UNKNOWN':
+                unknowns.append(buildid)
+            elif status == 'GOOD':
+                firstgood = buildid
+                break
+
+        # If we have no unknowns then we're done!
+        if len(unknowns) == 0:
+            log("BISECT TEST RESULTS:")
+            if firstgood is None:
+                log("No good builds were found in the history!")
+                return 0
+            # Do a sanity check to see if the good commit was actually tested.
+            if builds_info[firstgood]['heuristic'] == 'GIVEN':
+                log_warn("WARNING: The good build detected was the one given by the user.")
+                log_warn("WARNING: Are you sure this build is good?")
+            log(f"Last known good build: {firstgood}")
+            log(f"First known bad build: {lastbad}")
+            return 0
+
+        # Bisect to find new build id to test and then run the test
+        # //2 makes sure to give us an integer rather than a float
+        newbuildid = unknowns[len(unknowns)//2]
+        revisions = len(unknowns)
+        steps = 0
+        while revisions > 0:
+            revisions //= 2
+            steps += 1
+        log(f"Executing test for new build: {newbuildid}. ~{steps} steps left")
+        ec = subprocess.call([testscript, newbuildid])
+        if ec == 0:
+            log_success(f"{newbuildid} passed")
+            success = True
+        else:
+            log_warn(f"{newbuildid} failed")
+            success = False
+
+
+        # update the data with the results
+        if success:
+            for b in reversed(builds_info.keys()):
+                builds_info[b]['status'] = 'GOOD'
+                if b == newbuildid:
+                    break
+        else:
+            for b in builds_info.keys():
+                builds_info[b]['status'] = 'BAD'
+                if b == newbuildid:
+                    break
+        builds_info[b]['heuristic'] = 'TESTED'
+
+        # Save the state in case the script gets interrupted
+        write_data(datafile, builds_info)
+
+
+def main():
+
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--arch", dest='arch',
+                        help="What architecture to target", action='store')
+    parser.add_argument("--buildsjson", dest='buildsjson',
+                        help="Path to builds.json file",
+                        action='store', default=BUILDS_JSON_FILE)
+    parser.add_argument("--bad", dest='badbuild',
+                        help="Known Bad Build", action='store')
+    parser.add_argument("--good", dest='goodbuild',
+                        help="Known Good Build", action='store')
+    parser.add_argument("--testscript", help="A test script to run",
+                        action='store')
+    parser.add_argument("--resume", help="Resume a running bisection",
+                        action='store_true')
+    parser.add_argument("--datafile", help="data file to use for state",
+                        action='store', default=DATA_FILE)
+    args = parser.parse_args()
+    log(f"Using data file at: {args.datafile}")
+
+    verify_script(args.testscript)
+
+    if not args.arch:
+        cp = subprocess.run(['arch'], capture_output=True)
+        args.arch = cp.stdout.decode('utf-8').strip()
+    log(f"Targetting architecture: {args.arch}")
+
+    if args.resume:
+        if not os.path.exists(args.datafile):
+            fatal(f"Datafile at {args.datafile} must pre-exist with --resume")
+    else:
+        if not args.badbuild or not args.goodbuild:
+            fatal("Must specify both a bad and a good build via --bad and --good")
+        if not os.path.exists(args.buildsjson):
+            fatal(f"A builds.json file does not exist at {args.buildsjson}")
+        if os.path.exists(args.datafile) and not args.resume:
+            log(f"A datafile exists at {args.datafile} but --resume not specified")
+            log("If you want to resume a bisect pass --resume")
+            fatal("If you want to start a new bisect delete the datafile")
+
+        # initialize data
+        builds_info = initialize_builds_info(args.buildsjson,
+                                             args.arch,
+                                             args.badbuild,
+                                             args.goodbuild)
+        # Write data to file
+        write_data(args.datafile, builds_info)
+
+    bisect(args)
+
+if __name__ == '__main__':
+    main()

From 382d2aa524d44ccab4864930cb3c04635241d948 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Wed, 10 Apr 2024 16:05:05 -0400
Subject: [PATCH 2102/2157] Update peter-evans/create-pull-request to v6

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/1699
---
 .github/workflows/add-override.yml               | 2 +-
 .github/workflows/openshift-os.yml               | 2 +-
 .github/workflows/remove-graduated-overrides.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/add-override.yml b/.github/workflows/add-override.yml
index 219e711f82..e243037f2f 100644
--- a/.github/workflows/add-override.yml
+++ b/.github/workflows/add-override.yml
@@ -80,7 +80,7 @@ jobs:
           echo "COMMIT_TITLE=${title}" >> ${GITHUB_ENV}
           echo "PR_TITLE=${pr_title}" >> ${GITHUB_ENV}
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v4.2.3
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           branch: ${{ env.BRANCH_NAME }}
diff --git a/.github/workflows/openshift-os.yml b/.github/workflows/openshift-os.yml
index b57f5943e3..90b1676b20 100644
--- a/.github/workflows/openshift-os.yml
+++ b/.github/workflows/openshift-os.yml
@@ -106,7 +106,7 @@ jobs:
           EOF
 
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v6.0.0
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           push-to-fork: coreosbot-releng/os
diff --git a/.github/workflows/remove-graduated-overrides.yml b/.github/workflows/remove-graduated-overrides.yml
index ec49c86268..aa89e466a6 100644
--- a/.github/workflows/remove-graduated-overrides.yml
+++ b/.github/workflows/remove-graduated-overrides.yml
@@ -70,7 +70,7 @@ jobs:
                 -m "Triggered by remove-graduated-overrides GitHub Action."
           fi
       - name: Open pull request
-        uses: peter-evans/create-pull-request@v4.2.3
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.COREOSBOT_RELENG_TOKEN }}
           branch: ${{ matrix.branch }}-graduation

From 0326627ece91943a86a426b44c18d2810f315829 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 12 Apr 2024 23:12:18 +0000
Subject: [PATCH 2103/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1112/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 18 +++++++++---------
 manifest-lock.ppc64le.json | 18 +++++++++---------
 manifest-lock.s390x.json   | 18 +++++++++---------
 manifest-lock.x86_64.json  | 18 +++++++++---------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index cca5db7a4b..81b7f7126f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1573,7 +1573,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.5-1.fc39.aarch64",
+      "evra": "2:4.19.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1705,7 +1705,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.5-1.fc39.aarch64",
+      "evra": "2:4.19.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1723,7 +1723,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.17-1.fc39.aarch64",
+      "evra": "0.3.18-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2227,19 +2227,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.5-1.fc39.aarch64",
+      "evra": "2:4.19.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.5-1.fc39.noarch",
+      "evra": "2:4.19.6-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.5-1.fc39.aarch64",
+      "evra": "2:4.19.6-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-10T00:00:00Z",
+    "generated": "2024-04-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-09T17:43:39Z"
+        "generated": "2024-04-12T17:14:24Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-10T03:59:34Z"
+        "generated": "2024-04-12T01:12:39Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5f2e2482a8..429b2c308a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.5-1.fc39.ppc64le",
+      "evra": "2:4.19.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.5-1.fc39.ppc64le",
+      "evra": "2:4.19.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.17-1.fc39.ppc64le",
+      "evra": "0.3.18-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2227,19 +2227,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.5-1.fc39.ppc64le",
+      "evra": "2:4.19.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.5-1.fc39.noarch",
+      "evra": "2:4.19.6-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.5-1.fc39.ppc64le",
+      "evra": "2:4.19.6-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-10T00:00:00Z",
+    "generated": "2024-04-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-09T17:42:38Z"
+        "generated": "2024-04-12T17:12:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-10T03:59:42Z"
+        "generated": "2024-04-12T01:12:47Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7497283b07..78a7a16ca6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1489,7 +1489,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.5-1.fc39.s390x",
+      "evra": "2:4.19.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1621,7 +1621,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.5-1.fc39.s390x",
+      "evra": "2:4.19.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1639,7 +1639,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.17-1.fc39.s390x",
+      "evra": "0.3.18-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2131,19 +2131,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.5-1.fc39.s390x",
+      "evra": "2:4.19.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.5-1.fc39.noarch",
+      "evra": "2:4.19.6-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.5-1.fc39.s390x",
+      "evra": "2:4.19.6-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-10T00:00:00Z",
+    "generated": "2024-04-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-09T17:41:52Z"
+        "generated": "2024-04-12T17:12:18Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-10T03:59:51Z"
+        "generated": "2024-04-12T01:12:56Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index c0bbe3c080..7e123c922f 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1585,7 +1585,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.5-1.fc39.x86_64",
+      "evra": "2:4.19.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1717,7 +1717,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.5-1.fc39.x86_64",
+      "evra": "2:4.19.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1735,7 +1735,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.17-1.fc39.x86_64",
+      "evra": "0.3.18-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2239,19 +2239,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.5-1.fc39.x86_64",
+      "evra": "2:4.19.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.5-1.fc39.noarch",
+      "evra": "2:4.19.6-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.5-1.fc39.x86_64",
+      "evra": "2:4.19.6-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-10T00:00:00Z",
+    "generated": "2024-04-12T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-09T17:43:40Z"
+        "generated": "2024-04-12T17:14:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-10T04:00:00Z"
+        "generated": "2024-04-12T01:13:04Z"
       }
     }
   }

From 553ff02ca207a5228c8438c304cfc554d15964a1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 13 Apr 2024 23:05:54 +0000
Subject: [PATCH 2104/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1114/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 81b7f7126f..f356885578 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.4-200.fc39.aarch64",
+      "evra": "6.8.5-201.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.4-200.fc39.aarch64",
+      "evra": "6.8.5-201.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.4-200.fc39.aarch64",
+      "evra": "6.8.5-201.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.4-200.fc39.aarch64",
+      "evra": "6.8.5-201.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-12T00:00:00Z",
+    "generated": "2024-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-12T17:14:24Z"
+        "generated": "2024-04-13T17:10:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-12T01:12:39Z"
+        "generated": "2024-04-13T01:08:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 429b2c308a..e333c87ba5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.4-200.fc39.ppc64le",
+      "evra": "6.8.5-201.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.4-200.fc39.ppc64le",
+      "evra": "6.8.5-201.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.4-200.fc39.ppc64le",
+      "evra": "6.8.5-201.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.4-200.fc39.ppc64le",
+      "evra": "6.8.5-201.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-12T00:00:00Z",
+    "generated": "2024-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-12T17:12:52Z"
+        "generated": "2024-04-13T17:10:00Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-12T01:12:47Z"
+        "generated": "2024-04-13T01:08:31Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 78a7a16ca6..6f345cb2cb 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -973,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.4-200.fc39.s390x",
+      "evra": "6.8.5-201.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.4-200.fc39.s390x",
+      "evra": "6.8.5-201.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.4-200.fc39.s390x",
+      "evra": "6.8.5-201.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.4-200.fc39.s390x",
+      "evra": "6.8.5-201.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-12T00:00:00Z",
+    "generated": "2024-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-12T17:12:18Z"
+        "generated": "2024-04-13T17:09:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-12T01:12:56Z"
+        "generated": "2024-04-13T01:08:40Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7e123c922f..171d11c432 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.4-200.fc39.x86_64",
+      "evra": "6.8.5-201.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.4-200.fc39.x86_64",
+      "evra": "6.8.5-201.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.4-200.fc39.x86_64",
+      "evra": "6.8.5-201.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.4-200.fc39.x86_64",
+      "evra": "6.8.5-201.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-12T00:00:00Z",
+    "generated": "2024-04-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-12T17:14:25Z"
+        "generated": "2024-04-13T17:10:59Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-12T01:13:04Z"
+        "generated": "2024-04-13T01:08:49Z"
       }
     }
   }

From 7d2ef8acbb4eaa2eb07be8fa93e93d3f8a2f0846 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 14 Apr 2024 23:07:31 +0000
Subject: [PATCH 2105/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1116/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 38 +++++++++++++++++++-------------------
 manifest-lock.ppc64le.json | 38 +++++++++++++++++++-------------------
 manifest-lock.s390x.json   | 38 +++++++++++++++++++-------------------
 manifest-lock.x86_64.json  | 38 +++++++++++++++++++-------------------
 4 files changed, 76 insertions(+), 76 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index f356885578..02104ec6ad 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -907,13 +907,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1435,7 +1435,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc5.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1747,13 +1747,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1837,7 +1837,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1897,7 +1897,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc5.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc6.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1933,7 +1933,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1945,7 +1945,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2473,7 +2473,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-13T00:00:00Z",
+    "generated": "2024-04-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-13T17:10:48Z"
+        "generated": "2024-04-14T17:09:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-13T01:08:23Z"
+        "generated": "2024-04-14T01:27:32Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e333c87ba5..0ad6eeff47 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -247,7 +247,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -883,13 +883,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1411,7 +1411,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc5.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1735,13 +1735,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1819,7 +1819,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1879,7 +1879,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc5.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc6.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1915,7 +1915,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1927,7 +1927,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2467,7 +2467,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-13T00:00:00Z",
+    "generated": "2024-04-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-13T17:10:00Z"
+        "generated": "2024-04-14T17:07:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-13T01:08:31Z"
+        "generated": "2024-04-14T01:27:41Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6f345cb2cb..9aff94e8c9 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -829,13 +829,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1351,7 +1351,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc5.fc39.s390x",
+      "evra": "1:2.6.4-0.rc6.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1663,13 +1663,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1747,7 +1747,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1807,7 +1807,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc5.fc39.s390x",
+      "evra": "1:2.6.4-0.rc6.fc39.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1837,7 +1837,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1849,7 +1849,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2065,7 +2065,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2365,7 +2365,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-13T00:00:00Z",
+    "generated": "2024-04-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-13T17:09:11Z"
+        "generated": "2024-04-14T17:07:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-13T01:08:40Z"
+        "generated": "2024-04-14T01:27:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 171d11c432..d325f3b28e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -241,7 +241,7 @@
       }
     },
     "cirrus-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -919,13 +919,13 @@
       }
     },
     "intel-audio-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1447,7 +1447,7 @@
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc5.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1759,13 +1759,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1855,7 +1855,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1915,7 +1915,7 @@
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc5.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc6.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
@@ -1951,7 +1951,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1963,7 +1963,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2179,7 +2179,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2485,7 +2485,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240312-1.fc39.noarch",
+      "evra": "20240410-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-13T00:00:00Z",
+    "generated": "2024-04-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-13T17:10:59Z"
+        "generated": "2024-04-14T17:09:58Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-13T01:08:49Z"
+        "generated": "2024-04-14T01:27:58Z"
       }
     }
   }

From 5ad17bebbaf8705087f6ae1b6bb48ac4b9c3cef3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 11 Apr 2024 13:28:52 +0200
Subject: [PATCH 2106/2157] overlay.d: Fix missing end of line at the end of
 file

---
 .../05core/usr/lib/dracut/modules.d/40ignition-conf/README.md   | 2 +-
 .../modules.d/40ignition-ostree/ignition-ostree-growfs.service  | 2 +-
 .../systemd/system-generators/coreos-sulogin-force-generator    | 2 +-
 tests/kola/kubernetes/systemd-env-read/config.bu                | 2 +-
 tests/kola/var-mount/scsi-id/config.bu                          | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-conf/README.md b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-conf/README.md
index 793e519232..9c4eee089a 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-conf/README.md
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-conf/README.md
@@ -1 +1 @@
-`00-core.ign` is the base config shared between FCOS and RHCOS. The configs specific to FCOS are in [50ignition-conf-fcos](../../../../../../15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos).
\ No newline at end of file
+`00-core.ign` is the base config shared between FCOS and RHCOS. The configs specific to FCOS are in [50ignition-conf-fcos](../../../../../../15fcos/usr/lib/dracut/modules.d/50ignition-conf-fcos).
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
index ce25509ac6..3674431ff8 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-growfs.service
@@ -12,4 +12,4 @@ Type=oneshot
 ExecStart=/usr/sbin/ignition-ostree-growfs
 RemainAfterExit=yes
 # So we can transiently mount sysroot
-MountFlags=slave
\ No newline at end of file
+MountFlags=slave
diff --git a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
index a38da85a01..9edb7a88eb 100755
--- a/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
+++ b/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
@@ -63,4 +63,4 @@ if have_some_karg 'systemd.unit=rescue.target' rescue single s S 1; then
     write_dropin rescue
 elif have_some_karg 'systemd.unit=emergency.target' emergency '-b' ; then
     write_dropin emergency
-fi
\ No newline at end of file
+fi
diff --git a/tests/kola/kubernetes/systemd-env-read/config.bu b/tests/kola/kubernetes/systemd-env-read/config.bu
index 68927604e8..84f5bd89e7 100644
--- a/tests/kola/kubernetes/systemd-env-read/config.bu
+++ b/tests/kola/kubernetes/systemd-env-read/config.bu
@@ -24,4 +24,4 @@ systemd:
         RemainAfterExit=yes
         Type=oneshot
         [Install]
-        WantedBy=multi-user.target
\ No newline at end of file
+        WantedBy=multi-user.target
diff --git a/tests/kola/var-mount/scsi-id/config.bu b/tests/kola/var-mount/scsi-id/config.bu
index 276f4f405f..118f4215f8 100644
--- a/tests/kola/var-mount/scsi-id/config.bu
+++ b/tests/kola/var-mount/scsi-id/config.bu
@@ -14,4 +14,4 @@ storage:
       format: xfs
       wipe_filesystem: true
       label: var
-      with_mount_unit: true
\ No newline at end of file
+      with_mount_unit: true

From 7c364a8d700f79dcb09ed4c641d04ebe34c65988 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Thu, 11 Apr 2024 13:32:37 +0200
Subject: [PATCH 2107/2157] ci/find-whitespace: Check for missing EOL at EOF

Rework the find-whitespace CI script to check more files and also check
for missing end of line at the end of files.

See: https://unix.stackexchange.com/questions/18743/whats-the-point-in-adding-a-new-line-to-the-end-of-a-file
See: https://stackoverflow.com/questions/4631068/how-do-i-find-files-that-do-not-end-with-a-newline-linefeed
---
 ci/find-whitespace | 54 ++++++++++++++++++++++++++++++++++++++++++----
 1 file changed, 50 insertions(+), 4 deletions(-)

diff --git a/ci/find-whitespace b/ci/find-whitespace
index 05817a5a08..d72b9b7e1c 100755
--- a/ci/find-whitespace
+++ b/ci/find-whitespace
@@ -3,16 +3,62 @@
 set -euo pipefail
 
 main() {
-    local files_with_whitespace
-    files_with_whitespace="$(find manifests overlay.d tests -type f -exec grep -El " +$" {} \;)"
 
+    local files_with_whitespace=""
+    local files_with_missing_empty_line_at_eof=""
+
+    while IFS= read -r -d '' f; do
+        echo "[+] Checking ${f}"
+
+        # Looking for whitespace at end of line
+        if grep -Eq " +$" "${f}"; then
+            # List of files to ignore
+            if \
+                [[ "${f}" == "./live/isolinux/boot.msg" ]] \
+                ; then
+                echo "[+] Checking ${f}: Ignoring whitespace at end of line"
+            else
+                echo "[+] Checking ${f}: Found whitespace at end of line"
+                files_with_whitespace+=" ${f}"
+            fi
+        fi
+
+        # Looking for missing empty line at end of file
+        if [[ -n $(tail -c 1 "${f}") ]]; then
+            # List of files to ignore
+            if \
+                [[ "${f}" == "./tests/kola/ignition/resource/authenticated-gs/data/expected/"* ]] ||\
+                [[ "${f}" == "./tests/kola/ignition/resource/authenticated-s3/data/expected/"* ]] ||\
+                [[ "${f}" == "./tests/kola/ignition/resource/remote/data/expected/"* ]] \
+                ; then
+                echo "[+] Checking ${f}: Ignoring missing empty line at end of file"
+            else
+                echo "[+] Checking ${f}: Missing empty line at end of file"
+                files_with_missing_empty_line_at_eof+=" ${f}"
+            fi
+        fi
+    done< <(find . -path "./.git" -prune -o -type f -print0)
+
+    echo ""
     if [[ -n "${files_with_whitespace}" ]]; then
         echo "[+] Found files with whitespace at the end of line"
-        echo "${files_with_whitespace}"
+        echo "${files_with_whitespace}" | tr ' ' '\n'
+    else
+        echo "[+] No files with whitespace at the end of line"
+    fi
+
+    echo ""
+    if [[ -n "${files_with_missing_empty_line_at_eof}" ]]; then
+        echo "[+] Found files with missing empty line at end of file"
+        echo "${files_with_missing_empty_line_at_eof}" | tr ' ' '\n'
+    else
+        echo "[+] No files with missing empty line at end of file"
+    fi
+
+    if [[ -n "${files_with_whitespace}" ]] || [[ -n "${files_with_missing_empty_line_at_eof}" ]]; then
         exit 1
     fi
 
-    echo "[+] No files with whitespace at the end of line"
     exit 0
 }
 

From b29be6659c6ec3f5004b11c0ca59c1bf5952c4c8 Mon Sep 17 00:00:00 2001
From: c4rt0 <c4rt0gr4ph3r@gmail.com>
Date: Mon, 15 Apr 2024 14:00:40 +0100
Subject: [PATCH 2108/2157] denylist: extend snooze for failing kola tests

---
 kola-denylist.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 1ac236f803..65783b346f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-04-15
+  snooze: 2024-04-29
   warn: true
   platforms:
     - azure
@@ -18,7 +18,7 @@
     - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1698
-  snooze: 2024-04-07
+  snooze: 2024-04-29
   warn: true
   streams:
     - rawhide

From 7857871f47624e5fe510bc3c37258bb1f667e7e5 Mon Sep 17 00:00:00 2001
From: c4rt0 <c4rt0gr4ph3r@gmail.com>
Date: Mon, 15 Apr 2024 17:24:56 +0100
Subject: [PATCH 2109/2157] denylist: remove ext.config.kdump.crash

---
 kola-denylist.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 65783b346f..03675ce8f2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -16,9 +16,3 @@
   warn: true
   arches:
     - ppc64le
-- pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1698
-  snooze: 2024-04-29
-  warn: true
-  streams:
-    - rawhide

From 437dc2a3f9a8207eb639e487500466a762d8888a Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Mon, 15 Apr 2024 17:20:22 +0200
Subject: [PATCH 2110/2157] manifests: add kexec-utils subpackage for
 kexec-tools

In kexec-tools 2.0.28-8 some of the config files
were broken out in a subpackage.
Kexec-utils is a weak dependency on kexec-tools
so we need to pull it manually.

See: https://src.fedoraproject.org/rpms/kexec-tools/c/372b4c6c1597c3d9aaddda2d691260474973989e?branch=rawhide
---
 manifests/fedora-coreos.yaml | 4 ++--
 manifests/kdump.yaml         | 8 ++++++++
 manifests/makedumpfile.yaml  | 4 ----
 3 files changed, 10 insertions(+), 6 deletions(-)
 create mode 100644 manifests/kdump.yaml
 delete mode 100644 manifests/makedumpfile.yaml

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index ada7419b8a..0967eef97f 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -34,8 +34,8 @@ conditional-include:
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
   - if: releasever >= 41
-    # Include makedumpfile subpackage from kexec-tools (new in F41+)
-    include: makedumpfile.yaml
+    # Include makedumpfile and kexec-utils subpackages from kexec-tools (new in F41+)
+    include: kdump.yaml
   # On <41, we want to keep making sure dnf doesn't slip in somehow
   # On 41+, we do want it
   # https://github.com/coreos/fedora-coreos-tracker/issues/1687
diff --git a/manifests/kdump.yaml b/manifests/kdump.yaml
new file mode 100644
index 0000000000..cee3521c68
--- /dev/null
+++ b/manifests/kdump.yaml
@@ -0,0 +1,8 @@
+packages:
+# makedumpfile is needed for kdump and was broken out to a subpackage
+# in F41+. Move this to a main manifest file when we no longer support <F41.
+  - makedumpfile
+# systemd service files and other tools were moved into a subpackage
+# in F41+. Move this to a main manifest file when we no longer support <F41.
+# https://src.fedoraproject.org/rpms/kexec-tools/c/372b4c6c1597c3d9aaddda2d691260474973989e?branch=rawhide
+  - kdump-utils
diff --git a/manifests/makedumpfile.yaml b/manifests/makedumpfile.yaml
deleted file mode 100644
index 5d5813df50..0000000000
--- a/manifests/makedumpfile.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-# makedumpfile is needed for kdump and was broken out to a subpackage
-# in F41+. Drop this when we no longer support <F41.
-packages:
-  - makedumpfile

From 539b2079af8a0359f6bca603bb65b809d6e869f8 Mon Sep 17 00:00:00 2001
From: c4rt0 <c4rt0gr4ph3r@gmail.com>
Date: Tue, 16 Apr 2024 15:57:52 +0100
Subject: [PATCH 2111/2157] manifests: update nitpick fedora-coreos.yaml

---
 manifests/fedora-coreos.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 0967eef97f..de30f75895 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -34,7 +34,7 @@ conditional-include:
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
   - if: releasever >= 41
-    # Include makedumpfile and kexec-utils subpackages from kexec-tools (new in F41+)
+    # Include makedumpfile and kdump-utils subpackages from kexec-tools (new in F41+)
     include: kdump.yaml
   # On <41, we want to keep making sure dnf doesn't slip in somehow
   # On 41+, we do want it

From 9815c65e9bd250924a0c2f3e5760a027cac10a6d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 18 Apr 2024 05:03:34 +0000
Subject: [PATCH 2112/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1125/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 47 insertions(+), 47 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 02104ec6ad..7bf57b8385 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -211,7 +211,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.25.0-1.fc39.aarch64",
+      "evra": "1.28.1-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1057,25 +1057,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.5-201.fc39.aarch64",
+      "evra": "6.8.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.5-201.fc39.aarch64",
+      "evra": "6.8.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.5-201.fc39.aarch64",
+      "evra": "6.8.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.5-201.fc39.aarch64",
+      "evra": "6.8.6-200.fc39.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2155,7 +2155,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-4.fc39.aarch64",
+      "evra": "2:8.1.3-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2215,7 +2215,7 @@
       }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.aarch64",
+      "evra": "3.3.0-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "rsync"
       }
@@ -2527,13 +2527,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.264-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.264-1.fc39.aarch64",
+      "evra": "2:9.1.309-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-14T00:00:00Z",
+    "generated": "2024-04-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-14T17:09:11Z"
+        "generated": "2024-04-16T19:20:08Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-14T01:27:32Z"
+        "generated": "2024-04-18T01:03:08Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0ad6eeff47..e72213b713 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -217,7 +217,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.25.0-1.fc39.ppc64le",
+      "evra": "1.28.1-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1033,25 +1033,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.5-201.fc39.ppc64le",
+      "evra": "6.8.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.5-201.fc39.ppc64le",
+      "evra": "6.8.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.5-201.fc39.ppc64le",
+      "evra": "6.8.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.5-201.fc39.ppc64le",
+      "evra": "6.8.6-200.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2155,7 +2155,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-4.fc39.ppc64le",
+      "evra": "2:8.1.3-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2215,7 +2215,7 @@
       }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.ppc64le",
+      "evra": "3.3.0-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "rsync"
       }
@@ -2521,13 +2521,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.264-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.264-1.fc39.ppc64le",
+      "evra": "2:9.1.309-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-14T00:00:00Z",
+    "generated": "2024-04-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-14T17:07:48Z"
+        "generated": "2024-04-16T19:18:21Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-14T01:27:41Z"
+        "generated": "2024-04-18T01:03:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9aff94e8c9..d9b8cd5009 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -211,7 +211,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.25.0-1.fc39.s390x",
+      "evra": "1.28.1-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -973,25 +973,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.5-201.fc39.s390x",
+      "evra": "6.8.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.5-201.fc39.s390x",
+      "evra": "6.8.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.5-201.fc39.s390x",
+      "evra": "6.8.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.5-201.fc39.s390x",
+      "evra": "6.8.6-200.fc39.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2053,7 +2053,7 @@
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-4.fc39.s390x",
+      "evra": "2:8.1.3-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
@@ -2113,7 +2113,7 @@
       }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.s390x",
+      "evra": "3.3.0-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "rsync"
       }
@@ -2425,13 +2425,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.264-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.264-1.fc39.s390x",
+      "evra": "2:9.1.309-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-14T00:00:00Z",
+    "generated": "2024-04-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-14T17:07:19Z"
+        "generated": "2024-04-16T19:18:09Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-14T01:27:49Z"
+        "generated": "2024-04-18T01:03:25Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index d325f3b28e..febb95e6ed 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -211,7 +211,7 @@
       }
     },
     "c-ares": {
-      "evra": "1.25.0-1.fc39.x86_64",
+      "evra": "1.28.1-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.5-201.fc39.x86_64",
+      "evra": "6.8.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.5-201.fc39.x86_64",
+      "evra": "6.8.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.5-201.fc39.x86_64",
+      "evra": "6.8.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.5-201.fc39.x86_64",
+      "evra": "6.8.6-200.fc39.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2227,7 +2227,7 @@
       }
     },
     "rsync": {
-      "evra": "3.2.7-5.fc39.x86_64",
+      "evra": "3.3.0-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "rsync"
       }
@@ -2539,13 +2539,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.264-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc39.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.264-1.fc39.x86_64",
+      "evra": "2:9.1.309-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-14T00:00:00Z",
+    "generated": "2024-04-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-14T17:09:58Z"
+        "generated": "2024-04-16T19:20:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-14T01:27:58Z"
+        "generated": "2024-04-18T01:03:34Z"
       }
     }
   }

From 7ea9b0a52f886d628046ed4f690fdbb6c1559494 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 17 Apr 2024 17:09:32 -0400
Subject: [PATCH 2113/2157] overlay.d/05core: fix variable usage in
 coreos-diskful-generator

Saw this scroll by in a log:

```
[    1.792490] /usr/lib/systemd/system-generators/coreos-diskful-generator: line 37: value: unbound variable
```

We need to set a value for value in order to prevent the unbound
variable error.
---
 .../modules.d/35coreos-ignition/coreos-diskful-generator       | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
index a9bff32d30..2ba3dee7f9 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -27,8 +27,7 @@ EARLY_DIR="${2:-/tmp}"
 
 IFS=" " read -r -a cmdline <<< "$(</proc/cmdline)"
 cmdline_arg() {
-    local name value
-    name="$1"
+    local name="$1" value=""
     for arg in "${cmdline[@]}"; do
         if [[ "${arg%%=*}" == "${name}" ]]; then
             value="${arg#*=}"

From 24c939e7a7c069dd20e8d72a2a2541df079f16ce Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 18 Apr 2024 21:52:06 -0400
Subject: [PATCH 2114/2157] tests/kola: handle flakes in quadlet test

This test was flaking on ppc64le a lot. After debugging we were
able to see that the `podman inspect systemd-test` was running
before the container was actually started, but the call didn't fail
because `systemd-test` matched the name of the volume and the network
resource. So we need to do a few things here:

- make sure we don't try to check things before the volume and network
  has been created or the container has been started.
- limit the inspect call for the container to only containers by doing
  `podman container inspect` instead of generic `podman inspect`.
---
 tests/kola/containers/quadlet/test.sh | 27 ++++++++++++++++++++-------
 1 file changed, 20 insertions(+), 7 deletions(-)

diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index aa6bcc78ff..ae597123a5 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -9,23 +9,36 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-if [[ "$(podman volume inspect systemd-test | jq -r '.[0].Labels."org.test.Key"')" != "quadlet-test-volume" ]]; then
+# Test volume
+if ! is_service_active test-volume.service; then
+  fatal "test-volume.service failed to start"
+fi
+volume_info=$(podman volume inspect systemd-test)
+if [[ "$(jq -r '.[0].Labels."org.test.Key"' <<< "$volume_info")" != "quadlet-test-volume" ]]; then
     fatal "Volume not correctly created"
 fi
 
-if [[ "$(podman network inspect systemd-test | jq -r '.[0].labels."org.test.Key"')" != "quadlet-test-network" ]]; then
+# Test network
+if ! is_service_active test-network.service; then
+  fatal "test-network.service failed to start"
+fi
+network_info=$(podman network inspect systemd-test)
+if [[ "$(jq -r '.[0].labels."org.test.Key"' <<< "$network_info")" != "quadlet-test-network" ]]; then
     fatal "Network not correctly created"
 fi
 
-if [[ "$(podman inspect systemd-test | jq -r '.[0].ImageName')" != "quay.io/fedora/fedora-minimal:39" ]]; then
+# Test container
+if ! is_service_active test.service; then
+  fatal "test-network.service failed to start"
+fi
+container_info=$(podman container inspect systemd-test)
+if [[ "$(jq -r '.[0].ImageName' <<< "$container_info")" != "quay.io/fedora/fedora-minimal:39" ]]; then
     fatal "Container not using the correct image"
 fi
-
-if [[ "$(podman inspect systemd-test | jq -r '.[0].NetworkSettings.Networks[].NetworkID')" != "systemd-test" ]]; then
+if [[ "$(jq -r '.[0].NetworkSettings.Networks[].NetworkID' <<< "$container_info")" != "systemd-test" ]]; then
     fatal "Container not using the correct network"
 fi
-
-if [[ "$(podman inspect systemd-test | jq -r '.[0].HostConfig.Binds[0]')" != "systemd-test:/data:rw,rprivate,nosuid,nodev,rbind" ]]; then
+if [[ "$(jq -r '.[0].HostConfig.Binds[0]' <<< "$container_info")" != "systemd-test:/data:rw,rprivate,nosuid,nodev,rbind" ]]; then
     fatal "Container not using the correct volume"
 fi
 

From 0566985301cc7d1c330d02d358099e27e1ccb724 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 21 Apr 2024 23:15:54 +0000
Subject: [PATCH 2115/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1128/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 22 +++++++++++-----------
 manifest-lock.ppc64le.json | 22 +++++++++++-----------
 manifest-lock.s390x.json   | 22 +++++++++++-----------
 manifest-lock.x86_64.json  | 22 +++++++++++-----------
 4 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7bf57b8385..755a27efdc 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -793,25 +793,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-17.fc39.aarch64",
+      "evra": "2.38-18.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-17.fc39.aarch64",
+      "evra": "2.38-18.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-17.fc39.aarch64",
+      "evra": "2.38-18.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-17.fc39.aarch64",
+      "evra": "2.38-18.fc39.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -829,7 +829,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.4-1.fc39.aarch64",
+      "evra": "3.8.5-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1015,7 +1015,7 @@
       }
     },
     "jose": {
-      "evra": "11-8.fc39.aarch64",
+      "evra": "13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1345,7 +1345,7 @@
       }
     },
     "libjose": {
-      "evra": "11-8.fc39.aarch64",
+      "evra": "13-1.fc39.aarch64",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1447,7 +1447,7 @@
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.aarch64",
+      "evra": "1.55.1-5.fc39.aarch64",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
@@ -2618,16 +2618,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-18T00:00:00Z",
+    "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:29Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-16T19:20:08Z"
+        "generated": "2024-04-21T15:19:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-18T01:03:08Z"
+        "generated": "2024-04-21T01:11:35Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e72213b713..85261aa18b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -769,25 +769,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-17.fc39.ppc64le",
+      "evra": "2.38-18.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-17.fc39.ppc64le",
+      "evra": "2.38-18.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-17.fc39.ppc64le",
+      "evra": "2.38-18.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-17.fc39.ppc64le",
+      "evra": "2.38-18.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -805,7 +805,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.4-1.fc39.ppc64le",
+      "evra": "3.8.5-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -991,7 +991,7 @@
       }
     },
     "jose": {
-      "evra": "11-8.fc39.ppc64le",
+      "evra": "13-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1321,7 +1321,7 @@
       }
     },
     "libjose": {
-      "evra": "11-8.fc39.ppc64le",
+      "evra": "13-1.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1423,7 +1423,7 @@
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.ppc64le",
+      "evra": "1.55.1-5.fc39.ppc64le",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
@@ -2606,16 +2606,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-18T00:00:00Z",
+    "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:28Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-16T19:18:21Z"
+        "generated": "2024-04-21T15:17:53Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-18T01:03:17Z"
+        "generated": "2024-04-21T01:11:44Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d9b8cd5009..dfcd5e45e6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -745,25 +745,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-17.fc39.s390x",
+      "evra": "2.38-18.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-17.fc39.s390x",
+      "evra": "2.38-18.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-17.fc39.s390x",
+      "evra": "2.38-18.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-17.fc39.s390x",
+      "evra": "2.38-18.fc39.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -781,7 +781,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.4-1.fc39.s390x",
+      "evra": "3.8.5-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -931,7 +931,7 @@
       }
     },
     "jose": {
-      "evra": "11-8.fc39.s390x",
+      "evra": "13-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libjose": {
-      "evra": "11-8.fc39.s390x",
+      "evra": "13-1.fc39.s390x",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1363,7 +1363,7 @@
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.s390x",
+      "evra": "1.55.1-5.fc39.s390x",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
@@ -2510,16 +2510,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-18T00:00:00Z",
+    "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:19Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-16T19:18:09Z"
+        "generated": "2024-04-21T15:17:00Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-18T01:03:25Z"
+        "generated": "2024-04-21T01:11:53Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index febb95e6ed..7ccc9500b9 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -793,25 +793,25 @@
       }
     },
     "glibc": {
-      "evra": "2.38-17.fc39.x86_64",
+      "evra": "2.38-18.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-17.fc39.x86_64",
+      "evra": "2.38-18.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-17.fc39.x86_64",
+      "evra": "2.38-18.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-17.fc39.x86_64",
+      "evra": "2.38-18.fc39.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -829,7 +829,7 @@
       }
     },
     "gnutls": {
-      "evra": "3.8.4-1.fc39.x86_64",
+      "evra": "3.8.5-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
@@ -1027,7 +1027,7 @@
       }
     },
     "jose": {
-      "evra": "11-8.fc39.x86_64",
+      "evra": "13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1357,7 +1357,7 @@
       }
     },
     "libjose": {
-      "evra": "11-8.fc39.x86_64",
+      "evra": "13-1.fc39.x86_64",
       "metadata": {
         "sourcerpm": "jose"
       }
@@ -1459,7 +1459,7 @@
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-4.fc39.x86_64",
+      "evra": "1.55.1-5.fc39.x86_64",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
@@ -2630,16 +2630,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-18T00:00:00Z",
+    "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-11-01T00:12:39Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-16T19:20:30Z"
+        "generated": "2024-04-21T15:19:06Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-18T01:03:34Z"
+        "generated": "2024-04-21T01:12:02Z"
       }
     }
   }

From 85c7c1b8a949467a7b58c50bed5c02d33f8886c9 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Fri, 12 Apr 2024 10:08:00 +0200
Subject: [PATCH 2116/2157] Add missing wifi firmware checks

Some wifi-firmwares will be split into sub-packages in fedora 40
We will keep them in until fedora 41, but display a warning message
in the console if NetworkManager-wifi is layered without the most
popular the wifi firmwares.

See https://github.com/coreos/fedora-coreos-tracker/issues/1575

Also link to FAQ entry.
see https://github.com/coreos/fedora-coreos-docs/pull/629
---
 .../lib/systemd/system-preset/45-fcos.preset  |  3 +
 .../coreos-check-cgroups-version.service      |  1 +
 .../system/coreos-check-ssh-keys.service      |  1 +
 .../coreos-check-wireless-firmwares.service   | 11 ++++
 .../libexec/coreos-check-wireless-firmwares   | 63 +++++++++++++++++++
 5 files changed, 79 insertions(+)
 create mode 100644 overlay.d/15fcos/usr/lib/systemd/system/coreos-check-wireless-firmwares.service
 create mode 100755 overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares

diff --git a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
index 27780787c9..95d8087d2b 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+++ b/overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
@@ -3,3 +3,6 @@ enable coreos-check-ssh-keys.service
 enable coreos-check-cgroups-version.service
 # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
 enable fwupd-refresh.timer
+# Check if wifi firmwares are missing when NetworkManager-wifi is installed
+# https://github.com/coreos/fedora-coreos-tracker/issues/1575
+enable coreos-check-wireless-firmwares.service
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
index 2aff8f6cdb..101392140b 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-cgroups-version.service
@@ -3,6 +3,7 @@
 [Unit]
 Description=Check if cgroupsv1 Is Still Being Used
 ConditionControlGroupController=v1
+Before=systemd-user-sessions.service
 [Service]
 Type=oneshot
 ExecStart=/usr/libexec/coreos-check-cgroups-version
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index 0e24ae8aaa..d3c8815725 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -16,6 +16,7 @@ ConditionKernelCommandLine=ignition.firstboot
 Before=systemd-user-sessions.service
 
 [Service]
+Before=systemd-user-sessions.service
 Type=oneshot
 ProtectHome=read-only
 ExecStart=/usr/libexec/coreos-check-ssh-keys
diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-wireless-firmwares.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-wireless-firmwares.service
new file mode 100644
index 0000000000..360bf2ed85
--- /dev/null
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-wireless-firmwares.service
@@ -0,0 +1,11 @@
+# This service is used for printing a message if
+# some wireless firmwares are missing
+[Unit]
+Description=Check For Wireless Firmware Packages
+Before=systemd-user-sessions.service
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/coreos-check-wireless-firmwares
+RemainAfterExit=yes
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares b/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares
new file mode 100755
index 0000000000..5172b3a1c0
--- /dev/null
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares
@@ -0,0 +1,63 @@
+#!/usr/bin/bash
+# This script checks if
+# and will prints a message to the serial console
+# to warn the user about missing wifi firmware messages
+# and provide remediation steps
+# See https://github.com/coreos/fedora-coreos-tracker/issues/1575
+
+set -euo pipefail
+
+# List of wifi-firmwares
+# SOURCE: https://pagure.io/fedora-comps/blob/main/f/comps-f41.xml.in#_2700
+firmwares=(
+atheros-firmware
+b43-fwcutter
+b43-openfwwf
+brcmfmac-firmware
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+libertas-firmware
+mt7xxx-firmware
+nxpwireless-firmware
+realtek-firmware
+tiwilink-firmware
+atmel-firmware
+bcm283x-firmware
+zd1211-firmware
+)
+# Get firmware names into `a|b|c|d` regex string
+regex=$(IFS='|'; echo "${firmwares[*]}")
+
+layered_packages="$(rpm-ostree status --json -b | jq -r '.deployments[0]."requested-packages"[]')"
+
+if grep -q "NetworkManager-wifi" <<< "$layered_packages"; then
+    if grep -qP $regex <<< "$layered_packages"; then
+      exit 0
+    fi
+else
+  exit 0
+fi
+
+# Change the output color to yellow
+warn=$(echo -e '\033[0;33m')
+# No color
+nc=$(echo -e '\033[0m')
+
+motd_path=/run/motd.d/30_wireless_firmwares_warning.motd
+
+cat << EOF > "${motd_path}"
+${warn}
+##########################################################################
+WARNING: The NetworkManager-wifi is a requested layered package on this
+system, but no Wi-Fi drivers are requested. The Wi-Fi drivers will no
+longer be included by default in the future.
+
+More context and remediation steps are available in the following FAQ entry:
+https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-enabling-wifi/
+
+To disable this warning, use:
+sudo systemctl disable coreos-check-wireless-firmwares.service
+##########################################################################
+${nc}
+EOF

From e6749f6f0579de3019c79ee1ea16ea96b23f1541 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 23 Apr 2024 12:06:15 +0200
Subject: [PATCH 2117/2157] manifests: Don't include Wi-Fi firmwares starting
 with Fedora 41

Move Wi-Fi firmwares to their own manifest so that we can automatically
drop then when we rebase to Fedora 41.

We can safely do that now that we have included a warning for existing
users.

See: https://github.com/coreos/fedora-coreos-config/pull/2978
Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/1575
---
 manifests/fedora-coreos-base.yaml | 2 --
 manifests/fedora-coreos.yaml      | 3 +++
 manifests/wifi-firmwares.yaml     | 9 +++++++++
 3 files changed, 12 insertions(+), 2 deletions(-)
 create mode 100644 manifests/wifi-firmwares.yaml

diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index d58d72c4dd..d2fd41a14b 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -157,8 +157,6 @@ packages:
   - iptables-legacy
   # GPU Firmware files (not broken out into subpackage of linux-firmware in RHEL yet)
   - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
-  # Wifi/BT firmware files https://github.com/coreos/fedora-coreos-tracker/issues/1575
-  - atheros-firmware brcmfmac-firmware mt7xxx-firmware realtek-firmware nxpwireless-firmware tiwilink-firmware
 
 
 # - irqbalance
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index de30f75895..0be3297d23 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -43,6 +43,9 @@ conditional-include:
     include: exclude-dnf.yaml
   - if: releasever >= 41
     include: include-dnf.yaml
+  # Wifi firmwares will be dropped in F41
+  - if: releasever < 41
+    include: wifi-firmwares.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/manifests/wifi-firmwares.yaml b/manifests/wifi-firmwares.yaml
new file mode 100644
index 0000000000..6875ff7319
--- /dev/null
+++ b/manifests/wifi-firmwares.yaml
@@ -0,0 +1,9 @@
+# Wifi/BT firmware files kept in FCOS until the F41 rebase
+# See: https://github.com/coreos/fedora-coreos-tracker/issues/1575
+packages:
+  - atheros-firmware
+  - brcmfmac-firmware
+  - mt7xxx-firmware
+  - nxpwireless-firmware
+  - realtek-firmware
+  - tiwilink-firmware

From 39ddc63fbea4a6762d2f9766737d15a98db55d92 Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 23 Apr 2024 12:12:10 -0400
Subject: [PATCH 2118/2157] Move to Fedora Linux 40

The Fedora 40 GA is to be released Tuesday April 23rd.

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/1674
---
 ci/buildroot/Dockerfile      |   2 +-
 manifest-lock.aarch64.json   | 955 +++++++++++++++++------------------
 manifest-lock.overrides.yaml |  20 +-
 manifest-lock.ppc64le.json   | 953 +++++++++++++++++-----------------
 manifest-lock.s390x.json     | 921 ++++++++++++++++-----------------
 manifest-lock.x86_64.json    | 955 +++++++++++++++++------------------
 manifest.yaml                |   2 +-
 7 files changed, 1838 insertions(+), 1970 deletions(-)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index e80283bf8d..1df17e8824 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM quay.io/fedora/fedora:39
+FROM quay.io/fedora/fedora:40
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 755a27efdc..8b59063e1a 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1,2299 +1,2257 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.aarch64",
+      "evra": "1:1.46.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.aarch64",
+      "evra": "1:1.46.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.aarch64",
+      "evra": "1:1.46.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.aarch64",
+      "evra": "1:1.46.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.aarch64",
+      "evra": "1:1.46.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch",
+      "evra": "2.10.0.8-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
     },
     "aardvark-dns": {
-      "evra": "1.10.0-1.fc39.aarch64",
+      "evra": "1.10.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
     },
     "acl": {
-      "evra": "2.3.1-9.fc39.aarch64",
+      "evra": "2.3.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.aarch64",
+      "evra": "0.9.2-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "adcli"
       }
     },
     "afterburn": {
-      "evra": "5.5.1-1.fc39.aarch64",
+      "evra": "5.5.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-1.fc39.aarch64",
+      "evra": "5.5.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.26-1.fc39.aarch64",
+      "evra": "1.26-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
-    "amd-ucode-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.aarch64",
+      "evra": "2.5.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "audit": {
-      "evra": "3.1.2-8.fc39.aarch64",
+      "evra": "4.0.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-8.fc39.aarch64",
+      "evra": "4.0.1-1.fc40.aarch64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
+    },
+    "audit-rules": {
+      "evra": "4.0.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.aarch64",
+      "evra": "1.5.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.aarch64",
+      "evra": "1.5.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.aarch64",
+      "evra": "0.8-26.fc40.aarch64",
       "metadata": {
         "sourcerpm": "avahi"
       }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch",
+      "evra": "11-20.fc40.noarch",
       "metadata": {
         "sourcerpm": "basesystem"
       }
     },
     "bash": {
-      "evra": "5.2.26-1.fc39.aarch64",
+      "evra": "5.2.26-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bash"
       }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch",
+      "evra": "0.4.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "shell-color-prompt"
       }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch",
+      "evra": "1:2.11-14.fc40.noarch",
       "metadata": {
         "sourcerpm": "bash-completion"
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc39.aarch64",
+      "evra": "32:9.18.24-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc39.noarch",
+      "evra": "32:9.18.24-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc39.aarch64",
+      "evra": "32:9.18.24-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bootupd": {
-      "evra": "0.2.18-2.fc39.aarch64",
+      "evra": "0.2.18-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.aarch64",
+      "evra": "3.7.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc39.aarch64",
+      "evra": "6.8-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.aarch64",
+      "evra": "0.8.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bubblewrap"
       }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.aarch64",
+      "evra": "1.0.8-18.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.aarch64",
+      "evra": "1.0.8-18.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "c-ares": {
-      "evra": "1.28.1-1.fc39.aarch64",
+      "evra": "1.28.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "evra": "2023.2.62_v7.0.401-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "ca-certificates"
       }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.aarch64",
+      "evra": "0.1.7-22.fc40.aarch64",
       "metadata": {
         "sourcerpm": "catatonit"
       }
     },
     "chrony": {
-      "evra": "4.5-1.fc39.aarch64",
+      "evra": "4.5-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "chrony"
       }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.aarch64",
+      "evra": "7.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cifs-utils"
       }
     },
-    "cirrus-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "clevis": {
-      "evra": "20-1.fc39.aarch64",
+      "evra": "20-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "20-1.fc39.aarch64",
+      "evra": "20-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "20-1.fc39.aarch64",
+      "evra": "20-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
+    "clevis-pin-tpm2": {
+      "evra": "0.5.3-5.fc40.aarch64",
+      "metadata": {
+        "sourcerpm": "clevis-pin-tpm2"
+      }
+    },
     "clevis-systemd": {
-      "evra": "20-1.fc39.aarch64",
+      "evra": "20-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch",
+      "evra": "0.33-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "cloud-utils"
       }
     },
     "composefs": {
-      "evra": "1.0.3-1.fc39.aarch64",
+      "evra": "1.0.3-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "composefs-libs": {
-      "evra": "1.0.3-1.fc39.aarch64",
+      "evra": "1.0.3-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "conmon": {
-      "evra": "2:2.1.10-1.fc39.aarch64",
+      "evra": "2:2.1.10-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "conmon"
       }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.23-2.fc39.aarch64",
+      "evra": "1.6.23-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "containerd"
       }
     },
-    "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "containernetworking-plugins"
-      }
-    },
     "containers-common": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc39.aarch64",
+      "evra": "0.21.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc39.aarch64",
+      "evra": "0.21.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreutils": {
-      "evra": "9.3-5.fc39.aarch64",
+      "evra": "9.4-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-5.fc39.aarch64",
+      "evra": "9.4-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.aarch64",
+      "evra": "2.15-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cpio"
       }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.aarch64",
+      "evra": "2.9.11-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cracklib"
       }
     },
     "criu": {
-      "evra": "3.19-2.fc39.aarch64",
+      "evra": "3.19-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.19-2.fc39.aarch64",
+      "evra": "3.19-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc39.aarch64",
+      "evra": "1.14.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.4-1.fc39.aarch64",
+      "evra": "1.14.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crypto-policies": {
-      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
+      "evra": "20240201-2.git9f501f3.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.aarch64",
+      "evra": "2.7.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.aarch64",
+      "evra": "2.7.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "curl": {
-      "evra": "8.2.1-4.fc39.aarch64",
+      "evra": "8.6.0-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.aarch64",
+      "evra": "2.1.28-19.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.aarch64",
+      "evra": "2.1.28-19.fc40.aarch64",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.aarch64",
+      "evra": "1:1.14.10-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-broker": {
-      "evra": "35-2.fc39.aarch64",
+      "evra": "36-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch",
+      "evra": "1:1.14.10-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.aarch64",
+      "evra": "1:1.14.10-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "device-mapper": {
-      "evra": "1.02.197-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.197-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.197-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.197-1.fc39.aarch64",
+      "evra": "1.02.197-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.aarch64",
+      "evra": "0.9.7-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.aarch64",
+      "evra": "0.9.7-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.12-1.fc39.aarch64",
+      "evra": "1.0.12-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.aarch64",
+      "evra": "3.10-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "diffutils"
       }
     },
     "dnsmasq": {
-      "evra": "2.90-1.fc39.aarch64",
+      "evra": "2.90-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.aarch64",
+      "evra": "4.2-11.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dosfstools"
       }
     },
     "dracut": {
-      "evra": "059-16.fc39.aarch64",
+      "evra": "060-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.aarch64",
+      "evra": "060-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.aarch64",
+      "evra": "060-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.aarch64",
+      "evra": "2.7.0-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "duktape"
       }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.aarch64",
+      "evra": "1.47.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.aarch64",
+      "evra": "1.47.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "efi-filesystem": {
-      "evra": "5-9.fc39.noarch",
+      "evra": "5-11.fc40.noarch",
       "metadata": {
         "sourcerpm": "efi-rpm-macros"
       }
     },
     "efibootmgr": {
-      "evra": "18-4.fc39.aarch64",
+      "evra": "18-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "efibootmgr"
       }
     },
     "efivar-libs": {
-      "evra": "39-1.fc39.aarch64",
+      "evra": "39-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "efivar"
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.191-2.fc39.noarch",
+      "evra": "0.191-4.fc40.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.191-2.fc39.aarch64",
+      "evra": "0.191-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.191-2.fc39.aarch64",
+      "evra": "0.191-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "ethtool": {
-      "evra": "2:6.7-1.fc39.aarch64",
+      "evra": "2:6.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ethtool"
       }
     },
     "expat": {
-      "evra": "2.6.2-1.fc39.aarch64",
+      "evra": "2.6.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "expat"
       }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-release-common": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "file": {
-      "evra": "5.44-5.fc39.aarch64",
+      "evra": "5.45-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.aarch64",
+      "evra": "5.45-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.aarch64",
+      "evra": "3.18-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "filesystem"
       }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.aarch64",
+      "evra": "1:4.9.0-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "findutils"
       }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.aarch64",
+      "evra": "1.15.8-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "flatpak"
       }
     },
     "fmt": {
-      "evra": "10.0.0-3.fc39.aarch64",
+      "evra": "10.2.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fmt"
       }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.aarch64",
+      "evra": "0.6.1-10.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fstrm"
       }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.aarch64",
+      "evra": "2.9.9-21.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.aarch64",
+      "evra": "3.16.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.aarch64",
+      "evra": "2.9.9-21.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.13-1.fc39.aarch64",
+      "evra": "1.13-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-9.fc39.aarch64",
+      "evra": "3.7.3-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.aarch64",
+      "evra": "3.16.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.aarch64",
+      "evra": "3.16.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc39.aarch64",
+      "evra": "1.9.16-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.aarch64",
+      "evra": "5.3.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gawk"
       }
     },
+    "gdbm": {
+      "evra": "1:1.23-6.fc40.aarch64",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
+    },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.aarch64",
+      "evra": "1:1.23-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gdbm"
       }
     },
     "gdisk": {
-      "evra": "1.0.10-1.fc39.aarch64",
+      "evra": "1.0.10-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gdisk"
       }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.aarch64",
+      "evra": "0.22.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.aarch64",
+      "evra": "0.22.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.aarch64",
+      "evra": "0.22.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc39.aarch64",
+      "evra": "2.44.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
     },
     "glib2": {
-      "evra": "2.78.3-1.fc39.aarch64",
+      "evra": "2.80.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glib2"
       }
     },
     "glibc": {
-      "evra": "2.38-18.fc39.aarch64",
+      "evra": "2.39-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-18.fc39.aarch64",
+      "evra": "2.39-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-18.fc39.aarch64",
+      "evra": "2.39-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-18.fc39.aarch64",
+      "evra": "2.39-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.aarch64",
+      "evra": "1:6.2.1-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gmp"
       }
     },
     "gnupg2": {
-      "evra": "2.4.4-1.fc39.aarch64",
+      "evra": "2.4.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
     },
     "gnutls": {
-      "evra": "3.8.5-1.fc39.aarch64",
+      "evra": "3.8.5-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc39.noarch",
+      "evra": "20240307.00-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "google-compute-engine-guest-configs"
       }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.aarch64",
+      "evra": "1.23.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gpgme"
       }
     },
     "grep": {
-      "evra": "3.11-3.fc39.aarch64",
+      "evra": "3.11-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grep"
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-118.fc39.noarch",
+      "evra": "1:2.06-119.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-118.fc39.aarch64",
+      "evra": "1:2.06-119.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-118.fc39.aarch64",
+      "evra": "1:2.06-119.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-118.fc39.aarch64",
+      "evra": "1:2.06-119.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.3-1.fc39.aarch64",
+      "evra": "6:0.7.3-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.aarch64",
+      "evra": "1.13-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gzip"
       }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.aarch64",
+      "evra": "3.23-12.fc40.aarch64",
       "metadata": {
         "sourcerpm": "hostname"
       }
     },
     "ignition": {
-      "evra": "2.18.0-1.fc39.aarch64",
+      "evra": "2.18.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ignition"
       }
     },
     "inih": {
-      "evra": "58-1.fc39.aarch64",
+      "evra": "58-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "inih"
       }
     },
-    "intel-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.aarch64",
+      "evra": "1.0.3-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ipcalc"
       }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.aarch64",
+      "evra": "6.7.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.aarch64",
+      "evra": "6.7.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.aarch64",
+      "evra": "1.8.10-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.aarch64",
+      "evra": "1.8.10-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.aarch64",
+      "evra": "1.8.10-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.aarch64",
+      "evra": "1.8.10-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch",
+      "evra": "1.8.10-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.aarch64",
+      "evra": "1.8.10-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.aarch64",
+      "evra": "20240117-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iputils"
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.aarch64",
+      "evra": "2:1.9.2-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64",
+      "evra": "6.2.1.9-20.gita65a472.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.aarch64",
+      "evra": "6.2.1.9-20.gita65a472.fc40.aarch64",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.aarch64",
+      "evra": "0.101-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "isns-utils"
       }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.aarch64",
+      "evra": "2.13.1-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jansson"
       }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.aarch64",
+      "evra": "5.3.0-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jemalloc"
       }
     },
     "jose": {
-      "evra": "13-1.fc39.aarch64",
+      "evra": "13-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "jq": {
-      "evra": "1.6-17.fc39.aarch64",
+      "evra": "1.7.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jq"
       }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.aarch64",
+      "evra": "0.17-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "json-c"
       }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.aarch64",
+      "evra": "1.8.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "json-glib"
       }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.aarch64",
+      "evra": "2.6.4-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kernel": {
-      "evra": "6.8.6-200.fc39.aarch64",
+      "evra": "6.8.7-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.6-200.fc39.aarch64",
+      "evra": "6.8.7-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.6-200.fc39.aarch64",
+      "evra": "6.8.7-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.6-200.fc39.aarch64",
+      "evra": "6.8.7-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-4.fc39.aarch64",
+      "evra": "2.0.28-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
     },
     "keyutils": {
-      "evra": "1.6.3-1.fc39.aarch64",
+      "evra": "1.6.3-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.3-1.fc39.aarch64",
+      "evra": "1.6.3-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "kmod": {
-      "evra": "30-6.fc39.aarch64",
+      "evra": "31-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.aarch64",
+      "evra": "31-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.aarch64",
+      "evra": "0.9.7-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-3.fc39.aarch64",
+      "evra": "1.21.2-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "krb5"
       }
     },
     "less": {
-      "evra": "633-2.fc39.aarch64",
+      "evra": "643-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "less"
       }
     },
     "libacl": {
-      "evra": "2.3.1-9.fc39.aarch64",
+      "evra": "2.3.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.aarch64",
+      "evra": "0.3.111-19.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libaio"
       }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.aarch64",
+      "evra": "3.7.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
-    "libargon2": {
-      "evra": "20190702-3.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "argon2"
-      }
-    },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.aarch64",
+      "evra": "2.5.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libassuan"
       }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.aarch64",
+      "evra": "2.5.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.aarch64",
+      "evra": "0.1.1-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libblkid": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.aarch64",
+      "evra": "2:1.2.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libbpf"
       }
     },
     "libbsd": {
-      "evra": "0.12.2-1.fc39.aarch64",
+      "evra": "0.12.2-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libbsd"
       }
     },
     "libcap": {
-      "evra": "2.48-9.fc39.aarch64",
+      "evra": "2.69-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libcap"
       }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.aarch64",
+      "evra": "0.8.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libcap-ng"
       }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.aarch64",
+      "evra": "0.11.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libcbor"
       }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.aarch64",
+      "evra": "0.7.0-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.aarch64",
+      "evra": "1.47.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-4.fc39.aarch64",
+      "evra": "8.6.0-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.aarch64",
+      "evra": "0.14-29.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libdaemon"
       }
     },
-    "libdb": {
-      "evra": "5.3.28-56.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "libdb"
-      }
-    },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.aarch64",
+      "evra": "0.5.0-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libeconf": {
-      "evra": "0.5.2-2.fc39.aarch64",
+      "evra": "0.6.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libeconf"
       }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.aarch64",
+      "evra": "3.1-50.20230828cvs.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libedit"
       }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.aarch64",
+      "evra": "2.1.12-12.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libevent"
       }
     },
     "libfdisk": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.aarch64",
+      "evra": "3.4.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libffi"
       }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.aarch64",
+      "evra": "1.14.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libfido2"
       }
     },
     "libgcc": {
-      "evra": "13.2.1-7.fc39.aarch64",
+      "evra": "14.0.1-0.15.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.aarch64",
+      "evra": "1.10.3-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgcrypt"
       }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.aarch64",
+      "evra": "1.48-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
     },
     "libgudev": {
-      "evra": "238-2.fc39.aarch64",
+      "evra": "238-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgudev"
       }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.aarch64",
+      "evra": "0.4.8-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgusb"
       }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.aarch64",
+      "evra": "48.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rdma-core"
       }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.aarch64",
+      "evra": "74.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "icu"
       }
     },
     "libidn2": {
-      "evra": "2.3.7-1.fc39.aarch64",
+      "evra": "2.3.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libidn2"
       }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.aarch64",
+      "evra": "1.3.1-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libjcat": {
-      "evra": "0.2.1-1.fc39.aarch64",
+      "evra": "0.2.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libjcat"
       }
     },
     "libjose": {
-      "evra": "13-1.fc39.aarch64",
+      "evra": "13-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.aarch64",
+      "evra": "1.4.0-10.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.aarch64",
+      "evra": "1.4.0-10.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.aarch64",
+      "evra": "1.6.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libksba"
       }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.aarch64",
+      "evra": "2.9.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libldb"
       }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.aarch64",
+      "evra": "9-22.fc40.aarch64",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "libmaxminddb": {
-      "evra": "1.9.1-1.fc39.aarch64",
+      "evra": "1.9.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.aarch64",
+      "evra": "1.1.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libmd"
       }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.aarch64",
+      "evra": "1.0.5-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libmnl"
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.aarch64",
+      "evra": "2.15.0-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
     },
     "libmount": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.aarch64",
+      "evra": "1.8-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libndp"
       }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.aarch64",
+      "evra": "1.3-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnet"
       }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.aarch64",
+      "evra": "1.0.9-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnetfilter_conntrack"
       }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.aarch64",
+      "evra": "1.0.1-27.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnfnetlink"
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc6.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.aarch64",
+      "evra": "1.2.6-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnftnl"
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-5.fc39.aarch64",
+      "evra": "1.59.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
     },
     "libnl3": {
-      "evra": "3.9.0-1.fc39.aarch64",
+      "evra": "3.9.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.9.0-1.fc39.aarch64",
+      "evra": "3.9.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.aarch64",
+      "evra": "2.0.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnsl2"
       }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.aarch64",
+      "evra": "1.8-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libnvme"
       }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.aarch64",
+      "evra": "0.2.1-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.aarch64",
+      "evra": "14:1.10.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libpcap"
       }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.aarch64",
+      "evra": "2.1.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.aarch64",
+      "evra": "0.21.5-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libpsl"
       }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.aarch64",
+      "evra": "1.4.5-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libpwquality"
       }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.aarch64",
+      "evra": "0.1.5-56.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "librepo": {
-      "evra": "1.17.1-1.fc39.aarch64",
+      "evra": "1.17.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "librepo"
       }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch",
+      "evra": "2.17.15-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "libreport"
       }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.aarch64",
+      "evra": "2.5.3-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libseccomp"
       }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.aarch64",
+      "evra": "3.6-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.aarch64",
+      "evra": "3.6-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.aarch64",
+      "evra": "3.6-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libsemanage"
       }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.aarch64",
+      "evra": "3.6-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libsepol"
       }
     },
-    "libsigsegv": {
-      "evra": "2.14-5.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "libsigsegv"
-      }
-    },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.aarch64",
+      "evra": "4.7.0-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libslirp"
       }
     },
     "libsmartcols": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.6-1.fc39.aarch64",
+      "evra": "2:4.20.0-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc39.aarch64",
+      "evra": "0.7.28-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.aarch64",
+      "evra": "1.47.0-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-7.fc39.aarch64",
+      "evra": "14.0.1-0.15.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.aarch64",
+      "evra": "2.4.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtalloc"
       }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.aarch64",
+      "evra": "4.19.0-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtasn1"
       }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.aarch64",
+      "evra": "1.4.10-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtdb"
       }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.aarch64",
+      "evra": "1.32-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.aarch64",
+      "evra": "0.16.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtevent"
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-1.rc3.fc39.aarch64",
+      "evra": "1.3.4-1.rc3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.aarch64",
+      "evra": "2.4.7-10.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libtool"
       }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.aarch64",
+      "evra": "1.1-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libunistring"
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc39.aarch64",
+      "evra": "1.0.27-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
     },
-    "libuser": {
-      "evra": "0.64-4.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "libuser"
-      }
-    },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.aarch64",
+      "evra": "1.2.1-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libutempter"
       }
     },
     "libuuid": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libuv": {
-      "evra": "1:1.48.0-1.fc39.aarch64",
+      "evra": "1:1.48.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libuv"
       }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.aarch64",
+      "evra": "0.3.2-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libverto"
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.6-1.fc39.aarch64",
+      "evra": "2:4.20.0-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.aarch64",
+      "evra": "4.4.36-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxcrypt"
       }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.aarch64",
+      "evra": "2.12.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxml2"
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc39.aarch64",
+      "evra": "0.3.18-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.aarch64",
+      "evra": "0.2.5-14.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libyaml"
       }
     },
     "libzstd": {
-      "evra": "1.5.6-1.fc39.aarch64",
+      "evra": "1.5.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "zstd"
       }
     },
-    "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "linux-atm"
-      }
-    },
     "linux-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.32-1.fc39.aarch64",
+      "evra": "0.9.32-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lmdb"
       }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.aarch64",
+      "evra": "3.21.0-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "logrotate"
       }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.aarch64",
+      "evra": "4.98.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lsof"
       }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.aarch64",
+      "evra": "5.4.6-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lua"
       }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.aarch64",
+      "evra": "9-22.fc40.aarch64",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "lvm2": {
-      "evra": "2.03.23-1.fc39.aarch64",
+      "evra": "2.03.23-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.23-1.fc39.aarch64",
+      "evra": "2.03.23-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.aarch64",
+      "evra": "1.9.4-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lz4"
       }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.aarch64",
+      "evra": "2.10-12.fc40.aarch64",
       "metadata": {
         "sourcerpm": "lzo"
       }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.aarch64",
+      "evra": "4.2-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "mdadm"
       }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.aarch64",
+      "evra": "24.0.5-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "moby-engine"
       }
     },
     "mokutil": {
-      "evra": "2:0.6.0-7.fc39.aarch64",
+      "evra": "2:0.7.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "mokutil"
       }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.aarch64",
+      "evra": "4.2.1-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "mpfr"
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nano": {
-      "evra": "7.2-4.fc39.aarch64",
+      "evra": "7.2-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch",
+      "evra": "7.2-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.1.aarch64",
+      "evra": "6.4-12.20240127.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.1.noarch",
+      "evra": "6.4-12.20240127.fc40.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.1.aarch64",
+      "evra": "6.4-12.20240127.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.aarch64",
+      "evra": "2.0-0.69.20160912git.fc40.aarch64",
       "metadata": {
         "sourcerpm": "net-tools"
       }
     },
     "netavark": {
-      "evra": "1.10.3-1.fc39.aarch64",
+      "evra": "1.10.3-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "netavark"
       }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.aarch64",
+      "evra": "3.9.1-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nettle"
       }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.aarch64",
+      "evra": "0.52.24-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "newt"
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc6.fc39.aarch64",
+      "evra": "1:2.6.4-0.rc6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.aarch64",
+      "evra": "1:1.0.9-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nftables"
       }
     },
     "nmstate": {
-      "evra": "2.2.26-2.fc39.aarch64",
+      "evra": "2.2.26-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
     },
     "npth": {
-      "evra": "1.6-14.fc39.aarch64",
+      "evra": "1.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "npth"
       }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.aarch64",
+      "evra": "2.23.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nss-altfiles"
       }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.aarch64",
+      "evra": "2.0.16-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "numactl"
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.aarch64",
+      "evra": "2.8-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nvme-cli"
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.aarch64",
+      "evra": "6.9.9-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "oniguruma"
       }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.aarch64",
+      "evra": "2.6.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "openldap"
       }
     },
     "openssh": {
-      "evra": "9.3p1-10.fc39.aarch64",
+      "evra": "9.6p1-1.fc40.2.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-10.fc39.aarch64",
+      "evra": "9.6p1-1.fc40.2.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-10.fc39.aarch64",
+      "evra": "9.6p1-1.fc40.2.aarch64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.aarch64",
+      "evra": "1:3.2.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.aarch64",
+      "evra": "1:3.2.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.aarch64",
+      "evra": "1.81-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "os-prober"
       }
     },
     "ostree": {
-      "evra": "2024.5-1.fc39.aarch64",
+      "evra": "2024.5-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.5-1.fc39.aarch64",
+      "evra": "2024.5-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.aarch64",
+      "evra": "0.25.3-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.aarch64",
+      "evra": "0.25.3-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.aarch64",
+      "evra": "1.6.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.aarch64",
+      "evra": "1.6.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
-    "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc39.aarch64",
+    "passim-libs": {
+      "evra": "0.1.5-3.fc40.aarch64",
       "metadata": {
-        "sourcerpm": "passt"
+        "sourcerpm": "passim"
       }
     },
-    "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
+    "passt": {
+      "evra": "0^20240326.g4988e2b-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
-    "passwd": {
-      "evra": "0.80-15.fc39.aarch64",
+    "passt-selinux": {
+      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
       "metadata": {
-        "sourcerpm": "passwd"
+        "sourcerpm": "passt"
       }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.aarch64",
+      "evra": "10.42-2.fc40.2.aarch64",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch",
+      "evra": "10.42-2.fc40.2.noarch",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.aarch64",
+      "evra": "2.8-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pigz"
       }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.aarch64",
+      "evra": "2.1.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch",
+      "evra": "2.1.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.aarch64",
+      "evra": "2.1.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "podman": {
-      "evra": "5:4.9.4-1.fc39.aarch64",
-      "metadata": {
-        "sourcerpm": "podman"
-      }
-    },
-    "podman-plugins": {
-      "evra": "5:4.9.4-1.fc39.aarch64",
+      "evra": "5:5.0.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.aarch64",
+      "evra": "3.6-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "policycoreutils"
       }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.aarch64",
+      "evra": "124-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.aarch64",
+      "evra": "124-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.aarch64",
+      "evra": "0.1-28.fc40.aarch64",
       "metadata": {
         "sourcerpm": "polkit-pkla-compat"
       }
     },
     "popt": {
-      "evra": "1.19-3.fc39.aarch64",
+      "evra": "1.19-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "popt"
       }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.aarch64",
+      "evra": "4.0.4-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "procps-ng"
       }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.aarch64",
+      "evra": "1.5.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "protobuf-c"
       }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.aarch64",
+      "evra": "23.6-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "psmisc"
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20240107-1.fc39.noarch",
+      "evra": "20240107-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-5.fc39.aarch64",
+      "evra": "2:8.2.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "qemu"
       }
     },
     "readline": {
-      "evra": "8.2-6.fc39.aarch64",
+      "evra": "8.2-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "readline"
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc3.fc39.aarch64",
+      "evra": "1.2.6-4.rc3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
     },
     "rpm": {
-      "evra": "4.19.1.1-1.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1.1-1.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-6.fc39.aarch64",
+      "evra": "2024.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-6.fc39.aarch64",
+      "evra": "2024.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1.1-1.fc39.aarch64",
+      "evra": "4.19.1.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-1.fc39.aarch64",
+      "evra": "1.6.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
     },
     "rsync": {
-      "evra": "3.3.0-1.fc39.aarch64",
+      "evra": "3.3.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rsync"
       }
     },
     "runc": {
-      "evra": "2:1.1.12-1.fc39.aarch64",
+      "evra": "2:1.1.12-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "runc"
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.6-1.fc39.aarch64",
+      "evra": "2:4.20.0-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.6-1.fc39.noarch",
+      "evra": "2:4.20.0-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.6-1.fc39.aarch64",
+      "evra": "2:4.20.0-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "sed": {
-      "evra": "4.8-14.fc39.aarch64",
+      "evra": "4.9-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sed"
       }
     },
     "selinux-policy": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch",
+      "evra": "2.14.5-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "setup"
       }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.aarch64",
+      "evra": "1.48-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.aarch64",
+      "evra": "1.48-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.aarch64",
+      "evra": "2:4.15.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.aarch64",
+      "evra": "2:4.15.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.aarch64",
+      "evra": "2.3-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2305,313 +2263,313 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.15.0-1.fc39.aarch64",
+      "evra": "1:1.15.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.aarch64",
+      "evra": "2.3.3-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "slang"
       }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.aarch64",
+      "evra": "1.2.2-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "slirp4netns"
       }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.aarch64",
+      "evra": "1.1.10-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "snappy"
       }
     },
     "socat": {
-      "evra": "1.8.0.0-2.fc39.aarch64",
+      "evra": "1.8.0.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "socat"
       }
     },
     "spdlog": {
-      "evra": "1.12.0-2.fc39.aarch64",
+      "evra": "1.12.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "spdlog"
       }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.aarch64",
+      "evra": "3.45.1-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sqlite"
       }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.aarch64",
+      "evra": "4.6.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "squashfs-tools"
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.aarch64",
+      "evra": "0.1.4-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-1.fc39.aarch64",
+      "evra": "2.9.4-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc39.aarch64",
+      "evra": "1.19.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "stalld"
       }
     },
     "sudo": {
-      "evra": "1.9.15-1.p5.fc39.aarch64",
+      "evra": "1.9.15-2.p5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sudo"
       }
     },
     "systemd": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.10-1.fc39.aarch64",
+      "evra": "255.4-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.aarch64",
+      "evra": "2:1.35-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tar"
       }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.aarch64",
+      "evra": "1.32-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-4.fc39.aarch64",
+      "evra": "0.0.99.5-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.aarch64",
+      "evra": "5.6-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-6.fc39.aarch64",
+      "evra": "4.0.1-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-6.fc39.aarch64",
+      "evra": "4.0.1-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tzdata": {
-      "evra": "2024a-2.fc39.noarch",
+      "evra": "2024a-5.fc40.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.aarch64",
+      "evra": "0.14.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "userspace-rcu"
       }
     },
     "util-linux": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.4-1.fc39.aarch64",
+      "evra": "2.40-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc39.aarch64",
+      "evra": "2:9.1.309-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "wasmedge-rt": {
-      "evra": "0.13.5-1.fc39.aarch64",
+      "evra": "0.13.5-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "wasmedge"
       }
     },
     "which": {
-      "evra": "2.21-40.fc39.aarch64",
+      "evra": "2.21-41.fc40.aarch64",
       "metadata": {
         "sourcerpm": "which"
       }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.aarch64",
+      "evra": "1.0.20210914-6.fc40.aarch64",
       "metadata": {
         "sourcerpm": "wireguard-tools"
       }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.aarch64",
+      "evra": "6.5.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "xfsprogs"
       }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.aarch64",
+      "evra": "0.8.2-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "xxhash"
       }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.aarch64",
+      "evra": "1:5.4.6-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.aarch64",
+      "evra": "1:5.4.6-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.aarch64",
+      "evra": "2.1.0-23.fc40.aarch64",
       "metadata": {
         "sourcerpm": "yajl"
       }
     },
     "zchunk-libs": {
-      "evra": "1.4.0-1.fc39.aarch64",
+      "evra": "1.4.0-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "zchunk"
       }
     },
     "zincati": {
-      "evra": "0.0.27-1.fc39.aarch64",
+      "evra": "0.0.27-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
     },
-    "zlib": {
-      "evra": "1.2.13-4.fc39.aarch64",
+    "zlib-ng-compat": {
+      "evra": "2.1.6-2.fc40.aarch64",
       "metadata": {
-        "sourcerpm": "zlib"
+        "sourcerpm": "zlib-ng"
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.aarch64",
+      "evra": "1.1.2-9.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
     },
     "zstd": {
-      "evra": "1.5.6-1.fc39.aarch64",
+      "evra": "1.5.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2620,14 +2578,17 @@
   "metadata": {
     "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-11-01T00:12:29Z"
+      "fedora-candidate-compose": {
+        "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T15:19:43Z"
+        "generated": "2024-04-21T12:48:11Z"
+      },
+      "fedora-next": {
+        "generated": "2024-04-19T08:53:27Z"
       },
-      "fedora-updates": {
-        "generated": "2024-04-21T01:11:35Z"
+      "fedora-next-updates": {
+        "generated": "2024-04-21T01:00:16Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 62cfbe5a1d..69507e80d8 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,4 +8,22 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages: {}
+packages:
+  libbsd:
+    evr: 0.12.2-3.fc40
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-86fbbe4bc7
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
+      type: fast-track
+  rpm-ostree:
+    evr: 2024.5-2.fc40
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-b59ee8264e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
+      type: fast-track
+  rpm-ostree-libs:
+    evr: 2024.5-2.fc40
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-b59ee8264e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
+      type: fast-track
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 85261aa18b..35cd9d4b7f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1,2605 +1,2563 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "evra": "1:1.46.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "evra": "1:1.46.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "evra": "1:1.46.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "evra": "1:1.46.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.ppc64le",
+      "evra": "1:1.46.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch",
+      "evra": "2.10.0.8-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
     },
     "aardvark-dns": {
-      "evra": "1.10.0-1.fc39.ppc64le",
+      "evra": "1.10.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
     },
     "acl": {
-      "evra": "2.3.1-9.fc39.ppc64le",
+      "evra": "2.3.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.ppc64le",
+      "evra": "0.9.2-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "adcli"
       }
     },
     "afterburn": {
-      "evra": "5.5.1-1.fc39.ppc64le",
+      "evra": "5.5.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-1.fc39.ppc64le",
+      "evra": "5.5.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.26-1.fc39.ppc64le",
+      "evra": "1.26-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
-    "amd-ucode-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.ppc64le",
+      "evra": "2.5.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "audit": {
-      "evra": "3.1.2-8.fc39.ppc64le",
+      "evra": "4.0.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-8.fc39.ppc64le",
+      "evra": "4.0.1-1.fc40.ppc64le",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
+    },
+    "audit-rules": {
+      "evra": "4.0.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.ppc64le",
+      "evra": "1.5.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.ppc64le",
+      "evra": "1.5.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.ppc64le",
+      "evra": "0.8-26.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "avahi"
       }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch",
+      "evra": "11-20.fc40.noarch",
       "metadata": {
         "sourcerpm": "basesystem"
       }
     },
     "bash": {
-      "evra": "5.2.26-1.fc39.ppc64le",
+      "evra": "5.2.26-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bash"
       }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch",
+      "evra": "0.4.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "shell-color-prompt"
       }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch",
+      "evra": "1:2.11-14.fc40.noarch",
       "metadata": {
         "sourcerpm": "bash-completion"
       }
     },
     "bc": {
-      "evra": "1.07.1-19.fc39.ppc64le",
+      "evra": "1.07.1-21.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bc"
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc39.ppc64le",
+      "evra": "32:9.18.24-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc39.noarch",
+      "evra": "32:9.18.24-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc39.ppc64le",
+      "evra": "32:9.18.24-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bootupd": {
-      "evra": "0.2.18-2.fc39.ppc64le",
+      "evra": "0.2.18-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.ppc64le",
+      "evra": "3.7.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc39.ppc64le",
+      "evra": "6.8-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.ppc64le",
+      "evra": "0.8.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bubblewrap"
       }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.ppc64le",
+      "evra": "1.0.8-18.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.ppc64le",
+      "evra": "1.0.8-18.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "c-ares": {
-      "evra": "1.28.1-1.fc39.ppc64le",
+      "evra": "1.28.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "c-ares"
       }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "evra": "2023.2.62_v7.0.401-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "ca-certificates"
       }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.ppc64le",
+      "evra": "0.1.7-22.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "catatonit"
       }
     },
     "chrony": {
-      "evra": "4.5-1.fc39.ppc64le",
+      "evra": "4.5-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "chrony"
       }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.ppc64le",
+      "evra": "7.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cifs-utils"
       }
     },
-    "cirrus-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "clevis": {
-      "evra": "20-1.fc39.ppc64le",
+      "evra": "20-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "20-1.fc39.ppc64le",
+      "evra": "20-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "20-1.fc39.ppc64le",
+      "evra": "20-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
+    "clevis-pin-tpm2": {
+      "evra": "0.5.3-5.fc40.ppc64le",
+      "metadata": {
+        "sourcerpm": "clevis-pin-tpm2"
+      }
+    },
     "clevis-systemd": {
-      "evra": "20-1.fc39.ppc64le",
+      "evra": "20-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch",
+      "evra": "0.33-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "cloud-utils"
       }
     },
     "composefs": {
-      "evra": "1.0.3-1.fc39.ppc64le",
+      "evra": "1.0.3-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "composefs-libs": {
-      "evra": "1.0.3-1.fc39.ppc64le",
+      "evra": "1.0.3-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "conmon": {
-      "evra": "2:2.1.10-1.fc39.ppc64le",
+      "evra": "2:2.1.10-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "conmon"
       }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.23-2.fc39.ppc64le",
+      "evra": "1.6.23-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "containerd"
       }
     },
-    "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "containernetworking-plugins"
-      }
-    },
     "containers-common": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc39.ppc64le",
+      "evra": "0.21.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc39.ppc64le",
+      "evra": "0.21.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreutils": {
-      "evra": "9.3-5.fc39.ppc64le",
+      "evra": "9.4-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-5.fc39.ppc64le",
+      "evra": "9.4-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.ppc64le",
+      "evra": "2.15-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cpio"
       }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.ppc64le",
+      "evra": "2.9.11-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cracklib"
       }
     },
     "criu": {
-      "evra": "3.19-2.fc39.ppc64le",
+      "evra": "3.19-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.19-2.fc39.ppc64le",
+      "evra": "3.19-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc39.ppc64le",
+      "evra": "1.14.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crypto-policies": {
-      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
+      "evra": "20240201-2.git9f501f3.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.ppc64le",
+      "evra": "2.7.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.ppc64le",
+      "evra": "2.7.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "curl": {
-      "evra": "8.2.1-4.fc39.ppc64le",
+      "evra": "8.6.0-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.ppc64le",
+      "evra": "2.1.28-19.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.ppc64le",
+      "evra": "2.1.28-19.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.ppc64le",
+      "evra": "1:1.14.10-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-broker": {
-      "evra": "35-2.fc39.ppc64le",
+      "evra": "36-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch",
+      "evra": "1:1.14.10-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.ppc64le",
+      "evra": "1:1.14.10-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "device-mapper": {
-      "evra": "1.02.197-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.197-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.197-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.197-1.fc39.ppc64le",
+      "evra": "1.02.197-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.ppc64le",
+      "evra": "0.9.7-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.ppc64le",
+      "evra": "0.9.7-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.12-1.fc39.ppc64le",
+      "evra": "1.0.12-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.ppc64le",
+      "evra": "3.10-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "diffutils"
       }
     },
     "dnsmasq": {
-      "evra": "2.90-1.fc39.ppc64le",
+      "evra": "2.90-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.ppc64le",
+      "evra": "4.2-11.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dosfstools"
       }
     },
     "dracut": {
-      "evra": "059-16.fc39.ppc64le",
+      "evra": "060-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.ppc64le",
+      "evra": "060-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.ppc64le",
+      "evra": "060-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.ppc64le",
+      "evra": "2.7.0-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "duktape"
       }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.ppc64le",
+      "evra": "1.47.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.ppc64le",
+      "evra": "1.47.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.191-2.fc39.noarch",
+      "evra": "0.191-4.fc40.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.191-2.fc39.ppc64le",
+      "evra": "0.191-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.191-2.fc39.ppc64le",
+      "evra": "0.191-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "ethtool": {
-      "evra": "2:6.7-1.fc39.ppc64le",
+      "evra": "2:6.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ethtool"
       }
     },
     "expat": {
-      "evra": "2.6.2-1.fc39.ppc64le",
+      "evra": "2.6.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "expat"
       }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-release-common": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "file": {
-      "evra": "5.44-5.fc39.ppc64le",
+      "evra": "5.45-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.ppc64le",
+      "evra": "5.45-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.ppc64le",
+      "evra": "3.18-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "filesystem"
       }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.ppc64le",
+      "evra": "1:4.9.0-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "findutils"
       }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.ppc64le",
+      "evra": "1.15.8-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "flatpak"
       }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.ppc64le",
+      "evra": "0.6.1-10.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fstrm"
       }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.ppc64le",
+      "evra": "2.9.9-21.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.ppc64le",
+      "evra": "3.16.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.ppc64le",
+      "evra": "2.9.9-21.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.13-1.fc39.ppc64le",
+      "evra": "1.13-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-9.fc39.ppc64le",
+      "evra": "3.7.3-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.ppc64le",
+      "evra": "3.16.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.ppc64le",
+      "evra": "3.16.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc39.ppc64le",
+      "evra": "1.9.16-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.ppc64le",
+      "evra": "5.3.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gawk"
       }
     },
+    "gdbm": {
+      "evra": "1:1.23-6.fc40.ppc64le",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
+    },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.ppc64le",
+      "evra": "1:1.23-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gdbm"
       }
     },
     "gdisk": {
-      "evra": "1.0.10-1.fc39.ppc64le",
+      "evra": "1.0.10-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gdisk"
       }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.ppc64le",
+      "evra": "0.22.5-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.ppc64le",
+      "evra": "0.22.5-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.ppc64le",
+      "evra": "0.22.5-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc39.ppc64le",
+      "evra": "2.44.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
     },
     "glib2": {
-      "evra": "2.78.3-1.fc39.ppc64le",
+      "evra": "2.80.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glib2"
       }
     },
     "glibc": {
-      "evra": "2.38-18.fc39.ppc64le",
+      "evra": "2.39-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-18.fc39.ppc64le",
+      "evra": "2.39-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-18.fc39.ppc64le",
+      "evra": "2.39-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-18.fc39.ppc64le",
+      "evra": "2.39-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.ppc64le",
+      "evra": "1:6.2.1-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gmp"
       }
     },
     "gnupg2": {
-      "evra": "2.4.4-1.fc39.ppc64le",
+      "evra": "2.4.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
     },
     "gnutls": {
-      "evra": "3.8.5-1.fc39.ppc64le",
+      "evra": "3.8.5-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gnutls"
       }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.ppc64le",
+      "evra": "1.23.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gpgme"
       }
     },
     "grep": {
-      "evra": "3.11-3.fc39.ppc64le",
+      "evra": "3.11-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grep"
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-118.fc39.noarch",
+      "evra": "1:2.06-119.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-118.fc39.ppc64le",
+      "evra": "1:2.06-119.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-118.fc39.noarch",
+      "evra": "1:2.06-119.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-118.fc39.ppc64le",
+      "evra": "1:2.06-119.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-118.fc39.ppc64le",
+      "evra": "1:2.06-119.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.3-1.fc39.ppc64le",
+      "evra": "6:0.7.3-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.ppc64le",
+      "evra": "1.13-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gzip"
       }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.ppc64le",
+      "evra": "3.23-12.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "hostname"
       }
     },
     "ignition": {
-      "evra": "2.18.0-1.fc39.ppc64le",
+      "evra": "2.18.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ignition"
       }
     },
     "inih": {
-      "evra": "58-1.fc39.ppc64le",
+      "evra": "58-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "inih"
       }
     },
-    "intel-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.ppc64le",
+      "evra": "1.0.3-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ipcalc"
       }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.ppc64le",
+      "evra": "6.7.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.ppc64le",
+      "evra": "6.7.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.ppc64le",
+      "evra": "1.8.10-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.ppc64le",
+      "evra": "1.8.10-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.ppc64le",
+      "evra": "1.8.10-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.ppc64le",
+      "evra": "1.8.10-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch",
+      "evra": "1.8.10-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.ppc64le",
+      "evra": "1.8.10-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.ppc64le",
+      "evra": "20240117-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iputils"
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.ppc64le",
+      "evra": "2:1.9.2-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le",
+      "evra": "6.2.1.9-20.gita65a472.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.ppc64le",
+      "evra": "6.2.1.9-20.gita65a472.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.ppc64le",
+      "evra": "0.101-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "isns-utils"
       }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.ppc64le",
+      "evra": "2.13.1-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jansson"
       }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.ppc64le",
+      "evra": "5.3.0-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jemalloc"
       }
     },
     "jose": {
-      "evra": "13-1.fc39.ppc64le",
+      "evra": "13-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "jq": {
-      "evra": "1.6-17.fc39.ppc64le",
+      "evra": "1.7.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jq"
       }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.ppc64le",
+      "evra": "0.17-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "json-c"
       }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.ppc64le",
+      "evra": "1.8.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "json-glib"
       }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.ppc64le",
+      "evra": "2.6.4-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kernel": {
-      "evra": "6.8.6-200.fc39.ppc64le",
+      "evra": "6.8.7-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.6-200.fc39.ppc64le",
+      "evra": "6.8.7-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.6-200.fc39.ppc64le",
+      "evra": "6.8.7-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.6-200.fc39.ppc64le",
+      "evra": "6.8.7-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-4.fc39.ppc64le",
+      "evra": "2.0.28-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
     },
     "keyutils": {
-      "evra": "1.6.3-1.fc39.ppc64le",
+      "evra": "1.6.3-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.3-1.fc39.ppc64le",
+      "evra": "1.6.3-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "kmod": {
-      "evra": "30-6.fc39.ppc64le",
+      "evra": "31-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.ppc64le",
+      "evra": "31-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.ppc64le",
+      "evra": "0.9.7-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-3.fc39.ppc64le",
+      "evra": "1.21.2-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "krb5"
       }
     },
     "less": {
-      "evra": "633-2.fc39.ppc64le",
+      "evra": "643-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "less"
       }
     },
     "libacl": {
-      "evra": "2.3.1-9.fc39.ppc64le",
+      "evra": "2.3.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.ppc64le",
+      "evra": "0.3.111-19.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libaio"
       }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.ppc64le",
+      "evra": "3.7.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
-    "libargon2": {
-      "evra": "20190702-3.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "argon2"
-      }
-    },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.ppc64le",
+      "evra": "2.5.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libassuan"
       }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.ppc64le",
+      "evra": "2.5.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.ppc64le",
+      "evra": "0.1.1-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libblkid": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.ppc64le",
+      "evra": "2:1.2.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libbpf"
       }
     },
     "libbsd": {
-      "evra": "0.12.2-1.fc39.ppc64le",
+      "evra": "0.12.2-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libbsd"
       }
     },
     "libcap": {
-      "evra": "2.48-9.fc39.ppc64le",
+      "evra": "2.69-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libcap"
       }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.ppc64le",
+      "evra": "0.8.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libcap-ng"
       }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.ppc64le",
+      "evra": "0.11.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libcbor"
       }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.ppc64le",
+      "evra": "0.7.0-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.ppc64le",
+      "evra": "1.47.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-4.fc39.ppc64le",
+      "evra": "8.6.0-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.ppc64le",
+      "evra": "0.14-29.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libdaemon"
       }
     },
-    "libdb": {
-      "evra": "5.3.28-56.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "libdb"
-      }
-    },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.ppc64le",
+      "evra": "0.5.0-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libeconf": {
-      "evra": "0.5.2-2.fc39.ppc64le",
+      "evra": "0.6.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libeconf"
       }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.ppc64le",
+      "evra": "3.1-50.20230828cvs.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libedit"
       }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.ppc64le",
+      "evra": "2.1.12-12.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libevent"
       }
     },
     "libfdisk": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.ppc64le",
+      "evra": "3.4.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libffi"
       }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.ppc64le",
+      "evra": "1.14.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libfido2"
       }
     },
     "libgcc": {
-      "evra": "13.2.1-7.fc39.ppc64le",
+      "evra": "14.0.1-0.15.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.ppc64le",
+      "evra": "1.10.3-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgcrypt"
       }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.ppc64le",
+      "evra": "1.48-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
     },
     "libgudev": {
-      "evra": "238-2.fc39.ppc64le",
+      "evra": "238-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgudev"
       }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.ppc64le",
+      "evra": "0.4.8-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgusb"
       }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.ppc64le",
+      "evra": "48.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rdma-core"
       }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.ppc64le",
+      "evra": "74.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "icu"
       }
     },
     "libidn2": {
-      "evra": "2.3.7-1.fc39.ppc64le",
+      "evra": "2.3.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libidn2"
       }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.ppc64le",
+      "evra": "1.3.1-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libjcat": {
-      "evra": "0.2.1-1.fc39.ppc64le",
+      "evra": "0.2.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libjcat"
       }
     },
     "libjose": {
-      "evra": "13-1.fc39.ppc64le",
+      "evra": "13-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.ppc64le",
+      "evra": "1.4.0-10.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.ppc64le",
+      "evra": "1.4.0-10.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.ppc64le",
+      "evra": "1.6.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libksba"
       }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.ppc64le",
+      "evra": "2.9.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libldb"
       }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.ppc64le",
+      "evra": "9-22.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "libmaxminddb": {
-      "evra": "1.9.1-1.fc39.ppc64le",
+      "evra": "1.9.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.ppc64le",
+      "evra": "1.1.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libmd"
       }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.ppc64le",
+      "evra": "1.0.5-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libmnl"
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.ppc64le",
+      "evra": "2.15.0-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
     },
     "libmount": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.ppc64le",
+      "evra": "1.8-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libndp"
       }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.ppc64le",
+      "evra": "1.3-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnet"
       }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.ppc64le",
+      "evra": "1.0.9-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnetfilter_conntrack"
       }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.ppc64le",
+      "evra": "1.0.1-27.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnfnetlink"
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc6.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.ppc64le",
+      "evra": "1.2.6-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnftnl"
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-5.fc39.ppc64le",
+      "evra": "1.59.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
     },
     "libnl3": {
-      "evra": "3.9.0-1.fc39.ppc64le",
+      "evra": "3.9.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.9.0-1.fc39.ppc64le",
+      "evra": "3.9.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.ppc64le",
+      "evra": "2.0.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnsl2"
       }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.ppc64le",
+      "evra": "1.8-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libnvme"
       }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.ppc64le",
+      "evra": "0.2.1-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.ppc64le",
+      "evra": "14:1.10.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libpcap"
       }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.ppc64le",
+      "evra": "2.1.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.ppc64le",
+      "evra": "0.21.5-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libpsl"
       }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.ppc64le",
+      "evra": "1.4.5-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libpwquality"
       }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.ppc64le",
+      "evra": "0.1.5-56.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "librepo": {
-      "evra": "1.17.1-1.fc39.ppc64le",
+      "evra": "1.17.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "librepo"
       }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch",
+      "evra": "2.17.15-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "libreport"
       }
     },
     "librtas": {
-      "evra": "2.0.4-3.fc39.ppc64le",
+      "evra": "2.0.5-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "librtas"
       }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.ppc64le",
+      "evra": "2.5.3-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libseccomp"
       }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.ppc64le",
+      "evra": "3.6-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.ppc64le",
+      "evra": "3.6-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.ppc64le",
+      "evra": "3.6-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libsemanage"
       }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.ppc64le",
+      "evra": "3.6-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libsepol"
       }
     },
     "libservicelog": {
-      "evra": "1.1.19-8.fc39.ppc64le",
+      "evra": "1.1.19-10.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libservicelog"
       }
     },
-    "libsigsegv": {
-      "evra": "2.14-5.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "libsigsegv"
-      }
-    },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.ppc64le",
+      "evra": "4.7.0-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libslirp"
       }
     },
     "libsmartcols": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.6-1.fc39.ppc64le",
+      "evra": "2:4.20.0-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc39.ppc64le",
+      "evra": "0.7.28-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libsolv"
       }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.ppc64le",
+      "evra": "1.47.0-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-7.fc39.ppc64le",
+      "evra": "14.0.1-0.15.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.ppc64le",
+      "evra": "2.4.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtalloc"
       }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.ppc64le",
+      "evra": "4.19.0-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtasn1"
       }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.ppc64le",
+      "evra": "1.4.10-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtdb"
       }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.ppc64le",
+      "evra": "1.32-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.ppc64le",
+      "evra": "0.16.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtevent"
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-1.rc3.fc39.ppc64le",
+      "evra": "1.3.4-1.rc3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.ppc64le",
+      "evra": "2.4.7-10.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libtool"
       }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.ppc64le",
+      "evra": "1.1-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libunistring"
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc39.ppc64le",
+      "evra": "1.0.27-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libusb1"
       }
     },
-    "libuser": {
-      "evra": "0.64-4.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "libuser"
-      }
-    },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.ppc64le",
+      "evra": "1.2.1-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libutempter"
       }
     },
     "libuuid": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libuv": {
-      "evra": "1:1.48.0-1.fc39.ppc64le",
+      "evra": "1:1.48.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libuv"
       }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.ppc64le",
+      "evra": "0.3.2-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libverto"
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.6-1.fc39.ppc64le",
+      "evra": "2:4.20.0-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.ppc64le",
+      "evra": "4.4.36-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxcrypt"
       }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.ppc64le",
+      "evra": "2.12.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxml2"
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc39.ppc64le",
+      "evra": "0.3.18-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.ppc64le",
+      "evra": "0.2.5-14.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libyaml"
       }
     },
     "libzstd": {
-      "evra": "1.5.6-1.fc39.ppc64le",
+      "evra": "1.5.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "zstd"
       }
     },
-    "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "linux-atm"
-      }
-    },
     "linux-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.32-1.fc39.ppc64le",
+      "evra": "0.9.32-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lmdb"
       }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.ppc64le",
+      "evra": "3.21.0-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "logrotate"
       }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.ppc64le",
+      "evra": "4.98.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lsof"
       }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.ppc64le",
+      "evra": "5.4.6-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lua"
       }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.ppc64le",
+      "evra": "9-22.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "lvm2": {
-      "evra": "2.03.23-1.fc39.ppc64le",
+      "evra": "2.03.23-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.23-1.fc39.ppc64le",
+      "evra": "2.03.23-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.ppc64le",
+      "evra": "1.9.4-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lz4"
       }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.ppc64le",
+      "evra": "2.10-12.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "lzo"
       }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.ppc64le",
+      "evra": "4.2-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "mdadm"
       }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.ppc64le",
+      "evra": "24.0.5-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "moby-engine"
       }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.ppc64le",
+      "evra": "4.2.1-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "mpfr"
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nano": {
-      "evra": "7.2-4.fc39.ppc64le",
+      "evra": "7.2-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch",
+      "evra": "7.2-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.1.ppc64le",
+      "evra": "6.4-12.20240127.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.1.noarch",
+      "evra": "6.4-12.20240127.fc40.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.1.ppc64le",
+      "evra": "6.4-12.20240127.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.ppc64le",
+      "evra": "2.0-0.69.20160912git.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "net-tools"
       }
     },
     "netavark": {
-      "evra": "1.10.3-1.fc39.ppc64le",
+      "evra": "1.10.3-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "netavark"
       }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.ppc64le",
+      "evra": "3.9.1-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nettle"
       }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.ppc64le",
+      "evra": "0.52.24-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "newt"
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc6.fc39.ppc64le",
+      "evra": "1:2.6.4-0.rc6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.ppc64le",
+      "evra": "1:1.0.9-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nftables"
       }
     },
     "nmstate": {
-      "evra": "2.2.26-2.fc39.ppc64le",
+      "evra": "2.2.26-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nmstate"
       }
     },
     "npth": {
-      "evra": "1.6-14.fc39.ppc64le",
+      "evra": "1.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "npth"
       }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.ppc64le",
+      "evra": "2.23.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nss-altfiles"
       }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.ppc64le",
+      "evra": "2.0.16-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "numactl"
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.ppc64le",
+      "evra": "2.8-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nvme-cli"
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.ppc64le",
+      "evra": "6.9.9-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "oniguruma"
       }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.ppc64le",
+      "evra": "2.6.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "openldap"
       }
     },
     "openssh": {
-      "evra": "9.3p1-10.fc39.ppc64le",
+      "evra": "9.6p1-1.fc40.2.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-10.fc39.ppc64le",
+      "evra": "9.6p1-1.fc40.2.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-10.fc39.ppc64le",
+      "evra": "9.6p1-1.fc40.2.ppc64le",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.ppc64le",
+      "evra": "1:3.2.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.ppc64le",
+      "evra": "1:3.2.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.ppc64le",
+      "evra": "1.81-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "os-prober"
       }
     },
     "ostree": {
-      "evra": "2024.5-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-grub2": {
-      "evra": "2024.5-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.5-1.fc39.ppc64le",
+      "evra": "2024.5-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.ppc64le",
+      "evra": "0.25.3-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.ppc64le",
+      "evra": "0.25.3-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.ppc64le",
+      "evra": "1.6.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.ppc64le",
+      "evra": "1.6.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
-    "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc39.ppc64le",
+    "passim-libs": {
+      "evra": "0.1.5-3.fc40.ppc64le",
       "metadata": {
-        "sourcerpm": "passt"
+        "sourcerpm": "passim"
       }
     },
-    "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
+    "passt": {
+      "evra": "0^20240326.g4988e2b-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
-    "passwd": {
-      "evra": "0.80-15.fc39.ppc64le",
+    "passt-selinux": {
+      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
       "metadata": {
-        "sourcerpm": "passwd"
+        "sourcerpm": "passt"
       }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.ppc64le",
+      "evra": "10.42-2.fc40.2.ppc64le",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch",
+      "evra": "10.42-2.fc40.2.noarch",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.ppc64le",
+      "evra": "2.8-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pigz"
       }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.ppc64le",
+      "evra": "2.1.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch",
+      "evra": "2.1.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.ppc64le",
+      "evra": "2.1.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "podman": {
-      "evra": "5:4.9.4-1.fc39.ppc64le",
-      "metadata": {
-        "sourcerpm": "podman"
-      }
-    },
-    "podman-plugins": {
-      "evra": "5:4.9.4-1.fc39.ppc64le",
+      "evra": "5:5.0.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.ppc64le",
+      "evra": "3.6-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "policycoreutils"
       }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.ppc64le",
+      "evra": "124-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.ppc64le",
+      "evra": "124-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.ppc64le",
+      "evra": "0.1-28.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "polkit-pkla-compat"
       }
     },
     "popt": {
-      "evra": "1.19-3.fc39.ppc64le",
+      "evra": "1.19-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "popt"
       }
     },
     "powerpc-utils-core": {
-      "evra": "1.3.11-4.fc39.ppc64le",
+      "evra": "1.3.11-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "powerpc-utils"
       }
     },
     "ppc64-diag-rtas": {
-      "evra": "2.7.9-4.fc39.ppc64le",
+      "evra": "2.7.9-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "ppc64-diag"
       }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.ppc64le",
+      "evra": "4.0.4-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "procps-ng"
       }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.ppc64le",
+      "evra": "1.5.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "protobuf-c"
       }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.ppc64le",
+      "evra": "23.6-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "psmisc"
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20240107-1.fc39.noarch",
+      "evra": "20240107-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-5.fc39.ppc64le",
+      "evra": "2:8.2.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "qemu"
       }
     },
     "readline": {
-      "evra": "8.2-6.fc39.ppc64le",
+      "evra": "8.2-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "readline"
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc3.fc39.ppc64le",
+      "evra": "1.2.6-4.rc3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
     },
     "rpm": {
-      "evra": "4.19.1.1-1.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1.1-1.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-6.fc39.ppc64le",
+      "evra": "2024.5-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-6.fc39.ppc64le",
+      "evra": "2024.5-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1.1-1.fc39.ppc64le",
+      "evra": "4.19.1.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-1.fc39.ppc64le",
+      "evra": "1.6.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
     },
     "rsync": {
-      "evra": "3.3.0-1.fc39.ppc64le",
+      "evra": "3.3.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rsync"
       }
     },
     "runc": {
-      "evra": "2:1.1.12-1.fc39.ppc64le",
+      "evra": "2:1.1.12-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "runc"
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.6-1.fc39.ppc64le",
+      "evra": "2:4.20.0-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.6-1.fc39.noarch",
+      "evra": "2:4.20.0-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.6-1.fc39.ppc64le",
+      "evra": "2:4.20.0-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "sed": {
-      "evra": "4.8-14.fc39.ppc64le",
+      "evra": "4.9-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sed"
       }
     },
     "selinux-policy": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "servicelog": {
-      "evra": "1.1.16-5.fc39.ppc64le",
+      "evra": "1.1.16-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "servicelog"
       }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch",
+      "evra": "2.14.5-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "setup"
       }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.ppc64le",
+      "evra": "1.48-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.ppc64le",
+      "evra": "1.48-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.ppc64le",
+      "evra": "2:4.15.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.ppc64le",
+      "evra": "2:4.15.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.ppc64le",
+      "evra": "2.3-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
     },
     "skopeo": {
-      "evra": "1:1.15.0-1.fc39.ppc64le",
+      "evra": "1:1.15.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "skopeo"
       }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.ppc64le",
+      "evra": "2.3.3-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "slang"
       }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.ppc64le",
+      "evra": "1.2.2-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "slirp4netns"
       }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.ppc64le",
+      "evra": "1.1.10-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "snappy"
       }
     },
     "socat": {
-      "evra": "1.8.0.0-2.fc39.ppc64le",
+      "evra": "1.8.0.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "socat"
       }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.ppc64le",
+      "evra": "3.45.1-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sqlite"
       }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.ppc64le",
+      "evra": "4.6.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "squashfs-tools"
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.ppc64le",
+      "evra": "0.1.4-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-1.fc39.ppc64le",
+      "evra": "2.9.4-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc39.ppc64le",
+      "evra": "1.19.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "stalld"
       }
     },
     "sudo": {
-      "evra": "1.9.15-1.p5.fc39.ppc64le",
+      "evra": "1.9.15-2.p5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sudo"
       }
     },
     "systemd": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.10-1.fc39.ppc64le",
+      "evra": "255.4-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.ppc64le",
+      "evra": "2:1.35-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tar"
       }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.ppc64le",
+      "evra": "1.32-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-4.fc39.ppc64le",
+      "evra": "0.0.99.5-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "toolbox"
       }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.ppc64le",
+      "evra": "5.6-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-6.fc39.ppc64le",
+      "evra": "4.0.1-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-6.fc39.ppc64le",
+      "evra": "4.0.1-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tzdata": {
-      "evra": "2024a-2.fc39.noarch",
+      "evra": "2024a-5.fc40.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.ppc64le",
+      "evra": "0.14.0-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "userspace-rcu"
       }
     },
     "util-linux": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.4-1.fc39.ppc64le",
+      "evra": "2.40-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc39.ppc64le",
+      "evra": "2:9.1.309-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "which": {
-      "evra": "2.21-40.fc39.ppc64le",
+      "evra": "2.21-41.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "which"
       }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.ppc64le",
+      "evra": "1.0.20210914-6.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "wireguard-tools"
       }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.ppc64le",
+      "evra": "6.5.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "xfsprogs"
       }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.ppc64le",
+      "evra": "0.8.2-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "xxhash"
       }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.ppc64le",
+      "evra": "1:5.4.6-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.ppc64le",
+      "evra": "1:5.4.6-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.ppc64le",
+      "evra": "2.1.0-23.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "yajl"
       }
     },
     "zchunk-libs": {
-      "evra": "1.4.0-1.fc39.ppc64le",
+      "evra": "1.4.0-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "zchunk"
       }
     },
     "zincati": {
-      "evra": "0.0.27-1.fc39.ppc64le",
+      "evra": "0.0.27-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
     },
-    "zlib": {
-      "evra": "1.2.13-4.fc39.ppc64le",
+    "zlib-ng-compat": {
+      "evra": "2.1.6-2.fc40.ppc64le",
       "metadata": {
-        "sourcerpm": "zlib"
+        "sourcerpm": "zlib-ng"
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.ppc64le",
+      "evra": "1.1.2-9.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
     },
     "zstd": {
-      "evra": "1.5.6-1.fc39.ppc64le",
+      "evra": "1.5.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2608,14 +2566,17 @@
   "metadata": {
     "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-11-01T00:12:28Z"
+      "fedora-candidate-compose": {
+        "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T15:17:53Z"
+        "generated": "2024-04-21T12:46:11Z"
+      },
+      "fedora-next": {
+        "generated": "2024-04-19T08:53:27Z"
       },
-      "fedora-updates": {
-        "generated": "2024-04-21T01:11:44Z"
+      "fedora-next-updates": {
+        "generated": "2024-04-21T01:00:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index dfcd5e45e6..c413ad98a8 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1,2509 +1,2467 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.s390x",
+      "evra": "1:1.46.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.s390x",
+      "evra": "1:1.46.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.s390x",
+      "evra": "1:1.46.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.s390x",
+      "evra": "1:1.46.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.s390x",
+      "evra": "1:1.46.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch",
+      "evra": "2.10.0.8-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
     },
     "aardvark-dns": {
-      "evra": "1.10.0-1.fc39.s390x",
+      "evra": "1.10.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
     },
     "acl": {
-      "evra": "2.3.1-9.fc39.s390x",
+      "evra": "2.3.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.s390x",
+      "evra": "0.9.2-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "adcli"
       }
     },
     "afterburn": {
-      "evra": "5.5.1-1.fc39.s390x",
+      "evra": "5.5.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-1.fc39.s390x",
+      "evra": "5.5.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.26-1.fc39.s390x",
+      "evra": "1.26-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
-    "amd-ucode-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.s390x",
+      "evra": "2.5.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "audit": {
-      "evra": "3.1.2-8.fc39.s390x",
+      "evra": "4.0.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-8.fc39.s390x",
+      "evra": "4.0.1-1.fc40.s390x",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
+    },
+    "audit-rules": {
+      "evra": "4.0.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.s390x",
+      "evra": "1.5.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.s390x",
+      "evra": "1.5.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.s390x",
+      "evra": "0.8-26.fc40.s390x",
       "metadata": {
         "sourcerpm": "avahi"
       }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch",
+      "evra": "11-20.fc40.noarch",
       "metadata": {
         "sourcerpm": "basesystem"
       }
     },
     "bash": {
-      "evra": "5.2.26-1.fc39.s390x",
+      "evra": "5.2.26-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "bash"
       }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch",
+      "evra": "0.4.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "shell-color-prompt"
       }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch",
+      "evra": "1:2.11-14.fc40.noarch",
       "metadata": {
         "sourcerpm": "bash-completion"
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc39.s390x",
+      "evra": "32:9.18.24-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc39.noarch",
+      "evra": "32:9.18.24-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc39.s390x",
+      "evra": "32:9.18.24-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bootupd": {
-      "evra": "0.2.18-2.fc39.s390x",
+      "evra": "0.2.18-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.s390x",
+      "evra": "3.7.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc39.s390x",
+      "evra": "6.8-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.s390x",
+      "evra": "0.8.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "bubblewrap"
       }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.s390x",
+      "evra": "1.0.8-18.fc40.s390x",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.s390x",
+      "evra": "1.0.8-18.fc40.s390x",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "c-ares": {
-      "evra": "1.28.1-1.fc39.s390x",
+      "evra": "1.28.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "c-ares"
       }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "evra": "2023.2.62_v7.0.401-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "ca-certificates"
       }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.s390x",
+      "evra": "0.1.7-22.fc40.s390x",
       "metadata": {
         "sourcerpm": "catatonit"
       }
     },
     "chrony": {
-      "evra": "4.5-1.fc39.s390x",
+      "evra": "4.5-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "chrony"
       }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.s390x",
+      "evra": "7.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "cifs-utils"
       }
     },
-    "cirrus-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "clevis": {
-      "evra": "20-1.fc39.s390x",
+      "evra": "20-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "20-1.fc39.s390x",
+      "evra": "20-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "20-1.fc39.s390x",
+      "evra": "20-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
+    "clevis-pin-tpm2": {
+      "evra": "0.5.3-5.fc40.s390x",
+      "metadata": {
+        "sourcerpm": "clevis-pin-tpm2"
+      }
+    },
     "clevis-systemd": {
-      "evra": "20-1.fc39.s390x",
+      "evra": "20-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch",
+      "evra": "0.33-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "cloud-utils"
       }
     },
     "composefs": {
-      "evra": "1.0.3-1.fc39.s390x",
+      "evra": "1.0.3-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "composefs-libs": {
-      "evra": "1.0.3-1.fc39.s390x",
+      "evra": "1.0.3-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "conmon": {
-      "evra": "2:2.1.10-1.fc39.s390x",
+      "evra": "2:2.1.10-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "conmon"
       }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.23-2.fc39.s390x",
+      "evra": "1.6.23-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "containerd"
       }
     },
-    "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "containernetworking-plugins"
-      }
-    },
     "containers-common": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc39.s390x",
+      "evra": "0.21.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc39.s390x",
+      "evra": "0.21.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreutils": {
-      "evra": "9.3-5.fc39.s390x",
+      "evra": "9.4-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-5.fc39.s390x",
+      "evra": "9.4-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.s390x",
+      "evra": "2.15-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "cpio"
       }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.s390x",
+      "evra": "2.9.11-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "cracklib"
       }
     },
     "criu": {
-      "evra": "3.19-2.fc39.s390x",
+      "evra": "3.19-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.19-2.fc39.s390x",
+      "evra": "3.19-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc39.s390x",
+      "evra": "1.14.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crypto-policies": {
-      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
+      "evra": "20240201-2.git9f501f3.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.s390x",
+      "evra": "2.7.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.s390x",
+      "evra": "2.7.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "curl": {
-      "evra": "8.2.1-4.fc39.s390x",
+      "evra": "8.6.0-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.s390x",
+      "evra": "2.1.28-19.fc40.s390x",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.s390x",
+      "evra": "2.1.28-19.fc40.s390x",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.s390x",
+      "evra": "1:1.14.10-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-broker": {
-      "evra": "35-2.fc39.s390x",
+      "evra": "36-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch",
+      "evra": "1:1.14.10-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.s390x",
+      "evra": "1:1.14.10-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "device-mapper": {
-      "evra": "1.02.197-1.fc39.s390x",
+      "evra": "1.02.197-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.197-1.fc39.s390x",
+      "evra": "1.02.197-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.197-1.fc39.s390x",
+      "evra": "1.02.197-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.197-1.fc39.s390x",
+      "evra": "1.02.197-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.s390x",
+      "evra": "0.9.7-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.s390x",
+      "evra": "0.9.7-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.12-1.fc39.s390x",
+      "evra": "1.0.12-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.s390x",
+      "evra": "3.10-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "diffutils"
       }
     },
     "dnsmasq": {
-      "evra": "2.90-1.fc39.s390x",
+      "evra": "2.90-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.s390x",
+      "evra": "4.2-11.fc40.s390x",
       "metadata": {
         "sourcerpm": "dosfstools"
       }
     },
     "dracut": {
-      "evra": "059-16.fc39.s390x",
+      "evra": "060-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.s390x",
+      "evra": "060-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.s390x",
+      "evra": "060-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.s390x",
+      "evra": "2.7.0-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "duktape"
       }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.s390x",
+      "evra": "1.47.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.s390x",
+      "evra": "1.47.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.191-2.fc39.noarch",
+      "evra": "0.191-4.fc40.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.191-2.fc39.s390x",
+      "evra": "0.191-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.191-2.fc39.s390x",
+      "evra": "0.191-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "ethtool": {
-      "evra": "2:6.7-1.fc39.s390x",
+      "evra": "2:6.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "ethtool"
       }
     },
     "expat": {
-      "evra": "2.6.2-1.fc39.s390x",
+      "evra": "2.6.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "expat"
       }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-release-common": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "file": {
-      "evra": "5.44-5.fc39.s390x",
+      "evra": "5.45-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.s390x",
+      "evra": "5.45-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.s390x",
+      "evra": "3.18-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "filesystem"
       }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.s390x",
+      "evra": "1:4.9.0-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "findutils"
       }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.s390x",
+      "evra": "1.15.8-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "flatpak"
       }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.s390x",
+      "evra": "0.6.1-10.fc40.s390x",
       "metadata": {
         "sourcerpm": "fstrm"
       }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.s390x",
+      "evra": "2.9.9-21.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.s390x",
+      "evra": "3.16.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.s390x",
+      "evra": "2.9.9-21.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.13-1.fc39.s390x",
+      "evra": "1.13-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-9.fc39.s390x",
+      "evra": "3.7.3-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.s390x",
+      "evra": "3.16.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.s390x",
+      "evra": "3.16.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc39.s390x",
+      "evra": "1.9.16-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.s390x",
+      "evra": "5.3.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "gawk"
       }
     },
+    "gdbm": {
+      "evra": "1:1.23-6.fc40.s390x",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
+    },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.s390x",
+      "evra": "1:1.23-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "gdbm"
       }
     },
     "gdisk": {
-      "evra": "1.0.10-1.fc39.s390x",
+      "evra": "1.0.10-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gdisk"
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc39.s390x",
+      "evra": "2.44.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
     },
     "glib2": {
-      "evra": "2.78.3-1.fc39.s390x",
+      "evra": "2.80.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "glib2"
       }
     },
     "glibc": {
-      "evra": "2.38-18.fc39.s390x",
+      "evra": "2.39-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-18.fc39.s390x",
+      "evra": "2.39-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-18.fc39.s390x",
+      "evra": "2.39-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-18.fc39.s390x",
+      "evra": "2.39-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.s390x",
+      "evra": "1:6.2.1-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "gmp"
       }
     },
     "gnupg2": {
-      "evra": "2.4.4-1.fc39.s390x",
+      "evra": "2.4.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
     },
     "gnutls": {
-      "evra": "3.8.5-1.fc39.s390x",
+      "evra": "3.8.5-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gnutls"
       }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.s390x",
+      "evra": "1.23.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "gpgme"
       }
     },
     "grep": {
-      "evra": "3.11-3.fc39.s390x",
+      "evra": "3.11-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "grep"
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.3-1.fc39.s390x",
+      "evra": "6:0.7.3-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.s390x",
+      "evra": "1.13-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gzip"
       }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.s390x",
+      "evra": "3.23-12.fc40.s390x",
       "metadata": {
         "sourcerpm": "hostname"
       }
     },
     "ignition": {
-      "evra": "2.18.0-1.fc39.s390x",
+      "evra": "2.18.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "ignition"
       }
     },
     "inih": {
-      "evra": "58-1.fc39.s390x",
+      "evra": "58-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "inih"
       }
     },
-    "intel-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.s390x",
+      "evra": "1.0.3-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "ipcalc"
       }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.s390x",
+      "evra": "6.7.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.s390x",
+      "evra": "6.7.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.s390x",
+      "evra": "1.8.10-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.s390x",
+      "evra": "1.8.10-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.s390x",
+      "evra": "1.8.10-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.s390x",
+      "evra": "1.8.10-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch",
+      "evra": "1.8.10-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.s390x",
+      "evra": "1.8.10-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.s390x",
+      "evra": "20240117-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "iputils"
       }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x",
+      "evra": "6.2.1.9-20.gita65a472.fc40.s390x",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.s390x",
+      "evra": "6.2.1.9-20.gita65a472.fc40.s390x",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.s390x",
+      "evra": "0.101-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "isns-utils"
       }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.s390x",
+      "evra": "2.13.1-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "jansson"
       }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.s390x",
+      "evra": "5.3.0-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "jemalloc"
       }
     },
     "jose": {
-      "evra": "13-1.fc39.s390x",
+      "evra": "13-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "jq": {
-      "evra": "1.6-17.fc39.s390x",
+      "evra": "1.7.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "jq"
       }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.s390x",
+      "evra": "0.17-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "json-c"
       }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.s390x",
+      "evra": "1.8.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "json-glib"
       }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.s390x",
+      "evra": "2.6.4-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kernel": {
-      "evra": "6.8.6-200.fc39.s390x",
+      "evra": "6.8.7-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.6-200.fc39.s390x",
+      "evra": "6.8.7-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.6-200.fc39.s390x",
+      "evra": "6.8.7-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.6-200.fc39.s390x",
+      "evra": "6.8.7-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-4.fc39.s390x",
+      "evra": "2.0.28-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
     },
     "keyutils": {
-      "evra": "1.6.3-1.fc39.s390x",
+      "evra": "1.6.3-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.3-1.fc39.s390x",
+      "evra": "1.6.3-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "kmod": {
-      "evra": "30-6.fc39.s390x",
+      "evra": "31-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.s390x",
+      "evra": "31-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.s390x",
+      "evra": "0.9.7-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-3.fc39.s390x",
+      "evra": "1.21.2-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "krb5"
       }
     },
     "less": {
-      "evra": "633-2.fc39.s390x",
+      "evra": "643-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "less"
       }
     },
     "libacl": {
-      "evra": "2.3.1-9.fc39.s390x",
+      "evra": "2.3.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.s390x",
+      "evra": "0.3.111-19.fc40.s390x",
       "metadata": {
         "sourcerpm": "libaio"
       }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.s390x",
+      "evra": "3.7.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
-    "libargon2": {
-      "evra": "20190702-3.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "argon2"
-      }
-    },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.s390x",
+      "evra": "2.5.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libassuan"
       }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.s390x",
+      "evra": "2.5.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.s390x",
+      "evra": "0.1.1-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libblkid": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.s390x",
+      "evra": "2:1.2.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libbpf"
       }
     },
     "libbsd": {
-      "evra": "0.12.2-1.fc39.s390x",
+      "evra": "0.12.2-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libbsd"
       }
     },
     "libcap": {
-      "evra": "2.48-9.fc39.s390x",
+      "evra": "2.69-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "libcap"
       }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.s390x",
+      "evra": "0.8.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libcap-ng"
       }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.s390x",
+      "evra": "0.11.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libcbor"
       }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.s390x",
+      "evra": "0.7.0-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.s390x",
+      "evra": "1.47.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-4.fc39.s390x",
+      "evra": "8.6.0-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.s390x",
+      "evra": "0.14-29.fc40.s390x",
       "metadata": {
         "sourcerpm": "libdaemon"
       }
     },
-    "libdb": {
-      "evra": "5.3.28-56.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "libdb"
-      }
-    },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.s390x",
+      "evra": "0.5.0-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libeconf": {
-      "evra": "0.5.2-2.fc39.s390x",
+      "evra": "0.6.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libeconf"
       }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.s390x",
+      "evra": "3.1-50.20230828cvs.fc40.s390x",
       "metadata": {
         "sourcerpm": "libedit"
       }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.s390x",
+      "evra": "2.1.12-12.fc40.s390x",
       "metadata": {
         "sourcerpm": "libevent"
       }
     },
     "libfdisk": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.s390x",
+      "evra": "3.4.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "libffi"
       }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.s390x",
+      "evra": "1.14.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libfido2"
       }
     },
     "libgcc": {
-      "evra": "13.2.1-7.fc39.s390x",
+      "evra": "14.0.1-0.15.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.s390x",
+      "evra": "1.10.3-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgcrypt"
       }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.s390x",
+      "evra": "1.48-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
     },
     "libgudev": {
-      "evra": "238-2.fc39.s390x",
+      "evra": "238-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgudev"
       }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.s390x",
+      "evra": "0.4.8-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgusb"
       }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.s390x",
+      "evra": "48.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "rdma-core"
       }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.s390x",
+      "evra": "74.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "icu"
       }
     },
     "libidn2": {
-      "evra": "2.3.7-1.fc39.s390x",
+      "evra": "2.3.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libidn2"
       }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.s390x",
+      "evra": "1.3.1-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libjcat": {
-      "evra": "0.2.1-1.fc39.s390x",
+      "evra": "0.2.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "libjcat"
       }
     },
     "libjose": {
-      "evra": "13-1.fc39.s390x",
+      "evra": "13-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.s390x",
+      "evra": "1.4.0-10.fc40.s390x",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.s390x",
+      "evra": "1.4.0-10.fc40.s390x",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.s390x",
+      "evra": "1.6.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libksba"
       }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.s390x",
+      "evra": "2.9.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libldb"
       }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.s390x",
+      "evra": "9-22.fc40.s390x",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "libmaxminddb": {
-      "evra": "1.9.1-1.fc39.s390x",
+      "evra": "1.9.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.s390x",
+      "evra": "1.1.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libmd"
       }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.s390x",
+      "evra": "1.0.5-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "libmnl"
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.s390x",
+      "evra": "2.15.0-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
     },
     "libmount": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.s390x",
+      "evra": "1.8-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "libndp"
       }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.s390x",
+      "evra": "1.3-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnet"
       }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.s390x",
+      "evra": "1.0.9-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnetfilter_conntrack"
       }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.s390x",
+      "evra": "1.0.1-27.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnfnetlink"
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc6.fc39.s390x",
+      "evra": "1:2.6.4-0.rc6.fc40.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.s390x",
+      "evra": "1.2.6-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnftnl"
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-5.fc39.s390x",
+      "evra": "1.59.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
     },
     "libnl3": {
-      "evra": "3.9.0-1.fc39.s390x",
+      "evra": "3.9.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.9.0-1.fc39.s390x",
+      "evra": "3.9.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.s390x",
+      "evra": "2.0.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnsl2"
       }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.s390x",
+      "evra": "1.8-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libnvme"
       }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.s390x",
+      "evra": "0.2.1-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.s390x",
+      "evra": "14:1.10.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libpcap"
       }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.s390x",
+      "evra": "2.1.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.s390x",
+      "evra": "0.21.5-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libpsl"
       }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.s390x",
+      "evra": "1.4.5-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "libpwquality"
       }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.s390x",
+      "evra": "0.1.5-56.fc40.s390x",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "librepo": {
-      "evra": "1.17.1-1.fc39.s390x",
+      "evra": "1.17.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "librepo"
       }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch",
+      "evra": "2.17.15-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "libreport"
       }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.s390x",
+      "evra": "2.5.3-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "libseccomp"
       }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.s390x",
+      "evra": "3.6-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.s390x",
+      "evra": "3.6-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.s390x",
+      "evra": "3.6-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libsemanage"
       }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.s390x",
+      "evra": "3.6-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libsepol"
       }
     },
-    "libsigsegv": {
-      "evra": "2.14-5.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "libsigsegv"
-      }
-    },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.s390x",
+      "evra": "4.7.0-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "libslirp"
       }
     },
     "libsmartcols": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.6-1.fc39.s390x",
+      "evra": "2:4.20.0-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc39.s390x",
+      "evra": "0.7.28-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libsolv"
       }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.s390x",
+      "evra": "1.47.0-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-7.fc39.s390x",
+      "evra": "14.0.1-0.15.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.s390x",
+      "evra": "2.4.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtalloc"
       }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.s390x",
+      "evra": "4.19.0-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtasn1"
       }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.s390x",
+      "evra": "1.4.10-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtdb"
       }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.s390x",
+      "evra": "1.32-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.s390x",
+      "evra": "0.16.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtevent"
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-1.rc3.fc39.s390x",
+      "evra": "1.3.4-1.rc3.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.s390x",
+      "evra": "2.4.7-10.fc40.s390x",
       "metadata": {
         "sourcerpm": "libtool"
       }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.s390x",
+      "evra": "1.1-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "libunistring"
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc39.s390x",
+      "evra": "1.0.27-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libusb1"
       }
     },
-    "libuser": {
-      "evra": "0.64-4.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "libuser"
-      }
-    },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.s390x",
+      "evra": "1.2.1-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "libutempter"
       }
     },
     "libuuid": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libuv": {
-      "evra": "1:1.48.0-1.fc39.s390x",
+      "evra": "1:1.48.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libuv"
       }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.s390x",
+      "evra": "0.3.2-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "libverto"
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.6-1.fc39.s390x",
+      "evra": "2:4.20.0-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.s390x",
+      "evra": "4.4.36-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxcrypt"
       }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.s390x",
+      "evra": "2.12.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxml2"
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc39.s390x",
+      "evra": "0.3.18-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.s390x",
+      "evra": "0.2.5-14.fc40.s390x",
       "metadata": {
         "sourcerpm": "libyaml"
       }
     },
     "libzstd": {
-      "evra": "1.5.6-1.fc39.s390x",
+      "evra": "1.5.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "zstd"
       }
     },
-    "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "linux-atm"
-      }
-    },
     "linux-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.32-1.fc39.s390x",
+      "evra": "0.9.32-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lmdb"
       }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.s390x",
+      "evra": "3.21.0-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "logrotate"
       }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.s390x",
+      "evra": "4.98.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "lsof"
       }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.s390x",
+      "evra": "5.4.6-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "lua"
       }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.s390x",
+      "evra": "9-22.fc40.s390x",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "lvm2": {
-      "evra": "2.03.23-1.fc39.s390x",
+      "evra": "2.03.23-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.23-1.fc39.s390x",
+      "evra": "2.03.23-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.s390x",
+      "evra": "1.9.4-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "lz4"
       }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.s390x",
+      "evra": "2.10-12.fc40.s390x",
       "metadata": {
         "sourcerpm": "lzo"
       }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.s390x",
+      "evra": "4.2-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "mdadm"
       }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.s390x",
+      "evra": "24.0.5-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "moby-engine"
       }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.s390x",
+      "evra": "4.2.1-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "mpfr"
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nano": {
-      "evra": "7.2-4.fc39.s390x",
+      "evra": "7.2-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch",
+      "evra": "7.2-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.1.s390x",
+      "evra": "6.4-12.20240127.fc40.s390x",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.1.noarch",
+      "evra": "6.4-12.20240127.fc40.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.1.s390x",
+      "evra": "6.4-12.20240127.fc40.s390x",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.s390x",
+      "evra": "2.0-0.69.20160912git.fc40.s390x",
       "metadata": {
         "sourcerpm": "net-tools"
       }
     },
     "netavark": {
-      "evra": "1.10.3-1.fc39.s390x",
+      "evra": "1.10.3-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "netavark"
       }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.s390x",
+      "evra": "3.9.1-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "nettle"
       }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.s390x",
+      "evra": "0.52.24-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "newt"
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc6.fc39.s390x",
+      "evra": "1:2.6.4-0.rc6.fc40.s390x",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.s390x",
+      "evra": "1:1.0.9-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "nftables"
       }
     },
     "nmstate": {
-      "evra": "2.2.26-2.fc39.s390x",
+      "evra": "2.2.26-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "nmstate"
       }
     },
     "npth": {
-      "evra": "1.6-14.fc39.s390x",
+      "evra": "1.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "npth"
       }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.s390x",
+      "evra": "2.23.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "nss-altfiles"
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.s390x",
+      "evra": "2.8-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "nvme-cli"
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.s390x",
+      "evra": "6.9.9-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "oniguruma"
       }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.s390x",
+      "evra": "2.6.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "openldap"
       }
     },
     "openssh": {
-      "evra": "9.3p1-10.fc39.s390x",
+      "evra": "9.6p1-1.fc40.2.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-10.fc39.s390x",
+      "evra": "9.6p1-1.fc40.2.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-10.fc39.s390x",
+      "evra": "9.6p1-1.fc40.2.s390x",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.s390x",
+      "evra": "1:3.2.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.s390x",
+      "evra": "1:3.2.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "ostree": {
-      "evra": "2024.5-1.fc39.s390x",
+      "evra": "2024.5-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.5-1.fc39.s390x",
+      "evra": "2024.5-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.s390x",
+      "evra": "0.25.3-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.s390x",
+      "evra": "0.25.3-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.s390x",
+      "evra": "1.6.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.s390x",
+      "evra": "1.6.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
-    "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc39.s390x",
+    "passim-libs": {
+      "evra": "0.1.5-3.fc40.s390x",
       "metadata": {
-        "sourcerpm": "passt"
+        "sourcerpm": "passim"
       }
     },
-    "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
+    "passt": {
+      "evra": "0^20240326.g4988e2b-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
-    "passwd": {
-      "evra": "0.80-15.fc39.s390x",
+    "passt-selinux": {
+      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
       "metadata": {
-        "sourcerpm": "passwd"
+        "sourcerpm": "passt"
       }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.s390x",
+      "evra": "10.42-2.fc40.2.s390x",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch",
+      "evra": "10.42-2.fc40.2.noarch",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.s390x",
+      "evra": "2.8-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "pigz"
       }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.s390x",
+      "evra": "2.1.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch",
+      "evra": "2.1.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.s390x",
+      "evra": "2.1.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "podman": {
-      "evra": "5:4.9.4-1.fc39.s390x",
-      "metadata": {
-        "sourcerpm": "podman"
-      }
-    },
-    "podman-plugins": {
-      "evra": "5:4.9.4-1.fc39.s390x",
+      "evra": "5:5.0.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.s390x",
+      "evra": "3.6-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "policycoreutils"
       }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.s390x",
+      "evra": "124-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.s390x",
+      "evra": "124-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.s390x",
+      "evra": "0.1-28.fc40.s390x",
       "metadata": {
         "sourcerpm": "polkit-pkla-compat"
       }
     },
     "popt": {
-      "evra": "1.19-3.fc39.s390x",
+      "evra": "1.19-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "popt"
       }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.s390x",
+      "evra": "4.0.4-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "procps-ng"
       }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.s390x",
+      "evra": "1.5.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "protobuf-c"
       }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.s390x",
+      "evra": "23.6-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "psmisc"
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20240107-1.fc39.noarch",
+      "evra": "20240107-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
     },
     "qemu-user-static-x86": {
-      "evra": "2:8.1.3-5.fc39.s390x",
+      "evra": "2:8.2.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "qemu"
       }
     },
     "readline": {
-      "evra": "8.2-6.fc39.s390x",
+      "evra": "8.2-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "readline"
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc3.fc39.s390x",
+      "evra": "1.2.6-4.rc3.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
     },
     "rpm": {
-      "evra": "4.19.1.1-1.fc39.s390x",
+      "evra": "4.19.1.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1.1-1.fc39.s390x",
+      "evra": "4.19.1.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-6.fc39.s390x",
+      "evra": "2024.5-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-6.fc39.s390x",
+      "evra": "2024.5-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1.1-1.fc39.s390x",
+      "evra": "4.19.1.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-1.fc39.s390x",
+      "evra": "1.6.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
     },
     "rsync": {
-      "evra": "3.3.0-1.fc39.s390x",
+      "evra": "3.3.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "rsync"
       }
     },
     "runc": {
-      "evra": "2:1.1.12-1.fc39.s390x",
+      "evra": "2:1.1.12-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "runc"
       }
     },
     "s390utils-core": {
-      "evra": "2:2.29.0-4.fc39.s390x",
+      "evra": "2:2.31.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "s390utils"
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.6-1.fc39.s390x",
+      "evra": "2:4.20.0-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.6-1.fc39.noarch",
+      "evra": "2:4.20.0-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.6-1.fc39.s390x",
+      "evra": "2:4.20.0-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "sed": {
-      "evra": "4.8-14.fc39.s390x",
+      "evra": "4.9-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "sed"
       }
     },
     "selinux-policy": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch",
+      "evra": "2.14.5-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "setup"
       }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.s390x",
+      "evra": "1.48-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.s390x",
+      "evra": "1.48-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.s390x",
+      "evra": "2:4.15.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.s390x",
+      "evra": "2:4.15.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.s390x",
+      "evra": "2.3-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
     },
     "skopeo": {
-      "evra": "1:1.15.0-1.fc39.s390x",
+      "evra": "1:1.15.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "skopeo"
       }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.s390x",
+      "evra": "2.3.3-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "slang"
       }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.s390x",
+      "evra": "1.2.2-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "slirp4netns"
       }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.s390x",
+      "evra": "1.1.10-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "snappy"
       }
     },
     "socat": {
-      "evra": "1.8.0.0-2.fc39.s390x",
+      "evra": "1.8.0.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "socat"
       }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.s390x",
+      "evra": "3.45.1-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "sqlite"
       }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.s390x",
+      "evra": "4.6.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "squashfs-tools"
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.s390x",
+      "evra": "0.1.4-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-1.fc39.s390x",
+      "evra": "2.9.4-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc39.s390x",
+      "evra": "1.19.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "stalld"
       }
     },
     "sudo": {
-      "evra": "1.9.15-1.p5.fc39.s390x",
+      "evra": "1.9.15-2.p5.fc40.s390x",
       "metadata": {
         "sourcerpm": "sudo"
       }
     },
     "systemd": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.10-1.fc39.s390x",
+      "evra": "255.4-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.s390x",
+      "evra": "2:1.35-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "tar"
       }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.s390x",
+      "evra": "1.32-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-4.fc39.s390x",
+      "evra": "0.0.99.5-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "toolbox"
       }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.s390x",
+      "evra": "5.6-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-6.fc39.s390x",
+      "evra": "4.0.1-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-6.fc39.s390x",
+      "evra": "4.0.1-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tzdata": {
-      "evra": "2024a-2.fc39.noarch",
+      "evra": "2024a-5.fc40.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.s390x",
+      "evra": "0.14.0-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "userspace-rcu"
       }
     },
     "util-linux": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.4-1.fc39.s390x",
+      "evra": "2.40-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "veritysetup": {
-      "evra": "2.6.1-3.fc39.s390x",
+      "evra": "2.7.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc39.s390x",
+      "evra": "2:9.1.309-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "which": {
-      "evra": "2.21-40.fc39.s390x",
+      "evra": "2.21-41.fc40.s390x",
       "metadata": {
         "sourcerpm": "which"
       }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.s390x",
+      "evra": "1.0.20210914-6.fc40.s390x",
       "metadata": {
         "sourcerpm": "wireguard-tools"
       }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.s390x",
+      "evra": "6.5.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "xfsprogs"
       }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.s390x",
+      "evra": "0.8.2-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "xxhash"
       }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.s390x",
+      "evra": "1:5.4.6-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.s390x",
+      "evra": "1:5.4.6-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.s390x",
+      "evra": "2.1.0-23.fc40.s390x",
       "metadata": {
         "sourcerpm": "yajl"
       }
     },
     "zchunk-libs": {
-      "evra": "1.4.0-1.fc39.s390x",
+      "evra": "1.4.0-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "zchunk"
       }
     },
     "zincati": {
-      "evra": "0.0.27-1.fc39.s390x",
+      "evra": "0.0.27-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
     },
-    "zlib": {
-      "evra": "1.2.13-4.fc39.s390x",
+    "zlib-ng-compat": {
+      "evra": "2.1.6-2.fc40.s390x",
       "metadata": {
-        "sourcerpm": "zlib"
+        "sourcerpm": "zlib-ng"
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.s390x",
+      "evra": "1.1.2-9.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
     },
     "zstd": {
-      "evra": "1.5.6-1.fc39.s390x",
+      "evra": "1.5.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2512,14 +2470,17 @@
   "metadata": {
     "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-11-01T00:12:19Z"
+      "fedora-candidate-compose": {
+        "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T15:17:00Z"
+        "generated": "2024-04-21T12:46:08Z"
+      },
+      "fedora-next": {
+        "generated": "2024-04-19T08:53:24Z"
       },
-      "fedora-updates": {
-        "generated": "2024-04-21T01:11:53Z"
+      "fedora-next-updates": {
+        "generated": "2024-04-21T01:00:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7ccc9500b9..5e786fdbc3 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1,2311 +1,2275 @@
 {
   "packages": {
     "NetworkManager": {
-      "evra": "1:1.44.2-1.fc39.x86_64",
+      "evra": "1:1.46.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-cloud-setup": {
-      "evra": "1:1.44.2-1.fc39.x86_64",
+      "evra": "1:1.46.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-libnm": {
-      "evra": "1:1.44.2-1.fc39.x86_64",
+      "evra": "1:1.46.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-team": {
-      "evra": "1:1.44.2-1.fc39.x86_64",
+      "evra": "1:1.46.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "NetworkManager-tui": {
-      "evra": "1:1.44.2-1.fc39.x86_64",
+      "evra": "1:1.46.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "NetworkManager"
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.9.1.1-1.fc39.noarch",
+      "evra": "2.10.0.8-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
     },
     "aardvark-dns": {
-      "evra": "1.10.0-1.fc39.x86_64",
+      "evra": "1.10.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "aardvark-dns"
       }
     },
     "acl": {
-      "evra": "2.3.1-9.fc39.x86_64",
+      "evra": "2.3.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "adcli": {
-      "evra": "0.9.2-3.fc39.x86_64",
+      "evra": "0.9.2-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "adcli"
       }
     },
     "afterburn": {
-      "evra": "5.5.1-1.fc39.x86_64",
+      "evra": "5.5.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-1.fc39.x86_64",
+      "evra": "5.5.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "alternatives": {
-      "evra": "1.26-1.fc39.x86_64",
+      "evra": "1.26-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "chkconfig"
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "attr": {
-      "evra": "2.5.1-8.fc39.x86_64",
+      "evra": "2.5.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "audit": {
-      "evra": "3.1.2-8.fc39.x86_64",
+      "evra": "4.0.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "audit-libs": {
-      "evra": "3.1.2-8.fc39.x86_64",
+      "evra": "4.0.1-1.fc40.x86_64",
+      "metadata": {
+        "sourcerpm": "audit"
+      }
+    },
+    "audit-rules": {
+      "evra": "4.0.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "audit"
       }
     },
     "authselect": {
-      "evra": "1.4.3-1.fc39.x86_64",
+      "evra": "1.5.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "authselect-libs": {
-      "evra": "1.4.3-1.fc39.x86_64",
+      "evra": "1.5.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "authselect"
       }
     },
     "avahi-libs": {
-      "evra": "0.8-24.fc39.x86_64",
+      "evra": "0.8-26.fc40.x86_64",
       "metadata": {
         "sourcerpm": "avahi"
       }
     },
     "basesystem": {
-      "evra": "11-18.fc39.noarch",
+      "evra": "11-20.fc40.noarch",
       "metadata": {
         "sourcerpm": "basesystem"
       }
     },
     "bash": {
-      "evra": "5.2.26-1.fc39.x86_64",
+      "evra": "5.2.26-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bash"
       }
     },
     "bash-color-prompt": {
-      "evra": "0.4-1.fc39.noarch",
+      "evra": "0.4.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "shell-color-prompt"
       }
     },
     "bash-completion": {
-      "evra": "1:2.11-12.fc39.noarch",
+      "evra": "1:2.11-14.fc40.noarch",
       "metadata": {
         "sourcerpm": "bash-completion"
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc39.x86_64",
+      "evra": "32:9.18.24-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc39.noarch",
+      "evra": "32:9.18.24-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc39.x86_64",
+      "evra": "32:9.18.24-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bootupd": {
-      "evra": "0.2.18-2.fc39.x86_64",
+      "evra": "0.2.18-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-bootupd"
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "bsdtar": {
-      "evra": "3.7.1-1.fc39.x86_64",
+      "evra": "3.7.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc39.x86_64",
+      "evra": "6.8-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
     },
     "bubblewrap": {
-      "evra": "0.8.0-1.fc39.x86_64",
+      "evra": "0.8.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bubblewrap"
       }
     },
     "bzip2": {
-      "evra": "1.0.8-16.fc39.x86_64",
+      "evra": "1.0.8-18.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "bzip2-libs": {
-      "evra": "1.0.8-16.fc39.x86_64",
+      "evra": "1.0.8-18.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bzip2"
       }
     },
     "c-ares": {
-      "evra": "1.28.1-1.fc39.x86_64",
+      "evra": "1.28.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "c-ares"
       }
     },
     "ca-certificates": {
-      "evra": "2023.2.60_v7.0.306-2.fc39.noarch",
+      "evra": "2023.2.62_v7.0.401-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "ca-certificates"
       }
     },
     "catatonit": {
-      "evra": "0.1.7-18.fc39.x86_64",
+      "evra": "0.1.7-22.fc40.x86_64",
       "metadata": {
         "sourcerpm": "catatonit"
       }
     },
     "chrony": {
-      "evra": "4.5-1.fc39.x86_64",
+      "evra": "4.5-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "chrony"
       }
     },
     "cifs-utils": {
-      "evra": "7.0-2.fc39.x86_64",
+      "evra": "7.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cifs-utils"
       }
     },
-    "cirrus-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "clevis": {
-      "evra": "20-1.fc39.x86_64",
+      "evra": "20-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-dracut": {
-      "evra": "20-1.fc39.x86_64",
+      "evra": "20-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "clevis-luks": {
-      "evra": "20-1.fc39.x86_64",
+      "evra": "20-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
+    "clevis-pin-tpm2": {
+      "evra": "0.5.3-5.fc40.x86_64",
+      "metadata": {
+        "sourcerpm": "clevis-pin-tpm2"
+      }
+    },
     "clevis-systemd": {
-      "evra": "20-1.fc39.x86_64",
+      "evra": "20-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "clevis"
       }
     },
     "cloud-utils-growpart": {
-      "evra": "0.33-3.fc39.noarch",
+      "evra": "0.33-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "cloud-utils"
       }
     },
     "composefs": {
-      "evra": "1.0.3-1.fc39.x86_64",
+      "evra": "1.0.3-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "composefs-libs": {
-      "evra": "1.0.3-1.fc39.x86_64",
+      "evra": "1.0.3-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "composefs"
       }
     },
     "conmon": {
-      "evra": "2:2.1.10-1.fc39.x86_64",
+      "evra": "2:2.1.10-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "conmon"
       }
     },
     "console-login-helper-messages": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-issuegen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-motdgen": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "console-login-helper-messages-profile": {
-      "evra": "0.21.3-6.fc39.noarch",
+      "evra": "0.21.3-8.fc40.noarch",
       "metadata": {
         "sourcerpm": "console-login-helper-messages"
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc39.noarch",
+      "evra": "2:2.230.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
     },
     "containerd": {
-      "evra": "1.6.23-2.fc39.x86_64",
+      "evra": "1.6.23-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "containerd"
       }
     },
-    "containernetworking-plugins": {
-      "evra": "1.3.0-3.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "containernetworking-plugins"
-      }
-    },
     "containers-common": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "containers-common-extra": {
-      "evra": "4:1-99.fc39.noarch",
+      "evra": "5:0.58.0-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "containers-common"
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc39.x86_64",
+      "evra": "0.21.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc39.x86_64",
+      "evra": "0.21.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreutils": {
-      "evra": "9.3-5.fc39.x86_64",
+      "evra": "9.4-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "coreutils-common": {
-      "evra": "9.3-5.fc39.x86_64",
+      "evra": "9.4-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "coreutils"
       }
     },
     "cpio": {
-      "evra": "2.14-4.fc39.x86_64",
+      "evra": "2.15-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cpio"
       }
     },
     "cracklib": {
-      "evra": "2.9.11-2.fc39.x86_64",
+      "evra": "2.9.11-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cracklib"
       }
     },
     "criu": {
-      "evra": "3.19-2.fc39.x86_64",
+      "evra": "3.19-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "criu-libs": {
-      "evra": "3.19-2.fc39.x86_64",
+      "evra": "3.19-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "criu"
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc39.x86_64",
+      "evra": "1.14.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.4-1.fc39.x86_64",
+      "evra": "1.14.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crypto-policies": {
-      "evra": "20231204-1.git1e3a2e4.fc39.noarch",
+      "evra": "20240201-2.git9f501f3.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
     },
     "cryptsetup": {
-      "evra": "2.6.1-3.fc39.x86_64",
+      "evra": "2.7.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "cryptsetup-libs": {
-      "evra": "2.6.1-3.fc39.x86_64",
+      "evra": "2.7.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cryptsetup"
       }
     },
     "curl": {
-      "evra": "8.2.1-4.fc39.x86_64",
+      "evra": "8.6.0-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "cyrus-sasl-gssapi": {
-      "evra": "2.1.28-11.fc39.x86_64",
+      "evra": "2.1.28-19.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "cyrus-sasl-lib": {
-      "evra": "2.1.28-11.fc39.x86_64",
+      "evra": "2.1.28-19.fc40.x86_64",
       "metadata": {
         "sourcerpm": "cyrus-sasl"
       }
     },
     "dbus": {
-      "evra": "1:1.14.10-1.fc39.x86_64",
+      "evra": "1:1.14.10-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-broker": {
-      "evra": "35-2.fc39.x86_64",
+      "evra": "36-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dbus-broker"
       }
     },
     "dbus-common": {
-      "evra": "1:1.14.10-1.fc39.noarch",
+      "evra": "1:1.14.10-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "dbus-libs": {
-      "evra": "1:1.14.10-1.fc39.x86_64",
+      "evra": "1:1.14.10-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dbus"
       }
     },
     "device-mapper": {
-      "evra": "1.02.197-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event": {
-      "evra": "1.02.197-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-event-libs": {
-      "evra": "1.02.197-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-libs": {
-      "evra": "1.02.197-1.fc39.x86_64",
+      "evra": "1.02.197-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "device-mapper-multipath": {
-      "evra": "0.9.5-2.fc39.x86_64",
+      "evra": "0.9.7-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-multipath-libs": {
-      "evra": "0.9.5-2.fc39.x86_64",
+      "evra": "0.9.7-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "device-mapper-persistent-data": {
-      "evra": "1.0.12-1.fc39.x86_64",
+      "evra": "1.0.12-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-persistent-data"
       }
     },
     "diffutils": {
-      "evra": "3.10-3.fc39.x86_64",
+      "evra": "3.10-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "diffutils"
       }
     },
     "dnsmasq": {
-      "evra": "2.90-1.fc39.x86_64",
+      "evra": "2.90-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dnsmasq"
       }
     },
     "dosfstools": {
-      "evra": "4.2-7.fc39.x86_64",
+      "evra": "4.2-11.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dosfstools"
       }
     },
     "dracut": {
-      "evra": "059-16.fc39.x86_64",
+      "evra": "060-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "059-16.fc39.x86_64",
+      "evra": "060-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "059-16.fc39.x86_64",
+      "evra": "060-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "duktape": {
-      "evra": "2.7.0-5.fc39.x86_64",
+      "evra": "2.7.0-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "duktape"
       }
     },
     "e2fsprogs": {
-      "evra": "1.47.0-2.fc39.x86_64",
+      "evra": "1.47.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "e2fsprogs-libs": {
-      "evra": "1.47.0-2.fc39.x86_64",
+      "evra": "1.47.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "efi-filesystem": {
-      "evra": "5-9.fc39.noarch",
+      "evra": "5-11.fc40.noarch",
       "metadata": {
         "sourcerpm": "efi-rpm-macros"
       }
     },
     "efibootmgr": {
-      "evra": "18-4.fc39.x86_64",
+      "evra": "18-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "efibootmgr"
       }
     },
     "efivar-libs": {
-      "evra": "39-1.fc39.x86_64",
+      "evra": "39-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "efivar"
       }
     },
     "elfutils-default-yama-scope": {
-      "evra": "0.191-2.fc39.noarch",
+      "evra": "0.191-4.fc40.noarch",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libelf": {
-      "evra": "0.191-2.fc39.x86_64",
+      "evra": "0.191-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "elfutils-libs": {
-      "evra": "0.191-2.fc39.x86_64",
+      "evra": "0.191-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "elfutils"
       }
     },
     "ethtool": {
-      "evra": "2:6.7-1.fc39.x86_64",
+      "evra": "2:6.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ethtool"
       }
     },
     "expat": {
-      "evra": "2.6.2-1.fc39.x86_64",
+      "evra": "2.6.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "expat"
       }
     },
     "fedora-gpg-keys": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-release-common": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-release-identity-coreos": {
-      "evra": "39-36.noarch",
+      "evra": "40-39.noarch",
       "metadata": {
         "sourcerpm": "fedora-release"
       }
     },
     "fedora-repos": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-archive": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "fedora-repos-ostree": {
-      "evra": "39-1.noarch",
+      "evra": "40-1.noarch",
       "metadata": {
         "sourcerpm": "fedora-repos"
       }
     },
     "file": {
-      "evra": "5.44-5.fc39.x86_64",
+      "evra": "5.45-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "file-libs": {
-      "evra": "5.44-5.fc39.x86_64",
+      "evra": "5.45-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "file"
       }
     },
     "filesystem": {
-      "evra": "3.18-6.fc39.x86_64",
+      "evra": "3.18-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "filesystem"
       }
     },
     "findutils": {
-      "evra": "1:4.9.0-5.fc39.x86_64",
+      "evra": "1:4.9.0-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "findutils"
       }
     },
     "flatpak-session-helper": {
-      "evra": "1.15.6-1.fc39.x86_64",
+      "evra": "1.15.8-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "flatpak"
       }
     },
     "fmt": {
-      "evra": "10.0.0-3.fc39.x86_64",
+      "evra": "10.2.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fmt"
       }
     },
     "fstrm": {
-      "evra": "0.6.1-8.fc39.x86_64",
+      "evra": "0.6.1-10.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fstrm"
       }
     },
     "fuse": {
-      "evra": "2.9.9-17.fc39.x86_64",
+      "evra": "2.9.9-21.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-common": {
-      "evra": "3.16.1-1.fc39.x86_64",
+      "evra": "3.16.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse-libs": {
-      "evra": "2.9.9-17.fc39.x86_64",
+      "evra": "2.9.9-21.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse"
       }
     },
     "fuse-overlayfs": {
-      "evra": "1.13-1.fc39.x86_64",
+      "evra": "1.13-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse-overlayfs"
       }
     },
     "fuse-sshfs": {
-      "evra": "3.7.3-9.fc39.x86_64",
+      "evra": "3.7.3-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse-sshfs"
       }
     },
     "fuse3": {
-      "evra": "3.16.1-1.fc39.x86_64",
+      "evra": "3.16.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fuse3-libs": {
-      "evra": "3.16.1-1.fc39.x86_64",
+      "evra": "3.16.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fuse3"
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc39.x86_64",
+      "evra": "1.9.16-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
     },
     "gawk": {
-      "evra": "5.2.2-2.fc39.x86_64",
+      "evra": "5.3.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gawk"
       }
     },
+    "gdbm": {
+      "evra": "1:1.23-6.fc40.x86_64",
+      "metadata": {
+        "sourcerpm": "gdbm"
+      }
+    },
     "gdbm-libs": {
-      "evra": "1:1.23-4.fc39.x86_64",
+      "evra": "1:1.23-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gdbm"
       }
     },
     "gdisk": {
-      "evra": "1.0.10-1.fc39.x86_64",
+      "evra": "1.0.10-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gdisk"
       }
     },
     "gettext-envsubst": {
-      "evra": "0.22-2.fc39.x86_64",
+      "evra": "0.22.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-libs": {
-      "evra": "0.22-2.fc39.x86_64",
+      "evra": "0.22.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "gettext-runtime": {
-      "evra": "0.22-2.fc39.x86_64",
+      "evra": "0.22.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gettext"
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc39.x86_64",
+      "evra": "2.44.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
     },
     "glib2": {
-      "evra": "2.78.3-1.fc39.x86_64",
+      "evra": "2.80.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glib2"
       }
     },
     "glibc": {
-      "evra": "2.38-18.fc39.x86_64",
+      "evra": "2.39-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.38-18.fc39.x86_64",
+      "evra": "2.39-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.38-18.fc39.x86_64",
+      "evra": "2.39-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.38-18.fc39.x86_64",
+      "evra": "2.39-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "gmp": {
-      "evra": "1:6.2.1-5.fc39.x86_64",
+      "evra": "1:6.2.1-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gmp"
       }
     },
     "gnupg2": {
-      "evra": "2.4.4-1.fc39.x86_64",
+      "evra": "2.4.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gnupg2"
       }
     },
     "gnutls": {
-      "evra": "3.8.5-1.fc39.x86_64",
+      "evra": "3.8.5-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gnutls"
       }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230929.00-1.fc39.noarch",
+      "evra": "20240307.00-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "google-compute-engine-guest-configs"
       }
     },
     "gpgme": {
-      "evra": "1.20.0-5.fc39.x86_64",
+      "evra": "1.23.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gpgme"
       }
     },
     "grep": {
-      "evra": "3.11-3.fc39.x86_64",
+      "evra": "3.11-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grep"
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-118.fc39.noarch",
+      "evra": "1:2.06-119.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-118.fc39.x86_64",
+      "evra": "1:2.06-119.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc": {
-      "evra": "1:2.06-118.fc39.x86_64",
+      "evra": "1:2.06-119.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-118.fc39.noarch",
+      "evra": "1:2.06-119.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-118.fc39.x86_64",
+      "evra": "1:2.06-119.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-118.fc39.x86_64",
+      "evra": "1:2.06-119.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.3-1.fc39.x86_64",
+      "evra": "6:0.7.3-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gvisor-tap-vsock"
       }
     },
     "gzip": {
-      "evra": "1.12-6.fc39.x86_64",
+      "evra": "1.13-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gzip"
       }
     },
     "hostname": {
-      "evra": "3.23-9.fc39.x86_64",
+      "evra": "3.23-12.fc40.x86_64",
       "metadata": {
         "sourcerpm": "hostname"
       }
     },
     "ignition": {
-      "evra": "2.18.0-1.fc39.x86_64",
+      "evra": "2.18.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ignition"
       }
     },
     "inih": {
-      "evra": "58-1.fc39.x86_64",
+      "evra": "58-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "inih"
       }
     },
-    "intel-audio-firmware": {
-      "evra": "20240410-1.fc39.noarch",
-      "metadata": {
-        "sourcerpm": "linux-firmware"
-      }
-    },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "ipcalc": {
-      "evra": "1.0.3-2.fc39.x86_64",
+      "evra": "1.0.3-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ipcalc"
       }
     },
     "iproute": {
-      "evra": "6.4.0-2.fc39.x86_64",
+      "evra": "6.7.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iproute-tc": {
-      "evra": "6.4.0-2.fc39.x86_64",
+      "evra": "6.7.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iproute"
       }
     },
     "iptables-legacy": {
-      "evra": "1.8.9-5.fc39.x86_64",
+      "evra": "1.8.10-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-legacy-libs": {
-      "evra": "1.8.9-5.fc39.x86_64",
+      "evra": "1.8.10-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-libs": {
-      "evra": "1.8.9-5.fc39.x86_64",
+      "evra": "1.8.10-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-nft": {
-      "evra": "1.8.9-5.fc39.x86_64",
+      "evra": "1.8.10-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-services": {
-      "evra": "1.8.9-5.fc39.noarch",
+      "evra": "1.8.10-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iptables-utils": {
-      "evra": "1.8.9-5.fc39.x86_64",
+      "evra": "1.8.10-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iptables"
       }
     },
     "iputils": {
-      "evra": "20221126-4.fc39.x86_64",
+      "evra": "20240117-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iputils"
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-2.fc39.x86_64",
+      "evra": "2:1.9.2-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
     },
     "iscsi-initiator-utils": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64",
+      "evra": "6.2.1.9-20.gita65a472.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "iscsi-initiator-utils-iscsiuio": {
-      "evra": "6.2.1.9-17.gitc26218d.fc39.x86_64",
+      "evra": "6.2.1.9-20.gita65a472.fc40.x86_64",
       "metadata": {
         "sourcerpm": "iscsi-initiator-utils"
       }
     },
     "isns-utils-libs": {
-      "evra": "0.101-7.fc39.x86_64",
+      "evra": "0.101-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "isns-utils"
       }
     },
     "jansson": {
-      "evra": "2.13.1-7.fc39.x86_64",
+      "evra": "2.13.1-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jansson"
       }
     },
     "jemalloc": {
-      "evra": "5.3.0-4.fc39.x86_64",
+      "evra": "5.3.0-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jemalloc"
       }
     },
     "jose": {
-      "evra": "13-1.fc39.x86_64",
+      "evra": "13-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "jq": {
-      "evra": "1.6-17.fc39.x86_64",
+      "evra": "1.7.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jq"
       }
     },
     "json-c": {
-      "evra": "0.17-1.fc39.x86_64",
+      "evra": "0.17-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "json-c"
       }
     },
     "json-glib": {
-      "evra": "1.8.0-1.fc39.x86_64",
+      "evra": "1.8.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "json-glib"
       }
     },
     "kbd": {
-      "evra": "2.6.3-1.fc39.x86_64",
+      "evra": "2.6.4-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-legacy": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kbd-misc": {
-      "evra": "2.6.3-1.fc39.noarch",
+      "evra": "2.6.4-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "kbd"
       }
     },
     "kernel": {
-      "evra": "6.8.6-200.fc39.x86_64",
+      "evra": "6.8.7-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.6-200.fc39.x86_64",
+      "evra": "6.8.7-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.6-200.fc39.x86_64",
+      "evra": "6.8.7-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.6-200.fc39.x86_64",
+      "evra": "6.8.7-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kexec-tools": {
-      "evra": "2.0.27-4.fc39.x86_64",
+      "evra": "2.0.28-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kexec-tools"
       }
     },
     "keyutils": {
-      "evra": "1.6.3-1.fc39.x86_64",
+      "evra": "1.6.3-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "keyutils-libs": {
-      "evra": "1.6.3-1.fc39.x86_64",
+      "evra": "1.6.3-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "keyutils"
       }
     },
     "kmod": {
-      "evra": "30-6.fc39.x86_64",
+      "evra": "31-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kmod-libs": {
-      "evra": "30-6.fc39.x86_64",
+      "evra": "31-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kmod"
       }
     },
     "kpartx": {
-      "evra": "0.9.5-2.fc39.x86_64",
+      "evra": "0.9.7-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "device-mapper-multipath"
       }
     },
     "krb5-libs": {
-      "evra": "1.21.2-3.fc39.x86_64",
+      "evra": "1.21.2-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "krb5"
       }
     },
     "less": {
-      "evra": "633-2.fc39.x86_64",
+      "evra": "643-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "less"
       }
     },
     "libacl": {
-      "evra": "2.3.1-9.fc39.x86_64",
+      "evra": "2.3.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "acl"
       }
     },
     "libaio": {
-      "evra": "0.3.111-16.fc39.x86_64",
+      "evra": "0.3.111-19.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libaio"
       }
     },
     "libarchive": {
-      "evra": "3.7.1-1.fc39.x86_64",
+      "evra": "3.7.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libarchive"
       }
     },
-    "libargon2": {
-      "evra": "20190702-3.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "argon2"
-      }
-    },
     "libassuan": {
-      "evra": "2.5.6-2.fc39.x86_64",
+      "evra": "2.5.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libassuan"
       }
     },
     "libattr": {
-      "evra": "2.5.1-8.fc39.x86_64",
+      "evra": "2.5.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "attr"
       }
     },
     "libbasicobjects": {
-      "evra": "0.1.1-54.fc39.x86_64",
+      "evra": "0.1.1-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libblkid": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libbpf": {
-      "evra": "2:1.1.0-4.fc39.x86_64",
+      "evra": "2:1.2.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libbpf"
       }
     },
     "libbsd": {
-      "evra": "0.12.2-1.fc39.x86_64",
+      "evra": "0.12.2-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libbsd"
       }
     },
     "libcap": {
-      "evra": "2.48-9.fc39.x86_64",
+      "evra": "2.69-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libcap"
       }
     },
     "libcap-ng": {
-      "evra": "0.8.3-8.fc39.x86_64",
+      "evra": "0.8.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libcap-ng"
       }
     },
     "libcbor": {
-      "evra": "0.10.2-2.fc39.x86_64",
+      "evra": "0.11.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libcbor"
       }
     },
     "libcollection": {
-      "evra": "0.7.0-54.fc39.x86_64",
+      "evra": "0.7.0-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libcom_err": {
-      "evra": "1.47.0-2.fc39.x86_64",
+      "evra": "1.47.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libcurl-minimal": {
-      "evra": "8.2.1-4.fc39.x86_64",
+      "evra": "8.6.0-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "curl"
       }
     },
     "libdaemon": {
-      "evra": "0.14-26.fc39.x86_64",
+      "evra": "0.14-29.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libdaemon"
       }
     },
-    "libdb": {
-      "evra": "5.3.28-56.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "libdb"
-      }
-    },
     "libdhash": {
-      "evra": "0.5.0-54.fc39.x86_64",
+      "evra": "0.5.0-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libeconf": {
-      "evra": "0.5.2-2.fc39.x86_64",
+      "evra": "0.6.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libeconf"
       }
     },
     "libedit": {
-      "evra": "3.1-48.20230828cvs.fc39.x86_64",
+      "evra": "3.1-50.20230828cvs.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libedit"
       }
     },
     "libevent": {
-      "evra": "2.1.12-9.fc39.x86_64",
+      "evra": "2.1.12-12.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libevent"
       }
     },
     "libfdisk": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libffi": {
-      "evra": "3.4.4-4.fc39.x86_64",
+      "evra": "3.4.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libffi"
       }
     },
     "libfido2": {
-      "evra": "1.13.0-3.fc39.x86_64",
+      "evra": "1.14.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libfido2"
       }
     },
     "libgcc": {
-      "evra": "13.2.1-7.fc39.x86_64",
+      "evra": "14.0.1-0.15.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libgcrypt": {
-      "evra": "1.10.2-2.fc39.x86_64",
+      "evra": "1.10.3-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgcrypt"
       }
     },
     "libgpg-error": {
-      "evra": "1.47-2.fc39.x86_64",
+      "evra": "1.48-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
     },
     "libgudev": {
-      "evra": "238-2.fc39.x86_64",
+      "evra": "238-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgudev"
       }
     },
     "libgusb": {
-      "evra": "0.4.8-1.fc39.x86_64",
+      "evra": "0.4.8-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgusb"
       }
     },
     "libibverbs": {
-      "evra": "46.0-4.fc39.x86_64",
+      "evra": "48.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rdma-core"
       }
     },
     "libicu": {
-      "evra": "73.2-2.fc39.x86_64",
+      "evra": "74.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "icu"
       }
     },
     "libidn2": {
-      "evra": "2.3.7-1.fc39.x86_64",
+      "evra": "2.3.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libidn2"
       }
     },
     "libini_config": {
-      "evra": "1.3.1-54.fc39.x86_64",
+      "evra": "1.3.1-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libjcat": {
-      "evra": "0.2.1-1.fc39.x86_64",
+      "evra": "0.2.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libjcat"
       }
     },
     "libjose": {
-      "evra": "13-1.fc39.x86_64",
+      "evra": "13-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jose"
       }
     },
     "libkcapi": {
-      "evra": "1.4.0-7.fc39.x86_64",
+      "evra": "1.4.0-10.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libkcapi-hmaccalc": {
-      "evra": "1.4.0-7.fc39.x86_64",
+      "evra": "1.4.0-10.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libkcapi"
       }
     },
     "libksba": {
-      "evra": "1.6.4-2.fc39.x86_64",
+      "evra": "1.6.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libksba"
       }
     },
     "libldb": {
-      "evra": "2.8.0-1.fc39.x86_64",
+      "evra": "2.9.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libldb"
       }
     },
     "libluksmeta": {
-      "evra": "9-16.fc39.x86_64",
+      "evra": "9-22.fc40.x86_64",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "libmaxminddb": {
-      "evra": "1.9.1-1.fc39.x86_64",
+      "evra": "1.9.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libmaxminddb"
       }
     },
     "libmd": {
-      "evra": "1.1.0-2.fc39.x86_64",
+      "evra": "1.1.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libmd"
       }
     },
     "libmnl": {
-      "evra": "1.0.5-3.fc39.x86_64",
+      "evra": "1.0.5-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libmnl"
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-5.fc39.x86_64",
+      "evra": "2.15.0-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
     },
     "libmount": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libndp": {
-      "evra": "1.8-6.fc39.x86_64",
+      "evra": "1.8-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libndp"
       }
     },
     "libnet": {
-      "evra": "1.3-1.fc39.x86_64",
+      "evra": "1.3-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnet"
       }
     },
     "libnetfilter_conntrack": {
-      "evra": "1.0.9-2.fc39.x86_64",
+      "evra": "1.0.9-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnetfilter_conntrack"
       }
     },
     "libnfnetlink": {
-      "evra": "1.0.1-24.fc39.x86_64",
+      "evra": "1.0.1-27.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnfnetlink"
       }
     },
     "libnfsidmap": {
-      "evra": "1:2.6.4-0.rc6.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "libnftnl": {
-      "evra": "1.2.6-2.fc39.x86_64",
+      "evra": "1.2.6-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnftnl"
       }
     },
     "libnghttp2": {
-      "evra": "1.55.1-5.fc39.x86_64",
+      "evra": "1.59.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nghttp2"
       }
     },
     "libnl3": {
-      "evra": "3.9.0-1.fc39.x86_64",
+      "evra": "3.9.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnl3-cli": {
-      "evra": "3.9.0-1.fc39.x86_64",
+      "evra": "3.9.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnl3"
       }
     },
     "libnsl2": {
-      "evra": "2.0.0-6.fc39.x86_64",
+      "evra": "2.0.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnsl2"
       }
     },
     "libnvme": {
-      "evra": "1.6-2.fc39.x86_64",
+      "evra": "1.8-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libnvme"
       }
     },
     "libpath_utils": {
-      "evra": "0.2.1-54.fc39.x86_64",
+      "evra": "0.2.1-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "libpcap": {
-      "evra": "14:1.10.4-2.fc39.x86_64",
+      "evra": "14:1.10.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libpcap"
       }
     },
     "libpkgconf": {
-      "evra": "1.9.5-2.fc39.x86_64",
+      "evra": "2.1.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "libpsl": {
-      "evra": "0.21.2-4.fc39.x86_64",
+      "evra": "0.21.5-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libpsl"
       }
     },
     "libpwquality": {
-      "evra": "1.4.5-6.fc39.x86_64",
+      "evra": "1.4.5-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libpwquality"
       }
     },
     "libref_array": {
-      "evra": "0.1.5-54.fc39.x86_64",
+      "evra": "0.1.5-56.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ding-libs"
       }
     },
     "librepo": {
-      "evra": "1.17.1-1.fc39.x86_64",
+      "evra": "1.17.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "librepo"
       }
     },
     "libreport-filesystem": {
-      "evra": "2.17.11-3.fc39.noarch",
+      "evra": "2.17.15-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "libreport"
       }
     },
     "libseccomp": {
-      "evra": "2.5.3-6.fc39.x86_64",
+      "evra": "2.5.3-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libseccomp"
       }
     },
     "libselinux": {
-      "evra": "3.5-5.fc39.x86_64",
+      "evra": "3.6-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libselinux-utils": {
-      "evra": "3.5-5.fc39.x86_64",
+      "evra": "3.6-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libselinux"
       }
     },
     "libsemanage": {
-      "evra": "3.5-4.fc39.x86_64",
+      "evra": "3.6-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libsemanage"
       }
     },
     "libsepol": {
-      "evra": "3.5-2.fc39.x86_64",
+      "evra": "3.6-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libsepol"
       }
     },
-    "libsigsegv": {
-      "evra": "2.14-5.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "libsigsegv"
-      }
-    },
     "libslirp": {
-      "evra": "4.7.0-4.fc39.x86_64",
+      "evra": "4.7.0-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libslirp"
       }
     },
     "libsmartcols": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libsmbclient": {
-      "evra": "2:4.19.6-1.fc39.x86_64",
+      "evra": "2:4.20.0-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc39.x86_64",
+      "evra": "0.7.28-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
     },
     "libss": {
-      "evra": "1.47.0-2.fc39.x86_64",
+      "evra": "1.47.0-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "e2fsprogs"
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libstdc++": {
-      "evra": "13.2.1-7.fc39.x86_64",
+      "evra": "14.0.1-0.15.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
     },
     "libtalloc": {
-      "evra": "2.4.1-1.fc39.x86_64",
+      "evra": "2.4.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtalloc"
       }
     },
     "libtasn1": {
-      "evra": "4.19.0-3.fc39.x86_64",
+      "evra": "4.19.0-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtasn1"
       }
     },
     "libtdb": {
-      "evra": "1.4.9-1.fc39.x86_64",
+      "evra": "1.4.10-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtdb"
       }
     },
     "libteam": {
-      "evra": "1.32-1.fc39.x86_64",
+      "evra": "1.32-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "libtevent": {
-      "evra": "0.15.0-1.fc39.x86_64",
+      "evra": "0.16.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtevent"
       }
     },
     "libtirpc": {
-      "evra": "1.3.4-1.rc3.fc39.x86_64",
+      "evra": "1.3.4-1.rc3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtirpc"
       }
     },
     "libtool-ltdl": {
-      "evra": "2.4.7-7.fc39.x86_64",
+      "evra": "2.4.7-10.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libtool"
       }
     },
     "libunistring": {
-      "evra": "1.1-5.fc39.x86_64",
+      "evra": "1.1-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libunistring"
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc39.x86_64",
+      "evra": "1.0.27-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
     },
-    "libuser": {
-      "evra": "0.64-4.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "libuser"
-      }
-    },
     "libutempter": {
-      "evra": "1.2.1-10.fc39.x86_64",
+      "evra": "1.2.1-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libutempter"
       }
     },
     "libuuid": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "libuv": {
-      "evra": "1:1.48.0-1.fc39.x86_64",
+      "evra": "1:1.48.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libuv"
       }
     },
     "libverto": {
-      "evra": "0.3.2-6.fc39.x86_64",
+      "evra": "0.3.2-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libverto"
       }
     },
     "libwbclient": {
-      "evra": "2:4.19.6-1.fc39.x86_64",
+      "evra": "2:4.20.0-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "libxcrypt": {
-      "evra": "4.4.36-2.fc39.x86_64",
+      "evra": "4.4.36-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxcrypt"
       }
     },
     "libxml2": {
-      "evra": "2.10.4-3.fc39.x86_64",
+      "evra": "2.12.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxml2"
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc39.x86_64",
+      "evra": "0.3.18-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
     },
     "libyaml": {
-      "evra": "0.2.5-12.fc39.x86_64",
+      "evra": "0.2.5-14.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libyaml"
       }
     },
     "libzstd": {
-      "evra": "1.5.6-1.fc39.x86_64",
+      "evra": "1.5.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "zstd"
       }
     },
-    "linux-atm-libs": {
-      "evra": "2.5.1-36.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "linux-atm"
-      }
-    },
     "linux-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "lmdb-libs": {
-      "evra": "0.9.32-1.fc39.x86_64",
+      "evra": "0.9.32-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lmdb"
       }
     },
     "logrotate": {
-      "evra": "3.21.0-4.fc39.x86_64",
+      "evra": "3.21.0-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "logrotate"
       }
     },
     "lsof": {
-      "evra": "4.96.3-4.fc39.x86_64",
+      "evra": "4.98.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lsof"
       }
     },
     "lua-libs": {
-      "evra": "5.4.6-3.fc39.x86_64",
+      "evra": "5.4.6-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lua"
       }
     },
     "luksmeta": {
-      "evra": "9-16.fc39.x86_64",
+      "evra": "9-22.fc40.x86_64",
       "metadata": {
         "sourcerpm": "luksmeta"
       }
     },
     "lvm2": {
-      "evra": "2.03.23-1.fc39.x86_64",
+      "evra": "2.03.23-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lvm2-libs": {
-      "evra": "2.03.23-1.fc39.x86_64",
+      "evra": "2.03.23-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lvm2"
       }
     },
     "lz4-libs": {
-      "evra": "1.9.4-4.fc39.x86_64",
+      "evra": "1.9.4-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lz4"
       }
     },
     "lzo": {
-      "evra": "2.10-9.fc39.x86_64",
+      "evra": "2.10-12.fc40.x86_64",
       "metadata": {
         "sourcerpm": "lzo"
       }
     },
     "mdadm": {
-      "evra": "4.2-6.fc39.x86_64",
+      "evra": "4.2-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "mdadm"
       }
     },
     "microcode_ctl": {
-      "evra": "2:2.1-58.fc39.x86_64",
+      "evra": "2:2.1-61.fc40.x86_64",
       "metadata": {
         "sourcerpm": "microcode_ctl"
       }
     },
     "moby-engine": {
-      "evra": "24.0.5-1.fc39.x86_64",
+      "evra": "24.0.5-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "moby-engine"
       }
     },
     "mokutil": {
-      "evra": "2:0.6.0-7.fc39.x86_64",
+      "evra": "2:0.7.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "mokutil"
       }
     },
     "mpfr": {
-      "evra": "4.2.0-3.fc39.x86_64",
+      "evra": "4.2.1-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "mpfr"
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nano": {
-      "evra": "7.2-4.fc39.x86_64",
+      "evra": "7.2-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-4.fc39.noarch",
+      "evra": "7.2-6.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "ncurses": {
-      "evra": "6.4-7.20230520.fc39.1.x86_64",
+      "evra": "6.4-12.20240127.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-base": {
-      "evra": "6.4-7.20230520.fc39.1.noarch",
+      "evra": "6.4-12.20240127.fc40.noarch",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "ncurses-libs": {
-      "evra": "6.4-7.20230520.fc39.1.x86_64",
+      "evra": "6.4-12.20240127.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ncurses"
       }
     },
     "net-tools": {
-      "evra": "2.0-0.67.20160912git.fc39.x86_64",
+      "evra": "2.0-0.69.20160912git.fc40.x86_64",
       "metadata": {
         "sourcerpm": "net-tools"
       }
     },
     "netavark": {
-      "evra": "1.10.3-1.fc39.x86_64",
+      "evra": "1.10.3-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "netavark"
       }
     },
     "nettle": {
-      "evra": "3.9.1-2.fc39.x86_64",
+      "evra": "3.9.1-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nettle"
       }
     },
     "newt": {
-      "evra": "0.52.23-4.fc39.x86_64",
+      "evra": "0.52.24-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "newt"
       }
     },
     "nfs-utils-coreos": {
-      "evra": "1:2.6.4-0.rc6.fc39.x86_64",
+      "evra": "1:2.6.4-0.rc6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nfs-utils"
       }
     },
     "nftables": {
-      "evra": "1:1.0.7-3.fc39.x86_64",
+      "evra": "1:1.0.9-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nftables"
       }
     },
     "nmstate": {
-      "evra": "2.2.26-2.fc39.x86_64",
+      "evra": "2.2.26-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nmstate"
       }
     },
     "npth": {
-      "evra": "1.6-14.fc39.x86_64",
+      "evra": "1.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "npth"
       }
     },
     "nss-altfiles": {
-      "evra": "2.23.0-1.fc39.x86_64",
+      "evra": "2.23.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nss-altfiles"
       }
     },
     "numactl-libs": {
-      "evra": "2.0.16-3.fc39.x86_64",
+      "evra": "2.0.16-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "numactl"
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "nvme-cli": {
-      "evra": "2.6-1.fc39.x86_64",
+      "evra": "2.8-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nvme-cli"
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "oniguruma": {
-      "evra": "6.9.9-1.fc39.x86_64",
+      "evra": "6.9.9-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "oniguruma"
       }
     },
     "openldap": {
-      "evra": "2.6.6-1.fc39.x86_64",
+      "evra": "2.6.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "openldap"
       }
     },
     "openssh": {
-      "evra": "9.3p1-10.fc39.x86_64",
+      "evra": "9.6p1-1.fc40.2.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-clients": {
-      "evra": "9.3p1-10.fc39.x86_64",
+      "evra": "9.6p1-1.fc40.2.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssh-server": {
-      "evra": "9.3p1-10.fc39.x86_64",
+      "evra": "9.6p1-1.fc40.2.x86_64",
       "metadata": {
         "sourcerpm": "openssh"
       }
     },
     "openssl": {
-      "evra": "1:3.1.1-4.fc39.x86_64",
+      "evra": "1:3.2.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "openssl-libs": {
-      "evra": "1:3.1.1-4.fc39.x86_64",
+      "evra": "1:3.2.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "openssl"
       }
     },
     "os-prober": {
-      "evra": "1.81-4.fc39.x86_64",
+      "evra": "1.81-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "os-prober"
       }
     },
     "ostree": {
-      "evra": "2024.5-1.fc39.x86_64",
+      "evra": "2024.5-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "ostree-libs": {
-      "evra": "2024.5-1.fc39.x86_64",
+      "evra": "2024.5-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "ostree"
       }
     },
     "p11-kit": {
-      "evra": "0.25.3-1.fc39.x86_64",
+      "evra": "0.25.3-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "p11-kit-trust": {
-      "evra": "0.25.3-1.fc39.x86_64",
+      "evra": "0.25.3-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "p11-kit"
       }
     },
     "pam": {
-      "evra": "1.5.3-3.fc39.x86_64",
+      "evra": "1.6.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.5.3-3.fc39.x86_64",
+      "evra": "1.6.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
-    "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc39.x86_64",
+    "passim-libs": {
+      "evra": "0.1.5-3.fc40.x86_64",
       "metadata": {
-        "sourcerpm": "passt"
+        "sourcerpm": "passim"
       }
     },
-    "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc39.noarch",
+    "passt": {
+      "evra": "0^20240326.g4988e2b-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
-    "passwd": {
-      "evra": "0.80-15.fc39.x86_64",
+    "passt-selinux": {
+      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
       "metadata": {
-        "sourcerpm": "passwd"
+        "sourcerpm": "passt"
       }
     },
     "pcre2": {
-      "evra": "10.42-1.fc39.2.x86_64",
+      "evra": "10.42-2.fc40.2.x86_64",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pcre2-syntax": {
-      "evra": "10.42-1.fc39.2.noarch",
+      "evra": "10.42-2.fc40.2.noarch",
       "metadata": {
         "sourcerpm": "pcre2"
       }
     },
     "pigz": {
-      "evra": "2.8-2.fc39.x86_64",
+      "evra": "2.8-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pigz"
       }
     },
     "pkgconf": {
-      "evra": "1.9.5-2.fc39.x86_64",
+      "evra": "2.1.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-m4": {
-      "evra": "1.9.5-2.fc39.noarch",
+      "evra": "2.1.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "pkgconf-pkg-config": {
-      "evra": "1.9.5-2.fc39.x86_64",
+      "evra": "2.1.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pkgconf"
       }
     },
     "podman": {
-      "evra": "5:4.9.4-1.fc39.x86_64",
-      "metadata": {
-        "sourcerpm": "podman"
-      }
-    },
-    "podman-plugins": {
-      "evra": "5:4.9.4-1.fc39.x86_64",
+      "evra": "5:5.0.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
     },
     "policycoreutils": {
-      "evra": "3.5-8.fc39.x86_64",
+      "evra": "3.6-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "policycoreutils"
       }
     },
     "polkit": {
-      "evra": "123-1.fc39.1.x86_64",
+      "evra": "124-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-libs": {
-      "evra": "123-1.fc39.1.x86_64",
+      "evra": "124-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "polkit"
       }
     },
     "polkit-pkla-compat": {
-      "evra": "0.1-26.fc39.x86_64",
+      "evra": "0.1-28.fc40.x86_64",
       "metadata": {
         "sourcerpm": "polkit-pkla-compat"
       }
     },
     "popt": {
-      "evra": "1.19-3.fc39.x86_64",
+      "evra": "1.19-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "popt"
       }
     },
     "procps-ng": {
-      "evra": "4.0.3-5.fc39.x86_64",
+      "evra": "4.0.4-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "procps-ng"
       }
     },
     "protobuf-c": {
-      "evra": "1.4.1-5.fc39.x86_64",
+      "evra": "1.5.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "protobuf-c"
       }
     },
     "psmisc": {
-      "evra": "23.6-4.fc39.x86_64",
+      "evra": "23.6-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "psmisc"
       }
     },
     "publicsuffix-list-dafsa": {
-      "evra": "20240107-1.fc39.noarch",
+      "evra": "20240107-3.fc40.noarch",
       "metadata": {
         "sourcerpm": "publicsuffix-list"
       }
     },
     "readline": {
-      "evra": "8.2-6.fc39.x86_64",
+      "evra": "8.2-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "readline"
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "rpcbind": {
-      "evra": "1.2.6-4.rc3.fc39.x86_64",
+      "evra": "1.2.6-4.rc3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpcbind"
       }
     },
     "rpm": {
-      "evra": "4.19.1.1-1.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-libs": {
-      "evra": "4.19.1.1-1.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-ostree": {
-      "evra": "2024.4-6.fc39.x86_64",
+      "evra": "2024.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-ostree-libs": {
-      "evra": "2024.4-6.fc39.x86_64",
+      "evra": "2024.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpm-ostree"
       }
     },
     "rpm-plugin-selinux": {
-      "evra": "4.19.1.1-1.fc39.x86_64",
+      "evra": "4.19.1.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rpm"
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-1.fc39.x86_64",
+      "evra": "1.6.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
     },
     "rsync": {
-      "evra": "3.3.0-1.fc39.x86_64",
+      "evra": "3.3.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rsync"
       }
     },
     "runc": {
-      "evra": "2:1.1.12-1.fc39.x86_64",
+      "evra": "2:1.1.12-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "runc"
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.19.6-1.fc39.x86_64",
+      "evra": "2:4.20.0-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.19.6-1.fc39.noarch",
+      "evra": "2:4.20.0-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.19.6-1.fc39.x86_64",
+      "evra": "2:4.20.0-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "sed": {
-      "evra": "4.8-14.fc39.x86_64",
+      "evra": "4.9-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sed"
       }
     },
     "selinux-policy": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "39.5-1.fc39.noarch",
+      "evra": "40.16-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "setup": {
-      "evra": "2.14.4-1.fc39.noarch",
+      "evra": "2.14.5-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "setup"
       }
     },
     "sg3_utils": {
-      "evra": "1.46-6.fc39.x86_64",
+      "evra": "1.48-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "sg3_utils-libs": {
-      "evra": "1.46-6.fc39.x86_64",
+      "evra": "1.48-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sg3_utils"
       }
     },
     "shadow-utils": {
-      "evra": "2:4.14.0-2.fc39.x86_64",
+      "evra": "2:4.15.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shadow-utils-subid": {
-      "evra": "2:4.14.0-2.fc39.x86_64",
+      "evra": "2:4.15.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "shadow-utils"
       }
     },
     "shared-mime-info": {
-      "evra": "2.2-4.fc39.x86_64",
+      "evra": "2.3-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2317,313 +2281,313 @@
       }
     },
     "skopeo": {
-      "evra": "1:1.15.0-1.fc39.x86_64",
+      "evra": "1:1.15.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "skopeo"
       }
     },
     "slang": {
-      "evra": "2.3.3-4.fc39.x86_64",
+      "evra": "2.3.3-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "slang"
       }
     },
     "slirp4netns": {
-      "evra": "1.2.2-1.fc39.x86_64",
+      "evra": "1.2.2-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "slirp4netns"
       }
     },
     "snappy": {
-      "evra": "1.1.10-2.fc39.x86_64",
+      "evra": "1.1.10-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "snappy"
       }
     },
     "socat": {
-      "evra": "1.8.0.0-2.fc39.x86_64",
+      "evra": "1.8.0.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "socat"
       }
     },
     "spdlog": {
-      "evra": "1.12.0-2.fc39.x86_64",
+      "evra": "1.12.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "spdlog"
       }
     },
     "sqlite-libs": {
-      "evra": "3.42.0-7.fc39.x86_64",
+      "evra": "3.45.1-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sqlite"
       }
     },
     "squashfs-tools": {
-      "evra": "4.6.1-2.fc39.x86_64",
+      "evra": "4.6.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "squashfs-tools"
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-4.fc39.x86_64",
+      "evra": "0.1.4-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-1.fc39.x86_64",
+      "evra": "2.9.4-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc39.x86_64",
+      "evra": "1.19.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "stalld"
       }
     },
     "sudo": {
-      "evra": "1.9.15-1.p5.fc39.x86_64",
+      "evra": "1.9.15-2.p5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sudo"
       }
     },
     "systemd": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "254.10-1.fc39.x86_64",
+      "evra": "255.4-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "tar": {
-      "evra": "2:1.35-2.fc39.x86_64",
+      "evra": "2:1.35-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tar"
       }
     },
     "teamd": {
-      "evra": "1.32-1.fc39.x86_64",
+      "evra": "1.32-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libteam"
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc39.noarch",
+      "evra": "20240410-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "toolbox": {
-      "evra": "0.0.99.5-4.fc39.x86_64",
+      "evra": "0.0.99.5-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "toolbox"
       }
     },
     "tpm2-tools": {
-      "evra": "5.5-4.fc39.x86_64",
+      "evra": "5.6-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-6.fc39.x86_64",
+      "evra": "4.0.1-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-6.fc39.x86_64",
+      "evra": "4.0.1-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tzdata": {
-      "evra": "2024a-2.fc39.noarch",
+      "evra": "2024a-5.fc40.noarch",
       "metadata": {
         "sourcerpm": "tzdata"
       }
     },
     "userspace-rcu": {
-      "evra": "0.14.0-3.fc39.x86_64",
+      "evra": "0.14.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "userspace-rcu"
       }
     },
     "util-linux": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.39.4-1.fc39.x86_64",
+      "evra": "2.40-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc39.noarch",
+      "evra": "2:9.1.309-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc39.x86_64",
+      "evra": "2:9.1.309-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "wasmedge-rt": {
-      "evra": "0.13.5-1.fc39.x86_64",
+      "evra": "0.13.5-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "wasmedge"
       }
     },
     "which": {
-      "evra": "2.21-40.fc39.x86_64",
+      "evra": "2.21-41.fc40.x86_64",
       "metadata": {
         "sourcerpm": "which"
       }
     },
     "wireguard-tools": {
-      "evra": "1.0.20210914-5.fc39.x86_64",
+      "evra": "1.0.20210914-6.fc40.x86_64",
       "metadata": {
         "sourcerpm": "wireguard-tools"
       }
     },
     "xfsprogs": {
-      "evra": "6.4.0-1.fc39.x86_64",
+      "evra": "6.5.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "xfsprogs"
       }
     },
     "xxhash-libs": {
-      "evra": "0.8.2-1.fc39.x86_64",
+      "evra": "0.8.2-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "xxhash"
       }
     },
     "xz": {
-      "evra": "5.4.4-1.fc39.x86_64",
+      "evra": "1:5.4.6-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "xz-libs": {
-      "evra": "5.4.4-1.fc39.x86_64",
+      "evra": "1:5.4.6-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "xz"
       }
     },
     "yajl": {
-      "evra": "2.1.0-22.fc39.x86_64",
+      "evra": "2.1.0-23.fc40.x86_64",
       "metadata": {
         "sourcerpm": "yajl"
       }
     },
     "zchunk-libs": {
-      "evra": "1.4.0-1.fc39.x86_64",
+      "evra": "1.4.0-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "zchunk"
       }
     },
     "zincati": {
-      "evra": "0.0.27-1.fc39.x86_64",
+      "evra": "0.0.27-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-zincati"
       }
     },
-    "zlib": {
-      "evra": "1.2.13-4.fc39.x86_64",
+    "zlib-ng-compat": {
+      "evra": "2.1.6-2.fc40.x86_64",
       "metadata": {
-        "sourcerpm": "zlib"
+        "sourcerpm": "zlib-ng"
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-8.fc39.x86_64",
+      "evra": "1.1.2-9.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
     },
     "zstd": {
-      "evra": "1.5.6-1.fc39.x86_64",
+      "evra": "1.5.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "zstd"
       }
@@ -2632,14 +2596,17 @@
   "metadata": {
     "generated": "2024-04-21T00:00:00Z",
     "rpmmd_repos": {
-      "fedora": {
-        "generated": "2023-11-01T00:12:39Z"
+      "fedora-candidate-compose": {
+        "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T15:19:06Z"
+        "generated": "2024-04-21T12:47:21Z"
+      },
+      "fedora-next": {
+        "generated": "2024-04-19T08:53:31Z"
       },
-      "fedora-updates": {
-        "generated": "2024-04-21T01:12:02Z"
+      "fedora-next-updates": {
+        "generated": "2024-04-21T01:00:20Z"
       }
     }
   }
diff --git a/manifest.yaml b/manifest.yaml
index d16344b9dc..c3028e15a7 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -2,7 +2,7 @@ variables:
   stream: testing-devel
   prod: false
 
-releasever: 39
+releasever: 40
 
 repos:
   # These repos are there to make it easier to add new packages to the OS and to

From 560715d63461d8f4d70cc24f23ff3aa8d5e0e23a Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 23 Apr 2024 12:58:53 -0400
Subject: [PATCH 2119/2157] Updating all container references to fedora 40

---
 tests/kola/binfmt/qemu                      | 2 +-
 tests/kola/docker/basic                     | 2 +-
 tests/kola/ntp/data/ntplib.sh               | 2 +-
 tests/kola/podman/dns/test.sh               | 2 +-
 tests/kola/podman/rootless-pasta-networking | 2 +-
 tests/kola/podman/rootless-systemd          | 2 +-
 tests/kola/selinux/podman-tmpfs-context     | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/kola/binfmt/qemu b/tests/kola/binfmt/qemu
index 70282cf188..27e8d5e9f5 100755
--- a/tests/kola/binfmt/qemu
+++ b/tests/kola/binfmt/qemu
@@ -20,7 +20,7 @@ set -xeuo pipefail
 
 case "$(arch)" in
     aarch64|ppc64le|s390x)
-        containerArch=$(podman run --arch=amd64 --rm quay.io/fedora/fedora:39 arch)
+        containerArch=$(podman run --arch=amd64 --rm quay.io/fedora/fedora:40 arch)
         if [ "$containerArch" != "x86_64" ]; then
             fatal "Test failed: x86_64 qemu emulator failed to run"
         fi
diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
index e8c970e5ef..8a140bb67c 100755
--- a/tests/kola/docker/basic
+++ b/tests/kola/docker/basic
@@ -13,6 +13,6 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-docker run --rm quay.io/fedora/fedora:39 true
+docker run --rm quay.io/fedora/fedora:40 true
 
 ok "basic docker run successfully"
diff --git a/tests/kola/ntp/data/ntplib.sh b/tests/kola/ntp/data/ntplib.sh
index 507e8cea1a..a17c1229ed 100644
--- a/tests/kola/ntp/data/ntplib.sh
+++ b/tests/kola/ntp/data/ntplib.sh
@@ -20,7 +20,7 @@ ntp_test_setup() {
     # run podman commands to set up dnsmasq server
     pushd "$(mktemp -d)"
     cat <<EOF >Dockerfile
-FROM quay.io/fedora/fedora:39
+FROM quay.io/fedora/fedora:40
 RUN dnf -y install systemd dnsmasq iproute iputils \
 && dnf clean all \
 && systemctl enable dnsmasq
diff --git a/tests/kola/podman/dns/test.sh b/tests/kola/podman/dns/test.sh
index b3c77efb8f..e77836d192 100755
--- a/tests/kola/podman/dns/test.sh
+++ b/tests/kola/podman/dns/test.sh
@@ -23,7 +23,7 @@ runascoreuserscript='
 set -euxo pipefail
 
 podman network create testnetwork
-podman run --rm -t --network=testnetwork quay.io/fedora/fedora:39 getent hosts google.com
+podman run --rm -t --network=testnetwork quay.io/fedora/fedora:40 getent hosts google.com
 podman network rm testnetwork
 '
 
diff --git a/tests/kola/podman/rootless-pasta-networking b/tests/kola/podman/rootless-pasta-networking
index ca11c4126e..594743a6ee 100755
--- a/tests/kola/podman/rootless-pasta-networking
+++ b/tests/kola/podman/rootless-pasta-networking
@@ -20,7 +20,7 @@ set -xeuo pipefail
 runascoreuserscript='#!/bin/bash
 set -euxo pipefail
 # Just a basic test that uses pasta network and sets the gateway
-podman run -i --net=pasta:--mtu,1500 quay.io/fedora/fedora:39 bash <<"EOF"
+podman run -i --net=pasta:--mtu,1500 quay.io/fedora/fedora:40 bash <<"EOF"
 set -euxo pipefail
 # Verify the mtu got set to 1500. No /sbin/ip so just use /sys/class/net/<nic>/mtu
 cat /sys/class/net/e*/mtu | grep 1500
diff --git a/tests/kola/podman/rootless-systemd b/tests/kola/podman/rootless-systemd
index bae9596532..cdfd51b0ff 100755
--- a/tests/kola/podman/rootless-systemd
+++ b/tests/kola/podman/rootless-systemd
@@ -35,7 +35,7 @@ set -euxo pipefail
 #       https://github.com/coreos/coreos-assembler/issues/1645
 cd $(mktemp -d)
 cat <<EOF > Containerfile
-FROM quay.io/fedora/fedora:39
+FROM quay.io/fedora/fedora:40
 RUN dnf -y update \
 && dnf -y install systemd httpd \
 && dnf clean all \
diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 1e033e9f2d..d87e1c3f77 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -15,7 +15,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-context=$(podman run --rm --privileged quay.io/fedora/fedora:39 \
+context=$(podman run --rm --privileged quay.io/fedora/fedora:40 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"

From 5c9ec57af9191a48b6bc802bbf1993b4206cf73f Mon Sep 17 00:00:00 2001
From: Aashish Radhakrishnan <aaradhak@redhat.com>
Date: Tue, 23 Apr 2024 23:10:30 -0400
Subject: [PATCH 2120/2157] tests/kola: use toolbox container image for
 selinux.podman-tmpfs-context

In F40 the base container no longer includes `util-linux-core` so we
can't run the `mount` command. Let's just pull the toolbox container for
now, which does include it.
---
 tests/kola/selinux/podman-tmpfs-context | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index d87e1c3f77..52ce4d44da 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -15,7 +15,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-context=$(podman run --rm --privileged quay.io/fedora/fedora:40 \
+context=$(podman run --rm --privileged quay.io/fedora/fedora-toolbox:40 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"

From 1ac77fd634088e11bc5e27b583dee11a85b4f1f1 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 23 Apr 2024 16:05:04 -0400
Subject: [PATCH 2121/2157] overlay.d/15fcos: update link to FAQ

Also one wording change.
---
 overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares b/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares
index 5172b3a1c0..9f93e31353 100755
--- a/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares
+++ b/overlay.d/15fcos/usr/libexec/coreos-check-wireless-firmwares
@@ -49,12 +49,12 @@ motd_path=/run/motd.d/30_wireless_firmwares_warning.motd
 cat << EOF > "${motd_path}"
 ${warn}
 ##########################################################################
-WARNING: The NetworkManager-wifi is a requested layered package on this
+WARNING: NetworkManager-wifi is a requested layered package on this
 system, but no Wi-Fi drivers are requested. The Wi-Fi drivers will no
 longer be included by default in the future.
 
 More context and remediation steps are available in the following FAQ entry:
-https://docs.fedoraproject.org/en-US/fedora-coreos/sysconfig-enabling-wifi/
+https://docs.fedoraproject.org/en-US/fedora-coreos/faq/#wifi-fw
 
 To disable this warning, use:
 sudo systemctl disable coreos-check-wireless-firmwares.service

From 740d3a8be7b56c6e5d67d03acb932a8316936d1d Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 24 Apr 2024 14:17:05 +0000
Subject: [PATCH 2122/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1130/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 31 ++++++++++++++-----------------
 manifest-lock.ppc64le.json | 33 +++++++++++++++------------------
 manifest-lock.s390x.json   | 23 ++++++++++-------------
 manifest-lock.x86_64.json  | 35 ++++++++++++++++-------------------
 4 files changed, 55 insertions(+), 67 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8b59063e1a..4534259c32 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc40.aarch64",
+      "evra": "32:9.18.26-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc40.noarch",
+      "evra": "32:9.18.26-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc40.aarch64",
+      "evra": "32:9.18.26-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -853,25 +853,25 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-119.fc40.noarch",
+      "evra": "1:2.06-121.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-119.fc40.aarch64",
+      "evra": "1:2.06-121.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-119.fc40.aarch64",
+      "evra": "1:2.06-121.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-119.fc40.aarch64",
+      "evra": "1:2.06-121.fc40.aarch64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -1285,7 +1285,7 @@
       }
     },
     "libgusb": {
-      "evra": "0.4.8-3.fc40.aarch64",
+      "evra": "0.4.9-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgusb"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc40.aarch64",
+      "evra": "0.3.19-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2576,19 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-21T00:00:00Z",
+    "generated": "2024-04-24T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T12:48:11Z"
+        "generated": "2024-04-21T23:23:44Z"
       },
-      "fedora-next": {
-        "generated": "2024-04-19T08:53:27Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2024-04-21T01:00:16Z"
+      "fedora-updates": {
+        "generated": "2024-04-24T01:00:27Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 35cd9d4b7f..9c8596d5fb 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -157,19 +157,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc40.ppc64le",
+      "evra": "32:9.18.26-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc40.noarch",
+      "evra": "32:9.18.26-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc40.ppc64le",
+      "evra": "32:9.18.26-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -823,31 +823,31 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-119.fc40.noarch",
+      "evra": "1:2.06-121.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-119.fc40.ppc64le",
+      "evra": "1:2.06-121.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-119.fc40.noarch",
+      "evra": "1:2.06-121.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-119.fc40.ppc64le",
+      "evra": "1:2.06-121.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-119.fc40.ppc64le",
+      "evra": "1:2.06-121.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libgusb": {
-      "evra": "0.4.8-3.fc40.ppc64le",
+      "evra": "0.4.9-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgusb"
       }
@@ -1681,7 +1681,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc40.ppc64le",
+      "evra": "0.3.19-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2564,19 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-21T00:00:00Z",
+    "generated": "2024-04-24T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T12:46:11Z"
+        "generated": "2024-04-21T23:22:05Z"
       },
-      "fedora-next": {
-        "generated": "2024-04-19T08:53:27Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2024-04-21T01:00:17Z"
+      "fedora-updates": {
+        "generated": "2024-04-24T01:00:29Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index c413ad98a8..cea8ed803b 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -151,19 +151,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc40.s390x",
+      "evra": "32:9.18.26-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc40.noarch",
+      "evra": "32:9.18.26-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc40.s390x",
+      "evra": "32:9.18.26-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -1201,7 +1201,7 @@
       }
     },
     "libgusb": {
-      "evra": "0.4.8-3.fc40.s390x",
+      "evra": "0.4.9-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgusb"
       }
@@ -1609,7 +1609,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc40.s390x",
+      "evra": "0.3.19-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2468,19 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-21T00:00:00Z",
+    "generated": "2024-04-24T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T12:46:08Z"
+        "generated": "2024-04-21T23:21:30Z"
       },
-      "fedora-next": {
-        "generated": "2024-04-19T08:53:24Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2024-04-21T01:00:19Z"
+      "fedora-updates": {
+        "generated": "2024-04-24T01:00:31Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5e786fdbc3..fb8dfd9852 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -157,19 +157,19 @@
       }
     },
     "bind-libs": {
-      "evra": "32:9.18.24-1.fc40.x86_64",
+      "evra": "32:9.18.26-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-license": {
-      "evra": "32:9.18.24-1.fc40.noarch",
+      "evra": "32:9.18.26-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "bind"
       }
     },
     "bind-utils": {
-      "evra": "32:9.18.24-1.fc40.x86_64",
+      "evra": "32:9.18.26-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "bind"
       }
@@ -859,37 +859,37 @@
       }
     },
     "grub2-common": {
-      "evra": "1:2.06-119.fc40.noarch",
+      "evra": "1:2.06-121.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-119.fc40.x86_64",
+      "evra": "1:2.06-121.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc": {
-      "evra": "1:2.06-119.fc40.x86_64",
+      "evra": "1:2.06-121.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-119.fc40.noarch",
+      "evra": "1:2.06-121.fc40.noarch",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools": {
-      "evra": "1:2.06-119.fc40.x86_64",
+      "evra": "1:2.06-121.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-119.fc40.x86_64",
+      "evra": "1:2.06-121.fc40.x86_64",
       "metadata": {
         "sourcerpm": "grub2"
       }
@@ -1303,7 +1303,7 @@
       }
     },
     "libgusb": {
-      "evra": "0.4.8-3.fc40.x86_64",
+      "evra": "0.4.9-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgusb"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.18-1.fc40.x86_64",
+      "evra": "0.3.19-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2594,19 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-21T00:00:00Z",
+    "generated": "2024-04-24T00:00:00Z",
     "rpmmd_repos": {
-      "fedora-candidate-compose": {
+      "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T12:47:21Z"
+        "generated": "2024-04-21T23:23:44Z"
       },
-      "fedora-next": {
-        "generated": "2024-04-19T08:53:31Z"
-      },
-      "fedora-next-updates": {
-        "generated": "2024-04-21T01:00:20Z"
+      "fedora-updates": {
+        "generated": "2024-04-24T01:00:32Z"
       }
     }
   }

From 96d51e09776b277553fa954fe8b748ad0ba06cb6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 25 Apr 2024 23:07:47 +0000
Subject: [PATCH 2123/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1131/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 34 +++++++++++++++++-----------------
 manifest-lock.ppc64le.json | 34 +++++++++++++++++-----------------
 manifest-lock.s390x.json   | 34 +++++++++++++++++-----------------
 manifest-lock.x86_64.json  | 34 +++++++++++++++++-----------------
 4 files changed, 68 insertions(+), 68 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4534259c32..e90dc8fbf1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1315,7 +1315,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1567,25 +1567,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2317,55 +2317,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-4.fc40.aarch64",
+      "evra": "2.9.4-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-24T00:00:00Z",
+    "generated": "2024-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T23:23:44Z"
+        "generated": "2024-04-25T17:26:41Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-24T01:00:27Z"
+        "generated": "2024-04-25T00:52:04Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 9c8596d5fb..f540f7264b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1291,7 +1291,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1555,25 +1555,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2311,55 +2311,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-4.fc40.ppc64le",
+      "evra": "2.9.4-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-24T00:00:00Z",
+    "generated": "2024-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T23:22:05Z"
+        "generated": "2024-04-25T17:24:52Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-24T01:00:29Z"
+        "generated": "2024-04-25T00:52:06Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index cea8ed803b..6d4e116a37 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1231,7 +1231,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1483,25 +1483,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2209,55 +2209,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-4.fc40.s390x",
+      "evra": "2.9.4-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-24T00:00:00Z",
+    "generated": "2024-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T23:21:30Z"
+        "generated": "2024-04-25T17:24:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-24T01:00:31Z"
+        "generated": "2024-04-25T00:52:08Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index fb8dfd9852..271202978d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1333,7 +1333,7 @@
       }
     },
     "libipa_hbac": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -1585,25 +1585,25 @@
       }
     },
     "libsss_certmap": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_idmap": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_nss_idmap": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "libsss_sudo": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2335,55 +2335,55 @@
       }
     },
     "sssd-ad": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-client": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-common-pac": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ipa": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-krb5-common": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-ldap": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
     },
     "sssd-nfs-idmap": {
-      "evra": "2.9.4-4.fc40.x86_64",
+      "evra": "2.9.4-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "sssd"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-24T00:00:00Z",
+    "generated": "2024-04-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-21T23:23:44Z"
+        "generated": "2024-04-25T17:26:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-24T01:00:32Z"
+        "generated": "2024-04-25T00:52:10Z"
       }
     }
   }

From f06f20a5aab52bb0bf9ac7fdee84ee4f3f4ab029 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Thu, 25 Apr 2024 22:01:54 -0400
Subject: [PATCH 2124/2157] overlay.d/05core: don't order coreos-enable-network
 after basic.target

This isn't strictly required and is causing a dependency
timeout in early boot when iscsi+multipath is used. See
https://github.com/coreos/fedora-coreos-config/pull/2984
for some more context.
---
 .../modules.d/35coreos-network/coreos-enable-network.service     | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
index 92c4829cd1..baa5d92c77 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-network/coreos-enable-network.service
@@ -2,7 +2,6 @@
 Description=CoreOS Enable Network
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=false
-After=basic.target
 
 # Triggering conditions for cases where we need network:
 #  * when Ignition signals that it is required for provisioning.

From 83f419c54bad614d70149830cc3b25fe4b93433e Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Wed, 24 Apr 2024 16:53:47 -0400
Subject: [PATCH 2125/2157] overlay.d/05core: drop Before=dracut-initqueue from
 coreos-multipath-wait.target

We don't think it's strictly required and will enable
multipath to work on top of iscsi.

This was tested with an iscsi disk that was installed with:

```
sudo coreos-installer install /path/to/disk \
    --append-karg rd.multipath=default      \
    --append-karg root=/dev/disk/by-label/dm-mpath-root \
    --append-karg rw --append-karg rd.iscsi.firmware=1  \
    --console ttyS0,115200n8 -i config.ign --insecure   \
    --image-file fedora-coreos-40.20240424.dev.1-metal.x86_64.raw.xz
```

and then shared over iPXE with:

```
set initiator-iqn iqn.68cc69b9-1b54-4ff1-9d61-eedb570da8fd
sanboot iscsi:192.168.122.137::::iqn.2024-04.com.coreos:0 \
        iscsi:192.168.122.137::::iqn.2024-04.com.coreos:1
```
---
 .../modules.d/35coreos-multipath/coreos-multipath-wait.target    | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
index 5da2ee4bd6..87be77db19 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -1,7 +1,6 @@
 [Unit]
 Description=CoreOS Wait For Multipathed Boot
 DefaultDependencies=false
-Before=dracut-initqueue.service
 After=dracut-cmdline.service
 Requires=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
 After=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device

From 832c42ba3f406f88647621300aeecde30e9d14ef Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 29 Apr 2024 10:42:43 -0600
Subject: [PATCH 2126/2157] denylist: extend snooze for
 `coreos.ignition.ssh.key`

This test is still failing. Extend the snooze to unblock the pipeline.
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 03675ce8f2..68ced1f3e8 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-04-29
+  snooze: 2024-05-13
   warn: true
   platforms:
     - azure

From a5281409ca055f4559dd52cabadde24912861e30 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Mon, 29 Apr 2024 16:41:45 +0200
Subject: [PATCH 2127/2157] tests: Update container images to Fedora 40

Those were missed in
https://github.com/coreos/fedora-coreos-config/pull/2981.

Fixes: https://github.com/coreos/fedora-coreos-config/pull/2981
---
 tests/kola/containers/quadlet/config.bu | 2 +-
 tests/kola/containers/quadlet/test.sh   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/kola/containers/quadlet/config.bu b/tests/kola/containers/quadlet/config.bu
index c21433b5b5..f137415b0b 100644
--- a/tests/kola/containers/quadlet/config.bu
+++ b/tests/kola/containers/quadlet/config.bu
@@ -9,7 +9,7 @@ storage:
           Description=A minimal container
 
           [Container]
-          Image=quay.io/fedora/fedora-minimal:39
+          Image=quay.io/fedora/fedora-minimal:40
           Exec=sleep 60
           Volume=test.volume:/data
           Network=test.network
diff --git a/tests/kola/containers/quadlet/test.sh b/tests/kola/containers/quadlet/test.sh
index ae597123a5..3925b5e73c 100755
--- a/tests/kola/containers/quadlet/test.sh
+++ b/tests/kola/containers/quadlet/test.sh
@@ -32,7 +32,7 @@ if ! is_service_active test.service; then
   fatal "test-network.service failed to start"
 fi
 container_info=$(podman container inspect systemd-test)
-if [[ "$(jq -r '.[0].ImageName' <<< "$container_info")" != "quay.io/fedora/fedora-minimal:39" ]]; then
+if [[ "$(jq -r '.[0].ImageName' <<< "$container_info")" != "quay.io/fedora/fedora-minimal:40" ]]; then
     fatal "Container not using the correct image"
 fi
 if [[ "$(jq -r '.[0].NetworkSettings.Networks[].NetworkID' <<< "$container_info")" != "systemd-test" ]]; then

From 64cfd4c70d1585f01cb3dc78fbd9a768c4f08233 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 1 May 2024 20:30:29 +0000
Subject: [PATCH 2128/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1137/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 32 ++++++++++++++++----------------
 manifest-lock.ppc64le.json | 32 ++++++++++++++++----------------
 manifest-lock.s390x.json   | 32 ++++++++++++++++----------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index e90dc8fbf1..d9bd6500e8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1015,7 +1015,7 @@
       }
     },
     "jq": {
-      "evra": "1.7.1-4.fc40.aarch64",
+      "evra": "1.7.1-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "jq"
       }
@@ -1273,7 +1273,7 @@
       }
     },
     "libgpg-error": {
-      "evra": "1.48-1.fc40.aarch64",
+      "evra": "1.49-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
@@ -1615,7 +1615,7 @@
       }
     },
     "libteam": {
-      "evra": "1.32-4.fc40.aarch64",
+      "evra": "1.32-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.19-1.fc40.aarch64",
+      "evra": "0.3.19-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1999,19 +1999,19 @@
       }
     },
     "passim-libs": {
-      "evra": "0.1.5-3.fc40.aarch64",
+      "evra": "0.1.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "passim"
       }
     },
     "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc40.aarch64",
+      "evra": "0^20240426.gd03c4e2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
+      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2053,7 +2053,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.1-1.fc40.aarch64",
+      "evra": "5:5.0.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2425,7 +2425,7 @@
       }
     },
     "teamd": {
-      "evra": "1.32-4.fc40.aarch64",
+      "evra": "1.32-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -2485,13 +2485,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc40.noarch",
+      "evra": "2:9.1.354-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc40.aarch64",
+      "evra": "2:9.1.354-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-25T00:00:00Z",
+    "generated": "2024-05-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-25T17:26:41Z"
+        "generated": "2024-04-29T18:05:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-25T00:52:04Z"
+        "generated": "2024-05-01T04:09:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f540f7264b..94e8d55947 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -991,7 +991,7 @@
       }
     },
     "jq": {
-      "evra": "1.7.1-4.fc40.ppc64le",
+      "evra": "1.7.1-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "jq"
       }
@@ -1249,7 +1249,7 @@
       }
     },
     "libgpg-error": {
-      "evra": "1.48-1.fc40.ppc64le",
+      "evra": "1.49-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
@@ -1603,7 +1603,7 @@
       }
     },
     "libteam": {
-      "evra": "1.32-4.fc40.ppc64le",
+      "evra": "1.32-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -1681,7 +1681,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.19-1.fc40.ppc64le",
+      "evra": "0.3.19-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1987,19 +1987,19 @@
       }
     },
     "passim-libs": {
-      "evra": "0.1.5-3.fc40.ppc64le",
+      "evra": "0.1.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "passim"
       }
     },
     "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc40.ppc64le",
+      "evra": "0^20240426.gd03c4e2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
+      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2041,7 +2041,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.1-1.fc40.ppc64le",
+      "evra": "5:5.0.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2419,7 +2419,7 @@
       }
     },
     "teamd": {
-      "evra": "1.32-4.fc40.ppc64le",
+      "evra": "1.32-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -2479,13 +2479,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc40.noarch",
+      "evra": "2:9.1.354-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc40.ppc64le",
+      "evra": "2:9.1.354-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-25T00:00:00Z",
+    "generated": "2024-05-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-25T17:24:52Z"
+        "generated": "2024-04-29T18:03:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-25T00:52:06Z"
+        "generated": "2024-05-01T04:09:16Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 6d4e116a37..d7ac7a077f 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -931,7 +931,7 @@
       }
     },
     "jq": {
-      "evra": "1.7.1-4.fc40.s390x",
+      "evra": "1.7.1-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "jq"
       }
@@ -1189,7 +1189,7 @@
       }
     },
     "libgpg-error": {
-      "evra": "1.48-1.fc40.s390x",
+      "evra": "1.49-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
@@ -1531,7 +1531,7 @@
       }
     },
     "libteam": {
-      "evra": "1.32-4.fc40.s390x",
+      "evra": "1.32-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -1609,7 +1609,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.19-1.fc40.s390x",
+      "evra": "0.3.19-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -1897,19 +1897,19 @@
       }
     },
     "passim-libs": {
-      "evra": "0.1.5-3.fc40.s390x",
+      "evra": "0.1.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "passim"
       }
     },
     "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc40.s390x",
+      "evra": "0^20240426.gd03c4e2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
+      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -1951,7 +1951,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.1-1.fc40.s390x",
+      "evra": "5:5.0.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2113,13 +2113,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2317,7 +2317,7 @@
       }
     },
     "teamd": {
-      "evra": "1.32-4.fc40.s390x",
+      "evra": "1.32-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -2383,13 +2383,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc40.noarch",
+      "evra": "2:9.1.354-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc40.s390x",
+      "evra": "2:9.1.354-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-25T00:00:00Z",
+    "generated": "2024-05-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-25T17:24:35Z"
+        "generated": "2024-04-29T18:03:01Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-25T00:52:08Z"
+        "generated": "2024-05-01T04:09:28Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 271202978d..3f91ebafff 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1033,7 +1033,7 @@
       }
     },
     "jq": {
-      "evra": "1.7.1-4.fc40.x86_64",
+      "evra": "1.7.1-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "jq"
       }
@@ -1291,7 +1291,7 @@
       }
     },
     "libgpg-error": {
-      "evra": "1.48-1.fc40.x86_64",
+      "evra": "1.49-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libgpg-error"
       }
@@ -1633,7 +1633,7 @@
       }
     },
     "libteam": {
-      "evra": "1.32-4.fc40.x86_64",
+      "evra": "1.32-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "libxmlb": {
-      "evra": "0.3.19-1.fc40.x86_64",
+      "evra": "0.3.19-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxmlb"
       }
@@ -2023,19 +2023,19 @@
       }
     },
     "passim-libs": {
-      "evra": "0.1.5-3.fc40.x86_64",
+      "evra": "0.1.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "passim"
       }
     },
     "passt": {
-      "evra": "0^20240326.g4988e2b-1.fc40.x86_64",
+      "evra": "0^20240426.gd03c4e2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240326.g4988e2b-1.fc40.noarch",
+      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2077,7 +2077,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.1-1.fc40.x86_64",
+      "evra": "5:5.0.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2227,13 +2227,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.16-1.fc40.noarch",
+      "evra": "40.17-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2443,7 +2443,7 @@
       }
     },
     "teamd": {
-      "evra": "1.32-4.fc40.x86_64",
+      "evra": "1.32-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libteam"
       }
@@ -2503,13 +2503,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.309-1.fc40.noarch",
+      "evra": "2:9.1.354-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.309-1.fc40.x86_64",
+      "evra": "2:9.1.354-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-04-25T00:00:00Z",
+    "generated": "2024-05-01T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-25T17:26:35Z"
+        "generated": "2024-04-29T18:06:11Z"
       },
       "fedora-updates": {
-        "generated": "2024-04-25T00:52:10Z"
+        "generated": "2024-05-01T04:09:22Z"
       }
     }
   }

From 59430123d05a86274eefb4918252e24f9373562b Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 2 May 2024 06:05:29 +0000
Subject: [PATCH 2129/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 69507e80d8..f9f3ca7730 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -15,15 +15,3 @@ packages:
       bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-86fbbe4bc7
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
       type: fast-track
-  rpm-ostree:
-    evr: 2024.5-2.fc40
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-b59ee8264e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
-      type: fast-track
-  rpm-ostree-libs:
-    evr: 2024.5-2.fc40
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-b59ee8264e
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
-      type: fast-track

From d1968bb512743151d47645c695df2ffe069fef1b Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 2 May 2024 11:29:45 -0400
Subject: [PATCH 2130/2157] buildroot: Add container=oci

We depend on this right now.
---
 ci/buildroot/Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ci/buildroot/Dockerfile b/ci/buildroot/Dockerfile
index 1df17e8824..aee83d3eec 100644
--- a/ci/buildroot/Dockerfile
+++ b/ci/buildroot/Dockerfile
@@ -6,5 +6,7 @@
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
 FROM quay.io/fedora/fedora:40
+# Work around for https://bugzilla.redhat.com/show_bug.cgi?id=2278652
+ENV container=oci
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf

From 99c4e34d3300dd30d1bc9a2d3e759b645109baf7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 2 May 2024 23:37:34 +0000
Subject: [PATCH 2131/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1139/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index d9bd6500e8..204987932f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -973,7 +973,7 @@
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-4.fc40.aarch64",
+      "evra": "2:1.9.4-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
@@ -2443,19 +2443,19 @@
       }
     },
     "tpm2-tools": {
-      "evra": "5.6-2.fc40.aarch64",
+      "evra": "5.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-7.fc40.aarch64",
+      "evra": "4.1.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-7.fc40.aarch64",
+      "evra": "4.1.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-01T00:00:00Z",
+    "generated": "2024-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-29T18:05:03Z"
+        "generated": "2024-05-01T17:57:44Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-01T04:09:19Z"
+        "generated": "2024-05-02T01:51:53Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 94e8d55947..f5581f6002 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -949,7 +949,7 @@
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-4.fc40.ppc64le",
+      "evra": "2:1.9.4-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
@@ -2437,19 +2437,19 @@
       }
     },
     "tpm2-tools": {
-      "evra": "5.6-2.fc40.ppc64le",
+      "evra": "5.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-7.fc40.ppc64le",
+      "evra": "4.1.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-7.fc40.ppc64le",
+      "evra": "4.1.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-01T00:00:00Z",
+    "generated": "2024-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-29T18:03:25Z"
+        "generated": "2024-05-01T17:56:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-01T04:09:16Z"
+        "generated": "2024-05-02T01:51:56Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d7ac7a077f..353ce66408 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -2335,19 +2335,19 @@
       }
     },
     "tpm2-tools": {
-      "evra": "5.6-2.fc40.s390x",
+      "evra": "5.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-7.fc40.s390x",
+      "evra": "4.1.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-7.fc40.s390x",
+      "evra": "4.1.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-01T00:00:00Z",
+    "generated": "2024-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-29T18:03:01Z"
+        "generated": "2024-05-01T17:55:42Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-01T04:09:28Z"
+        "generated": "2024-05-02T01:51:59Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 3f91ebafff..18b6b81cb0 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -991,7 +991,7 @@
       }
     },
     "irqbalance": {
-      "evra": "2:1.9.2-4.fc40.x86_64",
+      "evra": "2:1.9.4-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "irqbalance"
       }
@@ -2461,19 +2461,19 @@
       }
     },
     "tpm2-tools": {
-      "evra": "5.6-2.fc40.x86_64",
+      "evra": "5.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tools"
       }
     },
     "tpm2-tss": {
-      "evra": "4.0.1-7.fc40.x86_64",
+      "evra": "4.1.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
     },
     "tpm2-tss-fapi": {
-      "evra": "4.0.1-7.fc40.x86_64",
+      "evra": "4.1.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "tpm2-tss"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-01T00:00:00Z",
+    "generated": "2024-05-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-04-29T18:06:11Z"
+        "generated": "2024-05-01T17:57:38Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-01T04:09:22Z"
+        "generated": "2024-05-02T01:52:02Z"
       }
     }
   }

From 0a3dddbf2f635384b65e163a4ed03533d3c91a9f Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 3 May 2024 23:27:35 +0000
Subject: [PATCH 2132/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1140/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 204987932f..ea867d6338 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1051,25 +1051,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.7-300.fc40.aarch64",
+      "evra": "6.8.8-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.7-300.fc40.aarch64",
+      "evra": "6.8.8-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.7-300.fc40.aarch64",
+      "evra": "6.8.8-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.7-300.fc40.aarch64",
+      "evra": "6.8.8-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-02T00:00:00Z",
+    "generated": "2024-05-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-01T17:57:44Z"
+        "generated": "2024-05-02T23:58:39Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-02T01:51:53Z"
+        "generated": "2024-05-03T01:36:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index f5581f6002..3b8222d94d 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1027,25 +1027,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.7-300.fc40.ppc64le",
+      "evra": "6.8.8-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.7-300.fc40.ppc64le",
+      "evra": "6.8.8-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.7-300.fc40.ppc64le",
+      "evra": "6.8.8-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.7-300.fc40.ppc64le",
+      "evra": "6.8.8-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-02T00:00:00Z",
+    "generated": "2024-05-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-01T17:56:03Z"
+        "generated": "2024-05-02T23:56:45Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-02T01:51:56Z"
+        "generated": "2024-05-03T01:36:24Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 353ce66408..7abb8b818d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -967,25 +967,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.7-300.fc40.s390x",
+      "evra": "6.8.8-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.7-300.fc40.s390x",
+      "evra": "6.8.8-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.7-300.fc40.s390x",
+      "evra": "6.8.8-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.7-300.fc40.s390x",
+      "evra": "6.8.8-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-02T00:00:00Z",
+    "generated": "2024-05-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-01T17:55:42Z"
+        "generated": "2024-05-02T23:56:27Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-02T01:51:59Z"
+        "generated": "2024-05-03T01:36:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 18b6b81cb0..005accf1c1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.7-300.fc40.x86_64",
+      "evra": "6.8.8-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.7-300.fc40.x86_64",
+      "evra": "6.8.8-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.7-300.fc40.x86_64",
+      "evra": "6.8.8-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.7-300.fc40.x86_64",
+      "evra": "6.8.8-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-02T00:00:00Z",
+    "generated": "2024-05-03T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-01T17:57:38Z"
+        "generated": "2024-05-02T23:57:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-02T01:52:02Z"
+        "generated": "2024-05-03T01:36:30Z"
       }
     }
   }

From 1598859194fb66752c6cf17b5953e96d934910c1 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 4 May 2024 23:26:02 +0000
Subject: [PATCH 2133/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1141/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ea867d6338..8d88942906 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -781,7 +781,7 @@
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc40.aarch64",
+      "evra": "2.45.0-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2371,7 +2371,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc40.aarch64",
+      "evra": "1.19.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-03T00:00:00Z",
+    "generated": "2024-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-02T23:58:39Z"
+        "generated": "2024-05-03T23:35:21Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-03T01:36:21Z"
+        "generated": "2024-05-04T01:15:16Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3b8222d94d..e196cef5bb 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -757,7 +757,7 @@
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc40.ppc64le",
+      "evra": "2.45.0-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2365,7 +2365,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc40.ppc64le",
+      "evra": "1.19.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-03T00:00:00Z",
+    "generated": "2024-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-02T23:56:45Z"
+        "generated": "2024-05-03T23:33:44Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-03T01:36:24Z"
+        "generated": "2024-05-04T01:15:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 7abb8b818d..884e932ae1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -733,7 +733,7 @@
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc40.s390x",
+      "evra": "2.45.0-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2263,7 +2263,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc40.s390x",
+      "evra": "1.19.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-03T00:00:00Z",
+    "generated": "2024-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-02T23:56:27Z"
+        "generated": "2024-05-03T23:33:28Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-03T01:36:27Z"
+        "generated": "2024-05-04T01:15:22Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 005accf1c1..1bdca64ae1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -787,7 +787,7 @@
       }
     },
     "git-core": {
-      "evra": "2.44.0-1.fc40.x86_64",
+      "evra": "2.45.0-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2389,7 +2389,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.1-1.fc40.x86_64",
+      "evra": "1.19.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-03T00:00:00Z",
+    "generated": "2024-05-04T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-02T23:57:30Z"
+        "generated": "2024-05-03T23:35:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-03T01:36:30Z"
+        "generated": "2024-05-04T01:15:25Z"
       }
     }
   }

From e4c36532ec241304b5a0bf4768ef7ab13b0cec22 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 5 May 2024 12:05:46 +0000
Subject: [PATCH 2134/2157] =?UTF-8?q?lockfiles:=20drop=20graduated=20overr?=
 =?UTF-8?q?ides=20=F0=9F=8E=93?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Triggered by remove-graduated-overrides GitHub Action.
---
 manifest-lock.overrides.yaml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f9f3ca7730..62cfbe5a1d 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -8,10 +8,4 @@
 # in the `metadata.reason` key, though it's acceptable to omit a `reason`
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
-packages:
-  libbsd:
-    evr: 0.12.2-3.fc40
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2024-86fbbe4bc7
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1674#issuecomment-2010200582
-      type: fast-track
+packages: {}

From 87dee4cbac2a37c9e5d3d955191c4fb890c040f0 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 7 May 2024 23:28:50 +0000
Subject: [PATCH 2135/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1144/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 8d88942906..db04c52aa8 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc40.aarch64",
+      "evra": "6.8.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -733,7 +733,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc40.aarch64",
+      "evra": "1.9.19-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1807,13 +1807,13 @@
       }
     },
     "nano": {
-      "evra": "7.2-6.fc40.aarch64",
+      "evra": "7.2-7.fc40.aarch64",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-6.fc40.noarch",
+      "evra": "7.2-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-04T00:00:00Z",
+    "generated": "2024-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-03T23:35:21Z"
+        "generated": "2024-05-07T17:53:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-04T01:15:16Z"
+        "generated": "2024-05-07T05:02:44Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e196cef5bb..aafb0b36fc 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -193,7 +193,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc40.ppc64le",
+      "evra": "6.8.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -709,7 +709,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc40.ppc64le",
+      "evra": "1.9.19-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1789,13 +1789,13 @@
       }
     },
     "nano": {
-      "evra": "7.2-6.fc40.ppc64le",
+      "evra": "7.2-7.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-6.fc40.noarch",
+      "evra": "7.2-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-04T00:00:00Z",
+    "generated": "2024-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-03T23:33:44Z"
+        "generated": "2024-05-07T17:51:23Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-04T01:15:19Z"
+        "generated": "2024-05-07T05:02:48Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 884e932ae1..9f5fe63002 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -187,7 +187,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc40.s390x",
+      "evra": "6.8.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -703,7 +703,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc40.s390x",
+      "evra": "1.9.19-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1717,13 +1717,13 @@
       }
     },
     "nano": {
-      "evra": "7.2-6.fc40.s390x",
+      "evra": "7.2-7.fc40.s390x",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-6.fc40.noarch",
+      "evra": "7.2-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-04T00:00:00Z",
+    "generated": "2024-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-03T23:33:28Z"
+        "generated": "2024-05-07T17:51:05Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-04T01:15:22Z"
+        "generated": "2024-05-07T05:02:52Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 1bdca64ae1..a6dbad971d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -193,7 +193,7 @@
       }
     },
     "btrfs-progs": {
-      "evra": "6.8-1.fc40.x86_64",
+      "evra": "6.8.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "btrfs-progs"
       }
@@ -739,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.16-1.fc40.x86_64",
+      "evra": "1.9.19-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1831,13 +1831,13 @@
       }
     },
     "nano": {
-      "evra": "7.2-6.fc40.x86_64",
+      "evra": "7.2-7.fc40.x86_64",
       "metadata": {
         "sourcerpm": "nano"
       }
     },
     "nano-default-editor": {
-      "evra": "7.2-6.fc40.noarch",
+      "evra": "7.2-7.fc40.noarch",
       "metadata": {
         "sourcerpm": "nano"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-04T00:00:00Z",
+    "generated": "2024-05-07T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-03T23:35:35Z"
+        "generated": "2024-05-07T17:53:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-04T01:15:25Z"
+        "generated": "2024-05-07T05:02:55Z"
       }
     }
   }

From e4c396ceeb8213aff5aa6f74338d330f32624954 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 8 May 2024 23:36:55 +0000
Subject: [PATCH 2136/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1145/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index db04c52aa8..01ec081e9f 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1159,7 +1159,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1243,7 +1243,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1387,7 +1387,7 @@
       }
     },
     "libmount": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1543,7 +1543,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1657,7 +1657,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2473,25 +2473,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.40-13.fc40.aarch64",
+      "evra": "2.40.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.354-1.fc40.noarch",
+      "evra": "2:9.1.393-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.354-1.fc40.aarch64",
+      "evra": "2:9.1.393-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-07T00:00:00Z",
+    "generated": "2024-05-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-07T17:53:14Z"
+        "generated": "2024-05-08T18:22:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-07T05:02:44Z"
+        "generated": "2024-05-08T03:25:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index aafb0b36fc..e6d1647af5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1135,7 +1135,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1219,7 +1219,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1363,7 +1363,7 @@
       }
     },
     "libmount": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1531,7 +1531,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1645,7 +1645,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2467,25 +2467,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.40-13.fc40.ppc64le",
+      "evra": "2.40.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.354-1.fc40.noarch",
+      "evra": "2:9.1.393-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.354-1.fc40.ppc64le",
+      "evra": "2:9.1.393-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-07T00:00:00Z",
+    "generated": "2024-05-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-07T17:51:23Z"
+        "generated": "2024-05-08T18:20:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-07T05:02:48Z"
+        "generated": "2024-05-08T03:25:45Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9f5fe63002..57fcd98b32 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1075,7 +1075,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1159,7 +1159,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1303,7 +1303,7 @@
       }
     },
     "libmount": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1459,7 +1459,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1573,7 +1573,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2365,13 +2365,13 @@
       }
     },
     "util-linux": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.40-13.fc40.s390x",
+      "evra": "2.40.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2383,13 +2383,13 @@
       }
     },
     "vim-data": {
-      "evra": "2:9.1.354-1.fc40.noarch",
+      "evra": "2:9.1.393-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.354-1.fc40.s390x",
+      "evra": "2:9.1.393-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-07T00:00:00Z",
+    "generated": "2024-05-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-07T17:51:05Z"
+        "generated": "2024-05-08T18:19:48Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-07T05:02:52Z"
+        "generated": "2024-05-08T03:25:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index a6dbad971d..260f70afaa 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1177,7 +1177,7 @@
       }
     },
     "libblkid": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libfdisk": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1405,7 +1405,7 @@
       }
     },
     "libmount": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libsmartcols": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libuuid": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
@@ -2491,25 +2491,25 @@
       }
     },
     "util-linux": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "util-linux-core": {
-      "evra": "2.40-13.fc40.x86_64",
+      "evra": "2.40.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "util-linux"
       }
     },
     "vim-data": {
-      "evra": "2:9.1.354-1.fc40.noarch",
+      "evra": "2:9.1.393-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "vim"
       }
     },
     "vim-minimal": {
-      "evra": "2:9.1.354-1.fc40.x86_64",
+      "evra": "2:9.1.393-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "vim"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-07T00:00:00Z",
+    "generated": "2024-05-08T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-07T17:53:15Z"
+        "generated": "2024-05-08T18:22:40Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-07T05:02:55Z"
+        "generated": "2024-05-08T03:25:53Z"
       }
     }
   }

From 3fb482ecb20c1d9a774e6ed6b3f68ec6ab3e7623 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 10 May 2024 23:39:58 +0000
Subject: [PATCH 2137/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1147/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 14 +++++++-------
 manifest-lock.ppc64le.json | 14 +++++++-------
 manifest-lock.s390x.json   | 14 +++++++-------
 manifest-lock.x86_64.json  | 14 +++++++-------
 4 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 01ec081e9f..01a2d8c490 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1051,25 +1051,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.8-300.fc40.aarch64",
+      "evra": "6.8.9-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.8-300.fc40.aarch64",
+      "evra": "6.8.9-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.8-300.fc40.aarch64",
+      "evra": "6.8.9-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.8-300.fc40.aarch64",
+      "evra": "6.8.9-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-08T00:00:00Z",
+    "generated": "2024-05-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T18:22:30Z"
+        "generated": "2024-05-08T23:45:22Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-08T03:25:41Z"
+        "generated": "2024-05-10T02:51:38Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index e6d1647af5..aba93d0930 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1027,25 +1027,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.8-300.fc40.ppc64le",
+      "evra": "6.8.9-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.8-300.fc40.ppc64le",
+      "evra": "6.8.9-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.8-300.fc40.ppc64le",
+      "evra": "6.8.9-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.8-300.fc40.ppc64le",
+      "evra": "6.8.9-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-08T00:00:00Z",
+    "generated": "2024-05-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T18:20:25Z"
+        "generated": "2024-05-08T23:43:26Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-08T03:25:45Z"
+        "generated": "2024-05-10T02:51:42Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 57fcd98b32..e612725da1 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -967,25 +967,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.8-300.fc40.s390x",
+      "evra": "6.8.9-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.8-300.fc40.s390x",
+      "evra": "6.8.9-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.8-300.fc40.s390x",
+      "evra": "6.8.9-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.8-300.fc40.s390x",
+      "evra": "6.8.9-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-08T00:00:00Z",
+    "generated": "2024-05-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T18:19:48Z"
+        "generated": "2024-05-08T23:42:36Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-08T03:25:49Z"
+        "generated": "2024-05-10T02:51:46Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 260f70afaa..02f65ca65e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.8-300.fc40.x86_64",
+      "evra": "6.8.9-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.8-300.fc40.x86_64",
+      "evra": "6.8.9-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.8-300.fc40.x86_64",
+      "evra": "6.8.9-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.8-300.fc40.x86_64",
+      "evra": "6.8.9-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-08T00:00:00Z",
+    "generated": "2024-05-10T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T18:22:40Z"
+        "generated": "2024-05-08T23:44:36Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-08T03:25:53Z"
+        "generated": "2024-05-10T02:51:50Z"
       }
     }
   }

From 5c1ac4e7d4a596efac69a3eb78061dc2f59e94fb Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 11 May 2024 23:28:37 +0000
Subject: [PATCH 2138/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1148/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 28 ++++++++++++++--------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 28 ++++++++++++++--------------
 4 files changed, 54 insertions(+), 54 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 01a2d8c490..7c7d6aefd2 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -835,7 +835,7 @@
       }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20240307.00-1.fc40.noarch",
+      "evra": "20240501.00-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "google-compute-engine-guest-configs"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.0.1-0.15.fc40.aarch64",
+      "evra": "14.1.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1555,7 +1555,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc40.aarch64",
+      "evra": "0.7.29-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1591,7 +1591,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.0.1-0.15.fc40.aarch64",
+      "evra": "14.1.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1645,7 +1645,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc40.aarch64",
+      "evra": "1.0.27-2.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -2383,37 +2383,37 @@
       }
     },
     "systemd": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "255.4-1.fc40.aarch64",
+      "evra": "255.6-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-10T00:00:00Z",
+    "generated": "2024-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T23:45:22Z"
+        "generated": "2024-05-10T23:50:10Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-10T02:51:38Z"
+        "generated": "2024-05-11T01:24:19Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index aba93d0930..0826c6b873 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1237,7 +1237,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.0.1-0.15.fc40.ppc64le",
+      "evra": "14.1.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1543,7 +1543,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc40.ppc64le",
+      "evra": "0.7.29-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1579,7 +1579,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.0.1-0.15.fc40.ppc64le",
+      "evra": "14.1.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1633,7 +1633,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc40.ppc64le",
+      "evra": "1.0.27-2.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -2377,37 +2377,37 @@
       }
     },
     "systemd": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "255.4-1.fc40.ppc64le",
+      "evra": "255.6-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-10T00:00:00Z",
+    "generated": "2024-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T23:43:26Z"
+        "generated": "2024-05-10T23:48:14Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-10T02:51:42Z"
+        "generated": "2024-05-11T01:24:23Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e612725da1..12577a0161 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1177,7 +1177,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.0.1-0.15.fc40.s390x",
+      "evra": "14.1.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1471,7 +1471,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc40.s390x",
+      "evra": "0.7.29-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1507,7 +1507,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.0.1-0.15.fc40.s390x",
+      "evra": "14.1.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1561,7 +1561,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc40.s390x",
+      "evra": "1.0.27-2.fc40.s390x",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -2275,37 +2275,37 @@
       }
     },
     "systemd": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "255.4-1.fc40.s390x",
+      "evra": "255.6-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-10T00:00:00Z",
+    "generated": "2024-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T23:42:36Z"
+        "generated": "2024-05-10T23:47:41Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-10T02:51:46Z"
+        "generated": "2024-05-11T01:24:27Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 02f65ca65e..5150cb682b 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -841,7 +841,7 @@
       }
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20240307.00-1.fc40.noarch",
+      "evra": "20240501.00-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "google-compute-engine-guest-configs"
       }
@@ -1279,7 +1279,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.0.1-0.15.fc40.x86_64",
+      "evra": "14.1.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1573,7 +1573,7 @@
       }
     },
     "libsolv": {
-      "evra": "0.7.28-1.fc40.x86_64",
+      "evra": "0.7.29-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libsolv"
       }
@@ -1609,7 +1609,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.0.1-0.15.fc40.x86_64",
+      "evra": "14.1.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1663,7 +1663,7 @@
       }
     },
     "libusb1": {
-      "evra": "1.0.27-1.fc40.x86_64",
+      "evra": "1.0.27-2.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libusb1"
       }
@@ -2401,37 +2401,37 @@
       }
     },
     "systemd": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-container": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-libs": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-pam": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-resolved": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
     },
     "systemd-udev": {
-      "evra": "255.4-1.fc40.x86_64",
+      "evra": "255.6-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "systemd"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-10T00:00:00Z",
+    "generated": "2024-05-11T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-08T23:44:36Z"
+        "generated": "2024-05-10T23:50:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-10T02:51:50Z"
+        "generated": "2024-05-11T01:24:31Z"
       }
     }
   }

From 1f45497c6541025fdc72a9bdf739de656871438d Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 10 May 2024 10:24:17 -0400
Subject: [PATCH 2139/2157] manifests: dnf5 is now default in rawhide; stop
 symlinking dnf

The postprocess bomb here went off this morning, which means we can
simplify this by a lot!
---
 manifests/include-dnf.yaml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/manifests/include-dnf.yaml b/manifests/include-dnf.yaml
index f98d98aa73..2c023b112d 100644
--- a/manifests/include-dnf.yaml
+++ b/manifests/include-dnf.yaml
@@ -1,13 +1,2 @@
 packages:
   - dnf5
-
-# until dnf5 becomes the default, manually symlink dnf to it
-postprocess:
-  - |
-    #!/usr/bin/bash
-    set -euo pipefail
-    if command -v dnf; then
-      echo 'dnf5 is now the default, remove this postprocess script!' >&2
-      exit 1
-    fi
-    ln -s dnf5 /usr/bin/dnf

From d531df86ed0ba1fef9a866bedd8adbfc5eede90b Mon Sep 17 00:00:00 2001
From: Michael Armijo <marmijo@redhat.com>
Date: Mon, 13 May 2024 15:06:23 -0600
Subject: [PATCH 2140/2157] denylist: extend snooze for
 `coreos.ignition.ssh.key`

This test is still failing, but there's a PR open to resolve this.
Let's snooze for another week so we can land:
https://github.com/coreos/afterburn/pull/1074
---
 kola-denylist.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 68ced1f3e8..90c26be86f 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -7,7 +7,7 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  snooze: 2024-05-13
+  snooze: 2024-05-20
   warn: true
   platforms:
     - azure

From fbd626bab4baeef0b5c399cdd514e02c2dd4509a Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 May 2024 02:41:11 +0000
Subject: [PATCH 2141/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1151/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 12 ++++++------
 manifest-lock.s390x.json   | 12 ++++++------
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7c7d6aefd2..91dc8b9b36 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -787,7 +787,7 @@
       }
     },
     "glib2": {
-      "evra": "2.80.0-1.fc40.aarch64",
+      "evra": "2.80.2-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-11T00:00:00Z",
+    "generated": "2024-05-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-10T23:50:10Z"
+        "generated": "2024-05-13T23:29:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-11T01:24:19Z"
+        "generated": "2024-05-13T01:53:56Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 0826c6b873..3075769f54 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -763,7 +763,7 @@
       }
     },
     "glib2": {
-      "evra": "2.80.0-1.fc40.ppc64le",
+      "evra": "2.80.2-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-11T00:00:00Z",
+    "generated": "2024-05-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-10T23:48:14Z"
+        "generated": "2024-05-13T23:27:51Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-11T01:24:23Z"
+        "generated": "2024-05-13T01:54:00Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 12577a0161..574b9d8dc6 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -739,7 +739,7 @@
       }
     },
     "glib2": {
-      "evra": "2.80.0-1.fc40.s390x",
+      "evra": "2.80.2-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -2113,13 +2113,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-11T00:00:00Z",
+    "generated": "2024-05-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-10T23:47:41Z"
+        "generated": "2024-05-13T23:27:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-11T01:24:27Z"
+        "generated": "2024-05-13T01:54:04Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5150cb682b..4d2873539d 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -793,7 +793,7 @@
       }
     },
     "glib2": {
-      "evra": "2.80.0-1.fc40.x86_64",
+      "evra": "2.80.2-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glib2"
       }
@@ -2227,13 +2227,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.17-1.fc40.noarch",
+      "evra": "40.18-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-11T00:00:00Z",
+    "generated": "2024-05-13T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-10T23:50:19Z"
+        "generated": "2024-05-13T23:29:30Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-11T01:24:31Z"
+        "generated": "2024-05-13T01:54:09Z"
       }
     }
   }

From e931ae2c5ac350548370046159f4eac1096c2d09 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Tue, 14 May 2024 23:38:57 +0000
Subject: [PATCH 2142/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1152/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 91dc8b9b36..c04646556c 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1549,7 +1549,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.20.0-7.fc40.aarch64",
+      "evra": "2:4.20.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1675,7 +1675,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.20.0-7.fc40.aarch64",
+      "evra": "2:4.20.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1795,7 +1795,7 @@
       }
     },
     "mpfr": {
-      "evra": "4.2.1-3.fc40.aarch64",
+      "evra": "4.2.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "mpfr"
       }
@@ -1987,13 +1987,13 @@
       }
     },
     "pam": {
-      "evra": "1.6.0-2.fc40.aarch64",
+      "evra": "1.6.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.6.0-2.fc40.aarch64",
+      "evra": "1.6.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "pam"
       }
@@ -2005,13 +2005,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.aarch64",
+      "evra": "0^20240510.g7288448-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
+      "evra": "0^20240510.g7288448-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2185,19 +2185,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.20.0-7.fc40.aarch64",
+      "evra": "2:4.20.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.20.0-7.fc40.noarch",
+      "evra": "2:4.20.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.20.0-7.fc40.aarch64",
+      "evra": "2:4.20.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-13T00:00:00Z",
+    "generated": "2024-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-13T23:29:29Z"
+        "generated": "2024-05-14T02:49:35Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-13T01:53:56Z"
+        "generated": "2024-05-14T01:20:45Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 3075769f54..2b37012dc5 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1537,7 +1537,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.20.0-7.fc40.ppc64le",
+      "evra": "2:4.20.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1663,7 +1663,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.20.0-7.fc40.ppc64le",
+      "evra": "2:4.20.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1777,7 +1777,7 @@
       }
     },
     "mpfr": {
-      "evra": "4.2.1-3.fc40.ppc64le",
+      "evra": "4.2.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "mpfr"
       }
@@ -1975,13 +1975,13 @@
       }
     },
     "pam": {
-      "evra": "1.6.0-2.fc40.ppc64le",
+      "evra": "1.6.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.6.0-2.fc40.ppc64le",
+      "evra": "1.6.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "pam"
       }
@@ -1993,13 +1993,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.ppc64le",
+      "evra": "0^20240510.g7288448-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
+      "evra": "0^20240510.g7288448-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2185,19 +2185,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.20.0-7.fc40.ppc64le",
+      "evra": "2:4.20.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.20.0-7.fc40.noarch",
+      "evra": "2:4.20.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.20.0-7.fc40.ppc64le",
+      "evra": "2:4.20.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-13T00:00:00Z",
+    "generated": "2024-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-13T23:27:51Z"
+        "generated": "2024-05-14T02:47:55Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-13T01:54:00Z"
+        "generated": "2024-05-14T01:21:02Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 574b9d8dc6..b04894c2ad 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1465,7 +1465,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.20.0-7.fc40.s390x",
+      "evra": "2:4.20.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1591,7 +1591,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.20.0-7.fc40.s390x",
+      "evra": "2:4.20.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1705,7 +1705,7 @@
       }
     },
     "mpfr": {
-      "evra": "4.2.1-3.fc40.s390x",
+      "evra": "4.2.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "mpfr"
       }
@@ -1885,13 +1885,13 @@
       }
     },
     "pam": {
-      "evra": "1.6.0-2.fc40.s390x",
+      "evra": "1.6.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.6.0-2.fc40.s390x",
+      "evra": "1.6.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "pam"
       }
@@ -1903,13 +1903,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.s390x",
+      "evra": "0^20240510.g7288448-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
+      "evra": "0^20240510.g7288448-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2089,19 +2089,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.20.0-7.fc40.s390x",
+      "evra": "2:4.20.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.20.0-7.fc40.noarch",
+      "evra": "2:4.20.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.20.0-7.fc40.s390x",
+      "evra": "2:4.20.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-13T00:00:00Z",
+    "generated": "2024-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-13T23:27:17Z"
+        "generated": "2024-05-14T02:47:27Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-13T01:54:04Z"
+        "generated": "2024-05-14T01:21:19Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 4d2873539d..5ea13e35e1 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1567,7 +1567,7 @@
       }
     },
     "libsmbclient": {
-      "evra": "2:4.20.0-7.fc40.x86_64",
+      "evra": "2:4.20.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1693,7 +1693,7 @@
       }
     },
     "libwbclient": {
-      "evra": "2:4.20.0-7.fc40.x86_64",
+      "evra": "2:4.20.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -1819,7 +1819,7 @@
       }
     },
     "mpfr": {
-      "evra": "4.2.1-3.fc40.x86_64",
+      "evra": "4.2.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "mpfr"
       }
@@ -2011,13 +2011,13 @@
       }
     },
     "pam": {
-      "evra": "1.6.0-2.fc40.x86_64",
+      "evra": "1.6.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pam"
       }
     },
     "pam-libs": {
-      "evra": "1.6.0-2.fc40.x86_64",
+      "evra": "1.6.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "pam"
       }
@@ -2029,13 +2029,13 @@
       }
     },
     "passt": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.x86_64",
+      "evra": "0^20240510.g7288448-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "passt"
       }
     },
     "passt-selinux": {
-      "evra": "0^20240426.gd03c4e2-1.fc40.noarch",
+      "evra": "0^20240510.g7288448-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "passt"
       }
@@ -2203,19 +2203,19 @@
       }
     },
     "samba-client-libs": {
-      "evra": "2:4.20.0-7.fc40.x86_64",
+      "evra": "2:4.20.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common": {
-      "evra": "2:4.20.0-7.fc40.noarch",
+      "evra": "2:4.20.1-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "samba"
       }
     },
     "samba-common-libs": {
-      "evra": "2:4.20.0-7.fc40.x86_64",
+      "evra": "2:4.20.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "samba"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-13T00:00:00Z",
+    "generated": "2024-05-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-13T23:29:30Z"
+        "generated": "2024-05-14T02:49:29Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-13T01:54:09Z"
+        "generated": "2024-05-14T01:21:36Z"
       }
     }
   }

From 34e01bbd7c30ad2dc54f229c0128ac2b16a63c25 Mon Sep 17 00:00:00 2001
From: jbtrystram <jbtrystram@redhat.com>
Date: Thu, 16 May 2024 11:00:05 +0200
Subject: [PATCH 2143/2157] overlay/coreos-check-ssh-keys: Remove invalid
 service key

The `Before` key is undefined for the `Service` Section. This was
silentely ignored by systemd until systemd-v256-rc1 where it started
emmitting a log message :
`Unknown key name 'Before' in section 'Service', ignoring.`

This causes the pipeline to fail as kola consider this an error.
---
 .../15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service  | 1 -
 1 file changed, 1 deletion(-)

diff --git a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
index d3c8815725..0e24ae8aaa 100644
--- a/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
+++ b/overlay.d/15fcos/usr/lib/systemd/system/coreos-check-ssh-keys.service
@@ -16,7 +16,6 @@ ConditionKernelCommandLine=ignition.firstboot
 Before=systemd-user-sessions.service
 
 [Service]
-Before=systemd-user-sessions.service
 Type=oneshot
 ProtectHome=read-only
 ExecStart=/usr/libexec/coreos-check-ssh-keys

From 0819fd9e8b6bf055f81d295ead7e8486907b6dc6 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 16 May 2024 10:36:20 -0400
Subject: [PATCH 2144/2157] buildroot: update URL to rpm-ostree spec

This was changed in https://github.com/coreos/rpm-ostree/pull/4964.
---
 ci/buildroot/buildroot-specs.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/buildroot/buildroot-specs.txt b/ci/buildroot/buildroot-specs.txt
index 24715e5be5..0afa4a9673 100644
--- a/ci/buildroot/buildroot-specs.txt
+++ b/ci/buildroot/buildroot-specs.txt
@@ -1,3 +1,3 @@
 # for projects which have their canonical spec files upstream, use those instead
 # since they're more up to date
-https://raw.githubusercontent.com/coreos/rpm-ostree/main/packaging/rpm-ostree.spec.in
+https://raw.githubusercontent.com/coreos/rpm-ostree/main/packaging/rpm-ostree.spec

From 6d7dd3756218ce1ef2d4f228e994c60a46482b46 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Thu, 16 May 2024 10:44:14 -0400
Subject: [PATCH 2145/2157] tests/kdump: bump timeout for kdump.service

Saw a CI run timeout because `kdump.service` took 65s to build its
initramfs but we only wait 60s. Let's just bump this to have a larger
margin of error.
---
 tests/kola/data/commonlib.sh   | 5 +++--
 tests/kola/kdump/crash/test.sh | 4 +++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/tests/kola/data/commonlib.sh b/tests/kola/data/commonlib.sh
index 12bd07a0b5..b3a4db28d4 100644
--- a/tests/kola/data/commonlib.sh
+++ b/tests/kola/data/commonlib.sh
@@ -80,8 +80,9 @@ cmdline_arg() {
 
 # wait for ~60s when in activating status
 is_service_active() {
-    local service="$1"
-    for _x in {0..60}; do
+    local service="$1"; shift
+    local timeout="${1:-60}"; shift
+    for _x in $(seq "${timeout}"); do
         [ "$(systemctl is-active "${service}")" != "activating" ] && break
         sleep 1
     done
diff --git a/tests/kola/kdump/crash/test.sh b/tests/kola/kdump/crash/test.sh
index 4989cc037d..1fa0978712 100755
--- a/tests/kola/kdump/crash/test.sh
+++ b/tests/kola/kdump/crash/test.sh
@@ -19,7 +19,9 @@ set -xeuo pipefail
 
 case "${AUTOPKGTEST_REBOOT_MARK:-}" in
   "")
-      if ! is_service_active kdump.service; then
+      # use 120s for this since kdump can take a while to build its initramfs,
+      # especially if the system is loaded
+      if ! is_service_active kdump.service 120; then
           fatal "kdump.service failed to start"
       fi
       # Verify that the crashkernel reserved memory is large enough

From 9e9f1f0aea489a8aa4a61c8e1908a773d350a0b7 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 16 May 2024 23:23:13 +0000
Subject: [PATCH 2146/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1154/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 30 +++++++++++++++---------------
 manifest-lock.ppc64le.json | 30 +++++++++++++++---------------
 manifest-lock.s390x.json   | 30 +++++++++++++++---------------
 manifest-lock.x86_64.json  | 32 ++++++++++++++++----------------
 4 files changed, 61 insertions(+), 61 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index c04646556c..0d58cb8f61 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -73,13 +73,13 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -403,7 +403,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20240201-2.git9f501f3.fc40.noarch",
+      "evra": "20240510-1.gitd287a42.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -907,7 +907,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1711,13 +1711,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1801,7 +1801,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1897,7 +1897,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1909,7 +1909,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2125,7 +2125,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2431,7 +2431,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-14T00:00:00Z",
+    "generated": "2024-05-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T02:49:35Z"
+        "generated": "2024-05-14T23:47:03Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-14T01:20:45Z"
+        "generated": "2024-05-16T01:43:14Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 2b37012dc5..47005c9ec4 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -73,13 +73,13 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -403,7 +403,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20240201-2.git9f501f3.fc40.noarch",
+      "evra": "20240510-1.gitd287a42.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -883,7 +883,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1699,13 +1699,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1783,7 +1783,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1879,7 +1879,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1891,7 +1891,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2125,7 +2125,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2425,7 +2425,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-14T00:00:00Z",
+    "generated": "2024-05-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T02:47:55Z"
+        "generated": "2024-05-14T23:45:15Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-14T01:21:02Z"
+        "generated": "2024-05-16T01:43:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index b04894c2ad..627f7dcd9d 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -73,13 +73,13 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -175,7 +175,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -397,7 +397,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20240201-2.git9f501f3.fc40.noarch",
+      "evra": "20240510-1.gitd287a42.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -829,7 +829,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1627,13 +1627,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1711,7 +1711,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1801,7 +1801,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1813,7 +1813,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2023,7 +2023,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2323,7 +2323,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-14T00:00:00Z",
+    "generated": "2024-05-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T02:47:27Z"
+        "generated": "2024-05-14T23:44:47Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-14T01:21:19Z"
+        "generated": "2024-05-16T01:43:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 5ea13e35e1..cfe820fd30 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -73,19 +73,19 @@
       }
     },
     "amd-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "amd-ucode-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "atheros-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -181,7 +181,7 @@
       }
     },
     "brcmfmac-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -409,7 +409,7 @@
       }
     },
     "crypto-policies": {
-      "evra": "20240201-2.git9f501f3.fc40.noarch",
+      "evra": "20240510-1.gitd287a42.fc40.noarch",
       "metadata": {
         "sourcerpm": "crypto-policies"
       }
@@ -925,7 +925,7 @@
       }
     },
     "intel-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1729,13 +1729,13 @@
       }
     },
     "linux-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
     },
     "linux-firmware-whence": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1825,7 +1825,7 @@
       }
     },
     "mt7xxx-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1921,7 +1921,7 @@
       }
     },
     "nvidia-gpu-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -1933,7 +1933,7 @@
       }
     },
     "nxpwireless-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2143,7 +2143,7 @@
       }
     },
     "realtek-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2449,7 +2449,7 @@
       }
     },
     "tiwilink-firmware": {
-      "evra": "20240410-1.fc40.noarch",
+      "evra": "20240513-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "linux-firmware"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-14T00:00:00Z",
+    "generated": "2024-05-16T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T02:49:29Z"
+        "generated": "2024-05-14T23:47:01Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-14T01:21:36Z"
+        "generated": "2024-05-16T01:43:28Z"
       }
     }
   }

From 8ab22d43e58c333943cf045b079c9211a262f5fd Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Fri, 17 May 2024 09:47:37 -0400
Subject: [PATCH 2147/2157] Revert "tests/kola: use toolbox container image for
 selinux.podman-tmpfs-context"

This reverts commit 5c9ec57af9191a48b6bc802bbf1993b4206cf73f.

Looks like util-linux-core is back in the the fedora:40 image now.

See also: https://pagure.io/fedora-kiwi-descriptions/pull-request/45
See also: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/VDZA546GESX7JP5ZSS6KEHOYFG22V3R7/
---
 tests/kola/selinux/podman-tmpfs-context | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/kola/selinux/podman-tmpfs-context b/tests/kola/selinux/podman-tmpfs-context
index 52ce4d44da..d87e1c3f77 100755
--- a/tests/kola/selinux/podman-tmpfs-context
+++ b/tests/kola/selinux/podman-tmpfs-context
@@ -15,7 +15,7 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-context=$(podman run --rm --privileged quay.io/fedora/fedora-toolbox:40 \
+context=$(podman run --rm --privileged quay.io/fedora/fedora:40 \
             bash -c "mount -t tmpfs tmpfs /mnt/ && stat --format '%C' /mnt/")
 if [ "$context" != "system_u:object_r:container_file_t:s0" ]; then
     fatal "SELinux context for files on a tmpfs inside a container is wrong"

From f58a8e5be3d671708f3e42b17dc1c115aaabf43c Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Fri, 17 May 2024 23:21:47 +0000
Subject: [PATCH 2148/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1155/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 10 +++++-----
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 0d58cb8f61..ae92ca4aa1 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -781,7 +781,7 @@
       }
     },
     "git-core": {
-      "evra": "2.45.0-1.fc40.aarch64",
+      "evra": "2.45.1-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2053,7 +2053,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.2-1.fc40.aarch64",
+      "evra": "5:5.0.3-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-16T00:00:00Z",
+    "generated": "2024-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T23:47:03Z"
+        "generated": "2024-05-16T23:31:32Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-16T01:43:14Z"
+        "generated": "2024-05-17T01:03:39Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 47005c9ec4..5e78fd3f92 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -757,7 +757,7 @@
       }
     },
     "git-core": {
-      "evra": "2.45.0-1.fc40.ppc64le",
+      "evra": "2.45.1-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2041,7 +2041,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.2-1.fc40.ppc64le",
+      "evra": "5:5.0.3-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-16T00:00:00Z",
+    "generated": "2024-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T23:45:15Z"
+        "generated": "2024-05-16T23:29:58Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-16T01:43:19Z"
+        "generated": "2024-05-17T01:03:44Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 627f7dcd9d..38b5e97da4 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -733,7 +733,7 @@
       }
     },
     "git-core": {
-      "evra": "2.45.0-1.fc40.s390x",
+      "evra": "2.45.1-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -1951,7 +1951,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.2-1.fc40.s390x",
+      "evra": "5:5.0.3-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-16T00:00:00Z",
+    "generated": "2024-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T23:44:47Z"
+        "generated": "2024-05-16T23:29:34Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-16T01:43:24Z"
+        "generated": "2024-05-17T01:03:49Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index cfe820fd30..21949a816c 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -787,7 +787,7 @@
       }
     },
     "git-core": {
-      "evra": "2.45.0-1.fc40.x86_64",
+      "evra": "2.45.1-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "git"
       }
@@ -2077,7 +2077,7 @@
       }
     },
     "podman": {
-      "evra": "5:5.0.2-1.fc40.x86_64",
+      "evra": "5:5.0.3-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "podman"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-16T00:00:00Z",
+    "generated": "2024-05-17T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-14T23:47:01Z"
+        "generated": "2024-05-16T23:31:25Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-16T01:43:28Z"
+        "generated": "2024-05-17T01:03:53Z"
       }
     }
   }

From 539b5aa75e0afde023475dc668fc26976a835979 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 18 May 2024 23:48:14 +0000
Subject: [PATCH 2149/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1156/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 12 ++++++------
 manifest-lock.ppc64le.json | 10 +++++-----
 manifest-lock.s390x.json   | 10 +++++-----
 manifest-lock.x86_64.json  | 12 ++++++------
 4 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ae92ca4aa1..fbbc9956b3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -31,7 +31,7 @@
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.10.0.8-1.fc40.noarch",
+      "evra": "2.10.0.8-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
@@ -391,13 +391,13 @@
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc40.aarch64",
+      "evra": "1.15-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.4-1.fc40.aarch64",
+      "evra": "1.15-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-17T00:00:00Z",
+    "generated": "2024-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-16T23:31:32Z"
+        "generated": "2024-05-17T23:30:49Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-17T01:03:39Z"
+        "generated": "2024-05-18T01:08:23Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5e78fd3f92..055288f7ab 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -31,7 +31,7 @@
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.10.0.8-1.fc40.noarch",
+      "evra": "2.10.0.8-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
@@ -397,7 +397,7 @@
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc40.ppc64le",
+      "evra": "1.15-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-17T00:00:00Z",
+    "generated": "2024-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-16T23:29:58Z"
+        "generated": "2024-05-17T23:28:59Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-17T01:03:44Z"
+        "generated": "2024-05-18T01:08:28Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 38b5e97da4..a55994c2d4 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -31,7 +31,7 @@
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.10.0.8-1.fc40.noarch",
+      "evra": "2.10.0.8-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
@@ -391,7 +391,7 @@
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc40.s390x",
+      "evra": "1.15-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-17T00:00:00Z",
+    "generated": "2024-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-16T23:29:34Z"
+        "generated": "2024-05-17T23:28:18Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-17T01:03:49Z"
+        "generated": "2024-05-18T01:08:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 21949a816c..f9f020fc31 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -31,7 +31,7 @@
       }
     },
     "WALinuxAgent-udev": {
-      "evra": "2.10.0.8-1.fc40.noarch",
+      "evra": "2.10.0.8-2.fc40.noarch",
       "metadata": {
         "sourcerpm": "WALinuxAgent"
       }
@@ -397,13 +397,13 @@
       }
     },
     "crun": {
-      "evra": "1.14.4-1.fc40.x86_64",
+      "evra": "1.15-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
     },
     "crun-wasm": {
-      "evra": "1.14.4-1.fc40.x86_64",
+      "evra": "1.15-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "crun"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-17T00:00:00Z",
+    "generated": "2024-05-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-16T23:31:25Z"
+        "generated": "2024-05-17T23:29:49Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-17T01:03:53Z"
+        "generated": "2024-05-18T01:08:37Z"
       }
     }
   }

From e13ff7d3a6f743f2132153b8f078cbb95ccc8d62 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 19 May 2024 23:29:47 +0000
Subject: [PATCH 2150/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1157/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 20 ++++++++++----------
 manifest-lock.ppc64le.json | 20 ++++++++++----------
 manifest-lock.s390x.json   | 20 ++++++++++----------
 manifest-lock.x86_64.json  | 20 ++++++++++----------
 4 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index fbbc9956b3..4325643bbf 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -523,19 +523,19 @@
       }
     },
     "dracut": {
-      "evra": "060-1.fc40.aarch64",
+      "evra": "101-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "060-1.fc40.aarch64",
+      "evra": "101-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "060-1.fc40.aarch64",
+      "evra": "101-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "dracut"
       }
@@ -793,25 +793,25 @@
       }
     },
     "glibc": {
-      "evra": "2.39-8.fc40.aarch64",
+      "evra": "2.39-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.39-8.fc40.aarch64",
+      "evra": "2.39-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.39-8.fc40.aarch64",
+      "evra": "2.39-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.39-8.fc40.aarch64",
+      "evra": "2.39-13.fc40.aarch64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-18T00:00:00Z",
+    "generated": "2024-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-17T23:30:49Z"
+        "generated": "2024-05-18T23:56:37Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-18T01:08:23Z"
+        "generated": "2024-05-19T01:25:41Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 055288f7ab..26aa62740f 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -523,19 +523,19 @@
       }
     },
     "dracut": {
-      "evra": "060-1.fc40.ppc64le",
+      "evra": "101-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "060-1.fc40.ppc64le",
+      "evra": "101-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "060-1.fc40.ppc64le",
+      "evra": "101-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "dracut"
       }
@@ -769,25 +769,25 @@
       }
     },
     "glibc": {
-      "evra": "2.39-8.fc40.ppc64le",
+      "evra": "2.39-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.39-8.fc40.ppc64le",
+      "evra": "2.39-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.39-8.fc40.ppc64le",
+      "evra": "2.39-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.39-8.fc40.ppc64le",
+      "evra": "2.39-13.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-18T00:00:00Z",
+    "generated": "2024-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-17T23:28:59Z"
+        "generated": "2024-05-18T23:54:59Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-18T01:08:28Z"
+        "generated": "2024-05-19T01:25:46Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index a55994c2d4..17c62abece 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -517,19 +517,19 @@
       }
     },
     "dracut": {
-      "evra": "060-1.fc40.s390x",
+      "evra": "101-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "060-1.fc40.s390x",
+      "evra": "101-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "060-1.fc40.s390x",
+      "evra": "101-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "dracut"
       }
@@ -745,25 +745,25 @@
       }
     },
     "glibc": {
-      "evra": "2.39-8.fc40.s390x",
+      "evra": "2.39-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.39-8.fc40.s390x",
+      "evra": "2.39-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.39-8.fc40.s390x",
+      "evra": "2.39-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.39-8.fc40.s390x",
+      "evra": "2.39-13.fc40.s390x",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-18T00:00:00Z",
+    "generated": "2024-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-17T23:28:18Z"
+        "generated": "2024-05-18T23:54:36Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-18T01:08:32Z"
+        "generated": "2024-05-19T01:25:50Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index f9f020fc31..6e72bfa115 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -529,19 +529,19 @@
       }
     },
     "dracut": {
-      "evra": "060-1.fc40.x86_64",
+      "evra": "101-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-network": {
-      "evra": "060-1.fc40.x86_64",
+      "evra": "101-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
     },
     "dracut-squash": {
-      "evra": "060-1.fc40.x86_64",
+      "evra": "101-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "dracut"
       }
@@ -799,25 +799,25 @@
       }
     },
     "glibc": {
-      "evra": "2.39-8.fc40.x86_64",
+      "evra": "2.39-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-common": {
-      "evra": "2.39-8.fc40.x86_64",
+      "evra": "2.39-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-gconv-extra": {
-      "evra": "2.39-8.fc40.x86_64",
+      "evra": "2.39-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
     },
     "glibc-minimal-langpack": {
-      "evra": "2.39-8.fc40.x86_64",
+      "evra": "2.39-13.fc40.x86_64",
       "metadata": {
         "sourcerpm": "glibc"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-18T00:00:00Z",
+    "generated": "2024-05-19T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-17T23:29:49Z"
+        "generated": "2024-05-18T23:56:43Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-18T01:08:37Z"
+        "generated": "2024-05-19T01:25:55Z"
       }
     }
   }

From 9b177f815dd675b928bc4441fcf55e34f171e168 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 May 2024 17:08:54 -0400
Subject: [PATCH 2151/2157] overlay.d/05core: tweak descriptions of unique boot
 units

- Add "CoreOS" to the beginning of coreos-unique-boot.service
- Add "Ignition" to the coreos-ignition-unique-boot.service
    - This is an attempt to distinguish it from the other
- Change `boot` to Boot since that difference wasn't significant
---
 .../35coreos-ignition/coreos-ignition-unique-boot.service       | 2 +-
 .../modules.d/35coreos-ignition/coreos-unique-boot.service      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service
index fb56661caf..81f099b6fb 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-ignition-unique-boot.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=CoreOS Ensure Unique Boot Filesystem
+Description=CoreOS Ignition Ensure Unique Boot Filesystem
 ConditionPathExists=/etc/initrd-release
 OnFailure=emergency.target
 OnFailureJobMode=isolate
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
index 85565ae9d2..e02d72e588 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-unique-boot.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=Ensure Unique `boot` Filesystem Label
+Description=CoreOS Ensure Unique Boot Filesystem Label
 ConditionPathExists=/etc/initrd-release
 DefaultDependencies=no
 Before=ignition-diskful.target

From fc674afbefe754ce6ef39e4271eff5798dd43839 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 21 May 2024 17:11:23 -0400
Subject: [PATCH 2152/2157] overlay.d/05core: assume metadata_csum_seed in
 ignition-ostree-firstboot-uuid

We always set the metadata_csum_seed option on the ext4 filesystems
now so let's remove the conditional logic from the code.
---
 .../ignition-ostree-firstboot-uuid            | 32 +------------------
 1 file changed, 1 insertion(+), 31 deletions(-)

diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 78e2fa70a0..1292b377c1 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -27,37 +27,7 @@ esac
 
 if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
   case "${TYPE}" in
-    ext4)
-          # If the filesystem supports metadata_csum_seed then the UUID is stored
-          # in the superblock and there is no need to worry with an fsck. For the
-          # boot filesystem this FS feature wasn't supported by GRUB until recently.
-          # https://lists.gnu.org/archive/html/grub-devel/2021-06/msg00031.html
-          # Once grub is updated in all systems we care about we can standardize
-          # on the metadata_csum_seed and delete the `else` code block.
-          if tune2fs -l ${target} | grep 'metadata_csum_seed'; then
-              tune2fs -U random "${target}"
-          else
-              # Run an fsck since tune2fs -U requires the FS to be clean
-              e2fsck -fy "${target}"
-              # We just ran an fsck, but there is a bug where tune2fs -U will still
-              # complain. It will still error if the last checked timestamp (just
-              # set by the e2fsck above) is older than the last mount timestamp (happens
-              # on systems with out of date or non-functioning hardware clocks).
-              # See https://github.com/coreos/fedora-coreos-tracker/issues/735#issuecomment-859605953
-              # Potentially fixed in future by: https://www.spinics.net/lists/linux-ext4/msg78012.html
-              tune2fsinfo="$(tune2fs -l ${target})"
-              lastmount=$(echo "$tune2fsinfo" | grep '^Last mount time:' | cut -d ':' -f 2,3,4)
-              lastfsck=$(echo "$tune2fsinfo" | grep '^Last checked:' | cut -d ':' -f 2,3,4)
-              lastmountsse=$(date --date="$lastmount" +%s)
-              lastfscksse=$(date --date="$lastfsck" +%s)
-              if (( lastfscksse < lastmountsse )); then
-                  echo "Detected timestamp of last fsck is older than timestamp of last mount."
-                  echo "Setting "${target}" timestamp of last fsck to same time as last mount."
-                  tune2fs -T $(date --date="$lastmount" +%Y%m%d%H%M%S) "${target}"
-              fi
-              # Finally, we can randomize the UUID
-              tune2fs -U random "${target}"
-          fi ;;
+    ext4) tune2fs -U random "${target}"    ;;
     xfs) xfs_admin -U generate "${target}" ;;
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac

From 2a3f6bb83e610474c04ab743113aa418d82475c8 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 22 May 2024 23:29:40 +0000
Subject: [PATCH 2153/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1160/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 24 ++++++++++++------------
 manifest-lock.ppc64le.json | 24 ++++++++++++------------
 manifest-lock.s390x.json   | 24 ++++++++++++------------
 manifest-lock.x86_64.json  | 24 ++++++++++++------------
 4 files changed, 48 insertions(+), 48 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 4325643bbf..ffd1dbd4ce 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -319,7 +319,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc40.noarch",
+      "evra": "2:2.231.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -733,7 +733,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.19-1.fc40.aarch64",
+      "evra": "1.9.20-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1051,25 +1051,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.9-300.fc40.aarch64",
+      "evra": "6.8.10-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.9-300.fc40.aarch64",
+      "evra": "6.8.10-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.9-300.fc40.aarch64",
+      "evra": "6.8.10-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.9-300.fc40.aarch64",
+      "evra": "6.8.10-300.fc40.aarch64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1381,7 +1381,7 @@
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-9.fc40.aarch64",
+      "evra": "2.15.0-12.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2576,16 +2576,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-19T00:00:00Z",
+    "generated": "2024-05-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-18T23:56:37Z"
+        "generated": "2024-05-19T23:38:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-19T01:25:41Z"
+        "generated": "2024-05-22T01:22:14Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 26aa62740f..86ec1863f1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -325,7 +325,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc40.noarch",
+      "evra": "2:2.231.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -709,7 +709,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.19-1.fc40.ppc64le",
+      "evra": "1.9.20-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1027,25 +1027,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.9-300.fc40.ppc64le",
+      "evra": "6.8.10-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.9-300.fc40.ppc64le",
+      "evra": "6.8.10-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.9-300.fc40.ppc64le",
+      "evra": "6.8.10-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.9-300.fc40.ppc64le",
+      "evra": "6.8.10-300.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1357,7 +1357,7 @@
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-9.fc40.ppc64le",
+      "evra": "2.15.0-12.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
@@ -2209,13 +2209,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2564,16 +2564,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-19T00:00:00Z",
+    "generated": "2024-05-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-18T23:54:59Z"
+        "generated": "2024-05-19T23:36:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-19T01:25:46Z"
+        "generated": "2024-05-22T01:22:19Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 17c62abece..9085d3b903 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -319,7 +319,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc40.noarch",
+      "evra": "2:2.231.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -703,7 +703,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.19-1.fc40.s390x",
+      "evra": "1.9.20-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -967,25 +967,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.9-300.fc40.s390x",
+      "evra": "6.8.10-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.9-300.fc40.s390x",
+      "evra": "6.8.10-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.9-300.fc40.s390x",
+      "evra": "6.8.10-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.9-300.fc40.s390x",
+      "evra": "6.8.10-300.fc40.s390x",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1297,7 +1297,7 @@
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-9.fc40.s390x",
+      "evra": "2.15.0-12.fc40.s390x",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
@@ -2113,13 +2113,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2468,16 +2468,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-19T00:00:00Z",
+    "generated": "2024-05-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-18T23:54:36Z"
+        "generated": "2024-05-19T23:35:47Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-19T01:25:50Z"
+        "generated": "2024-05-22T01:22:24Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6e72bfa115..e670ad2692 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -325,7 +325,7 @@
       }
     },
     "container-selinux": {
-      "evra": "2:2.230.0-1.fc40.noarch",
+      "evra": "2:2.231.0-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "container-selinux"
       }
@@ -739,7 +739,7 @@
       }
     },
     "fwupd": {
-      "evra": "1.9.19-1.fc40.x86_64",
+      "evra": "1.9.20-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "fwupd"
       }
@@ -1069,25 +1069,25 @@
       }
     },
     "kernel": {
-      "evra": "6.8.9-300.fc40.x86_64",
+      "evra": "6.8.10-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-core": {
-      "evra": "6.8.9-300.fc40.x86_64",
+      "evra": "6.8.10-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules": {
-      "evra": "6.8.9-300.fc40.x86_64",
+      "evra": "6.8.10-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
     },
     "kernel-modules-core": {
-      "evra": "6.8.9-300.fc40.x86_64",
+      "evra": "6.8.10-300.fc40.x86_64",
       "metadata": {
         "sourcerpm": "kernel"
       }
@@ -1399,7 +1399,7 @@
       }
     },
     "libmodulemd": {
-      "evra": "2.15.0-9.fc40.x86_64",
+      "evra": "2.15.0-12.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libmodulemd"
       }
@@ -2227,13 +2227,13 @@
       }
     },
     "selinux-policy": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
     },
     "selinux-policy-targeted": {
-      "evra": "40.18-2.fc40.noarch",
+      "evra": "40.20-1.fc40.noarch",
       "metadata": {
         "sourcerpm": "selinux-policy"
       }
@@ -2594,16 +2594,16 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-19T00:00:00Z",
+    "generated": "2024-05-22T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2024-05-18T23:56:43Z"
+        "generated": "2024-05-19T23:38:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-19T01:25:55Z"
+        "generated": "2024-05-22T01:22:28Z"
       }
     }
   }

From c552b50d98626123be3365de6c67e7743337bb21 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Thu, 23 May 2024 23:28:18 +0000
Subject: [PATCH 2154/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1161/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 6 +++---
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index ffd1dbd4ce..1256b082fe 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1687,7 +1687,7 @@
       }
     },
     "libxml2": {
-      "evra": "2.12.6-1.fc40.aarch64",
+      "evra": "2.12.7-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libxml2"
       }
@@ -2576,7 +2576,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-22T00:00:00Z",
+    "generated": "2024-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
@@ -2585,7 +2585,7 @@
         "generated": "2024-05-19T23:38:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-22T01:22:14Z"
+        "generated": "2024-05-23T01:04:02Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 86ec1863f1..c06c7bfe01 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1675,7 +1675,7 @@
       }
     },
     "libxml2": {
-      "evra": "2.12.6-1.fc40.ppc64le",
+      "evra": "2.12.7-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libxml2"
       }
@@ -2564,7 +2564,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-22T00:00:00Z",
+    "generated": "2024-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
@@ -2573,7 +2573,7 @@
         "generated": "2024-05-19T23:36:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-22T01:22:19Z"
+        "generated": "2024-05-23T01:04:07Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 9085d3b903..1c87050965 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1603,7 +1603,7 @@
       }
     },
     "libxml2": {
-      "evra": "2.12.6-1.fc40.s390x",
+      "evra": "2.12.7-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "libxml2"
       }
@@ -2468,7 +2468,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-22T00:00:00Z",
+    "generated": "2024-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
@@ -2477,7 +2477,7 @@
         "generated": "2024-05-19T23:35:47Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-22T01:22:24Z"
+        "generated": "2024-05-23T01:04:12Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index e670ad2692..623596e418 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1705,7 +1705,7 @@
       }
     },
     "libxml2": {
-      "evra": "2.12.6-1.fc40.x86_64",
+      "evra": "2.12.7-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libxml2"
       }
@@ -2594,7 +2594,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-22T00:00:00Z",
+    "generated": "2024-05-23T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
@@ -2603,7 +2603,7 @@
         "generated": "2024-05-19T23:38:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-22T01:22:28Z"
+        "generated": "2024-05-23T01:04:16Z"
       }
     }
   }

From 7ae0d52fc61bb81299917e340c94d1f2ce42d3ae Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sat, 25 May 2024 23:38:07 +0000
Subject: [PATCH 2155/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1163/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 8 ++++----
 manifest-lock.ppc64le.json | 6 +++---
 manifest-lock.s390x.json   | 6 +++---
 manifest-lock.x86_64.json  | 8 ++++----
 4 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 1256b082fe..7bdc0bbd5e 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -1231,7 +1231,7 @@
       }
     },
     "libedit": {
-      "evra": "3.1-50.20230828cvs.fc40.aarch64",
+      "evra": "3.1-51.20240517cvs.fc40.aarch64",
       "metadata": {
         "sourcerpm": "libedit"
       }
@@ -2293,7 +2293,7 @@
       }
     },
     "spdlog": {
-      "evra": "1.12.0-3.fc40.aarch64",
+      "evra": "1.12.0-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "spdlog"
       }
@@ -2576,7 +2576,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-23T00:00:00Z",
+    "generated": "2024-05-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
@@ -2585,7 +2585,7 @@
         "generated": "2024-05-19T23:38:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-23T01:04:02Z"
+        "generated": "2024-05-25T00:59:12Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index c06c7bfe01..357dd99d3b 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -1207,7 +1207,7 @@
       }
     },
     "libedit": {
-      "evra": "3.1-50.20230828cvs.fc40.ppc64le",
+      "evra": "3.1-51.20240517cvs.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "libedit"
       }
@@ -2564,7 +2564,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-23T00:00:00Z",
+    "generated": "2024-05-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
@@ -2573,7 +2573,7 @@
         "generated": "2024-05-19T23:36:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-23T01:04:07Z"
+        "generated": "2024-05-25T00:59:17Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 1c87050965..eaf4171718 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -1147,7 +1147,7 @@
       }
     },
     "libedit": {
-      "evra": "3.1-50.20230828cvs.fc40.s390x",
+      "evra": "3.1-51.20240517cvs.fc40.s390x",
       "metadata": {
         "sourcerpm": "libedit"
       }
@@ -2468,7 +2468,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-23T00:00:00Z",
+    "generated": "2024-05-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
@@ -2477,7 +2477,7 @@
         "generated": "2024-05-19T23:35:47Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-23T01:04:12Z"
+        "generated": "2024-05-25T00:59:23Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 623596e418..9979dd71e6 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -1249,7 +1249,7 @@
       }
     },
     "libedit": {
-      "evra": "3.1-50.20230828cvs.fc40.x86_64",
+      "evra": "3.1-51.20240517cvs.fc40.x86_64",
       "metadata": {
         "sourcerpm": "libedit"
       }
@@ -2311,7 +2311,7 @@
       }
     },
     "spdlog": {
-      "evra": "1.12.0-3.fc40.x86_64",
+      "evra": "1.12.0-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "spdlog"
       }
@@ -2594,7 +2594,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-23T00:00:00Z",
+    "generated": "2024-05-25T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
@@ -2603,7 +2603,7 @@
         "generated": "2024-05-19T23:38:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-23T01:04:16Z"
+        "generated": "2024-05-25T00:59:27Z"
       }
     }
   }

From 39cfd4b0e4362d84cc03755eaaf2e2c069d97288 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Sun, 26 May 2024 23:24:37 +0000
Subject: [PATCH 2156/2157] lockfiles: bump to latest

Job URL: https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/bump-lockfile/1164/

Job definition: https://github.com/coreos/fedora-coreos-pipeline/blob/main/jobs/bump-lockfile.Jenkinsfile
---
 manifest-lock.aarch64.json | 26 +++++++++++++-------------
 manifest-lock.ppc64le.json | 26 +++++++++++++-------------
 manifest-lock.s390x.json   | 26 +++++++++++++-------------
 manifest-lock.x86_64.json  | 26 +++++++++++++-------------
 4 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 7bdc0bbd5e..6bc6f0750b 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -55,13 +55,13 @@
       }
     },
     "afterburn": {
-      "evra": "5.5.1-2.fc40.aarch64",
+      "evra": "5.5.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-2.fc40.aarch64",
+      "evra": "5.5.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
@@ -343,13 +343,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc40.aarch64",
+      "evra": "0.21.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc40.aarch64",
+      "evra": "0.21.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -1261,7 +1261,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.1.1-1.fc40.aarch64",
+      "evra": "14.1.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1591,7 +1591,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.1.1-1.fc40.aarch64",
+      "evra": "14.1.1-4.fc40.aarch64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-2.fc40.aarch64",
+      "evra": "1.6.0-3.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2251,7 +2251,7 @@
       }
     },
     "shared-mime-info": {
-      "evra": "2.3-4.fc40.aarch64",
+      "evra": "2.3-5.fc40.aarch64",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2311,7 +2311,7 @@
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-6.fc40.aarch64",
+      "evra": "0.1.4-8.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
@@ -2371,7 +2371,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.2-1.fc40.aarch64",
+      "evra": "1.19.3-1.fc40.aarch64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2563,7 +2563,7 @@
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-9.fc40.aarch64",
+      "evra": "1.1.2-11.fc40.aarch64",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
@@ -2576,7 +2576,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-25T00:00:00Z",
+    "generated": "2024-05-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:04Z"
@@ -2585,7 +2585,7 @@
         "generated": "2024-05-19T23:38:19Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-25T00:59:12Z"
+        "generated": "2024-05-26T01:14:21Z"
       }
     }
   }
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 357dd99d3b..9e9c8f5744 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -55,13 +55,13 @@
       }
     },
     "afterburn": {
-      "evra": "5.5.1-2.fc40.ppc64le",
+      "evra": "5.5.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-2.fc40.ppc64le",
+      "evra": "5.5.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
@@ -349,13 +349,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc40.ppc64le",
+      "evra": "0.21.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc40.ppc64le",
+      "evra": "0.21.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -1237,7 +1237,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.1.1-1.fc40.ppc64le",
+      "evra": "14.1.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1579,7 +1579,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.1.1-1.fc40.ppc64le",
+      "evra": "14.1.1-4.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2167,7 +2167,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-2.fc40.ppc64le",
+      "evra": "1.6.0-3.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2257,7 +2257,7 @@
       }
     },
     "shared-mime-info": {
-      "evra": "2.3-4.fc40.ppc64le",
+      "evra": "2.3-5.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2305,7 +2305,7 @@
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-6.fc40.ppc64le",
+      "evra": "0.1.4-8.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
@@ -2365,7 +2365,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.2-1.fc40.ppc64le",
+      "evra": "1.19.3-1.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2551,7 +2551,7 @@
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-9.fc40.ppc64le",
+      "evra": "1.1.2-11.fc40.ppc64le",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
@@ -2564,7 +2564,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-25T00:00:00Z",
+    "generated": "2024-05-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:03Z"
@@ -2573,7 +2573,7 @@
         "generated": "2024-05-19T23:36:17Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-25T00:59:17Z"
+        "generated": "2024-05-26T01:14:27Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index eaf4171718..54e7c6e15e 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -55,13 +55,13 @@
       }
     },
     "afterburn": {
-      "evra": "5.5.1-2.fc40.s390x",
+      "evra": "5.5.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-2.fc40.s390x",
+      "evra": "5.5.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
@@ -343,13 +343,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc40.s390x",
+      "evra": "0.21.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc40.s390x",
+      "evra": "0.21.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -1177,7 +1177,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.1.1-1.fc40.s390x",
+      "evra": "14.1.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1507,7 +1507,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.1.1-1.fc40.s390x",
+      "evra": "14.1.1-4.fc40.s390x",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2065,7 +2065,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-2.fc40.s390x",
+      "evra": "1.6.0-3.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2155,7 +2155,7 @@
       }
     },
     "shared-mime-info": {
-      "evra": "2.3-4.fc40.s390x",
+      "evra": "2.3-5.fc40.s390x",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2203,7 +2203,7 @@
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-6.fc40.s390x",
+      "evra": "0.1.4-8.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
@@ -2263,7 +2263,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.2-1.fc40.s390x",
+      "evra": "1.19.3-1.fc40.s390x",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2455,7 +2455,7 @@
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-9.fc40.s390x",
+      "evra": "1.1.2-11.fc40.s390x",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
@@ -2468,7 +2468,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-25T00:00:00Z",
+    "generated": "2024-05-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:01Z"
@@ -2477,7 +2477,7 @@
         "generated": "2024-05-19T23:35:47Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-25T00:59:23Z"
+        "generated": "2024-05-26T01:14:32Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 9979dd71e6..364e987eca 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -55,13 +55,13 @@
       }
     },
     "afterburn": {
-      "evra": "5.5.1-2.fc40.x86_64",
+      "evra": "5.5.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
     },
     "afterburn-dracut": {
-      "evra": "5.5.1-2.fc40.x86_64",
+      "evra": "5.5.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-afterburn"
       }
@@ -349,13 +349,13 @@
       }
     },
     "coreos-installer": {
-      "evra": "0.21.0-1.fc40.x86_64",
+      "evra": "0.21.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.21.0-1.fc40.x86_64",
+      "evra": "0.21.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-coreos-installer"
       }
@@ -1279,7 +1279,7 @@
       }
     },
     "libgcc": {
-      "evra": "14.1.1-1.fc40.x86_64",
+      "evra": "14.1.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -1609,7 +1609,7 @@
       }
     },
     "libstdc++": {
-      "evra": "14.1.1-1.fc40.x86_64",
+      "evra": "14.1.1-4.fc40.x86_64",
       "metadata": {
         "sourcerpm": "gcc"
       }
@@ -2185,7 +2185,7 @@
       }
     },
     "rpm-sequoia": {
-      "evra": "1.6.0-2.fc40.x86_64",
+      "evra": "1.6.0-3.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-rpm-sequoia"
       }
@@ -2269,7 +2269,7 @@
       }
     },
     "shared-mime-info": {
-      "evra": "2.3-4.fc40.x86_64",
+      "evra": "2.3-5.fc40.x86_64",
       "metadata": {
         "sourcerpm": "shared-mime-info"
       }
@@ -2329,7 +2329,7 @@
       }
     },
     "ssh-key-dir": {
-      "evra": "0.1.4-6.fc40.x86_64",
+      "evra": "0.1.4-8.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-ssh-key-dir"
       }
@@ -2389,7 +2389,7 @@
       }
     },
     "stalld": {
-      "evra": "1.19.2-1.fc40.x86_64",
+      "evra": "1.19.3-1.fc40.x86_64",
       "metadata": {
         "sourcerpm": "stalld"
       }
@@ -2581,7 +2581,7 @@
       }
     },
     "zram-generator": {
-      "evra": "1.1.2-9.fc40.x86_64",
+      "evra": "1.1.2-11.fc40.x86_64",
       "metadata": {
         "sourcerpm": "rust-zram-generator"
       }
@@ -2594,7 +2594,7 @@
     }
   },
   "metadata": {
-    "generated": "2024-05-25T00:00:00Z",
+    "generated": "2024-05-26T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2024-04-14T18:51:11Z"
@@ -2603,7 +2603,7 @@
         "generated": "2024-05-19T23:38:13Z"
       },
       "fedora-updates": {
-        "generated": "2024-05-25T00:59:27Z"
+        "generated": "2024-05-26T01:14:38Z"
       }
     }
   }

From 60d4d0cb6641e1ca3824aa9a803d40391c3103bb Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 15 Feb 2024 13:21:46 -0500
Subject: [PATCH 2157/2157] Enable composefs for 41+

We really want to aim to eventually enable this by default, let's
test things out in rawhide.

A thing that this is known to break is the "chattr -i" hack
for new toplevel dirs (xref https://github.com/coreos/rpm-ostree/issues/337 )

Basically if you want that, you either need to make a derived image,
or enable transient root.
---
 manifests/composefs.yaml                               | 3 +++
 manifests/fedora-coreos.yaml                           | 2 ++
 overlay.d/08composefs/README.md                        | 2 ++
 overlay.d/08composefs/usr/lib/ostree/prepare-root.conf | 2 ++
 4 files changed, 9 insertions(+)
 create mode 100644 manifests/composefs.yaml
 create mode 100644 overlay.d/08composefs/README.md
 create mode 100644 overlay.d/08composefs/usr/lib/ostree/prepare-root.conf

diff --git a/manifests/composefs.yaml b/manifests/composefs.yaml
new file mode 100644
index 0000000000..d575c1349b
--- /dev/null
+++ b/manifests/composefs.yaml
@@ -0,0 +1,3 @@
+# Enable composefs by default.
+ostree-layers:
+  - overlay/08composefs
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 0be3297d23..ab36825bfe 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -46,6 +46,8 @@ conditional-include:
   # Wifi firmwares will be dropped in F41
   - if: releasever < 41
     include: wifi-firmwares.yaml
+  - if: stream == "rawhide"
+    include: composefs.yaml
 
 ostree-layers:
   - overlay/15fcos
diff --git a/overlay.d/08composefs/README.md b/overlay.d/08composefs/README.md
new file mode 100644
index 0000000000..487f8be8f4
--- /dev/null
+++ b/overlay.d/08composefs/README.md
@@ -0,0 +1,2 @@
+Enable composefs by default; more in https://ostreedev.github.io/ostree/composefs/
+For now rawhide only.
diff --git a/overlay.d/08composefs/usr/lib/ostree/prepare-root.conf b/overlay.d/08composefs/usr/lib/ostree/prepare-root.conf
new file mode 100644
index 0000000000..2faae22bc9
--- /dev/null
+++ b/overlay.d/08composefs/usr/lib/ostree/prepare-root.conf
@@ -0,0 +1,2 @@
+[composefs]
+enabled = true